last executing test programs: 16.321572943s ago: executing program 2 (id=489): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101302, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x26802, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'dvmrp1\x00', 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = getpgid(0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = dup(r3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r8, 0x0, &(0x7f0000000200)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0x7e5, 0x0, 0x0, 0x1000, 0x6, r4}}}, &(0x7f0000000300)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000480)={0x0, 0xa5f8, 0x1000, 0x80, 0x389, 0x0, r11}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x53b2, 0x2000, 0x2, 0x2033f, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5d64, 0x2, 0x3, 0x144, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x2000, 0x100}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6d1f, 0x2000, 0x1, 0xdfffffff, 0x0, r7}}], 0x1, 0x0, 0x0) 14.545325034s ago: executing program 2 (id=495): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r2, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad7, 0x10000, 0x3}, &(0x7f0000000040), &(0x7f0000000280), &(0x7f0000000000)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)={0xfffffeff}) close(r5) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, 0x0, 0x0) getsockname$packet(r7, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000", @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32, @ANYBLOB="dc196c174c0f622e019df2d7fcc0c6e67e55dd353e5b54dbb5c89c1e1f4a22120475c8cdd9a545554eab5c90c9583f399da9afac43bb31"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014", 0x23}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 13.766453268s ago: executing program 3 (id=496): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x20341, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) r1 = dup(0xffffffffffffffff) read$FUSE(r1, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xc100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000000145802, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x103381) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$cont(0x21, r4, 0x8, 0xffff) r5 = dup(r3) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000480)={{0x6, 0x6, 0x4a7, 0x6, 'syz1\x00', 0x6}, 0x5, 0x3, 0xb4, r4, 0x5, 0x3, 'syz1\x00', &(0x7f0000000180)=['\x00z\x05c\xeap\xeb\x029\xf4\xfd\tocQ;\xfa\xf4\x19\xe2\xdd@NTg\xe8\xd1\xa4\xcf<*\xd8\x98Q>\x97Q*7\xaa\xb9\xee\x95\x96\xbf\f\"\xbdE%\xed\xe6\xb8\x05\x80\x9d\xb2\x87n\xd5\xd8\x10\xcc<\xb1\x19\xce\xe0;\x85\x06\xa9(\xa1\a\xd1\xe3\r\xaa\f\xca#\x93+\xd7~\x9fI\x82h\xcb\xd6\x9a\xd3\x12\xfd\xfb/@\xd3\b\xdf\xc0\xe4ry\x81\xfdX\xa2\xa4\xa3})\x7f\xf3\'\xd3PeY\xd8Zp', '^\x00', '-\x00', ':]))', '\x00\x00\x01\x00\x00\x00\x00\x00\x00'], 0x8d}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r5, 0x0, 0xffffffdb) timer_create(0x0, 0x0, 0x0) mprotect(&(0x7f000088f000/0x3000)=nil, 0x3000, 0x0) setpriority(0x2, 0x0, 0x8) socket$pppoe(0x18, 0x1, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 13.764431762s ago: executing program 0 (id=505): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/64, 0x40}], 0x1, 0x9, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) write$binfmt_register(r1, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioprio_set$pid(0x1, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x0, @scatter={0x1, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xcc}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) sendfile(r5, r5, 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0xd8, 0x11, 0x148, 0x1b4, 0x0, 0x1b4, 0x2a8, 0x2a8, 0x1b4, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xff000000, 'wg1\x00', 'dvmrp0\x00', {}, {0xff}, 0x67, 0x3, 0x2}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1f, 0x9, 0x8, 0x8, '\x00', 'syz1\x00', {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xb8, 0xdc, 0x0, {}, [@common=@ttl={{0x24}, {0x2, 0x40}}, @inet=@rpfilter={{0x24}, {0x18}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2a4) close(0xffffffffffffffff) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x2, 0x3) ioctl$XFS_IOC_SCRUBV_METADATA(0xffffffffffffffff, 0xc0285840, &(0x7f0000000380)={0x7fffffff, 0xb4, 0xfffffffc, 0x0, 0xda, 0x3, 0x0, &(0x7f0000000300)=[{0x15, 0xfe, 0xac83}, {0x9, 0x101, 0x2}, {0x15, 0x0, 0xfffc}]}) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000002680)={[0x0, &(0x7f00000004c0)='{)\x00', &(0x7f0000000480)='cgroup.subtree_control\x00', &(0x7f0000000500)='-]\x00']}) 13.761544174s ago: executing program 1 (id=497): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/64, 0x40}], 0x1, 0x9, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) write$binfmt_register(r1, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioprio_set$pid(0x1, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x0, @scatter={0x1, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xcc}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) sendfile(r5, r5, 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0xd8, 0x11, 0x148, 0x1b4, 0x0, 0x1b4, 0x2a8, 0x2a8, 0x1b4, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xff000000, 'wg1\x00', 'dvmrp0\x00', {}, {0xff}, 0x67, 0x3, 0x2}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1f, 0x9, 0x8, 0x8, '\x00', 'syz1\x00', {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xb8, 0xdc, 0x0, {}, [@common=@ttl={{0x24}, {0x2, 0x40}}, @inet=@rpfilter={{0x24}, {0x18}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2a4) close(0xffffffffffffffff) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x2, 0x3) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) 13.499076425s ago: executing program 2 (id=498): memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x404c03, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f62726964676500140001007767"], 0xa8}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c697000140007800800064000000200080008"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 12.829305963s ago: executing program 0 (id=499): memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x404c03, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f62726964676500140001007767"], 0xa8}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c697000140007800800064000000200080008"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 12.567954461s ago: executing program 1 (id=500): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x5dd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socketpair(0x1e, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r3) r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f0000000040)=0x200) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) write$dsp(r8, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xe, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @mcast1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24045091}, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="74000000069243279f92445cab5c9f940b4e32717e9549044fd98eb1ac224c8d9026595abb5802a4f16c4daad6bbb55363339cf55d1335", @ANYRES16=r2, @ANYBLOB="000829bd7000ffdbdf2501000000080002000100000014000c0020010000000000000000000000000001080008000400000008000700", @ANYRES32=r4, @ANYBLOB="0c0003000400000000000000080002000100000008000500ffffffff08000100", @ANYRES32=r6, @ANYBLOB="080004006401010005000d0002000000"], 0x74}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4011) 12.407028383s ago: executing program 3 (id=501): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/64, 0x40}], 0x1, 0x9, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) write$binfmt_register(r1, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioprio_set$pid(0x1, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x0, @scatter={0x1, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xcc}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) sendfile(r5, r5, 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0xd8, 0x11, 0x148, 0x1b4, 0x0, 0x1b4, 0x2a8, 0x2a8, 0x1b4, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xff000000, 'wg1\x00', 'dvmrp0\x00', {}, {0xff}, 0x67, 0x3, 0x2}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1f, 0x9, 0x8, 0x8, '\x00', 'syz1\x00', {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xb8, 0xdc, 0x0, {}, [@common=@ttl={{0x24}, {0x2, 0x40}}, @inet=@rpfilter={{0x24}, {0x18}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2a4) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r7) ioctl$XFS_IOC_SCRUBV_METADATA(0xffffffffffffffff, 0xc0285840, &(0x7f0000000380)={0x7fffffff, 0xb4, 0xfffffffc, 0x0, 0xda, 0x3, 0x0, &(0x7f0000000300)=[{0x15, 0xfe, 0xac83}, {0x9, 0x101, 0x2}, {0x15, 0x0, 0xfffc}]}) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000002680)={[0x0, &(0x7f00000004c0)='{)\x00', &(0x7f0000000480)='cgroup.subtree_control\x00', &(0x7f0000000500)='-]\x00']}) 12.391843332s ago: executing program 2 (id=503): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5, 0xa90}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x8001}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x1}]}}}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x800) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) r5 = dup3(r3, r2, 0x0) recvmmsg(r5, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) read$FUSE(r5, 0x0, 0x0) r6 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r7, &(0x7f0000000580)='7', 0x1) write$char_usb(r7, &(0x7f0000000bc0)="be", 0x1) syz_usb_disconnect(r6) unshare(0x62040200) add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) 1.535076136s ago: executing program 0 (id=504): openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) getrlimit(0xc, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x10, 0x4, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$audio1(0xffffff9c, 0x0, 0x400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)={0x394, r4, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x364, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x2e0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x298, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x4}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x7}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x394}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r5, r5, 0x0, 0x40008) 1.534373777s ago: executing program 3 (id=506): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r5) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000680)={r8, 0x1ff, 0x0, 0x12000, 0x3, [0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x3], [0x0, 0x1001000, 0x800001, 0x4], [0x0, 0x401, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r9, 0x0, 0x0, r10], [0x2b8]}) close(0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x20000080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000047, 0x3f00) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) accept4(r11, 0x0, 0x0, 0x80800) 1.533825889s ago: executing program 1 (id=507): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000002e00)='ns/cgroup\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r5, 0xc0945662, &(0x7f0000000040)={0xfffffff8, 0x0, '\x00', {0x0, @bt={0x6, 0x9f, 0x0, 0x2, 0x7, 0x8, 0x6, 0x11, 0x1, 0x5, 0x6, 0x983, 0x0, 0x20010, 0x1c, 0x21, {0x5, 0x3}, 0x8, 0x5}}}) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0x7000000) socket$nl_sock_diag(0x10, 0x3, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000004c0)={'syz0\x00', {0x87, 0x3, 0x1, 0x9}, 0xb, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x3, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x4, 0x5, 0x10004, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x0, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x4, 0x80, 0x400, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0xa, 0x7, 0x8, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0xb, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x8, 0x10d, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x1, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0xfffffffd, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x200, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xa9, 0x7, 0x49, 0x6, 0x4, 0x5, 0xa3, 0x40003, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x4, 0xd21e, 0x9, 0x12, 0x0, 0x2, 0xfff, 0x8, 0x800100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x2, 0xffd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x9, 0x10001, 0x8000001, 0x10001, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x7, 0xfffffff3, 0x497, 0x4, 0x1, 0x2, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x4, 0x9, 0x1ff, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0x9, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400400, 0x8, 0x28, 0x8, 0x7, 0x9, 0x2, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000980)={0x78, r1, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x2000000, 0x5d}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4e, 0xe, {{{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @random="ec03f3b85ad3", {}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0xffffffffffffffa1, @random=0x4, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6, {0x4a, 0x1e, 0x5, 0x81}}, @val={0x6, 0x2, 0x8343}, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0xf, 0xf4, 0x22, 0x4}}}}]]}, 0x78}, 0x1, 0x0, 0x0, 0x8810}, 0x0) 1.511470172s ago: executing program 0 (id=508): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r4 = epoll_create1(0x80000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000040)={0x4, r5, 0x1}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000140)={0xa000201e}) write$P9_RGETLOCK(r3, &(0x7f00000000c0)=ANY=[], 0xffffff6a) r8 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffc000/0x3000)=nil) timer_create(0x2, &(0x7f0000000040)={0x0, 0x21, 0x2}, &(0x7f0000000000)=0x0) timer_settime(r9, 0x1, 0x0, 0x0) shmctl$SHM_LOCK(r8, 0xb) ioprio_set$pid(0x1, 0x0, 0x2004) ioprio_get$pid(0x1, 0x0) shmctl$SHM_LOCK(r8, 0xb) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000880}, 0x4010) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt(r10, 0x4000, 0xffffffff, 0x0, &(0x7f0000000100)) 1.473771304s ago: executing program 0 (id=509): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/64, 0x40}], 0x1, 0x9, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) write$binfmt_register(r1, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioprio_set$pid(0x1, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x0, @scatter={0x1, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xcc}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) sendfile(r5, r5, 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0xd8, 0x11, 0x148, 0x1b4, 0x0, 0x1b4, 0x2a8, 0x2a8, 0x1b4, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xff000000, 'wg1\x00', 'dvmrp0\x00', {}, {0xff}, 0x67, 0x3, 0x2}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1f, 0x9, 0x8, 0x8, '\x00', 'syz1\x00', {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xb8, 0xdc, 0x0, {}, [@common=@ttl={{0x24}, {0x2, 0x40}}, @inet=@rpfilter={{0x24}, {0x18}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2a4) close(0xffffffffffffffff) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x2, 0x3) ioctl$XFS_IOC_SCRUBV_METADATA(0xffffffffffffffff, 0xc0285840, &(0x7f0000000380)={0x7fffffff, 0xb4, 0xfffffffc, 0x0, 0xda, 0x3, 0x0, &(0x7f0000000300)=[{0x15, 0xfe, 0xac83}, {0x9, 0x101, 0x2}, {0x15, 0x0, 0xfffc}]}) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000002680)={[0x0, &(0x7f00000004c0)='{)\x00', &(0x7f0000000480)='cgroup.subtree_control\x00', &(0x7f0000000500)='-]\x00']}) 1.472977916s ago: executing program 1 (id=510): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r2, 0xc008561c, 0x0) writev(r1, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) openat$ptp1(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) 1.472514883s ago: executing program 3 (id=511): memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x404c03, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f62726964676500140001007767"], 0xa8}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c697000140007800800064000000200080008"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc00000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1.471515235s ago: executing program 2 (id=512): memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x404c03, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f62726964676500140001007767"], 0xa8}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c697000140007800800064000000200080008"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1.470461438s ago: executing program 0 (id=513): socket$nl_generic(0x10, 0x3, 0x10) r0 = fanotify_init(0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) brk(0xb7) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x9, 0x6, 0x4d, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", '\x00\x00`\x00', '\x00', ["2408000ce61c0000c6cb00", "bed0f3d6ce7a5f7389827f04", "d409343c60abd64f2fdc9ddf", "fc43009f621000"]}) r1 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x4, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x0, 0xfc, 0x0, 0x10}) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000140)={0x8, 0x800, 0xf, 0x0, 0xfe1c, 0x6, "72aba977db089b65fdfdc5bd97abc350", 0x78, 0x3, 0xa7, 0x7, 0xc, 0x7, 0x29}) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(0x0, 0x2, 0xc8d03) r2 = socket(0x1d, 0x2, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r4, 0x3, {0x0, 0x1}}, 0x18) sendmmsg$inet(r2, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000080)="d171e4c4c55f7973", 0x8}], 0x1}}], 0x1, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[], 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x5a) sendto$inet_nvme_of_msg(r2, &(0x7f0000000680)={@cmd={{0x4, 0xd, 0x48, 0xa}, {@auth_common={0x7f, 0x80, 0xbe0, 0x6, "e9cf4b6db6f5510d94b6f59c0a4bd46abd4dc0", @anon_struct={0x3, 0x7e}, 0x7, 0xe, 0x2, 0x3, 0xb, "9ef322afa195add877c93c24d19dcae4"}}}, @void}, 0x80, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.470232894s ago: executing program 1 (id=514): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001f", @ANYRES64=r3], 0x38}}, 0x0) syz_usbip_server_init(0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x3f, 