last executing test programs: 8m15.930093524s ago: executing program 2 (id=255): socket$tipc(0x1e, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000280), r7) getsockname$packet(r7, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x34, r6, 0x209, 0x40, 0x1000000, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_IFINDEX={0x8, 0xb, r8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008080}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/18, @ANYRES32=r9], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_GATEWAY={0x14, 0x6, @ip4=@local}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) 8m13.951846256s ago: executing program 2 (id=258): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x27, 0x3, 0xffffffff) socket$unix(0x1, 0x5, 0x0) socket$kcm(0xa, 0x1, 0x106) r1 = getpgid(0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0x80000300, 0x0, 0x0) quotactl_fd$Q_GETINFO(r4, 0xffffffff80000500, 0x0, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) memfd_create(&(0x7f00000003c0)='%\x00\xae\xdb\xb8\x18\xc1\xecWbNO\xde^\xff\x19\x17QE{*X\xe3\xe2\x06\x00\x00\x00\xcc\xf6\xc0H\xa2\x83?\xe7\x89*\xf1\xc5b\v\xec\xe4\xb0\xa2\xc5\xee\x04\x98\xa9\xb9\xe5\x8c\xc3\x97B\xaa+\xf2o\xf6k\xcc\xf7\x057\x8d\xb1\xa0\x86\xe8\xda\x90\xc2\x1e\x15\x11\x92\x9d\xc1M\xe5@\v\x001\xae\x19$\xf8\x96\x81\xcbR\xae`\xd3\xf8_R~7\xf5\x1c\xc8\xf9\xe2z\x00<\xdc\x11\x89\xc9&f\x00\x00\x00\xe2\x83\xf1\x0eg\a\xec\xac\xa5\x94~v\x80P5\xf9/$', 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x8, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe4) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 8m12.664078516s ago: executing program 2 (id=262): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001740)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYBLOB, @ANYRESDEC=r0, @ANYRES16, @ANYBLOB="00d04a4c5d79580b69dc9d4ac8", @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xc, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x60, 0x6, 0x0, 0xb, 0x100, 0x3, 0x3e, 0x9, 0x382, 0x34, 0x2b9, 0x6, 0xcbf4, 0x20, 0x3, 0x1ff, 0x9}, [{0x3, 0xb, 0xe4, 0xfffffffe, 0x4, 0xa5, 0x6f8a, 0x80000000}, {0x2, 0x1000, 0xfffffffa, 0x7, 0x9, 0xc, 0x4, 0x6}, {0x7, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x74f00000}], "d7fc44ada7c138281c631c98eab99f490d11a83f88b9638a6ac80ee55534240e3730757b763344d2453d606378a65ee67d24d058b41c4a66696350c9f9f764338edb6d642b50e5f1a2f3b6492bfae22323a73c2a5015609c7010d89f7cf094dcf7f9fc984248a5bbc69856ec22723c1cbd4d9e8a98fd1010"}, 0x10c) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) io_submit(r1, 0x1a, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x1a000}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) syz_io_uring_setup(0x43d2, &(0x7f0000000080)={0x0, 0x3670, 0x10100, 0x2, 0x4}, &(0x7f0000000100), &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 8m11.299358417s ago: executing program 2 (id=269): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, 0x0) socket$inet6(0xa, 0x80001, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0301, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x3, @local}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x1) close(r2) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@local}, 0x400, "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"}, 0x418, 0x7fffffff}) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_ethernet(0x32, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 8m10.422243347s ago: executing program 2 (id=272): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x5, &(0x7f0000000200)=0x6) mmap(&(0x7f00007ac000/0x4000)=nil, 0x4000, 0xb635773f06ebbeef, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdir(&(0x7f0000000340)='./file0\x00', 0xc1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) acct(&(0x7f0000000380)='./file0\x00') geteuid() socket(0x10, 0x3, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x0, 0x8000}, 0x3c) 8m10.038271087s ago: executing program 2 (id=276): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x74, r3, {}, {0x2}, {0x0, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8041}, 0x4010) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) 7m54.744455144s ago: executing program 32 (id=276): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x74, r3, {}, {0x2}, {0x0, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8041}, 0x4010) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) 10.34950196s ago: executing program 3 (id=1455): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)) r6 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000440)={'broute\x00', 0x0, 0x4, 0xbb, [0x0, 0x863, 0xec0c, 0x200, 0x5, 0x3], 0xa, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000380)=""/187}, &(0x7f0000000040)=0x50) r7 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) r8 = syz_io_uring_setup(0xf90, &(0x7f0000000300)={0x0, 0x77e5, 0x800, 0x3, 0x400019}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x4c8}}) io_uring_enter(r8, 0x7ffa, 0xba1c, 0x4c, 0x0, 0x0) 8.915370182s ago: executing program 3 (id=1458): r0 = socket$netlink(0x10, 0x3, 0x9) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x7800, 0x0, 0xf7d, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3ff, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) socket$inet_udp(0x2, 0x2, 0x0) r2 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2fdfffffd}, 0xc) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r6, 0x802c550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0xa3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x801, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140), 0x0) r8 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x2, 0x7fffffff, 0x84e1, 0x82e, 0x0, 0x3, 0x8, 0x80ffe, 0x80001, 0x2, 0x8500, 0x1003, 0x1000004, 0xe, 0xffff, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x8, 0x10, 0x40000, 0x8, 0xe2df, 0x746f, 0x8, 0x5, 0x8, 0x2f00, 0x4, 0x7fff]}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[0xffffffffffffffff]}, 0x80) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2}, 0x38) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) close_range(r9, 0xffffffffffffffff, 0x0) 8.071748151s ago: executing program 1 (id=1460): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180200000a00000000000000fdffffffd40a000020000002950000000000000022d70825872c21cf77be7770506e540c51b814d1f9f87e3a8d7d202d0b94e7dfdd181ef9a9350e02c743b95852af59162444d862e4951aea9c65"], &(0x7f0000000280)='GPL\x00', 0x7}, 0x94) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) r6 = openat$rdma_cm(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r6, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000100), 0x7, {0xa, 0x4e22, 0x8, @private1, 0xa51}, r7}}, 0x38) socket$packet(0x11, 0x3, 0x300) 7.970896328s ago: executing program 3 (id=1461): memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x9}, 0x8) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100), 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c0000000800040001"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000300)={'comedi_parport\x00', [0x800, 0x1f, 0x10000, 0x4, 0x3, 0xcc7, 0x4, 0x10, 0xe, 0x6, 0x2, 0x2, 0x7, 0x1, 0x6, 0x10000105, 0x0, 0x1244d, 0x3, 0x3fff7fff, 0x89, 0x10, 0x1, 0x20001e58, 0x80000b, 0xe6c, 0x8, 0x8, 0x6, 0xffffffff, 0xeffffff8]}) 7.832369401s ago: executing program 0 (id=1462): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x20000000, 0x40800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000380)={r6, 0x0, 0x1ff, 0x0, 0x0, [0x0], [0x9, 0x0, 0x0, 0x8], [0x3, 0x20000000, 0x100, 0xd], [0x1000010000000, 0x0, 0x7fffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) r9 = socket$inet6(0xa, 0x80001, 0x0) r10 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r10, &(0x7f0000002440)=""/116, 0x74) setsockopt$inet6_group_source_req(r9, 0x29, 0x2f, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0xfffffffe}}, {{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x100b}}}, 0x108) ioctl$SNDCTL_TMR_START(r0, 0x5402) 6.921628998s ago: executing program 3 (id=1465): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000240), 0x9) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x1, 0x0, 0x3f) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES64=r0], &(0x7f00000005c0)='syzkaller\x00', 0xffffffff}, 0x94) writev(r2, &(0x7f0000000140)=[{&(0x7f00000009c0)="53514a0d7ebd", 0x6}], 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r4, &(0x7f0000000040)="14000000140005b7ffccca38b9000000010860eb", 0x14) mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)={[{@metacopy_on}, {@uuid_on}, {@uuid_off}, {@metacopy_off}], [{@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0xf6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}], 0x1c) setsockopt(r5, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) recvmsg(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x10800, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) io_setup(0x1, &(0x7f0000002500)) r6 = syz_io_uring_setup(0x300b, &(0x7f0000000440)={0x0, 0xfffffffe, 0x2f108d13ed778acf}, &(0x7f0000000400), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x17, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) 6.887382595s ago: executing program 0 (id=1466): socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ppp(0xffffffffffffff9c, &(0x7f0000000b40), 0x600, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r0 = gettid() ioprio_get$pid(0x2, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5, 0x0, 0x800}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r5, 0x0, 0x40c4) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r6, &(0x7f0000003440)={0x2020}, 0x2020) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) 6.584233706s ago: executing program 1 (id=1467): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000001c0)}, {0x0}], 0x2) mknod$loop(0x0, 0x0, 0x1) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) r3 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, 0x0) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) r6 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r6, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x8000, 0x0, 0x0, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2000c450) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="3000000042000701feffffff00000000017c0000040042800c000180060006"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 6.223868488s ago: executing program 4 (id=1468): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(0xffffffffffffffff, 0xe503, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r4, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x4, 0x4, 0x36c, 0xffffffff, 0x0, 0x1d8, 0xc8, 0xfeffffff, 0xffffffff, 0x2a4, 0x2a4, 0x2a4, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@ipv6header={{0x24}, {0x84}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x41, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffff00], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'vcan0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3cf) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0x3) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setattr(0x0, &(0x7f0000000500)={0x38, 0x0, 0x4, 0x5, 0xea05, 0x3ff, 0x0, 0x400, 0x4ce1}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000000, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed9b, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x100, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) 5.816812317s ago: executing program 3 (id=1469): r0 = socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000035c0)=@base={0x4, 0x7, 0x4, 0x6, 0x4101, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x2000000b, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x54000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd0, &(0x7f0000000040)=0x8, 0x4) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000340)=0x10001) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x8, &(0x7f0000000180)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0x8}, 0x94) getsockname$unix(r0, &(0x7f0000000480), &(0x7f0000000400)=0x6e) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 5.533330266s ago: executing program 1 (id=1470): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141040, 0x42) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0xc80, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x8000000000000000) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc}) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_buf(r4, 0x29, 0x1f, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x100, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f0000000040)={0x10000000, 0x8, 0x3}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7000000}}], 0x1, 0x8000) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) socket$netlink(0x10, 0x3, 0x10) r7 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f00000014c0)=0x60, 0x4) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 5.076349264s ago: executing program 1 (id=1471): syz_open_dev$video(0x0, 0x7efffffe, 0x101302) socket(0x2a, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x4}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4.430277103s ago: executing program 4 (id=1472): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c800}, 0x0) openat$cuse(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x20) lseek(r2, 0x1, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r3, 0x5452, &(0x7f0000000100)={'veth1\x00'}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000002c80)=""/4096, 0xca, 0x1000, 0x0, 0x1ff, 0x10000, @value=r2}, 0x28) mount$9p_virtio(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) ftruncate(r4, 0x5) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) 3.249492754s ago: executing program 3 (id=1473): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x3) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000ea01020000000900010073797a3200000000090001008a797ab0000000000900030073797a32000000000900010073797a32000000000900030073797a32000000"], 0x70}}, 0x20000800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r3, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000940), 0x0, 0x72, &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0xe7, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c40)={'ip6gre0\x00', &(0x7f0000000bc0)={'syztnl1\x00', 0x0, 0x4, 0x3, 0xf9, 0x7, 0x5c, @private1, @empty, 0x8000, 0x40, 0x7, 0x1}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c80)={0xe4, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24}, 0x4) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0x8008330e, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000000c0), 0x4) syz_80211_join_ibss(&(0x7f0000000340)='wlan0\x00', &(0x7f0000000400)=@default_ibss_ssid, 0x6, 0x0) tgkill(r0, r0, 0x25) 3.146150036s ago: executing program 0 (id=1474): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000180)) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r2, 0x89a3, &(0x7f0000000200)='bridge0\x00') 2.853316456s ago: executing program 4 (id=1475): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000008, 0x810, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f00000fe000/0xd000)=nil, 0xd000, 0x1000005, 0xd2952, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f000083b000/0x1000)=nil, 0x1000, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x2}, 0xc) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) socket(0x15, 0x80002, 0xff) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) eventfd(0x80000001) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'wlan0\x00', &(0x7f0000000300)=@ethtool_sset_info={0x37, 0xff, 0xfffffffffffffffa}}) 2.800661513s ago: executing program 1 (id=1483): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000180)) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r6, 0x89a3, &(0x7f0000000200)='bridge0\x00') 1.950328324s ago: executing program 4 (id=1476): syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f00000002c0)="00154e", &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xa33ba000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r4 = openat$tun(0xffffff9c, &(0x7f00000000c0), 0x4c000, 0x0) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000100)=r0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum64={0xc, 0x0, 0x0, 0x13, 0x0, 0x2}]}}, 0x0, 0x26, 0x0, 0x100001, 0x8000}, 0x28) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_emit_vhci(&(0x7f0000000d40)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_read_inq_rsp_tx_power={{}, {0x6, 0x3}}}}, 0x8) 1.940373973s ago: executing program 0 (id=1485): socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000008, 0x810, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f00000fe000/0xd000)=nil, 0xd000, 0x1000005, 0xd2952, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f000083b000/0x1000)=nil, 0x1000, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) socket(0x15, 0x80002, 0xff) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) 1.028416472s ago: executing program 0 (id=1477): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0xf3, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x20000000000000}) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=@newtaction={0x18, 0x30, 0x9, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r6, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c) 395.922519ms ago: executing program 4 (id=1478): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x74, r4, {}, {0x2}, {0x0, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8041}, 0x4010) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_io_uring_complete(0x0) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="340e000000b401001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r12], 0x3c}}, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r8, 0x84, 0x8, &(0x7f0000000040)=0x9, 0x4) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r6, @ANYBLOB], 0x70}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r8, 0x20, &(0x7f0000000380)={&(0x7f0000000400)=""/194, 0xc2, 0x0, &(0x7f0000000300)=""/101, 0x65}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1d, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x7347}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffff835}, @alu={0x4, 0x1, 0xb, 0x6, 0x1, 0xfffffffffffffffe}, @map_fd={0x18, 0x0, 0x1, 0x0, r8}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x6}, @jmp={0x5, 0x0, 0x4, 0x1, 0x0, 0x0, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000100)='GPL\x00', 0xffffff01, 0x52, &(0x7f0000000200)=""/82, 0x41100, 0x8, '\x00', r6, @lsm=0x1b, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x0, 0x22}, 0x10, r13, 0xffffffffffffffff, 0x6, &(0x7f0000000540)=[r8, r8, r8, r5], &(0x7f0000000580)=[{0x5, 0x4, 0xa, 0xb}, {0x4, 0x4, 0x9, 0x6}, {0x3, 0x2, 0xc, 0x9}, {0x3, 0x3, 0x6}, {0x0, 0x2, 0xf, 0xa}, {0x3, 0x4, 0x0, 0x1}], 0x10, 0x1}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@getchain={0x34, 0x11, 0x839, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x7}, {0x3}}, [{0x8, 0xb, 0xb60}, {0x8, 0xb, 0x2}]}, 0x34}}, 