last executing test programs: 18.916745996s ago: executing program 0 (id=1070): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdir(0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) socket(0x40000000002, 0x3, 0x6) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) umount2(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100)=0x2) ioctl$PPPIOCGNPMODE(r5, 0xc008744c, 0x0) 17.225619652s ago: executing program 0 (id=1074): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x48054}, 0x20044806) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) ioctl$IOC_PR_PREEMPT(r5, 0x401870cb, &(0x7f0000000800)={0x3000000000000000, 0x40e, 0x6, 0x3}) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x7}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1ff}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\x86\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000", @ANYRES32, @ANYBLOB="0000000000000000000094b4f562defb5f7756b4cbf5a6d7563c5ac743a2ccb509f77b40dee5bad90c6573030da19ef59bae484332d88c609d30248a44a69cc56623a061439a1dc47a295d5a43429071b408dba7cc7061b052d1a2f3d10824d6fb361906efef7904a738902f10f4662b1849de", @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="ff0c0000000c0000000700000005000000"], 0x0, 0x2b, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xb, 0x6, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) open(&(0x7f0000000280)='.\x00', 0x800, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, 0x0, 0x0) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 12.712228405s ago: executing program 3 (id=1080): socket$kcm(0x10, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4e2d8157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"000000000000000000006f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x32, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(r0, &(0x7f0000000380)='net/rt_acct\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r5) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) r6 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x2f4, @empty}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000400)={{0x1, 0x1, 0x18, r3}, './file0/file0\x00'}) 12.710107198s ago: executing program 1 (id=1088): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x0, 0x0, &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0xc, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) io_submit(r1, 0x1a, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x1a000}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 11.639688161s ago: executing program 3 (id=1082): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x0, 0x0, &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0xc, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) io_submit(r1, 0x1a, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x1a000}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 11.571662525s ago: executing program 1 (id=1083): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdir(0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) socket(0x40000000002, 0x3, 0x6) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) umount2(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100)=0x2) ioctl$PPPIOCGNPMODE(r5, 0xc008744c, 0x0) 10.750720741s ago: executing program 3 (id=1085): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xf8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xf8}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x18}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x400, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0x6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, 0x0, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r5, 0x0, 0x0, 0x811) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e06bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b27663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3800000000000000009c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488a0200000000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e4a59414329a7c7f2fad6bc871f5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561fe589e0d12969bc982ff3f0000006c0c6c747d9a1cc500bb89283a16ff10feea20bdac0000000000000000ca06f256a55591019465f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ee40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a3dc4e97f7fda840bcdd3afaa0d7c3c229de4f0f4ac4d04f1a4e52e38325ca2e5f1f9caaa7234053eca09ec3c8c16940bc3edfb2e016f355391c0e7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) 10.510807761s ago: executing program 1 (id=1086): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020011b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) capget(&(0x7f0000000400)={0x20071026, r0}, &(0x7f0000000440)={0xd, 0x0, 0xffffffff, 0x400, 0x7b0, 0x9}) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r5, 0xc044560f, &(0x7f0000000080)=@multiplanar_mmap={0x17ed, 0x0, 0x4, 0x1, 0x7, {}, {0x5, 0x2, 0x3, 0x7e, 0x10, 0x4a, "b5fda662"}, 0xc8, 0x1, {&(0x7f0000000540)=[{0xe5, 0x3, {0x100}, 0xc}, {0x3, 0x3, {0x1}, 0xf5}]}, 0x69e0, 0x0, r4}) get_robust_list(r0, 0x0, &(0x7f0000000500)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r7 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0x7005, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_process_wait\x00', r6}, 0x18) 9.94514426s ago: executing program 0 (id=1087): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b37, &(0x7f0000000000)={'wlan1\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x38, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r6, 0x1000006) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x1000000}) 9.39124183s ago: executing program 2 (id=1089): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x0, 0x0, &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0xc, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) io_submit(r1, 0x1a, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x1a000}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 9.073366748s ago: executing program 3 (id=1090): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x0, 0x8, 0x8000, 0x4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) openat$rdma_cm(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) r4 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file2\x00', 0x8, 0xdfcd) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000960) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 8.368811481s ago: executing program 1 (id=1091): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file1\x00', 0x0, 0x121889c, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x40000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000080)={0x2, 0x32314742, 0x2, @discrete={0x7, 0xbe78}}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r8}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) 8.173340503s ago: executing program 2 (id=1092): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020011b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) capget(&(0x7f0000000400)={0x20071026, r0}, &(0x7f0000000440)={0xd, 0x0, 0xffffffff, 0x400, 0x7b0, 0x9}) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r5, 0xc044560f, &(0x7f0000000080)=@multiplanar_mmap={0x17ed, 0x0, 0x4, 0x1, 0x7, {}, {0x5, 0x2, 0x3, 0x7e, 0x10, 0x4a, "b5fda662"}, 0xc8, 0x1, {&(0x7f0000000540)=[{0xe5, 0x3, {0x100}, 0xc}, {0x3, 0x3, {0x1}, 0xf5}]}, 0x69e0, 0x0, r4}) get_robust_list(r0, 0x0, &(0x7f0000000500)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r7 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0x7005, 0x0) readv(r7, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_process_wait\x00', r6}, 0x18) 6.14423838s ago: executing program 0 (id=1093): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000000094b4f562defb5f7756b4cbf5a6d7563c5ac743a2ccb509f77b40dee5bad90c6573030da19ef59bae484332d88c609d30248a44a69cc56623a061439a1dc47a295d5a43429071b408dba7cc7061b052d1a2f3d10824d6fb361906efef7904a738902f10f4662b1849de", @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="ff0c0000000c0000000700000005000000000000060400000000400000006100000000000000"], 0x0, 0x2b, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xb, 0x6, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r3}, 0x38) open(&(0x7f0000000280)='.\x00', 0x800, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ocfs2_control(0xffffff9c, &(0x7f0000000000), 0x80, 0x0) 5.640095858s ago: executing program 2 (id=1094): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020011b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) capget(&(0x7f0000000400)={0x20071026, r0}, &(0x7f0000000440)={0xd, 0x0, 0xffffffff, 0x400, 0x7b0, 0x9}) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r5, 0xc044560f, &(0x7f0000000080)=@multiplanar_mmap={0x17ed, 0x0, 0x4, 0x1, 0x7, {}, {0x5, 0x2, 0x3, 0x7e, 0x10, 0x4a, "b5fda662"}, 0xc8, 0x1, {&(0x7f0000000540)=[{0xe5, 0x3, {0x100}, 0xc}, {0x3, 0x3, {0x1}, 0xf5}]}, 0x69e0, 0x0, r4}) get_robust_list(r0, 0x0, &(0x7f0000000500)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r7 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0x7005, 0x0) readv(r7, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_process_wait\x00', r6}, 0x18) 3.618004772s ago: executing program 1 (id=1095): ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, &(0x7f0000000100)={@default, @default, @null, 0x63, 0xffffffffffff0001, 0x1, [@default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @broadcast}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000640)=""/212, 0xd4}], 0x1, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{0x0}], 0x1, 0x0, 0x0, 0xc9e}, 0x25000000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x1020, @remote}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 3.481411407s ago: executing program 0 (id=1096): socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0), 0x2000000, &(0x7f00000001c0)={'trans=tcp,', {'port', 0x3d, 0x4e1e}, 0x2c, {[{@msize={'msize', 0x3d, 0x10000}}]}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000006800010000000000000000000a00000000000000599e0213c5dfa40188d2fb545284b7f51520a4757eb5d640d6445ec0544bdb5c39ee8b8d0c16f9434f9fdf9ef33dab6f8d0c492718e5f56b9e00e919f62028f2286c8e860a0b6027946315b3b7e7e143e0ab779afae5674182c75624e48d086b4ba53c6e3a63bf5204d823554d75"], 0x18}}, 0x20001000) shutdown(r1, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$BTRFS_IOC_SEND(r2, 0x40449426, &(0x7f0000000440)={{r3}, 0x4, &(0x7f0000000400)=[0x3, 0x0, 0x5, 0x0], 0x29db, 0xc}) r4 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x2, 0x336, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r7, r8, 0x8f5, 0x0) r9 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) r10 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r11 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r11, 0x800442d2, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, @local}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) 3.164043836s ago: executing program 3 (id=1097): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000000094b4f562defb5f7756b4cbf5a6d7563c5ac743a2ccb509f77b40dee5bad90c6573030da19ef59bae484332d88c609d30248a44a69cc56623a061439a1dc47a295d5a43429071b408dba7cc7061b052d1a2f3d10824d6fb361906efef7904a738902f10f4662b1849de", @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="ff0c0000000c0000000700000005000000000000060400000000400000006100000000000000"], 0x0, 0x2b, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xb, 0x6, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r3}, 0x38) open(&(0x7f0000000280)='.\x00', 0x800, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ocfs2_control(0xffffff9c, &(0x7f0000000000), 0x80, 0x0) 3.060486152s ago: executing program 2 (id=1098): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, &(0x7f0000000100)) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x406, 0x0) syz_io_uring_setup(0xc97, &(0x7f0000000700)={0x0, 0x6015, 0x800, 0xff7fffff, 0x11c}, &(0x7f00000003c0), &(0x7f0000000140)) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) rt_sigqueueinfo(0x0, 0x28, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xc, r4, 0x1, &(0x7f00000003c0)) getsockopt$inet6_int(r3, 0x29, 0x3, 0x0, &(0x7f00000000c0)) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xffe3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x44084) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r5) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 1.947983727s ago: executing program 2 (id=1099): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) capset(&(0x7f0000000100)={0x20071026}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) capget(&(0x7f0000000400)={0x20071026, r0}, &(0x7f0000000440)={0xd, 0x0, 0xffffffff, 0x400, 0x7b0, 0x9}) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r5, 0xc044560f, &(0x7f0000000080)=@multiplanar_mmap={0x17ed, 0x0, 0x4, 0x1, 0x7, {}, {0x5, 0x2, 0x3, 0x7e, 0x10, 0x4a, "b5fda662"}, 0xc8, 0x1, {&(0x7f0000000540)=[{0xe5, 0x3, {0x100}, 0xc}, {0x3, 0x3, {0x1}, 0xf5}]}, 0x69e0, 0x0, r4}) get_robust_list(r0, 0x0, &(0x7f0000000500)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r7 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0x7005, 0x0) readv(r7, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_process_wait\x00', r6}, 0x18) 1.251216469s ago: executing program 3 (id=1100): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = fsopen(&(0x7f0000000200)='affs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f00000000c0)='%(:2', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000280)={0x3, 0x7}, 0x4) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000000400)=""/4096, 0x1000) 945.096356ms ago: executing program 1 (id=1101): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020011b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) capget(&(0x7f0000000400)={0x20071026, r0}, &(0x7f0000000440)={0xd, 0x0, 0xffffffff, 0x400, 0x7b0, 0x9}) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r5, 0xc044560f, &(0x7f0000000080)=@multiplanar_mmap={0x17ed, 0x0, 0x4, 0x1, 0x7, {}, {0x5, 0x2, 0x3, 0x7e, 0x10, 0x4a, "b5fda662"}, 0xc8, 0x1, {&(0x7f0000000540)=[{0xe5, 0x3, {0x100}, 0xc}, {0x3, 0x3, {0x1}, 0xf5}]}, 0x69e0, 0x0, r4}) get_robust_list(r0, 0x0, &(0x7f0000000500)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r7 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0x7005, 0x0) readv(r7, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_process_wait\x00', r6}, 0x18) 0s ago: executing program 2 (id=1102): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdir(0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) socket(0x40000000002, 0x3, 0x6) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) umount2(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100)=0x2) ioctl$PPPIOCGNPMODE(r5, 0xc008744c, 0x0) kernel console output (not intermixed with test programs): lo speed is unknown, defaulting to 1000 [ 178.289254][ T34] syz0: Port: 1 Link DOWN [ 178.293740][ T60] libceph: connect (1)[c::]:6789 error -101 [ 178.296259][ T60] libceph: mon0 (1)[c::]:6789 connect error [ 178.340634][ T7418] ceph: No mds server is up or the cluster is laggy [ 178.350848][ T7419] vxfs: WRONG superblock magic 00000000 at 1 [ 178.353946][ T7419] vxfs: WRONG superblock magic 00000000 at 8 [ 178.356516][ T7419] vxfs: can't find superblock. [ 178.450072][ T46] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.455850][ T1153] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.459419][ T1153] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.468080][ T1153] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.493686][ T7405] vhci_hcd: connection reset by peer [ 178.498258][ T1153] vhci_hcd vhci_hcd.1: stop threads [ 178.500229][ T1153] vhci_hcd vhci_hcd.1: release socket [ 178.502195][ T1153] vhci_hcd vhci_hcd.1: disconnect device [ 178.706444][ T7431] tipc: Can't bind to reserved service type 0 [ 180.165518][ T7449] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 180.168344][ T7449] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 180.172480][ T7449] vhci_hcd vhci_hcd.0: Device attached [ 180.175160][ T7451] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 180.471338][ T6210] usb 44-1: SetAddress Request (19) to port 0 [ 180.475919][ T6210] usb 44-1: new SuperSpeed USB device number 19 using vhci_hcd [ 180.711766][ T7452] vhci_hcd: connection reset by peer [ 180.732017][ T61] vhci_hcd vhci_hcd.3: stop threads [ 180.734286][ T61] vhci_hcd vhci_hcd.3: release socket [ 180.741594][ T61] vhci_hcd vhci_hcd.3: disconnect device [ 181.123295][ T7460] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 181.321150][ T9] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 181.923536][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 181.926305][ T9] usb 6-1: config 0 has no interface number 0 [ 181.928472][ T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 181.936518][ T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 181.940165][ T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 181.943500][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.976291][ T9] usb 6-1: config 0 descriptor?? [ 181.989712][ T7459] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 181.998739][ T9] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 182.208582][ T7459] Bluetooth: MGMT ver 1.23 [ 182.217593][ T6038] usb 6-1: USB disconnect, device number 2 [ 182.219925][ C2] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 182.774141][ T7480] overlay: ./file1 is not a directory [ 182.811095][ T60] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 182.921459][ T6038] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 183.061052][ T60] usb 7-1: Using ep0 maxpacket: 8 [ 183.063892][ T60] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 183.067050][ T60] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 183.070151][ T60] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 183.075788][ T60] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.080118][ T60] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 183.084874][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.241179][ T5962] usb 40-1: device descriptor read/8, error -110 [ 183.291924][ T7493] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 183.293937][ T7493] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 183.297272][ T7493] vhci_hcd vhci_hcd.0: Device attached [ 183.482244][ T60] usb 7-1: GET_CAPABILITIES returned 0 [ 183.485386][ T60] usbtmc 7-1:16.0: can't read capabilities [ 183.673356][ T5962] usb usb40-port1: attempt power cycle [ 183.684647][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.421163][ T7494] vhci_hcd: connection closed [ 184.424012][ T46] vhci_hcd vhci_hcd.3: stop threads [ 184.429931][ T46] vhci_hcd vhci_hcd.3: release socket [ 184.438132][ T46] vhci_hcd vhci_hcd.3: disconnect device [ 184.602399][ T5962] usb usb40-port1: unable to enumerate USB device [ 185.010836][ T60] libceph: connect (1)[c::]:6789 error -101 [ 185.013282][ T60] libceph: mon0 (1)[c::]:6789 connect error [ 185.062705][ T7526] ceph: No mds server is up or the cluster is laggy [ 185.089122][ T7529] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 185.511565][ T5962] usb 7-1: USB disconnect, device number 7 [ 185.561127][ T6210] usb 44-1: device descriptor read/8, error -110 [ 185.968244][ T7547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.242'. [ 186.557577][ T5962] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 186.665741][ T7547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.671873][ T7547] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.674569][ T7547] tipc: Resetting bearer [ 186.676812][ T7547] tipc: Resetting bearer [ 186.677395][ T6210] usb usb44-port1: attempt power cycle [ 186.743221][ T7547] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 186.791626][ T5962] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 186.794318][ T5962] usb 7-1: config 0 has no interface number 0 [ 186.796377][ T5962] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 186.799982][ T5962] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 186.803802][ T5962] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 186.806758][ T5962] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.829551][ T5962] usb 7-1: config 0 descriptor?? [ 186.832428][ T7543] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 186.839815][ T5962] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 186.869598][ T60] lo speed is unknown, defaulting to 1000 [ 186.872423][ T60] syz0: Port: 1 Link ACTIVE [ 187.092370][ T5962] usb 7-1: USB disconnect, device number 8 [ 187.667931][ T7562] overlay: ./file1 is not a directory [ 187.734668][ T7561] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 187.736856][ T7561] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 187.739668][ T7561] vhci_hcd vhci_hcd.0: Device attached [ 187.897098][ T6210] usb 44-1: SetAddress Request (22) to port 0 [ 187.899917][ T6210] usb 44-1: new SuperSpeed USB device number 22 using vhci_hcd [ 187.904842][ T6038] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 188.198508][ T7581] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 188.200836][ T7581] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 188.204019][ T7581] vhci_hcd vhci_hcd.0: Device attached [ 188.472527][ T6038] usb 42-1: SetAddress Request (23) to port 0 [ 188.476034][ T6038] usb 42-1: new SuperSpeed USB device number 23 using vhci_hcd [ 188.555183][ T7595] netlink: 20 bytes leftover after parsing attributes in process `syz.1.252'. [ 188.559113][ T7595] netlink: 28 bytes leftover after parsing attributes in process `syz.1.252'. [ 188.703878][ T7598] netlink: 'syz.0.251': attribute type 21 has an invalid length. [ 189.189033][ T7565] vhci_hcd: connection reset by peer [ 189.193184][ T5195] vhci_hcd vhci_hcd.3: stop threads [ 189.200542][ T5195] vhci_hcd vhci_hcd.3: release socket [ 189.225094][ T5195] vhci_hcd vhci_hcd.3: disconnect device [ 189.508774][ T7582] vhci_hcd: connection reset by peer [ 189.510849][ T5195] vhci_hcd vhci_hcd.2: stop threads [ 189.513111][ T5195] vhci_hcd vhci_hcd.2: release socket [ 189.514749][ T5195] vhci_hcd vhci_hcd.2: disconnect device [ 189.857943][ T7609] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 189.895745][ T7607] ceph: No mds server is up or the cluster is laggy [ 189.909609][ T6684] libceph: connect (1)[c::]:6789 error -101 [ 189.919536][ T6684] libceph: mon0 (1)[c::]:6789 connect error [ 190.010423][ T7611] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 190.012612][ T7611] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 190.072537][ T7611] vhci_hcd vhci_hcd.0: Device attached [ 190.345235][ T5962] usb 40-1: SetAddress Request (22) to port 0 [ 190.347947][ T5962] usb 40-1: new SuperSpeed USB device number 22 using vhci_hcd [ 190.723726][ T7612] vhci_hcd: connection reset by peer [ 190.727784][ T5195] vhci_hcd vhci_hcd.1: stop threads [ 190.729481][ T5195] vhci_hcd vhci_hcd.1: release socket [ 190.731922][ T5195] vhci_hcd vhci_hcd.1: disconnect device [ 190.788739][ T7625] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 190.790821][ T7625] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 190.794681][ T7625] vhci_hcd vhci_hcd.0: Device attached [ 190.843493][ T6684] libceph: connect (1)[c::]:6789 error -101 [ 190.845973][ T6684] libceph: mon0 (1)[c::]:6789 connect error [ 190.887040][ T7628] ceph: No mds server is up or the cluster is laggy [ 190.909874][ T7631] vxfs: WRONG superblock magic 00000000 at 1 [ 190.912233][ T7631] vxfs: WRONG superblock magic 00000000 at 8 [ 190.914208][ T7631] vxfs: can't find superblock. [ 191.540933][ T7626] vhci_hcd: connection closed [ 191.541891][ T1153] vhci_hcd vhci_hcd.3: stop threads [ 191.545629][ T1153] vhci_hcd vhci_hcd.3: release socket [ 191.547703][ T1153] vhci_hcd vhci_hcd.3: disconnect device [ 192.059220][ T7619] Process accounting resumed [ 193.002331][ T6210] usb 44-1: device descriptor read/8, error -110 [ 193.111453][ T6210] usb usb44-port1: unable to enumerate USB device [ 193.561418][ T6038] usb 42-1: device descriptor read/8, error -110 [ 193.951812][ T6038] usb usb42-port1: attempt power cycle [ 194.512638][ T6038] usb usb42-port1: unable to enumerate USB device [ 195.411300][ T5962] usb 40-1: device descriptor read/8, error -110 [ 195.811603][ T5962] usb usb40-port1: attempt power cycle [ 196.371988][ T5962] usb usb40-port1: unable to enumerate USB device [ 198.389395][ T6057] IPVS: starting estimator thread 0... [ 198.491241][ T7648] IPVS: using max 27 ests per chain, 64800 per kthread [ 198.598339][ T7654] overlay: ./file1 is not a directory [ 198.930417][ T6038] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 198.933935][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.145420][ T7667] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 199.148100][ T7667] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 199.212087][ T7667] vhci_hcd vhci_hcd.0: Device attached [ 199.561250][ T6057] usb 42-1: SetAddress Request (27) to port 0 [ 199.563451][ T6057] usb 42-1: new SuperSpeed USB device number 27 using vhci_hcd [ 199.757288][ T7688] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 199.759434][ T7688] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 199.764483][ T7688] vhci_hcd vhci_hcd.0: Device attached [ 199.861089][ T7656] Illegal XDP return value 4294967274 on prog (id 81) dev N/A, expect packet loss! [ 200.031253][ T34] usb 38-1: SetAddress Request (14) to port 0 [ 200.034042][ T34] usb 38-1: new SuperSpeed USB device number 14 using vhci_hcd [ 200.136404][ T7669] vhci_hcd: connection reset by peer [ 200.138869][ T61] vhci_hcd vhci_hcd.2: stop threads [ 200.140681][ T61] vhci_hcd vhci_hcd.2: release socket [ 200.142592][ T61] vhci_hcd vhci_hcd.2: disconnect device [ 200.478639][ T7689] vhci_hcd: connection reset by peer [ 200.482007][ T1153] vhci_hcd vhci_hcd.0: stop threads [ 200.483731][ T1153] vhci_hcd vhci_hcd.0: release socket [ 200.485976][ T1153] vhci_hcd vhci_hcd.0: disconnect device [ 200.669354][ T7697] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 200.809303][ T7696] ceph: No mds server is up or the cluster is laggy [ 200.813490][ T60] libceph: connect (1)[c::]:6789 error -101 [ 200.825266][ T60] libceph: mon0 (1)[c::]:6789 connect error [ 204.601476][ T6057] usb 42-1: device descriptor read/8, error -110 [ 204.991995][ T6057] usb usb42-port1: attempt power cycle [ 205.081343][ T34] usb 38-1: device descriptor read/8, error -110 [ 205.472747][ T34] usb usb38-port1: attempt power cycle [ 205.552098][ T6057] usb usb42-port1: unable to enumerate USB device [ 206.031763][ T34] usb usb38-port1: unable to enumerate USB device [ 209.377619][ T7714] netlink: 'syz.2.268': attribute type 1 has an invalid length. [ 209.404503][ T7714] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.462416][ T7714] bond1: (slave veth3): Enslaving as an active interface with a down link [ 209.548460][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 209.548470][ T40] audit: type=1326 audit(1765477799.068:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7717 comm="syz.1.267" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 209.572915][ T40] audit: type=1326 audit(1765477799.088:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7717 comm="syz.1.267" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 209.579760][ T40] audit: type=1326 audit(1765477799.088:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7717 comm="syz.1.267" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 209.586934][ T40] audit: type=1326 audit(1765477799.088:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7717 comm="syz.1.267" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 209.593962][ T40] audit: type=1326 audit(1765477799.088:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7717 comm="syz.1.267" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 209.600894][ T40] audit: type=1326 audit(1765477799.088:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7717 comm="syz.1.267" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 209.607239][ T40] audit: type=1326 audit(1765477799.088:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7717 comm="syz.1.267" exe="/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 209.614104][ T40] audit: type=1326 audit(1765477799.088:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7717 comm="syz.1.267" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 209.621529][ T40] audit: type=1326 audit(1765477799.088:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7717 comm="syz.1.267" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 209.628849][ T40] audit: type=1326 audit(1765477799.088:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7717 comm="syz.1.267" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 209.660222][ T7714] bond1: (slave dummy0): making interface the new active one [ 209.666082][ T7714] dummy0: entered promiscuous mode [ 209.668092][ T7714] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 209.755136][ T7728] ceph: No mds server is up or the cluster is laggy [ 209.777102][ T60] libceph: connect (1)[c::]:6789 error -101 [ 209.779761][ T60] libceph: mon0 (1)[c::]:6789 connect error [ 210.121654][ T7722] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 210.125831][ T7722] Error validating options; rc = [-22] [ 210.173818][ T7714] bond1 (unregistering): (slave veth3): Releasing active interface [ 210.181700][ T7714] bond1 (unregistering): (slave dummy0): Releasing active interface [ 210.201631][ T7714] bond1 (unregistering): Released all slaves [ 210.224416][ T7733] tipc: Resetting bearer [ 210.227076][ T7733] tipc: Resetting bearer [ 210.293923][ T7733] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 210.492329][ T7747] dlm: no local IP address has been set [ 210.495003][ T7747] dlm: cannot start dlm midcomms -107 [ 210.508793][ T7747] netlink: 'syz.3.270': attribute type 12 has an invalid length. [ 210.544446][ T7748] overlay: ./file1 is not a directory [ 210.695156][ T6038] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 211.609483][ T7756] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 211.611731][ T7756] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 211.615364][ T7756] vhci_hcd vhci_hcd.0: Device attached [ 211.633874][ T7759] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 211.636053][ T7759] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 211.639122][ T7759] vhci_hcd vhci_hcd.0: Device attached [ 211.893163][ T6038] usb 42-1: SetAddress Request (31) to port 0 [ 211.897235][ T6038] usb 42-1: new SuperSpeed USB device number 31 using vhci_hcd [ 211.921238][ T5836] usb 44-1: SetAddress Request (23) to port 0 [ 211.924021][ T5836] usb 44-1: new SuperSpeed USB device number 23 using vhci_hcd [ 212.202121][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 212.224560][ T7757] vhci_hcd: connection reset by peer [ 212.227488][ T98] vhci_hcd vhci_hcd.2: stop threads [ 212.229769][ T98] vhci_hcd vhci_hcd.2: release socket [ 212.238821][ T98] vhci_hcd vhci_hcd.2: disconnect device [ 212.282238][ T7760] vhci_hcd: connection reset by peer [ 212.284795][ T98] vhci_hcd vhci_hcd.3: stop threads [ 212.286580][ T98] vhci_hcd vhci_hcd.3: release socket [ 212.288530][ T98] vhci_hcd vhci_hcd.3: disconnect device [ 213.451111][ T7775] ceph: No mds server is up or the cluster is laggy [ 213.474002][ T6684] libceph: connect (1)[c::]:6789 error -101 [ 213.477115][ T6684] libceph: mon0 (1)[c::]:6789 connect error [ 213.485537][ T7773] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 214.729514][ T7800] warning: `syz.1.282' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 216.123648][ T7809] netlink: 'syz.3.284': attribute type 21 has an invalid length. [ 217.011200][ T6038] usb 42-1: device descriptor read/8, error -110 [ 217.013393][ T5836] usb 44-1: device descriptor read/8, error -110 [ 217.277389][ T7815] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 217.280219][ T7815] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 217.281139][ T7825] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 217.285747][ T7825] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 217.288438][ T7825] vhci_hcd vhci_hcd.0: Device attached [ 217.300936][ T7815] vhci_hcd vhci_hcd.0: Device attached [ 217.384214][ T7828] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 217.386285][ T7828] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 217.396293][ T7828] vhci_hcd vhci_hcd.0: Device attached [ 217.422469][ T5836] usb usb44-port1: attempt power cycle [ 217.445593][ T7828] netlink: 24 bytes leftover after parsing attributes in process `syz.1.288'. [ 217.481493][ T6038] usb 42-1: SetAddress Request (32) to port 0 [ 217.485134][ T6038] usb 42-1: new SuperSpeed USB device number 32 using vhci_hcd [ 217.561482][ T5962] usb 38-1: SetAddress Request (18) to port 0 [ 217.563482][ T5962] usb 38-1: new SuperSpeed USB device number 18 using vhci_hcd [ 217.671587][ T6030] usb 40-1: SetAddress Request (26) to port 0 [ 217.673621][ T6030] usb 40-1: new SuperSpeed USB device number 26 using vhci_hcd [ 217.803551][ T7823] vhci_hcd: connection reset by peer [ 217.806763][ T61] vhci_hcd vhci_hcd.2: stop threads [ 217.809565][ T61] vhci_hcd vhci_hcd.2: release socket [ 217.817093][ T61] vhci_hcd vhci_hcd.2: disconnect device [ 217.874586][ T7826] vhci_hcd: connection reset by peer [ 217.878699][ T61] vhci_hcd vhci_hcd.0: stop threads [ 217.884230][ T61] vhci_hcd vhci_hcd.0: release socket [ 217.886152][ T61] vhci_hcd vhci_hcd.0: disconnect device [ 217.995264][ T5836] usb usb44-port1: unable to enumerate USB device [ 218.113867][ T7829] vhci_hcd: connection reset by peer [ 218.116992][ T61] vhci_hcd vhci_hcd.1: stop threads [ 218.119105][ T61] vhci_hcd vhci_hcd.1: release socket [ 218.120911][ T61] vhci_hcd vhci_hcd.1: disconnect device [ 219.680680][ T7836] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 220.189783][ T7859] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 220.192550][ T7859] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 220.196260][ T7859] vhci_hcd vhci_hcd.0: Device attached [ 220.266041][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 220.266065][ T40] audit: type=1804 audit(1765477809.788:59): pid=7862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.294" name="/newroot/75/file0" dev="tmpfs" ino=446 res=1 errno=0 [ 220.702122][ T7865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 220.734469][ T7864] ceph: No mds server is up or the cluster is laggy [ 220.737468][ T60] libceph: connect (1)[c::]:6789 error -101 [ 220.745437][ T60] libceph: mon0 (1)[c::]:6789 connect error [ 221.021897][ T7860] vhci_hcd: connection closed [ 221.022146][ T61] vhci_hcd vhci_hcd.2: stop threads [ 221.025372][ T61] vhci_hcd vhci_hcd.2: release socket [ 221.027983][ T61] vhci_hcd vhci_hcd.2: disconnect device [ 221.585057][ T7879] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 221.587209][ T7879] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 221.601240][ T7879] vhci_hcd vhci_hcd.0: Device attached [ 222.020814][ T7887] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 222.022930][ T7887] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 222.133571][ T7887] vhci_hcd vhci_hcd.0: Device attached [ 222.284476][ T7880] vhci_hcd: connection closed [ 222.284673][ T98] vhci_hcd vhci_hcd.0: stop threads [ 222.287972][ T98] vhci_hcd vhci_hcd.0: release socket [ 222.290094][ T98] vhci_hcd vhci_hcd.0: disconnect device [ 222.532963][ T7896] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 222.535297][ T7896] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 222.538450][ T7896] vhci_hcd vhci_hcd.0: Device attached [ 222.602012][ T5962] usb 38-1: device descriptor read/8, error -110 [ 222.682600][ T7888] vhci_hcd: connection reset by peer [ 222.685283][ T61] vhci_hcd vhci_hcd.2: stop threads [ 222.687172][ T61] vhci_hcd vhci_hcd.2: release socket [ 222.689884][ T6038] usb 42-1: device descriptor read/8, error -110 [ 222.692239][ T61] vhci_hcd vhci_hcd.2: disconnect device [ 222.761131][ T6030] usb 40-1: device descriptor read/8, error -110 [ 222.811287][ T34] usb 44-1: SetAddress Request (27) to port 0 [ 222.811436][ T6038] usb usb42-port1: attempt power cycle [ 222.814006][ T34] usb 44-1: new SuperSpeed USB device number 27 using vhci_hcd [ 222.911249][ T7897] vhci_hcd: connection reset by peer [ 222.913456][ T61] vhci_hcd vhci_hcd.3: stop threads [ 222.915363][ T61] vhci_hcd vhci_hcd.3: release socket [ 222.917289][ T61] vhci_hcd vhci_hcd.3: disconnect device [ 223.017880][ T5962] usb usb38-port1: attempt power cycle [ 223.208353][ T7905] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 223.211060][ T7905] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 223.232130][ T6030] usb