last executing test programs: 12.3963936s ago: executing program 0 (id=712): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000001c0)={@local}, 0x14) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xc8}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x8044) (async) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) (async) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r6, 0x40246608, &(0x7f0000000180)={@id={0xe400, 0x0, @auto="ffee8e7268b4d909e400"}}) (async) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="10070000010501030000000000000000030000035402010090550571000000000b04004c09001c0073797a31000000000000000000000000000000000000000000000000000000008dcb6bb00f56aabc8a53bfd6b8d9e9e06d07400ce4b3c4ef24b524e028478859e3c9b3ae017e02d93b5848817ae24f61234e267369942125782bc5672fffd5f10000001000000000090000000400090000000000833900000700400000000000060000000400250000000000ff7f0000060080000300000004000000f006080001000000070000000500fcff01000000090000000900c087000000000180000001000a0073b4b80d00800000018010000100000006000000080008000300000005000000ff7f070003000000080000000800001003000000020000000600040000000000090000000200070002000000ff7f000006000000020000e3ffffffff0c00000002000000e20e00000500070003000000030000008100800002000000020000000a00000001000000000800000c00000001000000800000000800000000000000080000000400080002000000004020000100050001000000ffffffff0400050001000000010100000600001000000000ffffffffb608ff0003000000010000000600ff0302000000030000000c00010001000000020000000600090003000000020000000e00040001000000080000000f0007000100000007000000470c00000300000001010000ff7fcd000200000050000000a600b3e202000000000000800700010000000000070000000700ffff00000000090000000600004c01000000040000003730050001000000010001008b00160e0100000063000000540201000200000010080000ff0804000f00270073797a30000000000000000000000000000000000000000000000000000000006ec5fee70693032d6b4c98abdf32ce0f168f99f247ce59cf6db6fbaaaa0ee75b1302dd2bdf2b3821c5d379cf6c0e8ba77391decd7442eeed0313b2e3f085763d0200090000000000ffffff7f0300070002000000070000000010020000000000faffffff03000900020000000d00000004001000030000000600000000000500000000000800000009000a00000000000000000009000200020000000b0000000300040002000000040000000800400000000000030000006800040002000000090000000900810000000000490d000002007fff02000000610d000036387e81000000000001000004000000020000007d06000000008000010000000300000004000900010000000e0000000400ff0f010000000400000007000b0000000000040000000008ff0002000000060000000000823d02000000010001000b00090001000000030000000000060003000000010100000600040000000000ec0f00000600090001000000040000000004361001000000080000000c00050000000000fd0000000800ffff02000000000000000500fe000200000009000000060000000300000003000000ff010800020000000e090000f21f540b03000000000410000900e50000000000f7ffffff0700090000000000faffffff0200e43600000000070000000400040001000000600f0000bdfc0400020000000100000008ff08000000000004000000020007000000000003000000000001000000000003000000540201000000000007000000080202000101190073797a3000000000000000000000000000000000000000000000000000000000d1bb53adda4b201a2869a42d46c1192b91bf721a85a51598f4699d966c240927e480f1c8a6cb1b4c795e361c0183a6931f4eb6a87bbbe733a5a158212bb2020f0700060001000000080000000400050000000000f0960000ff00080000000000990000003dd9ef0002000000f3ffffff00020008000000007c0e0000060004000200000004000000000008000100000002000000060035000300000001000000fdffff0100000000000001007800fdff03000000d520a4290200060003000000030000000900600000000000080000000d00000003000000000800006822010402000000070000000100050000000000050000000200c2c7010000000400000000fc010001000000000000000600090003000000030000000800feff030000000800000008000400030000000c000000bffb0000f693d075ff0f000009000800010000000600000001006dc800000000040000000a000002030000000200000009000c0603000000020000000002070001000000050000000700000802000000090000000001630d020000009dc200000600ae0903000000010400000200060000000000001000000400020000000000050000000b00060002000000000001000a000100000000000800000001006d0f020000000600000000080500030000000200000008000e0003000000020000000800c375030000000100008002008c5002000000f8ffffffff0101010100000000000600060004000100000008000000"], 0x710}, 0x1, 0x0, 0x0, 0x4042004}, 0xc841) (async) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10, 0x0}, 0x3000c041) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a3000000000480000001b0a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000"], 0xcc}}, 0x0) 12.321405132s ago: executing program 0 (id=713): connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000340)=0x10, 0x4) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="010000008900000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000001000000040000e01a010000d989c385a0533f391d629d69d7518427e8d4e93964769143e01108a8eb20c9f8d7c3c909127688769412c77eb6ee3ee1bdea9eb74ba81b6221cc1cff5d5cd15f"], 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000480)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = gettid() (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x80000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = syz_io_uring_setup(0x7da1, &(0x7f00000003c0)={0x0, 0x3ae1, 0x20, 0x3, 0x2e}, &(0x7f0000000440)=0x0, &(0x7f0000000900)) io_uring_enter(r3, 0x419d, 0x6ef1, 0xf, &(0x7f0000000940)={[0x2c, 0x80000000]}, 0x8) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) (async) r5 = socket$rds(0x15, 0x5, 0x0) (async) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r6, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x430}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000880) (async) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') (async) chdir(&(0x7f0000000100)='./file1\x00') r7 = open(&(0x7f0000000f80)='./file1\x00', 0x4007650c0, 0x188) quotactl_fd$Q_SETINFO(r7, 0xffffffff80000600, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xce06c27da9ba72d7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="020000000200000000000000", @ANYRES32, @ANYBLOB="9e3e127768ec64dfae674b9e9cbef68287c402f432f34e0e6500b6bc944738745b6f35372947d181eefd3fe01fd4a0eb8c9372046a70b3c7bad26ef982fba654e8af77049134fe8f5df98cee69c19aef3725203b403e64d5562e816a575950db2f9262f6ce277e7cd561aa2439cb371bcb8637a1a86bb1c4aae6eeb5993dec9726aba2351c81c691bbc09548e6df59da39fe05963b334a922296ce8c6599068185127f049ec91278d57aef6813e549b55b1aa6bb90edc3bdd822d21cda6b73cb0d7fd8e89e4215eb57e131b7b94918", @ANYRES64=0x0], 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x9, 0x4, &(0x7f0000000f40)=ANY=[@ANYRES16=r4, @ANYRESOCT=r3, @ANYRES16=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 12.320800742s ago: executing program 0 (id=714): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/anycast6\x00') preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x38, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e04015b0c"], 0x7) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$media(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206050000010000000000000000000005000100070900000000000000797a30000000000c000780080006000000000015000300686173683a69702c706f72742c6e65740000000005000500020000000500"], 0x5c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @mss={0x2, 0xefd0}, @mss={0x2, 0x8}, @timestamp, @timestamp, @sack_perm, @sack_perm], 0x7) getsockopt$ARPT_SO_GET_INFO(r6, 0x0, 0x60, 0x0, &(0x7f0000000300)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) writev(r2, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000000240)="0814dc7b9870ac29d6f2d64e3c5adb558c91da3526c3af17e9307dc71ed1f450d967955cc6004680b0443ca359a5acfd4ecf", 0x32}], 0x3) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000000700)={0x0, 0x2, 0x0, &(0x7f0000000480)=[{}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000000540)}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002080)={0x0}, 0x1, 0x0, 0x0, 0xc0c0}, 0x24048050) fgetxattr(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="25f3ac8927587428fcf5ecd93572a938636c08b4775548e576519bf78faf7404e1e4543d0d957124f93430ba40c02cf7cd7a1fe26ced06b773ac174a09"], 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='afs_call\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000340)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x3) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 11.1461849s ago: executing program 0 (id=718): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000500)=@req={0x20, &(0x7f00000004c0)={'tunl0\x00', @ifru_map={0xfffffff7, 0x3, 0x401, 0x6, 0x4, 0x40}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000000)={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x6, @random="c8ed6cecf1bd"}, 0x2, {0x2, 0x0, @loopback}, 'veth0_to_bond\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x1028}}, 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x24000094}, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x17) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000380), 0x0, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10.06277038s ago: executing program 0 (id=725): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_for_children\x00') (async) socket$netlink(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000400)={0x14, &(0x7f00000002c0)={0x40, 0x21, 0x18, {0x18, 0x21, "9d8d0a252397f42c6fdde51d01b98ad7e53846ce08ae"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x426}}, &(0x7f0000000340)={0x0, 0x22, 0x13, {[@local, @main=@item_4={0x3, 0x0, 0x9, "58fb05a3"}, @local=@item_4={0x3, 0x2, 0x0, "10634a2d"}, @local=@item_012={0x2, 0x2, 0x5, "409e"}, @main=@item_4={0x3, 0x0, 0xc, "6444a00e"}]}}, &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x7, 0x1, {0x22, 0x1}}}}, &(0x7f0000000780)={0x18, &(0x7f0000000500)={0x20, 0x12, 0xd1, "dd99a41b1f465c367a5737f32ee1b03d857d1c4c9c3ff0c4c9b21de9e392680ceb7ea6d9bebf029d69197e0f2bb0b80acdeed005b5d71ca563f6d90f9d335fc69090b80d66afc8ed1f70f0fd11081daf863cb2e56cd3511c8b45cae39bd82d86b75cc768aab5e67c719b4517fb682f796dafaaba97f05b019b892b54643f8014d1010f61849e78c1cfa422bddb1592b7254dfb58c7c5ecae527f1222785cd023980eef35b06325c812aac3b67a640b62e8ef3af3f7189bde291a0b8590dfdd06665ca4ddd939f7446f56200626578b7b3f"}, &(0x7f0000000600)={0x0, 0xa, 0x1}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xfa}, &(0x7f0000000680)={0x20, 0x1, 0x9e, "4b6bde39e65e3c015f3e51b8f22c815f0d718c7797d8687ed73df7b16a43435146164a46d86605f8ba0554853bb6d29a36a49de7b8b15e742daed18221ac95bfeddcd79259839f93f2e6f8332bd52fd04968514569d1a547a8ddb9623e3d2d301676974f767d6941580120066a364aaa0ff7b26503d60d973641d53c5a05c7e1e92707fe357c8c8852428a5a0b8597dbdd186fc10a2e8c0c07641ea6d64a"}, &(0x7f0000000740)={0x20, 0x3, 0x1, 0x5}}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) (async, rerun: 32) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000080)={0x1}) (async, rerun: 32) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x0, 0x1, 0x2}) (async) close_range(r2, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000280)='./file0\x00') (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000008f40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14850}, 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) (async) unshare(0x42000000) (async, rerun: 64) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x20001439) (async) unshare(0x44000000) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) (async) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0xb, 0x101000) ioctl$USBDEVFS_REAPURB(r7, 0x4004550c, &(0x7f0000000140)) (async) socket(0xa, 0x3, 0x3a) 9.971992178s ago: executing program 0 (id=726): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x10000, 0x440) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000002c0)={0x9a090a, 0x937}) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x2, 0x0, 0x0, 0x0, "00e2ba737cff0000000000000000000800"}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b000000060000000800", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="10000000010000000000000000000037082aa1ff00000002000000000000000000c6c01def43bfe46d0123c3c6423e19d6de4fface40179ca42e90c6d672ac7f5f14607eb5869b3a68069f1d43e2c9a4a107916d92d5231f80fcf431403c31bf85a8dcc2414549640f72b8ccfd0e75f9aba481ecbe83323f532769374ba37fea660bf0e8bd0d15d9d65d807d13321717d90f1da64bc1bb"], 0x50) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1900000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000005fc300000000000001e40000000080d01cc6e67aac7d0000"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRESOCT=r4, @ANYRES64=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xa, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x8, 0x10, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0xffffffff, 0xe, 0x0, &(0x7f0000000300)="6070ff71b7fa9e0ea4a026427d54", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x0, "fb99101719afec01"}) r9 = syz_open_pts(r1, 0x0) r10 = dup3(r9, r1, 0x0) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000000)=0x17) r11 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000240009000000000000008b9306000000"], 0x14}}, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f5c64000000000c0002800600190006"], 0x3c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010", @ANYRES32=0x0, @ANYBLOB="ff00000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r13, &(0x7f0000000000), 0xfffffecc) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYRES64=r6, @ANYRES16=0x0, @ANYBLOB="000227bd7000fedbdf2503000000080005000a010102050001000100000014000200ff0200000000000000000000000000010800050064010102"], 0x40}, 0x1, 0x0, 0x0, 0x64004084}, 0x20008080) 1.82516736s ago: executing program 2 (id=765): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000280)={@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@null, @bcast, @default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, {&(0x7f0000000140)=""/59, 0x3b}, &(0x7f00000001c0), 0x60}, 0xa0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r0) fdatasync(r2) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) (async) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) (async) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) (async) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000280)={@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@null, @bcast, @default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, {&(0x7f0000000140)=""/59, 0x3b}, &(0x7f00000001c0), 0x60}, 0xa0) (async) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async) close(r0) (async) fdatasync(r2) (async) 1.545646834s ago: executing program 2 (id=766): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r3, 0x0, 0x0, 0x0, 0x0, 0x11) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @broadcast}}, 0x24) sendmmsg(r2, &(0x7f0000008080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x10d, 0x80000}], 0x10}}], 0x2, 0x0) 1.366286474s ago: executing program 1 (id=767): iopl(0x3) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002880)=ANY=[@ANYRESOCT=r1], 0x0) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002880)=ANY=[@ANYRESOCT=r1], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r3, 0x81044804, &(0x7f0000000000)={0x1}) (async) ioctl$HIDIOCSREPORT(r3, 0x81044804, &(0x7f0000000000)={0x1}) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000100)={{0x0, 0x0, 0xffffffffffffff5f}, "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", "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"}) syz_usb_control_io(r2, &(0x7f0000000680)={0x18, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0003b6000000b603ca56b19677e3c976c016721e139071426a01845d31482e6d2f9b4480bbf2850e097c61a69db6e682316773326d5742e2302f2d947673caf9ba1a38af3c72b57aaddf459d1dba612d58c01268367a66a7f5e301e5dfe355a7ba44224dd518330d855cc5fa27594c6a5651000ceb1e8322f6f98903"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r2, &(0x7f0000000680)={0x18, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0003b6000000b603ca56b19677e3c976c016721e139071426a01845d31482e6d2f9b4480bbf2850e097c61a69db6e682316773326d5742e2302f2d947673caf9ba1a38af3c72b57aaddf459d1dba612d58c01268367a66a7f5e301e5dfe355a7ba44224dd518330d855cc5fa27594c6a5651000ceb1e8322f6f98903"], 0x0, 0x0, 0x0}, 0x0) r4 = syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0x857c, 0x0, 0x0, 0x23a}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) unshare(0x2c060000) syz_clone(0x623c0080, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x8000000) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000073669fc67681a678ef4ae0f38e94bb13", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000073669fc67681a678ef4ae0f38e94bb13", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r8, 0x6, 0x0, &(0x7f0000002840)=0x6, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async) r10 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r10, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) mkdirat(r10, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r10, &(0x7f0000004b00)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f0000002240)='./file0\x00', 0x5) (async) renameat2(r10, &(0x7f0000004b00)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f0000002240)='./file0\x00', 0x5) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r11, &(0x7f0000000200)=[{0x0}, {&(0x7f00000006c0)="e6", 0xfdef}], 0x2) writev(r11, &(0x7f0000000180)=[{&(0x7f0000000000)="729804819e25bf1576ffe5c12a5207113f19d58313aba5de68f29cba9eabb7ffc8ffa6ff5e57bb2a1a4db35012bba91acdbe6123e6d1b0e9b009f638c2262aa71fdb6fdca6f5afd31515336efa9d3ac3d1dcb773d177640fa9d940ae528c0de4820b43c5ca5aadd87316a4539842e59b2b62294946b288ccec1b315ad96484c9ce1069450e4b45992669", 0x8a}, {&(0x7f0000002680)="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", 0x188}], 0x2) 1.232994523s ago: executing program 3 (id=770): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket(0xf, 0x3, 0x2) write(r1, &(0x7f0000a97ff0)="020baf010200000000067bbc8e1d4b48", 0x10) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="027a5b460b0000020000000000000000"], 0x10}}, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0xc040aed4, &(0x7f00000000c0)) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) iopl(0x3) (async, rerun: 32) rt_sigtimedwait(0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='\a \x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000fedbdf252700000008000300", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (rerun: 64) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) r11 = creat(&(0x7f0000000340)='./bus\x00', 0x98) inotify_rm_watch(r11, 0x0) (async) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r12, 0x112, 0x8, &(0x7f0000000040)=0x9, 0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r11, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0xd7ab}}, './bus\x00'}) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r13, 0x4068aea3, &(0x7f0000000280)) (async, rerun: 64) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000040000000000003d00000008000300", @ANYRES32=r9, @ANYBLOB="0c009900000000006f00000008005d000100000089190a0c0f9baa26ec521137e55a6a80c03d4400ba3d3212668dcc956122e79b522a7cbd6b51af3f2eed97fe287e9a9bf3aad722f7ea24db53d506c17571"], 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (rerun: 64) 1.232189291s ago: executing program 1 (id=771): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00'}, 0x10) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x440d4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x60000, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x488800, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff43) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102381, 0x18fed) keyctl$clear(0x11, 0xfffffffffffffffd) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x68040200) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="8520004c9003f200185100000c000000000000000000000052ceeafab4920d4e2a31a711dd6db7256e2f157d938dd283a43a4ccca7bca644fc281a4ef71d856df6411498de4d72b708a29a100665cb9fcb5157d3b80f69ed25d2fe70f6b3fafaecf5d71c27c7efbcce98c96f7e7b52af3456c8c76496bff74898879112824fb4a8b60639799a848f0416c6695987d2f5916235ecf91b38d788276c57453203b215282edcaa9544d8cb5b173242d4a1e6852ffee89581b635d64ef576dc47c15544b25ad3cb07a9d2d192bb21"], &(0x7f0000000180)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@map, r4, 0x36, 0x0, 0x0, @void, @value}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000900)={'bridge0\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r6}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) socket(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="2400000048001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) 1.126530698s ago: executing