0x0) 393.792457ms ago: executing program 1 (id=1479): socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x80000000, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7c, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x8003, &(0x7f0000000080)=0x9, 0x7, 0x2) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r4, &(0x7f00000004c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @default}, 0x1c) r5 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) sendto$inet6(r5, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000640)=0x5, 0x21) sendto$inet6(r5, 0x0, 0x0, 0x4010, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="0ee22b92069b2a2dfaa46c88ed", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce2d715f2828290a9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @typed={0x14, 0xf9, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0xe0}], 0x1}, 0x40040) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 53.625195ms ago: executing program 0 (id=1480): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00890600000000000000000000000088a8140081002b0086dd6900040000082c"], 0x4a) unlink(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x200a00, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000080)={0x0, {0x1, 0xffffffff}}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r7, 0x540a, 0x0) ioctl$TCFLSH(r7, 0x400455c8, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) 0s ago: executing program 4 (id=1481): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000180)) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r6, 0x89a3, &(0x7f0000000200)='bridge0\x00') kernel console output (not intermixed with test programs): d USB device number 16 using vhci_hcd [ 452.167379][T11755] vhci_hcd: connection reset by peer [ 452.169993][ T12] vhci_hcd vhci_hcd.1: stop threads [ 452.172275][ T12] vhci_hcd vhci_hcd.1: release socket [ 452.174639][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 452.287156][T11761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.991'. [ 452.291942][T11761] syzkaller1: entered promiscuous mode [ 452.294209][T11761] syzkaller1: entered allmulticast mode [ 452.297886][T11761] program syz.0.991 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 452.486921][ T1113] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 452.489409][ T1113] ata1.00: irq_stat 0x40000000 [ 452.491048][ T1113] ata1.00: failed command: ZAC MANAGEMENT OUT [ 452.506553][ T10] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 452.587475][ T1113] ata1.00: cmd 9f/02:00:00:00:00/00:00:00:00:00/40 tag 2 [ 452.587475][ T1113] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 452.594601][ T1113] ata1.00: status: { DRDY ERR } [ 452.606576][ T1113] ata1.00: error: { ABRT } [ 452.608512][ T1113] ata1.00: device reported invalid CHS sector 0 [ 453.477662][ T9] usb 8-1: USB disconnect, device number 11 [ 453.552934][ T60] usb 46-1: device descriptor read/8, error -110 [ 453.564733][T11775] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 453.567255][T11775] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 453.577249][T11775] vhci_hcd vhci_hcd.0: Device attached [ 453.957294][ T60] usb usb46-port1: attempt power cycle [ 454.004959][T11776] vhci_hcd: connection closed [ 454.005201][ T62] vhci_hcd vhci_hcd.1: stop threads [ 454.009632][ T62] vhci_hcd vhci_hcd.1: release socket [ 454.012192][ T62] vhci_hcd vhci_hcd.1: disconnect device [ 454.133570][T11780] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2917181284/2917181286 [ 454.138658][T11780] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2917181284/2917181286 [ 454.141884][T11780] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2917181284/2917181286 [ 454.231218][T11780] loop2: detected capacity change from 0 to 7 [ 454.238885][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 454.242901][ C0] buffer_io_error: 40 callbacks suppressed [ 454.242913][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 454.249540][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 454.253207][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 454.256060][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 454.260181][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 454.263165][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 454.267184][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 454.271489][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 454.274498][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 454.277210][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 454.280343][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 454.283908][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 454.287037][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 454.290442][ T5943] ldm_validate_partition_table(): Disk read failed. [ 454.295370][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 454.295703][T11786] comedi comedi0: dt2815: I/O port conflict (0x4f27,2) [ 454.299594][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 454.309019][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 454.312892][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 454.320153][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 454.323391][T11787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1003'. [ 454.323654][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 454.331480][ T5943] Dev loop2: unable to read RDB block 0 [ 454.334196][ T5943] loop2: unable to read partition table [ 454.336285][ T5943] loop2: partition table beyond EOD, truncated [ 454.916680][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 455.080857][T11780] ldm_validate_partition_table(): Disk read failed. [ 455.095235][T11780] Dev loop2: unable to read RDB block 0 [ 455.101720][T11780] loop2: unable to read partition table [ 455.106793][T11780] loop2: partition table beyond EOD, truncated [ 455.109506][T11780] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 455.316968][ T60] usb usb46-port1: unable to enumerate USB device [ 455.483154][T11797] bridge0: port 3(erspan0) entered blocking state [ 455.485311][T11797] bridge0: port 3(erspan0) entered disabled state [ 455.488663][T11797] bridge0: port 3(erspan0) entered blocking state [ 455.490774][T11797] bridge0: port 3(erspan0) entered forwarding state [ 455.495464][T11797] bridge0: port 3(erspan0) entered disabled state [ 456.621970][T11815] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.653253][T11810] ceph: No mds server is up or the cluster is laggy [ 456.656328][T11815] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 456.854863][ T6002] libceph: connect (1)[c::]:6789 error -101 [ 456.857238][ T6002] libceph: mon0 (1)[c::]:6789 connect error [ 456.907723][T11817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1001'. [ 456.911075][T11817] syzkaller1: entered promiscuous mode [ 456.912896][T11817] syzkaller1: entered allmulticast mode [ 456.916038][T11817] program syz.1.1001 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 456.976827][ T1113] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 456.980027][ T1113] ata1.00: irq_stat 0x40000000 [ 456.982077][ T1113] ata1.00: failed command: ZAC MANAGEMENT OUT [ 456.984660][ T1113] ata1.00: cmd 9f/02:00:00:00:00/00:00:00:00:00/40 tag 17 [ 456.984660][ T1113] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 456.991910][ T1113] ata1.00: status: { DRDY ERR } [ 456.994022][ T1113] ata1.00: error: { ABRT } [ 456.995955][ T1113] ata1.00: device reported invalid CHS sector 0 [ 457.606543][ T7885] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 457.610875][T11816] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 457.613785][T11816] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 457.620997][T11816] vhci_hcd vhci_hcd.0: Device attached [ 457.678666][T11829] loop2: detected capacity change from 0 to 7 [ 457.690983][T11829] Dev loop2: unable to read RDB block 7 [ 457.696248][T11829] loop2: unable to read partition table [ 457.699425][T11829] loop2: partition table beyond EOD, truncated [ 457.714313][T11829] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 457.753990][T11816] netlink: 'syz.3.1002': attribute type 1 has an invalid length. [ 457.772285][T11816] 8021q: adding VLAN 0 to HW filter on device bond17 [ 457.866574][ T60] usb 43-1: new low-speed USB device number 15 using vhci_hcd [ 458.218357][T11827] vhci_hcd: connection reset by peer [ 458.225906][ T6020] libceph: connect (1)[c::]:6789 error -101 [ 458.228101][ T6020] libceph: mon0 (1)[c::]:6789 connect error [ 458.230325][ T88] vhci_hcd vhci_hcd.3: stop threads [ 458.233264][ T88] vhci_hcd vhci_hcd.3: release socket [ 458.249038][ T88] vhci_hcd vhci_hcd.3: disconnect device [ 458.265650][T11830] ceph: No mds server is up or the cluster is laggy [ 458.292861][T11832] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.296724][T11832] dummy0: left promiscuous mode [ 458.298837][T11832] dummy0: left allmulticast mode [ 458.378298][T11832] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 458.918308][ T1164] usb usb40-port1: attempt power cycle [ 459.486986][ T1164] usb usb40-port1: unable to enumerate USB device [ 459.592239][T11844] ntfs3(nullb0): Primary boot signature is not NTFS. [ 459.594837][T11844] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 459.842385][T11858] 8021q: adding VLAN 0 to HW filter on device bond18 [ 459.927350][T11858] bond0: (slave bond18): Enslaving as an active interface with a down link [ 459.936862][T11861] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1011'. [ 459.947122][T11858] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1011'. [ 459.957595][T11858] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1011'. [ 461.846859][T11874] IPv6: NLM_F_REPLACE set, but no existing node found! [ 462.364981][T11891] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1015'. [ 462.418422][T11892] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1015'. [ 462.471653][T11893] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1015'. [ 462.495577][T11884] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1016'. [ 462.741816][T11888] 8021q: adding VLAN 0 to HW filter on device bond16 [ 462.746340][T11888] bond0: (slave bond16): Enslaving as an active interface with a down link [ 463.177103][ T60] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 463.745259][T11897] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 463.747940][T11897] overlayfs: failed to set xattr on upper [ 463.749835][T11897] overlayfs: ...falling back to redirect_dir=nofollow. [ 463.752065][T11897] overlayfs: ...falling back to index=off. [ 463.753925][T11897] overlayfs: ...falling back to uuid=null. [ 463.798906][T11898] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 463.869863][ T40] audit: type=1326 audit(1769686678.533:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11894 comm="syz.3.1019" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x0 [ 464.266584][T11910] hpfs: hpfs_map_sector(): read error [ 466.479955][T11936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1024'. [ 466.538331][T11937] program syz.4.1024 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 467.056786][T11941] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1026'. [ 467.074994][T11927] 8021q: adding VLAN 0 to HW filter on device bond18 [ 467.089636][T11927] bond0: (slave bond18): Enslaving as an active interface with a down link [ 467.097234][T11936] syzkaller1: entered promiscuous mode [ 467.099547][T11936] syzkaller1: entered allmulticast mode [ 467.144769][T11927] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1026'. [ 467.195753][T11941] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1026'. [ 467.247378][ T1113] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 467.250365][ T1113] ata1.00: irq_stat 0x40000000 [ 467.252144][ T1113] ata1.00: failed command: ZAC MANAGEMENT OUT [ 467.254452][ T1113] ata1.00: cmd 9f/02:00:00:00:00/00:00:00:00:00/40 tag 24 [ 467.254452][ T1113] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 467.266691][ T1113] ata1.00: status: { DRDY ERR } [ 467.268719][ T1113] ata1.00: error: { ABRT } [ 467.270294][ T1113] ata1.00: device reported invalid CHS sector 0 [ 467.668234][T11934] ntfs3(nullb0): Primary boot signature is not NTFS. [ 467.671208][T11934] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 467.821525][T11953] siw: device registration error -23 [ 467.874311][T11952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1036'. [ 467.879537][T11952] syzkaller1: entered promiscuous mode [ 467.881871][T11952] syzkaller1: entered allmulticast mode [ 467.889345][T11952] program syz.3.1036 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 468.886858][ T1113] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 468.889586][ T1113] ata1.00: irq_stat 0x40000000 [ 468.891381][ T1113] ata1.00: failed command: ZAC MANAGEMENT OUT [ 468.893533][ T1113] ata1.00: cmd 9f/02:00:00:00:00/00:00:00:00:00/40 tag 0 [ 468.893533][ T1113] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 468.899290][ T1113] ata1.00: status: { DRDY ERR } [ 468.900863][ T1113] ata1.00: error: { ABRT } [ 468.902283][ T1113] ata1.00: device reported invalid CHS sector 0 [ 468.944177][T11945] bridge0: port 3(erspan0) entered blocking state [ 468.946981][T11945] bridge0: port 3(erspan0) entered disabled state [ 468.949447][T11945] erspan0: entered allmulticast mode [ 468.952647][T11945] erspan0: entered promiscuous mode [ 468.954980][T11945] bridge0: port 3(erspan0) entered blocking state [ 468.957586][T11945] bridge0: port 3(erspan0) entered forwarding state [ 468.967338][T11945] erspan0: left allmulticast mode [ 468.969340][T11945] erspan0: left promiscuous mode [ 468.972474][T11945] bridge0: port 3(erspan0) entered disabled state [ 469.477796][T11958] tipc: Failed to remove unknown binding: 66,1,1/0:2766028977/2766028979 [ 469.483602][T11958] tipc: Failed to remove unknown binding: 66,1,1/0:2766028977/2766028979 [ 469.488992][T11958] tipc: Failed to remove unknown binding: 66,1,1/0:2766028977/2766028979 [ 469.577641][T11958] loop2: detected capacity change from 0 to 7 [ 469.581004][ C3] blk_print_req_error: 25 callbacks suppressed [ 469.581020][ C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 469.586260][ C3] buffer_io_error: 25 callbacks suppressed [ 469.586268][ C3] Buffer I/O error on dev loop2, logical block 0, async page read [ 469.596485][ C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 469.599545][ C3] Buffer I/O error on dev loop2, logical block 0, async page read [ 469.602369][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 469.606370][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 469.610968][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 469.614938][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 469.619247][ C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 469.622415][ C3] Buffer I/O error on dev loop2, logical block 0, async page read [ 469.625602][ C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 469.628939][ C3] Buffer I/O error on dev loop2, logical block 0, async page read [ 469.632421][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 469.635629][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 469.638234][T11958] ldm_validate_partition_table(): Disk read failed. [ 469.641441][T11966] comedi comedi0: dt2815: I/O port conflict (0x4f27,2) [ 469.644633][ C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 469.648477][ C3] Buffer I/O error on dev loop2, logical block 0, async page read [ 469.652401][ C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 469.655550][ C3] Buffer I/O error on dev loop2, logical block 0, async page read [ 469.658366][ C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 469.661485][ C3] Buffer I/O error on dev loop2, logical block 0, async page read [ 469.664543][T11958] Dev loop2: unable to read RDB block 0 [ 469.673591][T11958] loop2: unable to read partition table [ 469.676904][T11958] loop2: partition table beyond EOD, truncated [ 469.688177][T11958] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 469.803377][T11963] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1029'. [ 470.336256][ T40] audit: type=1326 audit(1769686685.003:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11959 comm="syz.3.1029" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7fc00000 [ 471.293042][T11973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1032'. [ 471.541587][T11980] netlink: 'syz.1.1032': attribute type 4 has an invalid length. [ 471.546910][T11980] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1032'. [ 472.078152][T11985] bridge0: port 3(erspan0) entered blocking state [ 472.080667][T11985] bridge0: port 3(erspan0) entered disabled state [ 472.083508][T11985] erspan0: entered allmulticast mode [ 472.087500][T11985] erspan0: entered promiscuous mode [ 472.090199][T11985] bridge0: port 3(erspan0) entered blocking state [ 472.092769][T11985] bridge0: port 3(erspan0) entered forwarding state [ 472.147481][T11985] erspan0: left allmulticast mode [ 472.149341][T11985] erspan0: left promiscuous mode [ 472.151393][T11985] bridge0: port 3(erspan0) entered disabled state [ 472.511543][T11991] bridge0: port 3(erspan0) entered blocking state [ 472.513712][T11991] bridge0: port 3(erspan0) entered disabled state [ 472.515889][T11991] erspan0: entered allmulticast mode [ 472.518426][T11991] erspan0: entered promiscuous mode [ 472.520404][T11991] bridge0: port 3(erspan0) entered blocking state [ 472.522516][T11991] bridge0: port 3(erspan0) entered forwarding state [ 472.527906][T11991] erspan0: left allmulticast mode [ 472.529609][T11991] erspan0: left promiscuous mode [ 472.531328][T11991] bridge0: port 3(erspan0) entered disabled state [ 472.657383][T11998] bridge0: port 3(erspan0) entered blocking state [ 472.659687][T11998] bridge0: port 3(erspan0) entered disabled state [ 472.663014][T11998] bridge0: port 3(erspan0) entered blocking state [ 472.665264][T11998] bridge0: port 3(erspan0) entered forwarding state [ 472.669087][T11998] bridge0: port 3(erspan0) entered disabled state [ 472.996866][ T40] audit: type=1804 audit(1769686687.663:816): pid=12008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1039" name="/newroot/272/bus" dev="tmpfs" ino=1467 res=1 errno=0 [ 473.139786][T12011] /dev/nullb0: Can't open blockdev [ 474.891390][T12022] 8021q: adding VLAN 0 to HW filter on device bond27 [ 474.894890][T12022] bond0: (slave bond27): Enslaving as an active interface with a down link [ 474.902002][T12017] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1043'. [ 474.907170][T12017] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1043'. [ 474.912278][T12017] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1043'. [ 475.158505][T12035] binder: 12034:12035 ioctl c0306201 0 returned -14 [ 475.232979][T12040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1047'. [ 476.778602][T12056] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1050'. [ 