last executing test programs: 4m25.350912825s ago: executing program 2 (id=1011): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/100, 0x38}], 0x1) syz_io_uring_setup(0x1f90, &(0x7f0000000140)={0x0, 0x4162, 0x840, 0x1, 0x35b}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) r3 = mmap$IORING_OFF_SQES(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x1000006, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) sendmmsg$inet6(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)}], 0x1}}], 0x1, 0x10) shutdown(r0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) setitimer(0x2, &(0x7f0000000540)={{}, {0x0, 0x2710}}, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4089, 0xff9}], 0x2, 0x740, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) 4m25.345378755s ago: executing program 2 (id=1014): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc8100, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, 0x0) r4 = syz_open_dev$vim2m(0x0, 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x47}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m25.330069002s ago: executing program 2 (id=1016): ioperm(0x284, 0x7f, 0xe3) socket$netlink(0x10, 0x3, 0x0) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x7aad, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) readv(r5, &(0x7f0000000100)=[{&(0x7f0000001180)=""/4085, 0xff5}], 0x1) socket$netlink(0x10, 0x3, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f0000000100)) socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) 4m25.329003058s ago: executing program 2 (id=1017): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) socket(0xa, 0x3, 0x3a) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000200)={0xfffffffc, 0x0, 0x6, 0x0, 0xff, "db8f2d2b3b7596160c6981acf8805944823a7f"}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @empty}, 0x0) 4m25.303377218s ago: executing program 2 (id=1021): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aSpA\xd4\x98\x85D\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97\xe7\xe6\x97\xf9\xb3\xf6\xb9\v\xb5$\xee\x84\x1cn,B\xd5?\xe5E:+Pm\x1d\xb4\xb8', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r0, 0x0, 0x4, 0x0) write$tun(r2, &(0x7f0000000040)=ANY=[], 0x3) socket$l2tp6(0xa, 0x2, 0x73) fcntl$getown(r1, 0x9) sendmsg$netlink(r1, 0x0, 0x8001) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) flock(0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000040)='./file1\x00', 0x160) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') write$cgroup_int(0xffffffffffffffff, &(0x7f0000000540), 0xfffffdd8) 4m23.087938094s ago: executing program 2 (id=1029): ioperm(0x284, 0x7f, 0xe3) socket$netlink(0x10, 0x3, 0x0) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x7aad, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) readv(r5, &(0x7f0000000100)=[{&(0x7f0000001180)=""/4085, 0xff5}], 0x1) socket$netlink(0x10, 0x3, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f0000000100)) socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) 4m7.705163309s ago: executing program 32 (id=1029): ioperm(0x284, 0x7f, 0xe3) socket$netlink(0x10, 0x3, 0x0) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x7aad, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) readv(r5, &(0x7f0000000100)=[{&(0x7f0000001180)=""/4085, 0xff5}], 0x1) socket$netlink(0x10, 0x3, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f0000000100)) socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) 18.517454457s ago: executing program 4 (id=1506): syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x910ec27568a00e35, 0x40000002, 0x0) openat$cdrom(0xffffff9c, &(0x7f00000012c0), 0x42880, 0x0) syz_usbip_server_init(0x3) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) lsetxattr$trusted_overlay_redirect(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300), &(0x7f0000000540)='./file0\x00', 0x8, 0x2) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x2000}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, 0x0, &(0x7f0000000080)) 13.38213747s ago: executing program 4 (id=1514): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) socket(0xa, 0x3, 0x3a) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000200)={0xfffffffc, 0x0, 0x6, 0x0, 0xff, "db8f2d2b3b7596160c6981acf8805944823a7f"}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @empty}, 0x0) r5 = memfd_secret(0x0) ppoll(&(0x7f0000000100)=[{r5, 0x200}], 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000000300)={[0x10000, 0x7f55]}, 0x8) unshare(0x40020000) socket$packet(0x11, 0x3, 0x300) 12.050249292s ago: executing program 4 (id=1518): syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x910ec27568a00e35, 0x40000002, 0x0) openat$cdrom(0xffffff9c, &(0x7f00000012c0), 0x42880, 0x0) syz_usbip_server_init(0x3) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) lsetxattr$trusted_overlay_redirect(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300), &(0x7f0000000540)='./file0\x00', 0x8, 0x2) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x2000}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, 0x0, &(0x7f0000000080)) 11.546489593s ago: executing program 3 (id=1520): syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x910ec27568a00e35, 0x40000002, 0x0) openat$cdrom(0xffffff9c, &(0x7f00000012c0), 0x42880, 0x0) syz_usbip_server_init(0x3) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) lsetxattr$trusted_overlay_redirect(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300), &(0x7f0000000540)='./file0\x00', 0x8, 0x2) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x48) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x2000}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, 0x0, &(0x7f0000000080)) 9.440141642s ago: executing program 1 (id=1522): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000200)={0xfffffffc, 0x0, 0x6, 0x0, 0xff, "db8f2d2b3b7596160c6981acf8805944823a7f"}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @empty}, 0x0) r5 = memfd_secret(0x0) ppoll(&(0x7f0000000100)=[{r5, 0x200}], 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000000300)={[0x10000, 0x7f55]}, 0x8) unshare(0x40020000) socket$packet(0x11, 0x3, 0x300) 8.746115609s ago: executing program 1 (id=1524): syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x910ec27568a00e35, 0x40000002, 0x0) openat$cdrom(0xffffff9c, &(0x7f00000012c0), 0x42880, 