0x1}) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) syz_clone(0x23100000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.470052815s ago: executing program 2 (id=515): syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="0600cd00000000006c00"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) setsockopt(0xffffffffffffffff, 0x108, 0x1, &(0x7f00000001c0)="17c20000000040000000000000", 0xd) r3 = userfaultfd(0x801) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x0, 0x2}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xea}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) getsockname$l2tp(r5, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f00000000c0)=0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1.469938392s ago: executing program 3 (id=516): syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs_stats\x00') r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x3, 0x0, &(0x7f0000001080)) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x589b83, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000380)=0x2, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./cgroup\x00', &(0x7f0000000200)='nilfs2\x00', 0x204450, 0x0) syz_io_uring_setup(0x49d, &(0x7f0000000100)={0x0, 0x79af, 0x2, 0x8000, 0x400246}, 0x0, &(0x7f00000006c0), &(0x7f0000000000)) io_getevents(0x0, 0xffffffff, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, 0x0, 0x0) gettid() r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f0000000100)=[{0x8, 0x9, 0x1, 0x0, @time={0x5, 0x3}, {0x89, 0xb8}, {0x4, 0x6}, @connect={{0x6, 0xff}, {0x1, 0x6}}}], 0xfe5d) 444.805244ms ago: executing program 3 (id=517): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/64, 0x40}], 0x1, 0x9, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) write$binfmt_register(r1, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioprio_set$pid(0x1, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x0, @scatter={0x1, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xcc}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) sendfile(r5, r5, 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0xd8, 0x11, 0x148, 0x1b4, 0x0, 0x1b4, 0x2a8, 0x2a8, 0x1b4, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xff000000, 'wg1\x00', 'dvmrp0\x00', {}, {0xff}, 0x67, 0x3, 0x2}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1f, 0x9, 0x8, 0x8, '\x00', 'syz1\x00', {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xb8, 0xdc, 0x0, {}, [@common=@ttl={{0x24}, {0x2, 0x40}}, @inet=@rpfilter={{0x24}, {0x18}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2a4) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x2, 0x3) ioctl$XFS_IOC_SCRUBV_METADATA(0xffffffffffffffff, 0xc0285840, &(0x7f0000000380)={0x7fffffff, 0xb4, 0xfffffffc, 0x0, 0xda, 0x3, 0x0, &(0x7f0000000300)=[{0x15, 0xfe, 0xac83}, {0x9, 0x101, 0x2}, {0x15, 0x0, 0xfffc}]}) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000002680)={[0x0, &(0x7f00000004c0)='{)\x00', &(0x7f0000000480)='cgroup.subtree_control\x00', &(0x7f0000000500)='-]\x00']}) 0s ago: executing program 1 (id=518): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b324c078b089b3438076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b32310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153bdf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c643c, &(0x7f0000000300)) open$dir(&(0x7f0000000300)='./file0\x00', 0x20800, 0xf8) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x23, 0x0, 0x0) bind$inet(r3, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r3, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r3) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000000)={0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x200441d0}, 0x4008094) kernel console output (not intermixed with test programs): st mode [ 46.995184][ T5752] bridge_slave_0: entered promiscuous mode [ 47.023269][ T5749] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.027029][ T5749] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.030412][ T5749] bridge_slave_0: entered allmulticast mode [ 47.034052][ T5749] bridge_slave_0: entered promiscuous mode [ 47.049045][ T5752] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.051511][ T5752] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.053977][ T5752] bridge_slave_1: entered allmulticast mode [ 47.057292][ T5752] bridge_slave_1: entered promiscuous mode [ 47.068675][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.071457][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.074263][ T5741] bridge_slave_0: entered allmulticast mode [ 47.077718][ T5741] bridge_slave_0: entered promiscuous mode [ 47.080668][ T5749] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.083461][ T5749] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.085754][ T5749] bridge_slave_1: entered allmulticast mode [ 47.089121][ T5749] bridge_slave_1: entered promiscuous mode [ 47.104391][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.107359][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.109713][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.111985][ T5741] bridge_slave_1: entered allmulticast mode [ 47.114592][ T5741] bridge_slave_1: entered promiscuous mode [ 47.128605][ T5752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.133652][ T5752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.138978][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.192951][ T5752] team0: Port device team_slave_0 added [ 47.196546][ T5749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.201666][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.205985][ T5742] team0: Port device team_slave_0 added [ 47.209545][ T5752] team0: Port device team_slave_1 added [ 47.212919][ T5749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.217361][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.221744][ T5742] team0: Port device team_slave_1 added [ 47.278418][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.281202][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.294861][ T5752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.322695][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.326387][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.337507][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.342804][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.345250][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.353449][ T5752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.358345][ T5749] team0: Port device team_slave_0 added [ 47.363038][ T5741] team0: Port device team_slave_0 added [ 47.365529][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.369862][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.377781][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.391897][ T5749] team0: Port device team_slave_1 added [ 47.395310][ T5741] team0: Port device team_slave_1 added [ 47.449971][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.452085][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.459500][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.463942][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.466492][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.476579][ T5749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.485210][ T5742] hsr_slave_0: entered promiscuous mode [ 47.487651][ T5742] hsr_slave_1: entered promiscuous mode [ 47.493697][ T5752] hsr_slave_0: entered promiscuous mode [ 47.496893][ T5752] hsr_slave_1: entered promiscuous mode [ 47.499215][ T5752] debugfs: 'hsr0' already exists in 'hsr' [ 47.501104][ T5752] Cannot create hsr debugfs directory [ 47.503545][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.505685][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.513418][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.517705][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.520541][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.530786][ T5749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.641598][ T5749] hsr_slave_0: entered promiscuous mode [ 47.643751][ T5749] hsr_slave_1: entered promiscuous mode [ 47.645765][ T5749] debugfs: 'hsr0' already exists in 'hsr' [ 47.647544][ T5749] Cannot create hsr debugfs directory [ 47.654158][ T5741] hsr_slave_0: entered promiscuous mode [ 47.657255][ T5741] hsr_slave_1: entered promiscuous mode [ 47.660244][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 47.662483][ T5741] Cannot create hsr debugfs directory [ 47.960335][ T5742] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.969908][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.972735][ T5742] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.979723][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.986061][ T5742] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.992132][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.000966][ T5742] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.009296][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.037287][ T5752] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.044980][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.052414][ T5752] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.058137][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.061532][ T5752] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.068887][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.076423][ T5752] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.082029][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.131119][ T5749] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.136615][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.141009][ T5749] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.145715][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.149660][ T5749] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.154446][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.159396][ T5749] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.163558][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.214212][ T5741] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.218669][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.223839][ T5741] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.227707][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.235181][ T5741] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.242465][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.245576][ T5741] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.251858][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.269454][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.306248][ T5752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.311037][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.328794][ T64] Bluetooth: hci0: command tx timeout [ 48.335185][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.338117][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.345755][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.348748][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.362257][ T5752] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.383341][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.385656][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.395231][ T5749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.401769][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.404055][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.408342][ T64] Bluetooth: hci2: command tx timeout [ 48.408383][ T5747] Bluetooth: hci1: command tx timeout [ 48.408404][ T5756] Bluetooth: hci3: command tx timeout [ 48.433242][ T5749] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.440191][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.442546][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.452313][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.467934][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.470036][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.486602][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.495759][ T5752] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.505702][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.507904][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.528217][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.531151][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.620120][ T5741] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.839144][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.843744][ T5752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.889564][ T5749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.904200][ T5752] veth0_vlan: entered promiscuous mode [ 48.916647][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.920098][ T5742] veth0_vlan: entered promiscuous mode [ 48.933403][ T5742] veth1_vlan: entered promiscuous mode [ 48.938224][ T5752] veth1_vlan: entered promiscuous mode [ 48.983051][ T5742] veth0_macvtap: entered promiscuous mode [ 48.994588][ T5749] veth0_vlan: entered promiscuous mode [ 49.000592][ T5741] veth0_vlan: entered promiscuous mode [ 49.006929][ T5742] veth1_macvtap: entered promiscuous mode [ 49.016129][ T5752] veth0_macvtap: entered promiscuous mode [ 49.021795][ T5741] veth1_vlan: entered promiscuous mode [ 49.027068][ T5752] veth1_macvtap: entered promiscuous mode [ 49.030753][ T5749] veth1_vlan: entered promiscuous mode [ 49.039971][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.054762][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.067284][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.070601][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.079471][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.082891][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.087866][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.099126][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.112743][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.119833][ T5749] veth0_macvtap: entered promiscuous mode [ 49.124290][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.127062][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.132371][ T5741] veth0_macvtap: entered promiscuous mode [ 49.141374][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.155485][ T5741] veth1_macvtap: entered promiscuous mode [ 49.159257][ T5749] veth1_macvtap: entered promiscuous mode [ 49.204168][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.207056][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.207357][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.221459][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.225418][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.225473][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.230239][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.236921][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.249491][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.253127][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.267256][ T5836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.271369][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.277578][ T1277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.278437][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.279117][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.279132][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.280682][ T1277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.284172][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.302673][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.305533][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.374741][ T1277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.378095][ T1277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.380703][ T5752] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.401022][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.401680][ T5752] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.403589][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.412298][ T5742] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.416489][ T5752] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.420152][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.423014][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.430398][ T5742] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.437619][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.440334][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.616818][ T5900] gfs2: error -5 reading superblock [ 49.701811][ T5903] Zero length message leads to an empty skb [ 49.965642][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.969170][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.286218][ T5907] program syz.1.