476.859584][T12057] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1050'. [ 476.894235][T12054] 8021q: adding VLAN 0 to HW filter on device bond28 [ 476.901676][T12054] bond0: (slave bond28): Enslaving as an active interface with a down link [ 476.930928][T12050] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1050'. [ 478.318486][T12081] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1054'. [ 478.369763][T12082] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1054'. [ 478.396006][T12072] 8021q: adding VLAN 0 to HW filter on device bond17 [ 478.404996][T12072] bond0: (slave bond17): Enslaving as an active interface with a down link [ 478.413186][T12072] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1054'. [ 478.518510][T12083] bridge0: port 3(erspan0) entered blocking state [ 478.520619][T12083] bridge0: port 3(erspan0) entered disabled state [ 478.522701][T12083] erspan0: entered allmulticast mode [ 478.525104][T12083] erspan0: entered promiscuous mode [ 478.527105][T12083] bridge0: port 3(erspan0) entered blocking state [ 478.529192][T12083] bridge0: port 3(erspan0) entered forwarding state [ 478.532684][T12083] erspan0: left allmulticast mode [ 478.534320][T12083] erspan0: left promiscuous mode [ 478.535990][T12083] bridge0: port 3(erspan0) entered disabled state [ 479.939834][T12108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1063'. [ 479.943957][T12108] syzkaller1: entered promiscuous mode [ 479.946014][T12108] syzkaller1: entered allmulticast mode [ 479.951483][T12108] program syz.3.1063 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 480.190915][T12115] FAT-fs (sr0): bogus number of reserved sectors [ 480.193888][T12115] FAT-fs (sr0): Can't find a valid FAT filesystem [ 480.606717][ T1113] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 480.609598][ T1113] ata1.00: irq_stat 0x40000000 [ 480.611570][ T1113] ata1.00: failed command: ZAC MANAGEMENT OUT [ 480.613945][ T1113] ata1.00: cmd 9f/02:00:00:00:00/00:00:00:00:00/40 tag 11 [ 480.613945][ T1113] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 480.620407][ T1113] ata1.00: status: { DRDY ERR } [ 480.622354][ T1113] ata1.00: error: { ABRT } [ 480.624167][ T1113] ata1.00: device reported invalid CHS sector 0 [ 481.707150][T12120] ntfs3(nullb0): Primary boot signature is not NTFS. [ 481.709394][T12120] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 482.108352][T12132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1065'. [ 482.196111][T12133] 8021q: adding VLAN 0 to HW filter on device bond19 [ 482.200556][T12133] bond0: (slave bond19): Enslaving as an active interface with a down link [ 482.208209][T12133] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1065'. [ 482.212481][T12133] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1065'. [ 482.217603][T12133] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1065'. [ 482.486274][T12141] bridge0: port 3(erspan0) entered blocking state [ 482.489969][T12141] bridge0: port 3(erspan0) entered disabled state [ 482.495165][T12141] bridge0: port 3(erspan0) entered blocking state [ 482.498126][T12141] bridge0: port 3(erspan0) entered forwarding state [ 482.503978][T12141] bridge0: port 3(erspan0) entered disabled state [ 482.654651][T12143] 8021q: adding VLAN 0 to HW filter on device bond19 [ 482.658236][T12143] bond0: (slave bond19): Enslaving as an active interface with a down link [ 482.664486][T12143] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1068'. [ 482.667798][T12143] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1068'. [ 482.671196][T12143] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1068'. [ 483.361274][T12159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1070'. [ 484.804215][T12164] bridge0: port 3(erspan0) entered blocking state [ 484.806708][T12164] bridge0: port 3(erspan0) entered disabled state [ 484.846962][T12164] bridge0: port 3(erspan0) entered blocking state [ 484.849168][T12164] bridge0: port 3(erspan0) entered forwarding state [ 484.862645][T12165] bridge0: port 3(erspan0) entered disabled state [ 487.234640][T12178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1074'. [ 487.239801][T12178] syzkaller1: entered promiscuous mode [ 487.241645][T12178] syzkaller1: entered allmulticast mode [ 487.245625][T12178] program syz.4.1074 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 487.286191][ T53] libceph: connect (1)[c::]:6789 error -101 [ 487.288631][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 487.325501][T12182] ceph: No mds server is up or the cluster is laggy [ 487.396878][ T1113] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 487.399517][ T1113] ata1.00: irq_stat 0x40000000 [ 487.401747][ T1113] ata1.00: failed command: ZAC MANAGEMENT OUT [ 487.404187][ T1113] ata1.00: cmd 9f/02:00:00:00:00/00:00:00:00:00/40 tag 12 [ 487.404187][ T1113] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 487.410260][ T1113] ata1.00: status: { DRDY ERR } [ 487.412757][ T1113] ata1.00: error: { ABRT } [ 487.414208][ T1113] ata1.00: device reported invalid CHS sector 0 [ 487.679120][T12196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1076'. [ 487.739879][T12190] 8021q: adding VLAN 0 to HW filter on device bond18 [ 487.743108][T12190] bond0: (slave bond18): Enslaving as an active interface with a down link [ 487.749184][T12190] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1076'. [ 487.752384][T12190] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1076'. [ 487.755934][T12190] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1076'. [ 487.827365][T12201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1078'. [ 487.898233][T12207] 8021q: adding VLAN 0 to HW filter on device bond19 [ 487.902814][T12207] bond0: (slave bond19): Enslaving as an active interface with a down link [ 487.910672][T12201] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1078'. [ 487.914462][T12201] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1078'. [ 487.937725][T12201] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1078'. [ 488.567573][T12213] bridge0: port 3(erspan0) entered blocking state [ 488.569676][T12213] bridge0: port 3(erspan0) entered disabled state [ 488.571808][T12213] erspan0: entered allmulticast mode [ 488.574336][T12213] erspan0: entered promiscuous mode [ 488.576293][T12213] bridge0: port 3(erspan0) entered blocking state [ 488.578653][T12213] bridge0: port 3(erspan0) entered forwarding state [ 488.672636][T12213] erspan0: left allmulticast mode [ 488.674851][T12213] erspan0: left promiscuous mode [ 488.686818][T12213] bridge0: port 3(erspan0) entered disabled state [ 488.881645][T12220] bridge0: port 3(erspan0) entered blocking state [ 488.885878][T12220] bridge0: port 3(erspan0) entered disabled state [ 488.900308][T12220] bridge0: port 3(erspan0) entered blocking state [ 488.902561][T12220] bridge0: port 3(erspan0) entered forwarding state [ 488.918557][T12220] bridge0: port 3(erspan0) entered disabled state [ 490.113795][T12235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1085'. [ 490.117522][T12235] syzkaller1: entered promiscuous mode [ 490.119329][T12235] syzkaller1: entered allmulticast mode [ 490.123756][T12235] program syz.3.1085 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 490.946662][ T1113] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 490.949090][ T1113] ata1.00: irq_stat 0x40000000 [ 490.950649][ T1113] ata1.00: failed command: ZAC MANAGEMENT OUT [ 490.952669][ T1113] ata1.00: cmd 9f/02:00:00:00:00/00:00:00:00:00/40 tag 13 [ 490.952669][ T1113] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 490.963991][ T1113] ata1.00: status: { DRDY ERR } [ 490.966345][ T1113] ata1.00: error: { ABRT } [ 490.968186][ T1113] ata1.00: device reported invalid CHS sector 0 [ 492.604934][T12251] Bluetooth: MGMT ver 1.23 [ 493.198006][T12267] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 493.200471][T12267] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 493.206580][T12267] vhci_hcd vhci_hcd.0: Device attached [ 493.390744][T12269] bridge0: port 3(erspan0) entered blocking state [ 493.396240][T12269] bridge0: port 3(erspan0) entered disabled state [ 493.401137][T12269] erspan0: entered allmulticast mode [ 493.404174][T12269] erspan0: entered promiscuous mode [ 493.406374][T12269] bridge0: port 3(erspan0) entered blocking state [ 493.408822][T12269] bridge0: port 3(erspan0) entered forwarding state [ 493.427899][T12269] erspan0: left allmulticast mode [ 493.429583][T12269] erspan0: left promiscuous mode [ 493.431251][T12269] bridge0: port 3(erspan0) entered disabled state [ 493.496531][ T6194] usb 38-1: SetAddress Request (42) to port 0 [ 493.498566][ T6194] usb 38-1: new SuperSpeed USB device number 42 using vhci_hcd [ 493.507957][T12274] bridge0: port 3(erspan0) entered blocking state [ 493.510161][T12274] bridge0: port 3(erspan0) entered disabled state [ 493.513472][T12274] bridge0: port 3(erspan0) entered blocking state [ 493.515686][T12274] bridge0: port 3(erspan0) entered forwarding state [ 493.519596][T12274] bridge0: port 3(erspan0) entered disabled state [ 493.684348][T12268] vhci_hcd: connection reset by peer [ 493.686900][ T12] vhci_hcd vhci_hcd.0: stop threads [ 493.689113][ T12] vhci_hcd vhci_hcd.0: release socket [ 493.691104][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 494.134863][ T40] audit: type=1804 audit(1769686708.803:817): pid=12280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1094" name="/newroot/202/bus" dev="tmpfs" ino=1119 res=1 errno=0 [ 494.194552][T12281] bridge0: port 3(erspan0) entered blocking state [ 494.196938][T12281] bridge0: port 3(erspan0) entered disabled state [ 494.199178][T12281] erspan0: entered allmulticast mode [ 494.202114][T12281] erspan0: entered promiscuous mode [ 494.204239][T12281] bridge0: port 3(erspan0) entered blocking state [ 494.206510][T12281] bridge0: port 3(erspan0) entered forwarding state [ 494.211517][T12281] erspan0: left allmulticast mode [ 494.213215][T12281] erspan0: left promiscuous mode [ 494.214929][T12281] bridge0: port 3(erspan0) entered disabled state [ 494.445708][T12287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1097'. [ 495.426586][ T7885] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 495.596524][ T7885] usb 6-1: Using ep0 maxpacket: 8 [ 495.600529][ T7885] usb 6-1: config 0 interface 0 has no altsetting 0 [ 495.603834][ T7885] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 495.610722][ T7885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.632758][ T7885] usb 6-1: config 0 descriptor?? [ 495.765889][T12302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1101'. [ 495.867181][ T40] audit: type=1326 audit(1769686710.433:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12296 comm="syz.3.1101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 496.916309][ T40] audit: type=1326 audit(1769686710.433:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12296 comm="syz.3.1101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 496.925811][ T40] audit: type=1326 audit(1769686710.433:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12296 comm="syz.3.1101" exe="/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 496.934925][ T40] audit: type=1326 audit(1769686710.433:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12296 comm="syz.3.1101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 496.944138][ T40] audit: type=1326 audit(1769686710.433:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12296 comm="syz.3.1101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 496.953128][ T40] audit: type=1326 audit(1769686710.433:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12296 comm="syz.3.1101" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 496.962689][ T40] audit: type=1326 audit(1769686710.433:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12296 comm="syz.3.1101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 496.980715][ T40] audit: type=1326 audit(1769686710.433:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12296 comm="syz.3.1101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 496.991385][ T40] audit: type=1326 audit(1769686710.433:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12296 comm="syz.3.1101" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 497.145520][ T7885] mcp2221 0003:04D8:00DD.0004: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 497.458248][ T7885] usb 6-1: USB disconnect, device number 7 [ 497.530478][T12316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1105'. [ 497.553551][T12316] 8021q: adding VLAN 0 to HW filter on device bond20 [ 497.560774][T12316] bond0: (slave bond20): Enslaving as an active interface with a down link [ 497.570665][T12316] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1105'. [ 497.580883][T12316] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1105'. [ 497.585767][T12316] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1105'. [ 497.711195][T12321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1106'. [ 497.787370][T12326] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1106'. [ 497.843459][T12327] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1106'. [ 497.855949][T12321] 8021q: adding VLAN 0 to HW filter on device bond21 [ 497.900414][T12329] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1106'. [ 497.901818][T12321] bond0: (slave bond21): Enslaving as an active interface with a down link [ 498.586584][ T6194] usb 38-1: device descriptor read/8, error -110 [ 498.981659][ T6194] usb usb38-port1: attempt power cycle [ 499.547221][ T6194] usb usb38-port1: unable to enumerate USB device [ 499.779712][T12345] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 499.782266][T12345] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 499.785125][T12345] vhci_hcd vhci_hcd.0: Device attached [ 499.816679][T12345] netlink: 'syz.3.1107': attribute type 1 has an invalid length. [ 499.836185][T12345] 8021q: adding VLAN 0 to HW filter on device bond22 [ 499.967955][T12346] vhci_hcd: connection closed [ 499.968155][ T88] vhci_hcd vhci_hcd.3: stop threads [ 499.971439][ T88] vhci_hcd vhci_hcd.3: release socket [ 499.973716][ T88] vhci_hcd vhci_hcd.3: disconnect device [ 499.976557][ T10] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 500.417247][T12362] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 500.419432][T12362] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 500.421896][T12362] vhci_hcd vhci_hcd.0: Device attached [ 500.447254][T12362] netlink: 'syz.4.1111': attribute type 1 has an invalid length. [ 500.485782][T12362] 8021q: adding VLAN 0 to HW filter on device bond20 [ 500.746600][ T5929] usb 45-1: new low-speed USB device number 8 using vhci_hcd [ 500.886714][T12363] vhci_hcd: connection reset by peer [ 500.890072][ T6070] vhci_hcd vhci_hcd.4: stop threads [ 500.891840][ T6070] vhci_hcd vhci_hcd.4: release socket [ 500.894151][ T6070] vhci_hcd vhci_hcd.4: disconnect device [ 501.212959][T12378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1115'. [ 501.294023][T12381] 8021q: adding VLAN 0 to HW filter on device bond20 [ 501.298211][T12381] bond0: (slave bond20): Enslaving as an active interface with a down link [ 501.305191][T12381] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1115'. [ 501.308582][T12381] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1115'. [ 501.312657][T12381] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1115'. [ 502.209235][T12392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1116'. [ 502.319425][T12394] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1116'. [ 502.337325][T12390] bridge0: port 3(erspan0) entered blocking state [ 502.340356][T12390] bridge0: port 3(erspan0) entered disabled state [ 502.343321][T12390] erspan0: entered allmulticast mode [ 502.352746][T12390] erspan0: entered promiscuous mode [ 502.355571][T12390] bridge0: port 3(erspan0) entered blocking state [ 502.358697][T12390] bridge0: port 3(erspan0) entered forwarding state [ 502.370244][T12392] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1116'. [ 502.416595][T12385] 8021q: adding VLAN 0 to HW filter on device bond21 [ 502.420713][T12385] bond0: (slave bond21): Enslaving as an active interface with a down link [ 502.429929][T12398] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1116'. [ 502.447101][T12393] erspan0: left allmulticast mode [ 502.449296][T12393] erspan0: left promiscuous mode [ 502.451633][T12393] bridge0: port 3(erspan0) entered disabled state [ 503.130338][T12405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1120'. [ 503.135212][T12405] syzkaller1: entered promiscuous mode [ 503.137934][T12405] syzkaller1: entered allmulticast mode [ 503.330182][T12410] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 504.907970][T12423] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 504.910679][T12423] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 504.914115][T12423] vhci_hcd vhci_hcd.0: Device attached [ 504.949742][T12423] netlink: 'syz.3.1122': attribute type 1 has an invalid length. [ 504.994309][T12423] 8021q: adding VLAN 0 to HW filter on device bond23 [ 505.166648][ T60] usb 43-1: new low-speed USB device number 17 using vhci_hcd [ 505.273078][T12424] vhci_hcd: connection reset by peer [ 505.275077][ T13] vhci_hcd vhci_hcd.3: stop threads [ 505.277252][ T13] vhci_hcd vhci_hcd.3: release socket [ 505.279051][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 505.288702][ C3] vcan0: j1939_tp_rxtimer: 0xffff8880133ca800: rx timeout, send abort [ 505.635737][T12434] hpfs: hpfs_map_sector(): read error [ 505.792548][ C3] vcan0: j1939_tp_rxtimer: 0xffff8880133ca800: abort rx timeout. Force session deactivation [ 506.110672][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.113398][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.586559][ T5929] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 507.472327][T12452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1127'. [ 507.494673][T12448] 8021q: adding VLAN 0 to HW filter on device bond24 [ 507.500015][T12448] bond0: (slave bond24): Enslaving as an active interface with a down link [ 507.508753][T12448] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1127'. [ 507.562812][T12452] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1127'. [ 507.614890][T12454] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1127'. [ 508.433319][T12451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1125'. [ 508.460363][T12451] wireguard0: entered promiscuous mode [ 508.462699][T12451] wireguard0: entered allmulticast mode [ 508.488099][T12458] bridge0: port 3(erspan0) entered blocking state [ 508.490770][T12458] bridge0: port 3(erspan0) entered disabled state [ 508.495562][T12458] bridge0: port 3(erspan0) entered blocking state [ 508.498399][T12458] bridge0: port 3(erspan0) entered forwarding state [ 508.514390][T12458] bridge0: port 3(erspan0) entered disabled state [ 508.580744][T12465] bridge0: port 3(erspan0) entered blocking state [ 508.584038][T12465] bridge0: port 