program 3 (id=772): r0 = io_uring_setup(0x4823, &(0x7f0000000000)={0x0, 0x7810, 0x2}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x18, 0x2a, 0x9, 0x0, 0x0, {0x44, 0x0, 0x2c00}, [@nested={0x4, 0x10}]}, 0x18}, 0x1, 0x3000000}, 0x0) memfd_create(0x0, 0x0) (async, rerun: 32) r2 = gettid() (rerun: 32) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) (async, rerun: 32) readv(0xffffffffffffffff, &(0x7f0000002140)=[{&(0x7f00000010c0)=""/29, 0x1d}], 0x1) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async, rerun: 64) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r3, &(0x7f0000000000)={0x2, 0x0, {&(0x7f0000001380)=""/4096, 0x1000, 0x0, 0x0, 0x2}}, 0x48) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x6, 0xc9, 0x9}}}, 0x7) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) (async, rerun: 64) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) (async, rerun: 64) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb011a52f436dd2a", 0x2a}], 0x1) (async, rerun: 32) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) (async, rerun: 32) syz_open_dev$dri(&(0x7f0000000300), 0x4, 0x220a40) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x4002) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000193c0)=ANY=[@ANYBLOB="180000400000000000000000000000009500000010000000830c656fc382c6a118250006f5a445c0f518d9adec1c062cd22b4bb3cd691ece6b081676da00658c9977db3d587d040336aa3488109f71e17e2ae69864c05c3dc25d9a82bacc309ace8cd9cdaef115ccdfe8357804480919cf00f792add1a4400c36c7f4ba13f72dfa91cd7fbda4f519435dc5b8e3fc413004c42350a70d94e22d"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000400)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xbbce}, 0x50) (async, rerun: 32) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (rerun: 32) read$msr(r7, &(0x7f0000000300)=""/102400, 0x19000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1b, 0x13, &(0x7f0000000100)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, @void, @value}, 0x90) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 1.124807204s ago: executing program 3 (id=773): syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCCONS(r0, 0x541d) r1 = openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCCBRK(r1, 0x5428) (async) ioctl$TIOCCBRK(r1, 0x5428) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14, 0x800) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0x6, @multicast}, 0x10) (async) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0x6, @multicast}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000100)={'tunl0\x00', r3, 0x7, 0xff50, 0x4, 0x3ff, {{0x1b, 0x4, 0x0, 0x3, 0x6c, 0x64, 0x0, 0x52, 0x0, 0x0, @loopback, @local, {[@timestamp_prespec={0x44, 0x54, 0x48, 0x3, 0x7, [{@empty, 0x2}, {@dev={0xac, 0x14, 0x14, 0x17}, 0xe}, {@private=0xa010102, 0xe4}, {@empty, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10001}, {@local, 0xfffffffd}, {@local, 0x8}, {@rand_addr=0x64010102, 0x6}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x920}, {@broadcast, 0x73}]}, @ra={0x94, 0x4, 0x1}]}}}}}) r5 = socket$netlink(0x10, 0x3, 0x14) splice(r5, &(0x7f0000000200)=0x1, r2, &(0x7f0000000240)=0x6, 0x9, 0x2) openat$adsp1(0xffffff9c, &(0x7f0000000280), 0x80, 0x0) (async) r6 = openat$adsp1(0xffffff9c, &(0x7f0000000280), 0x80, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f00000002c0)=0x8) (async) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f00000002c0)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r7, 0x114, 0x7, &(0x7f00000003c0)={@sco, {&(0x7f0000000340)=""/8, 0x8}, &(0x7f0000000380), 0x8}, 0xa0) timer_settime(0x0, 0x1, &(0x7f0000000480), &(0x7f00000004c0)) (async) timer_settime(0x0, 0x1, &(0x7f0000000480), &(0x7f00000004c0)) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r8, 0x6, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0x4) (async) getsockopt$inet6_tcp_int(r8, 0x6, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0x4) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000580)={0x0, 0x5, 0x78d8a6ab, 0x5}, &(0x7f00000005c0)=0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000000600)={r10, 0x6}, &(0x7f0000000640)=0x8) r11 = landlock_create_ruleset(&(0x7f0000000680)={0x200, 0x2, 0x3}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r11, 0x2, &(0x7f00000006c0), 0x0) openat$cdrom(0xffffff9c, &(0x7f0000000700), 0x30080, 0x0) r12 = syz_open_dev$audion(&(0x7f0000000740), 0x8, 0x80080) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000008, 0x13, r12, 0x400) r13 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000780)={r8, r12, 0x0, 0x0, @void}, 0x10) dup(r13) syz_open_dev$vbi(&(0x7f00000007c0), 0x2, 0x2) syz_open_dev$dmmidi(&(0x7f0000000800), 0x1, 0x1) (async) syz_open_dev$dmmidi(&(0x7f0000000800), 0x1, 0x1) 1.124450626s ago: executing program 1 (id=774): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x1000005}, 0x10) write(r2, &(0x7f0000000000)="2400000016005f0214f9f407050904000a000035062300000000000008000f0008000000", 0x24) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES8=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r8, 0x1, 0x1, &(0x7f0000000080)=0x5, 0x4) bind$inet(r8, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="0400"/12, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000008c0)={0x0, 0x2000000, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/139, 0x8b}], 0x1, 0x0, 0x1400}, 0x0) close(0xffffffffffffffff) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a32000000001400078008000640000000000800084000000000050005000a0000000500010006feff000d000300686173683a6e6574"], 0x5c}}, 0x0) 1.055263739s ago: executing program 3 (id=775): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x808) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r8, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r9, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r10 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000100)={{{@in=@private=0xa010101, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x33}, 0x2, @in6=@local, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x800000}}, 0xe8) sendmmsg(r10, &(0x7f0000000480), 0x2e9, 0x0) 953.816595ms ago: executing program 3 (id=776): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="b1f7220979351aa7c7b477796b726a5672a3d63cb482e573220a58d2359bebf04e4f9d08fbfd20d1ca3c50d1ad11587836b9c41c8355c42c9db848d037aa0b85775031ede2eba644b6c9bb96e433c60fc1ad55d21673b10087d5731cc399435b8a9abdb66d9fe8c7dec570546b7b2834e50b71ce93d8d54c94ce54f1c128c28f0bf4667f056c1039cfe2af9dd0d5feceeb4ae452d61c79b5a0e9ae893b9dc26e97189a018e89d94b3785f5f13a40f0b7b4f9c04b37695d1f12add67a1c80af773c3a0d64834726ee7f0b5b2314613a6710896292cd86d5d568c6781c5fa145ac5d031b0f319dddf04310eb0056b38511b70c", @ANYRES8=r0, @ANYRES8=0x0, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRES32=r0], &(0x7f0000000380)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x5, 0x2, 0x13, 0x6}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) prlimit64(r2, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = socket$key(0xf, 0x3, 0x2) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000240)={0x0, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={r5, 0x9, 0x14}, 0xc) sendmsg$key(r4, &(0x7f00000007c0)={0x400000000000000, 0x0, 0x0}, 0x200000c0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r8 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r9 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r9, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES8=r5, @ANYRES8=r8], 0x4c}}, 0x0) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x4d57, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x44000680) 656.222724ms ago: executing program 2 (id=777): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x10, 0x2b, 0x1}, 0x10}], 0x1}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) dup3(r0, r4, 0x0) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001e80)=0x14) sendmsg$nl_route(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000011000304000000000000000000000000976b9148021f9e3ecc3287fa965a99a84322f5b0043041d2d3bc29d0eaf987068def4948240978018d37c4150057aa3d461507b75dc38e70cfa73560312416e5dbf52bdde826e4d1d3342224987de30202951d2af5ca1788389419c24e5c2d61fbccaec2d220a67c3a072476222b25398707489f86155f19a2ebf752aa532d8f7b1d70a6ad91a59d843b21a20f1b7f69dac97b25ca2bb8baede4", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 525.272848ms ago: executing program 2 (id=778): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) rt_sigaction(0x1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) syz_clone3(&(0x7f00000003c0)={0x100200200, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0xfffffffffffffcaa, 0x0, 0x0}, 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850067bf49975f7300000e000000d50000002a00c5d15a", @ANYRESDEC=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r3, 0x0, 0x62, &(0x7f0000000440)='cgrouN\x00\xd0\xb0\b\xc8\xc6\x8ey\xa3\xd0*\x19f\xe6\xa7\'\x82{\xba\xdc6\xa46V\x04\x90.\xa1\x96\xf6\xb2\xdb\x03\x7f\xff\xfa\x8d\x0f\xa0\b\x9f\xf0\x05\x9fg\n\x18\x88\x01\xd7\xdc\t\xabq\x89\xe1\xb3\v\xd5[|\xad\x99\xc8\x1d\xd4\x03\xd8\xc7\xe4\xece\x7fJ\xfcO\xa9\xd6z(@y\xf8\xe4\x83\xfd\xd4\xf9\x94\xdd\xb7c'}, 0x30) fdatasync(0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) (async) r4 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r5, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r6, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r4) getpgid(0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000000)={0x8}) (async) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000000)={0x8}) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r9) r10 = inotify_init1(0x0) fcntl$getownex(r10, 0x10, &(0x7f0000000140)) (async) fcntl$getownex(r10, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r11, &(0x7f0000000600)='fd/4\x00') (async) r12 = syz_open_procfs(r11, &(0x7f0000000600)='fd/4\x00') quotactl_fd$Q_QUOTAOFF(r12, 0xffffffff80000302, 0x0, 0x0) (async) quotactl_fd$Q_QUOTAOFF(r12, 0xffffffff80000302, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$CDROMREADAUDIO(r1, 0x530e, 0x0) (async) ioctl$CDROMREADAUDIO(r1, 0x530e, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x9c, 0x0, 0x4, 0xf9ff}, {0x6}]}, 0x8) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x9c, 0x0, 0x4, 0xf9ff}, {0x6}]}, 0x8) 247.204885ms ago: executing program 2 (id=779): r0 = openat$ipvs(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000040)={0x7, 0x6, 0xd, 0x1, 0x7, 0x6}) (async) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000080)=""/4096) (async) fsetxattr$security_ima(r0, &(0x7f0000001080), &(0x7f00000010c0)=@md5={0x1, "6415f83d82e145e8fdaba9433fe1df17"}, 0x11, 0x3) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000001100)=0x1) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000001140)={0x2014}) (async, rerun: 64) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000001180)=""/49) (rerun: 64) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000011c0)={0x48}) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000001240)) (async) ioctl$VIDIOC_QUERYBUF(r0, 0xc04c5609, &(0x7f0000001300)=@multiplanar_mmap={0x6, 0x3, 0x4, 0x1, 0xfffffffb, {0x0, 0xea60}, {0x5, 0x8, 0x4, 0x8, 0x37, 0x0, "49b344e9"}, 0xff, 0x1, {&(0x7f0000001280)=[{0x6, 0x80, {0xc6}, 0x9}, {0x8, 0x8, {0x1}, 0xd}]}, 0xa, 0x0, r0}) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000001380)) (async) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f00000013c0)) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000001400)={"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"}) (async) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000001800)={{0xa, 0x4e22, 0x4, @loopback, 0x5}, {0xa, 0x4e20, 0x3, @private1, 0x5}, 0x1, {[0x2, 0xffff, 0x0, 0x1935a74, 0x4, 0x62f, 0x9, 0xffffffff]}}, 0x5c) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000018c0)={&(0x7f0000001880)='file_check_and_advance_wb_err\x00', r0, 0x0, 0x9}, 0x18) (async, rerun: 64) getpid() (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001940)={&(0x7f0000001900)='host1x_channel_submitted\x00', r0, 0x0, 0x101}, 0x18) (async) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) preadv(r2, &(0x7f0000001b40)=[{&(0x7f0000001980)=""/154, 0x9a}, {&(0x7f0000001a40)=""/75, 0x4b}, {&(0x7f0000001ac0)=""/79, 0x4f}], 0x3, 0xf0, 0x4ea) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000001c00)={'sit0\x00', &(0x7f0000001b80)={@private=0xa010102, 0x0, 0x0, 0x40, 0x0, [{@private}, {@multicast2}, {@broadcast}, {@local}]}}) (async, rerun: 64) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000001c40)={0x80, r0}, 0x0) (rerun: 64) r3 = signalfd(r1, &(0x7f0000001c80)={[0x0, 0x8]}, 0x8) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001d00), r0) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000001e00)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x20000c05}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x50, r4, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c040}, 0x44815) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001e40)=0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000001ec0)={0x0, @vsock={0x28, 0x0, 0x2710, @my=0x0}, @nl=@unspec, @nfc={0x27, r5, 0x1, 0x2}, 0x1ff, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000001e80)='veth0_macvtap\x00', 0x8, 0x3, 0x4}) (async) preadv(r0, &(0x7f0000002200)=[{&(0x7f0000001f40)=""/226, 0xe2}, {&(0x7f0000002040)=""/228, 0xe4}, {&(0x7f0000002140)=""/135, 0x87}], 0x3, 0x7d86, 0x4) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000002280), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x2010000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x3c, r6, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xbe}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x200}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc080}, 0x80) 246.138956ms ago: executing program 1 (id=780): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x124, 0x24, 0xd0f, 0x2000000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0x5}, {0x7}}, [@TCA_RATE={0x6, 0x5, {0x4, 0xf}}, @qdisc_kind_options=@q_taprio={{0xb}, {0xec, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x7}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0xb5}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x64, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2af}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x200}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7fff}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xff}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}]}]}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x68, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x91}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xfffffff8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x80000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xaaef}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x100}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xc}]}]}]}}]}, 0x124}}, 0x20000000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCCONS(r4, 0x541d) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000240)=0x10) 245.470009ms ago: executing program 2 (id=781): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x213000, 0x1000, 0x0, 0xbbc83cf311bd5b5a}, 0x4f) write$char_usb(r2, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) getpgid(0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x8}) 176.735668ms ago: executing program 1 (id=782): getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@private2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe4) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000140)={0xa0, 0x19, 0x1, {0x800, {0x8, 0x2, 0x6}, 0xc, r1, 0xee01, 0xfff, 0x0, 0x1, 0x2, 0x4, 0x3, 0x7, 0x9, 0x2, 0x81a, 0x1, 0x7fff, 0x1, 0xffff, 0x5}}, 0xa0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, 0xffffffffffffffff}}, './file0\x00'}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0], 0x0, 0x2b, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x68, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000008c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r8 = openat$vcsu(0xffffff9c, &(0x7f0000000900), 0xc000, 0x0) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000980)=@o_path={&(0x7f0000000940)='./file0\x00', 0x0, 0x8}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xd, 0x22, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, [@jmp={0x5, 0x0, 0xd, 0x1, 0xa, 0xfffffffffffffff0, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x637d4672}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffa7a3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x22, &(0x7f0000000480)=""/34, 0x41000, 0x0, '\x00', 0x0, @sock_ops=0x3, r4, 0x8, &(0x7f0000000500)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0xd, 0x6, 0xfffffc01}, 0x10, r6, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[r7, r8, r9], &(0x7f0000000a00)=[{0x1, 0x1, 0x10, 0x3}], 0x10, 0xb52, @void, @value}, 0x94) syz_emit_vhci(&(0x7f0000000b00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x73}, @l2cap_cid_signaling={{0x6f}, [@l2cap_info_req={{0xa, 0xd, 0x2}, {0x4}}, @l2cap_move_chan_cfm={{0x10, 0x1c, 0x4}, {0x6, 0x1000}}, @l2cap_conf_req={{0x4, 0x0, 0x1f}, {0x280, 0xea, [@l2cap_conf_flushto={0x2, 0x2, 0x46e}, @l2cap_conf_ews={0x7, 0x2, 0x1000}, @l2cap_conf_mtu={0x1, 0x2, 0x1a}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x7, 0x3, 0xff, 0x6, 0x28}}, @l2cap_conf_ews={0x7, 0x2, 0xffff}]}}, @l2cap_disconn_rsp={{0x7, 0x2b, 0x4}, {0x7, 0x1ff}}, @l2cap_create_chan_rsp={{0xd, 0x5b, 0x8}, {0xd32d, 0x0, 0xc1, 0x238e}}, @l2cap_create_chan_rsp={{0xd, 0x7, 0x8}, {0x1ff, 0x8000, 0x7, 0x401}}, @l2cap_move_chan_rsp={{0xf, 0x9, 0x4}, {0x0, 0x2}}, @l2cap_cmd_rej_unk={{0x1, 0x80, 0x2}, {0x1}}, @l2cap_create_chan_req={{0xc, 0x80, 0x5}, {0x6, 0x1, 0x3}}, @l2cap_move_chan_req={{0xe, 0xb, 0x3}, {0x401, 0x8}}]}}, 0x78) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000b80)) r10 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000cc0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d00)={&(0x7f0000000c80)='btrfs_set_extent_bit\x00', r10, 0x0, 0x3}, 0x18) ioctl$BTRFS_IOC_LOGICAL_INO(r10, 0xc0389424, &(0x7f0000000d80)={0xfffffffffffffffd, 0x10, '\x00', 0x0, &(0x7f0000000d40)=[0x0, 0x0]}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=@bloom_filter={0x1e, 0x8001, 0x3, 0xffff0001, 0x990, r3, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2, 0xc, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x18, 0x18, &(0x7f0000000dc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0xa}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x36}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x5}, @generic={0x7, 0x9, 0x8, 0xd4a6, 0x1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x7}]}, &(0x7f0000000e80)='GPL\x00', 0x8000, 0x0, 0x0, 0x41100, 0x4c, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000f00)={0x5, 0xb, 0xfff, 0x400}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000fc0)=[r9, r11, r9, r10, r9, r3, 0x1], &(0x7f0000001000)=[{0x0, 0x2, 0xa, 0x2}, {0x4, 0x5, 0x3, 0x1}, {0x3, 0x4, 0x3, 0x8}], 0x10, 0x589, @void, @value}, 0x94) r12 = syz_open_dev$evdev(&(0x7f0000001100), 0x4, 0x204000) ioctl$EVIOCSKEYCODE_V2(r12, 0x40284504, &(0x7f0000001140)={0x7, 0x8, 0x9, 0x900000, "e092d72a18b5d1111106cfb5c63bc03b5da48bd85e18287efdec03f3cbb5aec9"}) getpgid(0x0) sendmsg$nl_route(r7, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)=@bridge_newvlan={0x7c, 0x70, 0x800, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x3d}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x7}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x10, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x10}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x10, 0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x20, 0x3}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008014}, 0x41) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f00000012c0)='hsr0\x00', 0x10) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000001300)={'security\x00', 0x40, "b9798c869dc6352e4655a967f158ef47605ce040b81217acf46c59b0908ec55e5b632579ad9912626c512aa7a84688b730b30dc549294d6234c4de76eda09724"}, &(0x7f0000001380)=0x64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001440)={{r7, 0xffffffffffffffff}, &(0x7f00000013c0), &(0x7f0000001400)=r10}, 0x1c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001740)={r3, 0x20, &(0x7f0000001700)={&(0x7f00000015c0)=""/189, 0xbd, 0x0, &(0x7f0000001680)=""/89, 0x59}}, 0x10) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0xc, 