usb40-port1: attempt power cycle [ 223.251671][ T7905] vhci_hcd vhci_hcd.0: Device attached [ 223.296604][ T7905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.303'. [ 223.391428][ T5962] usb 38-1: SetAddress Request (20) to port 0 [ 223.391912][ T6038] usb usb42-port1: unable to enumerate USB device [ 223.394129][ T5962] usb 38-1: new SuperSpeed USB device number 20 using vhci_hcd [ 223.861175][ T7913] usb usb5: usbfs: process 7913 (syz.2.305) did not claim interface 0 before use [ 224.153173][ T6030] usb usb40-port1: unable to enumerate USB device [ 224.245155][ T7913] lo speed is unknown, defaulting to 1000 [ 224.462018][ T7906] vhci_hcd: connection reset by peer [ 224.464778][ T98] vhci_hcd vhci_hcd.0: stop threads [ 224.467809][ T98] vhci_hcd vhci_hcd.0: release socket [ 224.471129][ T98] vhci_hcd vhci_hcd.0: disconnect device [ 224.551668][ T7921] mmap: syz.3.306 (7921) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 226.651033][ T6684] libceph: connect (1)[c::]:6789 error -101 [ 226.655400][ T6684] libceph: mon0 (1)[c::]:6789 connect error [ 226.730078][ T7937] ceph: No mds server is up or the cluster is laggy [ 226.994651][ T6057] libceph: connect (1)[c::]:6789 error -101 [ 226.997053][ T6057] libceph: mon0 (1)[c::]:6789 connect error [ 227.011651][ T7937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.014762][ T7937] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.020031][ T7937] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 227.151984][ T7949] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 227.265289][ T6057] libceph: connect (1)[c::]:6789 error -101 [ 227.267998][ T6057] libceph: mon0 (1)[c::]:6789 connect error [ 227.342246][ T7942] ceph: No mds server is up or the cluster is laggy [ 227.413725][ T7955] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 227.415962][ T7955] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 227.470618][ T7955] vhci_hcd vhci_hcd.0: Device attached [ 227.801725][ T7956] vhci_hcd: connection closed [ 227.802786][ T61] vhci_hcd vhci_hcd.3: stop threads [ 227.812907][ T61] vhci_hcd vhci_hcd.3: release socket [ 227.828236][ T61] vhci_hcd vhci_hcd.3: disconnect device [ 227.885482][ T34] usb 44-1: device descriptor read/8, error -110 [ 228.065637][ T6057] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 229.056938][ T34] usb usb44-port1: attempt power cycle [ 229.440113][ T5962] usb 38-1: device descriptor read/8, error -110 [ 229.618044][ T34] usb usb44-port1: unable to enumerate USB device [ 229.888179][ T5962] usb usb38-port1: unable to enumerate USB device [ 230.147079][ T40] audit: type=1804 audit(1765478075.658:60): pid=7977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.316" name="/newroot/78/file0" dev="tmpfs" ino=444 res=1 errno=0 [ 230.232928][ T7982] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 231.729458][ T7989] netlink: 24 bytes leftover after parsing attributes in process `syz.0.321'. [ 233.362490][ T8002] ptrace attach of "/syz-executor exec"[5945] was attempted by ""[8002] [ 233.448888][ T8004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.361683][ T6057] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 234.464608][ T60] libceph: connect (1)[c::]:6789 error -101 [ 234.467317][ T60] libceph: mon0 (1)[c::]:6789 connect error [ 234.517704][ T8017] ceph: No mds server is up or the cluster is laggy [ 234.540817][ T8014] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 235.496829][ T6057] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.501055][ T6057] usb 7-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 235.555276][ T6057] usb 7-1: config 0 interface 0 has no altsetting 0 [ 235.556598][ T8025] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 235.561154][ T8025] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 235.578739][ T8025] vhci_hcd vhci_hcd.0: Device attached [ 235.853638][ T5962] usb 38-1: SetAddress Request (22) to port 0 [ 235.856336][ T5962] usb 38-1: new SuperSpeed USB device number 22 using vhci_hcd [ 236.028187][ T6057] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 236.032246][ T6057] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 236.036475][ T6057] usb 7-1: Product: syz [ 236.038184][ T6057] usb 7-1: Manufacturer: syz [ 236.040520][ T6057] usb 7-1: SerialNumber: syz [ 236.045563][ T6057] usb 7-1: config 0 descriptor?? [ 236.080158][ T6057] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 236.189569][ T7737] udevd[7737]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.353973][ T8026] vhci_hcd: connection reset by peer [ 236.356795][ T12] vhci_hcd vhci_hcd.0: stop threads [ 236.359038][ T12] vhci_hcd vhci_hcd.0: release socket [ 236.361591][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 236.425672][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.329'. [ 236.488832][ T8037] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 237.661737][ T6057] usb 7-1: USB disconnect, device number 9 [ 238.005255][ T40] audit: type=1804 audit(1765478083.401:61): pid=8050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.331" name="/newroot/83/file0" dev="tmpfs" ino=470 res=1 errno=0 [ 238.382130][ T8055] tipc: Resetting bearer [ 238.457757][ T8055] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 238.538498][ T8061] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 239.343352][ T8066] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 239.345646][ T8066] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 239.349042][ T8066] vhci_hcd vhci_hcd.0: Device attached [ 239.798149][ T8067] vhci_hcd: connection closed [ 239.798535][ T98] vhci_hcd vhci_hcd.0: stop threads [ 239.803162][ T98] vhci_hcd vhci_hcd.0: release socket [ 239.805962][ T98] vhci_hcd vhci_hcd.0: disconnect device [ 240.670874][ T8079] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 240.673288][ T8079] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 240.680580][ T8079] vhci_hcd vhci_hcd.0: Device attached [ 240.879267][ T8082] lo speed is unknown, defaulting to 1000 [ 240.881763][ T8082] lo speed is unknown, defaulting to 1000 [ 240.884383][ T8082] lo speed is unknown, defaulting to 1000 [ 240.892082][ T8082] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 240.908892][ T8082] lo speed is unknown, defaulting to 1000 [ 240.911501][ T8082] lo speed is unknown, defaulting to 1000 [ 240.914163][ T8082] lo speed is unknown, defaulting to 1000 [ 240.916896][ T8082] lo speed is unknown, defaulting to 1000 [ 240.917914][ T6210] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 240.948160][ T5962] usb 38-1: device descriptor read/8, error -110 [ 241.339042][ T5962] usb usb38-port1: attempt power cycle [ 241.969471][ T5962] usb usb38-port1: unable to enumerate USB device [ 242.084843][ T8080] vhci_hcd: connection reset by peer [ 242.091868][ T46] vhci_hcd vhci_hcd.2: stop threads [ 242.094389][ T46] vhci_hcd vhci_hcd.2: release socket [ 242.107854][ T46] vhci_hcd vhci_hcd.2: disconnect device [ 242.256644][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.340'. [ 242.279270][ T8093] wireguard0: entered promiscuous mode [ 242.281389][ T8093] wireguard0: entered allmulticast mode [ 242.369689][ T8095] overlay: ./file1 is not a directory [ 242.561674][ T5836] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 243.705088][ T8125] can: request_module (can-proto-0) failed. [ 243.729153][ T8125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.345'. [ 244.263126][ T8137] ======================================================= [ 244.263126][ T8137] WARNING: The mand mount option has been deprecated and [ 244.263126][ T8137] and is ignored by this kernel. Remove the mand [ 244.263126][ T8137] option from the mount to silence this warning. [ 244.263126][ T8137] ======================================================= [ 244.351110][ T8138] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 245.562274][ T5836] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 245.832449][ T5836] usb 5-1: Using ep0 maxpacket: 32 [ 246.253283][ T6210] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 246.684638][ T5836] usb 5-1: unable to get BOS descriptor or descriptor too short [ 246.693454][ T5836] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 246.697015][ T5836] usb 5-1: can't read configurations, error -71 [ 253.616190][ T8195] vxfs: WRONG superblock magic 00000000 at 1 [ 253.618132][ T8200] overlay: ./file1 is not a directory [ 253.618657][ T8195] vxfs: WRONG superblock magic 00000000 at 8 [ 253.623046][ T8195] vxfs: can't find superblock. [ 253.670393][ T8199] ceph: No mds server is up or the cluster is laggy [ 253.674547][ T60] libceph: connect (1)[c::]:6789 error -101 [ 253.689530][ T60] libceph: mon0 (1)[c::]:6789 connect error [ 253.734585][ T40] audit: type=1804 audit(1765478099.226:62): pid=8206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.352" name="/newroot/83/file0" dev="tmpfs" ino=455 res=1 errno=0 [ 253.921621][ T6210] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 254.989101][ T8241] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 254.991955][ T8241] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 255.012219][ T8238] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 255.015012][ T8238] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 255.050157][ T8241] vhci_hcd vhci_hcd.0: Device attached [ 255.160340][ T8238] vhci_hcd vhci_hcd.0: Device attached [ 255.321383][ T6057] usb 44-1: SetAddress Request (31) to port 0 [ 255.324940][ T6057] usb 44-1: new SuperSpeed USB device number 31 using vhci_hcd [ 255.411348][ T34] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 255.463060][ T8242] vhci_hcd: connection reset by peer [ 255.511251][ T98] vhci_hcd vhci_hcd.3: stop threads [ 255.514300][ T98] vhci_hcd vhci_hcd.3: release socket [ 255.520710][ T98] vhci_hcd vhci_hcd.3: disconnect device [ 255.635569][ T8253] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 256.632924][ T8260] netlink: 28 bytes leftover after parsing attributes in process `syz.2.360'. [ 257.744424][ T8264] xt_CT: You must specify a L4 protocol and not use inversions on it [ 257.980278][ T8240] vhci_hcd: connection reset by peer [ 257.984841][ T6710] vhci_hcd vhci_hcd.0: stop threads [ 257.987095][ T6710] vhci_hcd vhci_hcd.0: release socket [ 257.989450][ T6710] vhci_hcd vhci_hcd.0: disconnect device [ 260.396365][ T6057] usb 44-1: device descriptor read/8, error -110 [ 260.400268][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.546242][ T34] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 260.788156][ T6057] usb usb44-port1: attempt power cycle [ 261.347721][ T6057] usb usb44-port1: unable to enumerate USB device [ 270.810602][ T8280] netlink: 20 bytes leftover after parsing attributes in process `syz.2.364'. [ 270.967253][ T8292] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 270.969766][ T8292] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 270.973061][ T8292] vhci_hcd vhci_hcd.0: Device attached [ 271.221546][ T60] libceph: connect (1)[c::]:6789 error -101 [ 271.223721][ T60] libceph: mon0 (1)[c::]:6789 connect error [ 271.376906][ T6038] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 271.468195][ T5836] usb 38-1: SetAddress Request (26) to port 0 [ 271.470339][ T5836] usb 38-1: new SuperSpeed USB device number 26 using vhci_hcd [ 271.489784][ T6684] libceph: connect (1)[c::]:6789 error -101 [ 271.492828][ T6684] libceph: mon0 (1)[c::]:6789 connect error [ 271.732934][ T8279] [U]  [ 271.816753][ T8295] ceph: No mds server is up or the cluster is laggy [ 272.081099][ T8318] netlink: 'syz.2.366': attribute type 1 has an invalid length. [ 272.108605][ T8293] vhci_hcd: connection reset by peer [ 272.111183][ T5239] vhci_hcd vhci_hcd.0: stop threads [ 272.113120][ T5239] vhci_hcd vhci_hcd.0: release socket [ 272.116545][ T5239] vhci_hcd vhci_hcd.0: disconnect device [ 272.151885][ T8318] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 272.185150][ T8318] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 272.273919][ T8318] netlink: 32 bytes leftover after parsing attributes in process `syz.2.366'. [ 272.284082][ T8318] macvlan3: entered promiscuous mode [ 272.286441][ T8318] macvlan3: entered allmulticast mode [ 272.291533][ T8318] bond1: entered promiscuous mode [ 272.294343][ T8318] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 272.300456][ T8318] bond1: left promiscuous mode [ 273.887719][ T8336] /dev/sr0: Can't open blockdev [ 273.890189][ T40] audit: type=1804 audit(1765478119.358:63): pid=8333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.369" name="/newroot/89/file0" dev="tmpfs" ino=486 res=1 errno=0 [ 274.597460][ T40] audit: type=1804 audit(1765478120.067:64): pid=8356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.373" name="/newroot/95/file0" dev="tmpfs" ino=530 res=1 errno=0 [ 276.570477][ T5836] usb 38-1: device descriptor read/8, error -110 [ 276.961356][ T5836] usb usb38-port1: attempt power cycle [ 277.521957][ T5836] usb usb38-port1: unable to enumerate USB device [ 282.008443][ T8376] netlink: 28 bytes leftover after parsing attributes in process `syz.2.376'. [ 282.233435][ T8383] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 282.235626][ T8383] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 282.240287][ T8383] vhci_hcd vhci_hcd.0: Device attached [ 282.298609][ T8379] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 282.660611][ T40] audit: type=1800 audit(1765478128.120:65): pid=8383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.374" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 282.695841][ T5836] usb 38-1: SetAddress Request (30) to port 0 [ 282.699055][ T5836] usb 38-1: new SuperSpeed USB device number 30 using vhci_hcd [ 283.588465][ T5239] Bluetooth: hci4: Frame reassembly failed (-84) [ 284.606182][ T8397] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 284.608330][ T8397] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 284.611514][ T8397] vhci_hcd vhci_hcd.0: Device attached [ 284.887770][ T6210] usb 42-1: SetAddress Request (35) to port 0 [ 284.890652][ T6210] usb 42-1: new SuperSpeed USB device number 35 using vhci_hcd [ 284.973236][ T8398] vhci_hcd: connection reset by peer [ 284.975215][ T61] vhci_hcd vhci_hcd.2: stop threads [ 284.977026][ T61] vhci_hcd vhci_hcd.2: release socket [ 284.979253][ T61] vhci_hcd vhci_hcd.2: disconnect device [ 285.298043][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 285.299069][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 285.339833][ T8384] vhci_hcd: connection reset by peer [ 285.342421][ T98] vhci_hcd vhci_hcd.0: stop threads [ 285.345035][ T98] vhci_hcd vhci_hcd.0: release socket [ 285.346947][ T98] vhci_hcd vhci_hcd.0: disconnect device [ 285.738816][ T6038] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 287.679733][ T8455] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 287.682088][ T8455] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 287.685537][ T8455] vhci_hcd vhci_hcd.0: Device attached [ 287.780277][ T5836] usb 38-1: device descriptor read/8, error -110 [ 287.980397][ T6012] usb 44-1: SetAddress Request (35) to port 0 [ 287.983106][ T6012] usb 44-1: new SuperSpeed USB device number 35 using vhci_hcd [ 288.100464][ T64] Bluetooth: hci2: command 0x0406 tx timeout [ 288.171015][ T5836] usb usb38-port1: attempt power cycle [ 288.324853][ T8463] /dev/sr0: Can't open blockdev [ 288.400500][ T40] audit: type=1804 audit(1765478133.855:66): pid=8463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.385" name="/newroot/96/file0" dev="tmpfs" ino=543 res=1 errno=0 [ 288.486358][ T8456] vhci_hcd: connection reset by peer [ 288.488510][ T61] vhci_hcd vhci_hcd.3: stop threads [ 288.503887][ T61] vhci_hcd vhci_hcd.3: release socket [ 288.508378][ T61] vhci_hcd vhci_hcd.3: disconnect device [ 288.535648][ T8465] overlay: ./file1 is not a directory [ 288.627096][ T8465] netlink: 'syz.1.389': attribute type 10 has an invalid length. [ 288.630584][ T8465] netlink: 40 bytes leftover after parsing attributes in process `syz.1.389'. [ 288.722405][ T8465] team0: Port device geneve0 added [ 288.751204][ T5836] usb usb38-port1: unable to enumerate USB device [ 289.209510][ T8475] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 289.211790][ T8475] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 289.324321][ T8475] vhci_hcd vhci_hcd.0: Device attached [ 289.781056][ T8481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.390'. [ 289.788156][ T8481] netlink: 'syz.2.390': attribute type 18 has an invalid length. [ 289.890229][ T8481] vxlan0: entered promiscuous mode [ 289.897145][ T98] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.901208][ T98] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.904885][ T98] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.908467][ T98] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.177866][ T8476] vhci_hcd: connection reset by peer [ 290.180856][ T5195] vhci_hcd vhci_hcd.2: stop threads [ 290.183280][ T5195] vhci_hcd vhci_hcd.2: release socket [ 290.185655][ T5195] vhci_hcd vhci_hcd.2: disconnect device [ 290.185693][ T6210] usb 42-1: device descriptor read/8, error -110 [ 290.333492][ T8492] overlay: ./file1 is not a directory [ 290.603032][ T6210] usb usb42-port1: attempt power cycle [ 290.972067][ T8495] netlink: 20 bytes leftover after parsing attributes in process `syz.3.395'. [ 291.193924][ T6210] usb usb42-port1: unable to enumerate USB device [ 291.949816][ T8494] [U]  [ 293.064951][ T6012] usb 44-1: device descriptor read/8, error -110 [ 293.465665][ T6012] usb usb44-port1: attempt power cycle [ 293.793496][ T8530] bridge0: port 3(syz_tun) entered blocking state [ 293.796797][ T8530] bridge0: port 3(syz_tun) entered disabled state [ 293.800188][ T8530] syz_tun: entered allmulticast mode [ 293.806191][ T8529] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 293.806464][ T8530] syz_tun: entered promiscuous mode [ 293.808589][ T8529] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 293.812148][ T8530] bridge0: port 3(syz_tun) entered blocking state [ 293.813941][ T8529] vhci_hcd vhci_hcd.0: Device attached [ 293.817057][ T8530] bridge0: port 3(syz_tun) entered forwarding state [ 294.035967][ T6012] usb usb44-port1: unable to enumerate USB device [ 294.039959][ T8537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.402'. [ 294.056195][ T8537] netlink: 