3(erspan0) entered disabled state [ 508.596011][T12465] erspan0: entered allmulticast mode [ 508.657572][T12465] erspan0: entered promiscuous mode [ 508.668200][T12465] bridge0: port 3(erspan0) entered blocking state [ 508.670576][T12465] bridge0: port 3(erspan0) entered forwarding state [ 508.678689][T12446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1126'. [ 508.689364][T12466] erspan0: left allmulticast mode [ 508.691198][T12466] erspan0: left promiscuous mode [ 508.696875][T12466] bridge0: port 3(erspan0) entered disabled state [ 509.206927][T12471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1130'. [ 509.210281][T12471] syzkaller1: entered promiscuous mode [ 509.212311][T12471] syzkaller1: entered allmulticast mode [ 509.802971][T12469] random: crng reseeded on system resumption [ 509.983062][T12476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1133'. [ 510.130995][T12480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1134'. [ 510.135495][T12480] syzkaller1: entered promiscuous mode [ 510.138100][T12480] syzkaller1: entered allmulticast mode [ 510.142548][T12480] program syz.0.1134 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 510.256538][ T60] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 510.377045][ T5929] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 513.194350][T12503] Invalid source name [ 513.335745][T12504] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1137'. [ 513.782285][T12508] binder: 12507:12508 ioctl c0306201 0 returned -14 [ 513.894378][T12510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1142'. [ 513.897969][T12510] syzkaller1: entered promiscuous mode [ 513.899783][T12510] syzkaller1: entered allmulticast mode [ 514.056828][T12514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1140'. [ 514.720313][T12522] bridge0: port 3(erspan0) entered blocking state [ 514.723144][T12522] bridge0: port 3(erspan0) entered disabled state [ 514.735934][T12522] bridge0: port 3(erspan0) entered blocking state [ 514.738140][T12522] bridge0: port 3(erspan0) entered forwarding state [ 514.865157][T12522] bridge0: port 3(erspan0) entered disabled state [ 515.023353][T12527] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 515.025488][T12527] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 515.031334][T12527] vhci_hcd vhci_hcd.0: Device attached [ 515.308788][ T5929] usb 40-1: SetAddress Request (30) to port 0 [ 515.311477][ T5929] usb 40-1: new SuperSpeed USB device number 30 using vhci_hcd [ 515.621154][T12536] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 515.623563][T12536] overlayfs: failed to set xattr on upper [ 515.625552][T12536] overlayfs: ...falling back to redirect_dir=nofollow. [ 515.628192][T12536] overlayfs: ...falling back to index=off. [ 515.630023][T12536] overlayfs: ...falling back to uuid=null. [ 515.693873][T12538] bridge0: port 3(erspan0) entered blocking state [ 515.696920][T12538] bridge0: port 3(erspan0) entered disabled state [ 515.701239][T12538] bridge0: port 3(erspan0) entered blocking state [ 515.703985][T12538] bridge0: port 3(erspan0) entered forwarding state [ 515.708425][T12539] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 515.711336][T12535] bridge0: port 3(erspan0) entered disabled state [ 515.782525][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 515.782545][ T40] audit: type=1326 audit(1769686730.453:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12532 comm="syz.4.1145" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x0 [ 515.908464][T12537] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 516.450328][T12541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1147'. [ 516.457519][T12541] 8021q: VLANs not supported on lo [ 516.460854][T12541] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1147'. [ 516.868481][T12528] vhci_hcd: connection reset by peer [ 516.870802][ T6070] vhci_hcd vhci_hcd.1: stop threads [ 516.875374][ T6070] vhci_hcd vhci_hcd.1: release socket [ 516.880106][ T6070] vhci_hcd vhci_hcd.1: disconnect device [ 517.133611][T12553] bridge0: port 3(erspan0) entered blocking state [ 517.147043][T12553] bridge0: port 3(erspan0) entered disabled state [ 517.149576][T12553] erspan0: entered allmulticast mode [ 517.153609][T12553] erspan0: entered promiscuous mode [ 517.156083][T12553] bridge0: port 3(erspan0) entered blocking state [ 517.158229][T12553] bridge0: port 3(erspan0) entered forwarding state [ 517.162064][T12553] erspan0: left allmulticast mode [ 517.163770][T12553] erspan0: left promiscuous mode [ 517.165741][T12553] bridge0: port 3(erspan0) entered disabled state [ 517.803698][T12560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1152'. [ 517.808854][T12560] syzkaller1: entered promiscuous mode [ 517.811331][T12560] syzkaller1: entered allmulticast mode [ 518.277238][T12566] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 518.280081][T12566] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 518.283960][T12566] vhci_hcd vhci_hcd.0: Device attached [ 518.497068][ C3] vcan0: j1939_tp_rxtimer: 0xffff8880602e0c00: rx timeout, send abort [ 518.786611][ T7885] usb 44-1: SetAddress Request (30) to port 0 [ 518.788752][ T7885] usb 44-1: new SuperSpeed USB device number 30 using vhci_hcd [ 518.999994][ C3] vcan0: j1939_tp_rxtimer: 0xffff8880602e0c00: abort rx timeout. Force session deactivation [ 519.498930][T12580] bridge0: port 3(erspan0) entered blocking state [ 519.501228][T12580] bridge0: port 3(erspan0) entered disabled state [ 519.503457][T12580] erspan0: entered allmulticast mode [ 519.505939][T12580] erspan0: entered promiscuous mode [ 519.508020][T12580] bridge0: port 3(erspan0) entered blocking state [ 519.510158][T12580] bridge0: port 3(erspan0) entered forwarding state [ 519.516759][T12582] erspan0: left allmulticast mode [ 519.518459][T12582] erspan0: left promiscuous mode [ 519.520238][T12582] bridge0: port 3(erspan0) entered disabled state [ 519.555997][T12583] bridge0: port 3(erspan0) entered blocking state [ 519.558351][T12583] bridge0: port 3(erspan0) entered disabled state [ 519.560903][T12583] erspan0: entered allmulticast mode [ 519.563593][T12583] erspan0: entered promiscuous mode [ 519.565570][T12583] bridge0: port 3(erspan0) entered blocking state [ 519.567734][T12583] bridge0: port 3(erspan0) entered forwarding state [ 519.582971][T12583] erspan0: left allmulticast mode [ 519.584751][T12583] erspan0: left promiscuous mode [ 519.586860][T12583] bridge0: port 3(erspan0) entered disabled state [ 519.686555][T12567] vhci_hcd: connection reset by peer [ 519.695120][ T13] vhci_hcd vhci_hcd.3: stop threads [ 519.696897][ T13] vhci_hcd vhci_hcd.3: release socket [ 519.698682][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 520.546215][ T5929] usb 40-1: device descriptor read/8, error -110 [ 521.728839][ T5929] usb usb40-port1: attempt power cycle [ 522.296580][ T5929] usb usb40-port1: unable to enumerate USB device [ 522.637204][T12614] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 522.639989][T12614] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 522.657608][T12614] vhci_hcd vhci_hcd.0: Device attached [ 522.706936][T12613] bridge0: port 3(erspan0) entered blocking state [ 522.708968][T12613] bridge0: port 3(erspan0) entered disabled state [ 522.711037][T12613] erspan0: entered allmulticast mode [ 522.713310][T12613] erspan0: entered promiscuous mode [ 522.724652][T12613] bridge0: port 3(erspan0) entered blocking state [ 522.726652][T12613] bridge0: port 3(erspan0) entered forwarding state [ 522.749835][T12613] erspan0: left allmulticast mode [ 522.752096][T12613] erspan0: left promiscuous mode [ 522.754430][T12613] bridge0: port 3(erspan0) entered disabled state [ 523.892139][T12629] bridge0: port 3(erspan0) entered blocking state [ 523.894338][T12629] bridge0: port 3(erspan0) entered disabled state [ 523.896729][T12629] erspan0: entered allmulticast mode [ 523.902361][T12629] erspan0: entered promiscuous mode [ 523.904426][T12629] bridge0: port 3(erspan0) entered blocking state [ 523.906615][T12629] bridge0: port 3(erspan0) entered forwarding state [ 523.911272][T12629] erspan0: left allmulticast mode [ 523.913077][T12629] erspan0: left promiscuous mode [ 523.915170][T12629] bridge0: port 3(erspan0) entered disabled state [ 524.187289][T12631] bridge0: port 3(erspan0) entered blocking state [ 524.190205][T12631] bridge0: port 3(erspan0) entered disabled state [ 524.193272][T12631] erspan0: entered allmulticast mode [ 524.199817][T12631] erspan0: entered promiscuous mode [ 524.202750][T12631] bridge0: port 3(erspan0) entered blocking state [ 524.205602][T12631] bridge0: port 3(erspan0) entered forwarding state [ 524.211214][T12631] erspan0: left allmulticast mode [ 524.213101][T12631] erspan0: left promiscuous mode [ 524.215130][T12631] bridge0: port 3(erspan0) entered disabled state [ 524.304854][T12615] vhci_hcd: connection reset by peer [ 524.306844][ T13] vhci_hcd vhci_hcd.3: stop threads [ 524.308933][ T13] vhci_hcd vhci_hcd.3: release socket [ 524.315302][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 524.315451][ T7885] usb 44-1: device descriptor read/8, error -110 [ 524.555629][T12635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1167'. [ 524.560267][T12635] syzkaller1: entered promiscuous mode [ 524.562684][T12635] syzkaller1: entered allmulticast mode [ 524.567405][T12635] program syz.0.1167 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 524.717466][ T7885] usb usb44-port1: attempt power cycle [ 525.126796][ T1113] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 525.129260][ T1113] ata1.00: irq_stat 0x40000000 [ 525.131272][ T1113] ata1.00: failed command: ZAC MANAGEMENT OUT [ 525.133407][ T1113] ata1.00: cmd 9f/02:00:00:00:00/00:00:00:00:00/40 tag 15 [ 525.133407][ T1113] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 525.139670][ T1113] ata1.00: status: { DRDY ERR } [ 525.143202][ T1113] ata1.00: error: { ABRT } [ 525.145362][ T1113] ata1.00: device reported invalid CHS sector 0 [ 525.295571][T12643] sch_tbf: burst 0 is lower than device veth1_to_batadv mtu (1550) ! [ 525.876372][ T7885] usb usb44-port1: unable to enumerate USB device [ 526.255587][T12651] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 526.257749][T12651] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 526.260969][T12651] vhci_hcd vhci_hcd.0: Device attached [ 526.536556][ T6373] usb 46-1: SetAddress Request (30) to port 0 [ 526.539786][ T6373] usb 46-1: new SuperSpeed USB device number 30 using vhci_hcd [ 526.771873][T12660] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 526.774277][T12660] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 526.796685][T12660] vhci_hcd vhci_hcd.0: Device attached [ 527.043401][ T40] audit: type=1804 audit(1769686741.713:865): pid=12667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1173" name="/newroot/281/bus" dev="tmpfs" ino=1543 res=1 errno=0 [ 527.236556][ T6194] usb 38-1: SetAddress Request (46) to port 0 [ 527.266359][ T6194] usb 38-1: new SuperSpeed USB device number 46 using vhci_hcd [ 527.373322][T12672] x_tables: duplicate underflow at hook 3 [ 527.608233][T12660] fuse: Unknown parameter '0xffffffffffffffff' [ 528.052537][T12652] vhci_hcd: connection reset by peer [ 528.054793][ T88] vhci_hcd vhci_hcd.4: stop threads [ 528.057060][ T88] vhci_hcd vhci_hcd.4: release socket [ 528.059043][ T88] vhci_hcd vhci_hcd.4: disconnect device [ 528.249451][T12661] vhci_hcd: connection reset by peer [ 528.252041][ T6070] vhci_hcd vhci_hcd.0: stop threads [ 528.254257][ T6070] vhci_hcd vhci_hcd.0: release socket [ 528.256727][ T6070] vhci_hcd vhci_hcd.0: disconnect device [ 528.345932][T12679] bridge0: port 3(erspan0) entered blocking state [ 528.349846][T12679] bridge0: port 3(erspan0) entered disabled state [ 528.352931][T12679] erspan0: entered allmulticast mode [ 528.357628][T12679] erspan0: entered promiscuous mode [ 528.360863][T12679] erspan0: left allmulticast mode [ 528.362549][T12679] erspan0: left promiscuous mode [ 528.364257][T12679] bridge0: port 3(erspan0) entered disabled state [ 528.435125][T12680] bridge0: port 3(erspan0) entered blocking state [ 528.438814][T12680] bridge0: port 3(erspan0) entered disabled state [ 528.449142][T12680] bridge0: port 3(erspan0) entered blocking state [ 528.451914][T12680] bridge0: port 3(erspan0) entered forwarding state [ 528.469363][T12680] bridge0: port 3(erspan0) entered disabled state [ 529.437312][T12697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1179'. [ 529.444301][T12697] syzkaller1: entered promiscuous mode [ 529.446947][T12697] syzkaller1: entered allmulticast mode [ 529.454596][T12697] program syz.4.1179 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 529.616733][ T1113] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 529.626496][ T1113] ata1.00: irq_stat 0x40000000 [ 529.628068][ T1113] ata1.00: failed command: ZAC MANAGEMENT OUT [ 529.630314][ T1113] ata1.00: cmd 9f/02:00:00:00:00/00:00:00:00:00/40 tag 19 [ 529.630314][ T1113] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 529.635244][ T1113] ata1.00: status: { DRDY ERR } [ 529.640427][ T1113] ata1.00: error: { ABRT } [ 529.641905][ T1113] ata1.00: device reported invalid CHS sector 0 [ 530.511812][T12710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1181'. [ 530.539039][T12710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1181'. [ 530.544091][T12710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1181'. [ 530.676823][T12710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1181'. [ 530.685059][T12710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1181'. [ 530.860665][T12718] fuse: Bad value for 'fd' [ 531.686617][ T6373] usb 46-1: device descriptor read/8, error -110 [ 531.706643][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 532.073877][T12726] 9p: Unknown Cache mode or invalid value fscach [ 532.102220][ T6373] usb usb46-port1: attempt power cycle [ 532.346552][ T6194] usb 38-1: device descriptor read/8, error -110 [ 532.676996][ T6373] usb usb46-port1: unable to enumerate USB device [ 532.746930][ T6194] usb usb38-port1: attempt power cycle [ 532.794799][T12733] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 532.797190][T12733] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 532.800132][T12733] vhci_hcd vhci_hcd.0: Device attached [ 532.819014][T12733] netlink: 'syz.3.1183': attribute type 1 has an invalid length. [ 532.834770][T12733] 8021q: adding VLAN 0 to HW filter on device bond25 [ 532.854562][T12728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1184'. [ 532.978547][T12734] vhci_hcd: connection closed [ 532.978771][ T1209] vhci_hcd vhci_hcd.3: stop threads [ 532.983178][ T1209] vhci_hcd vhci_hcd.3: release socket [ 532.985063][ T1209] vhci_hcd vhci_hcd.3: disconnect device [ 533.037359][ T6373] usb 43-1: new low-speed USB device number 18 using vhci_hcd [ 533.039891][ T6373] usb 43-1: enqueue for inactive port 0 [ 533.126577][ T6373] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 533.137122][T12738] bridge0: port 3(erspan0) entered blocking state [ 533.140422][T12738] bridge0: port 3(erspan0) entered disabled state [ 533.143754][T12738] erspan0: entered allmulticast mode [ 533.155726][T12738] erspan0: entered promiscuous mode [ 533.160997][T12738] bridge0: port 3(erspan0) entered blocking state [ 533.163885][T12738] bridge0: port 3(erspan0) entered forwarding state [ 533.179193][T12738] erspan0: left allmulticast mode [ 533.181510][T12738] erspan0: left promiscuous mode [ 533.184661][T12738] bridge0: port 3(erspan0) entered disabled state [ 533.304265][ T40] audit: type=1804 audit(1769686747.973:866): pid=12744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1195" name="/newroot/299/bus" dev="tmpfs" ino=1629 res=1 errno=0 [ 533.362987][ T6194] usb usb38-port1: unable to enumerate USB device [ 533.711327][T12750] bridge0: port 3(erspan0) entered blocking state [ 533.713536][T12750] bridge0: port 3(erspan0) entered disabled state [ 533.716170][T12750] erspan0: entered allmulticast mode [ 533.728543][T12750] erspan0: entered promiscuous mode [ 533.734837][T12750] erspan0: left allmulticast mode [ 533.736831][T12750] erspan0: left promiscuous mode [ 533.738945][T12750] bridge0: port 3(erspan0) entered disabled state [ 533.989438][T12755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1189'. [ 533.995200][T12755] syzkaller1: entered promiscuous mode [ 533.997165][T12755] syzkaller1: entered allmulticast mode [ 534.006893][T12755] program syz.3.1189 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 534.806773][ T1113] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 534.809139][ T1113] ata1.00: irq_stat 0x40000000 [ 534.810694][ T1113] ata1.00: failed command: ZAC MANAGEMENT OUT [ 534.812702][ T1113] ata1.00: cmd 9f/02:00:00:00:00/00:00:00:00:00/40 tag 20 [ 534.812702][ T1113] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 534.818028][ T1113] ata1.00: status: { DRDY ERR } [ 534.819599][ T1113] ata1.00: error: { ABRT } [ 534.821050][ T1113] ata1.00: device reported invalid CHS sector 0 [ 537.400437][T12783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1194'. [ 539.165919][T12798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1199'. [ 539.221887][T12798] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1199'. [ 539.226700][T12798] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1199'. [ 539.231633][T12798] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1199'. [ 539.333098][T12803] bridge0: port 3(erspan0) entered blocking state [ 539.335253][T12803] bridge0: port 3(erspan0) entered disabled state [ 539.337883][T12803] erspan0: entered allmulticast mode [ 539.344570][T12803] erspan0: entered promiscuous mode [ 539.349682][T12803] bridge0: port 3(erspan0) entered blocking state [ 539.351832][T12803] bridge0: port 3(erspan0) entered forwarding state [ 539.369583][T12803] erspan0: left allmulticast mode [ 539.371424][T12803] erspan0: left promiscuous mode [ 539.373375][T12803] bridge0: port 3(erspan0) entered disabled state [ 540.772388][T12819] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 541.114138][ T40] audit: type=1326 audit(1769686755.783:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12807 comm="syz.1.1202" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x0 [ 542.400954][T12834] bridge0: port 3(erspan0) entered blocking state [ 542.403392][T12834] bridge0: port 3(erspan0) entered disabled state [ 542.406248][T12834] erspan0: entered allmulticast mode [ 542.411335][T12834] erspan0: entered promiscuous mode [ 542.413769][T12834] bridge0: port 3(erspan0) entered blocking state [ 542.415924][T12834] bridge0: port 3(erspan0) entered forwarding state [ 542.432422][T12834] erspan0: left allmulticast mode [ 542.434208][T12834] erspan0: left promiscuous mode [ 542.436388][T12834] bridge0: port 3(erspan0) entered disabled state [ 542.964753][T12845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1207'. [ 542.971653][T12843] bridge_slave_0: left allmulticast mode [ 542.973517][T12843] bridge_slave_0: left