0x2b, &(0x7f0000001780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffa}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001900)='syzkaller\x00', 0xe, 0x4e, &(0x7f0000001940)=""/78, 0x41100, 0x2, '\x00', 0x0, @fallback=0x7, r8, 0x8, &(0x7f00000019c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000001a00)={0x1, 0x3, 0x33, 0xd}, 0x10, 0xffffffffffffffff, r10, 0x4, &(0x7f0000001a40)=[r10, r11], &(0x7f0000001a80)=[{0x2, 0x3, 0x10, 0x2}, {0x2, 0x3, 0x1, 0x7}, {0x5, 0x5, 0xa, 0xc}, {0x0, 0x4, 0x6, 0x7}], 0x10, 0x27e, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x19, 0xa, &(0x7f0000001480)=@raw=[@alu={0x7, 0x1, 0x2, 0x2, 0x9, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000001500)='GPL\x00', 0xf085, 0x0, 0x0, 0x40f00, 0x16, '\x00', r0, @fallback=0x24, r10, 0x8, &(0x7f0000001540)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000001580)={0x1, 0x0, 0xb7, 0x8}, 0x10, r14, r15, 0x0, &(0x7f0000001b80)=[r11, r7, r2, r2, r10, 0xffffffffffffffff, r9], 0x0, 0x10, 0x4, @void, @value}, 0x94) ioctl$CEC_ADAP_G_CAPS(r3, 0xc04c6100, &(0x7f0000001c80)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001d40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000001e80)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001e40)={&(0x7f0000001d80)={0x84, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_BEACON_TAIL={0x66, 0xf, [@link_id={0x65, 0x12, {@from_mac, @device_b, @device_b}}, @random_vendor={0xdd, 0x41, "38f9c43b1d5c66d6683fac780fc390041359d204fdb171b1f762ead7161d0a811b8de831f18749c1de6fa0ff3dcc33f877e55ccdf0acdfc6bf8e5195c4a489efb5"}, @challenge={0x10, 0x1, 0x4d}, @mesh_id={0x72, 0x6}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20040080}, 0x20000000) 175.321939ms ago: executing program 1 (id=783): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r0 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROM_SELECT_DISK(r0, 0x5322, 0x47) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01000177c5cdd0f1ec4905", @ANYRES64=r0, @ANYRESOCT=0x0, @ANYRES32=r0], 0x1c}}, 0x0) ioctl$CDROMCLOSETRAY(r0, 0x5319) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x10, 0x0, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r5, 0x107, 0x13, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044880}, 0x4000000) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, 0x0) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x4}, 0x5, 0x40, 0x1, r7, 0xfffffffffffffe43, 0x4, 'syz0\x00', 0x0, 0xfffffffffffffef5}) r8 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') preadv(r8, &(0x7f0000000780)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x1f3, 0x0) setsockopt$MRT6_PIM(r8, 0x29, 0xcf, &(0x7f00000000c0), 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x7, 0x40, 0x0, 0x0, {{0x17, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @broadcast, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1f, 0x22, [@rand_addr=0x64010101, @empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @local, @empty]}, @rr={0x7, 0x1f, 0xcb, [@loopback, @dev={0xac, 0x14, 0x14, 0xb}, @loopback, @rand_addr=0x64010101, @multicast1, @empty, @rand_addr=0x64010100]}, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) socket$unix(0x1, 0x1, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 0s ago: executing program 3 (id=784): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='\x00', 0xf1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x1000, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.numa_stat\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x200000100000011, 0x3, 0x0) epoll_create1(0x0) kernel console output (not intermixed with test programs): T5937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.399336][ T5349] usb 8-1: USB disconnect, device number 3 [ 54.624308][ T5967] block device autoloading is deprecated and will be removed. [ 54.714408][ T5974] vivid-004: ================= START STATUS ================= [ 54.716634][ T5974] vivid-004: Interlaced VBI Format: false [ 54.718450][ T5974] vivid-004: ================== END STATUS ================== [ 54.971982][ T831] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 55.109384][ T831] usb 7-1: device descriptor read/64, error -71 [ 55.147382][ T5981] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 55.344673][ T831] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 55.399605][ T5993] __nla_validate_parse: 1 callbacks suppressed [ 55.399616][ T5993] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.156'. [ 55.482104][ T831] usb 7-1: device descriptor read/64, error -71 [ 55.599675][ T831] usb usb7-port1: attempt power cycle [ 55.942978][ T831] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 55.943000][ T5360] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 55.972703][ T831] usb 7-1: device descriptor read/8, error -71 [ 55.994327][ T67] block nbd1: Receive control failed (result -32) [ 56.031462][ T5352] block nbd1: Receive control failed (result -32) [ 56.035587][ T5985] block nbd1: shutting down sockets [ 56.182831][ T5352] Bluetooth: Frame is too long (len 16, expected len 4) [ 56.207884][ T831] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 56.228667][ T831] usb 7-1: device descriptor read/8, error -71 [ 56.345763][ T831] usb usb7-port1: unable to enumerate USB device [ 56.346721][ T6010] Bluetooth: MGMT ver 1.23 [ 56.639667][ T6024] netlink: 'syz.1.165': attribute type 10 has an invalid length. [ 56.707500][ T6024] No control pipe specified [ 56.713793][ T6024] overlayfs: failed to resolve './file1': -2 [ 56.880286][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 56.924712][ T6040] binder: 6039:6040 ioctl 400c620e 20000140 returned -22 [ 56.963365][ T6044] netlink: 28 bytes leftover after parsing attributes in process `syz.3.170'. [ 57.006966][ T6046] 8021q: adding VLAN 0 to HW filter on device bond2 [ 57.133493][ T6053] fuse: blksize only supported for fuseblk [ 57.696627][ T6069] netlink: 'syz.0.178': attribute type 1 has an invalid length. [ 57.740972][ T6069] bond2: entered allmulticast mode [ 57.743354][ T6069] 8021q: adding VLAN 0 to HW filter on device bond2 [ 57.748116][ T6069] bond1: (slave bond2): making interface the new active one [ 57.760729][ T6069] bond1: (slave bond2): Enslaving as an active interface with an up link [ 57.815588][ T6069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.178'. [ 57.817872][ T6069] netlink: 24 bytes leftover after parsing attributes in process `syz.0.178'. [ 58.204185][ T6092] netlink: 'syz.2.184': attribute type 10 has an invalid length. [ 58.221115][ T6092] bond0: (slave netdevsim0): Releasing backup interface [ 58.224329][ T6092] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 58.226460][ T6092] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 58.231372][ T6092] team0: Port device netdevsim0 added [ 58.238180][ T6092] netlink: 'syz.2.184': attribute type 10 has an invalid length. [ 58.246486][ T6092] team0: Port device netdevsim0 removed [ 58.253034][ T6092] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 58.255215][ T6092] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 58.258897][ T6092] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 58.264532][ T6094] netlink: 44 bytes leftover after parsing attributes in process `syz.1.187'. [ 59.223132][ T6112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.190'. [ 59.365043][ T6122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.193'. [ 59.367405][ T6122] netlink: 20 bytes leftover after parsing attributes in process `syz.1.193'. [ 59.782507][ T6148] netlink: 'syz.1.199': attribute type 10 has an invalid length. [ 59.794128][ T6148] bond0: (slave netdevsim0): Releasing backup interface [ 59.802276][ T6148] team0: Port device netdevsim0 added [ 59.807687][ T6148] netlink: 'syz.1.199': attribute type 10 has an invalid length. [ 59.814627][ T6148] team0: Port device netdevsim0 removed [ 59.823281][ T6148] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 60.200461][ T5394] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 60.327298][ T6152] FAULT_INJECTION: forcing a failure. [ 60.327298][ T6152] name failslab, interval 1, probability 0, space 0, times 1 [ 60.349639][ T5394] usb 5-1: Using ep0 maxpacket: 16 [ 60.351043][ T6152] CPU: 1 UID: 0 PID: 6152 Comm: syz.3.203 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 60.353831][ T6152] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 60.356624][ T6152] Call Trace: [ 60.357523][ T6152] [ 60.358311][ T6152] dump_stack_lvl+0x16c/0x1f0 [ 60.359911][ T6152] should_fail_ex+0x497/0x5b0 [ 60.360608][ T5394] usb 5-1: config 137 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.361416][ T6152] ? fs_reclaim_acquire+0xae/0x150 [ 60.364211][ T5394] usb 5-1: config 137 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 60.365565][ T6152] should_failslab+0xc2/0x120 [ 60.368854][ T5394] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 60.370099][ T6152] __kmalloc_noprof+0xcb/0x410 [ 60.370114][ T6152] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 60.370131][ T6152] tomoyo_realpath_from_path+0xbf/0x710 [ 60.370142][ T6152] ? tomoyo_path_number_perm+0x232/0x5b0 [ 60.370156][ T6152] tomoyo_path_number_perm+0x245/0x5b0 [ 60.377611][ T5394] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.378980][ T6152] ? tomoyo_path_number_perm+0x232/0x5b0 [ 60.384496][ T6152] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 60.386105][ T6152] ? trace_lock_acquire+0x14a/0x1d0 [ 60.387473][ T6152] ? lock_acquire+0x2f/0xb0 [ 60.388683][ T6152] ? __fget_files+0x40/0x3f0 [ 60.389966][ T6152] ? __fget_files+0x244/0x3f0 [ 60.391214][ T6152] security_file_ioctl_compat+0x9b/0x240 [ 60.392694][ T6152] __do_compat_sys_ioctl+0x52/0x2b0 [ 60.394075][ T6152] __do_fast_syscall_32+0x73/0x120 [ 60.395454][ T6152] do_fast_syscall_32+0x32/0x80 [ 60.396745][ T6152] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 60.398418][ T6152] RIP: 0023:0xf7f16579 [ 60.399501][ T6152] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 60.404497][ T6152] RSP: 002b:00000000f565456c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 60.406705][ T6152] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000004058534c [ 60.408793][ T6152] RDX: 0000000020000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 60.410889][ T6152] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 60.412967][ T6152] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 60.415046][ T6152] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 60.417126][ T6152] [ 60.475746][ T6152] ERROR: Out of memory at tomoyo_realpath_from_path. [ 60.494171][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.205'. [ 60.497018][ T6158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.205'. [ 60.518128][ T67] Bluetooth: hci3: command 0x0405 tx timeout [ 60.610525][ T6165] netlink: 68 bytes leftover after parsing attributes in process `syz.3.207'. [ 60.774775][ T8] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 60.862529][ T981] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 60.920406][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 60.924349][ T8] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 60.927027][ T8] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 60.930845][ T8] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 60.933251][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.934481][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 60.937373][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 60.939354][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 60.941365][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 60.943343][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 60.945295][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 60.947123][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 60.948999][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 60.950930][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 60.952829][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 60.954780][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 60.956728][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 60.958683][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 60.960821][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 60.962818][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 60.964825][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 60.966804][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 60.968844][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 60.970824][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 60.972798][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 60.974789][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 60.976754][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 60.978936][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 60.980940][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 60.982889][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 60.984916][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 60.986918][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 60.988933][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 60.990934][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 60.992880][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 60.994819][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 60.996869][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 60.999003][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 61.000974][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 61.002950][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 61.004962][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 61.006907][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 61.008925][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 61.009375][ T981] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 61.010870][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 61.013064][ T981] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.013076][ T981] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 61.013093][ T981] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.014827][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 61.021685][ T981] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 61.022657][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 61.024528][ T981] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 61.024540][ T981] usb 8-1: Product: syz [ 61.024547][ T981] usb 8-1: Manufacturer: syz [ 61.031149][ T981] cdc_wdm 8-1:1.0: skipping garbage [ 61.032201][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 61.033490][ T981] cdc_wdm 8-1:1.0: skipping garbage [ 61.035656][ T981] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 61.036911][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 61.038399][ T981] cdc_wdm 8-1:1.0: Unknown control protocol [ 61.039917][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 61.045482][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 61.047523][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 61.049511][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 61.051477][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 61.053486][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 61.055466][ T25] hid-generic 0003:A02D:0000.0003: unknown main item tag 0x0 [ 61.059962][ T25] hid-generic 0003:A02D:0000.0003: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 61.137100][ T6163] Device name cannot be null; rc = [-22] [ 61.142412][ T8] usb 7-1: USB disconnect, device number 7 [ 61.227253][ T6165] xt_hashlimit: max too large, truncated to 1048576 [ 61.229375][ T6165] xt_hashlimit: overflow, try lower: 0/0 [ 61.446135][ T6177] bio_check_eod: 2 callbacks suppressed [ 61.446145][ T6177] syz.1.208: attempt to access beyond end of device [ 61.446145][ T6177] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 61.451329][ T6177] EXT4-fs (loop1): unable to read superblock [ 62.196389][ T6188] netlink: 'syz.2.212': attribute type 10 has an invalid length. [ 62.202309][ T6188] bond0: (slave netdevsim0): Releasing backup interface [ 62.205291][ T6188] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 62.208154][ T6188] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 62.213316][ T6188] team0: Port device netdevsim0 added [ 62.217899][ T6188] netlink: 'syz.2.212': attribute type 10 has an invalid length. [ 62.227373][ T6188] team0: Port device netdevsim0 removed [ 62.233381][ T6188] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 62.235419][ T6188] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 62.238814][ T6188] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 62.623475][ T5394] usbhid 5-1:137.0: can't add hid device: -71 [ 62.625533][ T5394] usbhid 5-1:137.0: probe with driver usbhid failed with error -71 [ 62.629369][ T5394] usb 5-1: USB disconnect, device number 3 [ 62.783759][ T6202] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 62.808572][ T6202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.217'. [ 62.984083][ T6217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.221'. [ 63.076212][ T6217] team0 (unregistering): Port device team_slave_0 removed [ 63.084612][ T6225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.086914][ T6217] team0 (unregistering): Port device team_slave_1 removed [ 63.091408][ T6225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.338191][ T981] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 63.408505][ T6246] netlink: 'syz.0.227': attribute type 10 has an invalid length. [ 63.416157][ T6246] bond0: (slave netdevsim0): Releasing backup interface [ 63.423541][ T6246] team0: Port device netdevsim0 added [ 63.430731][ T6246] netlink: 'syz.0.227': attribute type 10 has an invalid length. [ 63.440374][ T6246] team0: Port device netdevsim0 removed [ 63.447587][ T6246] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 63.521412][ T6241] trusted_key: syz.2.228 sent an empty control message without MSG_MORE. [ 63.582544][ T25] usb 8-1: USB disconnect, device number 4 [ 63.590737][ T981] usb 6-1: Using ep0 maxpacket: 16 [ 63.595530][ T981] usb 6-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 63.601388][ T981] usb 6-1: config 1 interface 0 has no altsetting 0 [ 63.604715][ T981] usb 6-1: New USB device found, idVendor=0eef, idProduct=7349, bcdDevice= 0.40 [ 63.607205][ T981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.609353][ T981] usb 6-1: Product: syz [ 63.610752][ T981] usb 6-1: Manufacturer: syz [ 63.612047][ T981] usb 6-1: SerialNumber: syz [ 63.916123][ T6248] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.382767][ T6261] netlink: 116 bytes leftover after parsing attributes in process `syz.0.233'. [ 65.232729][ T6278] netlink: 'syz.0.238': attribute type 10 has an invalid length. [ 65.237110][ T6278] bond0: (slave netdevsim0): Releasing backup interface [ 65.243054][ T6278] team0: Port device netdevsim0 added [ 65.247332][ T6278] netlink: 'syz.0.238': attribute type 10 has an invalid length. [ 65.252984][ T6278] team0: Port device netdevsim0 removed [ 65.255944][ T6278] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 65.773410][ T6303] evm: overlay not supported [ 65.781526][ T39] kauditd_printk_skb: 19 callbacks suppressed [ 65.781536][ T39] audit: type=1804 audit(1729748622.128:97): pid=6303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.245" name="/newroot/66/bus/file0" dev="overlay" ino=379 res=1 errno=0 [ 66.050816][ T981] usb 6-1: USB disconnect, device number 2 [ 66.050825][ T6310] netlink: 'syz.3.247': attribute type 10 has an invalid length. [ 66.069802][ T6310] bond0: (slave netdevsim0): Releasing backup interface [ 66.074087][ T6310] team0: Port device netdevsim0 added [ 66.081117][ T6310] netlink: 'syz.3.247': attribute type 10 has an invalid length. [ 66.087434][ T6310] team0: Port device netdevsim0 removed [ 66.090055][ T6310] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 66.489650][ T6338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.254'. [ 66.496724][ T6338] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.254' sets config #261 [ 66.497744][ T981] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 66.618761][ T6343] netlink: 'syz.2.256': attribute type 1 has an invalid length. [ 66.620779][ T6343] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.256'. [ 66.623414][ T6343] nbd: couldn't find device at index 16 [ 66.649322][ T981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 