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 50.408826][ T5747] Bluetooth: hci0: command tx timeout [ 50.488015][ T5747] Bluetooth: hci3: command tx timeout [ 50.490307][ T64] Bluetooth: hci1: command tx timeout [ 50.498203][ T5747] Bluetooth: hci2: command tx timeout [ 50.599227][ T5906] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 50.635418][ T5906] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 50.638139][ T5906] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 50.640621][ T5906] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 50.643359][ T5906] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 50.652080][ T5906] pci 0000:00:01.0: Adding to iommu group 1 [ 50.663015][ T5906] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 50.665657][ T5906] pci 0000:00:01.0: vgaarb: bridge control possible [ 50.668097][ T5906] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 50.678961][ T5906] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 50.686114][ T5906] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 50.695076][ T5906] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 50.706307][ T5906] [drm] Found bochs VGA, ID 0xb0c5. [ 50.708644][ T5906] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 50.718798][ T5906] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 50.774728][ T5906] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 50.838252][ T5916] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.841235][ T5916] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.930184][ T5923] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9'. [ 50.955859][ T5921] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 50.971481][ T5923] team0 (unregistering): Port device team_slave_0 removed [ 50.983265][ T5923] team0 (unregistering): Port device team_slave_1 removed [ 51.061607][ T5921] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 51.082605][ T5921] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 51.136961][ T5921] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 51.145104][ T5921] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 51.178322][ T5921] pci 0000:00:01.0: Adding to iommu group 1 [ 51.208471][ T5921] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 51.210663][ T5921] pci 0000:00:01.0: vgaarb: bridge control possible [ 51.212710][ T5921] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 51.263107][ T5921] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 51.271107][ T5921] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 51.281300][ T5921] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 51.315363][ T5921] [drm] Found bochs VGA, ID 0xb0c5. [ 51.326714][ T5921] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 51.344878][ T5921] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 51.410514][ T5934] ======================================================= [ 51.410514][ T5934] WARNING: The mand mount option has been deprecated and [ 51.410514][ T5934] and is ignored by this kernel. Remove the mand [ 51.410514][ T5934] option from the mount to silence this warning. [ 51.410514][ T5934] ======================================================= [ 51.751899][ T5921] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 52.498841][ T5747] Bluetooth: hci0: command tx timeout [ 52.579231][ T5747] Bluetooth: hci2: command tx timeout [ 52.581902][ T5747] Bluetooth: hci3: command tx timeout [ 52.584578][ T5747] Bluetooth: hci1: command tx timeout [ 53.306367][ T5947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 53.411291][ T5950] gfs2: error -5 reading superblock [ 53.436918][ T5953] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 54.476926][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.480898][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.558144][ T5963] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 54.572839][ T64] Bluetooth: hci0: command tx timeout [ 54.583335][ T5963] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 54.586416][ T5963] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 54.589822][ T5963] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 54.592539][ T5963] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 54.605772][ T5963] pci 0000:00:01.0: Adding to iommu group 1 [ 54.615646][ T5963] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 54.617856][ T5963] pci 0000:00:01.0: vgaarb: bridge control possible [ 54.620164][ T5963] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 54.636045][ T5963] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 54.638914][ T5963] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 54.642485][ T5963] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 54.653893][ T5963] [drm] Found bochs VGA, ID 0xb0c5. [ 54.655824][ T5963] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 54.657620][ T64] Bluetooth: hci1: command tx timeout [ 54.657970][ T5747] Bluetooth: hci3: command tx timeout [ 54.657993][ T5747] Bluetooth: hci2: command tx timeout [ 54.665632][ T5963] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 54.701612][ T5962] program syz.2.17 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.733106][ T5963] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 54.982976][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.986494][ T5974] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.572078][ T5971] process 'syz.3.19' launched '/dev/fd/10' with NULL argv: empty string added [ 56.118194][ T5971] bond1 (unregistering): Released all slaves [ 56.249886][ T5977] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 56.278010][ T5977] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 56.280927][ T5977] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 56.283792][ T5977] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 56.292826][ T5977] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 56.310048][ T5977] pci 0000:00:01.0: Adding to iommu group 1 [ 56.318053][ T5977] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 56.320210][ T5977] pci 0000:00:01.0: vgaarb: bridge control possible [ 56.322268][ T5977] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 56.338067][ T5977] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 56.341339][ T5977] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 56.345583][ T5977] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 56.439679][ T5977] [drm] Found bochs VGA, ID 0xb0c5. [ 56.441522][ T5977] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 56.448443][ T5977] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 57.559246][ T6004] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 58.757574][ T6014] gfs2: error -5 reading superblock [ 59.905147][ T6028] netlink: 20 bytes leftover after parsing attributes in process `syz.2.31'. [ 59.921809][ T6028] team0 (unregistering): Port device team_slave_0 removed [ 59.959220][ T6028] team0 (unregistering): Port device team_slave_1 removed [ 60.023820][ T6033] gfs2: error -5 reading superblock [ 60.033872][ T6029] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 60.056272][ T6029] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 60.063632][ T6029] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 60.067715][ T6029] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 60.070319][ T6029] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 60.082253][ T6029] pci 0000:00:01.0: Adding to iommu group 1 [ 60.084595][ T6019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 60.089193][ T6029] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 60.091406][ T6029] pci 0000:00:01.0: vgaarb: bridge control possible [ 60.093426][ T6029] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 60.102178][ T6029] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 60.104895][ T6029] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 60.108871][ T6029] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 60.117422][ T6029] [drm] Found bochs VGA, ID 0xb0c5. [ 60.119198][ T6029] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 60.139426][ T6029] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 60.196292][ T6029] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 60.297370][ T6038] netlink: 16 bytes leftover after parsing attributes in process `syz.2.33'. [ 60.661143][ T6043] bond1 (unregistering): Released all slaves [ 61.132311][ T6051] gfs2: error -5 reading superblock [ 61.890789][ T6058] netlink: 20 bytes leftover after parsing attributes in process `syz.0.39'. [ 61.912214][ T6058] team0 (unregistering): Port device team_slave_0 removed [ 61.916638][ T6058] team0 (unregistering): Port device team_slave_1 removed [ 62.146492][ T6055] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 62.149381][ T6055] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 62.188836][ T6055] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 62.201980][ T6055] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 62.203867][ T6055] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 62.206939][ T6055] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 62.212078][ T6055] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 62.214023][ T6055] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 62.217190][ T6055] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 62.223348][ T6055] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 62.225255][ T6055] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 62.229554][ T6055] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 62.755337][ T6064] netlink: 20 bytes leftover after parsing attributes in process `syz.3.42'. [ 62.762759][ T6069] netlink: 20 bytes leftover after parsing attributes in process `syz.1.48'. [ 62.795041][ T6069] team0 (unregistering): Port device team_slave_0 removed [ 62.830629][ T6069] team0 (unregistering): Port device team_slave_1 removed [ 62.864889][ T6074] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 62.887177][ T6074] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 62.891895][ T6074] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 62.894909][ T6074] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 62.902825][ T6074] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 62.934614][ T6074] pci 0000:00:01.0: Adding to iommu group 1 [ 62.953510][ T6074] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 62.956282][ T6074] pci 0000:00:01.0: vgaarb: bridge control possible [ 62.958888][ T6074] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 62.999215][ T6074] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 63.002543][ T6074] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 63.007181][ T6074] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 63.021838][ T6074] [drm] Found bochs VGA, ID 0xb0c5. [ 63.023957][ T6074] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 63.062357][ T6074] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 63.157287][ T6074] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 63.367735][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 63.374852][ T6080] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 64.260310][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 64.262384][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 64.265355][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 64.587783][ T6087] netlink: 20 bytes leftover after parsing attributes in process `syz.1.45'. [ 64.646478][ T6089] gfs2: error -5 reading superblock [ 65.240340][ T6095] netlink: 16 bytes leftover after parsing attributes in process `syz.2.46'. [ 65.448354][ T5756] Bluetooth: hci0: command 0x0c1a tx timeout [ 65.974356][ T6108] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 66.032529][ T6108] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 66.055484][ T6108] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 66.090735][ T6108] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 66.126058][ T6108] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 66.150837][ T6108] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 25412 usecs [ 66.338557][ T5756] Bluetooth: hci1: command 0x0c1a tx timeout [ 66.342128][ T5756] Bluetooth: hci2: command 0x0c1a tx timeout [ 66.344066][ T5756] Bluetooth: hci3: command 0x0c1a tx timeout [ 66.699284][ T6108] pci 0000:00:01.0: Adding to iommu group 1 [ 66.877175][ T6108] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 66.880002][ T6108] pci 0000:00:01.0: vgaarb: bridge control possible [ 66.882693][ T6108] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 66.913443][ T6108] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 66.917284][ T6108] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 66.923283][ T6108] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 66.949110][ T6108] [drm] Found bochs VGA, ID 0xb0c5. [ 66.951155][ T6108] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 66.955724][ T6108] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 67.047054][ T6119] netlink: 20 bytes leftover after parsing attributes in process `syz.3.54'. [ 67.334062][ T6106] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 67.352860][ T6106] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 67.355200][ T6106] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 67.357404][ T6106] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 67.847666][ T5756] Bluetooth: hci0: command 0x0c1a tx timeout [ 67.856155][ T6129] netlink: 20 bytes leftover after parsing attributes in process `syz.2.57'. [ 68.047704][ T6135] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 68.073553][ T6135] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 68.073668][ T6135] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 68.074039][ T6135] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 68.074540][ T6135] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 68.085519][ T6135] pci 0000:00:01.0: Adding to iommu group 1 [ 68.091585][ T6135] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 68.091602][ T6135] pci 0000:00:01.0: vgaarb: bridge control possible [ 68.091610][ T6135] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 68.121344][ T6135] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 68.121460][ T6135] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 68.126103][ T6135] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 68.145382][ T6135] [drm] Found bochs VGA, ID 0xb0c5. [ 68.145394][ T6135] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 68.167642][ T6135] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 68.232845][ T6135] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 68.563303][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.59'. [ 68.782234][ T6147] gfs2: error -5 reading superblock [ 68.876758][ T6138] bond1 (unregistering): Released all slaves [ 69.037864][ T6149] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 69.039979][ T6149] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 69.061725][ T6149] vhci_hcd vhci_hcd.0: Device attached [ 69.340865][ T5828] usb 44-1: SetAddress Request (2) to port 0 [ 69.342820][ T5828] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 69.367665][ T5756] Bluetooth: hci3: command 0x0c1a tx timeout [ 69.370140][ T5756] Bluetooth: hci2: command 0x0c1a tx timeout [ 69.372516][ T5756] Bluetooth: hci1: command 0x0c1a tx timeout [ 70.890666][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.893108][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.960169][ T6173] netlink: 20 bytes leftover after parsing attributes in process `syz.2.66'. [ 71.070026][ T6150] vhci_hcd: connection reset by peer [ 71.104804][ T5836] vhci_hcd vhci_hcd.3: stop threads [ 71.106767][ T5836] vhci_hcd vhci_hcd.3: release socket [ 71.112837][ T5836] vhci_hcd vhci_hcd.3: disconnect device [ 72.356480][ T6190] gfs2: error -5 reading superblock [ 72.702537][ T6166] Set syz1 is full, maxelem 65536 reached [ 72.707360][ T6188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.69'. [ 74.647019][ T5828] usb 44-1: device descriptor read/8, error -110 [ 76.630594][ T6223] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 76.633722][ T6223] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 76.661079][ T6223] vhci_hcd vhci_hcd.0: Device attached [ 76.778454][ T5828] usb usb44-port1: attempt power cycle [ 76.937856][ T56] usb 40-1: SetAddress Request (2) to port 0 [ 76.941553][ T56] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 77.018116][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.80'. [ 77.369487][ T5828] usb usb44-port1: unable to enumerate USB device [ 78.072669][ T6230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.186189][ T6226] vhci_hcd: connection reset by peer [ 78.190409][ T13] vhci_hcd vhci_hcd.1: stop threads [ 78.193814][ T13] vhci_hcd vhci_hcd.1: release socket [ 78.197111][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 78.289698][ T34] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.358714][ T5531] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 78.457591][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 78.464944][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 78.470767][ T34] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 78.474758][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.496560][ T34] usb 5-1: config 0 descriptor?? [ 78.723261][ T34] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 78.928128][ T34] hid-generic 0000:0000:0000.0002: unknown main item tag 0x3 [ 78.930775][ T34] hid-generic 0000:0000:0000.0002: unknown main item tag 0x3 [ 78.935940][ T34] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 78.941674][ T6245] bridge_slave_0: left allmulticast mode [ 78.942659][ T6256] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 78.943904][ T34] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 78.961522][ T6245] bridge_slave_0: left promiscuous mode [ 78.962910][ T6256] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 78.967119][ T6256] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 78.970594][ T6256] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 78.971689][ T6245] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.973498][ T6256] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 78.982401][ T34] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 78.985406][ T34] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 78.988784][ T34] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 78.994242][ T34] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 78.994780][ T6256] pci 0000:00:01.0: Adding to iommu group 1 [ 78.998957][ T6245] bridge_slave_1: left allmulticast mode [ 78.998975][ T6245] bridge_slave_1: left promiscuous mode [ 78.999695][ T6245] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.006005][ T34] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.009506][ T34] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.011445][ T6256] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 79.014708][ T6256] pci 0000:00:01.0: vgaarb: bridge control possible [ 79.017368][ T6256] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 79.026662][ T34] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.03 Device [syz1] on syz1 [ 79.038676][ T6245] bond0: (slave bond_slave_0): Releasing backup interface [ 79.044093][ T6256] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 79.047110][ T6256] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 79.054967][ T6245] bond0: (slave bond_slave_1): Releasing backup interface [ 79.059539][ T6256] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 79.070306][ T6245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.076467][ T6245] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.085973][ T6245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.092218][ T6256] [drm] Found bochs VGA, ID 0xb0c5. [ 79.094240][ T6245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.097241][ T6256] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 79.101962][ T6245] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 79.126512][ T6256] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 79.156723][ T5960] usb 5-1: USB disconnect, device number 2 [ 79.189385][ T6256] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 79.254446][ T6262] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 80.126643][ T6273] gfs2: error -5 reading superblock [ 81.850434][ T6284] netlink: 40 bytes leftover after parsing attributes in process `syz.0.100'. [ 81.919723][ T50] cfg80211: failed to load regulatory.db [ 82.026878][ T56] usb 40-1: device descriptor read/8, error -110 [ 82.870930][ T56] usb usb40-port1: attempt power cycle [ 83.059967][ T6299] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 83.062777][ T6299] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 83.069996][ T6299] vhci_hcd vhci_hcd.0: Device attached [ 83.202750][ T6303] netlink: 20 bytes leftover after parsing attributes in process `syz.2.94'. [ 83.218088][ T56] usb 40-1: SetAddress Request (4) to port 0 [ 83.218161][ T56] usb 40-1: new SuperSpeed USB device number 4 using vhci_hcd [ 83.868068][ T5843] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 83.950497][ T6300] vhci_hcd: connection reset by peer [ 83.958092][ T13] vhci_hcd vhci_hcd.1: stop threads [ 83.963915][ T13] vhci_hcd vhci_hcd.1: release socket [ 83.968377][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 84.023704][ T6306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.048613][ T6348] netlink: 40 bytes leftover after parsing attributes in process `syz.2.104'. [ 85.269312][ T6350] gfs2: error -5 reading superblock [ 86.537077][ T6366] bond1 (unregistering): Released all slaves [ 86.703918][ T6370] netlink: 20 bytes leftover after parsing attributes in process `syz.0.108'. [ 88.247827][ T56] usb 40-1: device descriptor read/8, error -110 [ 88.638612][ T56] usb usb40-port1: unable to enumerate USB device [ 94.366628][ T6394] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 94.382649][ T6398] netlink: 20 bytes leftover after parsing attributes in process `syz.2.111'. [ 94.383566][ T6394] cramfs: wrong magic [ 95.378797][ T6414] netlink: 'syz.0.114': attribute type 1 has an invalid length. [ 95.410307][ T6414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.657664][ T5828] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 95.726560][ T6419] netlink: 40 bytes leftover after parsing attributes in process `syz.3.115'. [ 95.838555][ T5828] usb 5-1: Using ep0 maxpacket: 8 [ 95.864923][ T5828] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 95.868572][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.871700][ T5828] usb 5-1: Product: syz [ 95.873469][ T5828] usb 5-1: Manufacturer: syz [ 95.875676][ T5828] usb 5-1: SerialNumber: syz [ 95.906751][ T5828] usb 5-1: config 0 descriptor?? [ 95.947890][ T5828] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 95.951639][ T5828] pctv452e: pctv452e_power_ctrl: 1 [ 95.951639][ T5828] [ 95.962462][ T5828] usb 5-1: selecting invalid altsetting 3 [ 95.964424][ T5828] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 95.964424][ T5828] [ 95.968459][ T5828] dvb-usb: bulk message failed: -22 (5/0) [ 96.022464][ T5828] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 96.031643][ T5828] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 96.034993][ T5828] usb 5-1: media controller created [ 96.044310][ T5828] dvb-usb: bulk message failed: -22 (8/0) [ 96.046758][ T5828] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 96.049518][ T5828] dvb-usb: MAC address reading failed. [ 96.102313][ T5828] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 96.151515][ T6414] dvb-usb: bulk message failed: -22 (7/0) [ 96.161615][ T6414] pctv452e: I2C error -22; AA 02 12 00 00 -> aa 02 31 03 12 00 00 [ 96.187891][ T6414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.114'. [ 96.231234][ T5828] DVB: Unable to find symbol stb0899_attach() [ 96.237912][ T5828] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 96.297782][ T5828] rc_core: IR keymap rc-tt-1500 not found [ 96.300575][ T5828] Registered IR keymap rc-empty [ 96.331022][ T5828] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 96.366378][ T5828] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input7 [ 96.429348][ T5828] dvb-usb: schedule remote query interval to 100 msecs. [ 96.431557][ T5828] pctv452e: pctv452e_power_ctrl: 0 [ 96.431557][ T5828] [ 96.433931][ T5828] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 96.457210][ T5828] usb 5-1: USB disconnect, device number 3 [ 96.540371][ T5828] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 96.860259][ T50] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 97.192972][ T6443] gfs2: error -5 reading superblock [ 97.402331][ T6447] netlink: 20 bytes leftover after parsing attributes in process `syz.0.119'. [ 98.113948][ T6459] netlink: 40 bytes leftover after parsing attributes in process `syz.3.122'. [ 98.289757][ T6461] netlink: 20 bytes leftover after parsing attributes in process `syz.0.121'. [ 98.975526][ T6474] netlink: 20 bytes leftover after parsing attributes in process `syz.0.125'. [ 99.332826][ T6478] bond1 (unregistering): Released all slaves [ 99.571478][ T6481] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 107.276830][ T6498] netlink: 'syz.2.129': attribute type 1 has an invalid length. [ 107.289955][ T6498] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.577797][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 107.748351][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 107.802740][ T10] usb 7-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 107.820515][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.825815][ T10] usb 7-1: Product: syz [ 107.838997][ T10] usb 7-1: Manufacturer: syz [ 107.844007][ T10] usb 7-1: SerialNumber: syz [ 108.082679][ T10] usb 7-1: config 0 descriptor?? [ 108.181267][ T10] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 108.193710][ T10] pctv452e: pctv452e_power_ctrl: 1 [ 108.193710][ T10] [ 108.199335][ T10] usb 7-1: selecting invalid altsetting 3 [ 108.203048][ T10] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 108.203048][ T10] [ 108.209557][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 108.220174][ T6516] netlink: 20 bytes leftover after parsing attributes in process `syz.3.131'. [ 108.224381][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 108.235077][ T10] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 108.248068][ T10] usb 7-1: media controller created [ 108.253481][ T10] dvb-usb: bulk message failed: -22 (8/0) [ 108.302486][ T10] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 108.304952][ T10] dvb-usb: MAC address reading failed. [ 108.325528][ T6498] dvb-usb: bulk message failed: -22 (7/0) [ 108.330624][ T6498] pctv452e: I2C error -22; AA 02 12 00 00 -> aa 02 31 03 12 00 00 [ 108.333426][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 108.341158][ T6498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.129'. [ 108.378276][ T10] DVB: Unable to find symbol stb0899_attach() [ 108.381520][ T10] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 108.427540][ T10] rc_core: IR keymap rc-tt-1500 not found [ 108.429482][ T10] Registered IR keymap rc-empty [ 108.434381][ T10] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 108.444377][ T10] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input8 [ 108.455087][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 108.457532][ T10] pctv452e: pctv452e_power_ctrl: 0 [ 108.457532][ T10] [ 108.460183][ T10] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 108.466515][ T10] usb 7-1: USB disconnect, device number 2 [ 108.532857][ T10] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 108.579466][ T6529] netlink: 20 bytes leftover after parsing attributes in process `syz.0.133'. [ 108.588931][ T50] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 109.781323][ T6552] netlink: 40 bytes leftover after parsing attributes in process `syz.2.135'. [ 110.959196][ T6568] bond2 (unregistering): Released all slaves [ 111.423646][ T6574] netlink: 'syz.0.140': attribute type 1 has an invalid length. [ 111.807737][ T5531] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 111.983891][ T6574] 8021q: adding VLAN 0 to HW filter on device bond2 [ 111.989226][ T5531] usb 5-1: Using ep0 maxpacket: 8 [ 112.103176][ T5531] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 112.109491][ T5531] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.115489][ T5531] usb 5-1: Product: syz [ 112.120765][ T5531] usb 5-1: Manufacturer: syz [ 112.122680][ T5531] usb 5-1: SerialNumber: syz [ 112.134264][ T5531] usb 5-1: config 0 descriptor?? [ 112.162736][ T6575] bond2: (slave veth3): Enslaving as an active interface with a down link [ 112.177654][ T6579] tipc: Started in network mode [ 112.179371][ T6579] tipc: Node identity 7f000001, cluster identity 4711 [ 112.191453][ T6579] tipc: Enabled bearer , priority 10 [ 112.198605][ T5531] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 112.205244][ T5531] pctv452e: pctv452e_power_ctrl: 1 [ 112.205244][ T5531] [ 112.210075][ T5531] usb 5-1: selecting invalid altsetting 3 [ 112.212262][ T5531] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 112.212262][ T5531] [ 112.216176][ T5531] dvb-usb: bulk message failed: -22 (5/0) [ 112.252680][ T5531] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 112.258880][ T5531] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 112.261533][ T5531] usb 5-1: media controller created [ 112.263514][ T5531] dvb-usb: bulk message failed: -22 (8/0) [ 112.266053][ T5531] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 112.270857][ T5531] dvb-usb: MAC address reading failed. [ 112.310993][ T5531] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 112.391215][ T5531] DVB: Unable to find symbol stb0899_attach() [ 112.397565][ T5531] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 112.420380][ T6574] netlink: 12 bytes leftover after parsing attributes in process `syz.0.140'. [ 112.467752][ T5531] rc_core: IR keymap rc-tt-1500 not found [ 112.469585][ T5531] Registered IR keymap rc-empty [ 112.484042][ T5531] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 112.497381][ T5531] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input9 [ 112.638702][ T5531] dvb-usb: schedule remote query interval to 100 msecs. [ 112.641704][ T5531] pctv452e: pctv452e_power_ctrl: 0 [ 112.641704][ T5531] [ 112.644639][ T5531] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 112.657218][ T5531] usb 5-1: USB disconnect, device number 4 [ 112.784556][ T5531] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 113.041743][ T6555] Set syz1 is full, maxelem 65536 reached [ 113.189442][ T5531] tipc: Node number set to 2130706433 [ 118.799395][ T6599] netlink: 'syz.1.143': attribute type 1 has an invalid length. [ 118.810444][ T6606] netlink: 20 bytes leftover after parsing attributes in process `syz.2.144'. [ 118.832004][ T6599] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.115264][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 119.277653][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 119.305247][ T10] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 119.315228][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.319097][ T10] usb 6-1: Product: syz [ 119.320660][ T10] usb 6-1: Manufacturer: syz [ 119.322342][ T10] usb 6-1: SerialNumber: syz [ 119.337318][ T10] usb 6-1: config 0 descriptor?? [ 119.473030][ T10] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 119.484797][ T10] pctv452e: pctv452e_power_ctrl: 1 [ 119.484797][ T10] [ 119.487993][ T10] usb 6-1: selecting invalid altsetting 3 [ 119.490460][ T10] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 119.490460][ T10] [ 119.494685][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 119.501493][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 119.506231][ T10] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 119.510322][ T10] usb 6-1: media controller created [ 119.512559][ T10] dvb-usb: bulk message failed: -22 (8/0) [ 119.514954][ T10] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 119.518330][ T10] dvb-usb: MAC address reading failed. [ 119.528698][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 119.583223][ T10] DVB: Unable to find symbol stb0899_attach() [ 119.587652][ T10] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 119.649956][ T6618] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 119.652372][ T6618] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 119.675837][ T6618] vhci_hcd vhci_hcd.0: Device attached [ 119.678121][ T6599] dvb-usb: bulk message failed: -22 (7/0) [ 119.686235][ T6599] pctv452e: I2C error -22; AA 02 12 00 00 -> aa 02 31 03 12 00 00 [ 119.694665][ T6599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.143'. [ 119.700473][ T10] rc_core: IR keymap rc-tt-1500 not found [ 119.712326][ T10] Registered IR keymap rc-empty [ 119.720429][ T10] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 119.740405][ T10] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input10 [ 119.758850][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 119.765513][ T10] pctv452e: pctv452e_power_ctrl: 0 [ 119.765513][ T10] [ 119.779892][ T10] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 119.807641][ T10] usb 6-1: USB disconnect, device number 2 [ 119.886273][ T10] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 119.957873][ T56] usb 42-1: SetAddress Request (2) to port 0 [ 119.973299][ T56] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 120.118639][ T5531] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 120.262420][ T6619] vhci_hcd: connection reset by peer [ 120.268220][ T13] vhci_hcd vhci_hcd.2: stop threads [ 120.274142][ T13] vhci_hcd vhci_hcd.2: release socket [ 120.279146][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 121.464223][ T6653] netlink: 'syz.1.150': attribute type 1 has an invalid length. [ 121.478411][ T6653] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.797583][ T5843] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 121.842348][ T6653] bond2: (slave veth3): Enslaving as an active interface with a down link [ 121.957708][ T5843] usb 6-1: Using ep0 maxpacket: 8 [ 121.965475][ T5843] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 121.973702][ T5843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.979334][ T5843] usb 6-1: Product: syz [ 121.980787][ T5843] usb 6-1: Manufacturer: syz [ 121.997520][ T5843] usb 6-1: SerialNumber: syz [ 122.010046][ T5843] usb 6-1: config 0 descriptor?? [ 122.019273][ T5843] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 122.025280][ T5843] pctv452e: pctv452e_power_ctrl: 1 [ 122.025280][ T5843] [ 122.036670][ T5843] usb 6-1: selecting invalid altsetting 3 [ 122.040009][ T5843] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 122.040009][ T5843] [ 122.047860][ T5843] dvb-usb: bulk message failed: -22 (5/0) [ 122.051687][ T5843] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 122.062801][ T5843] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 122.067382][ T5843] usb 6-1: media controller created [ 122.071226][ T5843] dvb-usb: bulk message failed: -22 (8/0) [ 122.076902][ T5843] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 122.076942][ T5843] dvb-usb: MAC address reading failed. [ 122.091831][ T5843] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.234693][ T6653] dvb-usb: bulk message failed: -22 (7/0) [ 122.234719][ T6653] pctv452e: I2C error -22; AA 02 12 00 00 -> aa 02 31 03 12 00 00 [ 122.237637][ T6653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.150'. [ 122.315638][ T6675] netlink: 20 bytes leftover after parsing attributes in process `syz.3.154'. [ 122.346959][ T6672] bond2 (unregistering): Released all slaves [ 122.429486][ T5843] DVB: Unable to find symbol stb0899_attach() [ 122.429504][ T5843] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 122.517761][ T5843] rc_core: IR keymap rc-tt-1500 not found [ 122.517781][ T5843] Registered IR keymap rc-empty [ 122.526048][ T5843] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 122.529181][ T5843] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input11 [ 122.536155][ T5843] dvb-usb: schedule remote query interval to 100 msecs. [ 122.536198][ T5843] pctv452e: pctv452e_power_ctrl: 0 [ 122.536198][ T5843] [ 122.536210][ T5843] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 122.543862][ T5843] usb 6-1: USB disconnect, device number 3 [ 122.610163][ T5843] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 123.093624][ T6682] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 123.096424][ T6682] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 123.101075][ T6682] vhci_hcd vhci_hcd.0: Device attached [ 123.377728][ T6658] usb 38-1: SetAddress Request (2) to port 0 [ 123.381322][ T6658] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 123.731481][ T6683] vhci_hcd: connection reset by peer [ 123.733735][ T5794] vhci_hcd vhci_hcd.0: stop threads [ 123.735697][ T5794] vhci_hcd vhci_hcd.0: release socket [ 123.738566][ T5794] vhci_hcd vhci_hcd.0: disconnect device [ 125.047649][ T56] usb 42-1: device descriptor read/8, error -110 [ 125.449910][ T56] usb usb42-port1: attempt power cycle [ 126.008933][ T56] usb usb42-port1: unable to enumerate USB device [ 128.487682][ T6658] usb 38-1: device descriptor read/8, error -110 [ 128.878283][ T6658] usb usb38-port1: attempt power cycle [ 129.439435][ T6658] usb usb38-port1: unable to enumerate USB device [ 130.403563][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.158'. [ 131.310685][ T6713] netlink: 28 bytes leftover after parsing attributes in process `syz.1.157'. [ 132.330230][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.332978][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.393496][ T6727] netlink: 'syz.1.163': attribute type 1 has an invalid length. [ 132.459290][ T6727] 8021q: adding VLAN 0 to HW filter on device bond3 [ 132.493580][ T6732] bond3: (slave veth5): Enslaving as an active interface with a down link [ 132.767670][ T5531] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 132.830250][ T50] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 132.919756][ T5531] usb 6-1: Using ep0 maxpacket: 8 [ 132.929689][ T5531] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 132.938620][ T5531] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.948323][ T5531] usb 6-1: Product: syz [ 132.953642][ T5531] usb 6-1: Manufacturer: syz [ 132.956442][ T5531] usb 6-1: SerialNumber: syz [ 132.973743][ T5531] usb 6-1: config 0 descriptor?? [ 132.998886][ T5531] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 133.001533][ T5531] pctv452e: pctv452e_power_ctrl: 1 [ 133.001533][ T5531] [ 133.003991][ T5531] usb 6-1: selecting invalid altsetting 3 [ 133.005964][ T5531] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 133.005964][ T5531] [ 133.011037][ T5531] dvb-usb: bulk message failed: -22 (5/0) [ 133.021184][ T5531] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 133.031293][ T5531] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 133.038508][ T5531] usb 6-1: media controller created [ 133.043660][ T5531] dvb-usb: bulk message failed: -22 (8/0) [ 133.048546][ T5531] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 133.068462][ T5531] dvb-usb: MAC address reading failed. [ 133.175347][ T5531] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 133.200960][ T6727] dvb-usb: bulk message failed: -22 (7/0) [ 133.203144][ T6727] pctv452e: I2C error -22; AA 02 12 00 00 -> aa 02 31 03 12 00 00 [ 133.254436][ T6727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.163'. [ 133.433768][ T6740] tipc: Started in network mode [ 133.435524][ T6740] tipc: Node identity 7f000001, cluster identity 4711 [ 133.442097][ T6740] tipc: Enabled bearer , priority 10 [ 133.682854][ T5531] DVB: Unable to find symbol stb0899_attach() [ 133.685263][ T5531] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 133.918921][ T5531] rc_core: IR keymap rc-tt-1500 not found [ 133.959690][ T5531] Registered IR keymap rc-empty [ 133.986279][ T5531] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 134.030514][ T5531] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input12 [ 134.061378][ T5531] dvb-usb: schedule remote query interval to 100 msecs. [ 134.078590][ T5531] pctv452e: pctv452e_power_ctrl: 0 [ 134.078590][ T5531] [ 134.086088][ T5531] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 134.143469][ T5531] usb 6-1: USB disconnect, device number 4 [ 134.239320][ T5531] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 134.439128][ T56] tipc: Node number set to 2130706433 [ 136.185707][ T6784] netlink: 'syz.2.174': attribute type 2 has an invalid length. [ 137.267186][ T6802] tipc: Started in network mode [ 137.269611][ T6802] tipc: Node identity 7f000001, cluster identity 4711 [ 137.278995][ T6802] tipc: Enabled bearer , priority 10 [ 137.303951][ T6804] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 137.310263][ T6804] cramfs: wrong magic [ 138.679729][ T6818] netlink: 36 bytes leftover after parsing attributes in process `syz.0.187'. [ 138.871843][ T34] tipc: Node number set to 2130706433 [ 139.381445][ T6824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.190'. [ 139.614913][ T6831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.181'. [ 139.632414][ T6831] syzkaller0: entered promiscuous mode [ 139.637597][ T6831] syzkaller0: entered allmulticast mode [ 141.802413][ T6862] netlink: 36 bytes leftover after parsing attributes in process `syz.3.192'. [ 142.458037][ T5531] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 142.651806][ T5531] usb 6-1: Using ep0 maxpacket: 32 [ 142.657902][ T5531] usb 6-1: config index 0 descriptor too short (expected 12827, got 27) [ 142.661039][ T5531] usb 6-1: config 32 has too many interfaces: 52, using maximum allowed: 32 [ 142.664196][ T5531] usb 6-1: config 32 has an invalid descriptor of length 107, skipping remainder of the config [ 142.671092][ T5531] usb 6-1: config 32 has 0 interfaces, different from the descriptor's value: 52 [ 142.685008][ T5531] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 142.688490][ T5531] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 142.691348][ T5531] usb 6-1: Product: syz [ 142.693137][ T5531] usb 6-1: Manufacturer: syz [ 142.695539][ T5531] usb 6-1: SerialNumber: syz [ 142.728314][ T5843] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 142.980719][ T6873] syz.1.194 uses obsolete (PF_INET,SOCK_PACKET) [ 145.311926][ T5531] usb 6-1: USB disconnect, device number 5 [ 145.481005][ T6955] 9pnet_virtio: no channels available for device syz [ 145.719299][ T56] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 145.880346][ T56] usb 8-1: Using ep0 maxpacket: 8 [ 145.922048][ T56] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 145.946221][ T56] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 145.966965][ T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.051309][ T56] usb 8-1: config 0 descriptor?? [ 146.314957][ T56] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 146.521153][ T56] hid_parser_main: 68 callbacks suppressed [ 146.521174][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 146.533708][ T6952] bridge_slave_0: left allmulticast mode [ 146.546170][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 146.551678][ T6952] bridge_slave_0: left promiscuous mode [ 146.555362][ T6952] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.560610][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 146.563227][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 146.566585][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 146.569269][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 146.571754][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 146.574270][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 146.576603][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 146.578977][ T56] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 146.598959][ T56] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.03 Device [syz1] on syz1 [ 146.604772][ T6952] bridge_slave_1: left allmulticast mode [ 146.606653][ T6952] bridge_slave_1: left promiscuous mode [ 146.610813][ T6952] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.622484][ T6952] bond0: (slave bond_slave_0): Releasing backup interface [ 146.632902][ T6952] bond0: (slave bond_slave_1): Releasing backup interface [ 146.645222][ T6952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.650258][ T6952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.656555][ T6952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.661116][ T6952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.666224][ T6952] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 146.707987][ T6658] usb 8-1: USB disconnect, device number 2 [ 147.327743][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 147.507850][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 147.548822][ T10] usb 5-1: config 0 has no interfaces? [ 147.564388][ T10] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 147.586681][ T10] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 147.613480][ T10] usb 5-1: Product: syz [ 147.626381][ T10] usb 5-1: Manufacturer: syz [ 147.643525][ T10] usb 5-1: SerialNumber: syz [ 147.758668][ T10] usb 5-1: config 0 descriptor?? [ 149.379684][ T2318] usb 5-1: USB disconnect, device number 5 [ 149.669421][ T7020] xt_CT: You must specify a L4 protocol and not use inversions on it [ 149.763311][ T7020] XFS (nullb0): Invalid superblock magic number [ 149.925468][ T7025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.209'. [ 150.817923][ T7032] orangefs_mount: mount request failed with -4 [ 151.023391][ T7044] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 151.026082][ T7044] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 151.030951][ T7044] vhci_hcd vhci_hcd.0: Device attached [ 151.135640][ T7047] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 151.135767][ T7047] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 151.136295][ T7047] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 151.136352][ T7047] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 151.227586][ T5960] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 151.387655][ T5960] usb 5-1: Using ep0 maxpacket: 32 [ 151.390026][ T5960] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 151.390059][ T5960] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 151.390091][ T5960] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 151.390114][ T5960] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 151.390137][ T5960] usb 5-1: config 0 interface 0 has no altsetting 0 [ 151.393439][ T5960] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 151.393463][ T5960] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 151.393480][ T5960] usb 5-1: Product: syz [ 151.393494][ T5960] usb 5-1: Manufacturer: syz [ 151.393507][ T5960] usb 5-1: SerialNumber: syz [ 151.395814][ T5960] usb 5-1: config 0 descriptor?? [ 151.401842][ T5960] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 151.405521][ T5960] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 151.700157][ T34] usb 5-1: USB disconnect, device number 6 [ 151.710083][ T34] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 151.743333][ T7045] vhci_hcd: connection closed [ 151.743696][ T12] vhci_hcd vhci_hcd.2: stop threads [ 151.747427][ T12] vhci_hcd vhci_hcd.2: release socket [ 151.749461][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 152.459152][ T7063] ipt_rpfilter: unknown options [ 152.546385][ T7064] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 152.572178][ T7064] @0Ù: renamed from bond_slave_1 (while UP) [ 153.026383][ T7069] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 153.028672][ T7069] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 153.043217][ T7069] vhci_hcd vhci_hcd.0: Device attached [ 153.465818][ T5851] usb 42-1: SetAddress Request (7) to port 0 [ 153.491259][ T5851] usb 42-1: new SuperSpeed USB device number 7 using vhci_hcd [ 153.749315][ T7071] vhci_hcd: connection reset by peer [ 153.751749][ T6963] vhci_hcd vhci_hcd.2: stop threads [ 153.753587][ T6963] vhci_hcd vhci_hcd.2: release socket [ 153.755485][ T6963] vhci_hcd vhci_hcd.2: disconnect device [ 154.341197][ T7089] tipc: Started in network mode [ 154.343379][ T7089] tipc: Node identity 7f000001, cluster identity 4711 [ 154.350914][ T7089] tipc: Enabled bearer , priority 10 [ 155.201304][ T7095] ntfs3(nullb0): Primary boot signature is not NTFS. [ 155.209149][ T7095] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 155.380679][ T10] tipc: Node number set to 2130706433 [ 155.530400][ T7099] netlink: 'syz.1.221': attribute type 1 has an invalid length. [ 155.534081][ T7099] netlink: 756 bytes leftover after parsing attributes in process `syz.1.221'. [ 155.944095][ T7103] xt_CT: You must specify a L4 protocol and not use inversions on it [ 155.958881][ T7103] XFS (nullb0): Invalid superblock magic number [ 156.181059][ T7117] netlink: 'syz.3.224': attribute type 1 has an invalid length. [ 156.243767][ T7117] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.586323][ T7144] tipc: Enabling of bearer rejected, already enabled [ 158.939753][ T5851] usb 42-1: device descriptor read/8, error -110 [ 158.996405][ T7149] hid-generic 0003:0627:0001.0001: pid 7149 passed too short report [ 159.104873][ T7150] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 159.107053][ T7150] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 159.120361][ T7150] vhci_hcd vhci_hcd.0: Device attached [ 159.397745][ T29] usb 38-1: SetAddress Request (6) to port 0 [ 159.399692][ T29] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 159.428111][ T5851] usb usb42-port1: attempt power cycle [ 159.930365][ T7151] vhci_hcd: connection reset by peer [ 159.934436][ T5794] vhci_hcd vhci_hcd.0: stop threads [ 159.936750][ T5794] vhci_hcd vhci_hcd.0: release socket [ 159.938544][ T5794] vhci_hcd vhci_hcd.0: disconnect device [ 159.999400][ T5851] usb usb42-port1: unable to enumerate USB device [ 161.746427][ T7178] netlink: 28 bytes leftover after parsing attributes in process `syz.3.240'. [ 161.797577][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 162.910642][ T7192] netlink: 'syz.1.243': attribute type 2 has an invalid length. [ 164.489648][ T29] usb 38-1: device descriptor read/8, error -110 [ 164.890765][ T29] usb usb38-port1: attempt power cycle [ 165.448932][ T29] usb usb38-port1: unable to enumerate USB device [ 166.459793][ T7226] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 166.556760][ T7226] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 166.559268][ T7226] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 166.561564][ T7226] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 166.564742][ T7226] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 166.571639][ T7226] pci 0000:00:01.0: Adding to iommu group 1 [ 166.576930][ T7226] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 166.579079][ T7226] pci 0000:00:01.0: vgaarb: bridge control possible [ 166.581142][ T7226] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 166.589145][ T7226] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 166.593103][ T7226] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 166.596744][ T7226] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 166.630594][ T7226] [drm] Found bochs VGA, ID 0xb0c5. [ 166.632789][ T7226] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 166.672540][ T7226] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 166.789806][ T7226] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 167.394183][ T7245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.255'. [ 167.413436][ T7245] syzkaller0: entered promiscuous mode [ 167.415459][ T7245] syzkaller0: entered allmulticast mode [ 167.899107][ T7253] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 168.127632][ T5820] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 168.194496][ T7257] netlink: 20 bytes leftover after parsing attributes in process `syz.1.259'. [ 168.387805][ T5820] usb 7-1: Using ep0 maxpacket: 8 [ 168.401748][ T5820] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 168.435096][ T5820] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 168.443909][ T5820] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.506966][ T5820] usb 7-1: config 0 descriptor?? [ 168.749370][ T5820] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 169.141109][ T7264] netlink: 'syz.0.260': attribute type 2 has an invalid length. [ 169.165658][ T7255] bridge_slave_0: left allmulticast mode [ 169.171063][ T7255] bridge_slave_0: left promiscuous mode [ 169.177997][ T7255] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.193148][ T7255] bridge_slave_1: left allmulticast mode [ 169.212271][ T7255] bridge_slave_1: left promiscuous mode [ 169.215867][ T7255] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.230300][ T7255] bond0: (slave bond_slave_0): Releasing backup interface [ 169.241073][ T7255] bond0: (slave bond_slave_1): Releasing backup interface [ 169.251463][ T7255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.254054][ T7255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.258786][ T7255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.261459][ T7255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.269460][ T7255] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 169.290064][ T5820] usb 7-1: USB disconnect, device number 3 [ 170.757912][ T5820] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 171.147616][ T5820] usb 7-1: Using ep0 maxpacket: 32 [ 171.307420][ T5820] usb 7-1: config 0 has no interfaces? [ 171.320040][ T5820] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 171.457927][ T5820] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 171.467193][ T5820] usb 7-1: Product: syz [ 171.472910][ T5820] usb 7-1: Manufacturer: syz [ 171.476626][ T5820] usb 7-1: SerialNumber: syz [ 171.484114][ T5820] usb 7-1: config 0 descriptor?? [ 171.990316][ T7307] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 171.993084][ T7307] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 172.006781][ T7307] vhci_hcd vhci_hcd.0: Device attached [ 172.121934][ T7317] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 172.135259][ T7317] cramfs: wrong magic [ 172.337783][ T56] usb 44-1: SetAddress Request (6) to port 0 [ 172.352896][ T56] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 172.733221][ T41] usb 7-1: USB disconnect, device number 4 [ 172.736171][ T7310] vhci_hcd: connection reset by peer [ 172.742259][ T12] vhci_hcd vhci_hcd.3: stop threads [ 172.746127][ T12] vhci_hcd vhci_hcd.3: release socket [ 172.748826][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 173.861981][ T7324] orangefs_mount: mount request failed with -4 [ 174.269883][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 174.428908][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 174.447238][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 174.453233][ T10] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 174.457126][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.502320][ T10] usb 8-1: config 0 descriptor?? [ 174.824115][ T10] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 175.016921][ T7333] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 175.233965][ T5820] usb 8-1: USB disconnect, device number 3 [ 175.822702][ T7363] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 175.836222][ T7363] cramfs: wrong magic [ 177.148307][ T7381] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 177.150236][ T7380] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 177.150953][ T7381] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 177.152714][ T7381] vhci_hcd vhci_hcd.0: Device attached [ 177.203903][ T7380] @0Ù: renamed from bond_slave_1 [ 177.350926][ T7387] ntfs3(nullb0): Primary boot signature is not NTFS. [ 177.361080][ T7387] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 177.427727][ T29] usb 40-1: SetAddress Request (6) to port 0 [ 177.430488][ T29] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 177.447819][ T56] usb 44-1: device descriptor read/8, error -110 [ 177.764491][ T7393] netlink: 'syz.0.283': attribute type 1 has an invalid length. [ 177.767125][ T7393] netlink: 756 bytes leftover after parsing attributes in process `syz.0.283'. [ 177.858128][ T56] usb usb44-port1: attempt power cycle [ 177.886456][ T7382] vhci_hcd: connection reset by peer [ 177.888524][ T7371] vhci_hcd vhci_hcd.1: stop threads [ 177.890428][ T7371] vhci_hcd vhci_hcd.1: release socket [ 177.893529][ T7371] vhci_hcd vhci_hcd.1: disconnect device [ 178.438279][ T56] usb usb44-port1: unable to enumerate USB device [ 178.827572][ T56] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 178.977160][ T7412] netlink: 40 bytes leftover after parsing attributes in process `syz.3.288'. [ 179.267648][ T56] usb 6-1: Using ep0 maxpacket: 8 [ 179.271804][ T56] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 179.276452][ T56] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 179.280428][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.287356][ T56] usb 6-1: config 0 descriptor?? [ 179.365899][ T7417] netlink: 40 bytes leftover after parsing attributes in process `syz.2.297'. [ 179.504026][ T56] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 179.727835][ T7405] bridge_slave_0: left allmulticast mode [ 179.730298][ T7405] bridge_slave_0: left promiscuous mode [ 179.732908][ T7405] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.741369][ T7405] bridge_slave_1: left allmulticast mode [ 179.743742][ T7405] bridge_slave_1: left promiscuous mode [ 179.746219][ T7405] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.757768][ T7405] bond0: (slave bond_slave_0): Releasing backup interface [ 179.764991][ T7405] bond0: (slave c@0Ù): Releasing backup interface [ 179.775473][ T7405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.779894][ T7405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.784502][ T7405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.788113][ T7405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.795416][ T7405] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 179.844879][ T50] usb 6-1: USB disconnect, device number 6 [ 180.162388][ T7421] xt_CT: You must specify a L4 protocol and not use inversions on it [ 180.387576][ T7420] XFS (nullb0): Invalid superblock magic number [ 181.078900][ T7440] netlink: 28 bytes leftover after parsing attributes in process `syz.2.292'. [ 181.769245][ T7449] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 181.771214][ T7449] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 181.780912][ T7449] vhci_hcd vhci_hcd.0: Device attached [ 181.918985][ T7452] netlink: 28 bytes leftover after parsing attributes in process `syz.0.294'. [ 182.547929][ T7450] vhci_hcd: connection reset by peer [ 182.557689][ T5794] vhci_hcd vhci_hcd.1: stop threads [ 182.559987][ T5794] vhci_hcd vhci_hcd.1: release socket [ 182.562345][ T29] usb 40-1: device descriptor read/8, error -110 [ 182.562353][ T5794] vhci_hcd vhci_hcd.1: disconnect device [ 182.970456][ T29] usb usb40-port1: attempt power cycle [ 183.256989][ T7468] netlink: 20 bytes leftover after parsing attributes in process `syz.2.299'. [ 183.829187][ T29] usb usb40-port1: unable to enumerate USB device [ 184.140146][ T1162] Bluetooth: hci4: Frame reassembly failed (-90) [ 184.156690][ T42] audit: type=1804 audit(1785409020.453:2): pid=7475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.306" name="/newroot/75/bus/bus" dev="overlay" ino=429 res=1 errno=0 [ 185.187825][ T5960] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 186.087602][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 186.087778][ T5756] Bluetooth: hci4: command 0x1003 tx timeout [ 186.167798][ T5960] usb 8-1: Using ep0 maxpacket: 8 [ 186.171845][ T5960] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 186.175684][ T5960] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 186.179308][ T5960] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.186908][ T5960] usb 8-1: config 0 descriptor?? [ 186.928359][ T7482] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 187.035926][ T7499] syz.1.307 (7499) used greatest stack depth: 19560 bytes left [ 187.079224][ T5960] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 187.282111][ T5960] usb 8-1: USB disconnect, device number 4 [ 187.994274][ T7522] netlink: 20 bytes leftover after parsing attributes in process `syz.1.309'. [ 188.079059][ T7527] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 188.101793][ T7527] @0Ù: renamed from bond_slave_1 [ 188.293444][ T5843] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 189.077549][ T5843] usb 8-1: Using ep0 maxpacket: 8 [ 189.080420][ T5843] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 189.084948][ T5843] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 189.087831][ T5843] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.091988][ T5843] usb 8-1: config 0 descriptor?? [ 189.340129][ T5843] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 190.152913][ T7544] tipc: Enabling of bearer rejected, already enabled [ 190.181922][ T7551] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 190.474604][ T5843] usb 8-1: USB disconnect, device number 5 [ 190.813501][ T7570] tipc: Enabling of bearer rejected, already enabled [ 191.561567][ T7573] Config c/1 of g_uac2 needs at least one function. [ 191.565197][ T7573] udc usbip-vudc.0: failed to start g_uac2: -22 [ 191.568430][ T7573] configfs-gadget.g_uac2 gadget.32: probe with driver configfs-gadget.g_uac2 failed with error -22 [ 191.575745][ T7573] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 191.587027][ T7573] udc usbip-vudc.0: soft-connect without a gadget driver [ 191.757951][ T7579] netlink: 'syz.1.320': attribute type 1 has an invalid length. [ 191.774257][ T7579] 8021q: adding VLAN 0 to HW filter on device bond4 [ 191.779823][ T7579] netlink: 28 bytes leftover after parsing attributes in process `syz.1.320'. [ 191.907560][ T5960] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 191.927603][ T41] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 192.017728][ T5843] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 192.077547][ T5960] usb 8-1: Using ep0 maxpacket: 8 [ 192.080928][ T5960] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 192.084507][ T5960] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 192.087783][ T5960] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.092323][ T5960] usb 8-1: config 0 descriptor?? [ 192.107748][ T41] usb 5-1: Using ep0 maxpacket: 8 [ 192.112890][ T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 192.116537][ T41] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 192.119686][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.124426][ T41] usb 5-1: config 0 descriptor?? [ 192.168052][ T5843] usb 6-1: Using ep0 maxpacket: 8 [ 192.173198][ T5843] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 192.176972][ T5843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.180836][ T5843] usb 6-1: Product: syz [ 192.182459][ T5843] usb 6-1: Manufacturer: syz [ 192.183955][ T5843] usb 6-1: SerialNumber: syz [ 192.187381][ T5843] usb 6-1: config 0 descriptor?? [ 192.191339][ T5843] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 192.194777][ T5843] pctv452e: pctv452e_power_ctrl: 1 [ 192.194777][ T5843] [ 192.197918][ T5843] usb 6-1: selecting invalid altsetting 3 [ 192.200113][ T5843] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 192.200113][ T5843] [ 192.203199][ T5843] dvb-usb: bulk message failed: -22 (5/0) [ 192.207278][ T5843] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 192.211162][ T5843] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 192.213798][ T5843] usb 6-1: media controller created [ 192.215448][ T5843] dvb-usb: bulk message failed: -22 (8/0) [ 192.217250][ T5843] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 192.219777][ T5843] dvb-usb: MAC address reading failed. [ 192.226071][ T5843] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 192.250041][ T5843] DVB: Unable to find symbol stb0899_attach() [ 192.252001][ T5843] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 192.322018][ T5960] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 192.331690][ T41] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 192.389753][ T5843] rc_core: IR keymap rc-tt-1500 not found [ 192.391702][ T5843] Registered IR keymap rc-empty [ 192.397408][ T7579] dvb-usb: bulk message failed: -22 (7/0) [ 192.404371][ T5843] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 192.407805][ T7579] pctv452e: I2C error -22; AA 02 12 00 00 -> aa 02 31 03 12 00 00 [ 192.412325][ T7579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.320'. [ 192.414362][ T5843] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input13 [ 192.424077][ T5843] dvb-usb: schedule remote query interval to 100 msecs. [ 192.426262][ T5843] pctv452e: pctv452e_power_ctrl: 0 [ 192.426262][ T5843] [ 192.428885][ T5843] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 192.433523][ T5843] usb 6-1: USB disconnect, device number 7 [ 192.475046][ T5843] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 192.530240][ T7575] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 192.551256][ T7577] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 192.573051][ T5960] usb 5-1: USB disconnect, device number 7 [ 192.665191][ T41] usb 8-1: USB disconnect, device number 6 [ 193.503882][ T7601] netlink: 20 bytes leftover after parsing attributes in process `syz.0.333'. [ 193.784833][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.788453][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.379718][ T2318] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 195.344365][ T2318] usb 7-1: Using ep0 maxpacket: 32 [ 195.894340][ T2318] usb 7-1: config index 0 descriptor too short (expected 12827, got 27) [ 195.899234][ T2318] usb 7-1: config 32 has too many interfaces: 52, using maximum allowed: 32 [ 195.901970][ T2318] usb 7-1: config 32 has an invalid descriptor of length 107, skipping remainder of the config [ 195.905665][ T2318] usb 7-1: config 32 has 0 interfaces, different from the descriptor's value: 52 [ 195.928459][ T2318] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 195.931418][ T2318] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 195.934057][ T2318] usb 7-1: Product: syz [ 195.935371][ T2318] usb 7-1: Manufacturer: syz [ 195.936939][ T2318] usb 7-1: SerialNumber: syz [ 195.975027][ T7656] netlink: 'syz.1.332': attribute type 1 has an invalid length. [ 195.995381][ T7656] 8021q: adding VLAN 0 to HW filter on device bond5 [ 196.031536][ T7656] bond5: (slave veth7): Enslaving as an active interface with a down link [ 196.277643][ T41] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 196.319024][ T2318] usb 7-1: USB disconnect, device number 5 [ 196.447692][ T41] usb 6-1: Using ep0 maxpacket: 8 [ 196.451349][ T41] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 196.451367][ T41] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.451377][ T41] usb 6-1: Product: syz [ 196.451384][ T41] usb 6-1: Manufacturer: syz [ 196.451392][ T41] usb 6-1: SerialNumber: syz [ 196.453692][ T41] usb 6-1: config 0 descriptor?? [ 196.458796][ T41] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 196.458824][ T41] pctv452e: pctv452e_power_ctrl: 1 [ 196.458824][ T41] [ 196.458843][ T41] usb 6-1: selecting invalid altsetting 3 [ 196.458851][ T41] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 196.458851][ T41] [ 196.458859][ T41] dvb-usb: bulk message failed: -22 (5/0) [ 196.461511][ T41] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 196.462197][ T41] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 196.462237][ T41] usb 6-1: media controller created [ 196.462270][ T41] dvb-usb: bulk message failed: -22 (8/0) [ 196.462292][ T41] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 196.462690][ T41] dvb-usb: MAC address reading failed. [ 196.480263][ T41] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 196.550053][ T41] DVB: Unable to find symbol stb0899_attach() [ 196.550069][ T41] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 196.608363][ T41] rc_core: IR keymap rc-tt-1500 not found [ 196.608382][ T41] Registered IR keymap rc-empty [ 196.609265][ T41] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 196.610806][ T41] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input14 [ 196.614239][ T41] dvb-usb: schedule remote query interval to 100 msecs. [ 196.614257][ T41] pctv452e: pctv452e_power_ctrl: 0 [ 196.614257][ T41] [ 196.614267][ T41] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 196.660144][ T7656] dvb-usb: bulk message failed: -22 (7/0) [ 196.660166][ T7656] pctv452e: I2C error -22; AA 02 12 00 00 -> aa 02 31 03 12 00 00 [ 196.661892][ T7656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.332'. [ 196.667204][ T41] usb 6-1: USB disconnect, device number 8 [ 196.724450][ T41] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 198.275385][ T7691] netlink: 'syz.2.338': attribute type 1 has an invalid length. [ 198.306738][ T7691] 8021q: adding VLAN 0 to HW filter on device bond2 [ 198.551322][ T7693] netlink: 28 bytes leftover after parsing attributes in process `syz.0.336'. [ 199.429424][ T7703] fuse: Unknown parameter 'fd0x0000000000000005' [ 201.498384][ T7730] netlink: 28 bytes leftover after parsing attributes in process `syz.1.346'. [ 202.310332][ T7746] netlink: 20 bytes leftover after parsing attributes in process `syz.3.359'. [ 202.517702][ T5828] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 202.709007][ T5828] usb 5-1: Using ep0 maxpacket: 32 [ 202.806067][ T5828] usb 5-1: config 0 has no interfaces? [ 203.016666][ T5828] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 203.040136][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 203.094084][ T5828] usb 5-1: Product: syz [ 203.105346][ T5828] usb 5-1: Manufacturer: syz [ 203.150747][ T5828] usb 5-1: SerialNumber: syz [ 203.156101][ T5828] usb 5-1: config 0 descriptor?? [ 203.750971][ T7772] netlink: 36 bytes leftover after parsing attributes in process `syz.3.354'. [ 204.268700][ T5843] usb 5-1: USB disconnect, device number 8 [ 205.598399][ T7798] ipt_rpfilter: unknown options [ 206.268609][ T7805] ipt_rpfilter: unknown options [ 207.160500][ T7815] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 207.207452][ T7820] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 207.209615][ T7820] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 207.222361][ T7820] vhci_hcd vhci_hcd.0: Device attached [ 207.238615][ T7815] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 207.254170][ T7815] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 207.268138][ T7815] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 207.287039][ T7815] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 207.309675][ T7815] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 22963 usecs [ 207.489759][ T56] usb 38-1: SetAddress Request (10) to port 0 [ 207.494539][ T7815] pci 0000:00:01.0: Adding to iommu group 1 [ 207.504350][ T56] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 207.633580][ T7815] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 207.635912][ T7815] pci 0000:00:01.0: vgaarb: bridge control possible [ 207.638041][ T7815] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 207.706831][ T7815] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 207.713756][ T7815] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 207.724631][ T7815] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 207.748053][ T7815] [drm] Found bochs VGA, ID 0xb0c5. [ 207.756813][ T7815] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 207.817252][ T7815] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 207.928957][ T7815] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 208.442528][ T7829] netlink: 36 bytes leftover after parsing attributes in process `syz.1.364'. [ 208.589936][ T7821] vhci_hcd: connection reset by peer [ 208.592969][ T5836] vhci_hcd vhci_hcd.0: stop threads [ 208.596045][ T5836] vhci_hcd vhci_hcd.0: release socket [ 208.604069][ T5836] vhci_hcd vhci_hcd.0: disconnect device [ 209.188098][ T7837] ipt_rpfilter: unknown options [ 210.071473][ T7849] ipt_rpfilter: unknown options [ 210.729319][ T41] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 210.877653][ T41] usb 6-1: Using ep0 maxpacket: 32 [ 210.901110][ T41] usb 6-1: config 0 has no interfaces? [ 210.908156][ T41] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 210.914205][ T41] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 210.925296][ T41] usb 6-1: Product: syz [ 210.931972][ T41] usb 6-1: Manufacturer: syz [ 210.937004][ T41] usb 6-1: SerialNumber: syz [ 211.034783][ T41] usb 6-1: config 0 descriptor?? [ 211.450940][ T7874] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 211.453760][ T7874] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 211.500276][ T7874] vhci_hcd vhci_hcd.0: Device attached [ 211.787659][ T29] usb 44-1: SetAddress Request (10) to port 0 [ 211.825198][ T29] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 211.849870][ T7888] ipt_rpfilter: unknown options [ 212.298985][ T7875] vhci_hcd: connection reset by peer [ 212.300997][ T5794] vhci_hcd vhci_hcd.3: stop threads [ 212.302712][ T5794] vhci_hcd vhci_hcd.3: release socket [ 212.306699][ T5794] vhci_hcd vhci_hcd.3: disconnect device [ 212.354380][ T41] usb 6-1: USB disconnect, device number 9 [ 212.577957][ T56] usb 38-1: device descriptor read/8, error -110 [ 212.678324][ T7902] netlink: 36 bytes leftover after parsing attributes in process `syz.0.375'. [ 212.978909][ T56] usb usb38-port1: attempt power cycle [ 213.309590][ T5851] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 213.490608][ T7915] netlink: 36 bytes leftover after parsing attributes in process `syz.0.387'. [ 213.507581][ T5851] usb 8-1: Using ep0 maxpacket: 32 [ 213.522252][ T5851] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 213.526555][ T5851] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 213.531781][ T5851] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 213.536658][ T5851] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 