0x0) syz_usbip_server_init(0x3) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) lsetxattr$trusted_overlay_redirect(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300), &(0x7f0000000540)='./file0\x00', 0x8, 0x2) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x2000}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, 0x0, &(0x7f0000000080)) 7.951348042s ago: executing program 0 (id=1525): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) socket(0xa, 0x3, 0x3a) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000200)={0xfffffffc, 0x0, 0x6, 0x0, 0xff, "db8f2d2b3b7596160c6981acf8805944823a7f"}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @empty}, 0x0) r5 = memfd_secret(0x0) ppoll(&(0x7f0000000100)=[{r5, 0x200}], 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000000300)={[0x10000, 0x7f55]}, 0x8) unshare(0x40020000) socket$packet(0x11, 0x3, 0x300) 7.235250417s ago: executing program 4 (id=1526): syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x910ec27568a00e35, 0x40000002, 0x0) openat$cdrom(0xffffff9c, &(0x7f00000012c0), 0x42880, 0x0) syz_usbip_server_init(0x3) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x2000}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, 0x0, &(0x7f0000000080)) 7.024795214s ago: executing program 0 (id=1527): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) socket(0xa, 0x3, 0x3a) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000200)={0xfffffffc, 0x0, 0x6, 0x0, 0xff, "db8f2d2b3b7596160c6981acf8805944823a7f"}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @empty}, 0x0) r5 = memfd_secret(0x0) ppoll(&(0x7f0000000100)=[{r5, 0x200}], 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000000300)={[0x10000, 0x7f55]}, 0x8) unshare(0x40020000) socket$packet(0x11, 0x3, 0x300) 6.060480047s ago: executing program 0 (id=1528): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket(0xa, 0x3, 0x3a) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000200)={0xfffffffc, 0x0, 0x6, 0x0, 0xff, "db8f2d2b3b7596160c6981acf8805944823a7f"}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @empty}, 0x0) r4 = memfd_secret(0x0) ppoll(&(0x7f0000000100)=[{r4, 0x200}], 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000000300)={[0x10000, 0x7f55]}, 0x8) unshare(0x40020000) socket$packet(0x11, 0x3, 0x300) 5.818028695s ago: executing program 3 (id=1529): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) socket(0xa, 0x3, 0x3a) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000200)={0xfffffffc, 0x0, 0x6, 0x0, 0xff, "db8f2d2b3b7596160c6981acf8805944823a7f"}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @empty}, 0x0) r3 = memfd_secret(0x0) ppoll(&(0x7f0000000100)=[{r3, 0x200}], 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000000300)={[0x10000, 0x7f55]}, 0x8) unshare(0x40020000) socket$packet(0x11, 0x3, 0x300) 5.692941542s ago: executing program 1 (id=1530): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000200)={0xfffffffc, 0x0, 0x6, 0x0, 0xff, "db8f2d2b3b7596160c6981acf8805944823a7f"}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @empty}, 0x0) r5 = memfd_secret(0x0) ppoll(&(0x7f0000000100)=[{r5, 0x200}], 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000000300)={[0x10000, 0x7f55]}, 0x8) unshare(0x40020000) socket$packet(0x11, 0x3, 0x300) 4.958054181s ago: executing program 0 (id=1531): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) socket(0xa, 0x3, 0x3a) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000200)={0xfffffffc, 0x0, 0x6, 0x0, 0xff, "db8f2d2b3b7596160c6981acf8805944823a7f"}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @empty}, 0x0) r4 = memfd_secret(0x0) ppoll(&(0x7f0000000100)=[{r4, 0x200}], 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000000300)={[0x10000, 0x7f55]}, 0x8) unshare(0x40020000) socket$packet(0x11, 0x3, 0x300) 4.82516521s ago: executing program 3 (id=1532): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) socket(0xa, 0x3, 0x3a) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000200)={0xfffffffc, 0x0, 0x6, 0x0, 0xff, "db8f2d2b3b7596160c6981acf8805944823a7f"}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @empty}, 0x0) r4 = memfd_secret(0x0) ppoll(&(0x7f0000000100)=[{r4, 0x200}], 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000000300)={[0x10000, 0x7f55]}, 0x8) unshare(0x40020000) socket$packet(0x11, 0x3, 0x300) 4.611420751s ago: executing program 1 (id=1533): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000200)={0xfffffffc, 0x0, 0x6, 0x0, 0xff, "db8f2d2b3b7596160c6981acf8805944823a7f"}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @empty}, 0x0) r5 = memfd_secret(0x0) ppoll(&(0x7f0000000100)=[{r5, 0x200}], 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000000300)={[0x10000, 0x7f55]}, 0x8) unshare(0x40020000) socket$packet(0x11, 0x3, 0x300) 2.998457738s ago: executing program 0 (id=1534): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) munlockall() fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08000140000000020800"], 0x122}, 0x1, 0x0, 0x0, 0x2}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x1}, 0x1c) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.875453481s ago: executing program 1 (id=1535): syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x910ec27568a00e35, 0x40000002, 0x0) openat$cdrom(0xffffff9c, &(0x7f00000012c0), 0x42880, 0x0) syz_usbip_server_init(0x3) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) lsetxattr$trusted_overlay_redirect(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300), &(0x7f0000000540)='./file0\x00', 0x8, 0x2) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x2000}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, 0x0, &(0x7f0000000080)) 2.832002088s ago: executing program 3 (id=1536): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000001c0), 0xed00, 0x0) ioctl$CDROM_SET_OPTIONS(r0, 0x5320, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f0000000280)) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) syz_open_dev$media(&(0x7f00000001c0), 0x6, 0x200000) fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x810) 1.948181231s ago: executing program 0 (id=1537): syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x910ec27568a00e35, 0x40000002, 0x0) openat$cdrom(0xffffff9c, &(0x7f00000012c0), 0x42880, 0x0) syz_usbip_server_init(0x3) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) lsetxattr$trusted_overlay_redirect(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300), &(0x7f0000000540)='./file0\x00', 