66.652992][ T981] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 66.656054][ T981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.749502][ T981] usb 6-1: config 0 descriptor?? [ 66.949673][ T6329] process 'syz.1.251' launched './file0' with NULL argv: empty string added [ 67.168075][ T39] audit: type=1326 audit(1729748623.532:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.0.259" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 67.174057][ T39] audit: type=1326 audit(1729748623.532:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.0.259" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 67.187166][ T39] audit: type=1326 audit(1729748623.532:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.0.259" exe="/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 67.197762][ T39] audit: type=1326 audit(1729748623.532:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.0.259" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 67.203590][ T39] audit: type=1326 audit(1729748623.532:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.0.259" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 67.232330][ T831] usb 6-1: USB disconnect, device number 3 [ 67.418436][ T6363] netlink: 'syz.0.260': attribute type 10 has an invalid length. [ 67.437719][ T6363] bond0: (slave netdevsim0): Releasing backup interface [ 67.444826][ T6363] team0: Port device netdevsim0 added [ 67.449368][ T6363] netlink: 'syz.0.260': attribute type 10 has an invalid length. [ 67.457057][ T6363] team0: Port device netdevsim0 removed [ 67.462974][ T6363] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 67.988541][ T6372] x_tables: duplicate underflow at hook 1 [ 68.320278][ T6391] input: syz1 as /devices/virtual/input/input9 [ 68.930297][ T6402] Cannot find add_set index 0 as target [ 69.009433][ T6411] program syz.0.272 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.216618][ T6415] netlink: 'syz.2.273': attribute type 10 has an invalid length. [ 69.289188][ T6415] bond0: (slave netdevsim0): Releasing backup interface [ 69.295646][ T6415] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 69.298674][ T6415] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 69.303787][ T6417] netlink: 'syz.2.273': attribute type 10 has an invalid length. [ 69.307715][ T6417] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 69.310414][ T6417] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 69.313649][ T6417] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 69.456283][ T6420] netlink: 'syz.1.274': attribute type 10 has an invalid length. [ 69.475608][ T6420] bond0: (slave netdevsim0): Releasing backup interface [ 69.483301][ T6420] team0: Port device netdevsim0 added [ 69.506360][ T6419] netlink: 'syz.1.274': attribute type 10 has an invalid length. [ 69.545229][ T6419] team0: Port device netdevsim0 removed [ 69.552514][ T6419] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 69.865490][ T6428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.277'. [ 69.947808][ T6426] tipc: Started in network mode [ 69.949731][ T6426] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 69.952434][ T6426] tipc: Enabled bearer , priority 0 [ 70.103570][ T6443] usb usb8: usbfs: process 6443 (syz.2.281) did not claim interface 0 before use [ 70.191077][ T6449] mkiss: ax0: crc mode is auto. [ 70.231581][ T6451] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 70.233375][ T6451] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 70.236753][ T6451] vhci_hcd vhci_hcd.0: Device attached [ 70.315941][ T1377] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.318057][ T1377] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.325186][ T39] audit: type=1326 audit(1729748626.747:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.2.285" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 70.338949][ T39] audit: type=1326 audit(1729748626.747:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.2.285" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 70.347321][ T39] audit: type=1326 audit(1729748626.747:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.2.285" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 70.356051][ T39] audit: type=1326 audit(1729748626.747:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.2.285" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 70.558850][ T65] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 70.715812][ T39] kauditd_printk_skb: 10 callbacks suppressed [ 70.715826][ T39] audit: type=1326 audit(1729748627.141:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.2.285" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 70.717940][ T65] usb 7-1: config 0 has no interfaces? [ 70.721592][ T39] audit: type=1326 audit(1729748627.141:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.2.285" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 70.733234][ T65] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 70.735468][ T39] audit: type=1326 audit(1729748627.141:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.2.285" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 70.737284][ T65] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.750648][ T39] audit: type=1326 audit(1729748627.141:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.2.285" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 70.754956][ T65] usb 7-1: config 0 descriptor?? [ 70.758050][ T39] audit: type=1326 audit(1729748627.141:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.2.285" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 70.781572][ T39] audit: type=1326 audit(1729748627.152:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.2.285" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 70.781973][ T8] vhci_hcd: vhci_device speed not set [ 70.788868][ T67] Bluetooth: hci3: command 0x0405 tx timeout [ 70.795604][ T39] audit: type=1326 audit(1729748627.183:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.2.285" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 70.800888][ T39] audit: type=1326 audit(1729748627.183:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.2.285" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 70.806602][ T39] audit: type=1326 audit(1729748627.183:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.2.285" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 70.813834][ T39] audit: type=1326 audit(1729748627.183:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.2.285" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 70.914543][ T6475] nfs4: Unknown parameter 'none' [ 70.917664][ T6475] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 [ 70.935305][ T8] usb 15-1: new full-speed USB device number 2 using vhci_hcd [ 70.968691][ T1451] usb 7-1: USB disconnect, device number 8 [ 71.081461][ T831] tipc: Node number set to 10463914 [ 71.309260][ T6486] netlink: 'syz.3.292': attribute type 10 has an invalid length. [ 71.321410][ T6486] bond0: (slave netdevsim0): Releasing backup interface [ 71.331551][ T6486] team0: Port device netdevsim0 added [ 71.339266][ T6486] netlink: 'syz.3.292': attribute type 10 has an invalid length. [ 71.347341][ T6486] team0: Port device netdevsim0 removed [ 71.352209][ T6486] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 71.627296][ T6452] vhci_hcd: connection reset by peer [ 71.641239][ T93] vhci_hcd: stop threads [ 71.646151][ T93] vhci_hcd: release socket [ 71.649025][ T93] vhci_hcd: disconnect device [ 71.813154][ T6499] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 72.482790][ T6537] fuse: Bad value for 'user_id' [ 72.484085][ T6537] fuse: Bad value for 'user_id' [ 72.613405][ T6546] netlink: 'syz.3.307': attribute type 10 has an invalid length. [ 72.641737][ T6546] bond0: (slave netdevsim0): Releasing backup interface [ 72.662778][ T6546] team0: Port device netdevsim0 added [ 72.665956][ T6548] netlink: 'syz.3.307': attribute type 10 has an invalid length. [ 72.670066][ T6548] team0: Port device netdevsim0 removed [ 72.672731][ T6548] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 73.033700][ T6561] netlink: 20 bytes leftover after parsing attributes in process `syz.1.314'. [ 73.153906][ T6568] fuse: Unknown parameter '000000000000000000050x000000000000000a' [ 73.157529][ T6568] Process accounting resumed [ 73.382904][ T6575] loop7: detected capacity change from 0 to 16384 [ 73.458918][ T6575] loop7: detected capacity change from 16384 to 16383 [ 73.615601][ T6587] random: crng reseeded on system resumption [ 73.992656][ T5394] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 74.151082][ T5394] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.153824][ T5394] usb 6-1: config 0 has no interfaces? [ 74.155599][ T5394] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 74.160044][ T5394] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.176816][ T5394] usb 6-1: config 0 descriptor?? [ 74.567808][ T5394] usb 6-1: string descriptor 0 read error: -71 [ 74.571301][ T5394] usb 6-1: USB disconnect, device number 4 [ 74.924748][ T6637] overlay: Unknown parameter 'fscontext' [ 74.997142][ T6637] netlink: 24 bytes leftover after parsing attributes in process `syz.0.326'. [ 75.015439][ T6640] netlink: 4544 bytes leftover after parsing attributes in process `syz.3.327'. [ 75.018547][ T6640] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 75.312590][ T9] cfg80211: failed to load regulatory.db [ 76.075849][ T8] vhci_hcd: vhci_device speed not set [ 76.142233][ T6666] fuse: Unknown parameter 'rootmpde' [ 76.216080][ T39] kauditd_printk_skb: 32 callbacks suppressed [ 76.216158][ T39] audit: type=1326 audit(1729748632.781:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.2.336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 76.227373][ T39] audit: type=1326 audit(1729748632.781:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.2.336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 76.240798][ T39] audit: type=1326 audit(1729748632.781:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.2.336" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 76.248222][ T39] audit: type=1326 audit(1729748632.791:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.2.336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 76.257045][ T39] audit: type=1326 audit(1729748632.791:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.2.336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 76.264727][ T39] audit: type=1326 audit(1729748632.791:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.2.336" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 76.920977][ T6696] ======================================================= [ 76.920977][ T6696] WARNING: The mand mount option has been deprecated and [ 76.920977][ T6696] and is ignored by this kernel. Remove the mand [ 76.920977][ T6696] option from the mount to silence this warning. [ 76.920977][ T6696] ======================================================= [ 76.930427][ T6696] sg_write: data in/out 926365459/228 bytes for SCSI command 0x0-- guessing data in; [ 76.930427][ T6696] program syz.2.342 not setting count and/or reply_len properly [ 76.942265][ T6698] usb usb9: usbfs: interface 0 claimed by hub while 'syz.1.343' sets config #0 [ 77.019889][ T6699] bridge0: port 3(syz_tun) entered blocking state [ 77.021646][ T6699] bridge0: port 3(syz_tun) entered disabled state [ 77.023414][ T6699] syz_tun: entered allmulticast mode [ 77.026150][ T6699] syz_tun: entered promiscuous mode [ 77.028168][ T6699] bridge0: port 3(syz_tun) entered blocking state [ 77.030610][ T6699] bridge0: port 3(syz_tun) entered forwarding state [ 77.369391][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.349'. [ 77.636922][ T8] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 77.637600][ T6728] Invalid logical block size (1) [ 77.786471][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 77.793340][ T8] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 77.796046][ T8] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 77.799960][ T8] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 77.803986][ T8] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 77.808334][ T8] usb 6-1: config 0 interface 0 has no altsetting 0 [ 77.813392][ T8] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 77.816620][ T8] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 77.819616][ T8] usb 6-1: Product: syz [ 77.821380][ T8] usb 6-1: Manufacturer: syz [ 77.822961][ T8] usb 6-1: SerialNumber: syz [ 77.826975][ T8] usb 6-1: config 0 descriptor?? [ 77.833752][ T8] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 77.843528][ T8] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 78.276480][ T8] usb 6-1: USB disconnect, device number 5 [ 78.283957][ T8] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 78.535558][ T6743] netlink: 'syz.0.354': attribute type 10 has an invalid length. [ 78.547681][ T6743] bond0: (slave netdevsim0): Releasing backup interface [ 78.574126][ T6743] team0: Port device netdevsim0 added [ 78.591339][ T6743] netlink: 'syz.0.354': attribute type 10 has an invalid length. [ 78.607164][ T6743] team0: Port device netdevsim0 removed [ 78.620800][ T6743] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 78.643627][ T6745] fuse: Unknown parameter 'user_it' [ 78.650883][ T6745] input: syz0 as /devices/virtual/input/input10 [ 79.187538][ T6761] netlink: 'syz.1.359': attribute type 10 has an invalid length. [ 79.192360][ T6761] bond0: (slave netdevsim0): Releasing backup interface [ 79.196092][ T6761] team0: Port device netdevsim0 added [ 79.326156][ T6760] netlink: 'syz.1.359': attribute type 10 has an invalid length. [ 79.335104][ T6760] team0: Port device netdevsim0 removed [ 79.338073][ T6760] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 79.383274][ T831] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 79.539135][ T831] usb 7-1: Using ep0 maxpacket: 16 [ 79.541681][ T831] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 79.544569][ T831] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 79.547220][ T831] usb 7-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 79.549591][ T831] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.552473][ T831] usb 7-1: config 0 descriptor?? [ 79.626425][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 79.731534][ T6779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.365'. [ 79.750946][ T6782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.772649][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 79.776881][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 79.778647][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.366'. [ 79.781272][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 79.787439][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.791596][ T9] usb 5-1: config 0 descriptor?? [ 79.796783][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 79.817447][ T6787] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 79.817937][ T6786] IPVS: stopping backup sync thread 6787 ... [ 79.968137][ T6758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.972792][ T6758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.982804][ T831] hid (null): invalid report_size 812540268 [ 79.991493][ T831] hid-generic 0003:0158:0100.0004: unknown main item tag 0x1 [ 79.993741][ T6769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.994073][ T831] hid-generic 0003:0158:0100.0004: unexpected long global item [ 79.994400][ T831] hid-generic 0003:0158:0100.0004: probe with driver hid-generic failed with error -22 [ 80.005076][ T6769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.009218][ T9] usb 5-1: USB disconnect, device number 4 [ 80.181360][ T6758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.185094][ T6758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.496613][ T6797] sp0: Synchronizing with TNC [ 80.711053][ T6800] syzkaller0: entered promiscuous mode [ 80.714632][ T6800] syzkaller0: entered allmulticast mode [ 81.507253][ T6818] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 81.509532][ T6818] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 81.514357][ T6818] vhci_hcd vhci_hcd.0: Device attached [ 81.543283][ T6821] vhci_hcd: connection closed [ 81.544969][ T1199] vhci_hcd: stop threads [ 81.549283][ T1199] vhci_hcd: release socket [ 81.550482][ T1199] vhci_hcd: disconnect device [ 81.562906][ T6823] 9pnet_fd: Insufficient options for proto=fd [ 81.944926][ T831] usb 7-1: USB disconnect, device number 9 [ 82.157782][ T6836] tmpfs: Invalid gid '0x00000000ffffffff' [ 82.496269][ T6864] Falling back ldisc for ptm0. [ 83.941735][ T6896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.392'. [ 86.006960][ T6919] netlink: 'syz.1.397': attribute type 9 has an invalid length. [ 86.009185][ T6919] netlink: 134640 bytes leftover after parsing attributes in process `syz.1.397'. [ 86.289345][ T6921] syz.1.398: attempt to access beyond end of device [ 86.289345][ T6921] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 86.289386][ T6921] EXT4-fs (loop1): unable to read superblock [ 86.348835][ T6929] usb 2-1: USB disconnect, device number 2 [ 86.460700][ T6930] hub 2-0:1.0: USB hub found [ 86.461290][ T6930] hub 2-0:1.0: 6 ports detected [ 86.626788][ T35] usb 2-1: new high-speed USB device number 3 using ehci-pci [ 86.812009][ T35] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 86.812041][ T35] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 86.812061][ T35] usb 2-1: Product: QEMU USB Tablet [ 86.812076][ T35] usb 2-1: Manufacturer: QEMU [ 86.812091][ T35] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 86.838071][ T35] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0005/input/input12 [ 86.899645][ T35] hid-generic 0003:0627:0001.0005: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 87.066850][ T29] sched: DL replenish lagged too much [ 87.290772][ T6932] tty tty1: ldisc open failed (-12), clearing slot 0 [ 87.334605][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 87.350076][ T6939] netlink: 'syz.2.403': attribute type 9 has an invalid length. [ 87.352322][ T6939] netlink: 'syz.2.403': attribute type 7 has an invalid length. [ 87.354480][ T6939] netlink: 'syz.2.403': attribute type 8 has an invalid length. [ 87.369650][ T6941] netlink: 20 bytes leftover after parsing attributes in process `syz.1.402'. [ 87.505148][ T25] usb 5-1: config 0 has an invalid descriptor of length 145, skipping remainder of the config [ 87.507641][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 87.513241][ T25] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.515773][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.521350][ T25] usb 5-1: config 0 descriptor?? [ 87.529284][ T25] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 87.609343][ T6946] mkiss: ax0: crc mode is auto. [ 87.683170][ T6948] openvswitch: netlink: Actions may not be safe on all matching packets [ 88.047439][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.408'. [ 88.053706][ T6961] xfrm1: entered allmulticast mode [ 88.466260][ T6976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.473258][ T6976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.533220][ T6986] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 89.538190][ T6986] syzkaller0: entered promiscuous mode [ 89.540963][ T6986] syzkaller0: entered allmulticast mode [ 90.040039][ T981] usb 5-1: USB disconnect, device number 5 [ 92.907071][ T7009] netlink: 'syz.1.417': attribute type 10 has an invalid length. [ 92.930430][ T7009] bond0: (slave netdevsim0): Releasing backup interface [ 92.936269][ T7009] team0: Port device netdevsim0 added [ 92.952769][ T7010] netlink: 'syz.1.417': attribute type 10 has an invalid length. [ 94.215928][ T5352] Bluetooth: hci3: command 0x0405 tx timeout [ 94.369691][ T7055] netlink: 48 bytes leftover after parsing attributes in process `syz.3.427'. [ 94.663408][ T7059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.884201][ T7067] FAULT_INJECTION: forcing a failure. [ 94.884201][ T7067] name failslab, interval 1, probability 0, space 0, times 0 [ 94.890704][ T7067] CPU: 2 UID: 0 PID: 7067 Comm: syz.3.429 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 94.894308][ T7067] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.897993][ T7067] Call Trace: [ 94.899153][ T7067] [ 94.900055][ T7067] dump_stack_lvl+0x16c/0x1f0 [ 94.901362][ T7067] should_fail_ex+0x497/0x5b0 [ 94.902643][ T7067] ? fs_reclaim_acquire+0xae/0x150 [ 94.904029][ T7067] should_failslab+0xc2/0x120 [ 94.905334][ T7067] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 94.906783][ T7067] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 94.908415][ T7067] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 94.910006][ T7067] mmu_topup_memory_caches+0x22/0xd0 [ 94.911431][ T7067] kvm_mmu_load+0xda/0x20d0 [ 94.913007][ T7067] ? mark_held_locks+0x9f/0xe0 [ 94.914666][ T7067] ? kvm_apic_has_interrupt+0xb6/0x190 [ 94.916545][ T7067] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 94.918741][ T7067] ? kvm_guest_time_update+0x780/0xeb0 [ 94.920780][ T7067] ? kvm_deliver_exception_payload+0x47/0x200 [ 94.922718][ T7067] ? __pfx_kvm_mmu_load+0x10/0x10 [ 94.924059][ T7067] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 94.925668][ T7067] ? kvm_check_and_inject_events+0x57f/0x12e0 [ 94.927257][ T7067] vcpu_run+0x2e22/0x4c90 [ 94.928784][ T7067] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 94.930623][ T7067] ? __pfx_vcpu_run+0x10/0x10 [ 94.931940][ T7067] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 94.933596][ T7067] ? rcu_watching_snap_stopped_since+0xf0/0x110 [ 94.935257][ T7067] ? trace_lock_acquire+0x14a/0x1d0 [ 94.936667][ T7067] ? __local_bh_enable_ip+0xa4/0x120 [ 94.938082][ T7067] ? kvm_arch_vcpu_ioctl_run+0x14d/0x1730 [ 94.939611][ T7067] ? lock_acquire+0x2f/0xb0 [ 94.940851][ T7067] ? kvm_arch_vcpu_ioctl_run+0x447/0x1730 [ 94.942377][ T7067] kvm_arch_vcpu_ioctl_run+0x447/0x1730 [ 94.943890][ T7067] kvm_vcpu_ioctl+0x6c7/0x1510 [ 94.945301][ T7067] ? tomoyo_path_number_perm+0x467/0x5b0 [ 94.946874][ T7067] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 94.948360][ T7067] ? tomoyo_path_number_perm+0x190/0x5b0 [ 94.949902][ T7067] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 94.951500][ T7067] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 94.953057][ T7067] ? do_vfs_ioctl+0x513/0x1950 [ 94.954371][ T7067] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 94.955755][ T7067] ? trace_lock_acquire+0x14a/0x1d0 [ 94.957172][ T7067] kvm_vcpu_compat_ioctl+0x210/0x3f0 [ 94.958595][ T7067] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 94.960350][ T7067] ? __fget_files+0x244/0x3f0 [ 94.961666][ T7067] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 94.963210][ T7067] __do_compat_sys_ioctl+0x259/0x2b0 [ 94.964670][ T7067] __do_fast_syscall_32+0x73/0x120 [ 94.966054][ T7067] do_fast_syscall_32+0x32/0x80 [ 94.967370][ T7067] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 94.969066][ T7067] RIP: 0023:0xf7f16579 [ 94.970341][ T7067] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 94.975485][ T7067] RSP: 002b:00000000f567556c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 94.977887][ T7067] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 94.979991][ T7067] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.982106][ T7067] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 94.984220][ T7067] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 94.986343][ T7067] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 94.988524][ T7067] [ 97.144405][ T7010] team0: Port device netdevsim0 removed [ 97.578031][ T7010] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 97.873747][ T7079] tmpfs: Bad value for 'mpol' [ 97.913376][ T7041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.425'. [ 97.916669][ T7042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.425'. [ 98.040691][ T7052] netlink: 'syz.2.426': attribute type 10 has an invalid length. [ 98.061353][ T7052] bond0: (slave netdevsim0): Releasing backup interface [ 98.067664][ T7052] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 98.070312][ T7052] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 98.074495][ T7053] netlink: 'syz.2.426': attribute type 10 has an invalid length. [ 98.077401][ T7053] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 98.079345][ T7053] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 98.081468][ T7053] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 98.685959][ T7095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.437'. [ 98.700347][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.437'. [ 98.761276][ T7098] netlink: 'syz.3.438': attribute type 4 has an invalid length. [ 98.835960][ T7102] netlink: 'syz.3.438': attribute type 4 has an invalid length. [ 99.920960][ T65] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 100.087595][ T65] usb 6-1: Using ep0 maxpacket: 16 [ 100.093232][ T65] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA5, changing to 0x85 [ 100.096798][ T65] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 104 [ 100.101827][ T65] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 100.104911][ T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.111464][ T65] usb 6-1: Product: syz [ 100.114021][ T65] usb 6-1: Manufacturer: syz [ 100.115681][ T65] usb 6-1: SerialNumber: syz [ 100.119646][ T65] usb 6-1: config 0 descriptor?? [ 100.124499][ T7105] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 100.142587][ T65] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input13 [ 100.169704][ C3] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 100.455644][ T25] libceph: connect (1)[c::]:6789 error -101 [ 100.457517][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 100.561288][ T7103] random: crng reseeded on system resumption [ 100.626380][ T7113] ceph: No mds server is up or the cluster is laggy [ 101.993143][ T7109] netlink: 'syz.0.440': attribute type 10 has an invalid length. [ 102.019808][ T7109] bond0: (slave netdevsim0): Releasing backup interface [ 102.030675][ T7109] team0: Port device netdevsim0 added [ 102.036966][ T7110] netlink: 'syz.0.440': attribute type 10 has an invalid length. [ 102.104561][ T7121] openvswitch: netlink: Actions may not be safe on all matching packets [ 105.765413][ T7110] team0: Port device netdevsim0 removed [ 106.235710][ T7110] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 106.414288][ T30] usb 6-1: USB disconnect, device number 6 [ 106.741192][ T7144] netlink: 'syz.0.442': attribute type 10 has an invalid length. [ 106.918831][ T7144] bond0: (slave netdevsim0): Releasing backup interface [ 106.949616][ T7144] team0: Port device netdevsim0 added [ 106.961939][ T7147] netlink: 'syz.0.442': attribute type 10 has an invalid length. [ 106.983103][ T7147] team0: Port device netdevsim0 removed [ 106.987388][ T7147] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 107.806053][ T7161] NILFS (nullb0): couldn't find nilfs on the device [ 108.578195][ T7164] 9pnet_virtio: no channels available for device 127.0.0.1 [ 108.585482][ T7164] usb 2-1: USB disconnect, device number 3 [ 108.998153][ T7165] hub 2-0:1.0: USB hub found [ 109.001526][ T7165] hub 2-0:1.0: 6 ports detected [ 109.164457][ T25] usb 2-1: new high-speed USB device number 4 using ehci-pci [ 109.358202][ T25] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 109.361190][ T25] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 109.364496][ T25] usb 2-1: Product: QEMU USB Tablet [ 109.366630][ T25] usb 2-1: Manufacturer: QEMU [ 109.368488][ T25] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 109.389166][ T25] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0006/input/input14 [ 109.457264][ T25] hid-generic 0003:0627:0001.0006: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 110.363920][ T7183] netlink: 'syz.1.453': attribute type 10 has an invalid length. [ 110.390820][ T7183] bond0: (slave netdevsim0): Releasing backup interface [ 110.401996][ T7183] team0: Port device netdevsim0 added [ 110.404080][ T7186] netlink: 'syz.1.453': attribute type 10 has an invalid length. [ 110.433225][ T7186] team0: Port device netdevsim0 removed [ 110.436857][ T7186] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 110.477757][ T7184] netlink: 'syz.3.452': attribute type 10 has an invalid length. [ 110.507629][ T7184] bond0: (slave netdevsim0): Releasing backup interface [ 110.528880][ T7184] team0: Port device netdevsim0 added [ 110.535760][ T7185] netlink: 'syz.3.452': attribute type 10 has an invalid length. [ 110.601256][ T7185] team0: Port device netdevsim0 removed [ 110.605121][ T7185] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 112.328536][ T7222] netlink: 'syz.3.462': attribute type 10 has an invalid length. [ 112.798911][ T7222] bond0: (slave netdevsim0): Releasing backup interface [ 112.811515][ T7222] team0: Port device netdevsim0 added [ 112.813971][ T7221] netlink: 'syz.3.462': attribute type 10 has an invalid length. [ 112.833711][ T7221] team0: Port device netdevsim0 removed [ 112.837912][ T7221] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 115.449781][ T25] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 115.609663][ T25] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 115.617328][ T25] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 115.628575][ T25] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 115.629363][ T7250] vivid-007: disconnect [ 115.632004][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.640211][ T7249] vivid-007: reconnect [ 115.646925][ T7247] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 115.670160][ T25] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 115.956530][ T7261] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.469'. [ 116.300072][ T30] usb 8-1: USB disconnect, device number 5 [ 116.610558][ T7283] netlink: 'syz.0.477': attribute type 12 has an invalid length. [ 117.430562][ T7303] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=536871680 (1073743360 ns) > initial count (152 ns). Using initial count to start timer. [ 117.512227][ T7310] netlink: 'syz.2.484': attribute type 21 has an invalid length. [ 117.514488][ T7310] netlink: 128 bytes leftover after parsing attributes in process `syz.2.484'. [ 117.518574][ T7310] netlink: 'syz.2.484': attribute type 5 has an invalid length. [ 117.520639][ T7310] netlink: 'syz.2.484': attribute type 6 has an invalid length. [ 117.522898][ T7310] netlink: 3 bytes leftover after parsing attributes in process `syz.2.484'. [ 118.135356][ T7306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.231206][ T7329] netlink: 'syz.2.490': attribute type 10 has an invalid length. [ 118.234266][ T7329] ipvlan1: entered promiscuous mode [ 118.237353][ T7329] autofs: Bad value for 'fd' [ 118.464493][ T7333] macvlan2: entered promiscuous mode [ 118.466700][ T7333] macvlan2: entered allmulticast mode [ 118.761533][ T7342] 9pnet_virtio: no channels available for device syz [ 118.764202][ T7342] 9pnet_virtio: no channels available for device syz [ 118.782937][ T7342] 9pnet_virtio: no channels available for device syz [ 118.790404][ T7342] 9pnet_virtio: no channels available for device syz [ 118.801998][ T7342] 9pnet_virtio: no channels available for device syz [ 118.810556][ T7342] 9pnet_virtio: no channels available for device syz [ 118.814408][ T7342] 9pnet_virtio: no channels available for device syz [ 118.829938][ T7342] 9pnet_virtio: no channels available for device syz [ 118.833676][ T7342] 9pnet_virtio: no channels available for device syz [ 118.838333][ T7342] 9pnet_virtio: no channels available for device syz [ 118.842562][ T7342] 9pnet_virtio: no channels available for device syz [ 118.849184][ T7342] 9pnet_virtio: no channels available for device syz [ 118.851975][ T7342] 9pnet_virtio: no channels available for device syz [ 118.857298][ T7342] 9pnet_virtio: no channels available for device syz [ 118.865520][ T7342] 9pnet_virtio: no channels available for device syz [ 118.892183][ T7342] 9pnet_virtio: no channels available for device syz [ 118.899433][ T7342] 9pnet_virtio: no channels available for device syz [ 118.902384][ T7342] 9pnet_virtio: no channels available for device syz [ 118.907403][ T7342] 9pnet_virtio: no channels available for device syz [ 118.910186][ T7342] 9pnet_virtio: no channels available for device syz [ 118.912921][ T7342] 9pnet_virtio: no channels available for device syz [ 118.918037][ T7342] 9pnet_virtio: no channels available for device syz [ 118.922407][ T7342] 9pnet_virtio: no channels available for device syz [ 118.931323][ T7342] 9pnet_virtio: no channels available for device syz [ 118.938198][ T7342] 9pnet_virtio: no channels available for device syz [ 118.951590][ T7342] 9pnet_virtio: no channels available for device syz [ 118.956791][ T7342] 9pnet_virtio: no channels available for device syz [ 118.962568][ T7342] 9pnet_virtio: no channels available for device syz [ 118.967300][ T7342] 9pnet_virtio: no channels available for device syz [ 118.970251][ T7342] 9pnet_virtio: no channels available for device syz [ 118.976596][ T7342] 9pnet_virtio: no channels available for device syz [ 118.979975][ T7342] 9pnet_virtio: no channels available for device syz [ 118.991768][ T7342] 9pnet_virtio: no channels available for device syz [ 119.004576][ T7342] 9pnet_virtio: no channels available for device syz [ 119.010702][ T7342] 9pnet_virtio: no channels available for device syz [ 119.018371][ T7342] 9pnet_virtio: no channels available for device syz [ 119.022724][ T7342] 9pnet_virtio: no channels available for device syz [ 119.055581][ T7342] 9pnet_virtio: no channels available for device syz [ 119.062694][ T7342] 9pnet_virtio: no channels available for device syz [ 119.065441][ T7342] 9pnet_virtio: no channels available for device syz [ 119.068291][ T7342] 9pnet_virtio: no channels available for device syz [ 119.072253][ T7342] 9pnet_virtio: no channels available for device syz [ 119.075404][ T7342] 9pnet_virtio: no channels available for device syz [ 119.078166][ T7342] 9pnet_virtio: no channels available for device syz [ 119.088721][ T7342] 9pnet_virtio: no channels available for device syz [ 119.091518][ T7342] 9pnet_virtio: no channels available for device syz [ 119.095170][ T7342] 9pnet_virtio: no channels available for device syz [ 119.097921][ T7342] 9pnet_virtio: no channels available for device syz [ 119.100628][ T7342] 9pnet_virtio: no channels available for device syz [ 119.106115][ T7342] 9pnet_virtio: no channels available for device syz [ 119.109867][ T7342] 9pnet_virtio: no channels available for device syz [ 119.112913][ T7342] 9pnet_virtio: no channels available for device syz [ 119.115439][ T7342] 9pnet_virtio: no channels available for device syz [ 119.117351][ T7342] 9pnet_virtio: no channels available for device syz [ 119.119247][ T7342] 9pnet_virtio: no channels available for device syz [ 119.121303][ T7342] 9pnet_virtio: no channels available for device syz [ 119.124705][ T7342] 9pnet_virtio: no channels available for device syz [ 119.128499][ T7342] 9pnet_virtio: no channels available for device syz [ 119.132415][ T7342] 9pnet_virtio: no channels available for device syz [ 119.136320][ T7342] 9pnet_virtio: no channels available for device syz [ 119.139225][ T7342] 9pnet_virtio: no channels available for device syz [ 119.144829][ T7342] 9pnet_virtio: no channels available for device syz [ 119.151947][ T7342] 9pnet_virtio: no channels available for device syz [ 119.155491][ T7342] 9pnet_virtio: no channels available for device syz [ 119.852386][ T7361] Illegal XDP return value 4294967294 on prog (id 126) dev N/A, expect packet loss! [ 119.852441][ T830] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 119.858836][ T830] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 119.861379][ T830] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 119.863868][ T830] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 119.866349][ T830] hid-generic 0000:0004:0000.0007: unknown main item tag 0x4 [ 119.869646][ T830] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 119.872335][ T830] hid-generic 0000:0004:0000.0007: unknown main item tag 0x2 [ 119.874873][ T830] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 119.877868][ T830] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 119.880474][ T830] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 119.883006][ T830] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 119.885571][ T830] hid-generic 0000:0004:0000.0007: unknown main item tag 0x4 [ 119.888326][ T830] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 119.890887][ T830] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 119.893355][ T830] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 119.895770][ T830] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 119.897976][ T830] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 119.899924][ T830] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 119.901875][ T830] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 119.903810][ T830] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 119.905933][ T830] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 119.908001][ T830] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 119.909946][ T830] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 119.911871][ T830] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 119.913788][ T830] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 119.915710][ T830] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 119.921037][ T830] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 119.922952][ T830] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 119.928455][ T830] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 119.930490][ T830] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 119.933683][ T830] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 119.933696][ T830] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 119.933706][ T830] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 119.933771][ T830] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 119.933782][ T830] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 119.933846][ T830] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 119.938968][ T830] hid-generic 0000:0004:0000.0007: hidraw1: HID v0.c8 Device [syz0] on syz0 [ 120.414608][ T7394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.507'. [ 120.417086][ T7394] netlink: 24 bytes leftover after parsing attributes in process `syz.0.507'. [ 120.463373][ T5408] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 120.615199][ T5408] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 120.619133][ T5408] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 120.623145][ T5408] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 120.625856][ T5408] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 120.629907][ T5408] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 120.639430][ T5408] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 120.644951][ T5408] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 120.648076][ T5408] usb 8-1: Product: syz [ 120.649451][ T5408] usb 8-1: Manufacturer: syz [ 120.655035][ T5408] cdc_wdm 8-1:1.0: skipping garbage [ 120.656997][ T5408] cdc_wdm 8-1:1.0: skipping garbage [ 120.661604][ T5408] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 120.663498][ T5408] cdc_wdm 8-1:1.0: Unknown control protocol [ 121.145339][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 121.145510][ T5394] usb 8-1: USB disconnect, device number 6 [ 121.147164][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 121.150889][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 121.154889][ T7392] cdc_wdm 8-1:1.0: Tx URB error: -19 [ 121.330252][ T7424] netlink: 92 bytes leftover after parsing attributes in process `syz.1.513'. [ 121.363671][ T7392] program syz.3.506 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.988319][ T7426] cgroup: noprefix used incorrectly [ 122.249684][ T7446] devtmpfs: Too few inodes for current use [ 122.764797][ T7455] fuse: Bad value for 'group_id' [ 122.767684][ T7455] fuse: Bad value for 'group_id' [ 122.950308][ T7459] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 122.957871][ T7459] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 123.460979][ T7475] netlink: 28 bytes leftover after parsing attributes in process `syz.1.526'. [ 124.056993][ T7494] sg_write: data in/out 92/70 bytes for SCSI command 0x5-- guessing data in; [ 124.056993][ T7494] program syz.2.532 not setting count and/or reply_len properly [ 124.115879][ T7500] ufs: Invalid option: ".».X;yøń" or missing value [ 124.118151][ T7500] ufs: wrong mount options [ 124.134389][ T7496] 9pnet_fd: Insufficient options for proto=fd [ 124.196444][ T7505] 9pnet_fd: Insufficient options for proto=fd [ 124.301688][ T7512] nfs4: Unknown parameter 'none' [ 124.309920][ T7512] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 [ 124.333262][ T7514] nfs4: Unknown parameter 'none' [ 124.336600][ T7514] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 [ 124.601831][ T981] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 124.754336][ T981] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 124.756457][ T981] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 124.759448][ T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 193, changing to 11 [ 124.763223][ T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16990, setting to 1024 [ 124.766872][ T981] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 124.770243][ T981] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 124.775248][ T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.778840][ T981] usb 5-1: config 0 descriptor?? [ 124.832375][ T5352] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 124.836553][ T5352] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 124.841036][ T5352] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 124.845642][ T5352] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 124.848162][ T5352] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 124.850559][ T5352] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 124.943155][ T7538] chnl_net:caif_netlink_parms(): no params data found [ 125.020392][ T7538] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.023059][ T7538] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.025712][ T7538] bridge_slave_0: entered allmulticast mode [ 125.028568][ T7538] bridge_slave_0: entered promiscuous mode [ 125.033221][ T7538] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.035843][ T7538] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.038380][ T7538] bridge_slave_1: entered allmulticast mode [ 125.041317][ T7538] bridge_slave_1: entered promiscuous mode [ 125.044257][ T7547] nfs4: Unknown parameter 'none' [ 125.047518][ T7547] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 [ 125.077676][ T7538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.083738][ T7538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.118892][ T7538] team0: Port device team_slave_0 added [ 125.122670][ T7538] team0: Port device team_slave_1 added [ 125.154590][ T7538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.158079][ T7538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.167136][ T7538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.171631][ T7538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.173884][ T7538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.183113][ T7538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.192817][ T981] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 125.195356][ T981] plantronics 0003:047F:FFFF.0008: global environment stack underflow [ 125.198130][ T981] plantronics 0003:047F:FFFF.0008: item 0 4 1 11 parsing failed [ 125.201695][ T981] plantronics 0003:047F:FFFF.0008: parse failed [ 125.204216][ T981] plantronics 0003:047F:FFFF.0008: probe with driver plantronics failed with error -22 [ 125.226779][ T7538] hsr_slave_0: entered promiscuous mode [ 125.229000][ T7538] hsr_slave_1: entered promiscuous mode [ 125.349230][ T7538] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.391026][ T7516] 9pnet_fd: Insufficient options for proto=fd [ 125.458000][ T7538] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.468500][ T5394] usb 5-1: USB disconnect, device number 6 [ 125.534558][ T7538] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.539068][ T7555] netlink: 7 bytes leftover after parsing attributes in process `syz.1.549'. [ 125.644799][ T7538] bond0: (slave netdevsim0): Releasing backup interface [ 125.655782][ T7538] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.776007][ T7538] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 125.783514][ T7538] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 125.795178][ T7538] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 125.799363][ T7538] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 125.815928][ T7538] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.818425][ T7538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.821041][ T7538] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.823514][ T7538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.864077][ T7538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.873985][ T1103] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.878531][ T1103] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.895443][ T7538] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.905779][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.907740][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.917607][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.919783][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.063343][ T7538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.088706][ T7538] veth0_vlan: entered promiscuous mode [ 126.097512][ T7538] veth1_vlan: entered promiscuous mode [ 126.115441][ T7538] veth0_macvtap: entered promiscuous mode [ 126.119913][ T7538] veth1_macvtap: entered promiscuous mode [ 126.132337][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.135939][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.139254][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.143464][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.146839][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.150694][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.154134][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.157751][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.162753][ T7538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.174687][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.178303][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.181708][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.185064][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.188714][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.192742][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.196144][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.199551][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.205201][ T7538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.213512][ T7538] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.216404][ T7538] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.219723][ T7538] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.223742][ T7538] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.273420][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.275397][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.295942][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.297980][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.401072][ T7589] nfs4: Unknown parameter 'none' [ 126.405326][ T7589] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 [ 126.899841][ T67] Bluetooth: hci0: command tx timeout [ 127.404434][ T67] Bluetooth: Frame is too long (len 41, expected len 16) [ 127.643660][ T7603] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.770203][ T7608] netlink: 'syz.1.560': attribute type 9 has an invalid length. [ 127.773342][ T7608] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.560'. [ 127.796901][ T7608] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 127.805457][ T7608] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 127.851266][ T7608] ALSA: mixer_oss: invalid OSS volume 'Ę79ó½ĪƤbO5®śq-pÄ.”³ć„Ü)Gé‘w' [ 127.884580][ T7608] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 128.113663][ T7613] XFS (nullb0): Invalid superblock magic number [ 128.193973][ T7620] syz.3.562: attempt to access beyond end of device [ 128.193973][ T7620] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 128.201668][ T7621] openvswitch: netlink: Actions may not be safe on all matching packets [ 128.988842][ T67] Bluetooth: hci0: command tx timeout [ 129.151013][ T7654] program syz.3.571 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.235256][ T7658] netlink: 88 bytes leftover after parsing attributes in process `syz.3.573'. [ 130.194206][ T12] bridge_slave_1: left allmulticast mode [ 130.196141][ T12] bridge_slave_1: left promiscuous mode [ 130.199993][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.207556][ T12] bridge_slave_0: left allmulticast mode [ 130.210652][ T12] bridge_slave_0: left promiscuous mode [ 130.216062][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.631348][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.635828][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.638082][ T7686] CUSE: unknown device info "KJ éH+ßćŪ¤2LhøänLž1Õ`†CcŻņn§õ†īģ8­Ø×0ŗ©®(Ą3Õ¶iė®ā>f”Ēč_Ł®,°š<Ö_e¤FĄĘ" [ 130.638097][ T7686] CUSE: unknown device info "3ÜŸ•,²„Ģ˜õ" [ 130.638105][ T7686] CUSE: DEVNAME unspecified [ 130.646744][ T12] bond0 (unregistering): Released all slaves [ 130.651229][ T12] bond1 (unregistering): Released all slaves [ 130.730333][ T12] bond2 (unregistering): Released all slaves [ 130.772701][ T7686] @: renamed from vlan0 (while UP) [ 130.797879][ T12] tipc: Disabling bearer [ 130.810869][ T12] tipc: Left network mode [ 130.829273][ T1377] ieee802154 phy0 wpan0: encryption failed: -22 [ 130.831995][ T1377] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.059021][ T67] Bluetooth: hci0: command tx timeout [ 131.100613][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.103294][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.107064][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.109845][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.146223][ T12] veth1_macvtap: left promiscuous mode [ 131.148998][ T12] veth0_macvtap: left promiscuous mode [ 131.150985][ T12] veth1_vlan: left promiscuous mode [ 131.152999][ T12] veth0_vlan: left promiscuous mode [ 131.246803][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.583'. [ 131.467494][ T5387] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 131.480968][ T39] audit: type=1326 audit(2000000009.124:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.1.587" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x0 [ 131.647360][ T5387] usb 8-1: Using ep0 maxpacket: 8 [ 131.651018][ T5387] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 131.654552][ T5387] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 131.655827][ T7717] nfs4: Unknown parameter 'none' [ 131.658147][ T5387] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.663792][ T5387] usb 8-1: config 0 descriptor?? [ 131.670240][ T7717] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 [ 131.970155][ T7733] syz.1.590: attempt to access beyond end of device [ 131.970155][ T7733] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 131.977788][ T7733] EXT4-fs (loop1): unable to read superblock [ 131.997736][ T7734] syz.3.584: attempt to access beyond end of device [ 131.997736][ T7734] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 132.018991][ T7733] usb 2-1: USB disconnect, device number 4 [ 132.029011][ T7734] EXT4-fs (loop3): unable to read superblock [ 132.186531][ T7734] hub 2-0:1.0: USB hub found [ 132.192524][ T7734] hub 2-0:1.0: 6 ports detected [ 132.343436][ T12] team0 (unregistering): Port device team_slave_1 removed [ 132.371300][ T5387] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 132.417498][ T5408] usb 2-1: new high-speed USB device number 5 using ehci-pci [ 132.469965][ T12] team0 (unregistering): Port device team_slave_0 removed [ 132.615185][ T5408] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 132.630305][ T5408] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 132.658374][ T5408] usb 2-1: Product: QEMU USB Tablet [ 132.663011][ T5408] usb 2-1: Manufacturer: QEMU [ 132.665130][ T5408] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 132.732490][ T5408] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0009/input/input16 [ 132.844148][ T5408] hid-generic 0003:0627:0001.0009: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 133.137114][ T67] Bluetooth: hci0: command tx timeout [ 133.406458][ T7576] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 133.557636][ T7576] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 133.561415][ T7576] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.567946][ T7576] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.572220][ T7576] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 133.587057][ T7576] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 133.589525][ T7576] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 133.591649][ T7576] usb 5-1: Manufacturer: syz [ 133.599686][ T7576] usb 5-1: config 0 descriptor?? [ 133.668473][ T7749] autofs: Bad value for 'fd' [ 133.689193][ T5394] usb 8-1: USB disconnect, device number 7 [ 133.699931][ T5394] iowarrior 8-1:0.0: I/O-Warror #0 now disconnected [ 133.806376][ T7576] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 133.812779][ T7576] appleir 0003:05AC:8243.000A: No inputs registered, leaving [ 133.825816][ T7576] appleir 0003:05AC:8243.000A: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 133.957199][ T7753] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 134.389011][ T7762] @: renamed from vlan0 (while UP) [ 134.421373][ T7765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.595'. [ 134.421679][ T7766] nfs4: Unknown parameter 'none' [ 134.427589][ T7766] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 [ 134.447277][ T7770] IPVS: sync thread started: state = MASTER, mcast_ifn = vlan1, syncid = 0, id = 0 [ 134.499756][ T7768] netlink: 2088 bytes leftover after parsing attributes in process `syz.2.597'. [ 134.852905][ T30] usb 5-1: USB disconnect, device number 7 [ 135.235859][ T7787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'. [ 135.577817][ T7801] nfs4: Unknown parameter 'none' [ 135.580656][ T7801] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 [ 136.390956][ T7835] nfs4: Unknown parameter 'none' [ 136.394177][ T7835] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 [ 138.512771][ T7875] nfs4: Unknown parameter 'none' [ 138.516747][ T7875] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 [ 138.623958][ T7576] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 138.775252][ T7576] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 138.778970][ T7576] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.781428][ T7576] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.784694][ T7576] usb 7-1: config 0 interface 0 has no altsetting 0 [ 138.788043][ T7576] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.790360][ T7576] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.793269][ T7576] usb 7-1: config 0 interface 0 has no altsetting 0 [ 138.796633][ T7576] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.798856][ T7576] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.802006][ T7576] usb 7-1: config 0 interface 0 has no altsetting 0 [ 138.805190][ T7576] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.807474][ T7576] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.810234][ T7576] usb 7-1: config 0 interface 0 has no altsetting 0 [ 138.812888][ T7576] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.815979][ T7576] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.820034][ T7576] usb 7-1: config 0 interface 0 has no altsetting 0 [ 138.824029][ T7576] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.827136][ T7576] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.830831][ T7576] usb 7-1: config 0 interface 0 has no altsetting 0 [ 138.834300][ T7576] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.837568][ T7576] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.841318][ T7576] usb 7-1: config 0 interface 0 has no altsetting 0 [ 138.847670][ T7576] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.850042][ T7576] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.852839][ T7576] usb 7-1: config 0 interface 0 has no altsetting 0 [ 138.859774][ T7576] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 138.863813][ T7576] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 138.866650][ T7576] usb 7-1: Product: syz [ 138.868139][ T7576] usb 7-1: Manufacturer: syz [ 138.869796][ T7576] usb 7-1: SerialNumber: syz [ 138.874140][ T7576] usb 7-1: config 0 descriptor?? [ 138.880440][ T7576] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 139.384136][ T7888] syz.3.629[7888] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.384238][ T7888] syz.3.629[7888] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.388094][ T7888] syz.3.629[7888] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.479047][ T7892] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 139.508117][ T7892] overlayfs: failed to set xattr on upper [ 139.510006][ T7892] overlayfs: ...falling back to redirect_dir=nofollow. [ 139.511937][ T7892] overlayfs: ...falling back to uuid=null. [ 139.612922][ T67] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 139.618113][ T67] CPU: 1 UID: 0 PID: 67 Comm: kworker/u33:0 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 139.621651][ T67] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 139.625426][ T67] Workqueue: hci3 hci_rx_work [ 139.627159][ T67] Call Trace: [ 139.628224][ T67] [ 139.629174][ T67] dump_stack_lvl+0x16c/0x1f0 [ 139.630657][ T67] sysfs_warn_dup+0x7f/0xa0 [ 139.631936][ T67] sysfs_create_dir_ns+0x24d/0x2b0 [ 139.633436][ T67] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 139.635322][ T67] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 139.637202][ T67] ? kobject_add_internal+0x12d/0x990 [ 139.639055][ T67] ? do_raw_spin_unlock+0x172/0x230 [ 139.640938][ T67] kobject_add_internal+0x2c8/0x990 [ 139.642875][ T67] kobject_add+0x16f/0x240 [ 139.644567][ T67] ? __pfx_kobject_add+0x10/0x10 [ 139.646333][ T67] ? class_to_subsys+0x3e/0x160 [ 139.648172][ T67] ? do_raw_spin_unlock+0x172/0x230 [ 139.650048][ T67] ? kobject_put+0xab/0x5a0 [ 139.651686][ T67] device_add+0x289/0x1a70 [ 139.653274][ T67] ? __pfx_dev_set_name+0x10/0x10 [ 139.655015][ T67] ? __pfx_device_add+0x10/0x10 [ 139.656742][ T67] ? mgmt_send_event_skb+0x2f2/0x460 [ 139.658694][ T67] hci_conn_add_sysfs+0x17e/0x230 [ 139.660163][ T67] le_conn_complete_evt+0xfc7/0x1cf0 [ 139.661658][ T67] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 139.663302][ T67] ? trace_contention_end+0xea/0x140 [ 139.665290][ T67] ? __mutex_lock+0x1a6/0x9c0 [ 139.666983][ T67] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 139.669097][ T67] ? skb_pull_data+0x166/0x210 [ 139.670743][ T67] hci_le_meta_evt+0x2e2/0x5d0 [ 139.672129][ T67] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 139.674364][ T67] hci_event_packet+0x666/0x1190 [ 139.676136][ T67] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 139.678040][ T67] ? __pfx_hci_event_packet+0x10/0x10 [ 139.679854][ T67] ? mark_held_locks+0x9f/0xe0 [ 139.681381][ T67] ? kcov_remote_start+0x3cf/0x6e0 [ 139.683180][ T67] ? lockdep_hardirqs_on+0x7c/0x110 [ 139.684886][ T67] hci_rx_work+0x2c6/0x16c0 [ 139.686189][ T67] ? lock_acquire+0x2f/0xb0 [ 139.687486][ T67] ? process_one_work+0x8bb/0x1b30 [ 139.688936][ T67] process_one_work+0x958/0x1b30 [ 139.690374][ T67] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 139.692104][ T67] ? __pfx_process_one_work+0x10/0x10 [ 139.694028][ T67] ? assign_work+0x1a0/0x250 [ 139.695649][ T67] worker_thread+0x6c8/0xf00 [ 139.697337][ T67] ? __pfx_worker_thread+0x10/0x10 [ 139.699314][ T67] kthread+0x2c1/0x3a0 [ 139.700841][ T67] ? _raw_spin_unlock_irq+0x23/0x50 [ 139.702388][ T67] ? __pfx_kthread+0x10/0x10 [ 139.703665][ T67] ret_from_fork+0x45/0x80 [ 139.705042][ T67] ? __pfx_kthread+0x10/0x10 [ 139.706767][ T67] ret_from_fork_asm+0x1a/0x30 [ 139.708557][ T67] [ 139.711434][ T67] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 139.715328][ T67] Bluetooth: hci3: failed to register connection device [ 139.731427][ T65] usb 7-1: USB disconnect, device number 10 [ 139.751769][ T65] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 140.000149][ T7901] netlink: 'syz.3.632': attribute type 10 has an invalid length. [ 140.002814][ T7901] ipvlan1: entered promiscuous mode [ 140.006655][ T7901] batman_adv: batadv0: Adding interface: ipvlan1 [ 140.008771][ T7901] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.024079][ T7901] batman_adv: batadv0: Not using interface ipvlan1 (retrying later): interface