last executing test programs: 5.620525945s ago: executing program 2 (id=588): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x200008, @loopback, 0x39}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000003c0700802c00018014000300000000000000000000000000000000001400040000000000000000000000ffffac1e00010c00028005000100000000003c0002802c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000"], 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000020101010000000005000000000000023b8a86baed895df4ea0d63d2aa65788d953d3cf24f0c1f1ab527932d5d86265eb0c72e1b934f00559a6390c2d7e65204521d632e6937363c15f77e5c828cd96783fdc21aac39a4ae648cb26000931c9127895d2c"], 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt(r8, 0xeb, 0x10, &(0x7f0000000340)=""/45, &(0x7f0000000400)=0x2d) 4.724302783s ago: executing program 2 (id=591): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x3b, 0x0, &(0x7f0000000240), 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2(0x0, 0x0) syz_open_dev$loop(&(0x7f0000000300), 0x3, 0x101000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x15, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000500000000000000205a0000b7080000000000007b8af8ff00000000b7080000110000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000850000005200000085200000010000007f690c0001000000bd8a1000040000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x465b, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @sched_cls=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, &(0x7f0000000680)=[r3, r3, r3, r3, r3, r3, r3, r3, r3], 0x0, 0x10, 0x3, @void, @value}, 0x94) r5 = getpid() sched_setaffinity(r5, 0x8, &(0x7f0000000280)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffff1e00ff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc002, 0x0, 0x6, 0x5) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',afid=0x0000000000000001,debug=0x']) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) select(0x40, &(0x7f0000000000)={0x9, 0x1711, 0x8, 0x81, 0x0, 0x2, 0x5, 0x690}, &(0x7f0000000140)={0x3, 0x4, 0x4, 0x7, 0x100000000, 0x0, 0x7, 0x9}, &(0x7f0000000180)={0x2, 0x7, 0x9, 0x1000, 0x380, 0x5, 0x2, 0xa}, &(0x7f0000000200)) 4.320132599s ago: executing program 1 (id=598): pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x200000, 0x200000) 4.27026639s ago: executing program 1 (id=599): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x200008, @loopback, 0x39}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000003c0700802c00018014000300000000000000000000000000000000001400040000000000000000000000ffffac1e00010c00028005000100000000003c0002802c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000"], 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000020101010000000005000000000000023b8a86baed895df4ea0d63d2aa65788d953d3cf24f0c1f1ab527932d5d86265eb0c72e1b934f00559a6390c2d7e65204521d632e6937363c15f77e5c828cd96783fdc21aac39a4ae648cb26000931c9127895d2c"], 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt(r8, 0xeb, 0x10, &(0x7f0000000340)=""/45, &(0x7f0000000400)=0x2d) 3.765320103s ago: executing program 2 (id=601): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00'}, 0x10) openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x752f) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x48, r3, 0x1, 0x70bd25, 0x5, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaac}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'tunl0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f00000000c0)=@mgmt_frame=@deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x1}, @broadcast, @device_b, @random="168f7aecbebb", {0x2, 0x2}}, 0x42, @val={0x8c, 0x18, {0x418, "4bc3c17f7919", @long="2d5fff5d8429eee71ce7631eaefb04de"}}}, 0x34) r5 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="00300000c048000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="14000b0000400000000000000000000000000000140002"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) 3.348170185s ago: executing program 1 (id=606): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x200008, @loopback, 0x39}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000003c0700802c00018014000300000000000000000000000000000000001400040000000000000000000000ffffac1e00010c00028005000100000000003c0002802c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000"], 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000020101010000000005000000000000023b8a86baed895df4ea0d63d2aa65788d953d3cf24f0c1f1ab527932d5d86265eb0c72e1b934f00559a6390c2d7e65204521d632e6937363c15f77e5c828cd96783fdc21aac39a4ae648cb26000931c9127895d2c"], 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt(r8, 0xeb, 0x10, &(0x7f0000000340)=""/45, &(0x7f0000000400)=0x2d) 2.819049406s ago: executing program 0 (id=610): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x2d9f) syz_usb_connect(0x5, 0x1a3, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xcb, 0xa4, 0x1c, 0x10, 0x152d, 0x583, 0x29b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x191, 0x2, 0x6, 0xf, 0x0, 0x40, [{{0x9, 0x4, 0x2, 0x9, 0x3, 0x5, 0x7f, 0xfd, 0x7d, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, '2yM'}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x3, 0x7ff, 0x1c}, [@acm={0x4, 0x24, 0x2, 0x4}, @mdlm={0x15, 0x24, 0x12, 0xe}]}, @hid_hid={0x9, 0x21, 0x8000, 0x4, 0x1, {0x22, 0xbba}}], [{{0x9, 0x5, 0x5, 0x8, 0x200, 0x0, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xfd, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x1}]}}, {{0x9, 0x5, 0x4, 0xc, 0x10, 0xfe, 0x5, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x7ff}]}}, {{0x9, 0x5, 0x8, 0x0, 0x240, 0x6, 0x1, 0x6}}]}}, {{0x9, 0x4, 0xe7, 0x1, 0x6, 0x54, 0xe, 0xa8, 0x9, [], [{{0x9, 0x5, 0x2, 0x0, 0x200, 0x5, 0x5, 0xd4}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0x10, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2}, @generic={0x89, 0xa, "61cf65fc1a397086e61177048ace85972dcc9bbd7860a92e9743bbae90e8a17cbf74754d423207a3cc5e8323db6be569481361585db15c99fed9599ed64ec233828176f95f6090fdc17982ce6a904d5cddee245f4958335ed7881333520f7a7c43439a8b02349478b88b89da47350356e50ba1b02445429b7024e961ba007df1b653aa4b498c68"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x4, 0xba, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6a, 0x6}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0xe0, 0xfc, 0x7f}}, {{0x9, 0x5, 0xd, 0x1, 0x20, 0xf, 0xfb, 0x2, [@generic={0x36, 0x26, "badcdcc5e81f8565c3a3fe140be58c40d9f95004273ce58733a9a7161cfcb584249437dabad8804251e0ce8e7e5dd0da941b8b3c"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x7}]}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x6, 0x21}}]}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0xa, 0x0, 0x40, 0x20, 0x81}, 0x14e, &(0x7f0000000200)={0x5, 0xf, 0x14e, 0x3, [@generic={0xb4, 0x10, 0x4, "fab3c4cd672966e06facacd2d998c5adcb5d1677d50090a455d5765f58912528d93bf327b9be85e4a359963dba92ef088c41609783724d0e9ba5d08ff52abc485dbe7672ebbed4f235713aa736626c4ef9ebc189291ad2b915fe6a7765c99bf9381d304a3ee3f0efb350b8ffbe8f416bbbf6f968d4a0e09614521be4ea4da3160a9471e84f063f5a6beb10ca1bfa919c3ac3534a6274bf1e0ddef39450666b934bf29a86305c0f53028d24bbe27e163511"}, @generic={0x75, 0x10, 0x4, "293e1b1cc8e5834921794dfbcb818ff04fa9b7e460df3736bab1978428762a2840e0ebe26b34d2d04d54056a42e66167ebdf56ba73d3378120273701f15bdb391383fe95af9fe25f048a31dbda3ad5152d0b9cab93fee1a285b6f862dfe2f26949f4e1d62f7ed14f7b815bb97070b58eb78f"}, @ssp_cap={0x20, 0x10, 0xa, 0xff, 0x5, 0x4, 0x0, 0x5, [0xf, 0x21, 0xc0, 0xcf, 0xc000]}]}, 0x3, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xc0a}}, {0x3f, &(0x7f00000003c0)=@string={0x3f, 0x3, "5fe526c0222d70fdf6e99d816828630ce9bc4ed34d8201d4ef1abf19b9b6fea73c8d6ce79cb7fa40869797352f2b6d3dc46dd9e40a35af0f62e6115da1"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x480a}}]}) r1 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000480), 0xa08200, 0x0) write$tcp_congestion(r1, &(0x7f00000004c0)='highspeed\x00', 0xa) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000500)=0x8, 0x4) write$cgroup_pid(r1, &(0x7f0000000540), 0x12) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000580)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f00000005c0)={0x48, 0xb, r2, 0x0, r3}) syz_usb_connect$cdc_ncm(0x0, 0xa1, &(0x7f0000000640)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f, 0x2, 0x1, 0x0, 0x20, 0x6d, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "a910ee50"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x9, 0xb50, 0xf9}, {0x6, 0x24, 0x1a, 0x2, 0x20}, [@country_functional={0x10, 0x24, 0x7, 0x89, 0x1, [0x5, 0x0, 0x91e7, 0x6, 0x7fff]}, @mbim={0xc, 0x24, 0x1b, 0x7fff, 0xffff, 0xa, 0xf, 0xd, 0xf}, @dmm={0x7, 0x24, 0x14, 0x1, 0x9}, @mbim={0xc, 0x24, 0x1b, 0xfff2, 0xa79d, 0xbe, 0x1, 0x1, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x16347b11ef81b84f, 0xf, 0x5, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x44, 0x6, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x20, 0x7f, 0x30}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x250, 0xa0, 0xe, 0x6, 0x10, 0x2}, 0x19, &(0x7f0000000740)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xf, "6f066a05cf17602c04c6f9a1f48b60ac"}]}, 0x1, [{0x2a, &(0x7f0000000780)=@string={0x2a, 0x3, "224a6a6050972eaaa3209b663e2757b195b7a1ece926d8bfa21c27c2da2039c4ccb8e2f701ef8574"}}]}) syz_usb_connect$uac1(0x6, 0xee, &(0x7f0000000800)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0x1, 0xfe, 0x20, 0xfd, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x4}, [@mixer_unit={0x7, 0x24, 0x4, 0x2, 0x8, "3af2"}, @extension_unit={0xa, 0x24, 0x8, 0x5, 0x9, 0x3, "2381b3"}, @extension_unit={0xc, 0x24, 0x8, 0x1, 0x5, 0x4, "60a3bb2a43"}, @processing_unit={0x8, 0x24, 0x7, 0x3, 0x4, 0x9, '$'}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x202, 0x4, 0xff, 0x7, 0x4, 0x10}, @feature_unit={0xb, 0x24, 0x6, 0x4, 0x5, 0x2, [0x2, 0x8], 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x6, 0x2, 0xa, 0x8, "80d4f459d034a7"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x10, 0x2}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x4, 0x1, 0x4, "eb85df8bdb7b636c"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x2, 0x5, 0x1, 'Y1', 'S\"'}, @as_header={0x7, 0x24, 0x1, 0x8, 0x3, 0x5}, @as_header={0x7, 0x24, 0x1, 0x40, 0x1, 0x1002}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x1, 0x0, 0x9, {0x7, 0x25, 0x1, 0x3, 0x7, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0xf, 0x80, {0x7, 0x25, 0x1, 0x2, 0xa, 0x804}}}}}}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x110, 0xfe, 0x7, 0xb, 0x40, 0x7f}, 0x5, &(0x7f0000000940)={0x5, 0xf, 0x5}, 0x3, [{0x7d, &(0x7f0000000980)=@string={0x7d, 0x3, "cd62fae477d222dceccf6b2e9b7b3d6a25249d9f178e8ed9cdf44083491307e383b9550e28a2097fba72e81d28fbebfae59512c81f0ee4ff57988a0b47942ff321071a20f88480d8bafe4bb1e452d41c57f7e1139d187d7b63a7c3acfc3b350660af507925df522447f34efafb1d2e57c712c4c0f59631529a8f49"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x43, &(0x7f0000000a40)=@string={0x43, 0x3, "7036ee49ddde92ef8398e73ae311a80d4b52592b5d95edf326ff434876f3fb3195f8e8563481a1ec3b0d1dda1b8af8b77afaa7b3a483fbddefa19fbd3b0cbd53f2"}}]}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x20010, r2, 0x9b794000) r4 = syz_io_uring_setup(0x7317, &(0x7f0000000b00)={0x0, 0xebb9, 0x20000, 0x0, 0x19d, 0x0, r1}, &(0x7f0000000b80)=0x0, &(0x7f0000000bc0)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000c00)=@IORING_OP_POLL_ADD={0x6, 0xd, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x2100}, 0x1}) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0186405, &(0x7f0000000c40)={0x80000001, 0x80000000, {0x0}, {0x0}, 0x7, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x0, &(0x7f0000000c80)) clock_gettime(0x0, &(0x7f0000000cc0)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000d00)={{0x77359400}, {r8, r9/1000+60000}}, &(0x7f0000000d40)) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000d80), 0x4) fcntl$lock(r1, 0x25, &(0x7f0000000dc0)={0x1, 0x0, 0x65b, 0x4, r6}) syz_emit_ethernet(0xbd, &(0x7f0000000e00)={@random="baab85ec7f57", @random="8fe44e639210", @val={@void, {0x8100, 0x3, 0x1, 0x2}}, {@x25={0x805, {0x2, 0x4, 0x28, "272a95c0937e9abbbced457bb24384a5fa3596824e0eceeba34bbfc8be273428d5e58845556d250dbb8e2aaae7fa622a071d035d86b766b973b06286dbfe16f6cf591d69cbff25ab83f629a1a1f4829d87127eb3d4bf6d13b535975bca131f38ad91e74734116bd07a0c6e26760dec053bfaab9fc2fcda408688f6bb9208faced964b98444fe8eeebf4e3532d4ba626e48d0207773b62c6bfa5b965f87f7859659643e0ad6b455c0"}}}}, &(0x7f0000000ec0)={0x1, 0x3, [0xa31, 0x494, 0x384, 0xcfe]}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002000)={0x0, 0x0, 0x0}, &(0x7f0000002040)=0xc) r11 = syz_open_dev$video(&(0x7f0000002080), 0x0, 0x100) fstat(r1, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r4, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000021c0)={0x0, 0x0, 0x0}, &(0x7f0000002200)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002240)={0x0, 0x0, 0x0}, &(0x7f0000002280)=0xc) sendmmsg$unix(r1, &(0x7f0000002380)=[{{&(0x7f0000000f00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000001f80)}], 0x2, &(0x7f00000022c0)=[@cred={{0x18, 0x1, 0x2, {r6, r7, r10}}}, @rights={{0x18, 0x1, 0x1, [r4, r11, r0]}}, @cred={{0x18, 0x1, 0x2, {r6, r12, r13}}}, @cred={{0x18, 0x1, 0x2, {r6, r7, r14}}}, @rights={{0x14, 0x1, 0x1, [r0, r1]}}, @cred={{0x18, 0x1, 0x2, {r6, r7, r15}}}], 0x8c, 0x24000000}}], 0x1, 0x800) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002400)=@filter={'filter\x00', 0xe, 0x4, 0x4bc, 0xffffffff, 0x110, 0x244, 0x0, 0xffffffff, 0xffffffff, 0x3f4, 0x3f4, 0x3f4, 0xffffffff, 0x4, &(0x7f00000023c0), {[{{@ipv6={@mcast1, @empty, [0xff000000, 0xffffffff, 0xffffff00, 0xff], [0x0, 0xff, 0xff0000ff], 'nicvf0\x00', 'nr0\x00', {}, {0xff}, 0x2b, 0xf8, 0x2, 0x80}, 0x0, 0xec, 0x110, 0x0, {}, [@common=@dst={{0x48}, {0xfffffffc, 0x4, 0x1, [0x180, 0x4, 0xb, 0x2, 0x2, 0xfeff, 0x7f, 0x26, 0xfffe, 0x3, 0x401, 0x1, 0x2, 0x3, 0x5c, 0x1], 0xd}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x3}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, [0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0x0, 0xff], 'veth1\x00', 'geneve1\x00', {}, {}, 0x2c, 0x2, 0x2, 0x10}, 0x0, 0x110, 0x134, 0x0, {}, [@common=@eui64={{0x24}}, @common=@dst={{0x48}, {0xab, 0x1, 0x0, [0xfff, 0xb79d, 0x8001, 0x7fff, 0x0, 0x7, 0x7, 0x9, 0x98, 0x6, 0x483, 0x7f, 0x8001, 0xd, 0x4, 0x1ff], 0x10}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x7}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff], [0x0, 0xff000000, 0xffffff00, 0xffffffff], 'bridge_slave_0\x00', 'syzkaller0\x00', {0xff}, {}, 0x29, 0x6, 0x0, 0x3c}, 0x0, 0x18c, 0x1b0, 0x0, {}, [@common=@unspec=@state={{0x24}, {0xc}}, @common=@unspec=@conntrack3={{0xc4}, {{@ipv4=@multicast2, [0xff, 0xff000000], @ipv4=@loopback, [0x0, 0xffffffff, 0xffffff00, 0xff000000], @ipv6=@dev={0xfe, 0x80, '\x00', 0xb}, [0x0, 0xff, 0x0, 0xff], @ipv6=@local, [0x0, 0xffffffff, 0xff000000, 0xffffff], 0x7ff, 0xf, 0x3a, 0x4e21, 0x4e21, 0x4e23, 0x4e22, 0x2801}, 0x81, 0x440, 0x4e23, 0x4e23, 0x4e23, 0x4e23}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x518) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000002940)='bond_slave_1\x00', 0x10) 2.433602978s ago: executing program 1 (id=611): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20802}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast1}]}}}]}, 0x48}}, 0x0) r1 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0x40aee2, 0x200, 0x0, 0xbfdffffa}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0185647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f903, 0x0, '\x00', @p_u16=0x0}}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000280)={'bond0\x00', @ifru_names='sit0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) openat$6lowpan_enable(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl(r8, 0x80004507, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2040}}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) r9 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$CDROMPLAYMSF(r9, 0x5303, &(0x7f0000000040)={0xd, 0x3, 0x6, 0x9, 0xde, 0x6}) timer_create(0x2, &(0x7f0000000340)={0x0, 0x24, 0x5, @tid=0xffffffffffffffff}, &(0x7f00000003c0)=0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) timer_settime(r10, 0x0, &(0x7f0000000440)={{r11, r12+60000000}, {0x0, 0x3938700}}, &(0x7f0000000480)) fchmodat(r7, &(0x7f0000000200)='./file0\x00', 0x11) 2.381660373s ago: executing program 1 (id=612): r0 = fsopen(&(0x7f0000000080)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000700)={{}, r1, 0x6, @unused=[0x8ca, 0x7, 0x9, 0x1], @subvolid=0x943}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x10, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r2, r2, r3) prctl$PR_CAPBSET_DROP(0x18, 0x9) socket(0x11, 0x800000003, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r4, 0x1, 0x5, &(0x7f0000000000), 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x4600, 0x1, 0x4}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x50313134, 0x0, 0xa, [{}, {0x10}, {}, {}, {0x6}]}}) socket(0x2c, 