0x8, 0x2) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x48) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x2000}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, 0x0, &(0x7f0000000080)) 1.122987911s ago: executing program 1 (id=1538): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, 0x0) syz_io_uring_setup(0x5e2, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) socket$inet_sctp(0x2, 0x5, 0x84) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0601, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x14) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r5) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0x1e) r8 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x66, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x35, 0x0, 0xd, 0x65]}, &(0x7f0000000180)={0x0, "de8d0d27ca969fa15f8b3b7bae39c1b3327d4332f8c149d2d65a347d67f6db7eb90dfdad3cdebaaf421412f812305c9da91699b5a02c1295596f0fd9ec78f2fd", 0x2d}, 0x48, r5) keyctl$KEYCTL_MOVE(0x1e, r8, r5, r6, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0x0) r9 = mq_open(&(0x7f000084dff0)='!sali\x1cqxte&\xac\xe87x\x00', 0x6e93ebbbcc0884f2, 0x12e, &(0x7f0000000300)={0x0, 0x1, 0x7}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x14) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) 1.122755536s ago: executing program 4 (id=1539): ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0245628, &(0x7f0000000040)={0x0, 0x81, 0x0, '\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x20, 0x1}, 0x50) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000004c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket(0x21, 0x2, 0x2) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x700, &(0x7f0000001a80)={&(0x7f0000000a40)={0x3c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000000c0)=0x40001, 0x4) connect$inet(r6, &(0x7f00000003c0)={0x1f, 0x4e21, @remote}, 0x70) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}], 0x6) 1.122627567s ago: executing program 3 (id=1540): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) socket(0xa, 0x3, 0x3a) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000200)={0xfffffffc, 0x0, 0x6, 0x0, 0xff, "db8f2d2b3b7596160c6981acf8805944823a7f"}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @empty}, 0x0) r3 = memfd_secret(0x0) ppoll(&(0x7f0000000100)=[{r3, 0x200}], 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000000300)={[0x10000, 0x7f55]}, 0x8) unshare(0x40020000) socket$packet(0x11, 0x3, 0x300) 516.428939ms ago: executing program 4 (id=1541): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) open_by_handle_at(0xffffffffffffffff, 0x0, 0x12000) socket$inet6_tcp(0xa, 0x1, 0x0) 0s ago: executing program 3 (id=1542): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000200)={0xfffffffc, 0x0, 0x6, 0x0, 0xff, "db8f2d2b3b7596160c6981acf8805944823a7f"}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @empty}, 0x0) r5 = memfd_secret(0x0) ppoll(&(0x7f0000000100)=[{r5, 0x200}], 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000000300)={[0x10000, 0x7f55]}, 0x8) unshare(0x40020000) socket$packet(0x11, 0x3, 0x300) kernel console output (not intermixed with test programs): eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.373191][ T6732] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.385313][ T6732] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.388408][ T6732] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.429334][ T72] lo speed is unknown, defaulting to 1000 [ 105.431635][ T72] syz0: Port: 1 Link DOWN [ 105.844089][ T6742] random: crng reseeded on system resumption [ 106.152414][ T6750] lo speed is unknown, defaulting to 1000 [ 106.550986][ T75] Bluetooth: hci4: Frame reassembly failed (-84) [ 106.667884][ T6754] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 6754 comm: syz.0.176) [ 106.672820][ T40] audit: type=1800 audit(1751064825.723:9): pid=6754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.176" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=14546 res=0 errno=0 [ 108.623744][ T6788] random: crng reseeded on system resumption [ 108.626729][ T5944] Bluetooth: hci4: command 0x1003 tx timeout [ 108.629685][ T5943] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 110.603189][ T6826] ieee802154 phy0 wpan0: encryption failed: -22 [ 110.695481][ T6826] netlink: 'syz.2.200': attribute type 23 has an invalid length. [ 110.786426][ T6828] input: syz1 as /devices/virtual/input/input9 [ 111.512340][ T6836] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 111.514408][ T6836] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 111.517152][ T6836] vhci_hcd vhci_hcd.0: Device attached [ 111.577783][ T6837] vhci_hcd: connection closed [ 111.579243][ T60] vhci_hcd: stop threads [ 111.583192][ T60] vhci_hcd: release socket [ 111.593286][ T60] vhci_hcd: disconnect device [ 112.222178][ T6846] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 6846 comm: syz.2.203) [ 112.226250][ T40] audit: type=1800 audit(1751064831.283:10): pid=6846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.203" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=14753 res=0 errno=0 [ 113.526341][ T6865] lo speed is unknown, defaulting to 1000 [ 113.977805][ T6870] siw: device registration error -23 [ 114.251797][ T6875] ieee802154 phy0 wpan0: encryption failed: -22 [ 114.295243][ T5943] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 114.361663][ T6875] netlink: 'syz.3.212': attribute type 23 has an invalid length. [ 115.620093][ T6891] input: syz1 as /devices/virtual/input/input10 [ 116.032035][ T72] syz_tun: tun_net_xmit 110 [ 116.525619][ T6004] syz_tun: tun_net_xmit 110 [ 116.934060][ T6917] [U] [ 116.935217][ T6917] [U] [ 116.936105][ T6917] [U] [ 116.937035][ T6917] [U] [ 116.938779][ T6917] [U] [ 116.939693][ T6917] [U] [ 116.940587][ T6917] [U] [ 116.941484][ T6917] [U] [ 116.942456][ T6917] [U] [ 116.943361][ T6917] [U] [ 116.944389][ T6917] [U] [ 116.945412][ T6917] [U] [ 116.947402][ T6917] [U] [ 116.948313][ T6917] [U] [ 116.949201][ T6917] [U] [ 116.950113][ T6917] [U] [ 116.951029][ T6917] [U] [ 116.951936][ T6917] [U] [ 116.952860][ T6917] [U] [ 116.953756][ T6917] [U] [ 116.954896][ T6917] [U] [ 116.955869][ T6917] [U] [ 116.956757][ T6917] [U] [ 116.957671][ T6917] [U] [ 116.958753][ T6917] [U] [ 116.959646][ T6917] [U] [ 116.960538][ T6917] [U] [ 116.961415][ T6917] [U] [ 116.962302][ T6917] [U] [ 116.963189][ T6917] [U] [ 116.964133][ T6917] [U] [ 116.965292][ T6917] [U] [ 116.966321][ T6917] [U] [ 116.967259][ T6917] [U] [ 116.968150][ T6917] [U] [ 116.969080][ T6917] [U] [ 116.969998][ T6917] [U] [ 116.970881][ T6917] [U] [ 116.971767][ T6917] [U] [ 116.972665][ T6917] [U] [ 116.973663][ T6917] [U] [ 116.974713][ T6917] [U] [ 116.975597][ T6917] [U] [ 116.976485][ T6917] [U] [ 116.977680][ T6917] [U] [ 116.978584][ T6917] [U] [ 116.979464][ T6917] [U] [ 116.980360][ T6917] [U] [ 116.981350][ T6917] [U] [ 116.982248][ T6917] [U] [ 116.983141][ T6917] [U] [ 116.984087][ T6917] [U] [ 116.986624][ T6917] [U] [ 116.987883][ T6917] [U] [ 116.989087][ T6917] [U] [ 116.990289][ T6917] [U] [ 116.991694][ T6917] [U] [ 116.992629][ T6917] [U] [ 116.993518][ T6917] [U] [ 116.994528][ T6917] [U] [ 116.995617][ T6917] [U] [ 116.996526][ T6917] [U] [ 116.997428][ T6917] [U] [ 116.998290][ T6917] [U] [ 116.999335][ T6917] [U] [ 117.000259][ T6917] [U] [ 117.001156][ T6917] [U] [ 117.002046][ T6917] [U] [ 117.003064][ T6917] [U] [ 117.003978][ T6917] [U] [ 117.004856][ T6917] [U] [ 117.005648][ T6917] [U] [ 117.007070][ T6917] [U] [ 117.008335][ T6917] [U] [ 117.009560][ T6917] [U] [ 117.010769][ T6917] [U] [ 117.012116][ T6917] [U] [ 117.013362][ T6917] [U] [ 117.014551][ T6917] [U] [ 117.015755][ T6917] [U] [ 117.018381][ T6917] [U] [ 117.019615][ T6917] [U] [ 117.020839][ T6917] [U] [ 117.022040][ T6917] [U] [ 117.182030][ T6916] [U] [ 117.897542][ T6934] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 117.899650][ T6934] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 117.902482][ T6934] vhci_hcd vhci_hcd.0: Device attached [ 118.226732][ T6938] vhci_hcd: connection closed [ 118.242580][ T60] vhci_hcd: stop threads [ 118.246776][ T60] vhci_hcd: release socket [ 118.248335][ T60] vhci_hcd: disconnect device [ 118.343551][ T6945] netlink: 24 bytes leftover after parsing attributes in process `syz.3.230'. [ 119.519080][ T40] audit: type=1804 audit(1751064838.573:11): pid=6953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.231" name="/newroot/55/bus" dev="tmpfs" ino=320 res=1 errno=0 [ 119.856517][ T6958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.233'. [ 120.179292][ T6962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.242'. [ 120.386287][ T6967] xt_SECMARK: invalid mode: 0 [ 120.449772][ T40] audit: type=1804 audit(1751064839.453:12): pid=6967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.234" name="/newroot/59/bus" dev="tmpfs" ino=342 res=1 errno=0 [ 122.569417][ T6983] random: crng reseeded on system resumption [ 122.638198][ T6992] input: syz1 as /devices/virtual/input/input11 [ 125.855798][ T40] audit: type=1804 audit(1751064844.913:13): pid=7035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.250" name="/newroot/59/bus" dev="tmpfs" ino=341 res=1 errno=0 [ 126.279593][ T7036] lo speed is unknown, defaulting to 1000 [ 126.493423][ T7037] lo speed is unknown, defaulting to 1000 [ 126.985481][ T7048] random: crng reseeded on system resumption [ 127.197512][ T7057] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.249398][ T7057] netlink: 'syz.0.255': attribute type 23 has an invalid length. [ 128.260215][ T7068] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 128.262994][ T7068] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 128.266500][ T7068] vhci_hcd vhci_hcd.0: Device attached [ 128.352286][ T7070] vhci_hcd: connection closed [ 128.354908][ T75] vhci_hcd: stop threads [ 128.359437][ T75] vhci_hcd: release socket [ 128.361453][ T75] vhci_hcd: disconnect device [ 129.464610][ T7081] xt_CT: You must specify a L4 protocol and not use inversions on it [ 130.090527][ T7099] netlink: 24 bytes leftover after parsing attributes in process `syz.1.265'. [ 130.102292][ T7087] loop6: detected capacity change from 0 to 524287999 [ 130.112077][ T7089] siw: device registration error -23 [ 131.747592][ T7129] netlink: 24 bytes leftover after parsing attributes in process `syz.3.275'. [ 131.945410][ T7127] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 131.948063][ T7127] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 131.951681][ T7127] vhci_hcd vhci_hcd.0: Device attached [ 132.023326][ T7132] vhci_hcd: connection closed [ 132.049806][ T46] vhci_hcd: stop threads [ 132.053441][ T46] vhci_hcd: release socket [ 132.067275][ T46] vhci_hcd: disconnect device [ 133.676862][ T841] IPVS: starting estimator thread 0... [ 133.680813][ T7144] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 133.763611][ T7150] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.775462][ T7149] IPVS: using max 44 ests per chain, 105600 per kthread [ 133.823618][ T7148] netlink: 24 bytes leftover after parsing attributes in process `syz.0.286'. [ 134.081910][ T7150] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.157723][ T7150] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.222898][ T7150] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.311350][ T7150] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.318386][ T7150] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.328466][ T7150] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.335958][ T7150] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.871693][ T7170] block device autoloading is deprecated and will be removed. [ 136.925894][ T7167] md2: using deprecated bitmap file support [ 136.931173][ T7167] md2: error: bitmap file is already in use [ 137.201901][ T7178] lo speed is unknown, defaulting to 1000 [ 137.419762][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.422603][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.143191][ T7213] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 140.145360][ T7213] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 140.175576][ T7213] vhci_hcd vhci_hcd.0: Device attached [ 140.182917][ T7216] vhci_hcd: connection closed [ 140.183519][ T13] vhci_hcd: stop threads [ 140.187539][ T13] vhci_hcd: release socket [ 140.189419][ T13] vhci_hcd: disconnect device [ 141.121170][ T7232] block device autoloading is deprecated and will be removed. [ 141.186211][ T7228] md2: using deprecated bitmap file support [ 141.189976][ T7228] md2: error: bitmap file is already in use [ 144.296412][ T7270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.310'. [ 