213.542709][ T5851] usb 8-1: config 0 interface 0 has no altsetting 0 [ 213.553013][ T56] usb usb38-port1: unable to enumerate USB device [ 213.565509][ T5851] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 213.570482][ T5851] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 213.576537][ T5851] usb 8-1: Product: syz [ 213.578515][ T5851] usb 8-1: Manufacturer: syz [ 213.581118][ T5851] usb 8-1: SerialNumber: syz [ 213.619655][ T5851] usb 8-1: config 0 descriptor?? [ 213.640217][ T5851] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 213.676062][ T5851] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 214.036448][ T50] usb 8-1: USB disconnect, device number 7 [ 214.048186][ T50] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 214.263185][ T7922] ipt_rpfilter: unknown options [ 215.757860][ T7941] ipt_rpfilter: unknown options [ 216.894850][ T29] usb 44-1: device descriptor read/8, error -110 [ 217.308005][ T56] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 217.331901][ T29] usb usb44-port1: attempt power cycle [ 217.597696][ T56] usb 8-1: Using ep0 maxpacket: 32 [ 218.074326][ T56] usb 8-1: config 0 has no interfaces? [ 218.502714][ T56] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 218.505634][ T29] usb usb44-port1: unable to enumerate USB device [ 218.512084][ T56] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 218.525737][ T56] usb 8-1: Product: syz [ 218.530828][ T56] usb 8-1: Manufacturer: syz [ 218.532371][ T56] usb 8-1: SerialNumber: syz [ 218.537334][ T56] usb 8-1: config 0 descriptor?? [ 218.927999][ T5843] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 219.079387][ T5843] usb 5-1: Using ep0 maxpacket: 32 [ 219.089919][ T5843] usb 5-1: config index 0 descriptor too short (expected 12827, got 27) [ 219.093748][ T5843] usb 5-1: config 32 has too many interfaces: 52, using maximum allowed: 32 [ 219.105677][ T5843] usb 5-1: config 32 has an invalid descriptor of length 107, skipping remainder of the config [ 219.113625][ T5843] usb 5-1: config 32 has 0 interfaces, different from the descriptor's value: 52 [ 219.163167][ T5843] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 219.167172][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 219.176832][ T5843] usb 5-1: Product: syz [ 219.193948][ T5843] usb 5-1: Manufacturer: syz [ 219.197124][ T5843] usb 5-1: SerialNumber: syz [ 219.784170][ T50] usb 8-1: USB disconnect, device number 8 [ 219.799197][ T5843] usb 5-1: USB disconnect, device number 9 [ 222.412587][ T8020] ipt_rpfilter: unknown options [ 222.668336][ T8027] ipt_rpfilter: unknown options [ 222.687114][ T8028] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 222.689932][ T8028] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 222.695073][ T8028] vhci_hcd vhci_hcd.0: Device attached [ 222.987940][ T56] usb 40-1: SetAddress Request (10) to port 0 [ 222.990015][ T56] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 223.034407][ T8030] vhci_hcd: connection reset by peer [ 223.041006][ T5794] vhci_hcd vhci_hcd.1: stop threads [ 223.043344][ T5794] vhci_hcd vhci_hcd.1: release socket [ 223.045337][ T5794] vhci_hcd vhci_hcd.1: disconnect device [ 223.167574][ T5829] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 223.317620][ T5829] usb 8-1: Using ep0 maxpacket: 8 [ 223.320889][ T5829] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 223.325340][ T5829] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 223.329096][ T5829] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.335951][ T5829] usb 8-1: config 0 descriptor?? [ 223.551959][ T5829] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 224.133949][ T8048] netlink: 'syz.1.402': attribute type 1 has an invalid length. [ 224.203752][ T5829] hid_parser_main: 73 callbacks suppressed [ 224.204267][ T5829] hid-generic 0000:0000:0000.0004: unknown main item tag 0x3 [ 224.223867][ T5829] hid-generic 0000:0000:0000.0004: unknown main item tag 0x3 [ 224.234549][ T5829] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 224.246104][ T5829] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 224.262071][ T5829] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 224.275327][ T5829] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 224.287324][ T5829] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 224.310697][ T5829] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 224.324828][ T5829] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 224.339438][ T5829] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 224.410135][ T8035] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 224.437356][ T5829] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.03 Device [syz1] on syz1 [ 224.512064][ T8058] fido_id[8058]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 224.537251][ T41] usb 8-1: USB disconnect, device number 9 [ 224.872155][ T8048] 8021q: adding VLAN 0 to HW filter on device bond6 [ 225.230369][ T8066] netlink: 24 bytes leftover after parsing attributes in process `syz.0.406'. [ 226.610830][ T8084] ipt_rpfilter: unknown options [ 227.526819][ T8095] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 227.529657][ T8095] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 227.535069][ T8095] vhci_hcd vhci_hcd.0: Device attached [ 227.817599][ T6658] usb 42-1: SetAddress Request (11) to port 0 [ 227.820915][ T6658] usb 42-1: new SuperSpeed USB device number 11 using vhci_hcd [ 228.139947][ T56] usb 40-1: device descriptor read/8, error -110 [ 228.277558][ T41] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 228.423067][ T8096] vhci_hcd: connection reset by peer [ 228.426696][ T6748] vhci_hcd vhci_hcd.2: stop threads [ 228.428560][ T6748] vhci_hcd vhci_hcd.2: release socket [ 228.432993][ T6748] vhci_hcd vhci_hcd.2: disconnect device [ 228.437652][ T41] usb 5-1: Using ep0 maxpacket: 8 [ 228.442927][ T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 228.449801][ T41] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 228.452527][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.460591][ T41] usb 5-1: config 0 descriptor?? [ 228.653082][ T56] usb usb40-port1: attempt power cycle [ 228.680988][ T41] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 228.837723][ T64] Bluetooth: hci2: unexpected event for opcode 0x201c [ 228.893405][ T8105] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 228.899673][ T5843] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.03 Device [syz1] on syz1 [ 228.916605][ T5843] usb 5-1: USB disconnect, device number 10 [ 228.941767][ T8114] fido_id[8114]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 229.062511][ T8118] ntfs3(nullb0): Primary boot signature is not NTFS. [ 229.064977][ T8118] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 229.098158][ T8116] netlink: 28 bytes leftover after parsing attributes in process `syz.3.417'. [ 229.250797][ T56] usb usb40-port1: unable to enumerate USB device [ 229.442239][ T8121] netlink: 'syz.2.418': attribute type 1 has an invalid length. [ 229.447281][ T8121] netlink: 756 bytes leftover after parsing attributes in process `syz.2.418'. [ 230.654271][ T8145] ipt_rpfilter: unknown options [ 231.087868][ T8154] fuse: Unknown parameter 'fd0x0000000000000005' [ 231.963251][ T8159] overlayfs: missing 'lowerdir' [ 232.272262][ T6748] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.280734][ T6748] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.290496][ T6748] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.297787][ T50] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 232.299705][ T6748] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.467543][ T50] usb 5-1: Using ep0 maxpacket: 8 [ 232.470897][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 232.474995][ T50] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 232.478549][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.488582][ T50] usb 5-1: config 0 descriptor?? [ 232.709463][ T50] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 232.925979][ T50] hid_parser_main: 146 callbacks suppressed [ 232.926001][ T50] hid-generic 0000:0000:0000.0006: unknown main item tag 0x3 [ 232.946887][ T50] hid-generic 0000:0000:0000.0006: unknown main item tag 0x3 [ 232.952723][ T8161] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 232.962420][ T50] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 232.970921][ T50] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 232.978290][ T50] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 232.986852][ T50] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 232.995263][ T50] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 232.998729][ T50] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 233.005661][ T50] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 233.011580][ T50] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 233.025383][ T50] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.03 Device [syz1] on syz1 [ 233.110628][ T8178] fido_id[8178]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 233.118919][ T5960] usb 5-1: USB disconnect, device number 11 [ 233.263637][ T6658] usb 42-1: device descriptor read/8, error -110 [ 233.598623][ T8183] ntfs3(nullb0): Primary boot signature is not NTFS. [ 233.602125][ T8183] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 233.832515][ T6658] usb usb42-port1: attempt power cycle [ 234.403074][ T8194] netlink: 'syz.3.432': attribute type 1 has an invalid length. [ 234.422471][ T6658] usb usb42-port1: unable to enumerate USB device [ 234.492617][ T8194] netlink: 756 bytes leftover after parsing attributes in process `syz.3.432'. [ 235.749362][ T8216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.441'. [ 235.765703][ T8216] input: syz1 as /devices/virtual/input/input15 [ 236.617571][ T41] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 236.767556][ T41] usb 8-1: Using ep0 maxpacket: 8 [ 236.771020][ T41] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 236.774686][ T41] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 236.777619][ T41] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.781721][ T41] usb 8-1: config 0 descriptor?? [ 236.992361][ T41] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 237.204806][ T8223] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 237.206705][ T50] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.03 Device [syz1] on syz1 [ 237.306954][ T5843] usb 8-1: USB disconnect, device number 10 [ 237.577578][ T8240] ipt_rpfilter: unknown options [ 238.362629][ T8249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.448'. [ 238.370458][ T8249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.448'. [ 238.574800][ T8255] fuse: Unknown parameter 'fd0x0000000000000005' [ 238.884025][ T8258] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 238.894069][ T8258] CIFS: Attempting to mount //127.0.0.1/share [ 239.370110][ T8258] CIFS: VFS: Error connecting to socket. Aborting operation. [ 239.373285][ T8258] CIFS: VFS: cifs_mount failed w/return code = -4 [ 239.516271][ T8269] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 239.956459][ T42] audit: type=1800 audit(1785409075.253:3): pid=8264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.449" name="bus" dev="ramfs" ino=18831 res=0 errno=0 [ 240.288682][ T8274] netlink: 20 bytes leftover after parsing attributes in process `syz.1.455'. [ 241.096017][ T8282] ipt_rpfilter: unknown options [ 242.603450][ T8298] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 244.389580][ T8319] netlink: 20 bytes leftover after parsing attributes in process `syz.1.466'. [ 245.571060][ T8335] ipt_rpfilter: unknown options [ 245.797299][ T8337] ipt_rpfilter: unknown options [ 246.362183][ T8340] pim6reg: entered allmulticast mode [ 246.369682][ T8342] netlink: 'syz.3.471': attribute type 1 has an invalid length. [ 246.373361][ T8340] pim6reg: left allmulticast mode [ 246.429223][ T8342] 8021q: adding VLAN 0 to HW filter on device bond2 [ 246.688511][ T8353] ipt_rpfilter: unknown options [ 246.809837][ T8342] bond2: (slave veth5): Enslaving as an active interface with a down link [ 246.837752][ T29] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 246.989105][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 246.999194][ T29] usb 8-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 247.019574][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.062614][ T29] usb 8-1: Product: syz [ 247.067085][ T29] usb 8-1: Manufacturer: syz [ 247.072025][ T29] usb 8-1: SerialNumber: syz [ 247.117166][ T29] usb 8-1: config 0 descriptor?? [ 247.145050][ T29] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 247.149257][ T29] pctv452e: pctv452e_power_ctrl: 1 [ 247.149257][ T29] [ 247.154018][ T29] usb 8-1: selecting invalid altsetting 3 [ 247.156629][ T29] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 247.156629][ T29] [ 247.186532][ T29] dvb-usb: bulk message failed: -22 (5/0) [ 247.348326][ T8342] dvb-usb: bulk message failed: -22 (7/0) [ 247.349818][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 247.350287][ T8342] pctv452e: I2C error -22; AA 01 12 00 00 -> aa 01 31 03 12 00 00 [ 247.356460][ T29] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 247.360656][ T29] usb 8-1: media controller created [ 247.360945][ T8342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.471'. [ 247.363159][ T29] dvb-usb: bulk message failed: -22 (8/0) [ 247.368604][ T29] pctv452e: I2C error -22; AA 02 A0 01 14 -> aa 02 31 04 a0 01 14 [ 247.380451][ T29] dvb-usb: MAC address reading failed. [ 247.485247][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 247.722384][ T29] DVB: Unable to find symbol stb0899_attach() [ 247.727659][ T29] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 247.867576][ T29] rc_core: IR keymap rc-tt-1500 not found [ 247.872325][ T29] Registered IR keymap rc-empty [ 247.881310][ T29] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 247.899225][ T29] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input16 [ 247.906657][ T29] dvb-usb: schedule remote query interval to 100 msecs. [ 247.914295][ T29] pctv452e: pctv452e_power_ctrl: 0 [ 247.914295][ T29] [ 247.918178][ T29] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 247.925008][ T29] usb 8-1: USB disconnect, device number 11 [ 248.023806][ T29] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 248.927365][ T8385] ipt_rpfilter: unknown options [ 249.032087][ T8387] fuse: Unknown parameter 'fd0x0000000000000005' [ 249.181005][ T8389] netlink: 'syz.0.488': attribute type 1 has an invalid length. [ 249.612366][ T8389] 8021q: adding VLAN 0 to HW filter on device bond3 [ 249.675830][ T8397] ipt_rpfilter: unknown options [ 249.727002][ T8401] overlayfs: missing 'lowerdir' [ 249.839300][ T8404] ipt_rpfilter: unknown options [ 249.971343][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.976322][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.983536][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.990879][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.880505][ T8431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.491'. [ 252.430360][ T64] Bluetooth: hci3: unexpected event for opcode 0x201c [ 252.532818][ T8438] fuse: Unknown parameter 'fd0x0000000000000005' [ 253.202957][ T8446] ipt_rpfilter: unknown options [ 253.554488][ T8451] netlink: 28 bytes leftover after parsing attributes in process `syz.2.495'. [ 254.181121][ T8462] ipt_rpfilter: unknown options [ 254.191803][ T8463] ipt_rpfilter: unknown options [ 255.213268][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.216867][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.588829][ T8479] ipt_rpfilter: unknown options [ 255.837720][ T41] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 255.957964][ T5843] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 256.013724][ T41] usb 7-1: Using ep0 maxpacket: 32 [ 256.034742][ T41] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 256.044685][ T41] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 256.065214][ T41] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 256.082401][ T41] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 256.101630][ T41] usb 7-1: config 0 interface 0 has no altsetting 0 [ 256.130088][ T41] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 256.132998][ T41] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 256.141175][ T41] usb 7-1: Product: syz [ 256.147664][ T41] usb 7-1: Manufacturer: syz [ 256.154926][ T41] usb 7-1: SerialNumber: syz [ 256.182473][ T8483] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 256.273824][ T41] usb 7-1: config 0 descriptor?? [ 256.406788][ T41] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 256.483150][ T41] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 256.592482][ T56] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 256.815136][ T5843] usb 7-1: USB disconnect, device number 6 [ 256.815210][ C3] ldusb 7-1:0.0: usb_submit_urb failed (-19) [ 256.834377][ T8478] ldusb 7-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 256.844380][ T8480] ldusb 7-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 256.852250][ T5843] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 257.388825][ T8525] ipt_rpfilter: unknown options [ 266.422827][ T8579] NILFS (loop3): device size too small [ 266.494085][ T8582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.545982][ T8583] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 266.548132][ T8583] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 266.560842][ T8583] vhci_hcd vhci_hcd.0: Device attached [ 266.589227][ T5843] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 266.595595][ T8583] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 266.749431][ T5843] usb 7-1: Using ep0 maxpacket: 8 [ 266.771423][ T5843] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 266.775155][ T5843] usb 7-1: config 179 has no interface number 0 [ 266.782387][ T5843] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 266.790398][ T5843] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 266.794507][ T5843] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 266.806386][ T5843] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 