0x803, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) 2.287663605s ago: executing program 3 (id=614): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@default_permissions}, {@nfs_export_off}]}) (async) rmdir(&(0x7f0000000180)='./file1\x00') (async) chdir(&(0x7f00000001c0)='./bus\x00') (async) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file1\x00') (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r1) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x48, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x148) (async) r7 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x20842) fsetxattr$security_capability(r7, &(0x7f00000000c0), 0x0, 0x0, 0x0) (async) listen(r5, 0x0) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_usb_connect$cdc_ncm(0x1, 0x6e, 0x0, 0x0) syz_usb_disconnect(r10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYRES16=r0, @ANYRES16=r3, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x4000800) 2.286269517s ago: executing program 3 (id=615): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r1, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x80000, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0x108000000000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x2000000, 0xde4, 0x7, 0x0, 0x100000000]}) 2.210070748s ago: executing program 3 (id=616): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x200008, @loopback, 0x39}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000003c0700802c00018014000300000000000000000000000000000000001400040000000000000000000000ffffac1e00010c00028005000100000000003c0002802c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000"], 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000020101010000000005000000000000023b8a86baed895df4ea0d63d2aa65788d953d3cf24f0c1f1ab527932d5d86265eb0c72e1b934f00559a6390c2d7e65204521d632e6937363c15f77e5c828cd96783fdc21aac39a4ae648cb26000931c9127895d2c"], 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) 1.947165524s ago: executing program 2 (id=617): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$ENABLE_STATS(0x20, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x1f2f, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a40800", 0x0, 0x241, 0x0, 0x95, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3df"}, 0x4c) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x6, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000740)=[{{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000340)=[{0x0}, {&(0x7f00000003c0)="af426301e3d60aa8ee3671e86382c4f769b673133e4a7a5d23ec8527f6affe3dec9fb815bbd631d28f86671261e7eaded68f425c25042642980a873374832579e592a629dac9f60365c65d6699ec2143ebeef4dd3bf92e10311875143c57c0211a51de07a7c6c6f4653beedadde06fafaa2dbf5e370dc1bf3838f7bfa8f1c7b0b56651f4967181697eb051420cf40843a3dc1fd1e2b6138ae6240643877ed03fe50148320ba1b55ed17a4ee6e8d9ec91489c1c067305cd38558c6976f06cbd2d8a64aeff97f5a117bd67efe292a7792836b0ec", 0xd3}, {&(0x7f0000000240)="b26e54147c6415b5c5916ea00f888b3a78c6bc53f315", 0x16}, {&(0x7f0000000500)="a0bc88a82264d492a2abf33a67a65ce59e1ebf45da5114baa4515b65cb138448769671d4f990ca6a7cfb9e4a6183562a8dba5773ae660b08642f12cee33731e749ff11ff9c86813587df95764767c9b5d7acbe836dfd99aacce3958c353f94234b00d9b2243c83e5b22806eb913d9a62246d140af71fdb441b88bbc35432fd523c9c3e6f2123404a0d466c1a01443db887c11e41c4", 0x95}, {&(0x7f00000005c0)="015c48b4c6bbbfbc207af9750437601b4e4adfea738a1d01669a9efd276cfacdfc76ee095ce1bd466dc4fedeb842407b393b21208e2807f54e93a5d2ab91723ef3f08e8eca9a8d547d4ac0282504ac317746fa7cb1a3dae07371a4360364908dca098b92145112e451c080d436241f440e023949075d0403ce87d36435ab62f9c3dff6082ebcc1b0c51f57efacc9", 0x8e}, {&(0x7f0000000680)="738aeea5aaed7f2fe66debe1d792e3456b2de1991479299c637f8d1cc720754140f61bd68d191a5d518f78eb28ce2445c387808d5ef1c3aeca32ea457d8c25b26dbd2da0166b68d38e64db95fa462bd3e89aef4f130291ccdae0284942993867080ee2b904313b3fdc55542bf75513da93ad7e7ce82f1c8f16037a66c8e6f5270be47b2949e038a1b3212350ce2e638014a745835fac61ec548e7b38219a0bff14ec0246b3a2de60bfa306867f0934e0752afcfe6e97b7", 0xb7}, {0x0}], 0x7, 0x0, 0x0, 0x20000000}}], 0x1, 0x40) setgroups(0x2, &(0x7f0000000080)=[0x0, 0x0]) r5 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf, 0x0, r2}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r8 = socket$pppl2tp(0x18, 0x1, 0x1) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x0, 0x0}) io_uring_enter(r5, 0x7f33, 0x7c5b, 0x0, 0x0, 0xfffffe36) 1.501669953s ago: executing program 1 (id=618): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0) sendfile(r1, r2, 0x0, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x1, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) r4 = syz_open_dev$video4linux(0x0, 0x2, 0x20) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.360089704s ago: executing program 0 (id=619): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xb, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000300007b8af8ff00000000bfa200000000180007020000f8ffffffa503000008000000b7040000000000008500000003000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.270350706s ago: executing program 3 (id=620): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x200008, @loopback, 0x39}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000003c0700802c00018014000300000000000000000000000000000000001400040000000000000000000000ffffac1e00010c00028005000100000000003c0002802c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000"], 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000020101010000000005000000000000023b8a86baed895df4ea0d63d2aa65788d953d3cf24f0c1f1ab527932d5d86265eb0c72e1b934f00559a6390c2d7e65204521d632e6937363c15f77e5c828cd96783fdc21aac39a4ae648cb26000931c9127895d2c"], 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt(r8, 0xeb, 0x10, &(0x7f0000000340)=""/45, &(0x7f0000000400)=0x2d) 1.270028947s ago: executing program 0 (id=621): rt_sigaction(0xd, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffe8d, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000815}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0xf, 0x0, &(0x7f0000000640)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)={0x20, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x70bda87d, 0x77}}}}}, 0x20}, 0x1, 0x0, 0x0, 0xd811}, 0x4000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000300)="59ab6caeb3e4c9d46344c6ab6a6c2e3fe88c80236aa960f427fc6e64453613437bd09b8dfc27bc9cec915fd4c3cd6969fb198feb409a04cf8ff3027f5a44", 0x3e) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.096239666s ago: executing program 2 (id=622): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x24000800, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @local}, 0x1c) recvmmsg(r3, &(0x7f00000066c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/148, 0x94}}], 0x1, 0x2000, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r5 = syz_open_pts(r4, 0x900) r6 = dup3(r5, r4, 0x0) read(r6, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r6, &(0x7f0000001d40)=""/4095, 0xfff) socket$netlink(0x10, 0x3, 0x0) 629.729437ms ago: executing program 0 (id=623): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x109103, 0x0) r0 = socket$kcm(0x11, 0x2, 0x300) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYRESOCT], &(0x7f0000000140)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3f, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) r3 = socket(0x11, 0xc522066cef826465, 0x0) (async) r4 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xff8c, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0xbc, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xffe0}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x2, 0x0, 0xf, 0xff, 0x0, 0x0, 0xb, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1], 0x1, [0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1}]}]}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4048001) timer_create(0x0, 0x0, 0x0) (async) timer_settime(0x0, 0x0, 0x0, 0x0) (async) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x300) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x0) (async, rerun: 32) ioctl$KDSIGACCEPT(r7, 0x5607, 0x3) (async, rerun: 32) ioctl$VT_ACTIVATE(r7, 0x5606, 0x2) (async) ioctl$TIOCSWINSZ(r7, 0x5414, &(0x7f0000000180)={0x9, 0xfffc, 0x3, 0x7fff}) (async) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000003c0)=@newtclass={0x3c, 0x28, 0x800, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x8, 0x1}, {0xffe0, 0xffe0}, {0xffe0, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x3}}, @TCA_RATE={0x6, 0x5, {0x3, 0x10}}, @tclass_kind_options=@c_sfq={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200480c4}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x400, @dev={0xfe, 0x80, '\x00', 0x22}, 0xfffffff8}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000500)="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", 0x114}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x40000) 580.073168ms ago: executing program 0 (id=624): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="8200000000000000710500"]) (async) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="8200000000000000710500"]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) (async) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r6, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) (async) sendto$inet(r6, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f0000001500)={0x0, 0xffffffffffffffb0, &(0x7f0000002200)=[{&(0x7f0000002240)=""/4115, 0x1013}], 0x1, 0x0, 0x0, 0x407006}, 0x10004) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x30, 0x1, 0x80, 0xffeff034}, {0x6, 0x2, 0x4, 0x9}]}, 0x8) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x28}}, 0x0) (async) sendmsg$key(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x28}}, 0x0) write$binfmt_aout(r4, &(0x7f0000000500)=ANY=[], 0x9ffc) 411.555827ms ago: executing program 3 (id=625): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="500100001000010000000000000000007f00000100000000000000000000000000000000000000000000ffff0a01010100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ffffffff0000000000000000000000800000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff6eac2b7c864c30b20000000000000000000000000018000000edffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff25bd700000000000020001000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c"], 0x150}}, 0x8080) 319.989443ms ago: executing program 3 (id=626): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000240)={0x0, 0x0}) syz_open_procfs$namespace(r0, &(0x7f00000002c0)='ns/pid\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x12, 0x3, &(0x7f0000000440)=ANY=[@ANYRES32=r2], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x7, &(0x7f00000001c0), 0x4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r6, 0x402c5342, &(0x7f0000000500)={0x9, 0xb, 0x40, {0x3, 0x4}, 0x1, 0x3}) removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@known='trusted.overlay.upper\x00') syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='auxv\x00') bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r7 = dup(r5) write$UHID_INPUT(r7, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) r8 = openat$6lowpan_enable(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) write$6lowpan_enable(r8, &(0x7f0000000380)='0', 0x1) sendmmsg$inet(r2, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="b8", 0x1}], 0x1}}], 0x1, 0x4008440) close_range(r1, 0xffffffffffffffff, 0x0) 319.460226ms ago: executing program 0 (id=627): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, 0x0, 0x0}, 0x1c) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newtaction={0x4fc, 0x30, 0x4, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0x50, 0xa, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x1f, 0x6, "2b83608498d23ddbcd0f3efeaaa1e1f644b8dfd78fd3507dda3c99"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, {0x3b0, 0x1, [@m_gact={0x154, 0xd, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x8b6, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1160}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1600}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x2, 0x10000000, 0x0, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x400, 0x2, 0x8, 0x1, 0x10bb}}, @TCA_GACT_PARMS={0x18, 0x2, {0xc3, 0x9, 0x5, 0x7, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x5, 0x7, 0x40, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x290, 0x5}}]}, {0x96, 0x6, "29867068fedcc98b48ba9d5abdb2dc86410d6cbc0dd81abc39bd776274c0f8ad860cdc520ff7ec161a28e3724b6671a0ae70edb0c2b962a5ea930cf3ea76a7f8bc5b6ae5dc80f8e6c44b6f087a7bde7c3ccb214f13a8c43edec49915476c96eefd8e13cac341965eba44bd3e3ec03f098cc1f7bf8b0c6ab98dc9dc1774832cd2509d9e6b041634ba1f4e5e14d8545928d4ce"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0x130, 0x19, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @random="6d3b0befabe9"}]}, {0xf6, 0x6, "d5d41d95a8d686593b91eafa2291aad9d0c18b6bab3580b8034bffc96ee5dc3231c3222e8cc55c19a1ea96367a26d22c10bf49a5b78269126412d309d97e5d22627ad69185c68cec26cb2a741b29799f26b75bef50cca608429d88670a1da44c6dbeaeeb5b649b58e9a273e383bdc625d3f8f44e047ce41ce2889c58e6ab67b73cbe95650d9eb06ab4ff0e6947d726a3138538a0b484fcd7d08856554a0c2760c393a5b2c644657bb23edd755b90a2bc3ebe8b60810dcceda2373d13e519d29f01029c1434e04e609aff0d60e577e6812893fe17f9758ae06c01b6113b3ece566808e0d8339056f88f3c7e0b518c23f78162"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_nat={0x128, 0x1f, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0xb8f, 0x8, 0x0, 0x200}, @dev={0xac, 0x14, 0x14, 0x19}, @multicast2, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x2, 0x3, 0x5, 0x64b}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x80ffff00, 0x1}}]}, {0xb0, 0x6, "b0efd74798a19b17ffb3fba1bbbcadd6d1b043686b28e94f0ebe31c8eb03895f17a9a467e079f391391240b78ec3960f6a2351afbdf91e2c25331455cc7c65e3103b5ec2588fd344252940f5d17b475b175fc76ce49d49e3c26b53f28f7d5e739520ce957a12d3e4ec564955105762ddd587855cf83ae79e5caa6d6a8e470b1bd65ae012c8014a82a3a2b3cfdca72e2328d510b7f3e64f12fcc9785e32688a54bf3dfb05ebb9cb40951a623e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, {0xb8, 0x1, [@m_connmark={0xb4, 0xd, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc, 0xffffffe4, 0x0, 0x3, 0x993}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x200, 0xfffffffd, 0xffffffffffffffff, 0x0, 0x7}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffc, 0x10001, 0x8, 0x9, 0x5}, 0x3}}]}, {0x30, 0x6, "339c5c2cf220786848dc13465566a4cd7b7f8a01f9dc0aeebd118db14918fb21a0e0af83313a9c3120804fa2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x4fc}, 0x1, 0x0, 0x0, 0x804}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000080), 0x10) listen(r5, 0x0) accept4$llc(r5, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 0s ago: executing program 2 (id=628): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x200008, @loopback, 0x39}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000003c0700802c00018014000300000000000000000000000000000000001400040000000000000000000000ffffac1e00010c00028005000100000000003c0002802c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000"], 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000020101010000000005000000000000023b8a86baed895df4ea0d63d2aa65788d953d3cf24f0c1f1ab527932d5d86265eb0c72e1b934f00559a6390c2d7e65204521d632e6937363c15f77e5c828cd96783fdc21aac39a4ae648cb26000931c9127895d2c"], 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:29649' (ED25519) to the list of known hosts. [ 41.761302][ T5877] cgroup: Unknown subsys name 'net' [ 41.931008][ T5877] cgroup: Unknown subsys name 'cpuset' [ 41.935061][ T5877] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.920431][ T5877] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.277943][ T5941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.290463][ T5951] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.293107][ T5951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.295552][ T5951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.303692][ T5954] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.306268][ T5954] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.309286][ T5956] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.311968][ T5956] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.314432][ T5956] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.321876][ T5948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.324609][ T5948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.327390][ T5948] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.330083][ T5948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.336433][ T5955] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.339750][ T5956] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.340813][ T5954] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.342246][ T5956] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.345365][ T5954] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.351498][ T5954] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.353917][ T5954] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.544022][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 46.610624][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 46.734136][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.736916][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.739463][ T5940] bridge_slave_0: entered allmulticast mode [ 46.742051][ T5940] bridge_slave_0: entered promiscuous mode [ 46.745271][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 46.769014][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.772095][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.775430][ T5940] bridge_slave_1: entered allmulticast mode [ 46.780471][ T5940] bridge_slave_1: entered promiscuous mode [ 46.823295][ T5952] chnl_net:caif_netlink_parms(): no params data found [ 46.855942][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.890549][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.892864][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.895528][ T5944] bridge_slave_0: entered allmulticast mode [ 46.898355][ T5944] bridge_slave_0: entered promiscuous mode [ 46.905168][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.932717][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.935034][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.937269][ T5944] bridge_slave_1: entered allmulticast mode [ 46.939927][ T5944] bridge_slave_1: entered promiscuous mode [ 47.013923][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.057804][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.062292][ T5940] team0: Port device team_slave_0 added [ 47.141187][ T5940] team0: Port device team_slave_1 added [ 47.143211][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.145489][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.148008][ T5939] bridge_slave_0: entered allmulticast mode [ 47.150518][ T5939] bridge_slave_0: entered promiscuous mode [ 47.172211][ T5944] team0: Port device team_slave_0 added [ 47.193325][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.195607][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.198327][ T5939] bridge_slave_1: entered allmulticast mode [ 47.200968][ T5939] bridge_slave_1: entered promiscuous mode [ 47.219112][ T5944] team0: Port device team_slave_1 added [ 47.261674][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.264554][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.267330][ T5952] bridge_slave_0: entered allmulticast mode [ 47.270571][ T5952] bridge_slave_0: entered promiscuous mode [ 47.291015][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.293189][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.301303][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.320079][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.322692][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.324993][ T5952] bridge_slave_1: entered allmulticast mode [ 47.327835][ T5952] bridge_slave_1: entered promiscuous mode [ 47.356796][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.359385][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.368869][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.373689][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.390343][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.392526][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.400460][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.409431][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.415081][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.418440][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.421161][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.431104][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.454745][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.485999][ T5952] team0: Port device team_slave_0 added [ 47.546223][ T5952] team0: Port device team_slave_1 added [ 47.551255][ T5939] team0: Port device team_slave_0 added [ 47.573246][ T5940] hsr_slave_0: entered promiscuous mode [ 47.576099][ T5940] hsr_slave_1: entered promiscuous mode [ 47.607028][ T5939] team0: Port device team_slave_1 added [ 47.665555][ T5944] hsr_slave_0: entered promiscuous mode [ 47.667892][ T5944] hsr_slave_1: entered promiscuous mode [ 47.669949][ T5944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.672362][ T5944] Cannot create hsr debugfs directory [ 47.675349][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.679417][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.688006][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.715568][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.717816][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.725690][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.745787][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.748985][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.759488][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.764705][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.767267][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.778022][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.930337][ T5939] hsr_slave_0: entered promiscuous mode [ 47.933429][ T5939] hsr_slave_1: entered promiscuous mode [ 47.936525][ T5939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.939974][ T5939] Cannot create hsr debugfs directory [ 47.990060][ T5952] hsr_slave_0: entered promiscuous mode [ 47.992298][ T5952] hsr_slave_1: entered promiscuous mode [ 47.994381][ T5952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.996743][ T5952] Cannot create hsr debugfs directory [ 48.195817][ T5940] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.201371][ T5940] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.224162][ T5940] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.248557][ T5940] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.286539][ T5944] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.294114][ T5944] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.303556][ T5944] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.309304][ T5944] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.338735][ T5954] Bluetooth: hci2: command tx timeout [ 48.338812][ T5951] Bluetooth: hci1: command tx timeout [ 48.364338][ T5939] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.369929][ T5939] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.375885][ T5939] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.403455][ T5939] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.418257][ T5951] Bluetooth: hci0: command tx timeout [ 48.418273][ T5954] Bluetooth: hci3: command tx timeout [ 48.460129][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.463148][ T5952] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.471430][ T5952] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.477921][ T5952] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.484024][ T5952] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.521625][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.530487][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.532889][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.548013][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.550268][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.582057][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.586007][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.606008][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.623824][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.626622][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.631923][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.634214][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.640763][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.661743][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.664328][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.676709][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.679092][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.701359][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.729941][ T5952] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.746035][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.748355][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.765642][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.767959][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.822560][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.845128][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.870915][ T5940] veth0_vlan: entered promiscuous mode [ 48.875987][ T5944] veth0_vlan: entered promiscuous mode [ 48.892110][ T5944] veth1_vlan: entered promiscuous mode [ 48.900312][ T5940] veth1_vlan: entered promiscuous mode [ 48.909258][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.914310][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.942822][ T5944] veth0_macvtap: entered promiscuous mode [ 48.952427][ T5940] veth0_macvtap: entered promiscuous mode [ 48.957088][ T5944] veth1_macvtap: entered promiscuous mode [ 48.970114][ T5940] veth1_macvtap: entered promiscuous mode [ 48.990979][ T5939] veth0_vlan: entered promiscuous mode [ 48.994060][ T5952] veth0_vlan: entered promiscuous mode [ 49.002440][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.007120][ T5939] veth1_vlan: entered promiscuous mode [ 49.015030][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.020045][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.028500][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.031442][ T5952] veth1_vlan: entered promiscuous mode [ 49.037437][ T5940] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.040987][ T5940] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.043714][ T5940] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.046425][ T5940] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.052571][ T5944] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.055808][ T5944] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.059338][ T5944] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.061981][ T5944] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.085741][ T5939] veth0_macvtap: entered promiscuous mode [ 49.098086][ T5939] veth1_macvtap: entered promiscuous mode [ 49.115699][ T5952] veth0_macvtap: entered promiscuous mode [ 49.121942][ T5952] veth1_macvtap: entered promiscuous mode [ 49.141677][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.150210][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.153340][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.154077][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.155895][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.170216][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.171694][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.172679][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.176200][ T5939] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.181416][ T5939] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.184139][ T5939] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.186822][ T5939] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.210970][ T5952] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.213634][ T5952] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.216378][ T5952] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.219936][ T5952] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.225966][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.229258][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.250282][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.253494][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.282410][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.289771][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.290927][ T5944] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.300200][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.303141][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.324178][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.330725][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.351825][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.361262][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.437223][ T6015] lo speed is unknown, defaulting to 1000 [ 49.439578][ T6015] lo speed is unknown, defaulting to 1000 [ 49.442345][ T6015] lo speed is unknown, defaulting to 1000 [ 49.446655][ T6015] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 49.453155][ T6015] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 49.465743][ T6015] lo speed is unknown, defaulting to 1000 [ 49.468767][ T6015] lo speed is unknown, defaulting to 1000 [ 49.471232][ T6015] lo speed is unknown, defaulting to 1000 [ 49.474590][ T6015] lo speed is unknown, defaulting to 1000 [ 49.607695][ T6003] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 49.787841][ T6003] usb 8-1: Using ep0 maxpacket: 16 [ 49.795642][ T6003] usb 8-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 49.800695][ T6003] usb 8-1: config 1 interface 0 has no altsetting 0 [ 49.801477][ T6023] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 49.808467][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 49.809292][ T6003] usb 8-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.40 [ 49.815022][ T6003] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.818601][ T6003] usb 8-1: Product: 䡈訕䏖ꯋ槉՛嗻篚⢅⌷핋읕뮲䬘ࠐ᛻液Ħꢾꚓ詧匕좼衚簾놆⻔帼疡봤⓵拽⇞棷㦶·篾ꘙ銈㥥뾎⦚蠤Ʊ杒䆩䖮溲層傖ꤲ෢喸῟堰ᄦ璷굶㜦듊㬩ⱟ㺝蟝鳪⊤⢵㱐῎狢駎Ⱀ쐷靧倘쀳꫟⁜匦貂뚢㢑᠓﯆넏 [ 49.818659][ T6003] usb 8-1: Manufacturer: ж [ 49.818673][ T6003] usb 8-1: SerialNumber: ꄝ￩ሒ襟㙴萹﬜頓刑઻옜଻ి罥씰蠍㬫ཀ놉⣭⚂歱꾫땻乍ㅅ [ 49.956954][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 50.067726][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 50.087892][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 50.160588][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 50.161293][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 50.161334][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 50.161472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 50.161629][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 50.161779][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 50.161917][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 50.245248][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 50.253810][ T6024] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 50.253850][ T6024] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 50.255770][ T6024] vhci_hcd vhci_hcd.0: Device attached [ 50.259881][ T6003] usbhid 8-1:1.0: can't add hid device: -71 [ 50.259971][ T6003] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 50.261021][ T9] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 50.261043][ T9] usb 7-1: config 0 has no interface number 0 [ 50.261075][ T9] usb 7-1: config 0 interface 12 has no altsetting 0 [ 50.271907][ T9] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 50.271931][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.271948][ T9] usb 7-1: Product: syz [ 50.271960][ T9] usb 7-1: Manufacturer: syz [ 50.271972][ T9] usb 7-1: SerialNumber: syz [ 50.272144][ T6003] usb 8-1: USB disconnect, device number 2 [ 50.298110][ T9] usb 7-1: config 0 descriptor?? [ 50.302535][ T9] f81534 7-1:0.12: required endpoints missing [ 50.334103][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'. [ 50.349289][ T6029] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8'. [ 50.351992][ T6029] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8'. [ 50.385966][ T6025] vhci_hcd: connection closed [ 50.386964][ T1138] vhci_hcd: stop threads [ 50.395532][ T1138] vhci_hcd: release socket [ 50.398113][ T1138] vhci_hcd: disconnect device [ 50.418167][ T5954] Bluetooth: hci2: command tx timeout [ 50.418198][ T5951] Bluetooth: hci1: command tx timeout [ 50.447981][ T6002] vhci_hcd: vhci_device speed not set [ 50.497859][ T5951] Bluetooth: hci3: command tx timeout [ 50.499678][ T5951] Bluetooth: hci0: command tx timeout [ 51.033704][ T6040] netlink: 'syz.1.10': attribute type 1 has an invalid length. [ 51.100467][ T6041] IPv6: sit1: Disabled Multicast RS [ 51.103400][ T6041] sit1: entered allmulticast mode [ 51.270745][ T6044] program syz.0.11 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.360975][ T6049] Zero length message leads to an empty skb [ 51.364011][ T6049] nfs: Unknown parameter '4' [ 51.367267][ T6049] lo speed is unknown, defaulting to 1000 [ 51.370233][ T6049] lo speed is unknown, defaulting to 1000 [ 51.373280][ T6049] lo speed is unknown, defaulting to 1000 [ 51.383368][ T6049] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 51.402960][ T6049] lo speed is unknown, defaulting to 1000 [ 51.405595][ T6049] lo speed is unknown, defaulting to 1000 [ 51.408132][ T6049] lo speed is unknown, defaulting to 1000 [ 51.410888][ T6049] lo speed