144.303669][ T7270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.310'. [ 144.309275][ T7270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.310'. [ 144.580173][ T7275] random: crng reseeded on system resumption [ 146.135352][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.318'. [ 146.147211][ T7300] team1: entered promiscuous mode [ 146.149427][ T7300] 8021q: adding VLAN 0 to HW filter on device team1 [ 149.394488][ T7349] xt_CT: You must specify a L4 protocol and not use inversions on it [ 150.797172][ T7366] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 150.799230][ T7366] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 150.801659][ T7366] vhci_hcd vhci_hcd.0: Device attached [ 151.165300][ T6004] usb 42-1: SetAddress Request (2) to port 0 [ 151.170268][ T6004] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 151.583963][ T7367] vhci_hcd: connection reset by peer [ 151.586112][ T94] vhci_hcd: stop threads [ 151.587665][ T94] vhci_hcd: release socket [ 151.590173][ T94] vhci_hcd: disconnect device [ 151.868121][ T7382] Cannot find del_set index 3 as target [ 151.871333][ T7382] netlink: 'syz.3.340': attribute type 11 has an invalid length. [ 151.873945][ T7382] netlink: 224 bytes leftover after parsing attributes in process `syz.3.340'. [ 152.495807][ T7406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.342'. [ 154.143286][ T7437] netlink: 24 bytes leftover after parsing attributes in process `syz.1.350'. [ 155.787114][ T7460] Bluetooth: MGMT ver 1.23 [ 155.899222][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.358'. [ 155.902090][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.358'. [ 156.216147][ T6004] usb 42-1: device descriptor read/8, error -110 [ 156.298523][ T7477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.359'. [ 157.235377][ T6004] usb usb42-port1: attempt power cycle [ 157.452190][ T7499] netlink: 24 bytes leftover after parsing attributes in process `syz.2.364'. [ 157.816551][ T6004] usb usb42-port1: unable to enumerate USB device [ 158.447208][ T7510] xt_CT: You must specify a L4 protocol and not use inversions on it [ 160.112602][ T7546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.375'. [ 160.518947][ T7555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.374'. [ 160.561886][ T7556] xt_CT: You must specify a L4 protocol and not use inversions on it [ 161.041017][ T7568] netlink: 24 bytes leftover after parsing attributes in process `syz.0.378'. [ 165.099500][ T7622] netlink: 'syz.2.388': attribute type 10 has an invalid length. [ 165.102677][ T7622] veth0_vlan: left promiscuous mode [ 165.107343][ T7622] veth0_vlan: entered promiscuous mode [ 165.113382][ T7622] team0: Device veth0_vlan failed to register rx_handler [ 167.132021][ T7666] 9pnet: Unknown protocol version 9p20\++} [ 168.293903][ T7685] lo speed is unknown, defaulting to 1000 [ 168.684287][ T7686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.406'. [ 169.052829][ T7708] loop2: detected capacity change from 0 to 7 [ 169.053764][ T7696] lo speed is unknown, defaulting to 1000 [ 169.066596][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 169.069642][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 169.074816][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 169.078421][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 169.083975][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 169.087874][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 169.091456][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 169.095312][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 169.102921][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 169.107425][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 169.111573][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 169.114483][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 169.118351][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 169.121207][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 169.123755][ T7708] ldm_validate_partition_table(): Disk read failed. [ 169.127461][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 169.130751][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 169.133505][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 169.136948][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 169.140984][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 169.144820][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 169.151174][ T7708] Dev loop2: unable to read RDB block 0 [ 169.166402][ T29] IPVS: starting estimator thread 0... [ 169.228548][ T7708] loop2: unable to read partition table [ 169.230562][ T7708] loop2: partition table beyond EOD, truncated [ 169.234562][ T7708] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 169.275338][ T7713] IPVS: using max 44 ests per chain, 105600 per kthread [ 169.743579][ T5351] ldm_validate_partition_table(): Disk read failed. [ 169.748608][ T5351] Dev loop2: unable to read RDB block 0 [ 169.752122][ T5351] loop2: unable to read partition table [ 169.753982][ T5351] loop2: partition table beyond EOD, truncated [ 169.860273][ T5944] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 169.863400][ T5944] CPU: 1 UID: 0 PID: 5944 Comm: kworker/u33:4 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 169.863415][ T5944] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 169.863423][ T5944] Workqueue: hci2 hci_rx_work [ 169.863438][ T5944] Call Trace: [ 169.863443][ T5944] [ 169.863448][ T5944] dump_stack_lvl+0x16c/0x1f0 [ 169.863467][ T5944] sysfs_warn_dup+0x7f/0xa0 [ 169.863482][ T5944] sysfs_create_dir_ns+0x24b/0x2b0 [ 169.863495][ T5944] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 169.863509][ T5944] ? find_held_lock+0x2b/0x80 [ 169.863523][ T5944] ? do_raw_spin_unlock+0x172/0x230 [ 169.863539][ T5944] kobject_add_internal+0x2c4/0x9b0 [ 169.863552][ T5944] kobject_add+0x16e/0x240 [ 169.863562][ T5944] ? __pfx_kobject_add+0x10/0x10 [ 169.863574][ T5944] ? do_raw_spin_unlock+0x172/0x230 [ 169.863589][ T5944] ? kobject_put+0xab/0x5a0 [ 169.863602][ T5944] device_add+0x288/0x1a70 [ 169.863614][ T5944] ? __pfx_dev_set_name+0x10/0x10 [ 169.863625][ T5944] ? __pfx_device_add+0x10/0x10 [ 169.863636][ T5944] ? mgmt_send_event_skb+0x2fb/0x460 [ 169.863654][ T5944] hci_conn_add_sysfs+0x17e/0x230 [ 169.863666][ T5944] le_conn_complete_evt+0x1075/0x1d70 [ 