'syz.1.402': attribute type 18 has an invalid length. [ 294.085648][ T34] usb 40-1: SetAddress Request (30) to port 0 [ 294.087862][ T34] usb 40-1: new SuperSpeed USB device number 30 using vhci_hcd [ 294.156025][ T8537] vxlan0: entered promiscuous mode [ 294.166654][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.406107][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.408781][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.411682][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.475097][ T8533] vhci_hcd: connection reset by peer [ 294.477349][ T98] vhci_hcd vhci_hcd.1: stop threads [ 294.479207][ T98] vhci_hcd vhci_hcd.1: release socket [ 294.481131][ T98] vhci_hcd vhci_hcd.1: disconnect device [ 295.009077][ T8547] overlay: ./file1 is not a directory [ 295.157000][ T6038] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 295.408302][ T8559] netlink: 20 bytes leftover after parsing attributes in process `syz.1.408'. [ 296.435330][ T8558] [U]  [ 299.149984][ T34] usb 40-1: device descriptor read/8, error -110 [ 299.540680][ T34] usb usb40-port1: attempt power cycle [ 300.101712][ T34] usb usb40-port1: unable to enumerate USB device [ 302.661670][ T8614] overlayfs: failed to resolve './file1/file0': -2 [ 303.849218][ T8632] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 303.851840][ T8632] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 303.856335][ T8632] vhci_hcd vhci_hcd.0: Device attached [ 303.938817][ T8635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.419'. [ 303.941758][ T8635] netlink: 'syz.0.419': attribute type 18 has an invalid length. [ 303.955293][ T8635] vxlan0: entered promiscuous mode [ 303.960081][ T6710] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.971417][ T6710] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.975353][ T6710] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.981454][ T6710] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.124164][ T6038] usb 38-1: SetAddress Request (34) to port 0 [ 304.126870][ T6038] usb 38-1: new SuperSpeed USB device number 34 using vhci_hcd [ 304.484566][ T8633] vhci_hcd: connection reset by peer [ 304.486694][ T46] vhci_hcd vhci_hcd.0: stop threads [ 304.488610][ T46] vhci_hcd vhci_hcd.0: release socket [ 304.490543][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 305.056520][ T8637] binder: 8636:8637 ioctl c0306201 0 returned -14 [ 305.072509][ T8641] netlink: 20 bytes leftover after parsing attributes in process `syz.0.420'. [ 305.176719][ T5946] Bluetooth: hci2: unexpected event 0x08 length: 11 > 4 [ 306.039292][ T8639] [U]  [ 306.158765][ T8653] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 306.432443][ T8654] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 306.434774][ T8654] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 306.438391][ T8654] vhci_hcd vhci_hcd.0: Device attached [ 306.706265][ T34] usb 42-1: SetAddress Request (39) to port 0 [ 306.709275][ T34] usb 42-1: new SuperSpeed USB device number 39 using vhci_hcd [ 306.997001][ T8660] vhci_hcd: connection reset by peer [ 307.001203][ T6710] vhci_hcd vhci_hcd.2: stop threads [ 307.003463][ T6710] vhci_hcd vhci_hcd.2: release socket [ 307.009528][ T6710] vhci_hcd vhci_hcd.2: disconnect device [ 307.236791][ T64] Bluetooth: hci2: command 0x0406 tx timeout [ 308.758919][ T8689] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 308.761065][ T8689] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 308.764137][ T8689] vhci_hcd vhci_hcd.0: Device attached [ 308.889257][ T8693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.431'. [ 308.892229][ T8693] netlink: 'syz.3.431': attribute type 18 has an invalid length. [ 308.931414][ T8693] vxlan0: entered promiscuous mode [ 308.936165][ T5195] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.940050][ T5195] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.943611][ T5195] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.947114][ T5195] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.058157][ T7972] usb 44-1: SetAddress Request (39) to port 0 [ 309.060705][ T7972] usb 44-1: new SuperSpeed USB device number 39 using vhci_hcd [ 309.158297][ T6038] usb 38-1: device descriptor read/8, error -110 [ 309.745094][ T6038] usb usb38-port1: attempt power cycle [ 310.499163][ T8690] vhci_hcd: connection reset by peer [ 310.502697][ T46] vhci_hcd vhci_hcd.3: stop threads [ 310.504831][ T46] vhci_hcd vhci_hcd.3: release socket [ 310.506891][ T46] vhci_hcd vhci_hcd.3: disconnect device [ 310.832565][ T6038] usb usb38-port1: unable to enumerate USB device [ 311.800486][ T34] usb 42-1: device descriptor read/8, error -110 [ 312.194352][ T34] usb usb42-port1: attempt power cycle [ 312.809203][ T8734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.439'. [ 312.813214][ T8734] syzkaller1: entered promiscuous mode [ 312.814983][ T8734] syzkaller1: entered allmulticast mode [ 312.819940][ T8734] program syz.0.439 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 312.871522][ T1112] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 312.874389][ T1112] ata1.00: irq_stat 0x40000000 [ 312.876675][ T1112] ata1.00: failed command: ZAC MANAGEMENT OUT [ 312.879383][ T1112] ata1.00: cmd 9f/02:00:00:00:00/00:00:00:00:00/40 tag 9 nodata 0 in [ 312.879383][ T1112] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 312.892025][ T1112] ata1.00: status: { DRDY ERR } [ 312.893680][ T1112] ata1.00: error: { ABRT } [ 312.894979][ T1112] ata1.00: device reported invalid CHS sector 0 [ 313.036730][ T34] usb usb42-port1: unable to enumerate USB device [ 313.725827][ T8742] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 313.728497][ T8742] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 313.737521][ T8742] vhci_hcd vhci_hcd.0: Device attached [ 313.945549][ T8748] dlm: no local IP address has been set [ 313.947402][ T8748] dlm: cannot start dlm midcomms -107 [ 313.958637][ T8748] netlink: 'syz.3.442': attribute type 12 has an invalid length. [ 314.026095][ T34] usb 38-1: SetAddress Request (38) to port 0 [ 314.028842][ T34] usb 38-1: new SuperSpeed USB device number 38 using vhci_hcd [ 314.122487][ T7972] usb 44-1: device descriptor read/8, error -110 [ 314.513449][ T7972] usb usb44-port1: attempt power cycle [ 315.114198][ T7972] usb usb44-port1: unable to enumerate USB device [ 315.216659][ T8743] vhci_hcd: connection reset by peer [ 315.219288][ T61] vhci_hcd vhci_hcd.0: stop threads [ 315.221533][ T61] vhci_hcd vhci_hcd.0: release socket [ 315.229359][ T61] vhci_hcd vhci_hcd.0: disconnect device [ 315.235079][ T1112] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 315.237915][ T1112] ata1: failed to read log page 10h (errno=-5) [ 315.240480][ T1112] ata1.00: exception Emask 0x1 SAct 0x100000 SErr 0x0 action 0x0 [ 315.613529][ T1112] ata1.00: irq_stat 0x40000000 [ 315.615689][ T1112] ata1.00: failed command: WRITE FPDMA QUEUED [ 315.618199][ T1112] ata1.00: cmd 61/00:a0:a6:5f:09/01:00:00:00:00/40 tag 20 ncq dma 131072 out [ 315.618199][ T1112] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 315.623817][ T1112] ata1.00: status: { DRDY } [ 315.625589][ T1112] ata1.00: error: { ABRT } [ 315.673825][ T1112] ata1.00: configured for UDMA/100 [ 315.675774][ T1112] ata1: EH complete [ 316.075806][ T8763] binder: 8762:8763 ioctl c0306201 0 returned -14 [ 316.110284][ T8765] bridge0: port 1(syz_tun) entered blocking state [ 316.113703][ T8765] bridge0: port 1(syz_tun) entered disabled state [ 316.116180][ T8765] syz_tun: entered allmulticast mode [ 316.119755][ T8765] syz_tun: entered promiscuous mode [ 316.122973][ T8765] bridge0: port 1(syz_tun) entered blocking state [ 316.125143][ T8765] bridge0: port 1(syz_tun) entered forwarding state [ 317.820564][ T8771] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 317.823706][ T8771] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 317.835505][ T8771] vhci_hcd vhci_hcd.0: Device attached [ 318.059414][ T8776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.446'. [ 318.066323][ T8776] netlink: 'syz.2.446': attribute type 18 has an invalid length. [ 318.109335][ T8786] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 318.115642][ T6057] usb 42-1: SetAddress Request (43) to port 0 [ 318.117775][ T6057] usb 42-1: new SuperSpeed USB device number 43 using vhci_hcd [ 318.166837][ T8786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.474039][ T8777] vhci_hcd: connection reset by peer [ 318.477022][ T61] vhci_hcd vhci_hcd.2: stop threads [ 318.479321][ T61] vhci_hcd vhci_hcd.2: release socket [ 318.484360][ T61] vhci_hcd vhci_hcd.2: disconnect device [ 319.086346][ T34] usb 38-1: device descriptor read/8, error -110 [ 319.475395][ T8803] bridge0: port 1(syz_tun) entered disabled state [ 319.507351][ T34] usb usb38-port1: attempt power cycle [ 319.567190][ T8803] tipc: Resetting bearer [ 319.719577][ T8809] netlink: 'syz.1.452': attribute type 13 has an invalid length. [ 320.099072][ T34] usb usb38-port1: unable to enumerate USB device [ 320.396541][ T8809] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 320.403482][ T6012] lo speed is unknown, defaulting to 1000 [ 320.405684][ T61] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.405794][ T6012] syz0: Port: 1 Link DOWN [ 320.409096][ T61] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.413655][ T61] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.427564][ T6210] lo speed is unknown, defaulting to 1000 [ 320.436282][ T61] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.484537][ T8816] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 320.487053][ T8816] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 320.494618][ T8816] vhci_hcd vhci_hcd.0: Device attached [ 320.769201][ T6210] usb 44-1: SetAddress Request (43) to port 0 [ 320.771840][ T6210] usb 44-1: new SuperSpeed USB device number 43 using vhci_hcd [ 320.956292][ T8825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.458'. [ 321.989370][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.169854][ T6057] usb 42-1: device descriptor read/8, error -110 [ 323.589672][ T6057] usb usb42-port1: attempt power cycle [ 324.150896][ T6057] usb usb42-port1: unable to enumerate USB device [ 324.348728][ T8840] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 324.350719][ T8817] vhci_hcd: connection reset by peer [ 324.351180][ T8840] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 324.361868][ T8840] vhci_hcd vhci_hcd.0: Device attached [ 324.370595][ T5239] vhci_hcd vhci_hcd.3: stop threads [ 324.373070][ T5239] vhci_hcd vhci_hcd.3: release socket [ 324.399703][ T5239] vhci_hcd vhci_hcd.3: disconnect device [ 324.443848][ T60] IPVS: starting estimator thread 0... [ 324.536921][ T8841] vhci_hcd: connection closed [ 324.537203][ T6710] vhci_hcd vhci_hcd.0: stop threads [ 324.541262][ T6710] vhci_hcd vhci_hcd.0: release socket [ 324.543664][ T6710] vhci_hcd vhci_hcd.0: disconnect device [ 324.630922][ T8849] IPVS: using max 44 ests per chain, 105600 per kthread [ 325.040574][ T8856] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 325.042765][ T8856] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 325.046002][ T8856] vhci_hcd vhci_hcd.0: Device attached [ 325.148574][ T8859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.462'. [ 325.151685][ T8859] netlink: 'syz.1.462': attribute type 18 has an invalid length. [ 325.321445][ T5836] usb 40-1: SetAddress Request (34) to port 0 [ 325.324257][ T5836] usb 40-1: new SuperSpeed USB device number 34 using vhci_hcd [ 325.381040][ T8857] vhci_hcd: connection reset by peer [ 325.414276][ T98] vhci_hcd vhci_hcd.1: stop threads [ 325.416675][ T98] vhci_hcd vhci_hcd.1: release socket [ 325.419695][ T98] vhci_hcd vhci_hcd.1: disconnect device [ 325.688330][ T8870] ptrace attach of "/syz-executor exec"[5944] was attempted by "/syz-executor exec"[8870] [ 325.704069][ T8870] netlink: 88 bytes leftover after parsing attributes in process `syz.0.467'. [ 325.720430][ T8870] netlink: 'syz.0.467': attribute type 21 has an invalid length. [ 325.725705][ T8870] netlink: 128 bytes leftover after parsing attributes in process `syz.0.467'. [ 325.728924][ T8870] netlink: 'syz.0.467': attribute type 4 has an invalid length. [ 325.734685][ T8870] netlink: 3 bytes leftover after parsing attributes in process `syz.0.467'. [ 325.764687][ T8870] batadv6: entered promiscuous mode [ 325.768569][ T8870] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 325.812323][ T6210] usb 44-1: device descriptor read/8, error -110 [ 326.202662][ T6210] usb usb44-port1: attempt power cycle [ 326.783008][ T6210] usb usb44-port1: unable to enumerate USB device [ 326.792192][ T8877] loop5: detected capacity change from 0 to 7 [ 326.800634][ T8877] Dev loop5: unable to read RDB block 7 [ 326.803289][ T8877] loop5: AHDI p1 p2 [ 326.805143][ T8877] loop5: partition table partially beyond EOD, truncated [ 326.809119][ T8877] loop5: p1 start 1702000233 is beyond EOD, truncated [ 327.509389][ T8883] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 327.511691][ T8883] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 327.543873][ T8883] vhci_hcd vhci_hcd.0: Device attached [ 327.833498][ T6210] usb 38-1: SetAddress Request (42) to port 0 [ 327.836294][ T6210] usb 38-1: new SuperSpeed USB device number 42 using vhci_hcd [ 328.440875][ T8896] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 328.443746][ T8896] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 328.630011][ T8896] vhci_hcd vhci_hcd.0: Device attached [ 328.885429][ T8898] vhci_hcd: connection closed [ 328.885762][ T98] vhci_hcd vhci_hcd.1: stop threads [ 328.889078][ T98] vhci_hcd vhci_hcd.1: release socket [ 329.019473][ T98] vhci_hcd vhci_hcd.1: disconnect device [ 329.214636][ T8906] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 329.216866][ T8906] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 329.224512][ T8906] vhci_hcd vhci_hcd.0: Device attached [ 329.434635][ T8884] vhci_hcd: connection reset by peer [ 329.437370][ T98] vhci_hcd vhci_hcd.0: stop threads [ 329.439132][ T98] vhci_hcd vhci_hcd.0: release socket [ 329.441004][ T98] vhci_hcd vhci_hcd.0: disconnect device [ 329.484801][ T6038] usb 42-1: SetAddress Request (47) to port 0 [ 329.487513][ T6038] usb 42-1: new SuperSpeed USB device number 47 using vhci_hcd [ 329.835296][ T8907] vhci_hcd: connection reset by peer [ 329.837902][ T6710] vhci_hcd vhci_hcd.2: stop threads [ 329.839860][ T6710] vhci_hcd vhci_hcd.2: release socket [ 329.844424][ T6710] vhci_hcd vhci_hcd.2: disconnect device [ 329.963532][ T8916] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 329.966096][ T8916] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 329.970488][ T8916] vhci_hcd vhci_hcd.0: Device attached [ 330.435113][ T8925] overlay: ./file1 is not a directory [ 330.548779][ T8917] vhci_hcd: connection reset by peer [ 330.552047][ T5239] vhci_hcd vhci_hcd.1: stop threads [ 330.554031][ T5239] vhci_hcd vhci_hcd.1: release socket [ 330.558284][ T5239] vhci_hcd vhci_hcd.1: disconnect device [ 330.558337][ T5836] usb 40-1: device descriptor read/8, error -110 [ 330.966680][ T5836] usb usb40-port1: attempt power cycle [ 331.001660][ T40] audit: type=1326 audit(1765478176.420:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8928 comm="syz.2.478" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x0 [ 331.026378][ T8930] lo speed is unknown, defaulting to 1000 [ 331.029011][ T8930] lo speed is unknown, defaulting to 1000 [ 331.335494][ T8940] loop5: detected capacity change from 0 to 7 [ 331.340140][ T8940] Dev loop5: unable to read RDB block 7 [ 331.342299][ T8940] loop5: AHDI p1 p2 [ 331.343834][ T8940] loop5: partition table partially beyond EOD, truncated [ 331.346889][ T8940] loop5: p1 start 1702000233 is beyond EOD, truncated [ 331.537439][ T5836] usb usb40-port1: unable to enumerate USB device [ 332.123857][ T8942] tipc: Started in network mode [ 332.126114][ T8942] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 332.129858][ T8942] tipc: Enabled bearer , priority 10 [ 332.586964][ T8954] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 332.590089][ T8954] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 332.594407][ T8954] vhci_hcd vhci_hcd.0: Device attached [ 333.140262][ T60] tipc: Node number set to 10070698 [ 333.269710][ T8958] vhci_hcd: connection reset by peer [ 333.278029][ T6710] vhci_hcd vhci_hcd.0: stop threads [ 333.280146][ T6710] vhci_hcd vhci_hcd.0: release socket [ 333.283733][ T6710] vhci_hcd vhci_hcd.0: disconnect device [ 333.283740][ T6210] usb 38-1: device descriptor read/8, error -110 [ 333.584415][ T8969] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 333.729350][ T6210] usb usb38-port1: attempt power cycle [ 333.746013][ T8972] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 333.748756][ T8972] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 333.752552][ T8972] vhci_hcd vhci_hcd.0: Device attached [ 333.830287][ T8976] overlay: ./file1 is not a directory [ 334.098385][ T34] usb 40-1: SetAddress Request (38) to port 0 [ 334.108453][ T34] usb 40-1: new SuperSpeed USB device number 38 using vhci_hcd [ 334.248539][ T8973] vhci_hcd: connection reset by peer [ 334.251388][ T98] vhci_hcd vhci_hcd.1: stop threads [ 334.254456][ T98] vhci_hcd vhci_hcd.1: release socket [ 334.256608][ T98] vhci_hcd vhci_hcd.1: disconnect device [ 334.319216][ T6210] usb usb38-port1: unable to enumerate USB device [ 334.538783][ T6038] usb 42-1: device descriptor read/8, error -110 [ 334.728058][ T8983] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 334.730217][ T8983] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 334.768099][ T8983] vhci_hcd vhci_hcd.0: Device attached [ 335.128823][ T6210] usb 38-1: SetAddress Request (46) to port 0 [ 335.131067][ T6210] usb 38-1: new SuperSpeed USB device number 46 using vhci_hcd [ 335.557228][ T6038] usb usb42-port1: attempt power cycle [ 336.101215][ T8986] vhci_hcd: connection reset by peer [ 336.104015][ T46] vhci_hcd vhci_hcd.0: stop threads [ 336.105787][ T46] vhci_hcd vhci_hcd.0: release socket [ 336.107915][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 336.189043][ T9003] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 336.191792][ T9003] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 336.196403][ T9003] vhci_hcd vhci_hcd.0: Device attached [ 336.480343][ T6032] usb 44-1: SetAddress