is unknown, defaulting to 1000 [ 51.631551][ T6054] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 51.633714][ T6054] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 51.637411][ T6054] vhci_hcd vhci_hcd.0: Device attached [ 51.641587][ T6055] vhci_hcd: unknown pdu 1 [ 51.644109][ T101] vhci_hcd: stop threads [ 51.645534][ T101] vhci_hcd: release socket [ 51.646955][ T101] vhci_hcd: disconnect device [ 51.743754][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'. [ 51.761014][ T6057] netlink: 128 bytes leftover after parsing attributes in process `syz.1.13'. [ 52.497768][ T5954] Bluetooth: hci1: command tx timeout [ 52.509291][ T5954] Bluetooth: hci2: command tx timeout [ 52.578889][ T5954] Bluetooth: hci0: command tx timeout [ 52.578920][ T5951] Bluetooth: hci3: command tx timeout [ 52.707412][ T9] usb 7-1: USB disconnect, device number 2 [ 52.728250][ T6003] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 52.909464][ T6003] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 52.912189][ T6003] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 52.914704][ T6003] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 52.917442][ T6003] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 52.921021][ T6003] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 52.924239][ T6003] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 52.927904][ T6003] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 52.935881][ T6003] usb 6-1: string descriptor 0 read error: -22 [ 52.939809][ T6003] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 52.943410][ T6003] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.947288][ T6003] usb 6-1: config 0 descriptor?? [ 52.950470][ T6003] hub 6-1:0.0: bad descriptor, ignoring hub [ 52.952375][ T6003] hub 6-1:0.0: probe with driver hub failed with error -5 [ 52.957320][ T6003] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input5 [ 53.047670][ T9] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 53.199254][ T9] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 53.202151][ T9] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 53.205318][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 53.209196][ T9] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 53.212322][ T6068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 53.212847][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 53.221942][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 53.225773][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 53.234852][ T9] usb 7-1: string descriptor 0 read error: -22 [ 53.238556][ T9] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 53.240334][ T6068] netlink: 'syz.1.16': attribute type 11 has an invalid length. [ 53.242461][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.247537][ T6068] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16'. [ 53.252014][ T9] usb 7-1: config 0 descriptor?? [ 53.257392][ T6003] usb 6-1: USB disconnect, device number 2 [ 53.265596][ T9] hub 7-1:0.0: bad descriptor, ignoring hub [ 53.268382][ T9] hub 7-1:0.0: probe with driver hub failed with error -5 [ 53.343981][ T9] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input6 [ 53.552992][ T6067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 53.582716][ T6067] netlink: 'syz.2.17': attribute type 11 has an invalid length. [ 53.585784][ T6067] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17'. [ 53.591477][ T34] usb 7-1: USB disconnect, device number 3 [ 53.904138][ T6080] netlink: 2 bytes leftover after parsing attributes in process `syz.1.19'. [ 53.942772][ T6080] netlink: 'syz.1.19': attribute type 1 has an invalid length. [ 53.945568][ T6080] netlink: 384 bytes leftover after parsing attributes in process `syz.1.19'. [ 54.026612][ T6081] siw: device registration error -23 [ 54.235904][ T6084] binder: 6083:6084 ioctl c0306201 80000100 returned -14 [ 54.250800][ T6084] syz.2.21 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 54.577886][ T5951] Bluetooth: hci2: command tx timeout [ 54.579674][ T5951] Bluetooth: hci1: command tx timeout [ 54.658701][ T5951] Bluetooth: hci0: command tx timeout [ 54.667636][ T5951] Bluetooth: hci3: command tx timeout [ 54.802557][ T6106] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.917639][ T6115] siw: device registration error -23 [ 54.994844][ T6121] netlink: 'syz.0.33': attribute type 4 has an invalid length. [ 54.998828][ T6121] netlink: 'syz.0.33': attribute type 4 has an invalid length. [ 55.876609][ T6161] lo speed is unknown, defaulting to 1000 [ 55.888677][ T6161] lo speed is unknown, defaulting to 1000 [ 55.953120][ T6166] netfs: Couldn't get user pages (rc=-14) [ 56.073768][ T6176] program syz.0.52 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.180021][ T6182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.48'. [ 56.427916][ T29] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 56.487720][ T60] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 56.511019][ T6187] binder: 6186:6187 ioctl c0306201 80000540 returned -14 [ 56.578024][ T29] usb 8-1: Using ep0 maxpacket: 16 [ 56.580387][ T6189] 9pnet_fd: Insufficient options for proto=fd [ 56.584225][ T29] usb 8-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 56.589620][ T29] usb 8-1: config 1 interface 0 has no altsetting 0 [ 56.594531][ T29] usb 8-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.40 [ 56.597880][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.601378][ T29] usb 8-1: Product: 䡈訕䏖ꯋ槉՛嗻篚⢅⌷핋읕뮲䬘ࠐ᛻液Ħꢾꚓ詧匕좼衚簾놆⻔帼疡봤⓵拽⇞棷㦶·篾ꘙ銈㥥뾎⦚蠤Ʊ杒䆩䖮溲層傖ꤲ෢喸῟堰ᄦ璷굶㜦듊㬩ⱟ㺝蟝鳪⊤⢵㱐῎狢駎Ⱀ쐷靧倘쀳꫟⁜匦貂뚢㢑᠓﯆넏 [ 56.614160][ T29] usb 8-1: Manufacturer: ж [ 56.615693][ T29] usb 8-1: SerialNumber: ꄝ￩ሒ襟㙴萹﬜頓刑઻옜଻ి罥씰蠍㬫ཀ놉⣭⚂歱꾫땻乍ㅅ [ 56.638926][ T60] usb 6-1: Using ep0 maxpacket: 8 [ 56.643520][ T60] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 56.647371][ T60] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 56.654574][ T60] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 56.660301][ T60] usb 6-1: config 250 has no interface number 0 [ 56.663058][ T60] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 56.667325][ T60] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 56.673132][ T60] usb 6-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 56.678283][ T60] usb 6-1: config 250 interface 228 has no altsetting 0 [ 56.683923][ T60] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 56.691349][ T60] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 56.695038][ T60] usb 6-1: Product: syz [ 56.696964][ T60] usb 6-1: SerialNumber: syz [ 56.710892][ T60] hub 6-1:250.228: bad descriptor, ignoring hub [ 56.713433][ T60] hub 6-1:250.228: probe with driver hub failed with error -5 [ 57.017713][ T9] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 57.037353][ T29] usbhid 8-1:1.0: can't add hid device: -71 [ 57.040147][ T29] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 57.045524][ T29] usb 8-1: USB disconnect, device number 3 [ 57.181942][ T9] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 57.185410][ T9] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 57.191067][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 57.194740][ T9] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 57.200008][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 57.203980][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 57.208951][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 57.211718][ T6211] capability: warning: `syz.0.62' uses deprecated v2 capabilities in a way that may be insecure [ 57.216917][ T9] usb 7-1: string descriptor 0 read error: -22 [ 57.219787][ T9] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 57.222774][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.227381][ T9] usb 7-1: config 0 descriptor?? [ 57.231312][ T9] hub 7-1:0.0: bad descriptor, ignoring hub [ 57.233286][ T9] hub 7-1:0.0: probe with driver hub failed with error -5 [ 57.237161][ T9] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input7 [ 57.274706][ T6213] netlink: 'syz.0.63': attribute type 7 has an invalid length. [ 57.277104][ T6213] netlink: 'syz.0.63': attribute type 8 has an invalid length. [ 57.281215][ T6213] netlink: 'syz.0.63': attribute type 10 has an invalid length. [ 57.294846][ T6213] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 57.311573][ T6212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 57.487480][ T6216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 57.493144][ T6216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.57'. [ 57.514298][ T6194] netlink: 'syz.2.57': attribute type 11 has an invalid length. [ 57.516737][ T6194] netlink: 20 bytes leftover after parsing attributes in process `syz.2.57'. [ 57.521418][ T34] usb 7-1: USB disconnect, device number 4 [ 57.578658][ T6220] lo speed is unknown, defaulting to 1000 [ 57.581701][ T6220] lo speed is unknown, defaulting to 1000 [ 57.809842][ T6222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.64'. [ 58.025849][ T6227] siw: device registration error -23 [ 58.898045][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 58.966327][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.79'. [ 59.050392][ T6268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.77'. [ 59.059713][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 59.064661][ T9] usb 8-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 59.073674][ T9] usb 8-1: config 1 interface 0 has no altsetting 0 [ 59.080320][ T9] usb 8-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.40 [ 59.083505][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.086033][ T9] usb 8-1: Product: 䡈訕䏖ꯋ槉՛嗻篚⢅⌷핋읕뮲䬘ࠐ᛻液Ħꢾꚓ詧匕좼衚簾놆⻔帼疡봤⓵拽⇞棷㦶·篾ꘙ銈㥥뾎⦚蠤Ʊ杒䆩䖮溲層傖ꤲ෢喸῟堰ᄦ璷굶㜦듊㬩ⱟ㺝蟝鳪⊤⢵㱐῎狢駎Ⱀ쐷靧倘쀳꫟⁜匦貂뚢㢑᠓﯆넏 [ 59.132854][ T9] usb 8-1: Manufacturer: ж [ 59.134758][ T9] usb 8-1: SerialNumber: ꄝ￩ሒ襟㙴萹﬜頓刑઻옜଻ి罥씰蠍㬫ཀ놉⣭⚂歱꾫땻乍ㅅ [ 59.168030][ T29] usb 6-1: USB disconnect, device number 3 [ 59.213144][ T6282] random: crng reseeded on system resumption [ 59.588210][ T9] usbhid 8-1:1.0: can't add hid device: -71 [ 59.590464][ T9] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 59.600621][ T9] usb 8-1: USB disconnect, device number 4 [ 59.729149][ T40] audit: type=1326 audit(1748351171.619:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.0.77" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7fc00000 [ 60.212779][ T6303] sctp: failed to load transform for md5: -2 [ 60.526952][ T6312] netlink: 24 bytes leftover after parsing attributes in process `syz.3.91'. [ 60.711459][ T40] audit: type=1804 audit(1748351172.599:3): pid=6315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.92" name="/newroot/21/file0" dev="tmpfs" ino=126 res=1 errno=0 [ 60.736790][ T6315] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 60.800737][ T6318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.93'. [ 61.142655][ T6335] FAULT_INJECTION: forcing a failure. [ 61.142655][ T6335] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 61.148303][ T6335] CPU: 3 UID: 0 PID: 6335 Comm: syz.3.99 Not tainted 6.15.0-syzkaller-01958-g785cdec46e92 #0 PREEMPT(full) [ 61.148319][ T6335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 61.148325][ T6335] Call Trace: [ 61.148329][ T6335] [ 61.148333][ T6335] dump_stack_lvl+0x16c/0x1f0 [ 61.148351][ T6335] should_fail_ex+0x512/0x640 [ 61.148365][ T6335] _copy_to_user+0x32/0xd0 [ 61.148378][ T6335] simple_read_from_buffer+0xcb/0x170 [ 61.148395][ T6335] proc_fail_nth_read+0x197/0x270 [ 61.148411][ T6335] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 61.148427][ T6335] ? rw_verify_area+0xcf/0x680 [ 61.148442][ T6335] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 61.148456][ T6335] vfs_read+0x1e4/0xc60 [ 61.148467][ T6335] ? __pfx___mutex_lock+0x10/0x10 [ 61.148482][ T6335] ? __pfx_vfs_read+0x10/0x10 [ 61.148495][ T6335] ? __fget_files+0x20e/0x3c0 [ 61.148508][ T6335] ksys_read+0x12a/0x250 [ 61.148517][ T6335] ? __pfx_ksys_read+0x10/0x10 [ 61.148528][ T6335] ? rcu_is_watching+0x12/0xc0 [ 61.148545][ T6335] __do_fast_syscall_32+0x73/0x120 [ 61.148560][ T6335] do_fast_syscall_32+0x32/0x80 [ 61.148574][ T6335] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 61.148587][ T6335] RIP: 0023:0xf7fd4579 [ 61.148595][ T6335] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 61.148605][ T6335] RSP: 002b:00000000f50f6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 61.148614][ T6335] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f50f6620 [ 61.148621][ T6335] RDX: 000000000000000f RSI: 00000000f7462ff4 RDI: 0000000000000000 [ 61.148626][ T6335] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 61.148632][ T6335] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 61.148637][ T6335] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 61.148649][ T6335] [ 61.216803][ C3] vkms_vblank_simulate: vblank timer overrun [ 61.367759][ T4236] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 61.607673][ T4236] usb 6-1: Using ep0 maxpacket: 16 [ 61.640853][ T4236] usb 6-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 61.647745][ T4236] usb 6-1: config 1 interface 0 has no altsetting 0 [ 61.660292][ T4236] usb 6-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.40 [ 61.664859][ T4236] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.670061][ T4236] usb 6-1: Product: 䡈訕䏖ꯋ槉՛嗻篚⢅⌷핋읕뮲䬘ࠐ᛻液Ħꢾꚓ詧匕좼衚簾놆⻔帼疡봤⓵拽⇞棷㦶·篾ꘙ銈㥥뾎⦚蠤Ʊ杒䆩䖮溲層傖ꤲ෢喸῟堰ᄦ璷굶㜦듊㬩ⱟ㺝蟝鳪⊤⢵㱐῎狢駎Ⱀ쐷靧倘쀳꫟⁜匦貂뚢㢑᠓﯆넏 [ 61.679570][ T4236] usb 6-1: Manufacturer: ж [ 61.681120][ T4236] usb 6-1: SerialNumber: ꄝ￩ሒ襟㙴萹﬜頓刑઻옜଻ి罥씰蠍㬫ཀ놉⣭⚂歱꾫땻乍ㅅ [ 62.215604][ T4236] usbhid 6-1:1.0: can't add hid device: -71 [ 62.225546][ T4236] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 62.239900][ T4236] usb 6-1: USB disconnect, device number 4 [ 62.360715][ T6353] program syz.0.105 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.574859][ T6358] siw: device registration error -23 [ 62.685882][ T6361] siw: device registration error -23 [ 63.268877][ T34] libceph: connect (1)[c::]:6789 error -101 [ 63.271033][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 63.417711][ T4236] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 63.467668][ T6004] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 63.529010][ T34] libceph: connect (1)[c::]:6789 error -101 [ 63.531102][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 63.569268][ T4236] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 63.572672][ T4236] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 63.575672][ T4236] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.596184][ T4236] usb 6-1: config 0 descriptor?? [ 63.618087][ T6004] usb 8-1: Using ep0 maxpacket: 16 [ 63.623488][ T6370] overlayfs: failed to resolve './file1': -2 [ 63.629126][ T6004] usb 8-1: unable to get BOS descriptor or descriptor too short [ 63.631570][ T6364] ceph: No mds server is up or the cluster is laggy [ 63.636353][ T6004] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 63.639280][ T6004] usb 8-1: can't read configurations, error -71 [ 63.800880][ T9] usb 6-1: USB disconnect, device number 5 [ 64.267512][ T6391] netlink: 14 bytes leftover after parsing attributes in process `syz.0.115'. [ 64.349435][ T40] audit: type=1804 audit(1748351176.219:4): pid=6394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.114" name="/newroot/26/bus/bus" dev="tmpfs" ino=158 res=1 errno=0 [ 64.415263][ T6391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.425979][ T6391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.433031][ T6391] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 64.443340][ T6391] bond0 (unregistering): Released all slaves [ 64.637636][ T60] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 64.705986][ T6402] program syz.0.119 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.816387][ T60] usb 6-1: Using ep0 maxpacket: 16 [ 64.823924][ T60] usb 6-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 64.828971][ T60] usb 6-1: config 1 interface 0 has no altsetting 0 [ 64.833207][ T60] usb 6-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.40 [ 64.836047][ T60] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.838838][ T60] usb 6-1: Product: 䡈訕䏖ꯋ槉՛嗻篚⢅⌷핋읕뮲䬘ࠐ᛻液Ħꢾꚓ詧匕좼衚簾놆⻔帼疡봤⓵拽⇞棷㦶·篾ꘙ銈㥥뾎⦚蠤Ʊ杒䆩䖮溲層傖ꤲ෢喸῟堰ᄦ璷굶㜦듊㬩ⱟ㺝蟝鳪⊤⢵㱐῎狢駎Ⱀ쐷靧倘쀳꫟⁜匦貂뚢㢑᠓﯆넏 [ 64.847714][ T60] usb 6-1: Manufacturer: ж [ 64.849131][ T60] usb 6-1: SerialNumber: ꄝ￩ሒ襟㙴萹﬜頓刑઻옜଻ి罥씰蠍㬫ཀ놉⣭⚂歱꾫땻乍ㅅ [ 65.269099][ T60] usbhid 6-1:1.0: can't add hid device: -71 [ 65.271126][ T60] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 65.277974][ T60] usb 6-1: USB disconnect, device number 6 [ 65.548868][ T6432] Cannot find del_set index 3 as target [ 65.554150][ T6432] netlink: 244 bytes leftover after parsing attributes in process `syz.3.129'. [ 65.839495][ T6448] netlink: 28 bytes leftover after parsing attributes in process `syz.0.134'. [ 65.875215][ T40] audit: type=1804 audit(1748351177.759:5): pid=6448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.134" name="/newroot/43/file0/file0" dev="9p" ino=35913857 res=1 errno=0 [ 65.890834][ T6454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.135'. [ 65.902315][ T6454] ipvlan2: entered promiscuous mode [ 65.919432][ T6448] lo speed is unknown, defaulting to 1000 [ 65.922891][ T6448] lo speed is unknown, defaulting to 1000 [ 65.946962][ T6459] No buffer was provided with the request [ 66.031042][ T6465] program syz.2.138 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.407660][ T6003] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.537394][ T6486] netlink: 44 bytes leftover after parsing attributes in process `syz.2.145'. [ 66.567731][ T6003] usb 5-1: Using ep0 maxpacket: 16 [ 66.571855][ T6003] usb 5-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 66.575954][ T6003] usb 5-1: config 1 interface 0 has no altsetting 0 [ 66.581219][ T6003] usb 5-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.40 [ 66.584473][ T6003] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.587700][ T6003] usb 5-1: Product: 䡈訕䏖ꯋ槉՛嗻篚⢅⌷핋읕뮲䬘ࠐ᛻液Ħꢾꚓ詧匕좼衚簾놆⻔帼疡봤⓵拽⇞棷㦶·篾ꘙ銈㥥뾎⦚蠤Ʊ杒䆩䖮溲層傖ꤲ෢喸῟堰ᄦ璷굶㜦듊㬩ⱟ㺝蟝鳪⊤⢵㱐῎狢駎Ⱀ쐷靧倘쀳꫟⁜匦貂뚢㢑᠓﯆넏 [ 66.599054][ T6003] usb 5-1: Manufacturer: ж [ 66.600531][ T6003] usb 5-1: SerialNumber: ꄝ￩ሒ襟㙴萹﬜頓刑઻옜଻ి罥씰蠍㬫ཀ놉⣭⚂歱꾫땻乍ㅅ [ 66.787753][ T4236] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 66.836443][ T6491] vxfs: WRONG superblock magic 00000000 at 1 [ 66.839353][ T6491] vxfs: WRONG superblock magic 00000000 at 8 [ 66.841308][ T6491] vxfs: can't find superblock. [ 66.937915][ T4236] usb 7-1: Using ep0 maxpacket: 32 [ 66.942276][ T4236] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 66.946027][ T4236] usb 7-1: config 0 has no interface number 0 [ 66.948909][ T4236] usb 7-1: config 0 interface 12 has no altsetting 0 [ 66.987498][ C3] vkms_vblank_simulate: vblank timer overrun [ 66.996916][ T4236] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 67.002438][ T4236] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.008058][ T4236] usb 7-1: Product: syz [ 67.010854][ T4236] usb 7-1: Manufacturer: syz [ 67.013247][ T4236] usb 7-1: SerialNumber: syz [ 67.021995][ T4236] usb 7-1: config 0 descriptor?? [ 67.029885][ T4236] f81534 7-1:0.12: required endpoints missing [ 67.033795][ T6003] usbhid 5-1:1.0: can't add hid device: -71 [ 67.042280][ T6003] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 67.051231][ T6003] usb 5-1: USB disconnect, device number 2 [ 67.807662][ T6003] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 67.967766][ T6003] usb 5-1: Using ep0 maxpacket: 32 [ 67.971741][ T6003] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 67.978653][ T6003] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 67.982556][ T6003] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 67.985969][ T6003] usb 5-1: Product: syz [ 67.987886][ T6003] usb 5-1: Manufacturer: syz [ 67.989831][ T6003] usb 5-1: SerialNumber: syz [ 67.998154][ T6003] usb 5-1: config 0 descriptor?? [ 68.001406][ T6498] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 68.106758][ T6507] program syz.3.151 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.760024][ T6520] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.851066][ T6520] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.916274][ T6520] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.980847][ T6520] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.102050][ T6520] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.114532][ T6520] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.121986][ T6520] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.141498][ T6520] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.538049][ T9] usb 7-1: USB disconnect, device number 5 [ 69.636191][ T6532] loop2: detected capacity change from 0 to 7 [ 69.643060][ T6183] Dev loop2: unable to read RDB block 7 [ 69.644852][ T6183] loop2: unable to read partition table [ 69.646676][ T6183] loop2: partition table beyond EOD, truncated [ 69.654200][ T6532] Dev loop2: unable to read RDB block 7 [ 69.656448][ T6532] loop2: unable to read partition table [ 69.660592][ T6532] loop2: partition table beyond EOD, truncated [ 69.663596][ T6532] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 70.197328][ T6542] program syz.2.165 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.299814][ T6554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.171'. [ 70.302791][ T6554] netlink: 'syz.3.171': attribute type 5 has an invalid length. [ 70.305676][ T6554] netlink: 20 bytes leftover after parsing attributes in process `syz.3.171'. [ 70.315017][ T6554] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 70.322537][ T6554] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 70.325918][ T6554] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 70.329573][ T6554] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 70.332359][ T6554] geneve2: entered promiscuous mode [ 70.334777][ T6554] geneve2: entered allmulticast mode [ 70.338830][ T5951] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 70.341976][ T5951] Bluetooth: hci1: Injecting HCI hardware error event [ 70.345529][ T5954] Bluetooth: hci1: hardware error 0x00 [ 70.736623][ T6564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.167'. [ 70.751587][ T6003] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 70.778815][ T60] usb 5-1: USB disconnect, device number 3 [ 70.827859][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.829873][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.417716][ T5954] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 73.951098][ T6667] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 74.998186][ T5947] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 75.258694][ T61] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 75.357777][ T34] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 75.417677][ T61] usb 7-1: Using ep0 maxpacket: 16 [ 75.422547][ T61] usb 7-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 75.429042][ T61] usb 7-1: config 1 interface 0 has no altsetting 0 [ 75.433785][ T61] usb 7-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.40 [ 75.437633][ T61] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.440734][ T61] usb 7-1: Product: 䡈訕䏖ꯋ槉՛嗻篚⢅⌷핋읕뮲䬘ࠐ᛻液Ħꢾꚓ詧匕좼衚簾놆⻔帼疡봤⓵拽⇞棷㦶·篾ꘙ銈㥥뾎⦚蠤Ʊ杒䆩䖮溲層傖ꤲ෢喸῟堰ᄦ璷굶㜦듊㬩ⱟ㺝蟝鳪⊤⢵㱐῎狢駎Ⱀ쐷靧倘쀳꫟⁜匦貂뚢㢑᠓﯆넏 [ 75.452209][ T61] usb 7-1: Manufacturer: ж [ 75.454586][ T61] usb 7-1: SerialNumber: ꄝ￩ሒ襟㙴萹﬜頓刑઻옜଻ి罥씰蠍㬫ཀ놉⣭⚂歱꾫땻乍ㅅ [ 75.508932][ T5947] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.512281][ T34] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 75.512310][ T5947] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.516951][ T34] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 75.519893][ T5947] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 75.523795][ T34] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 75.528422][ T5947] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.528442][ T5947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.530814][ T5947] usb 6-1: config 0 descriptor?? [ 75.532196][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.546119][ T6697] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 75.555134][ T34] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 75.809299][ T1340] usb 5-1: USB disconnect, device number 4 [ 75.875045][ T61] usbhid 7-1:1.0: can't add hid device: -71 [ 75.877016][ T61] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 75.880618][ T61] usb 7-1: USB disconnect, device number 6 [ 75.901865][ T6702] dns_resolver: Unsupported content type (5) [ 75.945058][ T5947] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 75.958107][ T5947] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 76.742464][ T6717] syz.0.225 uses obsolete (PF_INET,SOCK_PACKET) [ 76.742867][ T6718] syzkaller1: entered allmulticast mode [ 77.113650][ T6734] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.166736][ T6738] siw: device registration error -23 [ 77.253974][ T6741] program syz.0.230 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.379715][ T6751] bridge_slave_0: left allmulticast mode [ 77.381512][ T6751] bridge_slave_0: left promiscuous mode [ 77.384116][ T6751] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.391396][ T6751] bridge_slave_1: left allmulticast mode [ 77.393180][ T6751] bridge_slave_1: left promiscuous mode [ 77.395054][ T6751] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.403269][ T6751] bond0: (slave bond_slave_0): Releasing backup interface [ 77.411354][ T6751] bond0: (slave bond_slave_1): Releasing backup interface [ 77.423293][ T6751] team0: Port device team_slave_0 removed [ 77.429495][ T6751] team0: Port device team_slave_1 removed [ 77.432628][ T6751] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.435902][ T6751] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.440729][ T6751] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.443088][ T6751] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.567232][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.237'. [ 77.571351][ T6761] netlink: 24 bytes leftover after parsing attributes in process `syz.2.237'. [ 78.053797][ T4236] usb 6-1: USB disconnect, device number 7 [ 78.757704][ T6700] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 78.787676][ T1340] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 78.907631][ T6700] usb 7-1: Using ep0 maxpacket: 32 [ 78.912016][ T6700] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 78.915392][ T6700] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.919612][ T6700] usb 7-1: config 0 has no interface number 0 [ 78.922229][ T6700] usb 7-1: config 0 interface 12 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 78.927419][ T6700] usb 7-1: config 0 interface 12 has no altsetting 0 [ 78.932745][ T6700] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 78.936679][ T6700] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.940083][ T6700] usb 7-1: Product: syz [ 78.941829][ T6700] usb 7-1: Manufacturer: syz [ 78.943876][ T6700] usb 7-1: SerialNumber: syz [ 78.947813][ T6700] usb 7-1: config 0 descriptor?? [ 78.952404][ T6700] f81534 7-1:0.12: required endpoints missing [ 78.952406][ T1340] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 78.952428][ T1340] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 78.961903][ T1340] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 78.965497][ T1340] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 78.970138][ T1340] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 78.976446][ T1340] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 78.980666][ T1340] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 78.990066][ T1340] usb 5-1: string descriptor 0 read error: -22 [ 78.992664][ T1340] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 78.995518][ T1340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.999949][ T1340] usb 5-1: config 0 descriptor?? [ 79.003599][ T1340] hub 5-1:0.0: bad descriptor, ignoring hub [ 79.005574][ T1340] hub 5-1:0.0: probe with driver hub failed with error -5 [ 79.010545][ T1340] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input9 [ 79.107705][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 79.270674][ T6814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.279328][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 79.283538][ T9] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 79.286874][ T9] usb 6-1: config 0 has no interface number 0 [ 79.289624][ T9] usb 6-1: config 0 interface 12 has no altsetting 0 [ 79.294441][ T9] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 79.298321][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.301593][ T9] usb 6-1: Product: syz [ 79.303340][ T9] usb 6-1: Manufacturer: syz [ 79.305318][ T9] usb 6-1: SerialNumber: syz [ 79.311231][ T6801] netlink: 'syz.0.248': attribute type 11 has an invalid length. [ 79.311814][ T9] usb 6-1: config 0 descriptor?? [ 79.314490][ T6801] netlink: 20 bytes leftover after parsing attributes in process `syz.0.248'. [ 79.319902][ T9] f81534 6-1:0.12: required endpoints missing [ 79.327769][ T1340] usb 5-1: USB disconnect, device number 5 [ 79.337321][ T6818] siw: device registration error -23 [ 79.424675][ T6820] nfs4: Unknown parameter 'rAڛ[' [ 79.968613][ T6840] netlink: 'syz.0.259': attribute type 1 has an invalid length. [ 79.971940][ T6840] netlink: 244 bytes leftover after parsing attributes in process `syz.0.259'. [ 80.487116][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.266'. [ 80.516104][ T6861] program syz.3.267 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.074041][ T836] cfg80211: failed to load regulatory.db [ 81.529285][ T9] usb 7-1: USB disconnect, device number 7 [ 81.559337][ T6874] siw: device registration error -23 [ 81.820047][ T29] usb 6-1: USB disconnect, device number 8 [ 81.848101][ T1340] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 82.049034][ T1340] usb 8-1: config index 0 descriptor too short (expected 1307, got 27) [ 82.051629][ T1340] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 82.054134][ T1340] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 82.056889][ T1340] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 82.061213][ T1340] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 82.064389][ T1340] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 82.067371][ T1340] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 82.074924][ T1340] usb 8-1: string descriptor 0 read error: -22 [ 82.076911][ T1340] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 82.080217][ T1340] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.084451][ T1340] usb 8-1: config 0 descriptor?? [ 82.087832][ T1340] hub 8-1:0.0: bad descriptor, ignoring hub [ 82.089728][ T1340] hub 8-1:0.0: probe with driver hub failed with error -5 [ 82.110251][ T1340] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input10 [ 82.204778][ T6892] program syz.0.277 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.419371][ T6895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.529320][ T1340] input: failed to attach handler mousedev to device input10, error: -5 [ 82.536896][ T6895] netlink: 'syz.3.273': attribute type 11 has an invalid length. [ 82.548685][ T6895] netlink: 20 bytes leftover after parsing attributes in process `syz.3.273'. [ 82.699108][ T835] usb 8-1: USB disconnect, device number 7 [ 83.066459][ T6919] virtio-fs: tag not found [ 83.126369][ T6924] netlink: 36 bytes leftover after parsing attributes in process `syz.0.287'. [ 83.347730][ T29] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 83.517668][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 83.640904][ T6947] program syz.3.293 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.014453][ T6952] ======================================================= [ 84.014453][ T6952] WARNING: The mand mount option has been deprecated and [ 84.014453][ T6952] and is ignored by this kernel. Remove the mand [ 84.014453][ T6952] option from the mount to silence this warning. [ 84.014453][ T6952] ======================================================= [ 84.046568][ T6952] 9pnet: Could not find request transport: virti00000000000000000000 [ 84.050474][ T6952] overlayfs: failed to resolve './file1': -2 [ 84.561217][ T6962] siw: device registration error -23 [ 84.877681][ T1340] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 84.950003][ T6975] bridge_slave_0: left allmulticast mode [ 84.951911][ T6975] bridge_slave_0: left promiscuous mode [ 84.953777][ T6975] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.960180][ T6975] bridge_slave_1: left allmulticast mode [ 84.961927][ T6975] bridge_slave_1: left promiscuous mode [ 84.963740][ T6975] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.976883][ T6975] team0: Port device team_slave_0 removed [ 84.983193][ T6975] team0: Port device team_slave_1 removed [ 84.985497][ T6975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.989290][ T6975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.992476][ T6975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.994917][ T6975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.003300][ T61] lo speed is unknown, defaulting to 1000 [ 85.037703][ T1340] usb 8-1: Using ep0 maxpacket: 32 [ 85.040911][ T1340] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 85.046024][ T1340] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 85.049134][ T1340] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 85.051789][ T1340] usb 8-1: Product: syz [ 85.053178][ T1340] usb 8-1: Manufacturer: syz [ 85.054720][ T1340] usb 8-1: SerialNumber: syz [ 85.059013][ T1340] usb 8-1: config 0 descriptor?? [ 85.061356][ T6966] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 85.647797][ T836] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 85.798783][ T836] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 85.801252][ T836] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 85.803655][ T836] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 85.806285][ T836] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 85.809665][ T836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 85.812596][ T836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 85.815489][ T836] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 85.825255][ T836] usb 6-1: string descriptor 0 read error: -22 [ 85.827321][ T836] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 85.830674][ T836] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.834784][ T836] usb 6-1: config 0 descriptor?? [ 85.838575][ T836] hub 6-1:0.0: bad descriptor, ignoring hub [ 85.840422][ T836] hub 6-1:0.0: probe with driver hub failed with error -5 [ 85.845028][ T836] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input11 [ 85.924633][ T6999] program syz.0.