169.863685][ T5944] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 169.863699][ T5944] ? hci_event_packet+0x459/0x11c0 [ 169.863718][ T5944] hci_le_conn_complete_evt+0x23c/0x370 [ 169.863769][ T5944] hci_le_meta_evt+0x354/0x5e0 [ 169.863781][ T5944] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 169.863799][ T5944] hci_event_packet+0x685/0x11c0 [ 169.863815][ T5944] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 169.863826][ T5944] ? __pfx_hci_event_packet+0x10/0x10 [ 169.863844][ T5944] ? kcov_remote_start+0x3c9/0x6d0 [ 169.863861][ T5944] ? lockdep_hardirqs_on+0x7c/0x110 [ 169.863880][ T5944] hci_rx_work+0x2c5/0x16b0 [ 169.863890][ T5944] ? rcu_is_watching+0x12/0xc0 [ 169.863902][ T5944] process_one_work+0x9cc/0x1b70 [ 169.863923][ T5944] ? __pfx_process_one_work+0x10/0x10 [ 169.863941][ T5944] ? assign_work+0x1a0/0x250 [ 169.863956][ T5944] worker_thread+0x6c8/0xf10 [ 169.863980][ T5944] ? __kthread_parkme+0x19e/0x250 [ 169.863992][ T5944] ? __pfx_worker_thread+0x10/0x10 [ 169.864007][ T5944] kthread+0x3c5/0x780 [ 169.864020][ T5944] ? __pfx_kthread+0x10/0x10 [ 169.864035][ T5944] ? rcu_is_watching+0x12/0xc0 [ 169.864044][ T5944] ? __pfx_kthread+0x10/0x10 [ 169.864062][ T5944] ret_from_fork+0x5d4/0x6f0 [ 169.864077][ T5944] ? __pfx_kthread+0x10/0x10 [ 169.864092][ T5944] ret_from_fork_asm+0x1a/0x30 [ 169.864110][ T5944] [ 169.864126][ T5944] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 169.950035][ T5944] Bluetooth: hci2: failed to register connection device [ 171.849379][ T7765] lo speed is unknown, defaulting to 1000 [ 172.663324][ T40] audit: type=1800 audit(1751064891.713:14): pid=7765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.426" name="/" dev="fuse" ino=0 res=0 errno=0 [ 173.902722][ T7816] netlink: 'syz.1.438': attribute type 1 has an invalid length. [ 173.995335][ T841] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 174.146845][ T841] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.150074][ T841] usb 7-1: config 0 has no interfaces? [ 174.155718][ T841] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 174.162077][ T841] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.170234][ T841] usb 7-1: config 0 descriptor?? [ 174.886994][ T145] usb 7-1: USB disconnect, device number 3 [ 176.472405][ T7856] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 178.365690][ T7887] block nbd2: NBD_DISCONNECT [ 178.368497][ T7887] block nbd2: Send disconnect failed -22 [ 178.372320][ T7883] block nbd2: Disconnected due to user request. [ 178.374418][ T7883] block nbd2: shutting down sockets [ 178.434779][ T7885] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 180.063584][ T841] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 180.455301][ T5951] Bluetooth: hci2: command 0x0406 tx timeout [ 180.455327][ T5954] Bluetooth: hci1: command 0x0406 tx timeout [ 180.754033][ T7938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.469'. [ 181.542409][ T7950] ptrace attach of "/syz-executor exec"[5941] was attempted by "/syz-executor exec"[7950] [ 181.771189][ T7959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.471'. [ 182.467182][ T7976] tipc: Started in network mode [ 182.470598][ T7976] tipc: Node identity ffffa848, cluster identity 4711 [ 182.475302][ T7976] tipc: Node number set to 4294944840 [ 182.667314][ T7981] sockfs: Unknown parameter 'REJECT' [ 182.672327][ T7981] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 182.685900][ T7979] can: request_module (can-proto-3) failed. [ 183.153491][ T7990] netlink: 'syz.1.482': attribute type 39 has an invalid length. [ 183.596860][ T8000] netlink: 56 bytes leftover after parsing attributes in process `syz.0.483'. [ 185.596991][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.492'. [ 186.974352][ T8067] input: syz0 as /devices/virtual/input/input14 [ 186.998410][ T8067] netlink: 'syz.2.502': attribute type 4 has an invalid length. [ 189.826599][ T40] audit: type=1326 audit(1751064908.883:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8099 comm="syz.1.511" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x0 [ 189.891543][ T8106] capability: warning: `syz.0.513' uses deprecated v2 capabilities in a way that may be insecure [ 195.430748][ T8204] loop6: detected capacity change from 0 to 524287999 [ 196.484209][ T8205] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.487584][ T8205] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.490310][ T8205] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.493064][ T8205] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.351058][ T8215] netlink: 'syz.0.540': attribute type 9 has an invalid length. [ 198.842897][ T8248] trusted_key: encrypted_key: insufficient parameters specified [ 198.857834][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.860097][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.406685][ T8258] netlink: 'syz.2.552': attribute type 2 has an invalid length. [ 201.361137][ T8279] netlink: 56 bytes leftover after parsing attributes in process `syz.2.555'. [ 202.680480][ T8308] input: syz0 as /devices/virtual/input/input15 [ 202.696378][ T8308] netlink: 'syz.1.565': attribute type 4 has an invalid length. [ 203.505907][ T40] audit: type=1326 audit(1751065178.558:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.0.568" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x0 [ 205.989888][ T8357] netlink: 56 bytes leftover after parsing attributes in process `syz.3.574'. [ 207.615186][ T6004] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 207.785292][ T6004] usb 5-1: Using ep0 maxpacket: 32 [ 207.791347][ T6004] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 207.796256][ T6004] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.813498][ T6004] usb 5-1: config 0 descriptor?? [ 208.025984][ T6004] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 208.053620][ T6004] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 208.062843][ T6004] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 208.066120][ T6004] usb 5-1: media controller created [ 208.101281][ T6004] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 208.265328][ T8379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.582'. [ 208.374619][ T6004] az6027: usb out operation failed. (-71) [ 208.380331][ T6004] az6027: usb out operation failed. (-71) [ 208.382802][ T6004] stb0899_attach: Driver disabled by