Request (47) to port 0 [ 336.487729][ T6032] usb 44-1: new SuperSpeed USB device number 47 using vhci_hcd [ 336.570738][ T6038] usb usb42-port1: unable to enumerate USB device [ 336.620731][ T9011] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 336.622997][ T9011] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 336.646296][ T9011] vhci_hcd vhci_hcd.0: Device attached [ 337.022462][ T9012] vhci_hcd: connection closed [ 337.022786][ T6710] vhci_hcd vhci_hcd.1: stop threads [ 337.027677][ T6710] vhci_hcd vhci_hcd.1: release socket [ 337.030328][ T6710] vhci_hcd vhci_hcd.1: disconnect device [ 337.213768][ T9004] vhci_hcd: connection reset by peer [ 337.215840][ T46] vhci_hcd vhci_hcd.3: stop threads [ 337.217554][ T46] vhci_hcd vhci_hcd.3: release socket [ 337.219425][ T46] vhci_hcd vhci_hcd.3: disconnect device [ 339.182438][ T34] usb 40-1: device descriptor read/8, error -110 [ 339.220483][ T9033] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 339.633665][ T34] usb usb40-port1: attempt power cycle [ 340.784480][ T6210] usb 38-1: device descriptor read/8, error -110 [ 341.015784][ T34] usb usb40-port1: unable to enumerate USB device [ 341.454178][ T6210] usb usb38-port1: attempt power cycle [ 341.584384][ T6032] usb 44-1: device descriptor read/8, error -110 [ 341.708976][ T9049] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 341.711057][ T9049] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 341.714098][ T9049] vhci_hcd vhci_hcd.0: Device attached [ 341.975914][ T6032] usb usb44-port1: attempt power cycle [ 341.994698][ T34] usb 42-1: SetAddress Request (51) to port 0 [ 341.996859][ T34] usb 42-1: new SuperSpeed USB device number 51 using vhci_hcd [ 342.025002][ T6210] usb usb38-port1: unable to enumerate USB device [ 342.545825][ T6032] usb usb44-port1: unable to enumerate USB device [ 342.936101][ T9050] vhci_hcd: connection reset by peer [ 342.942142][ T6710] vhci_hcd vhci_hcd.2: stop threads [ 342.947785][ T6710] vhci_hcd vhci_hcd.2: release socket [ 342.951902][ T6710] vhci_hcd vhci_hcd.2: disconnect device [ 343.223613][ T9067] tipc: Enabled bearer , priority 10 [ 344.087105][ T9080] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 344.090036][ T9080] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 344.127142][ T9080] vhci_hcd vhci_hcd.0: Device attached [ 344.386427][ T6032] usb 44-1: SetAddress Request (51) to port 0 [ 344.389148][ T6032] usb 44-1: new SuperSpeed USB device number 51 using vhci_hcd [ 344.597936][ T9084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.509'. [ 344.601156][ T9084] netlink: 'syz.3.509': attribute type 18 has an invalid length. [ 345.140921][ T9088] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 347.486505][ T9081] vhci_hcd: connection reset by peer [ 347.488915][ T5239] vhci_hcd vhci_hcd.3: stop threads [ 347.497114][ T5239] vhci_hcd vhci_hcd.3: release socket [ 347.506924][ T5239] vhci_hcd vhci_hcd.3: disconnect device [ 347.588122][ T34] usb 42-1: device descriptor read/8, error -110 [ 348.413067][ T34] usb usb42-port1: attempt power cycle [ 349.430277][ T6032] usb 44-1: device descriptor read/8, error -110 [ 349.827951][ T6032] usb usb44-port1: attempt power cycle [ 350.391614][ T6032] usb usb44-port1: unable to enumerate USB device [ 350.806984][ T9122] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 350.829050][ T9122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.931863][ T34] usb usb42-port1: unable to enumerate USB device [ 351.147198][ T9131] overlayfs: overlapping lowerdir path [ 351.156570][ T9131] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 351.160016][ T9131] overlayfs: overlapping lowerdir path [ 351.841522][ T9133] overlay: ./file1 is not a directory [ 353.897242][ T9157] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 353.900493][ T9157] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 353.905718][ T9157] vhci_hcd vhci_hcd.0: Device attached [ 354.173889][ T6210] usb 38-1: SetAddress Request (50) to port 0 [ 354.179174][ T6210] usb 38-1: new SuperSpeed USB device number 50 using vhci_hcd [ 354.474774][ T9158] vhci_hcd: connection reset by peer [ 354.483314][ T5239] vhci_hcd vhci_hcd.0: stop threads [ 354.486011][ T5239] vhci_hcd vhci_hcd.0: release socket [ 354.488518][ T5239] vhci_hcd vhci_hcd.0: disconnect device [ 356.261533][ T9168] xt_CT: You must specify a L4 protocol and not use inversions on it [ 356.262664][ T9168] netlink: 188 bytes leftover after parsing attributes in process `syz.0.535'. [ 356.327648][ T9169] netlink: 36 bytes leftover after parsing attributes in process `syz.0.535'. [ 356.965802][ T40] audit: type=1326 audit(1765478202.360:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9180 comm="syz.2.529" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 357.009415][ T9184] pim6reg: entered allmulticast mode [ 357.019039][ T9184] pim6reg: left allmulticast mode [ 357.024472][ T40] audit: type=1326 audit(1765478202.370:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9180 comm="syz.2.529" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 357.037828][ T40] audit: type=1326 audit(1765478202.370:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9180 comm="syz.2.529" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 357.053537][ T40] audit: type=1326 audit(1765478202.370:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9180 comm="syz.2.529" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 357.164715][ T40] audit: type=1326 audit(1765478202.370:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9180 comm="syz.2.529" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 357.181142][ T40] audit: type=1326 audit(1765478202.370:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9180 comm="syz.2.529" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 357.201017][ T9188] ntfs3(nullb0): Primary boot signature is not NTFS. [ 357.203688][ T9188] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 357.213316][ T40] audit: type=1326 audit(1765478202.370:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9180 comm="syz.2.529" exe="/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 357.221929][ T40] audit: type=1326 audit(1765478202.380:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9180 comm="syz.2.529" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 357.235037][ T40] audit: type=1326 audit(1765478202.380:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9180 comm="syz.2.529" exe="/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 357.244383][ T40] audit: type=1326 audit(1765478202.380:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9180 comm="syz.2.529" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 358.013421][ T9194] siw: device registration error -23 [ 358.507119][ T9205] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 358.509955][ T9205] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 358.513756][ T9205] vhci_hcd vhci_hcd.0: Device attached [ 358.797362][ T6032] usb 44-1: SetAddress Request (55) to port 0 [ 358.800092][ T6032] usb 44-1: new SuperSpeed USB device number 55 using vhci_hcd [ 359.051670][ T9221] overlayfs: overlapping lowerdir path [ 359.106583][ T9221] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 359.110488][ T9221] overlayfs: overlapping lowerdir path [ 359.210628][ T9208] vhci_hcd: connection reset by peer [ 359.216481][ T5195] vhci_hcd vhci_hcd.3: stop threads [ 359.227647][ T5195] vhci_hcd vhci_hcd.3: release socket [ 359.237669][ T5195] vhci_hcd vhci_hcd.3: disconnect device [ 359.943860][ T6210] usb 38-1: device descriptor read/8, error -110 [ 360.356784][ T6210] usb usb38-port1: attempt power cycle [ 360.663703][ T9239] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 360.931949][ T6210] usb usb38-port1: unable to enumerate USB device [ 363.876679][ T6032] usb 44-1: device descriptor read/8, error -110 [ 363.939220][ T9256] ref_ctr going negative. vaddr: 0x80ffc002, curr val: -29824, delta: 1 [ 363.943229][ T9256] ref_ctr increment failed for inode: 0x30a offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88804a57c980 [ 364.261923][ T6032] usb usb44-port1: attempt power cycle [ 364.822375][ T6032] usb usb44-port1: unable to enumerate USB device [ 366.987042][ T9278] overlayfs: overlapping lowerdir path [ 366.998621][ T9278] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 367.001398][ T9278] overlayfs: overlapping lowerdir path [ 369.157172][ T9303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.554'. [ 369.177441][ T9303] bridge0: port 3(syz_tun) entered disabled state [ 369.180685][ T9303] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.184052][ T9303] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.321718][ T9305] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 369.323918][ T9305] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 369.339862][ T9305] vhci_hcd vhci_hcd.0: Device attached [ 369.342271][ T9293] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 369.344490][ T9293] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 369.348018][ T9293] vhci_hcd vhci_hcd.0: Device attached [ 369.595416][ T6032] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 369.645596][ T6210] usb 40-1: SetAddress Request (42) to port 0 [ 369.648264][ T6210] usb 40-1: new SuperSpeed USB device number 42 using vhci_hcd [ 370.090447][ T9317] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 370.093480][ T9317] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 370.196402][ T9317] vhci_hcd vhci_hcd.0: Device attached [ 370.261262][ T9308] vhci_hcd: connection reset by peer [ 370.263524][ T1142] vhci_hcd vhci_hcd.1: stop threads [ 370.265352][ T1142] vhci_hcd vhci_hcd.1: release socket [ 370.267865][ T1142] vhci_hcd vhci_hcd.1: disconnect device [ 370.466098][ T34] usb 42-1: SetAddress Request (55) to port 0 [ 370.468695][ T34] usb 42-1: new SuperSpeed USB device number 55 using vhci_hcd [ 370.925427][ T9306] vhci_hcd: connection reset by peer [ 370.927779][ T12] vhci_hcd vhci_hcd.3: stop threads [ 370.929565][ T12] vhci_hcd vhci_hcd.3: release socket [ 370.931479][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 371.193125][ T9318] vhci_hcd: connection reset by peer [ 371.195977][ T98] vhci_hcd vhci_hcd.2: stop threads [ 371.204617][ T98] vhci_hcd vhci_hcd.2: release socket [ 371.235095][ T98] vhci_hcd vhci_hcd.2: disconnect device [ 374.719149][ T6032] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 374.810420][ T6210] usb 40-1: device descriptor read/8, error -110 [ 375.225381][ T6210] usb usb40-port1: attempt power cycle [ 375.529728][ T34] usb 42-1: device descriptor read/8, error -110 [ 375.647527][ T9355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.566'. [ 375.780771][ T6210] usb usb40-port1: unable to enumerate USB device [ 375.930904][ T34] usb usb42-port1: attempt power cycle [ 376.492653][ T34] usb usb42-port1: unable to enumerate USB device [ 376.821575][ T9347] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 376.824606][ T9347] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 376.828322][ T9347] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 377.172068][ T9362] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 377.174521][ T9362] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 377.177413][ T9362] vhci_hcd vhci_hcd.0: Device attached [ 377.452773][ T34] usb 38-1: SetAddress Request (54) to port 0 [ 377.455237][ T34] usb 38-1: new SuperSpeed USB device number 54 using vhci_hcd [ 378.215269][ T9363] vhci_hcd: connection reset by peer [ 378.217327][ T6710] vhci_hcd vhci_hcd.0: stop threads [ 378.219077][ T6710] vhci_hcd vhci_hcd.0: release socket [ 378.220968][ T6710] vhci_hcd vhci_hcd.0: disconnect device [ 382.514891][ T34] usb 38-1: device descriptor read/8, error -110 [ 382.915438][ T34] usb usb38-port1: attempt power cycle [ 383.255231][ T5999] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 383.378032][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.405429][ T5999] usb 7-1: Using ep0 maxpacket: 32 [ 383.409544][ T5999] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 383.412160][ T5999] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 383.415859][ T5999] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 383.419598][ T5999] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 383.423705][ T5999] usb 7-1: config 0 interface 0 has no altsetting 0 [ 383.431917][ T5999] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 383.440828][ T5999] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 383.444022][ T5999] usb 7-1: Product: syz [ 383.455351][ T5999] usb 7-1: Manufacturer: syz [ 383.457024][ T5999] usb 7-1: SerialNumber: syz [ 383.466342][ T5999] usb 7-1: config 0 descriptor?? [ 383.496251][ T34] usb usb38-port1: unable to enumerate USB device [ 383.648548][ T5999] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 383.658435][ T5999] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 385.427340][ T9422] afs: Unknown parameter '#7dyn' [ 385.431879][ T9422] netlink: 24 bytes leftover after parsing attributes in process `syz.3.582'. [ 386.707928][ T60] usb 7-1: USB disconnect, device number 10 [ 386.718258][ T60] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 387.785403][ T9471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.590'. [ 388.919513][ T9486] overlayfs: overlapping lowerdir path [ 388.936052][ T9486] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 388.940396][ T9486] overlayfs: overlapping lowerdir path [ 392.660963][ T9490] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 392.663377][ T9490] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 392.666347][ T9490] vhci_hcd vhci_hcd.0: Device attached [ 392.735911][ T9525] afs: Unknown parameter '#7dyn' [ 392.741358][ T9525] netlink: 24 bytes leftover after parsing attributes in process `syz.1.596'. [ 392.797619][ T9521] vhci_hcd: connection closed [ 392.797820][ T46] vhci_hcd vhci_hcd.0: stop threads [ 392.801355][ T46] vhci_hcd vhci_hcd.0: release socket [ 392.805495][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 395.065525][ T9572] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 395.067812][ T9572] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 395.242861][ T9572] vhci_hcd vhci_hcd.0: Device attached [ 395.484083][ T5836] usb 41-1: new low-speed USB device number 4 using vhci_hcd [ 395.648766][ T9573] vhci_hcd: connection reset by peer [ 395.651807][ T12] vhci_hcd vhci_hcd.2: stop threads [ 395.653825][ T12] vhci_hcd vhci_hcd.2: release socket [ 395.656163][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 400.274656][ T9615] syz_tun: entered allmulticast mode [ 400.541638][ T9610] syz_tun: left allmulticast mode [ 400.578214][ T5836] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 404.332223][ T9662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.347463][ T9662] bond0: (slave rose0): Enslaving as an active interface with an up link [ 404.410474][ T9668] netlink: 'syz.0.622': attribute type 13 has an invalid length. [ 405.530860][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 405.691003][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 405.694465][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 405.698575][ T10] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 405.708677][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.715636][ T10] usb 8-1: config 0 descriptor?? [ 405.767005][ T9695] bond0: (slave bond_slave_0): Releasing backup interface [ 405.773331][ T9695] bond0: (slave bond_slave_1): Releasing backup interface [ 405.779857][ T9695] team0: Port device team_slave_0 removed [ 405.788548][ T9695] team0: Port device team_slave_1 removed [ 405.794926][ T9695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.797382][ T9695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.800787][ T9695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.804382][ T9695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.808466][ T9695] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 406.134197][ T10] mcp2221 0003:04D8:00DD.0005: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 406.340598][ T9678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.348551][ T9678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.599013][ T9705] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 408.601873][ T9705] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 408.605982][ T9705] vhci_hcd vhci_hcd.0: Device attached [ 408.623679][ T6948] usb 8-1: USB disconnect, device number 4 [ 408.736846][ T9711] vhci_hcd: connection closed [ 408.742862][ T61] vhci_hcd vhci_hcd.0: stop threads [ 408.748814][ T61] vhci_hcd vhci_hcd.0: release socket [ 408.751409][ T61] vhci_hcd vhci_hcd.0: disconnect device [ 408.963364][ T9722] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 408.965594][ T9722] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 408.968841][ T9722] vhci_hcd vhci_hcd.0: Device attached [ 409.203426][ T5836] usb 41-1: new low-speed USB device number 5 using vhci_hcd [ 410.932975][ T9723] vhci_hcd: connection reset by peer [ 410.937708][ T5239] vhci_hcd vhci_hcd.2: stop threads [ 410.939500][ T5239] vhci_hcd vhci_hcd.2: release socket [ 410.942394][ T5239] vhci_hcd vhci_hcd.2: disconnect device [ 414.353776][ T9770] ubi31: attaching mtd0 [ 414.397200][ T9770] ubi31: scanning is finished [ 414.398838][ T9770] ubi31: empty MTD device detected [ 414.516974][ T5836] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 414.778235][ T9770] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 414.822705][ T9770] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 414.825679][ T9770] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 414.828884][ T9770] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 414.831884][ T9770] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 414.834648][ T9770] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 414.856412][ T9770] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1760179700 [ 414.867257][ T9770] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 414.878810][ T9775] ubi31: background thread "ubi_bgt31d" started, PID 9775 [ 415.603679][ T9792] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 415.605832][ T9792] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 415.608744][ T9792] vhci_hcd vhci_hcd.0: Device attached [ 415.857900][ T5836] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 416.989277][ T9793] vhci_hcd: connection reset by peer [ 416.992155][ T5195] vhci_hcd vhci_hcd.1: stop threads [ 416.994545][ T5195] vhci_hcd vhci_hcd.1: release socket [ 416.998601][ T5195] vhci_hcd vhci_hcd.1: disconnect device [ 418.051400][ T9815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.653'. [ 418.267086][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 418.267103][ T40] audit: type=1804 audit(1765478263.626:100): pid=9828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.654" name="/newroot/162/bus/bus" dev="overlay" ino=925 res=1 errno=0 [ 418.279869][ T9828] evm: overlay not supported [ 418.323097][ T40] audit: type=1804 audit(1765478263.686:101): pid=9828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.654" name="/newroot/162/bus/bus" dev="overlay" ino=925 res=1 errno=0 [ 418.341346][ T40] audit: type=1800 audit(1765478263.706:102): pid=9828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.654" name="bus" dev="overlay" ino=925 res=0 errno=0 [ 421.681772][ T5836] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 422.433977][ T9871] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 422.436862][ T9871] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 422.440428][ T9871] vhci_hcd vhci_hcd.0: Device attached [ 422.580211][ T9877] vhci_hcd: connection closed [ 422.580483][ T5239] vhci_hcd vhci_hcd.2: stop threads [ 422.584951][ T5239] vhci_hcd vhci_hcd.2: release socket [ 422.587581][ T5239] vhci_hcd vhci_hcd.2: disconnect device [ 427.997279][ T9926] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 427.999633][ T9926] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 428.005121][ T9926] vhci_hcd vhci_hcd.0: Device attached [ 428.606504][ T59] usb 38-1: SetAddress Request (59) to port 0 [ 428.608685][ T59] usb 38-1: new SuperSpeed USB device number 59 using vhci_hcd [ 428.727597][ T9927] vhci_hcd: connection reset by peer [ 428.730670][ T61] vhci_hcd vhci_hcd.0: stop threads [ 428.734035][ T61] vhci_hcd vhci_hcd.0: release socket [ 428.737393][ T61] vhci_hcd vhci_hcd.0: disconnect device [ 430.149408][ T9949] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 430.867856][ T6057] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 431.017862][ T6057] usb 5-1: Using ep0 maxpacket: 8 [ 431.090210][ T6057] usb 5-1: config 16 has an invalid descriptor of length 78, skipping remainder of the config [ 431.093773][ T6057] usb 5-1: too many endpoints for config 16 interface 0 altsetting 111: 55, using maximum allowed: 30 [ 431.097452][ T6057] usb 5-1: config 16 interface 0 altsetting 111 has 0 endpoint descriptors, different from the interface descriptor's value: 55 [ 431.101719][ T6057] usb 5-1: config 16 interface 0 has no altsetting 0 [ 431.104100][ T6057] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 431.107212][ T6057] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.348906][ T6057] usb 5-1: string descriptor 0 read error: -71 [ 431.369590][ T6057] usb 5-1: USB disconnect, device number 10 [ 433.649656][ T59] usb 38-1: device descriptor read/8, error -110 [ 434.040744][ T59] usb usb38-port1: attempt power cycle [ 434.392323][ T9990] netlink: 'syz.0.687': attribute type 13 has an invalid length. [ 434.398618][ T9990] netlink: 60 bytes leftover after parsing attributes in process `syz.0.687'. [ 434.620701][ T59] usb usb38-port1: unable to enumerate USB device [ 435.190744][T10004] netlink: 'syz.3.688': attribute type 13 has an invalid length. [ 438.110257][T10030] loop6: detected capacity change from 0 to 7 [ 438.114127][T10030] Dev loop6: unable to read RDB block 7 [ 438.122903][T10030] loop6: AHDI p3 p4 [ 438.124381][T10030] loop6: partition table partially beyond EOD, truncated [ 438.129000][T10030] loop6: p3 start 1886353253 is beyond EOD, truncated [ 442.127120][T10066] syz_tun: entered allmulticast mode [ 442.382628][T10051] syz_tun: left allmulticast mode [ 443.766305][T10084] Bluetooth: MGMT ver 1.23 [ 444.859378][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.608951][T10110] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 446.611244][T10110] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 446.637155][T10110] vhci_hcd vhci_hcd.0: Device attached [ 446.898162][ T5836] usb 42-1: SetAddress Request (60) to port 0 [ 446.900875][ T5836] usb 42-1: new SuperSpeed USB device number 60 using vhci_hcd [ 447.020630][T10111] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 447.022893][T10111] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 447.031064][T10111] vhci_hcd vhci_hcd.0: Device attached [ 447.258629][T10120] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 447.731057][T10115] vhci_hcd: connection closed [ 447.731404][ T1153] vhci_hcd vhci_hcd.3: stop threads [ 447.734625][ T1153] vhci_hcd vhci_hcd.3: release socket [ 447.911213][T10113] vhci_hcd: connection reset by peer [ 448.108856][ T1153] vhci_hcd vhci_hcd.3: disconnect device [ 448.111402][ T1153] vhci_hcd vhci_hcd.2: stop threads [ 448.113346][ T1153] vhci_hcd vhci_hcd.2: release socket [ 448.118837][ T1153] vhci_hcd vhci_hcd.2: disconnect device [ 448.506735][T10130] 9pnet_virtio: no channels available for device syz [ 448.512842][T10130] loop9: detected capacity change from 0 to 7 [ 448.517609][T10121] Dev loop9: unable to read RDB block 7 [ 448.520467][T10121] loop9: unable to read partition table [ 448.523070][T10121] loop9: partition table beyond EOD, truncated [ 448.543363][T10130] Dev loop9: unable to read RDB block 7 [ 448.545845][T10130] loop9: unable to read partition table [ 448.548842][T10130] loop9: partition table beyond EOD, truncated [ 448.558611][T10130] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 452.139501][ T5836] usb 42-1: device descriptor read/8, error -110 [ 452.575408][ T5836] usb usb42-port1: attempt power cycle [ 452.979258][T10178] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 453.922635][T10183] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 453.925305][T10183] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 453.928746][T10183] vhci_hcd vhci_hcd.0: Device attached [ 454.063119][ T5836] usb usb42-port1: unable to enumerate USB device [ 454.196675][ T7972] usb 44-1: SetAddress Request (60) to port 0 [ 454.199542][ T7972] usb 44-1: new SuperSpeed USB device number 60 using vhci_hcd [ 455.210250][T10191] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 455.212878][T10191] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 455.223397][T10191] vhci_hcd vhci_hcd.0: Device attached [ 455.604059][ T5962] usb 38-1: SetAddress Request (63) to port 0 [ 455.606305][ T5962] usb 38-1: new SuperSpeed USB device number 63 using vhci_hcd [ 455.866312][T10184] vhci_hcd: connection reset by peer [ 455.873146][T10201] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 455.873283][ T1142] vhci_hcd vhci_hcd.3: stop threads [ 455.875369][T10201] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 455.875507][T10201] vhci_hcd vhci_hcd.0: Device attached [ 455.884060][ T1142] vhci_hcd vhci_hcd.3: release socket [ 455.888595][ T1142] vhci_hcd vhci_hcd.3: disconnect device [ 455.999906][T10197] vhci_hcd: connection reset by peer [ 456.001863][ T1153] vhci_hcd vhci_hcd.0: stop threads [ 456.003579][ T1153] vhci_hcd vhci_hcd.0: release socket [ 456.005485][ T1153] vhci_hcd vhci_hcd.0: disconnect device [ 456.143971][ T10] usb 42-1: SetAddress Request (64) to port 0 [ 456.150583][ T10] usb 42-1: new SuperSpeed USB device number 64 using vhci_hcd [ 456.156785][T10203] vhci_hcd: connection closed [ 456.157467][ T6710] vhci_hcd vhci_hcd.2: stop threads [ 456.161850][ T6710] vhci_hcd vhci_hcd.2: release socket [ 456.164688][ T6710] vhci_hcd vhci_hcd.2: disconnect device [ 456.175948][ T10] usb 42-1: enqueue for inactive port 0 [ 456.586033][ T10] usb usb42-port1: attempt power cycle [ 457.145829][ T10] usb usb42-port1: unable to enumerate USB device [ 457.278289][T10215] netlink: 284 bytes leftover after parsing attributes in process `syz.2.736'. [ 459.374275][ T7972] usb 44-1: device descriptor read/8, error -110 [ 459.816258][ T7972] usb usb44-port1: attempt power cycle [ 460.537983][ T7972] usb usb44-port1: unable to enumerate USB device [ 460.706901][ T5962] usb 38-1: device descriptor read/8, error -110 [ 461.006999][ T40] audit: type=1804 audit(1765478306.339:103): pid=10249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.743" name="/newroot/182/bus/bus" dev="overlay" ino=1016 res=1 errno=0 [ 461.025538][ T40] audit: type=1804 audit(1765478306.349:104): pid=10249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.743" name="/newroot/182/bus/bus" dev="overlay" ino=1016 res=1 errno=0 [ 461.032674][ T40] audit: type=1800 audit(1765478306.349:105): pid=10249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.743" name="bus" dev="overlay" ino=1016 res=0 errno=0 [ 461.406037][ T5962] usb usb38-port1: attempt power cycle [ 461.986726][ T5962] usb usb38-port1: unable to enumerate USB device [ 462.064711][T10262] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 462.066907][T10262] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 462.079574][T10262] vhci_hcd vhci_hcd.0: Device attached [ 462.267643][ T5949] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 462.347747][ T75] usb 44-1: SetAddress Request (64) to port 0 [ 462.350168][ T75] usb 44-1: new SuperSpeed USB device number 64 using vhci_hcd [ 462.447725][ T5949] usb 7-1: Using ep0 maxpacket: 8 [ 462.450810][ T5949] usb 7-1: config 16 has an invalid descriptor of length 78, skipping remainder of the config [ 462.454146][ T5949] usb 7-1: too many endpoints for config 16 interface 0 altsetting 111: 55, using maximum allowed: 30 [ 462.458519][ T5949] usb 7-1: config 16 interface 0 altsetting 111 has 0 endpoint descriptors, different from the interface descriptor's value: 55 [ 462.462772][ T5949] usb 7-1: config 16 interface 0 has no altsetting 0 [ 462.465615][ T5949] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 462.470220][ T5949] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.728003][T10264] vhci_hcd: connection reset by peer [ 462.730875][ T61] vhci_hcd vhci_hcd.3: stop threads [ 462.733944][ T61] vhci_hcd vhci_hcd.3: release socket [ 462.736039][ T61] vhci_hcd vhci_hcd.3: disconnect device [ 462.747693][ T5949] usb 7-1: string descriptor 0 read error: -71 [ 462.754101][ T5949] usb 7-1: USB disconnect, device number 11 [ 462.832619][T10273] ubi: mtd0 is already attached to ubi31 [ 464.499102][T10286] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 464.501917][T10286] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 464.953299][T10286] vhci_hcd vhci_hcd.0: Device attached [ 465.197942][T10287] vhci_hcd: connection closed [ 465.198179][ T61] vhci_hcd vhci_hcd.3: stop threads [ 465.206126][ T61] vhci_hcd vhci_hcd.3: release socket [ 465.208657][ T61] vhci_hcd vhci_hcd.3: disconnect device [ 467.430874][ T75] usb 44-1: device descriptor read/8, error -110 [ 467.831508][ T75] usb usb44-port1: attempt power cycle [ 467.946214][ T40] audit: type=1326 audit(1765478313.275:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10310 comm="syz.2.756" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703d579 code=0x0 [ 468.013929][T10322] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 468.015855][T10322] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 468.018424][T10322] vhci_hcd vhci_hcd.0: Device attached [ 468.291342][ T5962] usb 40-1: SetAddress Request (46) to port 0 [ 468.294133][ T5962] usb 40-1: new SuperSpeed USB device number 46 using vhci_hcd [ 468.412019][ T75] usb usb44-port1: unable to enumerate USB device [ 468.526702][T10329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.759'. [ 468.530469][T10329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.759'. [ 468.755679][T10324] vhci_hcd: connection reset by peer [ 468.758095][ T12] vhci_hcd vhci_hcd.1: stop threads [ 468.760232][ T12] vhci_hcd vhci_hcd.1: release socket [ 468.762394][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 470.114933][T10346] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 470.117852][T10346] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 470.121587][T10346] vhci_hcd vhci_hcd.0: Device attached [ 470.382733][ T34] usb 44-1: SetAddress Request (68) to port 0 [ 470.386044][ T34] usb 44-1: new SuperSpeed USB device number 68 using vhci_hcd [ 470.954305][ T40] audit: type=1804 audit(1765478316.163:107): pid=10354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.765" name="/newroot/192/bus/bus" dev="overlay" ino=1047 res=1 errno=0 [ 471.064212][ T40] audit: type=1804 audit(1765478316.163:108): pid=10354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.765" name="/newroot/192/bus/bus" dev="overlay" ino=1047 res=1 errno=0 [ 471.082980][ T40] audit: type=1800 audit(1765478316.163:109): pid=10354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.765" name="bus" dev="overlay" ino=1047 res=0 errno=0 [ 471.576577][T10348] vhci_hcd: connection reset by peer [ 471.579808][ T12] vhci_hcd vhci_hcd.3: stop threads [ 471.582058][ T12] vhci_hcd vhci_hcd.3: release socket [ 471.584502][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 473.845502][ T5962] usb 40-1: device descriptor read/8, error -110 [ 474.248308][ T5962] usb usb40-port1: attempt power cycle [ 474.702860][T10387] netlink: 76 bytes leftover after parsing attributes in process `syz.1.772'. [ 474.806115][ T5962] usb usb40-port1: unable to enumerate USB device [ 475.203408][T10393] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 475.206045][T10393] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 475.234869][T10393] vhci_hcd vhci_hcd.0: Device attached [ 475.435783][ T34] usb 44-1: device descriptor read/8, error -110 [ 475.495712][ T5999] usb 42-1: SetAddress Request (68) to port 0 [ 475.497833][ T5999] usb 42-1: new SuperSpeed USB device number 68 using vhci_hcd [ 475.527168][T10396] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 475.532562][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.773'. [ 475.536358][T10396] netlink: 'syz.0.773': attribute type 5 has an invalid length. [ 475.539539][T10396] netlink: 20 bytes leftover after parsing attributes in process `syz.0.773'. [ 475.801489][T10396] geneve2: entered promiscuous mode [ 475.803700][T10396] geneve2: entered allmulticast mode [ 475.826419][ T34] usb usb44-port1: attempt power cycle [ 475.906130][ T1142] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 475.915704][ T1142] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 475.921204][ T1142] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 475.925312][ T1142] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 476.242244][T10394] vhci_hcd: connection reset by peer [ 476.244287][ T1142] vhci_hcd vhci_hcd.2: stop threads [ 476.246204][ T1142] vhci_hcd vhci_hcd.2: release socket [ 476.248291][ T1142] vhci_hcd vhci_hcd.2: disconnect device [ 476.397294][ T34] usb usb44-port1: unable to enumerate USB device [ 476.915292][T10409] netlink: 'syz.0.776': attribute type 39 has an invalid length. [ 477.021488][T10421] netlink: 72 bytes leftover after parsing attributes in process `syz.3.777'. [ 477.245186][T10422] lo speed is unknown, defaulting to 1000 [ 477.249182][T10422] lo speed is unknown, defaulting to 1000 [ 477.255178][T10422] lo speed is unknown, defaulting to 1000 [ 477.338629][T10424] syz_tun: left allmulticast mode [ 477.341022][T10424] syz_tun: left promiscuous mode [ 477.345456][T10424] bridge0: port 1(syz_tun) entered disabled state [ 477.554565][T10422] infiniband sz1: set active [ 477.556259][T10422] infiniband sz1: added lo [ 477.957149][T10422] RDS/IB: sz1: added [ 477.959847][T10422] smc: adding ib device sz1 with port count 1 [ 477.964337][T10422] smc: ib device sz1 port 1 has no pnetid [ 478.110880][T10432] loop9: detected capacity change from 0 to 7 [ 478.116883][T10432] Dev loop9: unable to read RDB block 7 [ 478.118912][T10432] loop9: unable to read partition table [ 478.120803][T10432] loop9: partition table beyond EOD, truncated [ 478.131801][T10432] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 478.713949][T10425] ªªªªªª: renamed from lo (while UP) [ 478.813100][ T5962] ªªªªªª speed is unknown, defaulting to 1000 [ 478.878408][ T5949] ªªªªªª speed is unknown, defaulting to 1000 [ 478.887974][T10422] ªªªªªª speed is unknown, defaulting to 1000 [ 479.554994][T10422] ªªªªªª speed is unknown, defaulting to 1000 [ 479.823514][T10422] ªªªªªª speed is unknown, defaulting to 1000 [ 480.047946][T10422] ªªªªªª speed is unknown, defaulting to 1000 [ 480.558783][ T5999] usb 42-1: device descriptor read/8, error -110 [ 480.751135][T10454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.784'. [ 480.754902][T10454] netlink: 72 bytes leftover after parsing attributes in process `syz.2.784'. [ 480.979435][ T5999] usb usb42-port1: attempt power cycle [ 481.145688][T10461] xt_CT: You must specify a L4 protocol and not use inversions on it [ 481.204913][T10457] bridge_slave_1: left allmulticast mode [ 481.233624][T10457] bridge_slave_1: left promiscuous mode [ 481.235938][T10457] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.253315][T10457] bridge_slave_0: left allmulticast mode [ 481.256009][T10457] bridge_slave_0: left promiscuous mode [ 481.261361][T10457] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.336836][T10465] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 481.339697][T10465] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 481.349335][T10465] vhci_hcd vhci_hcd.0: Device attached [ 481.555289][ T5999] usb usb42-port1: unable to enumerate USB device [ 481.621235][ T5836] usb 40-1: SetAddress Request (50) to port 0 [ 481.624441][ T5836] usb 40-1: new SuperSpeed USB device number 50 using vhci_hcd [ 481.704724][T10466] vhci_hcd: connection closed [ 481.724543][ T6710] vhci_hcd vhci_hcd.1: stop threads [ 481.731214][ T6710] vhci_hcd vhci_hcd.1: release socket [ 481.737272][ T6710] vhci_hcd vhci_hcd.1: disconnect device [ 482.232726][T10469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.787'. [ 483.414586][ T40] audit: type=1804 audit(1765478328.735:110): pid=10490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.789" name="/newroot/202/bus/bus" dev="overlay" ino=1107 res=1 errno=0 [ 483.535464][ T40] audit: type=1804 