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.121477][ T29] usb 7-1: unable to get BOS descriptor or descriptor too short [ 86.127434][ T29] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 86.131006][ T29] usb 7-1: can't read configurations, error -71 [ 86.157120][ T7002] siw: device registration error -23 [ 86.169930][ T7005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.218391][ T6980] netlink: 'syz.1.302': attribute type 11 has an invalid length. [ 86.221012][ T6980] netlink: 20 bytes leftover after parsing attributes in process `syz.1.302'. [ 86.225730][ T1340] usb 6-1: USB disconnect, device number 9 [ 86.339800][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.312'. [ 87.587789][ T29] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 87.737646][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 87.741010][ T29] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 87.743943][ T29] usb 7-1: config 0 has no interface number 0 [ 87.746256][ T29] usb 7-1: config 0 interface 12 has no altsetting 0 [ 87.757821][ T29] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 87.760695][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.763156][ T29] usb 7-1: Product: syz [ 87.764497][ T29] usb 7-1: Manufacturer: syz [ 87.765949][ T29] usb 7-1: SerialNumber: syz [ 87.772799][ T29] usb 7-1: config 0 descriptor?? [ 87.781003][ T29] f81534 7-1:0.12: required endpoints missing [ 87.875131][ T7036] program syz.1.319 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.907275][ T835] usb 8-1: USB disconnect, device number 8 [ 88.250587][ T7044] siw: device registration error -23 [ 89.603887][ T7084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.330'. [ 89.811699][ T7098] program syz.1.334 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.286933][ T7103] warning: `syz.3.335' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 90.329463][ T9] usb 7-1: USB disconnect, device number 10 [ 90.349851][ T7104] netlink: 20 bytes leftover after parsing attributes in process `syz.3.335'. [ 90.439308][ T7103] Bluetooth: MGMT ver 1.23 [ 91.929801][ T7141] overlayfs: failed to resolve './file1': -2 [ 91.933302][ T7142] overlayfs: failed to resolve './file1': -2 [ 91.997719][ T29] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 92.018370][ T7144] program syz.1.347 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.157650][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 92.170056][ T29] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 92.172372][ T29] usb 7-1: can't read configurations, error -61 [ 92.308185][ T1340] libceph: connect (1)[c::]:6789 error -101 [ 92.310304][ T1340] libceph: mon0 (1)[c::]:6789 connect error [ 92.315924][ T29] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 92.324571][ T1340] libceph: connect (1)[c::]:6789 error -101 [ 92.326673][ T1340] libceph: mon0 (1)[c::]:6789 connect error [ 92.489333][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 92.495980][ T29] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 92.496011][ T29] usb 7-1: can't read configurations, error -61 [ 92.496212][ T29] usb usb7-port1: attempt power cycle [ 92.598609][ T1340] libceph: connect (1)[c::]:6789 error -101 [ 92.598710][ T1340] libceph: mon0 (1)[c::]:6789 connect error [ 92.755039][ T7168] netlink: 'syz.0.352': attribute type 10 has an invalid length. [ 92.764711][ T7168] veth0_vlan: left promiscuous mode [ 92.767272][ T7168] veth0_vlan: entered promiscuous mode [ 92.769837][ T7168] team0: Device veth0_vlan failed to register rx_handler [ 92.847659][ T29] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 92.874231][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 92.875765][ T29] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 92.883528][ T29] usb 7-1: can't read configurations, error -61 [ 93.027669][ T29] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 93.048172][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 93.049659][ T29] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 93.052595][ T29] usb 7-1: can't read configurations, error -61 [ 93.052746][ T29] usb usb7-port1: unable to enumerate USB device [ 93.121411][ T29] libceph: connect (1)[c::]:6789 error -101 [ 93.122074][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 93.122460][ T7152] ceph: No mds server is up or the cluster is laggy [ 93.374214][ T7176] program syz.1.356 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.967050][ T7180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.003094][ T7193] tmpfs: Unknown parameter 'mpolr' [ 95.281655][ T7222] program syz.1.371 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.330698][ T7224] netlink: 244 bytes leftover after parsing attributes in process `syz.2.369'. [ 95.918248][ T7251] block device autoloading is deprecated and will be removed. [ 96.147763][ T7255] usb usb8: usbfs: process 7255 (syz.2.377) did not claim interface 0 before use [ 96.151199][ T7256] usb usb8: usbfs: process 7256 (syz.2.377) did not claim interface 0 before use [ 96.311187][ T40] audit: type=1800 audit(1748351208.199:6): pid=7280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.383" name="/newroot/113/file0" dev="tmpfs" ino=600 res=0 errno=0 [ 96.358148][ T7291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.386'. [ 96.360911][ T7291] netlink: 'syz.0.386': attribute type 30 has an invalid length. [ 96.371279][ T7291] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.374234][ T7291] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.376957][ T7291] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.379127][ T7293] program syz.1.387 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.379906][ T7291] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.536804][ T7299] capability: warning: `syz.0.388' uses 32-bit capabilities (legacy support in use) [ 97.387272][ T7312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.969196][ T7329] program syz.0.401 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.107083][ T7334] program syz.1.404 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.168186][ T1106] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 98.170432][ T1106] ata1.00: irq_stat 0x40000000 [ 98.172013][ T1106] ata1.00: failed command: ZAC MANAGEMENT OUT [ 98.174037][ T1106] ata1.00: cmd 9f/02:00:00:00:00/00:00:00:00:00/40 tag 18 [ 98.174037][ T1106] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 98.178954][ T1106] ata1.00: status: { DRDY ERR } [ 98.180606][ T1106] ata1.00: error: { ABRT } [ 98.182047][ T1106] ata1.00: device reported invalid CHS sector 0 [ 98.387673][ T836] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 98.550739][ T836] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 98.553367][ T836] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 98.555847][ T836] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 98.558959][ T836] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 98.562143][ T836] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 98.565156][ T836] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 98.570323][ T836] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 98.582381][ T836] usb 7-1: string descriptor 0 read error: -22 [ 98.584349][ T836] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 98.587085][ T836] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.594014][ T836] usb 7-1: config 0 descriptor?? [ 98.602088][ T836] hub 7-1:0.0: bad descriptor, ignoring hub [ 98.604027][ T836] hub 7-1:0.0: probe with driver hub failed with error -5 [ 98.616377][ T836] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input12 [ 98.910971][ T7336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.922411][ T7336] netlink: 'syz.2.402': attribute type 11 has an invalid length. [ 98.925326][ T7336] netlink: 20 bytes leftover after parsing attributes in process `syz.2.402'. [ 98.935390][ T836] usb 7-1: USB disconnect, device number 15 [ 100.177833][ T4236] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 100.270998][ C3] ata1: illegal qc_active transition (00000000->00080000) [ 100.348712][ T4236] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 100.353929][ T4236] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 100.357880][ T4236] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 100.362399][ T4236] usb 8-1: config 0 interface 0 has no altsetting 0 [ 100.367143][ T4236] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 100.371208][ T4236] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 100.375603][ T4236] usb 8-1: config 0 interface 0 has no altsetting 0 [ 100.382216][ T4236] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 100.385706][ T4236] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 100.394754][ T4236] usb 8-1: config 0 interface 0 has no altsetting 0 [ 100.398954][ T4236] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 100.402698][ T4236] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 100.407176][ T4236] usb 8-1: config 0 interface 0 has no altsetting 0 [ 100.411329][ T4236] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 100.414997][ T4236] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 100.421196][ T4236] usb 8-1: config 0 interface 0 has no altsetting 0 [ 100.425055][ T4236] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 100.429195][ T4236] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 100.433666][ T4236] usb 8-1: config 0 interface 0 has no altsetting 0 [ 100.437443][ T4236] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 100.441871][ T4236] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 100.446350][ T4236] usb 8-1: config 0 interface 0 has no altsetting 0 [ 100.450496][ T4236] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 100.454289][ T4236] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 100.461834][ T4236] usb 8-1: config 0 interface 0 has no altsetting 0 [ 100.469718][ T4236] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 100.473570][ T4236] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 100.478656][ T4236] usb 8-1: Product: syz [ 100.480487][ T4236] usb 8-1: Manufacturer: syz [ 100.482494][ T4236] usb 8-1: SerialNumber: syz [ 100.486675][ T4236] usb 8-1: config 0 descriptor?? [ 100.494144][ T4236] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 100.559035][ T7393] program syz.1.424 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.599299][ T1106] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 100.605440][ T1106] ata1.00: configured for UDMA/100 [ 101.107353][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.429'. [ 101.249589][ T7416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.431'. [ 101.255681][ T7416] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 101.771506][ T7422] nfs: Unknown parameter '4' [ 101.773949][ T7422] siw: device registration error -23 [ 101.936165][ T7426] netlink: 24 bytes leftover after parsing attributes in process `syz.2.435'. [ 101.936205][ T7428] netlink: 24 bytes leftover after parsing attributes in process `syz.2.435'. [ 102.790658][ T7434] program syz.2.436 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.149765][ T1340] usb 8-1: USB disconnect, device number 9 [ 103.152944][ T1340] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 103.220167][ T7437] loop2: detected capacity change from 0 to 7 [ 103.238929][ T6427] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 103.240721][ T6427] loop2: partition table partially beyond EOD, truncated [ 103.243731][ T6427] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 103.328319][ T7444] netlink: 161716 bytes leftover after parsing attributes in process `syz.3.439'. [ 103.348546][ T7441] program syz.0.440 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.354197][ T7444] netlink: zone id is out of range [ 103.355861][ T7444] netlink: zone id is out of range [ 103.357886][ T7444] netlink: zone id is out of range [ 103.359572][ T7444] netlink: zone id is out of range [ 103.361259][ T7444] netlink: zone id is out of range [ 103.363026][ T7444] netlink: zone id is out of range [ 103.364702][ T7444] netlink: zone id is out of range [ 103.366474][ T7444] netlink: zone id is out of range [ 103.376889][ T7444] netlink: zone id is out of range [ 103.480203][ T7444] netlink: zone id is out of range [ 103.658657][ T7437] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 103.662780][ T7437] loop2: partition table partially beyond EOD, truncated [ 103.665768][ T7437] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 103.921489][ T5352] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 103.923677][ T5352] loop2: partition table partially beyond EOD, truncated [ 103.926690][ T5352] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 104.295628][ T7476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.319332][ T7476] bond0: (slave rose0): Enslaving as an active interface with an up link [ 104.357726][ T4236] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 104.477639][ T60] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 104.517825][ T4236] usb 6-1: Using ep0 maxpacket: 32 [ 104.555503][ T4236] usb 6-1: config index 0 descriptor too short (expected 32539, got 27) [ 104.566891][ T4236] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.571513][ T4236] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 12 [ 104.580495][ T4236] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 104.584435][ T4236] usb 6-1: New USB device strings: Mfr=26, Product=2, SerialNumber=3 [ 104.588569][ T4236] usb 6-1: Product: syz [ 104.590376][ T4236] usb 6-1: Manufacturer: syz [ 104.592404][ T4236] usb 6-1: SerialNumber: syz [ 104.596839][ T4236] usb 6-1: config 0 descriptor?? [ 104.627834][ T60] usb 5-1: Using ep0 maxpacket: 32 [ 104.633371][ T60] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 104.636546][ T60] usb 5-1: config 0 has no interface number 0 [ 104.639534][ T60] usb 5-1: config 0 interface 12 has no altsetting 0 [ 104.644337][ T60] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 104.647398][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.650354][ T60] usb 5-1: Product: syz [ 104.651677][ T60] usb 5-1: Manufacturer: syz [ 104.653139][ T60] usb 5-1: SerialNumber: syz [ 104.660749][ T60] usb 5-1: config 0 descriptor?? [ 104.666542][ T60] f81534 5-1:0.12: required endpoints missing [ 105.024535][ T7503] program syz.3.449 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.787144][ T7532] program syz.2.458 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.018054][ T7535] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 106.020156][ T7535] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 106.030474][ T7535] vhci_hcd vhci_hcd.0: Device attached [ 106.337628][ T6003] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 107.000782][ T4236] usb 6-1: USB disconnect, device number 10 [ 107.107777][ T835] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 107.220855][ T60] usb 5-1: USB disconnect, device number 6 [ 107.221303][ T7536] vhci_hcd: connection reset by peer [ 107.233196][ T1136] vhci_hcd: stop threads [ 107.235569][ T1136] vhci_hcd: release socket [ 107.237671][ T1136] vhci_hcd: disconnect device [ 107.386018][ T835] usb 8-1: config index 0 descriptor too short (expected 1307, got 27) [ 107.389264][ T835] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 107.391943][ T835] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 107.394770][ T835] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 107.399207][ T835] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 107.403614][ T835] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 107.406642][ T835] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 107.422712][ T835] usb 8-1: string descriptor 0 read error: -22 [ 107.424992][ T835] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 107.428888][ T835] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.436271][ T835] usb 8-1: config 0 descriptor?? [ 107.444481][ T835] hub 8-1:0.0: bad descriptor, ignoring hub [ 107.446512][ T835] hub 8-1:0.0: probe with driver hub failed with error -5 [ 107.455966][ T835] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input13 [ 107.719684][ T7573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.768214][ T7550] netlink: 'syz.3.460': attribute type 11 has an invalid length. [ 107.770800][ T7550] netlink: 20 bytes leftover after parsing attributes in process `syz.3.460'. [ 107.775453][ T6700] usb 8-1: USB disconnect, device number 10 [ 108.041813][ T7576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.465'. [ 108.222892][ T7582] netlink: 2 bytes leftover after parsing attributes in process `syz.2.467'. [ 108.255767][ T7582] netlink: 'syz.2.467': attribute type 1 has an invalid length. [ 108.260123][ T7582] netlink: 384 bytes leftover after parsing attributes in process `syz.2.467'. [ 108.320259][ T7584] program syz.3.468 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.502347][ T7597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.472'. [ 109.568777][ T7554] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 109.717781][ T7554] usb 8-1: Using ep0 maxpacket: 32 [ 109.719908][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.474'. [ 109.720947][ T7554] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 109.726114][ T7554] usb 8-1: config 0 has no interface number 0 [ 109.728158][ T7554] usb 8-1: config 0 interface 12 has no altsetting 0 [ 109.732305][ T7554] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 109.735144][ T7554] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.740185][ T7554] usb 8-1: Product: syz [ 109.741598][ T7554] usb 8-1: Manufacturer: syz [ 109.743069][ T7554] usb 8-1: SerialNumber: syz [ 109.751703][ T7554] usb 8-1: config 0 descriptor?? [ 109.758019][ T7554] f81534 8-1:0.12: required endpoints missing [ 109.799909][ T7602] netlink: 'syz.2.474': attribute type 11 has an invalid length. [ 109.803341][ T7602] netlink: 224 bytes leftover after parsing attributes in process `syz.2.474'. [ 109.899967][ T7615] program syz.1.478 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.273091][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 110.770726][ T7662] syz.1.493: attempt to access beyond end of device [ 110.770726][ T7662] nbd1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 110.774874][ T7662] EXT4-fs (nbd1): unable to read superblock [ 110.788517][ T7663] syz.1.493: attempt to access beyond end of device [ 110.788517][ T7663] nbd1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 110.793703][ T7663] EXT4-fs (nbd1): unable to read superblock [ 110.814019][ T7663] binder: BINDER_SET_CONTEXT_MGR already set [ 110.816729][ T7663] binder: 7661:7663 ioctl 4018620d 80000040 returned -16 [ 111.068625][ T5954] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 111.074924][ T5954] Bluetooth: hci3: Injecting HCI hardware error event [ 111.078587][ T5951] Bluetooth: hci3: hardware error 0x00 [ 111.447660][ T61] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 111.447773][ T6003] vhci_hcd: vhci_device speed not set [ 111.494631][ T7675] netlink: 32 bytes leftover after parsing attributes in process `syz.2.495'. [ 111.607630][ T61] usb 6-1: Using ep0 maxpacket: 16 [ 111.612980][ T61] usb 6-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 111.618940][ T61] usb 6-1: config 1 interface 0 has no altsetting 0 [ 111.625638][ T61] usb 6-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.40 [ 111.629715][ T61] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.632709][ T61] usb 6-1: Product: 䡈訕䏖ꯋ槉՛嗻篚⢅⌷핋읕뮲䬘ࠐ᛻液Ħꢾꚓ詧匕좼衚簾놆⻔帼疡봤⓵拽⇞棷㦶·篾ꘙ銈㥥뾎⦚蠤Ʊ杒䆩䖮溲層傖ꤲ෢喸῟堰ᄦ璷굶㜦듊㬩ⱟ㺝蟝鳪⊤⢵㱐῎狢駎Ⱀ쐷靧倘쀳꫟⁜匦貂뚢㢑᠓﯆넏 [ 111.643645][ T61] usb 6-1: Manufacturer: ж [ 111.645198][ T61] usb 6-1: SerialNumber: ꄝ￩ሒ襟㙴萹﬜頓刑઻옜଻ి罥씰蠍㬫ཀ놉⣭⚂歱꾫땻乍ㅅ [ 112.050305][ T7686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.498'. [ 112.073652][ T61] usbhid 6-1:1.0: can't add hid device: -71 [ 112.075979][ T61] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 112.080420][ T61] usb 6-1: USB disconnect, device number 11 [ 112.283444][ T5947] usb 8-1: USB disconnect, device number 11 [ 112.454582][ T7694] netlink: 'syz.2.502': attribute type 1 has an invalid length. [ 112.587210][ T7742] lo speed is unknown, defaulting to 1000 [ 112.590709][ T7742] lo speed is unknown, defaulting to 1000 [ 113.215436][ T7793] netlink: 'syz.0.514': attribute type 1 has an invalid length. [ 113.219283][ T5951] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 113.241725][ T7793] __nla_validate_parse: 3 callbacks suppressed [ 113.241743][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.514'. [ 113.286898][ T7809] netlink: 'syz.0.520': attribute type 30 has an invalid length. [ 113.291185][ T7809] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 113.294500][ T7809] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 113.327666][ T61] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 113.349555][ T60] hid-generic 0000:0000:0000.0003: item fetching failed at offset 0/1 [ 113.352553][ T60] hid-generic 0000:0000:0000.0003: probe with driver hid-generic failed with error -22 [ 113.356051][ T7811] tmpfs: Bad value for 'mpol' [ 113.486094][ T7816] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 113.489461][ T7816] IPv6: NLM_F_CREATE should be set when creating new route [ 113.495450][ T61] usb 8-1: Using ep0 maxpacket: 16 [ 113.501648][ T61] usb 8-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 113.507114][ T61] usb 8-1: config 1 interface 0 has no altsetting 0 [ 113.519071][ T61] usb 8-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.40 [ 113.522899][ T61] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.526175][ T61] usb 8-1: Product: 䡈訕䏖ꯋ槉՛嗻篚⢅⌷핋읕뮲䬘ࠐ᛻液Ħꢾꚓ詧匕좼衚簾놆⻔帼疡봤⓵拽⇞棷㦶·篾ꘙ銈㥥뾎⦚蠤Ʊ杒䆩䖮溲層傖ꤲ෢喸῟堰ᄦ璷굶㜦듊㬩ⱟ㺝蟝鳪⊤⢵㱐῎狢駎Ⱀ쐷靧倘쀳꫟⁜匦貂뚢㢑᠓﯆넏 [ 113.543759][ T61] usb 8-1: Manufacturer: ж [ 113.545661][ T61] usb 8-1: SerialNumber: ꄝ￩ሒ襟㙴萹﬜頓刑઻옜଻ి罥씰蠍㬫ཀ놉⣭⚂歱꾫땻乍ㅅ [ 113.604896][ T7820] netlink: 'syz.2.523': attribute type 10 has an invalid length. [ 113.612865][ T7820] veth0_vlan: left promiscuous mode [ 113.615626][ T7820] veth0_vlan: entered promiscuous mode [ 113.620472][ T7820] team0: Device veth0_vlan failed to register rx_handler [ 113.974887][ T61] usbhid 8-1:1.0: can't add hid device: -71 [ 113.977334][ T61] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 113.982561][ T61] usb 8-1: USB disconnect, device number 12 [ 114.249782][ T7835] program syz.1.528 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.754449][ T7842] netlink: 128 bytes leftover after parsing attributes in process `syz.2.531'. [ 114.824365][ T60] usb 8-1: new low-speed USB device number 13 using dummy_hcd [ 114.963658][ T7847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.529'. [ 114.971972][ T7847] netlink: 128 bytes leftover after parsing attributes in process `syz.0.529'. [ 115.053902][ T60] usb 8-1: config index 0 descriptor too short (expected 1307, got 27) [ 115.067774][ T60] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 115.071248][ T60] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 115.083148][ T60] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 115.090058][ T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 115.093405][ T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 115.100895][ T60] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 115.122171][ T60] usb 8-1: string descriptor 0 read error: -22 [ 115.126300][ T60] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 115.129352][ T60] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.305125][ T60] usb 8-1: config 0 descriptor?? [ 115.310009][ T60] hub 8-1:0.0: bad descriptor, ignoring hub [ 115.314306][ T60] hub 8-1:0.0: probe with driver hub failed with error -5 [ 115.323446][ T60] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input14 [ 115.462531][ T7852] block nbd1: Device being setup by another task [ 115.490766][ T7850] block nbd1: shutting down sockets [ 115.560247][ T7866] netlink: 100 bytes leftover after parsing attributes in process `syz.1.537'. [ 115.590539][ T7867] siw: device registration error -23 [ 115.603024][ T7838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.610398][ T7838] netlink: 'syz.3.530': attribute type 11 has an invalid length. [ 115.613542][ T7838] netlink: 20 bytes leftover after parsing attributes in process `syz.3.530'. [ 115.620889][ T5947] usb 8-1: USB disconnect, device number 13 [ 115.628264][ T7869] 9pnet_fd: Insufficient options for proto=fd [ 115.688725][ T7873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.540'. [ 115.689694][ T7874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.540'. [ 115.767387][ T7883] program syz.1.542 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.089674][ T7887] process 'syz.0.544' launched './file0' with NULL argv: empty string added [ 116.459521][ T7887] netlink: 32 bytes leftover after parsing attributes in process `syz.0.544'. [ 117.189349][ T7900] binder: BINDER_SET_CONTEXT_MGR already set [ 117.191305][ T7900] binder: 7899:7900 ioctl 4018620d 80000040 returned -16 [ 117.330336][ T7915] netlink: 24 bytes leftover after parsing attributes in process `syz.0.551'. [ 117.607654][ T61] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 117.737717][ T61] usb 7-1: device descriptor read/64, error -71 [ 117.807667][ T9] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 117.937655][ T9] usb 8-1: device descriptor read/64, error -71 [ 117.987681][ T61] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 118.178737][ T9] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 118.207745][ T61] usb 7-1: device descriptor read/64, error -71 [ 118.328508][ T61] usb usb7-port1: attempt power cycle [ 118.347678][ T9] usb 8-1: device descriptor read/64, error -71 [ 118.458100][ T9] usb usb8-port1: attempt power cycle [ 118.677623][ T61] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 118.698820][ T61] usb 7-1: device descriptor read/8, error -71 [ 118.868379][ T9] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 119.038369][ T9] usb 8-1: device descriptor read/8, error -71 [ 119.053392][ T61] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 119.068633][ T61] usb 7-1: device descriptor read/8, error -71 [ 119.178751][ T61] usb usb7-port1: unable to enumerate USB device [ 119.277690][ T9] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 119.308549][ T9] usb 8-1: device descriptor read/8, error -71 [ 119.419868][ T9] usb usb8-port1: unable to enumerate USB device [ 119.699379][ T60] hid-generic 0000:0000:0000.0004: item fetching failed at offset 0/1 [ 119.702691][ T60] hid-generic 0000:0000:0000.0004: probe with driver hid-generic failed with error -22 [ 119.884422][ T7964] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 119.886715][ T7964] IPv6: NLM_F_CREATE should be set when creating new route [ 120.565592][ T7989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.571'. [ 120.576728][ T7989] netlink: 128 bytes leftover after parsing attributes in process `syz.0.571'. [ 121.073142][ T8004] input: syz0 as /devices/virtual/input/input15 [ 121.103230][ T8004] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2834047395 (22672379160 ns) > initial count (8751802360 ns). Using initial count to start timer. [ 121.338257][ T29] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 121.489331][ T29] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 121.492059][ T29] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 121.494705][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 121.497672][ T29] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 121.501151][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 121.504346][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 121.507429][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 121.514135][ T29] usb 6-1: string descriptor 0 read error: -22 [ 121.516183][ T29] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 121.520754][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.548899][ T6700] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 121.604860][ T29] usb 6-1: config 0 descriptor?? [ 121.608254][ T29] hub 6-1:0.0: bad descriptor, ignoring hub [ 121.610431][ T29] hub 6-1:0.0: probe with driver hub failed with error -5 [ 121.693659][ T29] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input16 [ 121.717640][ T6700] usb 5-1: Using ep0 maxpacket: 32 [ 121.721177][ T6700] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 121.723615][ T6700] usb 5-1: can't read configurations, error -61 [ 121.743827][ T8032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.588'. [ 121.748497][ T8032] netlink: 128 bytes leftover after parsing attributes in process `syz.2.588'. [ 121.847709][ T6700] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 121.869921][ T8037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.875424][ T8037] netlink: 'syz.1.579': attribute type 11 has an invalid length. [ 121.878116][ T8037] netlink: 20 bytes leftover after parsing attributes in process `syz.1.579'. [ 121.890729][ T29] usb 6-1: USB disconnect, device number 12 [ 122.017727][ T6700] usb 5-1: Using ep0 maxpacket: 32 [ 122.022265][ T6700] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 122.024704][ T6700] usb 5-1: can't read configurations, error -61 [ 122.027031][ T6700] usb usb5-port1: attempt power cycle [ 122.387695][ T6700] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 122.419849][ T6700] usb 5-1: Using ep0 maxpacket: 32 [ 122.433369][ T6700] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 122.436653][ T6700] usb 5-1: can't read configurations, error -61 [ 122.560883][ T8046] lo speed is unknown, defaulting to 1000 [ 122.564443][ T8046] lo speed is unknown, defaulting to 1000 [ 122.577714][ T6700] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 122.608994][ T6700] usb 5-1: Using ep0 maxpacket: 32 [ 122.619276][ T6700] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 122.622626][ T6700] usb 5-1: can't read configurations, error -61 [ 122.626188][ T6700] usb usb5-port1: unable to enumerate USB device [ 122.708711][ T8059] netlink: 3 bytes leftover after parsing attributes in process `syz.2.591'. [ 122.727005][ T8059] batadv1: entered allmulticast mode [ 123.066447][ T8072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.599'. [ 123.070952][ T8072] netlink: 128 bytes leftover after parsing attributes in process `syz.1.599'. [ 123.451375][ T8078] kvm: kvm [8076]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 123.473684][ T8078] kvm: kvm [8076]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 123.477400][ T8078] kvm: kvm [8076]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 123.494193][ T8078] kvm_intel: kvm [8076]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 123.762657][ T29] usb 7-1: new low-speed USB device number 20 using dummy_hcd [ 123.983189][ T29] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 123.986905][ T29] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 123.991882][ T29] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 123.995811][ T29] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 124.001581][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 124.007039][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 124.013093][ T29] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 124.257655][ T8095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.606'. [ 124.257783][ T8094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.607'. [ 124.273548][ T29] usb 7-1: string descriptor 0 read error: -22 [ 124.279212][ T29] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 124.282117][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.286252][ T29] usb 7-1: config 0 descriptor?? [ 124.289323][ T29] hub 7-1:0.0: bad descriptor, ignoring hub [ 124.291413][ T29] hub 7-1:0.0: probe with driver hub failed with error -5 [ 124.295385][ T29] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input17 [ 124.550277][ T8103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.556940][ T8103] netlink: 'syz.2.601': attribute type 11 has an invalid length. [ 124.565529][ T6003] usb 7-1: USB disconnect, device number 20 [ 124.677809][ T61] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 124.837656][ T61] usb 5-1: Using ep0 maxpacket: 16 [ 124.841838][ T61] usb 5-1: config 6 has an invalid interface number: 2 but max is 1 [ 124.844687][ T61] usb 5-1: config 6 has an invalid interface number: 231 but max is 1 [ 124.847224][ T61] usb 5-1: config 6 has no interface number 0 [ 124.849319][ T61] usb 5-1: config 6 has no interface number 1 [ 124.851276][ T61] usb 5-1: config 6 interface 2 altsetting 9 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 124.855081][ T61] usb 5-1: config 6 interface 2 altsetting 9 endpoint 0x8 has invalid maxpacket 576, setting to 64 [ 124.861345][ T61] usb 5-1: config 6 interface 231 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 124.866868][ T61] usb 5-1: config 6 interface 231 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 124.871574][ T61] usb 5-1: config 6 interface 2 has no altsetting 0 [ 124.874341][ T61] usb 5-1: config 6 interface 231 has no