Kconfig [ 208.395210][ T6004] az6027: no front-end attached [ 208.395210][ T6004] [ 208.396225][ T40] audit: type=1326 audit(1751065183.448:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8383 comm="syz.2.585" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x0 [ 208.407401][ T6004] az6027: usb out operation failed. (-71) [ 208.409533][ T6004] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 208.415236][ T6004] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input16 [ 208.425317][ T6004] dvb-usb: schedule remote query interval to 400 msecs. [ 208.427612][ T6004] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 208.459930][ T6004] usb 5-1: USB disconnect, device number 3 [ 208.517776][ T6004] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 212.897381][ T8455] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.603' sets config #1 [ 213.730617][ T8465] netlink: 88 bytes leftover after parsing attributes in process `syz.2.606'. [ 214.491469][ T8476] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.608'. [ 215.227346][ T8494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.612'. [ 216.608086][ T8517] netlink: 88 bytes leftover after parsing attributes in process `syz.1.618'. [ 216.625697][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.617'. [ 217.890698][ T8531] Driver unsupported XDP return value 0 on prog (id 87) dev N/A, expect packet loss! [ 218.286246][ T8543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.623'. [ 218.316852][ T8543] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 219.737510][ T8574] netlink: 88 bytes leftover after parsing attributes in process `syz.2.630'. [ 220.313107][ T8583] netlink: 88 bytes leftover after parsing attributes in process `syz.1.633'. [ 221.981816][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.639'. [ 221.995841][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.639'. [ 222.008204][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.639'. [ 224.065973][ T8637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.643'. [ 225.745784][ T5944] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 228.748110][ T8713] syz.3.663: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 228.753018][ T8713] CPU: 3 UID: 0 PID: 8713 Comm: syz.3.663 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 228.753034][ T8713] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 228.753041][ T8713] Call Trace: [ 228.753046][ T8713] [ 228.753051][ T8713] dump_stack_lvl+0x16c/0x1f0 [ 228.753087][ T8713] warn_alloc+0x248/0x3a0 [ 228.753105][ T8713] ? __pfx_warn_alloc+0x10/0x10 [ 228.753120][ T8713] ? __pfx_stack_trace_save+0x10/0x10 [ 228.753131][ T8713] ? stack_depot_save_flags+0x28/0xa40 [ 228.753154][ T8713] ? kasan_save_stack+0x42/0x60 [ 228.753167][ T8713] ? kasan_save_stack+0x33/0x60 [ 228.753180][ T8713] ? kasan_save_track+0x14/0x30 [ 228.753193][ T8713] ? xskq_create+0x52/0x1d0 [ 228.753206][ T8713] ? xsk_setsockopt+0x640/0x840 [ 228.753221][ T8713] ? do_sock_setsockopt+0x224/0x470 [ 228.753237][ T8713] ? xskq_create+0xfb/0x1d0 [ 228.753251][ T8713] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 228.753270][ T8713] ? xskq_create+0xfb/0x1d0 [ 228.753288][ T8713] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 228.753305][ T8713] ? xskq_create+0xfb/0x1d0 [ 228.753318][ T8713] vmalloc_user_noprof+0x9e/0xe0 [ 228.753330][ T8713] ? xskq_create+0xfb/0x1d0 [ 228.753343][ T8713] xskq_create+0xfb/0x1d0 [ 228.753357][ T8713] xsk_setsockopt+0x640/0x840 [ 228.753371][ T8713] ? __pfx_xsk_setsockopt+0x10/0x10 [ 228.753384][ T8713] ? __pfx_aa_sk_perm+0x10/0x10 [ 228.753396][ T8713] ? errseq_sample+0x53/0x70 [ 228.753414][ T8713] ? __pfx_xsk_setsockopt+0x10/0x10 [ 228.753426][ T8713] do_sock_setsockopt+0x224/0x470 [ 228.753436][ T8713] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 228.753454][ T8713] __sys_setsockopt+0x120/0x1a0 [ 228.753471][ T8713] __ia32_sys_setsockopt+0xbc/0x160 [ 228.753485][ T8713] ? lockdep_hardirqs_on+0x7c/0x110 [ 228.753499][ T8713] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 228.753515][ T8713] __do_fast_syscall_32+0x7c/0x3a0 [ 228.753532][ T8713] do_fast_syscall_32+0x32/0x80 [ 228.753547][ T8713] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 228.753560][ T8713] RIP: 0023:0xf705e579 [ 228.753568][ T8713] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 228.753578][ T8713] RSP: 002b:00000000f504e55c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 228.753587][ T8713] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000000000011b [ 228.753593][ T8713] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 228.753598][ T8713] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 228.753604][ T8713] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 228.753609][ T8713] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 228.753621][ T8713] [ 228.753625][ T8713] Mem-Info: [ 228.845393][ T8713] active_anon:15452 inactive_anon:80 isolated_anon:0 [ 228.845393][ T8713] active_file:8011 inactive_file:36589 isolated_file:0 [ 228.845393][ T8713] unevictable:1768 dirty:578 writeback:0 [ 228.845393][ T8713] slab_reclaimable:7107 slab_unreclaimable:55424 [ 228.845393][ T8713] mapped:28002 shmem:12683 pagetables:1163 [ 228.845393][ T8713] sec_pagetables:309 bounce:0 [ 228.845393][ T8713] kernel_misc_reclaimable:0 [ 228.845393][ T8713] free:42188 free_pcp:14006 free_cma:0 [ 228.861081][ T8713] Node 0 active_anon:10180kB inactive_anon:244kB active_file:3576kB inactive_file:184kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:6904kB dirty:856kB writeback:0kB shmem:12176kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8388kB pagetables:2204kB sec_pagetables:1124kB all_unreclaimable? no Balloon:0kB [ 228.874245][ T8713] Node 1 active_anon:55628kB inactive_anon:76kB active_file:28468kB inactive_file:146172kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:109104kB dirty:1456kB writeback:0kB shmem:42356kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4776kB pagetables:2448kB sec_pagetables:112kB all_unreclaimable? no Balloon:0kB [ 228.888723][ T8713] Node 0 DMA free:2084kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:292kB inactive_anon:0kB active_file:60kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:512kB local_pcp:72kB free_cma:0kB [ 228.897775][ T8713] lowmem_reserve[]: 0 289 289 289 289 [ 228.900228][ T8713] Node 0 DMA32 