266.813681][ T5843] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 266.822009][ T5843] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 266.825558][ T5843] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.837681][ T6658] usb 40-1: SetAddress Request (14) to port 0 [ 266.841927][ T6658] usb 40-1: new SuperSpeed USB device number 14 using vhci_hcd [ 266.877356][ T8573] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 267.191589][ T8584] vhci_hcd: connection reset by peer [ 267.195968][ T13] vhci_hcd vhci_hcd.1: stop threads [ 267.200359][ T13] vhci_hcd vhci_hcd.1: release socket [ 267.204518][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 267.477207][ T8593] ipt_rpfilter: unknown options [ 267.982774][ T41] usb 7-1: USB disconnect, device number 7 [ 267.982775][ C2] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 267.982798][ C2] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 267.984114][ C2] ================================================================== [ 267.984124][ C2] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23b/0x260 [ 267.984143][ C2] Read of size 4 at addr ffff88801e81585c by task swapper/2/0 [ 267.984151][ C2] [ 267.984159][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Not tainted syzkaller #0 PREEMPT(full) [ 267.984171][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 267.984178][ C2] Call Trace: [ 267.984182][ C2] [ 267.984187][ C2] dump_stack_lvl+0x100/0x190 [ 267.984200][ C2] print_report+0x13d/0x4b0 [ 267.984216][ C2] ? __virt_addr_valid+0x239/0x430 [ 267.984228][ C2] ? do_raw_spin_lock+0x23b/0x260 [ 267.984240][ C2] kasan_report+0xdf/0x1c0 [ 267.984256][ C2] ? do_raw_spin_lock+0x23b/0x260 [ 267.984268][ C2] do_raw_spin_lock+0x23b/0x260 [ 267.984280][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 267.984292][ C2] ? kcov_remote_stop+0x201/0x540 [ 267.984308][ C2] ? kcov_remote_stop+0x201/0x540 [ 267.984323][ C2] _raw_spin_lock_irqsave+0x42/0x60 [ 267.984349][ C2] ? __wake_up+0x1c/0x60 [ 267.984363][ C2] __wake_up+0x1c/0x60 [ 267.984377][ C2] usb_anchor_resume_wakeups+0xc7/0xf0 [ 267.984413][ C2] __usb_hcd_giveback_urb+0x3d6/0x610 [ 267.984432][ C2] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 267.984449][ C2] dummy_timer+0xdb2/0x36f0 [ 267.984474][ C2] ? find_held_lock+0x2b/0x80 [ 267.984488][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 267.984547][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 267.984564][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 267.984576][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 267.984591][ C2] ? __pfx_debug_object_deactivate+0x10/0x10 [ 267.984608][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 267.984619][ C2] ? rcu_is_watching+0x12/0xc0 [ 267.984631][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 267.984643][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 267.984653][ C2] __hrtimer_run_queues+0x462/0x9c0 [ 267.984669][ C2] hrtimer_run_softirq+0x17d/0x2c0 [ 267.984687][ C2] handle_softirqs+0x1ea/0x9b0 [ 267.984700][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 267.984712][ C2] ? _raw_spin_unlock+0x28/0x50 [ 267.984722][ C2] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 267.984737][ C2] __irq_exit_rcu+0x162/0x210 [ 267.984748][ C2] irq_exit_rcu+0x9/0x30 [ 267.984759][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 267.984773][ C2] [ 267.984777][ C2] [ 267.984780][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 267.984793][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 267.984807][ C2] Code: 76 8e 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d e3 2d 13 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 267.984818][ C2] RSP: 0000:ffffc9000047fe00 EFLAGS: 00000202 [ 267.984828][ C2] RAX: 0000000000672857 RBX: ffff88801c7fca80 RCX: ffffffff8bb872d5 [ 267.984836][ C2] RDX: 0000000000000000 RSI: ffffffff8e1a87c3 RDI: ffffffff8c400a80 [ 267.984843][ C2] RBP: ffffed10038ff950 R08: 0000000000000001 R09: ffffed100568678d [ 267.984849][ C2] R10: ffff88802b433c6b R11: 0000000000000000 R12: 0000000000000000 [ 267.984856][ C2] R13: 0000000000000000 R14: 1ffff9200008ffc4 R15: dffffc0000000000 [ 267.984864][ C2] ? ct_kernel_exit+0x125/0x180 [ 267.984879][ C2] default_idle+0x9/0x10 [ 267.984892][ C2] default_idle_call+0x6c/0xb0 [ 267.984906][ C2] do_idle+0x3a7/0x5b0 [ 267.984917][ C2] ? __pfx_do_idle+0x10/0x10 [ 267.984928][ C2] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 267.984942][ C2] cpu_startup_entry+0x4f/0x60 [ 267.984954][ C2] start_secondary+0x21d/0x2d0 [ 267.984967][ C2] ? __pfx_start_secondary+0x10/0x10 [ 267.984980][ C2] common_startup_64+0x13e/0x158 [ 267.984999][ C2] [ 267.985003][ C2] [ 267.985006][ C2] Allocated by task 5843: [ 267.985011][ C2] kasan_save_stack+0x30/0x50 [ 267.985024][ C2] kasan_save_track+0x14/0x30 [ 267.985036][ C2] __kasan_kmalloc+0xaa/0xb0 [ 267.985048][ C2] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 267.985059][ C2] xpad_probe+0x28e/0x1f60 [ 267.985100][ C2] usb_probe_interface+0x303/0x8f0 [ 267.985122][ C2] really_probe+0x241/0xa60 [ 267.985149][ C2] __driver_probe_device+0x20e/0x450 [ 267.985170][ C2] driver_probe_device+0x4a/0x140 [ 267.985192][ C2] __device_attach_driver+0x1df/0x320 [ 267.985215][ C2] bus_for_each_drv+0x159/0x1e0 [ 267.985232][ C2] __device_attach+0x1e4/0x4d0 [ 267.985255][ C2] device_initial_probe+0xaf/0xd0 [ 267.985277][ C2] bus_probe_device+0x64/0x160 [ 267.985297][ C2] device_add+0x121d/0x1970 [ 267.985321][ C2] usb_set_configuration+0xd97/0x1c60 [ 267.985344][ C2] usb_generic_driver_probe+0xa1/0xe0 [ 267.985364][ C2] usb_probe_device+0xef/0x400 [ 267.985387][ C2] really_probe+0x241/0xa60 [ 267.985408][ C2] __driver_probe_device+0x20e/0x450 [ 267.985430][ C2] driver_probe_device+0x4a/0x140 [ 267.985452][ C2] __device_attach_driver+0x1df/0x320 [ 267.985474][ C2] bus_for_each_drv+0x159/0x1e0 [ 267.985491][ C2] __device_attach+0x1e4/0x4d0 [ 267.985508][ C2] device_initial_probe+0xaf/0xd0 [ 267.985522][ C2] bus_probe_device+0x64/0x160 [ 267.985534][ C2] device_add+0x121d/0x1970 [ 267.985549][ C2] usb_new_device.cold+0x685/0x115c [ 267.985561][ C2] hub_event+0x30a3/0x4a60 [ 267.985574][ C2] process_one_work+0xa23/0x1940 [ 267.985589][ C2] worker_thread+0x5ef/0xe50 [ 267.985603][ C2] kthread+0x370/0x450 [ 267.985616][ C2] ret_from_fork+0x72b/0xd50 [ 267.985628][ C2] ret_from_fork_asm+0x1a/0x30 [ 267.985641][ C2] [ 267.985644][ C2] Freed by task 41: [ 267.985649][ C2] kasan_save_stack+0x30/0x50 [ 267.985661][ C2] kasan_save_track+0x14/0x30 [ 267.985679][ C2] kasan_save_free_info+0x3b/0x70 [ 267.985689][ C2] __kasan_slab_free+0x5f/0x80 [ 267.985702][ C2] kfree+0x22b/0x6c0 [ 267.985711][ C2] xpad_disconnect+0x1cf/0x530 [ 267.985722][ C2] usb_unbind_interface+0x1dd/0x9e0 [ 267.985737][ C2] device_remove+0x12a/0x180 [ 267.985749][ C2] device_release_driver_internal+0x44e/0x620 [ 267.985765][ C2] bus_remove_device+0x2bc/0x560 [ 267.985777][ C2] device_del+0x376/0x9b0 [ 267.985789][ C2] usb_disable_device+0x367/0x810 [ 267.985802][ C2] usb_disconnect+0x2e2/0x9a0 [ 267.985814][ C2] hub_event+0x1c4f/0x4a60 [ 267.985827][ C2] process_one_work+0xa23/0x1940 [ 267.985841][ C2] worker_thread+0x5ef/0xe50 [ 267.985855][ C2] kthread+0x370/0x450 [ 267.985868][ C2] ret_from_fork+0x72b/0xd50 [ 267.985879][ C2] ret_from_fork_asm+0x1a/0x30 [ 267.985892][ C2] [ 267.985895][ C2] The buggy address belongs to the object at ffff88801e815800 [ 267.985895][ C2] which belongs to the cache kmalloc-1k of size 1024 [ 267.985904][ C2] The buggy address is located 92 bytes inside of [ 267.985904][ C2] freed 1024-byte region [ffff88801e815800, ffff88801e815c00) [ 267.985914][ C2] [ 267.985917][ C2] The buggy address belongs to the physical page: [ 267.985923][ C2] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1e810 [ 267.985933][ C2] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 267.985942][ C2] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 267.985952][ C2] page_type: f5(slab) [ 267.985961][ C2] raw: 00fff00000000040 ffff88801bc42dc0 dead000000000100 dead000000000122 [ 267.985972][ C2] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 267.985982][ C2] head: 00fff00000000040 ffff88801bc42dc0 dead000000000100 dead000000000122 [ 267.985991][ C2] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 267.986001][ C2] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 267.986010][ C2] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 267.986016][ C2] page dumped because: kasan: bad access detected [ 267.986023][ C2] page_owner tracks the page as allocated [ 267.986026][ C2] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5828, tgid 5828 (kworker/0:3), ts 48598591342, free_ts 48576479205 [ 267.986046][ C2] post_alloc_hook+0xfd/0x120 [ 267.986056][ C2] get_page_from_freelist+0xf48/0x3530 [ 267.986068][ C2] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 267.986079][ C2] new_slab+0xa2/0x640 [ 267.986088][ C2] refill_objects+0xe3/0x410 [ 267.986098][ C2] __pcs_replace_empty_main+0x376/0x680 [ 267.986109][ C2] __kmalloc_noprof+0x66d/0x820 [ 267.986120][ C2] ___neigh_create+0x1532/0x2940 [ 267.986147][ C2] ip6_finish_output2+0xffa/0x1ce0 [ 267.986174][ C2] __ip6_finish_output+0x357/0xdf0 [ 267.986187][ C2] ip6_output+0x2aa/0xa60 [ 267.986199][ C2] NF_HOOK.constprop.0+0x115/0x5a0 [ 267.986215][ C2] mld_sendpack+0x8f7/0xec0 [ 267.986227][ C2] mld_ifc_work+0x75a/0xc10 [ 267.986241][ C2] process_one_work+0xa23/0x1940 [ 267.986255][ C2] worker_thread+0x5ef/0xe50 [ 267.986269][ C2] page last free pid 1277 tgid 1277 stack trace: [ 267.986276][ C2] __free_frozen_pages+0x79f/0x1090 [ 267.986292][ C2] qlist_free_all+0x47/0xf0 [ 267.986303][ C2] kasan_quarantine_reduce+0x1a0/0x1f0 [ 267.986315][ C2] __kasan_slab_alloc+0x69/0x90 [ 267.986328][ C2] __kmalloc_cache_noprof+0x265/0x6c0 [ 267.986338][ C2] ipv6_add_addr+0x536/0x1fb0 [ 267.986348][ C2] addrconf_add_linklocal+0x2a5/0x500 [ 267.986359][ C2] addrconf_addr_gen+0x364/0x3b0 [ 267.986370][ C2] addrconf_init_auto_addrs+0x1cb/0x780 [ 267.986382][ C2] addrconf_notify+0xa10/0x1ba0 [ 267.986395][ C2] notifier_call_chain+0x99/0x3f0 [ 267.986408][ C2] call_netdevice_notifiers_info+0xbe/0x110 [ 267.986426][ C2] netif_state_change+0x165/0x380 [ 267.986441][ C2] linkwatch_do_dev+0xe0/0x120 [ 267.986452][ C2] __linkwatch_run_queue+0x3a9/0x900 [ 267.986462][ C2] linkwatch_event+0x8f/0xc0 [ 267.986472][ C2] [ 267.986475][ C2] Memory state around the buggy address: [ 267.986480][ C2] ffff88801e815700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 267.986487][ C2] ffff88801e815780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 267.986495][ C2] >ffff88801e815800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 267.986501][ C2] ^ [ 267.986507][ C2] ffff88801e815880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 267.986514][ C2] ffff88801e815900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 267.986520][ C2] ================================================================== [ 267.986526][ C2] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 267.986534][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Not tainted syzkaller #0 PREEMPT(full) [ 267.986546][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 267.986553][ C2] Call Trace: [ 267.986556][ C2] [ 267.986560][ C2] dump_stack_lvl+0x100/0x190 [ 267.986572][ C2] vpanic+0x552/0x970 [ 267.986583][ C2] ? __pfx_vpanic+0x10/0x10 [ 267.986593][ C2] ? __pfx_vprintk_emit+0x10/0x10 [ 267.986608][ C2] ? do_raw_spin_lock+0x23b/0x260 [ 267.986619][ C2] panic+0xd1/0xe0 [ 267.986629][ C2] ? __pfx_panic+0x10/0x10 [ 267.986640][ C2] ? end_report.part.0+0x23/0x90 [ 267.986655][ C2] ? rcu_is_watching+0x12/0xc0 [ 267.986667][ C2] ? end_report.part.0+0x23/0x90 [ 267.986686][ C2] ? check_panic_on_warn+0x1f/0x90 [ 267.986703][ C2] check_panic_on_warn.cold+0x19/0x34 [ 267.986715][ C2] end_report.part.0+0x3a/0x90 [ 267.986730][ C2] kasan_report.cold+0xe/0x18 [ 267.986745][ C2] ? do_raw_spin_lock+0x23b/0x260 [ 267.986758][ C2] do_raw_spin_lock+0x23b/0x260 [ 267.986770][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 267.986785][ C2] ? kcov_remote_stop+0x201/0x540 [ 267.986809][ C2] ? kcov_remote_stop+0x201/0x540 [ 267.986829][ C2] _raw_spin_lock_irqsave+0x42/0x60 [ 267.986840][ C2] ? __wake_up+0x1c/0x60 [ 267.986854][ C2] __wake_up+0x1c/0x60 [ 267.986868][ C2] usb_anchor_resume_wakeups+0xc7/0xf0 [ 267.986881][ C2] __usb_hcd_giveback_urb+0x3d6/0x610 [ 267.986899][ C2] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 267.986917][ C2] dummy_timer+0xdb2/0x36f0 [ 267.986929][ C2] ? find_held_lock+0x2b/0x80 [ 267.986942][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 267.986958][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 267.986975][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 267.986987][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 267.987003][ C2] ? __pfx_debug_object_deactivate+0x10/0x10 [ 267.987019][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 267.987030][ C2] ? rcu_is_watching+0x12/0xc0 [ 267.987043][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 267.987055][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 267.987066][ C2] __hrtimer_run_queues+0x462/0x9c0 [ 267.987081][ C2] hrtimer_run_softirq+0x17d/0x2c0 [ 267.987095][ C2] handle_softirqs+0x1ea/0x9b0 [ 267.987107][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 267.987119][ C2] ? _raw_spin_unlock+0x28/0x50 [ 267.987130][ C2] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 267.987145][ C2] __irq_exit_rcu+0x162/0x210 [ 267.987156][ C2] irq_exit_rcu+0x9/0x30 [ 267.987168][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 267.987180][ C2] [ 267.987184][ C2] [ 267.987188][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 267.987200][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 267.987213][ C2] Code: 76 8e 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d e3 2d 13 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 267.987224][ C2] RSP: 0000:ffffc9000047fe00 EFLAGS: 00000202 [ 267.987233][ C2] RAX: 0000000000672857 RBX: ffff88801c7fca80 RCX: ffffffff8bb872d5 [ 267.987240][ C2] RDX: 0000000000000000 RSI: ffffffff8e1a87c3 RDI: ffffffff8c400a80 [ 267.987248][ C2] RBP: ffffed10038ff950 R08: 0000000000000001 R09: ffffed100568678d [ 267.987255][ C2] R10: ffff88802b433c6b R11: 0000000000000000 R12: 0000000000000000 [ 267.987262][ C2] R13: 0000000000000000 R14: 1ffff9200008ffc4 R15: dffffc0000000000 [ 267.987270][ C2] ? ct_kernel_exit+0x125/0x180 [ 267.987285][ C2] default_idle+0x9/0x10 [ 267.987298][ C2] default_idle_call+0x6c/0xb0 [ 267.987312][ C2] do_idle+0x3a7/0x5b0 [ 267.987324][ C2] ? __pfx_do_idle+0x10/0x10 [ 267.987335][ C2] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 267.987349][ C2] cpu_startup_entry+0x4f/0x60 [ 267.987361][ C2] start_secondary+0x21d/0x2d0 [ 267.987373][ C2] ? __pfx_start_secondary+0x10/0x10 [ 267.987387][ C2] common_startup_64+0x13e/0x158 [ 267.987405][ C2] [ 267.988026][ C2] Kernel Offset: disabled VM DIAGNOSIS: 10:58:24 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81adb5c3 RDX=ffff888022a84a80 RSI=ffffffff81adb60b RDI=ffffffff9468ee00 RBP=0000000000000000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff28d1dc0 R10=ffffffff9468ee07 R11=ffffc90000007ff8 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81adb60c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096be3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000033c17ff8 CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000037000000000 0000000b00000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81adb5c3 RDX=ffff88801c742540 RSI=ffffffff81adb60b RDI=ffffffff9468ee00 RBP=0000000000000000 RSP=ffffc90000590fd0 R8 =0000000000000001 R9 =fffffbfff28d1dc0 R10=ffffffff9468ee07 R11=ffffc90000590ff8 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81adb60c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ce3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000033c1aff8 CR3=0000000070ff7000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000012800000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a129e5 RDI=ffffffff9b9f31a0 RBP=ffffffff9b9f3160 RSP=ffffc90000538560 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b6f31f6 R15=ffffffff85a12980 RIP=ffffffff85a12a0f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096de3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000800a7018 CR3=000000004c855000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000012800000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81adb5c3 RDX=ffff8880231b4a80 RSI=ffffffff81adb60b RDI=ffffffff9468ee00 RBP=0000000000000000 RSP=ffffc900005e8fd0 R8 =0000000000000001 R9 =fffffbfff28d1dc0 R10=ffffffff9468ee07 R11=ffffc900005e8ff8 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81adb60c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f21cbd40880 ffffffff 00c00000 GS =0000 ffff888096ee3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005611ce40df18 CR3=000000006fbd2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000000000 Opmask02=00000000bfdfdfdf Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd510736f0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005611ce3dece0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005611ce3f67e0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0000ff000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffff00ff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffff0000000000ff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2b18c1a7a8c55851 73732567dc51060f ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737342 73732562bd4c8e73 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 322e6364755f796d 6d75642f6364752f 322e6364755f796d 6d75642f6d726f66 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 586bb2d4dbb62b22 00005614af23d21f 0000000000000261 0000000000000032 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 003a6166703a756b 733a302e30312d35 33712d6370727663 3a3174633a554d45 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 516e76633a302e30 312d3533712d6370 7276703a29393030 322c394843492b35 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3351284350647261 646e6174536e703a 554d45516e76733a 302e3072623a3431 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000