not active [ 140.316283][ T7905] mac80211_hwsim hwsim3 : renamed from wlan1 (while UP) [ 140.533169][ T7921] nfs4: Unknown parameter 'none' [ 140.536377][ T7921] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 [ 140.648401][ T7926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'. [ 140.761470][ T7927] netlink: 'syz.2.637': attribute type 10 has an invalid length. [ 140.781661][ T7927] bond0: (slave netdevsim0): Releasing backup interface [ 140.788469][ T7927] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 140.791724][ T7927] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 140.801079][ T7927] netlink: 'syz.2.637': attribute type 10 has an invalid length. [ 140.813647][ T7927] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 140.816986][ T7927] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 140.823774][ T7927] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 141.263946][ T7934] netlink: 40 bytes leftover after parsing attributes in process `syz.1.639'. [ 141.337151][ T7940] syz.1.639: attempt to access beyond end of device [ 141.337151][ T7940] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 141.342261][ T7940] EXT4-fs (loop1): unable to read superblock [ 141.400385][ T7942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.642'. [ 141.434111][ T7942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.642'. [ 141.613194][ T7953] usb 2-1: USB disconnect, device number 5 [ 141.671255][ T7950] nbd2: detected capacity change from 0 to 12 [ 141.683270][ T7961] ISOFS: Unable to identify CD-ROM format. [ 141.697604][ T7130] block nbd2: Send control failed (result -89) [ 141.700281][ T7130] block nbd2: Request send failed, requeueing [ 141.707357][ T67] block nbd2: Receive control failed (result -32) [ 141.710522][ T7950] block nbd2: NBD_DISCONNECT [ 141.713110][ T52] block nbd2: Dead connection, failed to find a fallback [ 141.715841][ T52] block nbd2: shutting down sockets [ 141.716947][ T7950] block nbd2: Send disconnect failed -89 [ 141.718231][ T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 141.726655][ T52] Buffer I/O error on dev nbd2, logical block 0, async page read [ 141.734138][ T7130] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 141.737533][ T7130] Buffer I/O error on dev nbd2, logical block 0, async page read [ 141.740492][ T7130] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 141.747578][ T7130] Buffer I/O error on dev nbd2, logical block 0, async page read [ 141.750337][ T7130] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 141.755351][ T7130] Buffer I/O error on dev nbd2, logical block 0, async page read [ 141.759341][ T7130] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 141.762946][ T7130] Buffer I/O error on dev nbd2, logical block 0, async page read [ 141.765867][ T7130] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 141.769593][ T7130] Buffer I/O error on dev nbd2, logical block 0, async page read [ 141.772749][ T7130] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 141.774763][ T7953] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 141.776026][ T7130] Buffer I/O error on dev nbd2, logical block 0, async page read [ 141.778224][ T7953] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 141.778593][ T7953] vhci_hcd vhci_hcd.0: Device attached [ 141.781133][ T7130] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 141.789182][ T67] Bluetooth: hci3: command 0x0405 tx timeout [ 141.790821][ T7130] Buffer I/O error on dev nbd2, logical block 0, async page read [ 141.792916][ T7130] ldm_validate_partition_table(): Disk read failed. [ 141.794857][ T7130] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 141.797161][ T7130] Buffer I/O error on dev nbd2, logical block 0, async page read [ 141.799344][ T7130] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 141.802221][ T7130] Buffer I/O error on dev nbd2, logical block 0, async page read [ 141.804999][ T7130] Dev nbd2: unable to read RDB block 0 [ 141.806963][ T7130] nbd2: unable to read partition table [ 141.809716][ T7130] nbd2: partition table beyond EOD, truncated [ 141.956198][ T7950] ldm_validate_partition_table(): Disk read failed. [ 142.053230][ T7950] Dev nbd2: unable to read RDB block 0 [ 142.055382][ T7950] nbd2: unable to read partition table [ 142.062426][ T7950] nbd2: partition table beyond EOD, truncated [ 142.068340][ T7130] ldm_validate_partition_table(): Disk read failed. [ 142.070819][ T7130] Dev nbd2: unable to read RDB block 0 [ 142.072700][ T7130] nbd2: unable to read partition table [ 142.074396][ T7130] nbd2: partition table beyond EOD, truncated [ 142.137781][ T7972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.648'. [ 142.140983][ T7972] bMtadv_lave_0: renamed from lo (while UP) [ 142.192060][ T9] vhci_hcd: vhci_device speed not set [ 142.226469][ T7972] bMtadv_lave_0: entered allmulticast mode [ 142.262686][ T7974] netlink: 92 bytes leftover after parsing attributes in process `syz.3.649'. [ 142.294787][ T7974] netlink: 'syz.3.649': attribute type 8 has an invalid length. [ 142.297049][ T7974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.649'. [ 142.377379][ T7538] cgroup: fork rejected by pids controller in /syz3 [ 142.419280][ T9] usb 13-1: new full-speed USB device number 2 using vhci_hcd [ 142.461011][ T7963] vhci_hcd: connection reset by peer [ 142.463566][ T1199] vhci_hcd: stop threads [ 142.465117][ T1199] vhci_hcd: release socket [ 142.466724][ T1199] vhci_hcd: disconnect device [ 142.687938][ T1199] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.769573][ T1199] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.833561][ T5352] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 142.850831][ T1199] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.857905][ T5352] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 142.865954][ T5352] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 142.875543][ T5352] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 142.879597][ T5352] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 142.888113][ T5352] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 142.983602][ T1199] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.214159][ T1199] bridge_slave_1: left allmulticast mode [ 143.216117][ T1199] bridge_slave_1: left promiscuous mode [ 143.218181][ T1199] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.242408][ T1199] bridge_slave_0: left allmulticast mode [ 143.244460][ T1199] bridge_slave_0: left promiscuous mode [ 143.251902][ T1199] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.698319][ T1199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.708564][ T1199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.723629][ T1199] bond0 (unregistering): Released all slaves [ 143.825383][ T7982] chnl_net:caif_netlink_parms(): no params data found [ 144.003178][ T8012] netlink: 'syz.2.655': attribute type 10 has an invalid length. [ 144.013638][ T8012] bond0: (slave netdevsim0): Releasing backup interface [ 144.017506][ T8012] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 144.020356][ T8012] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 144.025733][ T7982] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.028281][ T7982] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.030397][ T8015] binder: 8014:8015 ioctl c0306201 20000480 returned -22 [ 144.038478][ T7982] bridge_slave_0: entered allmulticast mode [ 144.044318][ T7982] bridge_slave_0: entered promiscuous mode [ 144.048574][ T8013] netlink: 'syz.2.655': attribute type 10 has an invalid length. [ 144.051692][ T8013] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 144.054177][ T8013] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 144.056402][ T8013] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 144.106353][ T7982] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.110068][ T7982] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.126376][ T7982] bridge_slave_1: entered allmulticast mode [ 144.129816][ T7982] bridge_slave_1: entered promiscuous mode [ 144.206541][ T7982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.284545][ T8016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.314282][ T8016] bond0: (slave rose0): Enslaving as an active interface with an up link [ 144.318972][ T7982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.405910][ T7982] team0: Port device team_slave_0 added [ 144.408992][ T7982] team0: Port device team_slave_1 added [ 144.443638][ T7982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.445925][ T7982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.477563][ T7982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.482277][ T7982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.484675][ T7982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.495103][ T7982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.514708][ T1199] hsr_slave_0: left promiscuous mode [ 144.518177][ T1199] hsr_slave_1: left promiscuous mode [ 144.534016][ T1199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.535924][ T1199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.538502][ T1199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.540877][ T1199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.543415][ T1199] batman_adv: batadv0: Removing interface: ipvlan1 [ 144.561313][ T1199] veth1_macvtap: left promiscuous mode [ 144.562816][ T1199] veth0_macvtap: left promiscuous mode [ 144.564394][ T1199] veth1_vlan: left promiscuous mode [ 144.565997][ T1199] veth0_vlan: left promiscuous mode [ 144.980764][ T67] Bluetooth: hci0: command tx timeout [ 145.132472][ T8029] netlink: 20 bytes leftover after parsing attributes in process `syz.0.659'. [ 145.410124][ T1199] team0 (unregistering): Port device team_slave_1 removed [ 145.533051][ T1199] team0 (unregistering): Port device team_slave_0 removed [ 146.205201][ T8042] binder: 8038:8042 ioctl c018620c 20000200 returned -1 [ 146.282479][ T8040] program syz.0.662 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.388896][ T7982] hsr_slave_0: entered promiscuous mode [ 146.408463][ T7982] hsr_slave_1: entered promiscuous mode [ 147.059610][ T67] Bluetooth: hci0: command tx timeout [ 147.218414][ T7982] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 147.222715][ T7982] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 147.227669][ T7982] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 147.241981][ T7982] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 147.300757][ T7982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.315002][ T7982] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.320513][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.322918][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.331974][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.334660][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.356826][ T7982] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 147.360034][ T7982] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 147.401887][ T8094] netlink: 16 bytes leftover after parsing attributes in process `syz.2.670'. [ 147.460829][ T7982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.477757][ T7982] veth0_vlan: entered promiscuous mode [ 147.481942][ T7982] veth1_vlan: entered promiscuous mode [ 147.502129][ T7982] veth0_macvtap: entered promiscuous mode [ 147.509684][ T7982] veth1_macvtap: entered promiscuous mode [ 147.520261][ T9] vhci_hcd: vhci_device speed not set [ 147.524153][ T7982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.527731][ T7982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.535196][ T7982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.540083][ T7982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.548919][ T7982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.552231][ T7982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.558282][ T7982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.568668][ T7982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.572084][ T7982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.574620][ T7982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.577333][ T7982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.580434][ T7982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.583215][ T7982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.588031][ T7982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.597667][ T7982] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.601258][ T7982] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.603537][ T7982] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.605858][ T7982] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.656019][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.659346][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.668016][ T8120] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.671'. [ 147.668397][ T1199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.674035][ T1199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.798721][ T5387] IPVS: starting estimator thread 0... [ 147.916468][ T8132] IPVS: using max 35 ests per chain, 84000 per kthread [ 148.098454][ T8135] netlink: 352 bytes leftover after parsing attributes in process `syz.3.672'. [ 149.128750][ T67] Bluetooth: hci0: command tx timeout [ 149.332326][ T8163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.677'. [ 149.961869][ T8172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.679'. [ 150.536195][ T8191] cgroup2: Unknown parameter '/-\@[' [ 150.835338][ T8199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.687'. [ 150.860699][ T8199] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 151.115165][ T8210] binder: 8206:8210 ioctl c0046209 0 returned -22 [ 151.207549][ T67] Bluetooth: hci0: command tx timeout [ 151.288493][ T67] Bluetooth: hci1: command tx timeout [ 151.538977][ T8215] netlink: 16 bytes leftover after parsing attributes in process `syz.3.691'. [ 151.810638][ T8226] netlink: 24 bytes leftover after parsing attributes in process `syz.2.694'. [ 151.833872][ T8226] tipc: Resetting bearer [ 151.847076][ T8226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.694'. [ 151.907282][ T8226] tipc: Disabling bearer [ 152.137149][ T5394] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 152.257237][ T981] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 152.267103][ T5394] usb 7-1: device descriptor read/64, error -71 [ 152.402982][ T8236] netlink: 'syz.3.697': attribute type 3 has an invalid length. [ 152.405933][ T8236] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.697'. [ 152.421570][ T981] usb 5-1: Using ep0 maxpacket: 8 [ 152.424672][ T981] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 152.427320][ T981] usb 5-1: config 179 has no interface number 0 [ 152.429375][ T981] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 152.432179][ T981] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 152.434938][ T981] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 152.437795][ T981] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 152.440380][ T981] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 152.443677][ T981] usb 5-1: config 179 interface 65 has no altsetting 0 [ 152.445411][ T981] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 152.447717][ T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.450953][ T8233] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 152.458788][ T981] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input17 [ 152.529034][ T5394] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 152.656832][ T5394] usb 7-1: device descriptor read/64, error -71 [ 152.661034][ T8233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.664196][ T8233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.668362][ T5387] usb 5-1: USB disconnect, device number 8 [ 152.668387][ C3] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 152.672734][ T5387] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 152.767431][ T5394] usb usb7-port1: attempt power cycle [ 153.127415][ T5394] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 153.157083][ T5394] usb 7-1: device descriptor read/8, error -71 [ 153.256157][ T8244] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 153.258430][ T8244] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 153.264288][ T8244] vhci_hcd vhci_hcd.0: Device attached [ 153.280850][ T8246] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 1 [ 153.284841][ T1103] vhci_hcd: stop threads [ 153.286484][ T1103] vhci_hcd: release socket [ 153.288159][ T1103] vhci_hcd: disconnect device [ 153.353307][ T8248] fuse: Unknown parameter 'ūd”' [ 153.396441][ T5394] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 153.417156][ T5394] usb 7-1: device descriptor read/8, error -71 [ 153.527633][ T5394] usb usb7-port1: unable to enumerate USB device [ 153.844583][ T8241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.933103][ T8250] netlink: 'syz.0.700': attribute type 2 has an invalid length. [ 153.935549][ T8250] netlink: 24 bytes leftover after parsing attributes in process `syz.0.700'. [ 153.938410][ T8250] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 155.078249][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.712'. [ 155.084292][ T8294] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 58368 (only 8 groups) [ 155.095167][ T8295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.712'. [ 155.127986][ T39] audit: type=1326 audit(2000000032.776:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.0.713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 155.133379][ T39] audit: type=1326 audit(2000000032.776:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.0.713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 155.139006][ T39] audit: type=1326 audit(2000000032.776:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.0.713" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 155.144754][ T39] audit: type=1326 audit(2000000032.776:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.0.713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 155.150691][ T39] audit: type=1326 audit(2000000032.776:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.0.713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 155.173782][ T67] Bluetooth: hci3: unexpected event for opcode 0x0c5b [ 155.195711][ T5408] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 155.232134][ T8304] netlink: 64 bytes leftover after parsing attributes in process `syz.0.714'. [ 155.345631][ T5408] usb 7-1: Using ep0 maxpacket: 8 [ 155.349484][ T5408] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 155.352656][ T5408] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 155.355509][ T5408] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 155.358295][ T5408] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.362083][ T5408] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 155.365270][ T5408] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.573803][ T5408] usb 7-1: GET_CAPABILITIES returned 0 [ 155.575667][ T5408] usbtmc 7-1:16.0: can't read capabilities [ 155.824132][ T30] usb 7-1: USB disconnect, device number 15 [ 156.476876][ T8319] overlayfs: missing 'lowerdir' [ 156.815320][ T8335] input: syz0 as /devices/virtual/input/input18 [ 156.911561][ T8344] nfs4: Unknown parameter 'none' [ 156.915663][ T8344] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 [ 157.407612][ T8350] 9pnet_virtio: no channels available for device [ 158.483986][ T67] Bluetooth: hci1: command 0x0406 tx timeout [ 158.486275][ T67] Bluetooth: hci3: command 0x0405 tx timeout [ 158.493944][ T67] Bluetooth: hci2: command 0x0406 tx timeout [ 158.594291][ T8364] block nbd3: NBD_DISCONNECT [ 158.596380][ T8364] block nbd3: Disconnected due to user request. [ 158.599451][ T8364] block nbd3: shutting down sockets [ 160.098969][ T5360] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 160.105790][ T5360] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 160.109079][ T5360] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 160.113920][ T5360] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 160.117158][ T5360] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 160.119926][ T5360] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 160.168526][ T8385] nfs4: Unknown parameter 'none' [ 160.170558][ T8385] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 [ 160.204248][ T8378] chnl_net:caif_netlink_parms(): no params data found [ 160.269717][ T8378] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.272166][ T8378] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.275179][ T8378] bridge_slave_0: entered allmulticast mode [ 160.278006][ T8378] bridge_slave_0: entered promiscuous mode [ 160.281897][ T8378] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.284751][ T8378] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.287407][ T8378] bridge_slave_1: entered allmulticast mode [ 160.290438][ T8378] bridge_slave_1: entered promiscuous mode [ 160.334944][ T8378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.340394][ T8378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.374499][ T8378] team0: Port device team_slave_0 added [ 160.377723][ T8378] team0: Port device team_slave_1 added [ 160.399940][ T8378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.401732][ T8378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.409349][ T8378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.413209][ T8378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.415106][ T8378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.421615][ T8378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.453714][ T8378] hsr_slave_0: entered promiscuous mode [ 160.455852][ T8378] hsr_slave_1: entered promiscuous mode [ 160.457842][ T8378] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.459921][ T8378] Cannot create hsr debugfs directory [ 160.557596][ T8378] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.632130][ T8378] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.694257][ T8378] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.780305][ T8378] bond0: (slave netdevsim0): Releasing backup interface [ 160.787257][ T8378] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.875521][ T8378] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 160.880086][ T8378] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 160.883205][ T8378] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 160.886817][ T8378] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 160.899540][ T8378] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.901470][ T8378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.903447][ T8378] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.905572][ T8378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.940376][ T8378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.949586][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.954846][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.972199][ T8378] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.981016][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.982920][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.994215][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.996130][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.105778][ T8378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.135119][ T8378] veth0_vlan: entered promiscuous mode [ 161.142189][ T8378] veth1_vlan: entered promiscuous mode [ 161.155636][ T8378] veth0_macvtap: entered promiscuous mode [ 161.158861][ T8378] veth1_macvtap: entered promiscuous mode [ 161.165600][ T8378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.168336][ T8378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.170859][ T8378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.173774][ T8378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.176332][ T8378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.178898][ T8378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.181393][ T8378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.184480][ T8378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.187838][ T8378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.194246][ T8378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.196987][ T8378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.199532][ T8378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.202329][ T8378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.205007][ T8378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.207972][ T8378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.210496][ T8378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.214145][ T8378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.218087][ T8378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.223392][ T8378] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.225605][ T8378] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.227768][ T8378] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.230227][ T8378] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.274751][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.277099][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.290003][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.293451][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.570078][ T8408] /dev/sr0: Can't open blockdev [ 161.664499][ T8411] /dev/sr0: Can't open blockdev [ 161.709694][ T8414] netlink: 36 bytes leftover after parsing attributes in process `syz.3.735'. [ 161.718726][ T8414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.778179][ T8414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.822928][ T8416] netlink: 20 bytes leftover after parsing attributes in process `syz.1.736'. [ 162.162558][ T5355] Bluetooth: hci4: command tx timeout [ 162.209725][ T8429] netlink: 20 bytes leftover after parsing attributes in process `syz.2.739'. [ 162.247038][ T8431] nfs4: Unknown parameter 'none' [ 163.056277][ T8443] Process accounting resumed [ 163.319350][ T8462] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 163.538946][ T8469] nfs4: Unknown parameter 'none' [ 163.722068][ T8473] overlayfs: failed to resolve './file0': -2 [ 163.924433][ T8477] netlink: 'syz.2.751': attribute type 3 has an invalid length. [ 163.926971][ T8477] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.751'. [ 164.241002][ T5355] Bluetooth: hci4: command tx timeout [ 164.459035][ T5355] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 164.462709][ T5355] CPU: 0 UID: 0 PID: 5355 Comm: kworker/u33:5 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 164.465480][ T5355] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 164.468189][ T5355] Workqueue: hci4 hci_rx_work [ 164.469415][ T5355] Call Trace: [ 164.470265][ T5355] [ 164.471081][ T5355] dump_stack_lvl+0x16c/0x1f0 [ 164.472314][ T5355] sysfs_warn_dup+0x7f/0xa0 [ 164.473489][ T5355] sysfs_create_dir_ns+0x24d/0x2b0 [ 164.474803][ T5355] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 164.476249][ T5355] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 164.477602][ T5355] ? kobject_add_internal+0x12d/0x990 [ 164.478968][ T5355] ? do_raw_spin_unlock+0x172/0x230 [ 164.480295][ T5355] kobject_add_internal+0x2c8/0x990 [ 164.481758][ T5355] kobject_add+0x16f/0x240 [ 164.482899][ T5355] ? __pfx_kobject_add+0x10/0x10 [ 164.484170][ T5355] ? class_to_subsys+0x3e/0x160 [ 164.485416][ T5355] ? do_raw_spin_unlock+0x172/0x230 [ 164.486798][ T5355] ? kobject_put+0xab/0x5a0 [ 164.487980][ T5355] device_add+0x289/0x1a70 [ 164.489126][ T5355] ? __pfx_dev_set_name+0x10/0x10 [ 164.490385][ T5355] ? __pfx_device_add+0x10/0x10 [ 164.491618][ T5355] ? mgmt_send_event_skb+0x2f2/0x460 [ 164.492968][ T5355] hci_conn_add_sysfs+0x17e/0x230 [ 164.494232][ T5355] le_conn_complete_evt+0xfc7/0x1cf0 [ 164.495587][ T5355] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 164.497034][ T5355] ? trace_contention_end+0xea/0x140 [ 164.498378][ T5355] ? __mutex_lock+0x1a6/0x9c0 [ 164.499595][ T5355] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 164.501094][ T5355] ? skb_pull_data+0x166/0x210 [ 164.502325][ T5355] hci_le_meta_evt+0x2e2/0x5d0 [ 164.503533][ T5355] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 164.505171][ T5355] hci_event_packet+0x666/0x1190 [ 164.506444][ T5355] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 164.507768][ T5355] ? __pfx_hci_event_packet+0x10/0x10 [ 164.509140][ T5355] ? mark_held_locks+0x9f/0xe0 [ 164.510353][ T5355] ? kcov_remote_start+0x3cf/0x6e0 [ 164.511660][ T5355] ? lockdep_hardirqs_on+0x7c/0x110 [ 164.512978][ T5355] hci_rx_work+0x2c6/0x16c0 [ 164.514145][ T5355] ? lock_acquire+0x2f/0xb0 [ 164.515303][ T5355] ? process_one_work+0x8bb/0x1b30 [ 164.516617][ T5355] process_one_work+0x958/0x1b30 [ 164.517952][ T5355] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 164.519383][ T5355] ? __pfx_process_one_work+0x10/0x10 [ 164.520767][ T5355] ? assign_work+0x1a0/0x250 [ 164.521924][ T5355] worker_thread+0x6c8/0xf00 [ 164.523096][ T5355] ? __pfx_worker_thread+0x10/0x10 [ 164.524446][ T5355] kthread+0x2c1/0x3a0 [ 164.525495][ T5355] ? _raw_spin_unlock_irq+0x23/0x50 [ 164.526823][ T5355] ? __pfx_kthread+0x10/0x10 [ 164.528111][ T5355] ret_from_fork+0x45/0x80 [ 164.529253][ T5355] ? __pfx_kthread+0x10/0x10 [ 164.530444][ T5355] ret_from_fork_asm+0x1a/0x30 [ 164.531674][ T5355] [ 164.533348][ T5355] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 164.537521][ T5355] Bluetooth: hci4: failed to register connection device [ 165.094687][ T8504] block nbd1: shutting down sockets [ 165.283539][ T5408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.360843][ T5394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.450766][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.577712][ T8514] EXT4-fs (sda1): shut down requested (2) [ 165.579702][ T8514] Aborting journal on device sda1-8. [ 166.108771][ T8534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.113874][ T8534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.143182][ T8540] cgroup: Unknown subsys name 'fowner>00000000000000000000' [ 166.319991][ T5355] Bluetooth: hci4: command tx timeout [ 166.480003][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.643533][ T71] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.655611][ T7576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.660535][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.799932][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.949702][ T8586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.964596][ T8586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.179658][ T7576] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 167.241239][ T8595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.274889][ T5355] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 167.277080][ T5355] Bluetooth: Wrong link type (-22) [ 167.278415][ T5355] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 167.280138][ T5355] Bluetooth: Wrong link type (-22) [ 167.281457][ T5355] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 167.283446][ T5355] Bluetooth: Wrong link type (-22) [ 167.285204][ T5355] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 167.287122][ T5355] Bluetooth: Wrong link type (-22) [ 167.288824][ T5355] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 167.291410][ T5355] Bluetooth: Wrong link type (-22) [ 167.293148][ T5355] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 167.295522][ T5355] Bluetooth: Wrong link type (-22) [ 167.307665][ T8601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.783'. SYZFAIL: posix_spawn failed (errno 5: Input/output error) [ 167.609466][ T7576] usb 7-1: device descriptor read/64, error -71 [ 167.849370][ T7576] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 167.901900][ T71] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.984504][ T71] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.059159][ T71] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.165855][ T71] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.261117][ T71] bridge_slave_1: left allmulticast mode [ 168.263058][ T71] bridge_slave_1: left promiscuous mode [ 168.264996][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.271335][ T71] bridge_slave_0: left allmulticast mode [ 168.273213][ T71] bridge_slave_0: left promiscuous mode [ 168.275177][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.402873][ T5355] Bluetooth: hci4: command tx timeout [ 168.581227][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.586688][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.589585][ T30] net_ratelimit: 4 callbacks suppressed [ 168.589595][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.596917][ T71] bond0 (unregistering): Released all slaves [ 168.829152][ T71] hsr_slave_0: left promiscuous mode [ 168.831534][ T71] hsr_slave_1: left promiscuous mode [ 168.833760][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.836239][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.867534][ T71] veth1_macvtap: left promiscuous mode [ 168.869651][ T71] veth0_macvtap: left promiscuous mode [ 168.871523][ T71] veth1_vlan: left promiscuous mode [ 168.873228][ T71] veth0_vlan: left promiscuous mode [ 169.494213][ T71] team0 (unregistering): Port device team_slave_1 removed [ 169.583503][ T71] team0 (unregistering): Port device team_slave_0 removed [ 169.598812][ T831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.692567][ T7576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.505759][ T71] IPVS: stop unused estimator thread 0... [ 170.577573][ T71] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.680675][ T71] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.780809][ T71] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.884623][ T71] bond0: (slave netdevsim0): Releasing backup interface [ 170.887954][ T71] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 170.890934][ T71] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 170.896212][ T71] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.040557][ T71] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.119239][ T71] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.212971][ T71] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.272096][ T71] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.360565][ T71] vlan2: left promiscuous mode [ 171.361949][ T71] bond0: left promiscuous mode [ 171.363203][ T71] bond_slave_0: left promiscuous mode [ 171.364696][ T71] bond_slave_1: left promiscuous mode [ 171.366638][ T71] bridge0: port 3(vlan2) entered disabled state [ 171.369542][ T71] bridge_slave_1: left allmulticast mode [ 171.371033][ T71] bridge_slave_1: left promiscuous mode [ 171.372576][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.375361][ T71] bridge_slave_0: left allmulticast mode [ 171.376939][ T71] bridge_slave_0: left promiscuous mode [ 171.378799][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.385012][ T71] bridge_slave_1: left allmulticast mode [ 171.386493][ T71] bridge_slave_1: left promiscuous mode [ 171.388709][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.391903][ T71] bridge_slave_0: left allmulticast mode [ 171.393438][ T71] bridge_slave_0: left promiscuous mode [ 171.394937][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.436958][ T71] bond0: left allmulticast mode [ 171.438494][ T71] bond_slave_0: left allmulticast mode [ 171.439929][ T71] bond_slave_1: left allmulticast mode [ 171.920240][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.925896][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.932932][ T71] bond0 (unregistering): Released all slaves [ 172.028697][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.034312][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.039687][ T71] bond0 (unregistering): Released all slaves [ 172.139144][ T71] tipc: Left network mode [ 172.166825][ T71] IPVS: stopping master sync thread 7770 ... [ 172.514045][ T71] hsr_slave_0: left promiscuous mode [ 172.518447][ T71] hsr_slave_1: left promiscuous mode [ 172.521085][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.523738][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.526182][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.528589][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.534229][ T71] hsr_slave_0: left promiscuous mode [ 172.537377][ T71] hsr_slave_1: left promiscuous mode [ 172.539939][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.541861][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.544100][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.546259][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.581698][ T71] veth1_macvtap: left promiscuous mode [ 172.583276][ T71] veth0_macvtap: left promiscuous mode [ 172.585852][ T71] veth1_macvtap: left promiscuous mode [ 172.587557][ T71] veth0_macvtap: left promiscuous mode [ 172.589108][ T71] veth1_vlan: left promiscuous mode [ 172.590615][ T71] veth0_vlan: left promiscuous mode [ 174.490165][ T71] team0 (unregistering): Port device team_slave_1 removed [ 174.569953][ T71] team0 (unregistering): Port device team_slave_0 removed [ 175.717734][ T71] IPVS: stop unused estimator thread 0... VM DIAGNOSIS: 05:45:23 Registers: info registers vcpu 0 CPU#0 RAX=000000000067401d RBX=0000000000000000 RCX=ffffffff8b139ef9 RDX=0000000000000000 RSI=ffffffff8b4cc960 RDI=ffffffff8bb12d60 RBP=fffffbfff1b52af8 RSP=ffffffff8da07e20 R8 =0000000000000001 R9 =ffffed1005687025 R10=ffff88802b43812b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8da957c0 R14=ffffffff901ce608 R15=0000000000000000 RIP=ffffffff8b13b2df RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000570614ac CR3=00000000119f6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000007000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000895981 RBX=0000000000000001 RCX=ffffffff8b139ef9 RDX=0000000000000000 RSI=ffffffff8b4cc960 RDI=ffffffff8bb12d60 RBP=ffffed10036eb910 RSP=ffffc90000477e08 R8 =0000000000000001 R9 =ffffed10056a7025 R10=ffff88802b53812b R11=0000000000000000 R12=0000000000000001 R13=ffff88801b75c880 R14=ffffffff901ce608 R15=0000000000000000 RIP=ffffffff8b13b2df RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000570614ac CR3=00000000119f6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000c400000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000003b790d RBX=0000000000000002 RCX=ffffffff8b139ef9 RDX=0000000000000000 RSI=ffffffff8b4cc960 RDI=ffffffff8bb12d60 RBP=ffffed100376c000 RSP=ffffc90000487e08 R8 =0000000000000001 R9 =ffffed10056c7025 R10=ffff88802b63812b R11=0000000000000000 R12=0000000000000002 R13=ffff88801bb60000 R14=ffffffff901ce608 R15=0000000000000000 RIP=ffffffff8b13b2df RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73f5008 CR3=0000000026758000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000c400000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000003 RBX=0000000000000001 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000001 RBP=0000000000000000 RSP=ffffc900032e7850 R8 =ffff888023658ae0 R9 =fffffbfff2d32188 R10=ffffffff96990c47 R11=0000000000000002 R12=ffff888023658b01 R13=ffff888023658b58 R14=dffffc0000000000 R15=ffff888023658000 RIP=ffffffff8169f6bf RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f3e618cfd00 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055ee45990000 CR3=0000000000c12000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000ffff3f01 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=905c7fd2905c7fd2 905c7fd2905c7fd2 905c7fd2905c7fd2 905c7fd2905c7fd2 905c7fd2905c7fd2 905c7fd2905c7fd2 905c7fd2905c7fd2 905c7fd2905c7fd2 ZMM22=9cfad0749cfad074 9cfad0749cfad074 9cfad0749cfad074 9cfad0749cfad074 9cfad0749cfad074 9cfad0749cfad074 9cfad0749cfad074 9cfad0749cfad074 ZMM23=17fff79417fff794 17fff79417fff794 17fff79417fff794 17fff79417fff794 17fff79417fff794 17fff79417fff794 17fff79417fff794 17fff79417fff794 ZMM24=b1188272b1188272 b1188272b1188272 b1188272b1188272 b1188272b1188272 b1188272b1188272 b1188272b1188272 b1188272b1188272 b1188272b1188272 ZMM25=8e8359fa8e8359fa 8e8359fa8e8359fa 8e8359fa8e8359fa 8e8359fa8e8359fa 8e8359fa8e8359fa 8e8359fa8e8359fa 8e8359fa8e8359fa 8e8359fa8e8359fa ZMM26=675e3fea675e3fea 675e3fea675e3fea 675e3fea675e3fea 675e3fea675e3fea 675e3fea675e3fea 675e3fea675e3fea 675e3fea675e3fea 675e3fea675e3fea ZMM27=0ed692060ed69206 0ed692060ed69206 0ed692060ed69206 0ed692060ed69206 0ed692060ed69206 0ed692060ed69206 0ed692060ed69206 0ed692060ed69206 ZMM28=000001400000013f 0000013e0000013d 0000013c0000013b 0000013a00000139 0000013800000137 0000013600000135 0000013400000133 0000013200000131 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=6f0900006f090000 6f0900006f090000 6f0900006f090000 6f0900006f090000 6f0900006f090000 6f0900006f090000 6f0900006f090000 6f0900006f090000