audit(1765478328.855:111): pid=10487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.789" name="/newroot/202/bus/bus" dev="overlay" ino=1107 res=1 errno=0 [ 483.561334][ T40] audit: type=1800 audit(1765478328.865:112): pid=10487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.789" name="bus" dev="overlay" ino=1107 res=0 errno=0 [ 486.969698][ T5836] usb 40-1: device descriptor read/8, error -110 [ 487.372959][T10527] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 487.375131][T10527] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 487.382199][T10527] vhci_hcd vhci_hcd.0: Device attached [ 487.452940][ T5836] usb 40-1: SetAddress Request (51) to port 0 [ 487.456575][ T5836] usb 40-1: new SuperSpeed USB device number 51 using vhci_hcd [ 487.703294][ T40] audit: type=1326 audit(1765478333.023:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10533 comm="syz.2.800" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 487.777623][ T40] audit: type=1326 audit(1765478333.023:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10533 comm="syz.2.800" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 487.792875][ T40] audit: type=1326 audit(1765478333.023:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10533 comm="syz.2.800" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 487.799564][ T40] audit: type=1326 audit(1765478333.023:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10533 comm="syz.2.800" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 487.813193][ T40] audit: type=1326 audit(1765478333.033:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10533 comm="syz.2.800" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 487.835330][ T40] audit: type=1326 audit(1765478333.033:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10533 comm="syz.2.800" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 487.843440][ T40] audit: type=1326 audit(1765478333.033:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10533 comm="syz.2.800" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 488.669520][T10528] vhci_hcd: connection reset by peer [ 488.673749][ T61] vhci_hcd vhci_hcd.1: stop threads [ 488.676431][ T61] vhci_hcd vhci_hcd.1: release socket [ 488.693459][ T61] vhci_hcd vhci_hcd.1: disconnect device [ 491.806930][T10572] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 492.485781][ T5836] usb 40-1: device descriptor read/8, error -110 [ 492.595916][ T5836] usb usb40-port1: attempt power cycle [ 493.726728][T10587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.812'. [ 494.040196][T10591] rdma_rxe: rxe_newlink: failed to add lo [ 494.057251][ T5836] usb usb40-port1: unable to enumerate USB device [ 494.089027][T10591] ªªªªªª: renamed from lo (while UP) [ 495.372260][T10603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.815'. [ 495.375322][T10603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.815'. [ 496.892016][T10615] loop2: detected capacity change from 0 to 7 [ 496.894690][T10615] Dev loop2: unable to read RDB block 7 [ 496.896584][T10615] loop2: AHDI p1 p2 p3 [ 496.897935][T10615] loop2: partition table partially beyond EOD, truncated [ 496.900449][T10615] loop2: p1 start 1601398130 is beyond EOD, truncated [ 496.902627][T10615] loop2: p2 start 1702059890 is beyond EOD, truncated [ 499.339667][T10636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.826'. [ 502.954336][T10664] netlink: 16 bytes leftover after parsing attributes in process `syz.3.832'. [ 503.897743][T10670] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 503.900352][T10670] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 503.917958][T10670] vhci_hcd vhci_hcd.0: Device attached [ 504.132586][ T5962] ªªªªªª speed is unknown, defaulting to 1000 [ 504.132624][ T5239] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.135382][ T5962] sz1: Port: 1 Link DOWN [ 504.141249][ T5239] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.144317][ T5239] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.147294][ T5239] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.182401][ T5962] ªªªªªª speed is unknown, defaulting to 1000 [ 505.013973][T10671] vhci_hcd: connection closed [ 505.041865][ T98] vhci_hcd vhci_hcd.0: stop threads [ 505.047341][ T98] vhci_hcd vhci_hcd.0: release socket [ 505.049616][ T98] vhci_hcd vhci_hcd.0: disconnect device [ 505.283736][ T5836] usb 38-1: enqueue for inactive port 0 [ 505.803854][ T5836] usb usb38-port1: attempt power cycle [ 506.354541][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.375890][ T5836] usb usb38-port1: unable to enumerate USB device [ 510.756088][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 510.758847][ T40] audit: type=1326 audit(1765478355.780:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10723 comm="syz.1.847" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 510.814989][ T40] audit: type=1326 audit(1765478355.780:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10723 comm="syz.1.847" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 510.877591][ T40] audit: type=1326 audit(1765478355.780:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10723 comm="syz.1.847" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 510.935244][ T40] audit: type=1326 audit(1765478355.780:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10723 comm="syz.1.847" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 510.976154][ T40] audit: type=1326 audit(1765478355.780:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10723 comm="syz.1.847" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 511.000648][ T40] audit: type=1326 audit(1765478355.780:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10723 comm="syz.1.847" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 511.050145][ T40] audit: type=1326 audit(1765478355.780:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10723 comm="syz.1.847" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 511.058868][ T40] audit: type=1326 audit(1765478355.780:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10723 comm="syz.1.847" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 511.065887][ T40] audit: type=1326 audit(1765478355.790:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10723 comm="syz.1.847" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 511.074710][ T40] audit: type=1326 audit(1765478355.790:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10731 comm="syz.1.847" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 521.800238][T10803] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 521.803077][T10803] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 521.847842][T10808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.864'. [ 522.050966][T10809] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 522.056590][T10809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.865'. [ 522.060649][T10809] netlink: 'syz.2.865': attribute type 5 has an invalid length. [ 522.064228][T10809] netlink: 20 bytes leftover after parsing attributes in process `syz.2.865'. [ 522.093809][T10809] geneve2: entered promiscuous mode [ 522.096210][T10809] geneve2: entered allmulticast mode [ 522.102251][ T1142] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 522.109494][ T1142] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 522.113354][ T1142] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 522.117020][ T1142] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 522.265086][T10803] vhci_hcd vhci_hcd.0: Device attached [ 522.532569][ T5949] usb 44-1: SetAddress Request (72) to port 0 [ 522.535307][ T5949] usb 44-1: new SuperSpeed USB device number 72 using vhci_hcd [ 522.761055][T10806] vhci_hcd: connection reset by peer [ 522.763336][ T61] vhci_hcd vhci_hcd.3: stop threads [ 522.768997][ T61] vhci_hcd vhci_hcd.3: release socket [ 522.771312][ T61] vhci_hcd vhci_hcd.3: disconnect device [ 522.970498][T10819] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 528.175537][ T5949] usb 44-1: device descriptor read/8, error -110 [ 528.586312][ T5949] usb usb44-port1: attempt power cycle [ 528.608036][T10867] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 529.167229][ T5949] usb usb44-port1: unable to enumerate USB device [ 530.096992][T10871] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 530.099622][T10871] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 530.127008][T10871] vhci_hcd vhci_hcd.0: Device attached [ 530.389246][T10877] x_tables: duplicate underflow at hook 1 [ 530.395028][T10877] hub 8-0:1.0: USB hub found [ 530.398682][T10877] hub 8-0:1.0: 1 port detected [ 530.406842][ T5836] usb 38-1: SetAddress Request (71) to port 0 [ 530.409709][ T5836] usb 38-1: new SuperSpeed USB device number 71 using vhci_hcd [ 530.608060][T10875] vhci_hcd: connection reset by peer [ 530.610846][ T5195] vhci_hcd vhci_hcd.0: stop threads [ 530.613344][ T5195] vhci_hcd vhci_hcd.0: release socket [ 530.615847][ T5195] vhci_hcd vhci_hcd.0: disconnect device [ 531.197487][T10890] tipc: Started in network mode [ 531.199289][T10890] tipc: Node identity 4, cluster identity 4711 [ 531.201257][T10890] tipc: Node number set to 4 [ 535.469518][ T5836] usb 38-1: device descriptor read/8, error -110 [ 536.005308][T10926] overlayfs: missing 'lowerdir' [ 536.048766][T10926] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 536.798690][ T5836] usb usb38-port1: attempt power cycle [ 538.301793][ T5836] usb usb38-port1: unable to enumerate USB device [ 541.577829][T10962] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 543.039343][T10979] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 543.307858][T10983] overlayfs: missing 'lowerdir' [ 543.399922][T10984] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 546.646445][T10970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.706213][T10970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.863944][T10970] tipc: Resetting bearer [ 546.964959][ T1153] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.975135][ T1153] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.984002][ T1153] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 546.989654][ T1153] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.993450][ T1153] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.998059][ T1153] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 547.011521][ T1153] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.014983][ T1153] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.018926][ T1153] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 547.023062][ T1153] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.027074][ T1153] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.030659][ T1153] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 550.448872][T11022] netlink: 16 bytes leftover after parsing attributes in process `syz.1.907'. [ 551.389086][T11031] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 551.396842][T11031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'. [ 551.402108][T11031] netlink: 'syz.3.909': attribute type 5 has an invalid length. [ 551.405500][T11031] netlink: 20 bytes leftover after parsing attributes in process `syz.3.909'. [ 551.475739][T11031] geneve2: entered promiscuous mode [ 551.486675][T11031] geneve2: entered allmulticast mode [ 551.522279][ T98] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 551.525780][ T98] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 551.531170][ T98] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 551.534630][ T98] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 552.842272][T11054] xt_CT: You must specify a L4 protocol and not use inversions on it [ 552.978894][T11055] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 552.983682][T11055] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 552.986263][T11055] vhci_hcd vhci_hcd.0: Device attached [ 553.278881][ T6032] usb 38-1: SetAddress Request (75) to port 0 [ 553.281832][ T6032] usb 38-1: new SuperSpeed USB device number 75 using vhci_hcd [ 553.391909][T11056] vhci_hcd: connection reset by peer [ 553.396178][ T6710] vhci_hcd vhci_hcd.0: stop threads [ 553.398492][ T6710] vhci_hcd vhci_hcd.0: release socket [ 553.401163][ T6710] vhci_hcd vhci_hcd.0: disconnect device [ 558.044002][T11092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.921'. [ 558.361523][ T6032] usb 38-1: device descriptor read/8, error -110 [ 558.752685][ T6032] usb usb38-port1: attempt power cycle [ 559.018715][T11102] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 559.021241][T11102] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 559.024692][T11102] vhci_hcd vhci_hcd.0: Device attached [ 559.301864][ T5949] usb 42-1: SetAddress Request (72) to port 0 [ 559.304671][ T5949] usb 42-1: new SuperSpeed USB device number 72 using vhci_hcd [ 559.447241][T11106] vhci_hcd: connection reset by peer [ 559.472174][ T5239] vhci_hcd vhci_hcd.2: stop threads [ 559.474362][ T5239] vhci_hcd vhci_hcd.2: release socket [ 559.476766][ T5239] vhci_hcd vhci_hcd.2: disconnect device [ 560.245036][ T6032] usb usb38-port1: unable to enumerate USB device [ 563.204236][ T1142] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 563.303863][ T1142] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 563.306600][ T1142] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 563.309374][ T1142] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 564.364420][ T5949] usb 42-1: device descriptor read/8, error -110 [ 565.645198][ T5949] usb usb42-port1: attempt power cycle [ 566.796161][ T5949] usb usb42-port1: unable to enumerate USB device [ 567.810356][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 577.533591][T11255] dummy0: entered allmulticast mode [ 578.091593][ T5836] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 578.572714][ T5836] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.580054][ T5836] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 578.583827][ T5836] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.586371][ T5836] usb 7-1: Product: syz [ 578.587758][ T5836] usb 7-1: Manufacturer: syz [ 578.589375][ T5836] usb 7-1: SerialNumber: syz [ 578.592367][ T5836] usb 7-1: config 0 descriptor?? [ 580.580617][ T5836] keyspan 7-1:0.0: Keyspan 1 port adapter converter detected [ 580.587250][ T5836] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 82 [ 581.247900][ T5836] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 81 [ 581.250470][ T5836] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 1 [ 581.253075][ T5836] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 2 [ 581.257381][ T5836] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 581.263816][ T5836] usb 7-1: USB disconnect, device number 12 [ 581.268565][ T5836] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 581.272146][ T5836] keyspan 7-1:0.0: device disconnected [ 587.706627][T11337] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 587.709313][T11337] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 587.715497][T11337] vhci_hcd vhci_hcd.0: Device attached [ 587.996214][ T6032] usb 38-1: SetAddress Request (79) to port 0 [ 587.998907][ T6032] usb 38-1: new SuperSpeed USB device number 79 using vhci_hcd [ 588.782093][T11338] vhci_hcd: connection reset by peer [ 588.784833][ T61] vhci_hcd vhci_hcd.0: stop threads [ 588.787963][ T61] vhci_hcd vhci_hcd.0: release socket [ 588.790552][ T61] vhci_hcd vhci_hcd.0: disconnect device [ 593.098566][ T6032] usb 38-1: device descriptor read/8, error -110 [ 593.492107][ T6032] usb usb38-port1: attempt power cycle [ 593.884284][T11384] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.904939][T11384] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.070910][T11384] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.074161][T11384] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.152801][T11384] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.157847][T11384] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.349529][ T6032] usb usb38-port1: unable to enumerate USB device [ 594.435262][T11384] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.439485][T11384] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.726957][ T98] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.730515][ T98] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.744219][ T98] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.747641][ T98] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.768061][ T1153] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.778038][ T1153] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.813235][ T98] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.815797][ T98] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.981937][T11410] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 594.983834][T11410] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 594.986635][T11410] vhci_hcd vhci_hcd.0: Device attached [ 595.269465][ T5962] usb 38-1: SetAddress Request (83) to port 0 [ 595.271544][ T5962] usb 38-1: new SuperSpeed USB device number 83 using vhci_hcd [ 595.859530][T11411] vhci_hcd: connection reset by peer [ 595.861689][ T98] vhci_hcd vhci_hcd.0: stop threads [ 595.863445][ T98] vhci_hcd vhci_hcd.0: release socket [ 595.865287][ T98] vhci_hcd vhci_hcd.0: disconnect device [ 601.927740][ T5962] usb 38-1: device descriptor read/8, error -110 [ 603.123670][ T5962] usb usb38-port1: attempt power cycle [ 603.684269][ T5962] usb usb38-port1: unable to enumerate USB device [ 605.888789][T11496] batman_adv: batadv0: Adding interface: gretap1 [ 605.890986][T11496] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.899885][T11496] batman_adv: batadv0: Interface activated: gretap1 [ 608.486260][T11509] batman_adv: batadv0: Interface deactivated: gretap1 [ 611.526012][T11537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1022'. [ 612.316544][T11577] Invalid logical block size (53355) [ 615.663995][T11591] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0 [ 615.667448][T11591] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 615.672172][T11591] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 615.675716][T11591] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 616.860061][T11616] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 616.862668][T11616] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 616.873615][T11616] vhci_hcd vhci_hcd.0: Device attached [ 617.141931][ T6210] usb 38-1: SetAddress Request (87) to port 0 [ 617.144806][ T6210] usb 38-1: new SuperSpeed USB device number 87 using vhci_hcd [ 617.845471][T11617] vhci_hcd: connection reset by peer [ 617.847918][T11591] vhci_hcd vhci_hcd.0: stop threads [ 617.849721][T11591] vhci_hcd vhci_hcd.0: release socket [ 617.851633][T11591] vhci_hcd vhci_hcd.0: disconnect device [ 620.909931][T11649] overlay: Unknown parameter '/' [ 622.242291][ T6210] usb 38-1: device descriptor read/8, error -110 [ 622.632522][ T6210] usb usb38-port1: attempt power cycle [ 623.222729][ T6210] usb usb38-port1: unable to enumerate USB device [ 627.310521][T11716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1064'. [ 627.373836][T11718] input: syz1 as /devices/virtual/input/input10 [ 627.431350][T11718] IPVS: set_ctl: invalid protocol: 94 172.20.20.170:20003 [ 629.280568][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 633.773989][T11760] overlay: Unknown parameter '/' [ 634.087836][T11764] vlan0: left promiscuous mode [ 634.098917][T11764] vxlan0: left promiscuous mode [ 634.101868][T11764] geneve2: left promiscuous mode [ 634.103902][T11764] geneve2: left allmulticast mode [ 637.250958][T11789] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 637.253886][T11789] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 637.257621][T11789] vhci_hcd vhci_hcd.0: Device attached [ 637.538697][ T6032] usb 38-1: SetAddress Request (91) to port 0 [ 637.541560][ T6032] usb 38-1: new SuperSpeed USB device number 91 using vhci_hcd [ 639.577531][T11790] vhci_hcd: connection reset by peer [ 639.581368][ T86] vhci_hcd vhci_hcd.0: stop threads [ 639.583058][ T86] vhci_hcd vhci_hcd.0: release socket [ 639.585152][ T86] vhci_hcd vhci_hcd.0: disconnect device [ 640.185677][T11800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1078'. [ 642.640897][ T6032] usb 38-1: device descriptor read/8, error -110 [ 643.948896][ T6032] usb usb38-port1: attempt power cycle [ 644.320417][T11855] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 644.322960][T11855] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 644.341748][T11855] vhci_hcd vhci_hcd.0: Device attached [ 644.502131][ T6032] usb usb38-port1: unable to enumerate USB device [ 644.612268][ T5999] usb 44-1: SetAddress Request (76) to port 0 [ 644.615040][ T5999] usb 44-1: new SuperSpeed USB device number 76 using vhci_hcd [ 646.921599][T11856] vhci_hcd: connection reset by peer [ 646.982804][ T61] vhci_hcd vhci_hcd.3: stop threads [ 646.985207][ T61] vhci_hcd vhci_hcd.3: release socket [ 646.987498][ T61] vhci_hcd vhci_hcd.3: disconnect device [ 649.723940][T11880] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 649.726123][T11880] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 649.740992][T11880] vhci_hcd vhci_hcd.0: Device attached [ 649.953797][ T5999] usb 44-1: device descriptor read/8, error -110 [ 650.844584][ T9] usb 40-1: SetAddress Request (54) to port 0 [ 650.846612][ T9] usb 40-1: new SuperSpeed USB device number 54 using vhci_hcd [ 651.296059][T11881] vhci_hcd: connection reset by peer [ 651.298557][ T61] vhci_hcd vhci_hcd.1: stop threads [ 651.300435][ T61] vhci_hcd vhci_hcd.1: release socket [ 651.302285][ T61] vhci_hcd vhci_hcd.1: disconnect device [ 651.305392][ T5999] usb usb44-port1: attempt power cycle [ 651.982340][ T5999] usb usb44-port1: unable to enumerate USB device [ 653.038433][T11878] 9pnet_fd: p9_fd_create_tcp (11878): problem connecting socket to 127.0.0.1 [ 653.045747][T11898] kAFS: unable to lookup cell '(' [ 653.625812][T11903] ================================================================== [ 653.629223][T11903] BUG: KASAN: slab-use-after-free in __radix_tree_replace+0x317/0x360 [ 653.632536][T11903] Read of size 1 at addr ffff88804f6939c2 by task syz.0.1096/11903 [ 653.637588][T11903] [ 653.638646][T11903] CPU: 2 UID: 0 PID: 11903 Comm: syz.0.1096 Tainted: G L syzkaller #0 PREEMPT(full) [ 653.638678][T11903] Tainted: [L]=SOFTLOCKUP [ 653.638685][T11903] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 653.638698][T11903] Call Trace: [ 653.638708][T11903] [ 653.638718][T11903] dump_stack_lvl+0x116/0x1f0 [ 653.638748][T11903] print_report+0xcd/0x630 [ 653.638777][T11903] ? __virt_addr_valid+0x81/0x610 [ 653.638807][T11903] ? __phys_addr+0xe8/0x180 [ 653.638836][T11903] ? __radix_tree_replace+0x317/0x360 [ 653.638856][T11903] kasan_report+0xe0/0x110 [ 653.638883][T11903] ? __radix_tree_replace+0x317/0x360 [ 653.638906][T11903] __radix_tree_replace+0x317/0x360 [ 653.638929][T11903] idr_alloc_u32+0x1fd/0x2f0 [ 653.638950][T11903] ? __pfx_idr_alloc_u32+0x10/0x10 [ 653.638974][T11903] idr_alloc_cyclic+0x10b/0x230 [ 653.638995][T11903] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 653.639012][T11903] ? lockdep_init_map_type+0x5c/0x270 [ 653.639032][T11903] ? __rwlock_init+0x37/0x150 [ 653.639053][T11903] afs_lookup_cell+0x11d1/0x1900 [ 653.639081][T11903] ? __pfx_afs_lookup_cell+0x10/0x10 [ 653.639104][T11903] ? __mutex_lock+0x27b/0x1ca0 [ 653.639127][T11903] ? fs_param_is_string+0xc5/0x200 [ 653.639148][T11903] ? __pfx_fs_param_is_string+0x10/0x10 [ 653.639166][T11903] ? __fs_parse+0x278/0x960 [ 653.639186][T11903] afs_parse_param+0x5c4/0x970 [ 653.639210][T11903] ? __pfx_afs_parse_param+0x10/0x10 [ 653.639233][T11903] ? static_key_count+0x5a/0x70 [ 653.639259][T11903] ? __pfx_afs_parse_param+0x10/0x10 [ 653.639282][T11903] vfs_parse_fs_param+0x20b/0x3c0 [ 653.639302][T11903] __do_sys_fsconfig+0x930/0xbe0 [ 653.639336][T11903] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 653.639367][T11903] __do_fast_syscall_32+0xe8/0x680 [ 653.639394][T11903] do_fast_syscall_32+0x32/0x80 [ 653.639418][T11903] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 653.639441][T11903] RIP: 0023:0xf7f84579 [ 653.639456][T11903] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 653.639475][T11903] RSP: 002b:00000000f4bd555c EFLAGS: 00000296 ORIG_RAX: 00000000000001af [ 653.639492][T11903] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000000000001 [ 653.639505][T11903] RDX: 0000000080000000 RSI: 0000000080000180 RDI: 0000000000000000 [ 653.639517][T11903] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 653.639529][T11903] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 653.639541][T11903] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 653.639560][T11903] [ 653.639567][T11903] [ 653.745528][T11903] Allocated by task 11898: [ 653.747348][T11903] kasan_save_stack+0x33/0x60 [ 653.749291][T11903] kasan_save_track+0x14/0x30 [ 653.750818][T11903] __kasan_slab_alloc+0x89/0x90 [ 653.752422][T11903] kmem_cache_alloc_noprof+0x25e/0x770 [ 653.754234][T11903] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 653.756710][T11903] idr_get_free+0x528/0xa30 [ 653.758655][T11903] idr_alloc_u32+0x190/0x2f0 [ 653.760644][T11903] idr_alloc_cyclic+0x10b/0x230 [ 653.762680][T11903] afs_lookup_cell+0x11d1/0x1900 [ 653.764834][T11903] afs_parse_param+0x5c4/0x970 [ 653.766851][T11903] vfs_parse_fs_param+0x20b/0x3c0 [ 653.768941][T11903] __do_sys_fsconfig+0x930/0xbe0 [ 653.770961][T11903] __do_fast_syscall_32+0xe8/0x680 [ 653.773132][T11903] do_fast_syscall_32+0x32/0x80 [ 653.775166][T11903] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 653.777818][T11903] [ 653.778720][T11903] Freed by task 0: [ 653.780315][T11903] kasan_save_stack+0x33/0x60 [ 653.782303][T11903] kasan_save_track+0x14/0x30 [ 653.784380][T11903] kasan_save_free_info+0x3b/0x60 [ 653.786525][T11903] __kasan_slab_free+0x5f/0x80 [ 653.788591][T11903] kmem_cache_free+0x2d8/0x770 [ 653.790204][T11903] rcu_core+0x79c/0x15f0 [ 653.791622][T11903] handle_softirqs+0x219/0x950 [ 653.793284][T11903] __irq_exit_rcu+0x109/0x170 [ 653.794935][T11903] irq_exit_rcu+0x9/0x30 [ 653.796773][T11903] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 653.799136][T11903] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 653.801655][T11903] [ 653.802689][T11903] Last potentially related work creation: [ 653.805091][T11903] kasan_save_stack+0x33/0x60 [ 653.807128][T11903] kasan_record_aux_stack+0xa7/0xc0 [ 653.809187][T11903] __call_rcu_common.constprop.0+0xa5/0xa10 [ 653.811424][T11903] delete_node+0x1fc/0x8d0 [ 653.813455][T11903] __radix_tree_delete+0x193/0x3d0 [ 653.815422][T11903] radix_tree_delete_item+0xea/0x230 [ 653.817621][T11903] afs_cell_destroy+0x1db/0x310 [ 653.819635][T11903] rcu_core+0x79c/0x15f0 [ 653.821414][T11903] handle_softirqs+0x219/0x950 [ 653.823433][T11903] __irq_exit_rcu+0x109/0x170 [ 653.825437][T11903] irq_exit_rcu+0x9/0x30 [ 653.827291][T11903] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 653.829670][T11903] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 653.832318][T11903] [ 653.833409][T11903] The buggy address belongs to the object at ffff88804f6939c0 [ 653.833409][T11903] which belongs to the cache radix_tree_node of size 576 [ 653.838567][T11903] The buggy address is located 2 bytes inside of [ 653.838567][T11903] freed 576-byte region [ffff88804f6939c0, ffff88804f693c00) [ 653.843956][T11903] [ 653.845066][T11903] The buggy address belongs to the physical page: [ 653.847980][T11903] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4f690 [ 653.851764][T11903] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 653.855341][T11903] memcg:ffff88804d3b9e01 [ 653.857163][T11903] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 653.860290][T11903] page_type: f5(slab) [ 653.862004][T11903] raw: 04fff00000000040 ffff88801b44cc80 dead000000000122 0000000000000000 [ 653.865545][T11903] raw: 0000000000000000 0000000080170017 00000000f5000000 ffff88804d3b9e01 [ 653.869114][T11903] head: 04fff00000000040 ffff88801b44cc80 dead000000000122 0000000000000000 [ 653.872582][T11903] head: 0000000000000000 0000000080170017 00000000f5000000 ffff88804d3b9e01 [ 653.876011][T11903] head: 04fff00000000002 ffffea00013da401 00000000ffffffff 00000000ffffffff [ 653.879461][T11903] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 653.882980][T11903] page dumped because: kasan: bad access detected [ 653.885684][T11903] page_owner tracks the page as allocated [ 653.888057][T11903] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0x152810(GFP_NOWAIT|__GFP_RECLAIMABLE|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 11848, tgid 11847 (syz.2.1089), ts 643758920019, free_ts 199291394557 [ 653.896890][T11903] post_alloc_hook+0x1af/0x220 [ 653.898968][T11903] get_page_from_freelist+0xd0b/0x31a0 [ 653.901360][T11903] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 653.903913][T11903] alloc_pages_mpol+0x1fb/0x550 [ 653.906000][T11903] new_slab+0x2c3/0x430 [ 653.907641][T11903] ___slab_alloc+0xe18/0x1c90 [ 653.909588][T11903] __slab_alloc.constprop.0+0x63/0x110 [ 653.911873][T11903] kmem_cache_alloc_lru_noprof+0x451/0x770 [ 653.914382][T11903] xas_alloc+0x34f/0x460 [ 653.916193][T11903] xas_create+0x72b/0x1460 [ 653.918030][T11903] xas_store+0x90/0x1910 [ 653.919546][T11903] shmem_add_to_page_cache+0x7b7/0xa70 [ 653.921518][T11903] shmem_alloc_and_add_folio+0x662/0xc20 [ 653.923587][T11903] shmem_get_folio_gfp+0x67f/0x1610 [ 653.925299][T11903] shmem_fault+0x1fe/0xa00 [ 653.927141][T11903] __do_fault+0x10d/0x490 [ 653.929003][T11903] page last free pid 7671 tgid 7671 stack trace: [ 653.931606][T11903] __free_frozen_pages+0x7df/0x1170 [ 653.933513][T11903] qlist_free_all+0x4c/0xf0 [ 653.935123][T11903] kasan_quarantine_reduce+0x195/0x1e0 [ 653.937450][T11903] __kasan_slab_alloc+0x69/0x90 [ 653.939542][T11903] kmem_cache_alloc_noprof+0x25e/0x770 [ 653.941839][T11903] getname_flags.part.0+0x4c/0x550 [ 653.944017][T11903] getname_flags+0x93/0xf0 [ 653.945927][T11903] vfs_fstatat+0xe1/0xf0 [ 653.947744][T11903] __do_sys_newfstatat+0x97/0x120 [ 653.949682][T11903] do_syscall_64+0xcd/0xf80 [ 653.951301][T11903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.953793][T11903] [ 653.954703][T11903] Memory state around the buggy address: [ 653.957093][T11903] ffff88804f693880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 653.960357][T11903] ffff88804f693900: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 653.963615][T11903] >ffff88804f693980: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 653.966839][T11903] ^ [ 653.969297][T11903] ffff88804f693a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 653.972530][T11903] ffff88804f693a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 653.975869][T11903] ================================================================== [ 653.995300][T11903] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 653.998429][T11903] CPU: 2 UID: 0 PID: 11903 Comm: syz.0.1096 Tainted: G L syzkaller #0 PREEMPT(full) [ 654.002295][T11903] Tainted: [L]=SOFTLOCKUP [ 654.003756][T11903] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 654.008066][T11903] Call Trace: [ 654.009509][T11903] [ 654.010766][T11903] dump_stack_lvl+0x3d/0x1f0 [ 654.012821][T11903] vpanic+0x640/0x6f0 [ 654.014563][T11903] panic+0xca/0xd0 [ 654.016204][T11903] ? __pfx_panic+0x10/0x10 [ 654.018120][T11903] ? __radix_tree_replace+0x317/0x360 [ 654.020343][T11903] ? preempt_schedule_common+0x44/0xc0 [ 654.022138][T11903] ? preempt_schedule_thunk+0x16/0x30 [ 654.024476][T11903] check_panic_on_warn+0xab/0xb0 [ 654.026578][T11903] end_report+0x107/0x160 [ 654.028439][T11903] kasan_report+0xee/0x110 [ 654.030404][T11903] ? __radix_tree_replace+0x317/0x360 [ 654.032605][T11903] __radix_tree_replace+0x317/0x360 [ 654.034289][T11903] idr_alloc_u32+0x1fd/0x2f0 [ 654.036172][T11903] ? __pfx_idr_alloc_u32+0x10/0x10 [ 654.038361][T11903] idr_alloc_cyclic+0x10b/0x230 [ 654.040435][T11903] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 654.042717][T11903] ? lockdep_init_map_type+0x5c/0x270 [ 654.044982][T11903] ? __rwlock_init+0x37/0x150 [ 654.046704][T11903] afs_lookup_cell+0x11d1/0x1900 [ 654.048600][T11903] ? __pfx_afs_lookup_cell+0x10/0x10 [ 654.050878][T11903] ? __mutex_lock+0x27b/0x1ca0 [ 654.052890][T11903] ? fs_param_is_string+0xc5/0x200 [ 654.055059][T11903] ? __pfx_fs_param_is_string+0x10/0x10 [ 654.057406][T11903] ? __fs_parse+0x278/0x960 [ 654.059348][T11903] afs_parse_param+0x5c4/0x970 [ 654.061419][T11903] ? __pfx_afs_parse_param+0x10/0x10 [ 654.063726][T11903] ? static_key_count+0x5a/0x70 [ 654.065839][T11903] ? __pfx_afs_parse_param+0x10/0x10 [ 654.068128][T11903] vfs_parse_fs_param+0x20b/0x3c0 [ 654.069857][T11903] __do_sys_fsconfig+0x930/0xbe0 [ 654.071479][T11903] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 654.073689][T11903] __do_fast_syscall_32+0xe8/0x680 [ 654.075852][T11903] do_fast_syscall_32+0x32/0x80 [ 654.078018][T11903] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 654.080853][T11903] RIP: 0023:0xf7f84579 [ 654.082695][T11903] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 654.090461][T11903] RSP: 002b:00000000f4bd555c EFLAGS: 00000296 ORIG_RAX: 00000000000001af [ 654.093801][T11903] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000000000001 [ 654.097207][T11903] RDX: 0000000080000000 RSI: 0000000080000180 RDI: 0000000000000000 [ 654.100538][T11903] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 654.103886][T11903] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 654.107380][T11903] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 654.110364][T11903] [ 654.112474][T11903] Kernel Offset: disabled [ 654.114368][T11903] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:37:23 Registers: info registers vcpu 0 CPU#0 RAX=0000000080000002 RBX=0000000000000000 RCX=ffffc9000c402000 RDX=0000000000080000 RSI=ffffffff8bf2a680 RDI=ffffffff8bf2a6c0 RBP=0000000000000246 RSP=ffffc9003127f6a0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000002 R11=ffff88807702d4b0 R12=ffffffff893f8902 R13=0000000000000246 R14=ffff888023bbf2a8 R15=ffffc9003127f8a8 RIP=ffffffff8b74ce71 RFL=00000096 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097702000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f540cda4 CR3=0000000029501000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000014000000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000001dd7c39 RBX=0000000000000001 RCX=ffffffff8b74c6d9 RDX=0000000000000000 RSI=ffffffff8dac7ce1 RDI=ffffffff8bf2a700 RBP=ffffed1003b5c498 RSP=ffffc9000046fde8 R8 =0000000000000001 R9 =ffffed100566673d R10=ffff88802b3339eb R11=ffff88801dae2ff0 R12=0000000000000001 R13=ffff88801dae24c0 R14=ffffffff9088afd0 R15=0000000000000000 RIP=ffffffff8b74adcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097802000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000303ffff8 CR3=0000000029501000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000014000000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff852f7b85 RDI=ffffffff9aed3220 RBP=ffffffff9aed31e0 RSP=ffffc900295b7498 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3430383838666666 R12=0000000000000000 R13=0000000000000061 R14=ffffffff9aed31e0 R15=ffffffff852f7b20 RIP=ffffffff852f7baf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097902000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000304fbff8 CR3=0000000069e5c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000051365b RBX=0000000000000003 RCX=ffffffff8b74c6d9 RDX=0000000000000000 RSI=ffffffff8dac7ce1 RDI=ffffffff8bf2a700 RBP=ffffed10039d6000 RSP=ffffc9000048fde8 R8 =0000000000000001 R9 =ffffed10056a673d R10=ffff88802b5339eb R11=ffff88801ceb0b30 R12=0000000000000003 R13=ffff88801ceb0000 R14=ffffffff9088afd0 R15=0000000000000000 RIP=ffffffff8b74adcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097a02000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000081000000 CR3=000000000e184000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005631758d7c50 00005631758d7c50 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdfec81780 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c626f7270203a 2938373831312820 7063745f65746165 72635f64665f3970 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6570206568742074 6361706d6920646c 756f632068636968 772032726579616c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 206e6f206465746e 656d676172662065 62206c6c69772065 6361667265746e69 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2073696874207265 766f20676e696f67 207374656b636150 202e7374656b6361 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 70207664612d6e61 6d74616220666f20 74726f70736e6172 742065687420656c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000