promiscuous mode [ 542.975617][T12843] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.988901][T12843] bridge_slave_1: left allmulticast mode [ 542.991390][T12843] bridge_slave_1: left promiscuous mode [ 542.993653][T12843] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.064061][T12844] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 543.064200][T12843] team0: Port device team_slave_0 removed [ 543.093607][T12843] team0: Port device team_slave_1 removed [ 543.096658][T12843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.101165][T12843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 543.105705][T12843] batman_adv: batadv0: Removing interface: gretap1 [ 543.116851][T12843] bond0: (slave geneve2): Releasing active interface [ 543.119294][T12843] bond0: (slave geneve2): the permanent HWaddr of slave - 1e:e4:d5:fa:f8:19 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 543.138928][T12843] bond0: (slave bond2): Releasing active interface [ 543.142036][T12851] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1207'. [ 543.151281][T12843] bond0: (slave bond3): Releasing active interface [ 543.169845][T12843] bond0: (slave bond4): Releasing active interface [ 543.183115][T12843] bond0: (slave bond6): Releasing active interface [ 543.194697][T12838] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1207'. [ 543.203096][T12843] bond0: (slave bond11): Releasing active interface [ 543.229805][T12843] bond0: (slave bond13): Releasing active interface [ 543.244058][T12847] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1207'. [ 543.261008][T12843] bond0: (slave bond14): Releasing active interface [ 543.267058][T12843] bond0: (slave bond15): Releasing active interface [ 543.272161][T12843] bond0: (slave bond16): Releasing active interface [ 543.276822][T12843] bond0: (slave bond17): Releasing active interface [ 543.281634][T12843] bond0: (slave bond18): Releasing active interface [ 543.287723][ T34] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 543.294102][T12843] bond0: (slave bond19): Releasing active interface [ 543.306560][T12843] bond0: (slave bond21): Releasing active interface [ 543.347387][T12846] team0: Mode changed to "loadbalance" [ 543.349935][T12850] vlan0: entered promiscuous mode [ 543.432165][T12856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1210'. [ 543.472029][T12856] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1210'. [ 543.475310][T12856] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1210'. [ 543.486837][T12856] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1210'. [ 543.787215][ T34] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 544.142926][ T40] audit: type=1804 audit(1769686758.813:868): pid=12874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1214" name="/newroot/292/bus/bus" dev="overlay" ino=1610 res=1 errno=0 [ 544.155280][ T40] audit: type=1804 audit(1769686758.823:869): pid=12876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1214" name="/newroot/292/bus/bus" dev="overlay" ino=1610 res=1 errno=0 [ 544.162576][ T40] audit: type=1800 audit(1769686758.823:870): pid=12876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1214" name="bus" dev="overlay" ino=1610 res=0 errno=0 [ 544.797495][T12894] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 544.799540][T12894] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 544.802383][T12894] vhci_hcd vhci_hcd.0: Device attached [ 544.820851][T12894] netlink: 'syz.1.1211': attribute type 1 has an invalid length. [ 544.835249][T12894] 8021q: adding VLAN 0 to HW filter on device bond21 [ 544.961356][T12895] vhci_hcd: connection closed [ 544.961564][ T6070] vhci_hcd vhci_hcd.1: stop threads [ 544.964899][ T6070] vhci_hcd vhci_hcd.1: release socket [ 544.967085][ T6070] vhci_hcd vhci_hcd.1: disconnect device [ 544.986680][ T34] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 545.042562][T12898] bridge0: port 1(erspan0) entered blocking state [ 545.049361][T12898] bridge0: port 1(erspan0) entered disabled state [ 545.052487][T12898] erspan0: entered allmulticast mode [ 545.055133][T12898] erspan0: entered promiscuous mode [ 545.102179][T12898] bridge0: port 1(erspan0) entered blocking state [ 545.104420][T12898] bridge0: port 1(erspan0) entered forwarding state [ 545.252774][T12907] erspan0: left allmulticast mode [ 545.257974][T12907] erspan0: left promiscuous mode [ 545.260372][T12907] bridge0: port 1(erspan0) entered disabled state [ 545.615296][T12922] bridge0: port 3(erspan0) entered blocking state [ 545.620182][T12922] bridge0: port 3(erspan0) entered disabled state [ 545.623607][T12922] bridge0: port 3(erspan0) entered blocking state [ 545.625993][T12922] bridge0: port 3(erspan0) entered forwarding state [ 545.661619][T12923] bridge0: port 3(erspan0) entered blocking state [ 545.766518][T12923] bridge0: port 3(erspan0) entered disabled state [ 545.770353][T12923] erspan0: entered allmulticast mode [ 545.775121][T12923] erspan0: entered promiscuous mode [ 545.778423][T12923] bridge0: port 3(erspan0) entered blocking state [ 545.781150][T12923] bridge0: port 3(erspan0) entered forwarding state [ 545.826862][T12922] bridge0: port 3(erspan0) entered disabled state [ 545.917905][T12924] erspan0: left allmulticast mode [ 545.919743][T12924] erspan0: left promiscuous mode [ 545.923463][T12924] bridge0: port 3(erspan0) entered disabled state [ 546.100329][T12936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1219'. [ 546.149802][T12930] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1219'. [ 546.804430][T12948] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 546.806638][T12948] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 546.810188][T12948] vhci_hcd vhci_hcd.0: Device attached [ 546.832924][T12948] netlink: 'syz.3.1220': attribute type 1 has an invalid length. [ 546.863133][T12948] 8021q: adding VLAN 0 to HW filter on device bond26 [ 547.017766][T12949] vhci_hcd: connection closed [ 547.020222][ T1143] vhci_hcd vhci_hcd.3: stop threads [ 547.072264][ T9] usb 43-1: new low-speed USB device number 19 using vhci_hcd [ 547.085402][ T1143] vhci_hcd vhci_hcd.3: release socket [ 547.087928][ T1143] vhci_hcd vhci_hcd.3: disconnect device [ 547.292487][T12957] netlink: zone id is out of range [ 547.299496][T12957] gretap0: entered promiscuous mode [ 547.308777][T12957] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 547.313190][T12957] overlayfs: maximum fs stacking depth exceeded [ 547.328397][T12958] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 547.331007][T12958] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 547.333944][T12958] vhci_hcd vhci_hcd.0: Device attached [ 547.481283][ T843] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 547.606655][ T6194] usb 46-1: SetAddress Request (34) to port 0 [ 547.608660][ T6194] usb 46-1: new SuperSpeed USB device number 34 using vhci_hcd [ 548.080687][T12959] vhci_hcd: connection reset by peer [ 548.086331][ T88] vhci_hcd vhci_hcd.4: stop threads [ 548.089725][ T88] vhci_hcd vhci_hcd.4: release socket [ 548.092186][ T88] vhci_hcd vhci_hcd.4: disconnect device [ 548.338394][ T6085] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 549.260279][T12991] bridge0: port 3(erspan0) entered blocking state [ 549.262438][T12991] bridge0: port 3(erspan0) entered disabled state [ 549.264594][T12991] erspan0: entered allmulticast mode [ 549.268864][T12991] erspan0: entered promiscuous mode [ 549.271297][T12991] bridge0: port 3(erspan0) entered blocking state [ 549.273442][T12991] bridge0: port 3(erspan0) entered forwarding state [ 549.277145][T12991] erspan0: left allmulticast mode [ 549.278810][T12991] erspan0: left promiscuous mode [ 549.280448][T12989] __nla_validate_parse: 11 callbacks suppressed [ 549.280460][T12989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1230'. [ 549.280518][T12991] bridge0: port 3(erspan0) entered disabled state [ 549.299817][T12993] bridge0: port 3(erspan0) entered blocking state [ 549.302234][T12993] bridge0: port 3(erspan0) entered disabled state [ 549.306784][T12993] bridge0: port 3(erspan0) entered blocking state [ 549.308927][T12993] bridge0: port 3(erspan0) entered forwarding state [ 549.313203][T12993] bridge0: port 3(erspan0) entered disabled state [ 549.358642][T12989] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1230'. [ 549.363007][T12989] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1230'. [ 549.366893][T12989] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1230'. [ 551.261192][T13018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1235'. [ 551.304729][T13013] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1235'. [ 551.307471][T13020] bridge0: port 3(erspan0) entered blocking state [ 551.317211][T13020] bridge0: port 3(erspan0) entered disabled state [ 551.320105][T13020] erspan0: entered allmulticast mode [ 551.350551][T13020] erspan0: entered promiscuous mode [ 551.355759][T13018] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1235'. [ 551.406393][T13013] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1235'. [ 551.412255][T13022] erspan0: left allmulticast mode [ 551.414245][T13022] erspan0: left promiscuous mode [ 551.417505][T13022] bridge0: port 3(erspan0) entered disabled state [ 552.184554][T13031] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 552.186759][T13031] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 552.205392][T13031] vhci_hcd vhci_hcd.0: Device attached [ 552.226576][ T9] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 552.227109][T13034] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 552.232223][T13027] netlink: 'syz.4.1236': attribute type 1 has an invalid length. [ 552.235112][T13034] team0: Port device batadv5 added [ 552.254280][T13027] 8021q: adding VLAN 0 to HW filter on device bond22 [ 552.383462][T13035] vhci_hcd: connection closed [ 552.383730][ T6070] vhci_hcd vhci_hcd.4: stop threads [ 552.388684][ T6070] vhci_hcd vhci_hcd.4: release socket [ 552.391427][ T6070] vhci_hcd vhci_hcd.4: disconnect device [ 552.666544][ T6194] usb 46-1: device descriptor read/8, error -110 [ 552.729000][T13039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1239'. [ 552.773313][T13039] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1239'. [ 552.857016][ T60] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 554.667777][ T6194] usb usb46-port1: attempt power cycle [ 555.007586][T13069] __nla_validate_parse: 9 callbacks suppressed [ 555.007597][T13069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1242'. [ 555.014063][T13069] syzkaller1: entered promiscuous mode [ 555.016344][T13069] syzkaller1: entered allmulticast mode [ 555.020844][T13069] program syz.4.1242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 555.149252][ T1113] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 555.151710][ T1113] ata1.00: irq_stat 0x40000000 [ 555.153227][ T1113] ata1.00: failed command: ZAC MANAGEMENT OUT [ 555.155250][ T1113] ata1.00: cmd 9f/02:00:00:00:00/00:00:00:00:00/40 tag 23 [ 555.155250][ T1113] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 555.180769][ T1113] ata1.00: status: { DRDY ERR } [ 555.182698][ T1113] ata1.00: error: { ABRT } [ 555.184475][ T1113] ata1.00: device reported invalid CHS sector 0 [ 555.250075][ T6194] usb usb46-port1: unable to enumerate USB device [ 555.453661][T13079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1244'. [ 555.511799][T13082] program syz.1.1244 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 556.877683][ T1113] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 556.880107][ T1113] ata1.00: irq_stat 0x40000000 [ 556.881700][ T1113] ata1.00: failed command: ZAC MANAGEMENT OUT [ 556.883653][ T1113] ata1.00: cmd 9f/02:00:00:00:00/00:00:00:00:00/40 tag 21 [ 556.883653][ T1113] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 556.919463][ T1113] ata1.00: status: { DRDY ERR } [ 556.924556][ T1113] ata1.00: error: { ABRT } [ 556.928861][ T1113] ata1.00: device reported invalid CHS sector 0 [ 557.030305][T13089] bridge0: port 3(erspan0) entered blocking state [ 557.033422][T13089] bridge0: port 3(erspan0) entered disabled state [ 557.041175][T13089] bridge0: port 3(erspan0) entered blocking state [ 557.043499][T13089] bridge0: port 3(erspan0) entered forwarding state [ 557.068408][T13089] bridge0: port 3(erspan0) entered disabled state [ 557.425371][T13092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1248'. [ 557.447229][T13095] bridge0: port 1(erspan0) entered blocking state [ 557.450267][T13095] bridge0: port 1(erspan0) entered disabled state [ 557.453670][T13095] erspan0: entered allmulticast mode [ 557.480306][T13095] erspan0: entered promiscuous mode [ 557.484148][T13095] bridge0: port 1(erspan0) entered blocking state [ 557.486975][T13095] bridge0: port 1(erspan0) entered forwarding state [ 557.496789][T13095] erspan0: left allmulticast mode [ 557.499153][T13095] erspan0: left promiscuous mode [ 557.501916][T13095] bridge0: port 1(erspan0) entered disabled state [ 557.540858][T13092] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1248'. [ 557.544255][T13092] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1248'. [ 557.548719][T13092] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1248'. [ 560.187377][T13118] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 560.189534][T13118] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 560.192393][T13118] vhci_hcd vhci_hcd.0: Device attached [ 560.255191][T13118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1251'. [ 560.265572][T13118] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 560.284712][T13124] bridge0: port 3(erspan0) entered blocking state [ 560.287271][T13124] bridge0: port 3(erspan0) entered disabled state [ 560.289872][T13124] erspan0: entered allmulticast mode [ 560.296683][T13124] erspan0: entered promiscuous mode [ 560.305907][T13124] erspan0: left allmulticast mode [ 560.308076][T13124] erspan0: left promiscuous mode [ 560.310151][T13124] bridge0: port 3(erspan0) entered disabled state [ 560.347282][T13118] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 560.426561][ T5929] usb 37-1: new high-speed USB device number 19 using vhci_hcd [ 561.108490][T13119] vhci_hcd: connection reset by peer [ 561.111552][ T13] vhci_hcd vhci_hcd.0: stop threads [ 561.113918][ T13] vhci_hcd vhci_hcd.0: release socket [ 561.120212][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 561.318234][T13136] netlink: 107460 bytes leftover after parsing attributes in process `syz.1.1255'. [ 561.497241][ T5942] Bluetooth: hci0: sending frame failed (-49) [ 561.501606][ T5948] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 563.688804][T13133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1256'. [ 563.694569][T13133] syzkaller1: entered promiscuous mode [ 563.696792][T13133] syzkaller1: entered allmulticast mode [ 563.702329][T13133] program syz.4.1256 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 563.836890][ T1113] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 563.840027][ T1113] ata1.00: irq_stat 0x40000000 [ 563.842105][ T1113] ata1.00: failed command: ZAC MANAGEMENT OUT [ 563.844702][ T1113] ata1.00: cmd 9f/02:00:00:00:00/00:00:00:00:00/40 tag 13 [ 563.844702][ T1113] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 563.851587][ T1113] ata1.00: status: { DRDY ERR } [ 563.853645][ T1113] ata1.00: error: { ABRT } [ 563.855618][ T1113] ata1.00: device reported invalid CHS sector 0 [ 564.612349][T13142] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1258'. [ 565.178117][ T5943] udevd[5943]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 565.222306][T13160] bridge0: port 3(erspan0) entered blocking state [ 565.225370][T13160] bridge0: port 3(erspan0) entered disabled state [ 565.536560][ T5929] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 565.572558][T13160] bridge0: port 3(erspan0) entered blocking state [ 565.575646][T13160] bridge0: port 3(erspan0) entered forwarding state [ 565.587489][T13162] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 565.590169][T13162] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 565.593667][T13162] vhci_hcd vhci_hcd.0: Device attached [ 565.871379][ T3987] usb 40-1: SetAddress Request (34) to port 0 [ 565.884606][ T3987] usb 40-1: new SuperSpeed USB device number 34 using vhci_hcd [ 565.957077][T13170] bridge0: port 3(erspan0) entered disabled state [ 566.203714][T13172] bridge0: port 3(erspan0) entered blocking state [ 566.206161][T13172] bridge0: port 3(erspan0) entered disabled state [ 566.227654][T13172] erspan0: entered allmulticast mode [ 566.243622][T13172] erspan0: entered promiscuous mode [ 566.246624][T13172] bridge0: port 3(erspan0) entered blocking state [ 566.248628][T13172] bridge0: port 3(erspan0) entered forwarding state [ 566.312196][T13176] erspan0: left allmulticast mode [ 566.316488][T13176] erspan0: left promiscuous mode [ 566.328548][T13176] bridge0: port 3(erspan0) entered disabled state [ 566.344344][T13177] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 566.570860][T13177] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 566.905066][T13165] vhci_hcd: connection reset by peer [ 566.908526][ T1254] vhci_hcd vhci_hcd.1: stop threads [ 566.910612][ T1254] vhci_hcd vhci_hcd.1: release socket [ 566.912939][ T1254] vhci_hcd vhci_hcd.1: disconnect device [ 567.447812][T13184] bridge0: port 3(erspan0) entered blocking state [ 567.450986][T13184] bridge0: port 3(erspan0) entered disabled state [ 567.454600][T13184] erspan0: entered allmulticast mode [ 567.463130][T13184] erspan0: entered promiscuous mode [ 567.466759][T13184] bridge0: port 3(erspan0) entered blocking state [ 567.469586][T13184] bridge0: port 3(erspan0) entered forwarding state [ 567.483335][T13184] erspan0: left allmulticast mode [ 567.485740][T13184] erspan0: left promiscuous mode [ 567.488346][T13184] bridge0: port 3(erspan0) entered disabled state [ 567.806846][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.809401][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.222968][T13195] fuse: Bad value for 'fd' [ 570.589637][T13219] bridge0: port 3(erspan0) entered blocking state [ 570.639473][T13219] bridge0: port 3(erspan0) entered disabled state [ 570.986680][ T3987] usb 40-1: device descriptor read/8, error -110 [ 571.067530][T13219] erspan0: entered allmulticast mode [ 571.093520][T13219] erspan0: entered promiscuous mode [ 571.131296][T13220] erspan0: left allmulticast mode [ 571.137237][T13220] erspan0: left promiscuous mode [ 571.151095][T13220] bridge0: port 3(erspan0) entered disabled state [ 571.387009][ T3987] usb usb40-port1: attempt power cycle [ 571.445628][T13226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1273'. [ 571.450709][T13226] syzkaller1: entered promiscuous mode [ 571.453292][T13226] syzkaller1: entered allmulticast mode [ 571.458276][T13226] program syz.4.1273 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 571.588706][ T1113] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 571.591605][ T1113] ata1.00: irq_stat 