altsetting 0 [ 124.882889][ T61] usb 5-1: New USB device found, idVendor=152d, idProduct=0583, bcdDevice= 2.9b [ 124.886170][ T61] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.894920][ T61] usb 5-1: Product: 䠊 [ 124.896760][ T61] usb 5-1: Manufacturer: 쀦ⴢﵰ膝⡨ౣ볩퍎艍퐁᫯ᦿ뚹ꟾ贼랜䃺鞆㖗⬯㵭淄㔊ྯ崑 [ 124.900938][ T61] usb 5-1: SerialNumber: syz [ 125.141182][ T8101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.150306][ T8101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.211099][ T8124] program syz.2.617 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.805607][ T61] usb-storage 5-1:6.2: USB Mass Storage device detected [ 126.024655][ T61] usb-storage 5-1:6.2: Quirks match for vid 152d pid 0583: 4000000 [ 126.077668][ T5947] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 126.088451][ T8141] __nla_validate_parse: 5 callbacks suppressed [ 126.088461][ T8141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.620'. [ 126.109377][ T8141] netlink: 128 bytes leftover after parsing attributes in process `syz.3.620'. [ 126.368799][ T61] usb-storage 5-1:6.231: USB Mass Storage device detected [ 126.373025][ T61] usb-storage 5-1:6.231: Quirks match for vid 152d pid 0583: 4000000 [ 126.490926][ T61] usb 5-1: USB disconnect, device number 11 [ 126.547739][ T5947] usb 6-1: Using ep0 maxpacket: 32 [ 126.552754][ T5947] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 126.555686][ T5947] usb 6-1: config 0 has no interface number 0 [ 126.560006][ T5947] usb 6-1: config 0 interface 12 has no altsetting 0 [ 126.572226][ T5947] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 126.575595][ T5947] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.578468][ T5947] usb 6-1: Product: syz [ 126.579982][ T5947] usb 6-1: Manufacturer: syz [ 126.581719][ T5947] usb 6-1: SerialNumber: syz [ 126.586704][ T5947] usb 6-1: config 0 descriptor?? [ 126.591122][ T5947] f81534 6-1:0.12: required endpoints missing [ 127.077846][ T61] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 127.237677][ T61] usb 8-1: Using ep0 maxpacket: 16 [ 127.241718][ T61] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 127.245003][ T61] usb 8-1: config 0 has no interface number 0 [ 127.247709][ T61] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 127.252111][ T61] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 127.257731][ T61] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 127.261301][ T61] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 127.264519][ T61] usb 8-1: Product: syz [ 127.266292][ T61] usb 8-1: SerialNumber: syz [ 127.270716][ T61] usb 8-1: config 0 descriptor?? [ 127.275564][ T61] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 127.280292][ T61] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input18 [ 127.341586][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.628'. [ 127.347288][ T8171] netlink: 128 bytes leftover after parsing attributes in process `syz.2.628'. [ 127.507689][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 127.511916][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 127.515110][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 127.518332][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 127.521356][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 127.524494][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 127.527600][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 127.530731][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 127.533848][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 127.536914][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 127.663256][ T61] ------------[ cut here ]------------ [ 127.666987][ T61] URB ffff888053264900 submitted while active [ 127.667479][ T61] WARNING: CPU: 3 PID: 61 at drivers/usb/core/urb.c:379 usb_submit_urb+0x14d5/0x1730 [ 127.667511][ T61] Modules linked in: [ 127.667613][ T61] CPU: 3 UID: 0 PID: 61 Comm: kworker/3:1 Not tainted 6.15.0-syzkaller-01958-g785cdec46e92 #0 PREEMPT(full) [ 127.667636][ T61] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 127.667650][ T61] Workqueue: usb_hub_wq hub_event [ 127.667672][ T61] RIP: 0010:usb_submit_urb+0x14d5/0x1730 [ 127.667691][ T61] Code: fd eb cb bb fe ff ff ff e9 c6 f3 ff ff e8 63 10 90 fa c6 05 d6 05 44 09 01 90 48 c7 c7 40 ae 51 8c 48 89 de e8 2c aa 4f fa 90 <0f> 0b 90 90 e9 b6 fe ff ff bb f8 ff ff ff e9 96 f3 ff ff 48 89 ef [ 127.667708][ T61] RSP: 0018:ffffc900007ceea8 EFLAGS: 00010282 [ 127.667723][ T61] RAX: 0000000000000000 RBX: ffff888053264900 RCX: ffffffff817a6848 [ 127.667736][ T61] RDX: ffff8880206d0000 RSI: ffffffff817a6855 RDI: 0000000000000001 [ 127.667747][ T61] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 127.667759][ T61] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88802337b010 [ 127.667770][ T61] R13: ffff88802337b0a0 R14: ffff88802337b050 R15: 0000000000000000 [ 127.667782][ T61] FS: 0000000000000000(0000) GS:ffff888097ab1000(0000) knlGS:0000000000000000 [ 127.667815][ T61] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.667830][ T61] CR2: 00000000f500a528 CR3: 00000000285e5000 CR4: 0000000000352ef0 [ 127.667842][ T61] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 127.667854][ T61] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 127.667866][ T61] Call Trace: [ 127.667875][ T61] [ 127.667885][ T61] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 127.667912][ T61] ? __pm_runtime_resume+0xc3/0x170 [ 127.667936][ T61] cm109_input_open+0x271/0x480 [ 127.667958][ T61] input_open_device+0x230/0x390 [ 127.667978][ T61] ? __pfx_cm109_input_open+0x10/0x10 [ 127.668001][ T61] kbd_connect+0x103/0x160 [ 127.668020][ T61] input_attach_handler.isra.0+0x184/0x260 [ 127.668046][ T61] input_register_device+0xa84/0x1130 [ 127.668083][ T61] cm109_usb_probe+0x122f/0x17c0 [ 127.668117][ T61] usb_probe_interface+0x300/0x9c0 [ 127.668147][ T61] ? __pfx_usb_probe_interface+0x10/0x10 [ 127.668174][ T61] really_probe+0x241/0xa90 [ 127.668197][ T61] __driver_probe_device+0x1de/0x440 [ 127.668219][ T61] driver_probe_device+0x4c/0x1b0 [ 127.668238][ T61] __device_attach_driver+0x1df/0x310 [ 127.668259][ T61] ? __pfx___device_attach_driver+0x10/0x10 [ 127.668275][ T61] bus_for_each_drv+0x159/0x1e0 [ 127.668301][ T61] ? __pfx_bus_for_each_drv+0x10/0x10 [ 127.668324][ T61] ? lockdep_hardirqs_on+0x7c/0x110 [ 127.668349][ T61] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 127.668377][ T61] __device_attach+0x1e4/0x4b0 [ 127.668396][ T61] ? __pfx___device_attach+0x10/0x10 [ 127.668415][ T61] ? do_raw_spin_unlock+0x172/0x230 [ 127.668444][ T61] bus_probe_device+0x17f/0x1c0 [ 127.668470][ T61] device_add+0x1148/0x1a70 [ 127.668493][ T61] ? __pfx_device_add+0x10/0x10 [ 127.668510][ T61] ? preempt_schedule_thunk+0x16/0x30 [ 127.668544][ T61] usb_set_configuration+0x1187/0x1e20 [ 127.668588][ T61] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 127.668607][ T61] usb_generic_driver_probe+0xb1/0x110 [ 127.668627][ T61] usb_probe_device+0xec/0x3e0 [ 127.668649][ T61] ? __pfx_usb_probe_device+0x10/0x10 [ 127.668673][ T61] really_probe+0x241/0xa90 [ 127.668695][ T61] __driver_probe_device+0x1de/0x440 [ 127.668712][ T61] ? usb_driver_applicable+0x1c7/0x220 [ 127.668740][ T61] driver_probe_device+0x4c/0x1b0 [ 127.668759][ T61] __device_attach_driver+0x1df/0x310 [ 127.668780][ T61] ? __pfx___device_attach_driver+0x10/0x10 [ 127.668797][ T61] bus_for_each_drv+0x159/0x1e0 [ 127.668822][ T61] ? __pfx_bus_for_each_drv+0x10/0x10 [ 127.668848][ T61] ? lockdep_hardirqs_on+0x7c/0x110 [ 127.668872][ T61] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 127.668900][ T61] __device_attach+0x1e4/0x4b0 [ 127.668919][ T61] ? __pfx___device_attach+0x10/0x10 [ 127.668939][ T61] ? do_raw_spin_unlock+0x172/0x230 [ 127.668969][ T61] bus_probe_device+0x17f/0x1c0 [ 127.668995][ T61] device_add+0x1148/0x1a70 [ 127.669019][ T61] ? __pfx_device_add+0x10/0x10 [ 127.669037][ T61] ? add_device_randomness+0xb7/0xf0 [ 127.669061][ T61] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 127.669096][ T61] usb_new_device+0xd07/0x1a20 [ 127.669123][ T61] ? do_raw_spin_lock+0x12c/0x2b0 [ 127.669146][ T61] ? __pfx_usb_new_device+0x10/0x10 [ 127.669170][ T61] ? mark_held_locks+0x49/0x80 [ 127.669195][ T61] hub_event+0x2eb7/0x4fa0 [ 127.669249][ T61] ? __pfx_hub_event+0x10/0x10 [ 127.669271][ T61] ? debug_object_deactivate+0x1ec/0x3a0 [ 127.669308][ T61] ? rcu_is_watching+0x12/0xc0 [ 127.669338][ T61] process_one_work+0x9cf/0x1b70 [ 127.669371][ T61] ? __pfx_hcd_resume_work+0x10/0x10 [ 127.669396][ T61] ? __pfx_process_one_work+0x10/0x10 [ 127.669426][ T61] ? assign_work+0x1a0/0x250 [ 127.669451][ T61] worker_thread+0x6c8/0xf10 [ 127.669490][ T61] ? __pfx_worker_thread+0x10/0x10 [ 127.669515][ T61] kthread+0x3c2/0x780 [ 127.669539][ T61] ? __pfx_kthread+0x10/0x10 [ 127.669559][ T61] ? __pfx_kthread+0x10/0x10 [ 127.669580][ T61] ? __pfx_kthread+0x10/0x10 [ 127.669600][ T61] ? __pfx_kthread+0x10/0x10 [ 127.669621][ T61] ? rcu_is_watching+0x12/0xc0 [ 127.669647][ T61] ? __pfx_kthread+0x10/0x10 [ 127.669670][ T61] ret_from_fork+0x48/0x80 [ 127.669690][ T61] ? __pfx_kthread+0x10/0x10 [ 127.669713][ T61] ret_from_fork_asm+0x1a/0x30 [ 127.669745][ T61] [ 127.669755][ T61] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 127.669767][ T61] CPU: 3 UID: 0 PID: 61 Comm: kworker/3:1 Not tainted 6.15.0-syzkaller-01958-g785cdec46e92 #0 PREEMPT(full) [ 127.669787][ T61] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 127.669834][ T61] Workqueue: usb_hub_wq hub_event [ 127.669854][ T61] Call Trace: [ 127.669861][ T61] [ 127.669868][ T61] dump_stack_lvl+0x3d/0x1f0 [ 127.669894][ T61] panic+0x71c/0x800 [ 127.669916][ T61] ? __pfx_panic+0x10/0x10 [ 127.669939][ T61] ? show_trace_log_lvl+0x29b/0x3e0 [ 127.669971][ T61] ? check_panic_on_warn+0x1f/0xb0 [ 127.669995][ T61] ? usb_submit_urb+0x14d5/0x1730 [ 127.670013][ T61] check_panic_on_warn+0xab/0xb0 [ 127.670037][ T61] __warn+0xf6/0x3c0 [ 127.670058][ T61] ? usb_submit_urb+0x14d5/0x1730 [ 127.670081][ T61] report_bug+0x3c3/0x580 [ 127.670105][ T61] ? usb_submit_urb+0x14d5/0x1730 [ 127.670123][ T61] handle_bug+0x184/0x210 [ 127.670150][ T61] exc_invalid_op+0x17/0x50 [ 127.670166][ T61] asm_exc_invalid_op+0x1a/0x20 [ 127.670184][ T61] RIP: 0010:usb_submit_urb+0x14d5/0x1730 [ 127.670201][ T61] Code: fd eb cb bb fe ff ff ff e9 c6 f3 ff ff e8 63 10 90 fa c6 05 d6 05 44 09 01 90 48 c7 c7 40 ae 51 8c 48 89 de e8 2c aa 4f fa 90 <0f> 0b 90 90 e9 b6 fe ff ff bb f8 ff ff ff e9 96 f3 ff ff 48 89 ef [ 127.670217][ T61] RSP: 0018:ffffc900007ceea8 EFLAGS: 00010282 [ 127.670231][ T61] RAX: 0000000000000000 RBX: ffff888053264900 RCX: ffffffff817a6848 [ 127.670242][ T61] RDX: ffff8880206d0000 RSI: ffffffff817a6855 RDI: 0000000000000001 [ 127.670253][ T61] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 127.670264][ T61] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88802337b010 [ 127.670274][ T61] R13: ffff88802337b0a0 R14: ffff88802337b050 R15: 0000000000000000 [ 127.670294][ T61] ? __warn_printk+0x198/0x350 [ 127.670314][ T61] ? __warn_printk+0x1a5/0x350 [ 127.670337][ T61] ? usb_submit_urb+0x14d4/0x1730 [ 127.670355][ T61] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 127.670378][ T61] ? __pm_runtime_resume+0xc3/0x170 [ 127.670400][ T61] cm109_input_open+0x271/0x480 [ 127.670421][ T61] input_open_device+0x230/0x390 [ 127.670440][ T61] ? __pfx_cm109_input_open+0x10/0x10 [ 127.670463][ T61] kbd_connect+0x103/0x160 [ 127.670481][ T61] input_attach_handler.isra.0+0x184/0x260 [ 127.670506][ T61] input_register_device+0xa84/0x1130 [ 127.670532][ T61] cm109_usb_probe+0x122f/0x17c0 [ 127.670564][ T61] usb_probe_interface+0x300/0x9c0 [ 127.670592][ T61] ? __pfx_usb_probe_interface+0x10/0x10 [ 127.670618][ T61] really_probe+0x241/0xa90 [ 127.670639][ T61] __driver_probe_device+0x1de/0x440 [ 127.670659][ T61] driver_probe_device+0x4c/0x1b0 [ 127.670678][ T61] __device_attach_driver+0x1df/0x310 [ 127.670697][ T61] ? __pfx___device_attach_driver+0x10/0x10 [ 127.670713][ T61] bus_for_each_drv+0x159/0x1e0 [ 127.670738][ T61] ? __pfx_bus_for_each_drv+0x10/0x10 [ 127.670763][ T61] ? lockdep_hardirqs_on+0x7c/0x110 [ 127.670786][ T61] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 127.670813][ T61] __device_attach+0x1e4/0x4b0 [ 127.670831][ T61] ? __pfx___device_attach+0x10/0x10 [ 127.670849][ T61] ? do_raw_spin_unlock+0x172/0x230 [ 127.670878][ T61] bus_probe_device+0x17f/0x1c0 [ 127.670908][ T61] device_add+0x1148/0x1a70 [ 127.670931][ T61] ? __pfx_device_add+0x10/0x10 [ 127.670950][ T61] ? preempt_schedule_thunk+0x16/0x30 [ 127.670982][ T61] usb_set_configuration+0x1187/0x1e20 [ 127.671025][ T61] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 127.671043][ T61] usb_generic_driver_probe+0xb1/0x110 [ 127.671062][ T61] usb_probe_device+0xec/0x3e0 [ 127.671087][ T61] ? __pfx_usb_probe_device+0x10/0x10 [ 127.671110][ T61] really_probe+0x241/0xa90 [ 127.671131][ T61] __driver_probe_device+0x1de/0x440 [ 127.671145][ T61] ? usb_driver_applicable+0x1c7/0x220 [ 127.671170][ T61] driver_probe_device+0x4c/0x1b0 [ 127.671188][ T61] __device_attach_driver+0x1df/0x310 [ 127.671207][ T61] ? __pfx___device_attach_driver+0x10/0x10 [ 127.671223][ T61] bus_for_each_drv+0x159/0x1e0 [ 127.671246][ T61] ? __pfx_bus_for_each_drv+0x10/0x10 [ 127.671269][ T61] ? lockdep_hardirqs_on+0x7c/0x110 [ 127.671292][ T61] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 127.671318][ T61] __device_attach+0x1e4/0x4b0 [ 127.671335][ T61] ? __pfx___device_attach+0x10/0x10 [ 127.671353][ T61] ? do_raw_spin_unlock+0x172/0x230 [ 127.671381][ T61] bus_probe_device+0x17f/0x1c0 [ 127.671410][ T61] device_add+0x1148/0x1a70 [ 127.671433][ T61] ? __pfx_device_add+0x10/0x10 [ 127.671453][ T61] ? add_device_randomness+0xb7/0xf0 [ 127.671476][ T61] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 127.671507][ T61] usb_new_device+0xd07/0x1a20 [ 127.671534][ T61] ? do_raw_spin_lock+0x12c/0x2b0 [ 127.671556][ T61] ? __pfx_usb_new_device+0x10/0x10 [ 127.671579][ T61] ? mark_held_locks+0x49/0x80 [ 127.671603][ T61] hub_event+0x2eb7/0x4fa0 [ 127.671657][ T61] ? __pfx_hub_event+0x10/0x10 [ 127.671678][ T61] ? debug_object_deactivate+0x1ec/0x3a0 [ 127.671715][ T61] ? rcu_is_watching+0x12/0xc0 [ 127.671744][ T61] process_one_work+0x9cf/0x1b70 [ 127.671777][ T61] ? __pfx_hcd_resume_work+0x10/0x10 [ 127.671801][ T61] ? __pfx_process_one_work+0x10/0x10 [ 127.671834][ T61] ? assign_work+0x1a0/0x250 [ 127.671860][ T61] worker_thread+0x6c8/0xf10 [ 127.671896][ T61] ? __pfx_worker_thread+0x10/0x10 [ 127.671919][ T61] kthread+0x3c2/0x780 [ 127.671941][ T61] ? __pfx_kthread+0x10/0x10 [ 127.671961][ T61] ? __pfx_kthread+0x10/0x10 [ 127.671980][ T61] ? __pfx_kthread+0x10/0x10 [ 127.672000][ T61] ? __pfx_kthread+0x10/0x10 [ 127.672021][ T61] ? rcu_is_watching+0x12/0xc0 [ 127.672046][ T61] ? __pfx_kthread+0x10/0x10 [ 127.672067][ T61] ret_from_fork+0x48/0x80 [ 127.672092][ T61] ? __pfx_kthread+0x10/0x10 [ 127.672114][ T61] ret_from_fork_asm+0x1a/0x30 [ 127.672144][ T61] [ 127.672885][ T61] Kernel Offset: disabled VM DIAGNOSIS: 13:07:19 Registers: info registers vcpu 0 CPU#0 RAX=0000000000010000 RBX=0000000000000000 RCX=ffffffff815fd7c0 RDX=ffff88802781a440 RSI=ffffffff815fd808 RDI=ffffffff93ac1040 RBP=0000000000000000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff2758208 R10=ffffffff93ac1047 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff815fd809 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977b1000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f4fecda4 CR3=000000001c38d000 CR4=00350ef0 DR0=0000000000000008 DR1=00000000000000ff DR2=fffffffffffffffb DR3=3e00000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff815fd7c0 RDX=ffff888025d72440 RSI=ffffffff815fd808 RDI=ffffffff93ac1040 RBP=0000000000000001 RSP=ffffc90000590fd0 R8 =0000000000000001 R9 =fffffbfff2758208 R10=ffffffff93ac1047 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff815fd809 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880978b1000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008003f000 CR3=00000000285e5000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff815fd7c0 RDX=ffff888020114880 RSI=ffffffff815fd808 RDI=ffffffff93ac1040 RBP=0000000000000002 RSP=ffffc90000538fd0 R8 =0000000000000001 R9 =fffffbfff2758208 R10=ffffffff93ac1047 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff815fd809 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979b1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f4be9da4 CR3=000000000e180000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8552de85 RDI=ffffffff9ae1bc40 RBP=ffffffff9ae1bc00 RSP=ffffc900007ce8f8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9ae1bc00 R15=ffffffff8552de20 RIP=ffffffff8552deaf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097ab1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f500a528 CR3=00000000285e5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000012000000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000