0x40000000 [ 571.593116][ T1113] ata1.00: failed command: ZAC MANAGEMENT OUT [ 571.595033][ T1113] ata1.00: cmd 9f/02:00:00:00:00/00:00:00:00:00/40 tag 22 [ 571.595033][ T1113] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 571.599936][ T1113] ata1.00: status: { DRDY ERR } [ 571.601478][ T1113] ata1.00: error: { ABRT } [ 571.602925][ T1113] ata1.00: device reported invalid CHS sector 0 [ 571.977143][ T3987] usb usb40-port1: unable to enumerate USB device [ 572.852342][T13245] bridge0: port 3(erspan0) entered blocking state [ 572.855430][T13245] bridge0: port 3(erspan0) entered disabled state [ 572.858976][T13245] erspan0: entered allmulticast mode [ 572.874823][T13245] erspan0: entered promiscuous mode [ 572.905893][T13245] erspan0: left allmulticast mode [ 572.907769][T13245] erspan0: left promiscuous mode [ 572.911604][T13245] bridge0: port 3(erspan0) entered disabled state [ 575.649105][T13266] netlink: 39 bytes leftover after parsing attributes in process `syz.1.1281'. [ 575.652931][T13266] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1281'. [ 575.664461][T13266] tipc: Started in network mode [ 575.666220][T13266] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 575.669912][T13266] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 575.672875][T13266] tipc: Enabled bearer , priority 10 [ 575.684394][ T40] audit: type=1326 audit(1769686790.313:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13257 comm="syz.1.1281" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 575.691915][ T40] audit: type=1326 audit(1769686790.313:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13257 comm="syz.1.1281" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 575.698951][ T40] audit: type=1326 audit(1769686790.313:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13257 comm="syz.1.1281" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 575.705665][ T40] audit: type=1326 audit(1769686790.313:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13257 comm="syz.1.1281" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 575.725979][ T40] audit: type=1326 audit(1769686790.313:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13257 comm="syz.1.1281" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 575.745935][ T40] audit: type=1326 audit(1769686790.313:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13257 comm="syz.1.1281" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 576.011091][ T40] audit: type=1326 audit(1769686790.313:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13257 comm="syz.1.1281" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 576.025276][ T40] audit: type=1326 audit(1769686790.313:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13257 comm="syz.1.1281" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 576.033848][ T40] audit: type=1326 audit(1769686790.313:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13257 comm="syz.1.1281" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 576.042518][ T40] audit: type=1326 audit(1769686790.313:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13257 comm="syz.1.1281" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 576.180277][T13272] bridge0: port 1(erspan0) entered blocking state [ 576.196639][T13272] bridge0: port 1(erspan0) entered disabled state [ 576.199294][T13272] erspan0: entered allmulticast mode [ 576.209196][T13272] erspan0: entered promiscuous mode [ 576.212068][T13272] bridge0: port 1(erspan0) entered blocking state [ 576.214368][T13272] bridge0: port 1(erspan0) entered forwarding state [ 576.241386][T13272] erspan0: left allmulticast mode [ 576.243265][T13272] erspan0: left promiscuous mode [ 576.245606][T13272] bridge0: port 1(erspan0) entered disabled state [ 576.310789][T13270] binder: 13260:13270 ioctl 0 80000040 returned -22 [ 576.777160][ T6002] tipc: Node number set to 1 [ 576.828394][T13290] netlink: 'syz.1.1287': attribute type 2 has an invalid length. [ 577.092721][T13300] netlink: 'syz.0.1288': attribute type 1 has an invalid length. [ 577.321250][T13300] 8021q: adding VLAN 0 to HW filter on device bond29 [ 577.368873][T13304] bond29: (slave veth3): Enslaving as an active interface with a down link [ 578.851153][T13320] x_tables: duplicate underflow at hook 1 [ 579.468701][T13319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1299'. [ 579.508839][T13319] gretap0: left promiscuous mode [ 579.707731][T13329] netlink: 'syz.1.1293': attribute type 10 has an invalid length. [ 579.841174][T13319] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 579.900149][T13329] team0: Cannot enslave team device to itself [ 580.065084][T13335] delete_channel: no stack [ 581.298405][T13359] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 581.301138][T13359] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 581.314302][T13363] bridge0: port 3(erspan0) entered blocking state [ 581.317175][T13363] bridge0: port 3(erspan0) entered disabled state [ 581.333205][T13363] bridge0: port 3(erspan0) entered blocking state [ 581.335435][T13363] bridge0: port 3(erspan0) entered forwarding state [ 581.348225][T13363] bridge0: port 3(erspan0) entered disabled state [ 581.365298][T13359] vhci_hcd vhci_hcd.0: Device attached [ 581.636768][ T60] usb 38-1: SetAddress Request (50) to port 0 [ 581.639536][ T60] usb 38-1: new SuperSpeed USB device number 50 using vhci_hcd [ 581.695903][T13364] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1304'. [ 581.872058][T13373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1302'. [ 581.929250][T13369] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1302'. [ 581.933549][T13369] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1302'. [ 581.938154][T13369] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1302'. [ 581.943046][T13369] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1302'. [ 581.996125][T13372] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 582.004324][T13372] team0: Port device batadv5 added [ 582.022409][T13372] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 582.033662][T13372] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 582.597753][T13361] vhci_hcd: connection reset by peer [ 582.600201][ T1209] vhci_hcd vhci_hcd.0: stop threads [ 582.602427][ T1209] vhci_hcd vhci_hcd.0: release socket [ 582.604767][ T1209] vhci_hcd vhci_hcd.0: disconnect device [ 582.688878][T13380] bridge0: port 1(erspan0) entered blocking state [ 582.702075][T13380] bridge0: port 1(erspan0) entered disabled state [ 582.705049][T13380] erspan0: entered allmulticast mode [ 582.708662][T13380] erspan0: entered promiscuous mode [ 582.710967][T13380] bridge0: port 1(erspan0) entered blocking state [ 582.713045][T13380] bridge0: port 1(erspan0) entered forwarding state [ 582.734065][T13380] erspan0: left allmulticast mode [ 582.736281][T13380] erspan0: left promiscuous mode [ 582.740848][T13380] bridge0: port 1(erspan0) entered disabled state [ 584.304957][T13404] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 584.307255][T13404] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 584.317560][T13404] vhci_hcd vhci_hcd.0: Device attached [ 584.344349][T13404] netlink: 'syz.0.1308': attribute type 1 has an invalid length. [ 584.371740][T13404] 8021q: adding VLAN 0 to HW filter on device bond30 [ 584.673049][T13413] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1312'. [ 585.208205][T13422] trusted_key: syz.1.1311 sent an empty control message without MSG_MORE. [ 586.134289][T13405] vhci_hcd: connection closed [ 586.134568][ T13] vhci_hcd vhci_hcd.0: stop threads [ 586.157058][ T13] vhci_hcd vhci_hcd.0: release socket [ 586.159302][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 586.218753][T13428] bridge0: port 1(erspan0) entered blocking state [ 586.227669][T13428] bridge0: port 1(erspan0) entered disabled state [ 586.411339][T13428] erspan0: entered allmulticast mode [ 586.420336][T13428] erspan0: entered promiscuous mode [ 586.422399][T13428] bridge0: port 1(erspan0) entered blocking state [ 586.424520][T13428] bridge0: port 1(erspan0) entered forwarding state [ 586.427430][T13432] erspan0: left allmulticast mode [ 586.429073][T13432] erspan0: left promiscuous mode [ 586.430789][T13432] bridge0: port 1(erspan0) entered disabled state [ 586.467783][T13433] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 586.470534][T13433] batadv5: entered promiscuous mode [ 586.472651][T13433] batadv5: entered allmulticast mode [ 586.474968][T13433] team0: Port device batadv5 added [ 586.746607][ T60] usb 38-1: device descriptor read/8, error -110 [ 587.147136][ T60] usb usb38-port1: attempt power cycle [ 587.516517][ T6019] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 588.537727][T13460] : renamed from bond_slave_0 [ 588.635014][ T60] usb usb38-port1: unable to enumerate USB device [ 589.114699][T13466] netlink: 39 bytes leftover after parsing attributes in process `syz.0.1322'. [ 589.118297][T13466] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1322'. [ 589.128492][T13466] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 589.131597][T13466] tipc: Enabled bearer , priority 10 [ 589.143063][ T40] kauditd_printk_skb: 48 callbacks suppressed [ 589.143079][ T40] audit: type=1326 audit(1769686803.773:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13463 comm="syz.0.1322" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 589.156810][ T40] audit: type=1326 audit(1769686803.773:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13463 comm="syz.0.1322" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 589.189565][ T40] audit: type=1326 audit(1769686803.773:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13463 comm="syz.0.1322" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 589.267119][ T40] audit: type=1326 audit(1769686803.773:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13463 comm="syz.0.1322" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 589.285788][ T40] audit: type=1326 audit(1769686803.773:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13463 comm="syz.0.1322" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 589.303877][ T40] audit: type=1326 audit(1769686803.773:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13463 comm="syz.0.1322" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 589.326577][ T40] audit: type=1326 audit(1769686803.773:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13463 comm="syz.0.1322" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 589.341494][ T40] audit: type=1326 audit(1769686803.773:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13463 comm="syz.0.1322" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 589.356524][ T40] audit: type=1326 audit(1769686803.773:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13463 comm="syz.0.1322" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 589.379684][ T40] audit: type=1326 audit(1769686803.783:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13463 comm="syz.0.1322" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 589.620377][T13469] team0: Mode changed to "roundrobin" [ 590.379877][T13476] overlay: Unknown parameter '/' [ 590.454571][T13477] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 590.535703][T13477] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 590.540431][T13477] overlayfs: failed to look up (tracing) for ino (-66) [ 591.439296][T13493] 9pnet_virtio: no channels available for device syz [ 591.512575][T13488] bridge0: port 3(erspan0) entered blocking state [ 591.515337][T13488] bridge0: port 3(erspan0) entered disabled state [ 591.518069][T13488] erspan0: entered allmulticast mode [ 591.521454][T13488] erspan0: entered promiscuous mode [ 591.525675][T13488] erspan0: left allmulticast mode [ 591.528269][T13488] erspan0: left promiscuous mode [ 591.530228][T13488] bridge0: port 3(erspan0) entered disabled state [ 591.548604][T13487] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 591.550681][T13487] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 591.553053][T13487] vhci_hcd vhci_hcd.0: Device attached [ 591.582521][T13487] netlink: 'syz.3.1327': attribute type 1 has an invalid length. [ 591.594444][T13487] 8021q: adding VLAN 0 to HW filter on device bond27 [ 591.807572][ T60] usb 43-1: new low-speed USB device number 20 using vhci_hcd [ 591.927209][T13494] vhci_hcd: connection reset by peer [ 591.973011][ T6070] vhci_hcd vhci_hcd.3: stop threads [ 591.975142][ T6070] vhci_hcd vhci_hcd.3: release socket [ 592.036107][ T6070] vhci_hcd vhci_hcd.3: disconnect device [ 592.058258][T13508] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 592.060373][T13508] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 592.076514][T13508] vhci_hcd vhci_hcd.0: Device attached [ 592.131454][T13512] netlink: 'syz.1.1332': attribute type 1 has an invalid length. [ 592.158875][T13512] 8021q: adding VLAN 0 to HW filter on device bond22 [ 592.228996][T13512] bond22: (slave veth3): Enslaving as an active interface with a down link [ 592.251901][T13514] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 592.346952][ T6085] usb 46-1: SetAddress Request (38) to port 0 [ 592.350226][ T6085] usb 46-1: new SuperSpeed USB device number 38 using vhci_hcd [ 592.678929][T13509] vhci_hcd: connection reset by peer [ 592.683187][ T1063] vhci_hcd vhci_hcd.4: stop threads [ 592.685320][ T1063] vhci_hcd vhci_hcd.4: release socket [ 592.692217][ T1063] vhci_hcd vhci_hcd.4: disconnect device [ 592.723852][T13516] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 592.727351][T13516] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 592.732196][T13516] vhci_hcd vhci_hcd.0: Device attached [ 592.896689][T13520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1335'. [ 592.933237][T13520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1335'. [ 592.936104][T13520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1335'. [ 592.959271][T13520] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1335'. [ 592.962590][T13520] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1335'. [ 592.966205][T13520] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1335'. [ 593.016553][ T6019] usb 38-1: SetAddress Request (54) to port 0 [ 593.018349][ T6019] usb 38-1: new SuperSpeed USB device number 54 using vhci_hcd [ 593.021792][T13517] vhci_hcd: connection closed [ 593.022077][ T1063] vhci_hcd vhci_hcd.0: stop threads [ 593.025289][ T1063] vhci_hcd vhci_hcd.0: release socket [ 593.028242][ T1063] vhci_hcd vhci_hcd.0: disconnect device [ 593.059344][ T6019] usb 38-1: enqueue for inactive port 0 [ 594.321505][ T6019] usb usb38-port1: attempt power cycle [ 594.564127][T13542] bridge0: port 3(erspan0) entered blocking state [ 594.567963][T13542] bridge0: port 3(erspan0) entered disabled state [ 594.582714][T13542] bridge0: port 3(erspan0) entered blocking state [ 594.584882][T13542] bridge0: port 3(erspan0) entered forwarding state [ 594.597613][T13542] bridge0: port 3(erspan0) entered disabled state [ 594.897888][ T6019] usb usb38-port1: unable to enumerate USB device [ 595.512174][T13556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1341'. [ 596.896574][ T60] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 597.316082][T13564] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 597.318758][T13564] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 597.332476][T13564] vhci_hcd vhci_hcd.0: Device attached [ 597.386781][ T6085] usb 46-1: device descriptor read/8, error -110 [ 597.417396][T13564] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1342'. [ 597.642296][T13571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1344'. [ 597.692961][T13568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1344'. [ 597.736504][ T6194] usb 44-1: SetAddress Request (34) to port 0 [ 597.738491][ T6194] usb 44-1: new SuperSpeed USB device number 34 using vhci_hcd [ 597.809160][ T6085] usb usb46-port1: attempt power cycle [ 597.976769][T13581] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 597.978909][T13581] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 597.981522][T13581] vhci_hcd vhci_hcd.0: Device attached [ 598.041283][T13581] __nla_validate_parse: 4 callbacks suppressed [ 598.041339][T13581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1345'. [ 598.046637][T13581] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 598.087319][T13581] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 598.276573][ T60] usb 45-1: new high-speed USB device number 10 using vhci_hcd [ 598.326497][ T3987] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 598.476527][ T3987] usb 6-1: Using ep0 maxpacket: 8 [ 598.480855][ T3987] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 598.484501][ T3987] usb 6-1: config 0 has no interface number 0 [ 598.487455][ T3987] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 598.492254][ T3987] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 598.498149][ T3987] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 598.502896][ T3987] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 598.508833][ T3987] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 598.512666][ T3987] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.525284][ T3987] usb 6-1: config 0 descriptor?? [ 598.541703][ T3987] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 599.323880][T13582] vhci_hcd: connection reset by peer [ 599.331615][ T1143] vhci_hcd vhci_hcd.4: stop threads [ 599.333698][ T1143] vhci_hcd vhci_hcd.4: release socket [ 599.336317][ T1143] vhci_hcd vhci_hcd.4: disconnect device [ 599.464272][T13565] vhci_hcd: connection reset by peer [ 599.466284][ T1063] vhci_hcd vhci_hcd.3: stop threads [ 599.472891][ T1063] vhci_hcd vhci_hcd.3: release socket [ 599.475385][ T1063] vhci_hcd vhci_hcd.3: disconnect device [ 600.088067][T13593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1347'. [ 600.091923][T13593] syzkaller1: entered promiscuous mode [ 600.093897][T13593] syzkaller1: entered allmulticast mode [ 600.100525][T13593] program syz.0.1347 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 600.136966][ T1113] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 600.141181][ T1113] ata1.00: irq_stat 0x40000000 [ 600.142854][ T1113] ata1.00: failed command: ZAC MANAGEMENT OUT [ 600.144895][ T1113] ata1.00: cmd 9f/02:00:00:00:00/00:00:00:00:00/40 tag 31 [ 600.144895][ T1113] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 600.150071][ T1113] ata1.00: status: { DRDY ERR } [ 600.169888][ T1113] ata1.00: error: { ABRT } [ 600.173709][ T1113] ata1.00: device reported invalid CHS sector 0 [ 600.475467][T13604] netlink: 'syz.4.1349': attribute type 10 has an invalid length. [ 600.540922][T13604] team0: Cannot enslave team device to itself [ 600.931178][ T6002] usb 6-1: USB disconnect, device number 8 [ 601.113239][ T6002] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 601.384180][T13612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1352'. [ 602.826588][ T6194] usb 44-1: device descriptor read/8, error -110 [ 603.227529][ T6194] usb usb44-port1: attempt power cycle [ 603.405377][ T60] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 603.804203][ T6194] usb usb44-port1: unable to enumerate USB device [ 604.024975][T13625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1354'. [ 604.083881][T13628] netlink: 'syz.4.1355': attribute type 2 has an invalid length. [ 604.089475][T13622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1354'. [ 604.093365][T13622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1354'. [ 604.137674][T13622] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1354'. [ 604.192611][T13625] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1354'. [ 604.260500][T13635] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1354'. [ 604.542722][T13644] syz.3.1356 (13644): drop_caches: 2 [ 604.594728][ T6085] usb usb46-port1: unable to enumerate USB device [ 605.486798][T13646] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 606.640452][T13653] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 606.643551][T13653] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 606.663331][T13653] vhci_hcd vhci_hcd.0: Device attached [ 606.879615][T13653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1358'. [ 606.883771][T13653] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 606.900948][T13653] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 606.906580][ T60] usb 43-1: new high-speed USB device number 21 using vhci_hcd [ 606.954047][T13661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1359'. [ 606.963248][T13661] dvmrp6: entered allmulticast mode [ 607.150990][T13654] vhci_hcd: connection reset by peer [ 607.158243][ T1143] vhci_hcd vhci_hcd.3: stop threads [ 607.160126][ T1143] vhci_hcd vhci_hcd.3: release socket [ 607.162341][ T1143] vhci_hcd vhci_hcd.3: disconnect device [ 607.387574][T13665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1360'. [ 607.393874][T13665] syzkaller1: entered promiscuous mode [ 607.396391][T13665] syzkaller1: entered allmulticast mode [ 607.404918][T13665] program syz.4.1360 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 607.476685][ T1113] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 607.479839][ T1113] ata1.00: irq_stat 0x40000000 [ 607.481906][ T1113] ata1.00: failed command: ZAC MANAGEMENT OUT [ 607.483980][ T1113] ata1.00: cmd 9f/02:00:00:00:00/00:00:00:00:00/40 tag 7 [ 607.483980][ T1113] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 607.489217][ T1113] ata1.00: status: { DRDY ERR } [ 607.491295][ T1113] ata1.00: error: { ABRT } [ 607.492859][ T1113] ata1.00: device reported invalid CHS sector 0 [ 607.662592][T13672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1361'. [ 607.999760][T13684] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 608.002450][T13684] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 608.006013][T13684] vhci_hcd vhci_hcd.0: Device attached [ 608.049968][T13684] netlink: 'syz.3.1362': attribute type 1 has an invalid length. [ 609.078009][T13684] 8021q: adding VLAN 0 to HW filter on device bond28 [ 609.294893][T13685] vhci_hcd: connection closed [ 609.295043][ T1063] vhci_hcd vhci_hcd.3: stop threads [ 609.304640][ T1063] vhci_hcd vhci_hcd.3: release socket [ 609.312314][ T1063] vhci_hcd vhci_hcd.3: disconnect device [ 609.897112][T13680] /dev/sr0: Can't open blockdev [ 610.861813][T13718] __nla_validate_parse: 6 callbacks suppressed [ 610.861832][T13718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1378'. [ 611.674678][T13730] netlink: 'syz.1.1370': attribute type 1 has an invalid length. [ 611.679327][T13726] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 611.682141][T13726] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 611.685465][T13726] vhci_hcd vhci_hcd.0: Device attached [ 611.946927][ T6019] usb 39-1: new low-speed USB device number 18 using vhci_hcd [ 612.026561][ T60] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 613.545767][T13730] 8021q: adding VLAN 0 to HW filter on device bond24 [ 614.542719][T13741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1373'. [ 614.593659][T13741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1373'. [ 614.597903][T13741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1373'. [ 614.645589][T13747] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1373'. [ 614.696179][T13748] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1373'. [ 614.751038][T13741] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1373'. [ 614.954686][T13731] vhci_hcd: connection reset by peer [ 614.957925][ T6070] vhci_hcd vhci_hcd.1: stop threads [ 614.960508][ T6070] vhci_hcd vhci_hcd.1: release socket [ 614.962966][ T6070] vhci_hcd vhci_hcd.1: disconnect device [ 615.520274][T13765] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 615.522564][T13765] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 615.525125][T13765] vhci_hcd vhci_hcd.0: Device attached [ 615.575981][T13765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1374'. [ 615.586493][T13765] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 615.628883][T13765] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 615.842196][T13771] netlink: 'syz.3.1375': attribute type 10 has an invalid length. [ 615.848535][T13771] team0: left promiscuous mode [ 615.850317][T13771] team_slave_0: left promiscuous mode [ 615.853464][T13771] team_slave_1: left promiscuous mode [ 615.886910][T13771] batadv5: left promiscuous mode [ 615.890256][T13771] team0: left allmulticast mode [ 615.892975][T13771] team_slave_0: left allmulticast mode [ 615.895528][T13771] team_slave_1: left allmulticast mode [ 615.943644][T13771] batadv5: left allmulticast mode [ 615.970149][T13771] team0: Cannot enslave team device to itself [ 616.317180][T13761] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 616.319750][T13761] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 616.323341][T13761] vhci_hcd vhci_hcd.0: Device attached [ 616.369833][T13761] ieee802154 phy0 wpan0: encryption failed: -22 [ 616.620829][T13780] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 616.623710][T13780] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 616.645009][T13780] vhci_hcd vhci_hcd.0: Device attached [ 616.726513][ T1164] usb 38-1: SetAddress Request (58) to port 0 [ 616.728521][ T1164] usb 38-1: new SuperSpeed USB device number 58 using vhci_hcd [ 616.876540][ T6194] usb 45-1: new low-speed USB device number 11 using vhci_hcd [ 616.913341][T13780] netlink: 'syz.4.1379': attribute type 1 has an invalid length. [ 616.960857][T13766] vhci_hcd: connection closed [ 616.976710][ T6070] vhci_hcd vhci_hcd.1: stop threads [ 616.980038][ T6070] vhci_hcd vhci_hcd.1: release socket [ 616.981780][ T6070] vhci_hcd vhci_hcd.1: disconnect device [ 617.077579][T13780] 8021q: adding VLAN 0 to HW filter on device bond23 [ 617.094543][ T6019] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 617.227158][T13781] vhci_hcd: connection reset by peer [ 617.229572][ T13] vhci_hcd vhci_hcd.4: stop threads [ 617.231798][ T13] vhci_hcd vhci_hcd.4: release socket [ 617.234267][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 617.333745][T13775] vhci_hcd: connection reset by peer [ 617.336761][ T6070] vhci_hcd vhci_hcd.0: stop threads [ 617.339007][ T6070] vhci_hcd vhci_hcd.0: release socket [ 617.341349][ T6070] vhci_hcd vhci_hcd.0: disconnect device [ 617.683771][T13789] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 617.685918][T13789] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 617.688769][T13789] vhci_hcd vhci_hcd.0: Device attached [ 617.722226][T13789] netlink: 'syz.3.1380': attribute type 1 has an invalid length. [ 617.743244][T13789] 8021q: adding VLAN 0 to HW filter on device bond30 [ 617.927147][ T60] usb 43-1: new low-speed USB device number 22 using vhci_hcd [ 618.746635][ C2] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 619.055804][T13803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1384'. [ 619.300890][T13791] vhci_hcd: connection reset by peer [ 619.302897][ T1149] vhci_hcd vhci_hcd.3: stop threads [ 619.304638][ T1149] vhci_hcd vhci_hcd.3: release socket [ 619.320127][ T1149] vhci_hcd vhci_hcd.3: disconnect device [ 620.725925][T13819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1387'. [ 620.800474][T13824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1387'. [ 620.850764][T13819] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1387'. [ 620.907071][T13819] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1387'. [ 620.912599][T13819] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1387'. [ 621.808713][ T1164] usb 38-1: device descriptor read/8, error -110 [ 622.026662][ T6194] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 622.157328][T13845] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 622.160157][T13845] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 622.163226][T13845] vhci_hcd vhci_hcd.0: Device attached [ 622.237523][ T1164] usb usb38-port1: attempt power cycle [ 622.238815][T13842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1390'. [ 622.251402][T13842] syzkaller1: entered promiscuous mode [ 622.253837][T13842] syzkaller1: entered allmulticast mode [ 622.268184][T13842] program syz.1.1390 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 622.677680][ T1113] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 622.681468][ T1113] ata1.00: irq_stat 0x40000000 [ 622.683710][ T1113] ata1.00: failed command: ZAC MANAGEMENT OUT [ 622.686683][ T1113] ata1.00: cmd 9f/02:00:00:00:00/00:00:00:00:00/40 tag 8 [ 622.686683][ T1113] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 622.694005][ T1113] ata1.00: status: { DRDY ERR } [ 622.696217][ T1113] ata1.00: error: { ABRT } [ 622.698500][ T1113] ata1.00: device reported invalid CHS sector 0 [ 622.702413][T13845] netlink: 'syz.3.1392': attribute type 1 has an invalid length. [ 622.762487][T13845] 8021q: adding VLAN 0 to HW filter on device bond31 [ 622.828056][ T1164] usb usb38-port1: unable to enumerate USB device [ 622.929933][T13853] netlink: 'syz.0.1389': attribute type 10 has an invalid length. [ 622.944333][T13846] vhci_hcd: connection closed [ 622.950143][ T1143] vhci_hcd vhci_hcd.3: stop threads [ 622.955648][ T1143] vhci_hcd vhci_hcd.3: release socket [ 622.959943][T13853] team0: Cannot enslave team device to itself [ 622.970751][ T1143] vhci_hcd vhci_hcd.3: disconnect device [ 623.056678][ T60] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 624.438232][T13866] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.456539][T13858] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 624.458684][T13858] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 624.476534][T13858] vhci_hcd vhci_hcd.0: Device attached [ 624.746721][ T1164] usb 40-1: SetAddress Request (38) to port 0 [ 624.749120][ T1164] usb 40-1: new SuperSpeed USB device number 38 using vhci_hcd [ 625.199033][T13864] vhci_hcd: connection reset by peer [ 625.201724][ T62] vhci_hcd vhci_hcd.1: stop threads [ 625.203783][ T62] vhci_hcd vhci_hcd.1: release socket [ 625.206321][ T62] vhci_hcd vhci_hcd.1: disconnect device [ 625.546611][T13879] bridge0: port 1(erspan0) entered blocking state [ 625.548753][T13879] bridge0: port 1(erspan0) entered disabled state [ 625.550954][T13879] erspan0: entered allmulticast mode [ 625.553444][T13879] erspan0: entered promiscuous mode [ 625.566813][T13879] erspan0: left allmulticast mode [ 625.568560][T13879] erspan0: left promiscuous mode [ 625.570860][T13879] bridge0: port 1(erspan0) entered disabled state [ 626.153240][T13889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1400'. [ 629.000657][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.002861][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.171685][T13904] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 629.634536][T13916] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 629.636477][T13916] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 629.698636][T13916] vhci_hcd vhci_hcd.0: Device attached [ 630.004274][T13916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1405'. [ 630.007431][T13916] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 630.033856][T13916] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 630.406949][ T1164] usb 40-1: device descriptor read/8, error -110 [ 630.601632][ T6019] usb 43-1: new high-speed USB device number 23 using vhci_hcd [ 630.772350][T13922] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 630.774504][T13922] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 630.774595][T13922] vhci_hcd vhci_hcd.0: Device attached [ 630.788911][T13922] netlink: 'syz.1.1408': attribute type 1 has an invalid length. [ 630.799934][T13922] 8021q: adding VLAN 0 to HW filter on device bond25 [ 630.807092][ T1164] usb usb40-port1: attempt power cycle [ 630.810280][T13928] vhci_hcd: connection closed [ 630.813253][ T1149] vhci_hcd vhci_hcd.1: stop threads [ 630.823749][ T1149] vhci_hcd vhci_hcd.1: release socket [ 630.825960][ T1149] vhci_hcd vhci_hcd.1: disconnect device [ 630.891738][T13920] vhci_hcd: connection reset by peer [ 630.891918][ T1149] vhci_hcd vhci_hcd.3: stop threads [ 630.891933][ T1149] vhci_hcd vhci_hcd.3: release socket [ 630.892276][ T1149] vhci_hcd vhci_hcd.3: disconnect device [ 631.517494][ T1164] usb usb40-port1: unable to enumerate USB device [ 631.949019][T13948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1413'. [ 632.008793][T13945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1413'. [ 632.039413][T13945] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1413'. [ 632.043663][T13945] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1413'. [ 632.049343][T13945] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1413'. [ 632.132402][T13942] /dev/sr0: Can't open blockdev [ 632.864036][T13967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1416'. [ 632.931869][T13964] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1416'. [ 632.936184][T13964] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1416'. [ 632.940665][T13964] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1416'. [ 633.225232][T13977] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 633.227429][T13977] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 633.229919][T13977] vhci_hcd vhci_hcd.0: Device attached [ 633.253286][T13977] netlink: 'syz.4.1419': attribute type 1 has an invalid length. [ 633.265608][T13977] 8021q: adding VLAN 0 to HW filter on device bond26 [ 633.293491][T13983] vhci_hcd: connection closed [ 633.294078][ T1063] vhci_hcd vhci_hcd.4: stop threads [ 633.298328][ T1063] vhci_hcd vhci_hcd.4: release socket [ 633.300520][ T1063] vhci_hcd vhci_hcd.4: disconnect device [ 633.609737][T13990] netlink: 'syz.0.1417': attribute type 10 has an invalid length. [ 633.618799][T13990] team0: Cannot enslave team device to itself [ 635.622555][T14027] overlay: Unknown parameter '/' [ 635.626972][T14027] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 635.662654][T14027] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 635.666114][T14027] overlayfs: failed to look up (tracing) for ino (-66) [ 635.696762][ T6019] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 635.770513][T14022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1434'. [ 635.775190][T14022] syzkaller1: entered promiscuous mode [ 635.777035][T14022] syzkaller1: entered allmulticast mode [ 635.783025][T14022] program syz.0.1434 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 635.826701][ T1113] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 635.829077][ T1113] ata1.00: irq_stat 0x40000000 [ 635.830714][ T1113] ata1.00: failed command: ZAC MANAGEMENT OUT [ 635.832704][ T1113] ata1.00: cmd 9f/02:00:00:00:00/00:00:00:00:00/40 tag 3 [ 635.832704][ T1113] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 635.837850][ T1113] ata1.00: status: { DRDY ERR } [ 635.839485][ T1113] ata1.00: error: { ABRT } [ 635.840960][ T1113] ata1.00: device reported invalid CHS sector 0 [ 636.343073][T14039] netlink: 'syz.3.1431': attribute type 2 has an invalid length. [ 637.445331][T14056] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 637.665662][T14059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1435'. [ 639.610015][T14072] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 639.612110][T14072] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 639.621851][T14072] vhci_hcd vhci_hcd.0: Device attached [ 640.046770][ T9] usb 45-1: new low-speed USB device number 12 using vhci_hcd [ 640.970301][T14083] bridge0: port 3(erspan0) entered blocking state [ 640.972740][T14083] bridge0: port 3(erspan0) entered disabled state [ 640.975338][T14083] erspan0: entered allmulticast mode [ 640.978799][T14083] erspan0: entered promiscuous mode [ 640.981172][T14083] bridge0: port 3(erspan0) entered blocking state [ 640.983741][T14083] bridge0: port 3(erspan0) entered forwarding state [ 640.998913][T14083] erspan0: left allmulticast mode [ 641.000823][T14083] erspan0: left promiscuous mode [ 641.002581][T14083] bridge0: port 3(erspan0) entered disabled state [ 642.930412][ C1] sched: DL replenish lagged too much [ 642.996654][T14073] vhci_hcd: connection reset by peer [ 643.002019][ T62] vhci_hcd vhci_hcd.4: stop threads [ 643.004500][ T62] vhci_hcd vhci_hcd.4: release socket [ 643.007147][ T62] vhci_hcd vhci_hcd.4: disconnect device [ 644.041307][T14086] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 644.044055][T14086] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 644.047029][T14086] vhci_hcd vhci_hcd.0: Device attached [ 644.286580][ T1164] usb 43-1: new low-speed USB device number 24 using vhci_hcd [ 644.357982][T14086] netlink: 'syz.3.1442': attribute type 1 has an invalid length. [ 644.379219][T14086] 8021q: adding VLAN 0 to HW filter on device bond33 [ 645.337594][ T9] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 647.140235][T14088] vhci_hcd: connection reset by peer [ 647.142701][ T6070] vhci_hcd vhci_hcd.3: stop threads [ 647.145036][ T6070] vhci_hcd vhci_hcd.3: release socket [ 647.148341][ T6070] vhci_hcd vhci_hcd.3: disconnect device [ 647.627186][T14098] /dev/sr0: Can't open blockdev [ 648.512606][T14113] overlay: Unknown parameter '/' [ 648.528252][T14113] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 648.619339][T14113] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 648.624114][T14113] overlayfs: failed to look up (tracing) for ino (-66) [ 649.466731][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 649.568737][ T1164] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 651.372655][T14137] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 651.374755][T14137] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 651.377294][T14137] vhci_hcd vhci_hcd.0: Device attached [ 651.389815][T14137] netlink: 'syz.1.1452': attribute type 1 has an invalid length. [ 651.408974][T14137] 8021q: adding VLAN 0 to HW filter on device bond26 [ 651.417450][T14139] vhci_hcd: connection closed [ 651.417871][ T13] vhci_hcd vhci_hcd.1: stop threads [ 651.422308][ T13] vhci_hcd vhci_hcd.1: release socket [ 651.426515][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 652.881975][T14156] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 652.884112][T14156] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 652.887749][T14156] vhci_hcd vhci_hcd.0: Device attached [ 652.925426][T14156] netlink: 'syz.0.1456': attribute type 1 has an invalid length. [ 652.945832][T14156] 8021q: adding VLAN 0 to HW filter on device bond33 [ 653.126513][ T60] usb 37-1: new low-speed USB device number 21 using vhci_hcd [ 653.834773][T14168] comedi comedi0: Minor 2 could not be opened [ 653.935364][T14158] vhci_hcd: connection reset by peer [ 653.950385][ T6076] vhci_hcd vhci_hcd.0: stop threads [ 653.952035][ T6076] vhci_hcd vhci_hcd.0: release socket [ 653.953743][ T6076] vhci_hcd vhci_hcd.0: disconnect device [ 654.114509][T14172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1459'. [ 654.125749][T14172] dvmrp6: entered allmulticast mode [ 654.855674][T14184] netlink: 'syz.1.1460': attribute type 10 has an invalid length. [ 654.876232][T14184] team0: Cannot enslave team device to itself [ 655.440674][T14189] capability: warning: `syz.4.1464' uses 32-bit capabilities (legacy support in use) [ 656.069781][T14203] netlink: 'syz.1.1467': attribute type 12 has an invalid length. [ 656.206703][ T6002] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 656.406590][ T6002] usb 5-1: Using ep0 maxpacket: 32 [ 656.425349][ T6002] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 656.428970][ T6002] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 656.433436][ T6002] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 656.437766][ T6002] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 656.442627][ T6002] usb 5-1: config 0 interface 0 has no altsetting 0 [ 656.447375][ T6002] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 656.450953][ T6002] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 656.454078][ T6002] usb 5-1: Product: syz [ 656.455839][ T6002] usb 5-1: Manufacturer: syz [ 656.457671][ T6002] usb 5-1: SerialNumber: syz [ 656.461479][ T6002] usb 5-1: config 0 descriptor?? [ 656.469456][ T6002] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 656.477703][ T6002] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 658.107767][T14220] netlink: 'syz.3.1469': attribute type 4 has an invalid length. [ 658.133188][T14220] netlink: 'syz.3.1469': attribute type 4 has an invalid length. [ 658.178873][T14223] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 658.180980][T14223] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 658.189849][T14223] vhci_hcd vhci_hcd.0: Device attached [ 658.262458][T14223] netlink: 'syz.1.1471': attribute type 1 has an invalid length. [ 658.276620][ T60] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 658.437390][ T6194] usb 39-1: new low-speed USB device number 19 using vhci_hcd [ 658.451179][T14223] 8021q: adding VLAN 0 to HW filter on device bond27 [ 658.684685][T14224] vhci_hcd: connection reset by peer [ 658.690465][ T6070] vhci_hcd vhci_hcd.1: stop threads [ 658.692715][ T6070] vhci_hcd vhci_hcd.1: release socket [ 658.696560][ T6070] vhci_hcd vhci_hcd.1: disconnect device [ 659.196184][ T843] usb 5-1: USB disconnect, device number 7 [ 659.201752][ T843] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 659.649865][T14238] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 659.650933][T14235] bridge0: port 3(erspan0) entered blocking state [ 659.651985][T14238] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 659.658253][T14235] bridge0: port 3(erspan0) entered disabled state [ 659.661067][T14235] erspan0: entered allmulticast mode [ 659.665999][T14235] erspan0: entered promiscuous mode [ 659.668751][T14235] bridge0: port 3(erspan0) entered blocking state [ 659.670356][T14238] vhci_hcd vhci_hcd.0: Device attached [ 659.671537][T14235] bridge0: port 3(erspan0) entered forwarding state [ 659.681705][T14235] erspan0: left allmulticast mode [ 659.683912][T14235] erspan0: left promiscuous mode [ 659.686276][T14235] bridge0: port 3(erspan0) entered disabled state [ 659.763773][T14238] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1473'. [ 659.768326][T14238] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 659.777246][T14238] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 659.916548][ T60] usb 43-1: new high-speed USB device number 25 using vhci_hcd [ 660.146217][T14249] bridge0: port 3(erspan0) entered blocking state [ 660.149003][T14249] bridge0: port 3(erspan0) entered disabled state [ 660.152129][T14249] erspan0: entered allmulticast mode [ 660.166614][T14249] erspan0: entered promiscuous mode [ 660.172938][T14249] erspan0: left allmulticast mode [ 660.174644][T14249] erspan0: left promiscuous mode [ 660.176378][T14249] bridge0: port 3(erspan0) entered disabled state [ 660.387528][T14239] vhci_hcd: connection reset by peer [ 660.389424][ T6076] vhci_hcd vhci_hcd.3: stop threads [ 660.391620][ T6076] vhci_hcd vhci_hcd.3: release socket [ 660.393583][ T6076] vhci_hcd vhci_hcd.3: disconnect device [ 660.848958][T14258] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 662.289223][T14269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1478'. [ 662.351869][T14265] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1478'. [ 662.357938][T14265] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1478'. [ 662.369094][T14265] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1478'. [ 663.227996][T14284] bridge0: port 1(erspan0) entered blocking state [ 663.230183][T14284] bridge0: port 1(erspan0) entered disabled state [ 663.232347][T14284] erspan0: entered allmulticast mode [ 663.234833][T14284] erspan0: entered promiscuous mode [ 663.256683][T14284] erspan0: left allmulticast mode [ 663.258326][T14284] erspan0: left promiscuous mode [ 663.260417][T14284] bridge0: port 1(erspan0) entered disabled state [ 663.378153][ T10] ================================================================== [ 663.380707][ T10] BUG: KASAN: slab-use-after-free in hci_uart_write_work+0x81c/0x950 [ 663.383311][ T10] Read of size 4 at addr ffff88806db24570 by task kworker/0:1/10 [ 663.387074][ T10] [ 663.388716][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 663.388732][ T10] Tainted: [L]=SOFTLOCKUP [ 663.388736][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 663.388744][ T10] Workqueue: events hci_uart_write_work [ 663.388758][ T10] Call Trace: [ 663.388763][ T10] [ 663.388767][ T10] dump_stack_lvl+0x100/0x190 [ 663.388781][ T10] print_report+0x156/0x4c9 [ 663.388796][ T10] ? __virt_addr_valid+0x81/0x620 [ 663.388812][ T10] ? __phys_addr+0xe8/0x180 [ 663.388831][ T10] ? hci_uart_write_work+0x81c/0x950 [ 663.388844][ T10] kasan_report+0xdf/0x1a0 [ 663.388866][ T10] ? hci_uart_write_work+0x81c/0x950 [ 663.388879][ T10] hci_uart_write_work+0x81c/0x950 [ 663.388889][ T10] ? __pfx_pty_write+0x10/0x10 [ 663.388904][ T10] process_one_work+0x9c2/0x1840 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 663.388924][ T10] ? __pfx_process_one_work+0x10/0x10 [ 663.388943][ T10] ? assign_work+0x19c/0x250 [ 663.388960][ T10] worker_thread+0x5da/0xe40 [ 663.388979][ T10] ? kthread+0x17d/0x730 [ 663.388998][ T10] ? __pfx_worker_thread+0x10/0x10 [ 663.389014][ T10] kthread+0x3b3/0x730 [ 663.389029][ T10] ? __pfx_kthread+0x10/0x10 [ 663.389044][ T10] ? ret_from_fork+0x79/0xaf0 [ 663.389054][ T10] ? ret_from_fork+0x79/0xaf0 [ 663.389063][ T10] ? rcu_is_watching+0x12/0xc0 [ 663.389074][ T10] ? __pfx_kthread+0x10/0x10 [ 663.389089][ T10] ret_from_fork+0x754/0xaf0 [ 663.389100][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 663.389110][ T10] ? __switch_to+0x7b9/0x10c0 [ 663.389124][ T10] ? __pfx_kthread+0x10/0x10 [ 663.389139][ T10] ret_from_fork_asm+0x1a/0x30 [ 663.389159][ T10] [ 663.389163][ T10] [ 663.442559][ T10] Allocated by task 34: [ 663.444096][ T10] kasan_save_stack+0x30/0x50 [ 663.445761][ T10] kasan_save_track+0x14/0x30 [ 663.447279][ T10] __kasan_slab_alloc+0x89/0x90 [ 663.448712][ T10] kmem_cache_alloc_node_noprof+0x303/0x880 [ 663.450486][ T10] __alloc_skb+0x156/0x410 [ 663.451925][ T10] bcsp_prepare_pkt+0xe0/0xa90 [ 663.453450][ T10] bcsp_dequeue+0x237/0x4b0 [ 663.455068][ T10] hci_uart_write_work+0x4d9/0x950 [ 663.457047][ T10] process_one_work+0x9c2/0x1840 [ 663.458700][ T10] worker_thread+0x5da/0xe40 [ 663.460556][ T10] kthread+0x3b3/0x730 [ 663.462038][ T10] ret_from_fork+0x754/0xaf0 [ 663.463518][ T10] ret_from_fork_asm+0x1a/0x30 [ 663.465093][ T10] [ 663.465859][ T10] The buggy address belongs to the object at ffff88806db24500 [ 663.465859][ T10] which belongs to the cache skbuff_head_cache of size 240 [ 663.470433][ T10] The buggy address is located 112 bytes inside of [ 663.470433][ T10] freed 240-byte region [ffff88806db24500, ffff88806db245f0) [ 663.474704][ T10] [ 663.475482][ T10] The buggy address belongs to the physical page: [ 663.477514][ T10] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6db24 [ 663.480313][ T10] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 663.482972][ T10] ksm flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 663.485462][ T10] page_type: f5(slab) [ 663.486751][ T10] raw: 04fff00000000040 ffff88801cba88c0 ffffea00015e0a00 dead000000000003 [ 663.489420][ T10] raw: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 663.492145][ T10] head: 04fff00000000040 ffff88801cba88c0 ffffea00015e0a00 dead000000000003 [ 663.494876][ T10] head: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 663.497570][ T10] head: 04fff00000000001 ffffea0001b6c901 00000000ffffffff 00000000ffffffff [ 663.500290][ T10] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 663.503016][ T10] page dumped because: kasan: bad access detected [ 663.505150][ T10] page_owner tracks the page as allocated [ 663.507066][ T10] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7888, tgid 7888 (syz-executor), ts 640001381727, free_ts 610979239035 [ 663.513033][ T10] post_alloc_hook+0x1e1/0x250 [ 663.514594][ T10] get_page_from_freelist+0xe3d/0x2e10 [ 663.516325][ T10] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 663.518211][ T10] alloc_pages_mpol+0x1fb/0x550 [ 663.519735][ T10] new_slab+0x2c4/0x440 [ 663.521158][ T10] ___slab_alloc+0xda3/0x1ca0 [ 663.522682][ T10] __kmem_cache_alloc_bulk+0x20f/0x700 [ 663.524425][ T10] kmem_cache_alloc_bulk_noprof+0x45e/0x7b0 [ 663.526335][ T10] napi_skb_cache_get+0x688/0x8e0 [ 663.527944][ T10] __alloc_skb+0x2aa/0x410 [ 663.529374][ T10] napi_alloc_skb+0x3f4/0x7d0 [ 663.530902][ T10] e1000_clean_rx_irq+0x672/0x1030 [ 663.532538][ T10] e1000_clean+0xa33/0x1f70 [ 663.534000][ T10] __napi_poll.constprop.0+0xaf/0x450 [ 663.535732][ T10] net_rx_action+0xa40/0xf20 [ 663.537196][ T10] handle_softirqs+0x1ea/0x910 [ 663.538737][ T10] page last free pid 13710 tgid 13709 stack trace: [ 663.540773][ T10] __free_frozen_pages+0x822/0x1130 [ 663.542437][ T10] __put_partials+0x127/0x160 [ 663.543938][ T10] qlist_free_all+0x47/0xe0 [ 663.545407][ T10] kasan_quarantine_reduce+0x1a0/0x1f0 [ 663.547349][ T10] __kasan_slab_alloc+0x69/0x90 [ 663.548919][ T10] kmem_cache_alloc_noprof+0x2ad/0x780 [ 663.551038][ T10] taskstats_exit+0x650/0xbd0 [ 663.552917][ T10] do_exit+0x5ca/0x2a30 [ 663.554635][ T10] do_group_exit+0xd5/0x2a0 [ 663.556471][ T10] get_signal+0x1ec7/0x21e0 [ 663.557903][ T10] arch_do_signal_or_restart+0x91/0x770 [ 663.559652][ T10] exit_to_user_mode_loop+0x86/0x4b0 [ 663.561309][ T10] __do_fast_syscall_32+0x4b6/0x660 [ 663.562951][ T10] do_fast_syscall_32+0x32/0x70 [ 663.564485][ T10] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 663.566476][ T10] [ 663.567241][ T10] Memory state around the buggy address: [ 663.569023][ T10] ffff88806db24400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.571670][ T10] ffff88806db24480: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 663.574195][ T10] >ffff88806db24500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 663.576711][ T10] ^ [ 663.579119][ T10] ffff88806db24580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 663.581620][ T10] ffff88806db24600: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 663.584115][ T10] ================================================================== [ 663.617180][ T6194] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 663.836497][ T10] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 663.838905][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 663.842246][ T10] Tainted: [L]=SOFTLOCKUP [ 663.843605][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 663.846777][ T10] Workqueue: events hci_uart_write_work [ 663.848518][ T10] Call Trace: [ 663.849575][ T10] [ 663.850551][ T10] dump_stack_lvl+0x100/0x190 [ 663.852029][ T10] vpanic+0x20d/0x630 [ 663.853299][ T10] panic+0xd1/0xd1 [ 663.854489][ T10] ? __pfx_panic+0x10/0x10 [ 663.855905][ T10] ? hci_uart_write_work+0x81c/0x950 [ 663.857556][ T10] ? preempt_schedule_common+0x42/0xc0 [ 663.859280][ T10] ? check_panic_on_warn+0x1f/0x90 [ 663.860904][ T10] check_panic_on_warn.cold+0x19/0x34 [ 663.862625][ T10] end_report.part.0+0x3a/0x90 [ 663.864133][ T10] kasan_report.cold+0xe/0x18 [ 663.865644][ T10] ? hci_uart_write_work+0x81c/0x950 [ 663.867309][ T10] hci_uart_write_work+0x81c/0x950 [ 663.868913][ T10] ? __pfx_pty_write+0x10/0x10 [ 663.870512][ T10] process_one_work+0x9c2/0x1840 [ 663.872105][ T10] ? __pfx_process_one_work+0x10/0x10 [ 663.873788][ T10] ? assign_work+0x19c/0x250 [ 663.875302][ T10] worker_thread+0x5da/0xe40 [ 663.876731][ T10] ? kthread+0x17d/0x730 [ 663.878182][ T10] ? __pfx_worker_thread+0x10/0x10 [ 663.879785][ T10] kthread+0x3b3/0x730 [ 663.881076][ T10] ? __pfx_kthread+0x10/0x10 [ 663.882562][ T10] ? ret_from_fork+0x79/0xaf0 [ 663.884044][ T10] ? ret_from_fork+0x79/0xaf0 [ 663.885535][ T10] ? rcu_is_watching+0x12/0xc0 [ 663.887057][ T10] ? __pfx_kthread+0x10/0x10 [ 663.888544][ T10] ret_from_fork+0x754/0xaf0 [ 663.890052][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 663.891648][ T10] ? __switch_to+0x7b9/0x10c0 [ 663.893122][ T10] ? __pfx_kthread+0x10/0x10 [ 663.894614][ T10] ret_from_fork_asm+0x1a/0x30 [ 663.896142][ T10] [ 663.897844][ T10] Kernel Offset: disabled [ 663.899228][ T10] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:41:18 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85673665 RDI=ffffffff9b1f2260 RBP=ffffffff9b1f2220 RSP=ffffc900001c7568 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000074 R14=0000000000000010 R15=ffffffff85673600 RIP=ffffffff8567368f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880973e3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7426288 CR3=000000005788c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000026000000000 0000000600000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000167fa37 RBX=ffff88801deca4c0 RCX=ffffffff8b7404b5 RDX=0000000000000000 RSI=ffffffff8dc413ca RDI=ffffffff8bfa32a0 RBP=0000000000000001 RSP=ffffc9000046fdf0 R8 =0000000000000001 R9 =ffffed100566673d R10=ffff88802b3339eb R11=0000000000000000 R12=ffffed1003bd9498 R13=0000000000000001 R14=ffffffff90b771d0 R15=0000000000000000 RIP=ffffffff8b73ee1f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974e3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080024000 CR3=000000005788c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000010 RCX=ffffffff84ee0cc5 RDX=ffff888021c74980 RSI=ffffffff84ee0cd4 RDI=ffff888021c74980 RBP=ffffc90003ae72e0 RSP=ffffc90003ae7150 R8 =0000000000000001 R9 =0000000000000040 R10=0000000000000010 R11=0000000000000000 R12=0000000000000010 R13=ffffc90003ae72c0 R14=0000000000000010 R15=0000000000000002 RIP=ffffffff82064abf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f97dec0f300 ffffffff 00c00000 GS =0000 ffff8880975e3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005642ad0e2ec8 CR3=000000004afb2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=1f71fb078cb4720a e9f91e36e57ac8df 1f71fb078cb4720a e9f91e36e57ac8df 1f71fb078cb4720a e9f91e36e57ac8df 1f71fb078cb4720a e9f91e36e57ac8df ZMM18=7395e50f25252dc1 d5fd6e4241d75c66 7395e50f25252dc1 d5fd6e4241d75c66 7395e50f25252dc1 d5fd6e4241d75c66 7395e50f25252dc1 d5fd6e4241d75c66 ZMM19=ce11000000000000 0000000000000004 ce11000000000000 0000000000000003 ce11000000000000 0000000000000002 ce11000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 153effffffff824a 1441ffffffff824a 1418ffffffff824a 13cbffffffff824a ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 138dffffffff824a 1379ffffffff824a 135dffffffff824a 1091ffffffff8249 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d0a6ffffffff8249 d06fffffffff8249 d045ffffffff8249 cfefffffffff8249 ZMM24=61d5b15461d5b154 61d5b15461d5b154 61d5b15461d5b154 61d5b15461d5b154 61d5b15461d5b154 61d5b15461d5b154 61d5b15461d5b154 61d5b15461d5b154 ZMM25=39b9197039b91970 39b9197039b91970 39b9197039b91970 39b9197039b91970 39b9197039b91970 39b9197039b91970 39b9197039b91970 39b9197039b91970 ZMM26=9192f2859192f285 9192f2859192f285 9192f2859192f285 9192f2859192f285 9192f2859192f285 9192f2859192f285 9192f2859192f285 9192f2859192f285 ZMM27=e27ceebce27ceebc e27ceebce27ceebc e27ceebce27ceebc e27ceebce27ceebc e27ceebce27ceebc e27ceebce27ceebc e27ceebce27ceebc e27ceebce27ceebc ZMM28=000001d0000001cf 000001ce000001cd 000001cc000001cb 000001ca000001c9 000001c8000001c7 000001c6000001c5 000001c4000001c3 000001c2000001c1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=d41e0000d41e0000 d41e0000d41e0000 d41e0000d41e0000 d41e0000d41e0000 d41e0000d41e0000 d41e0000d41e0000 d41e0000d41e0000 d41e0000d41e0000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=0000000000000003 RCX=ffffffff820e32fd RDX=0000000000000001 RSI=0000000000000008 RDI=ffffffff90b771d0 RBP=0000000000000246 RSP=ffffc90000a8f7f0 R8 =0000000000000000 R9 =fffffbfff216ee3a R10=ffffffff90b771d7 R11=0000000000000000 R12=ffff888023a2e000 R13=ffff888026854c40 R14=ffff888041380010 R15=ffff888028597e00 RIP=ffffffff820e32fd RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976e3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5414ff4 CR3=0000000060b8d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5bd6aea0228b91d6 8b4124f7e7d4272a ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a72b46b56d6f2d8 c198f77be6c30f54 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e3d0883a70e6085f 9501df4ee0e3f861 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a5fdd5950599bb88 a78aea92fc984a82 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001a40 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000192a4000192ad aba6d800110d9a00 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 51c57a00000192b4 8001000024238600 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 80010000d5f9d800 000192a480010000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 80010000000192c7 000192c746e92c00 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9cdbed2a4c0ed310 c44cdc2b77373948 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 95eb35d888bafaa3 9d18156d6f3ff9e2 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000