free:16824kB boost:0kB min:13220kB low:16524kB high:19828kB reserved_highatomic:4096KB free_highatomic:1180KB active_anon:10016kB inactive_anon:244kB active_file:3516kB inactive_file:184kB unevictable:3536kB writepending:856kB present:1032196kB managed:296396kB mlocked:0kB bounce:0kB free_pcp:9840kB local_pcp:2540kB free_cma:0kB [ 228.917952][ T8713] lowmem_reserve[]: 0 0 0 0 0 [ 228.922201][ T8713] Node 1 DMA32 free:143244kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:55828kB inactive_anon:76kB active_file:28468kB inactive_file:146172kB unevictable:3536kB writepending:1456kB present:1048432kB managed:948284kB mlocked:0kB bounce:0kB free_pcp:46864kB local_pcp:7316kB free_cma:0kB [ 228.936553][ T8713] lowmem_reserve[]: 0 0 0 0 0 [ 228.938322][ T8713] Node 0 DMA: 6*4kB (UM) 24*8kB (UM) 12*16kB (UM) 14*32kB (UM) 1*64kB (M) 1*128kB (M) 2*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2072kB [ 228.943320][ T8713] Node 0 DMA32: 253*4kB (UEH) 159*8kB (UEH) 50*16kB (UMEH) 54*32kB (UMEH) 36*64kB (UMEH) 37*128kB (UME) 7*256kB (M) 2*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 16716kB [ 228.950379][ T8713] Node 1 DMA32: 11*4kB (UME) 266*8kB (UME) 430*16kB (UE) 512*32kB (UE) 272*64kB (UME) 117*128kB (UME) 67*256kB (UME) 41*512kB (UME) 16*1024kB (UM) 9*2048kB (UM) 3*4096kB (UM) = 143068kB [ 228.959123][ T8713] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 228.962215][ T8713] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 228.965274][ T8713] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 228.969251][ T8713] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 228.974997][ T8713] 59102 total pagecache pages [ 228.980941][ T8713] 809 pages in swap cache [ 228.983709][ T8713] Free swap = 117180kB [ 228.985603][ T8713] Total swap = 124996kB [ 228.987148][ T8713] 524155 pages RAM [ 228.988570][ T8713] 0 pages HighMem/MovableOnly [ 228.990644][ T8713] 209145 pages reserved [ 228.992515][ T8713] 0 pages cma reserved [ 229.797193][ T8738] team1: left promiscuous mode [ 230.387055][ T8748] netlink: 88 bytes leftover after parsing attributes in process `syz.0.667'. [ 232.565966][ T8778] trusted_key: encrypted_key: insufficient parameters specified [ 233.921199][ T8809] [U] [ 233.922150][ T8809] [U] [ 233.923061][ T8809] [U] [ 233.923955][ T8809] [U] [ 233.924968][ T8809] [U] [ 233.925883][ T8809] [U] [ 233.926768][ T8809] [U] [ 233.927661][ T8809] [U] [ 233.929528][ T8809] [U] [ 233.930438][ T8809] [U] [ 233.931337][ T8809] [U] [ 233.932233][ T8809] [U] [ 233.933173][ T8809] [U] [ 233.934068][ T8809] [U] [ 233.934966][ T8809] [U] [ 233.935906][ T8809] [U] [ 233.937045][ T8809] [U] [ 233.937951][ T8809] [U] [ 233.938836][ T8809] [U] [ 233.939736][ T8809] [U] [ 233.944607][ T8809] [U] [ 233.945853][ T8809] [U] [ 233.946913][ T8809] [U] [ 233.947868][ T8809] [U] [ 233.950220][ T8809] [U] [ 233.951191][ T8809] [U] [ 233.952153][ T8809] [U] [ 233.953063][ T8809] [U] [ 233.954628][ T8809] [U] [ 233.955633][ T8809] [U] [ 233.956527][ T8809] [U] [ 233.957442][ T8809] [U] [ 233.958955][ T8809] [U] [ 233.959838][ T8809] [U] [ 233.960747][ T8809] [U] [ 233.961654][ T8809] [U] [ 233.963473][ T8809] [U] [ 233.964418][ T8809] [U] [ 233.965319][ T8809] [U] [ 233.966246][ T8809] [U] [ 233.967909][ T8809] [U] [ 233.969025][ T8809] [U] [ 233.970142][ T8809] [U] [ 233.971278][ T8809] [U] [ 233.972495][ T8809] [U] [ 233.973464][ T8809] [U] [ 233.974413][ T8809] [U] [ 233.975387][ T8809] [U] [ 233.977400][ T8809] [U] [ 233.978315][ T8809] [U] [ 233.979210][ T8809] [U] [ 233.980089][ T8809] [U] [ 233.981105][ T8809] [U] [ 233.982000][ T8809] [U] [ 233.982942][ T8809] [U] [ 233.983839][ T8809] [U] [ 233.984861][ T8809] [U] [ 233.985777][ T8809] [U] [ 233.986652][ T8809] [U] [ 233.987551][ T8809] [U] [ 233.988962][ T8809] [U] [ 233.990111][ T8809] [U] [ 233.991254][ T8809] [U] [ 233.992219][ T8809] [U] [ 233.993406][ T8809] [U] [ 233.994631][ T8809] [U] [ 233.995813][ T8809] [U] [ 233.996983][ T8809] [U] [ 234.000289][ T8809] [U] [ 234.001501][ T8809] [U] [ 234.002655][ T8809] [U] [ 234.003833][ T8809] [U] [ 234.006410][ T8809] [U] [ 234.007348][ T8809] [U] [ 234.008249][ T8809] [U] [ 234.009129][ T8809] [U] [ 234.165195][ T8806] [U] [ 234.815823][ T8827] netlink: 60 bytes leftover after parsing attributes in process `syz.1.687'. [ 234.818850][ T8827] netlink: 60 bytes leftover after parsing attributes in process `syz.1.687'. [ 235.633540][ T40] audit: type=1800 audit(1751065210.678:18): pid=8824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.686" name="blkio.throttle.io_service_bytes_recursive" dev="9p" ino=35913975 res=0 errno=0 [ 237.931028][ T8852] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.976790][ T8858] netlink: 'syz.0.701': attribute type 10 has an invalid length. [ 237.980170][ T8858] netlink: 40 bytes leftover after parsing attributes in process `syz.0.701'. [ 237.984133][ T8858] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.988006][ T8858] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.990679][ T8858] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.136269][ T8883] Cannot find del_set index 3 as target [ 239.143041][ T8883] netlink: 'syz.1.697': attribute type 11 has an invalid length. [ 239.152149][ T8883] netlink: 224 bytes leftover after parsing attributes in process `syz.1.697'. [ 241.776450][ T8933] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input23 [ 242.555683][ T8947] 9pnet: Unknown protocol version 9p20\++} [ 243.589488][ T8966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.714'. [ 243.605435][ T8971] netlink: 'syz.2.717': attribute type 10 has an invalid length. [ 243.607934][ T8971] netlink: 40 bytes leftover after parsing attributes in process `syz.2.717'. [ 244.061029][ T8980] netlink: 40 bytes leftover after parsing attributes in process `syz.2.718'. [ 246.166921][ T9018] 9pnet: Unknown protocol version 9p20\++} [ 247.240273][ T9026] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input27 [ 248.030701][ T9051] netlink: 40 bytes leftover after parsing attributes in process `syz.1.732'. [ 250.407220][ T9074] 9pnet: Unknown protocol version 9p20\++} [ 250.526245][ T9075] netlink: 40 bytes leftover after parsing attributes in process `syz.1.748'. [ 251.517507][ T9094] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input28 [ 251.651850][ T9099] netlink: 56 bytes leftover after parsing attributes in process `syz.1.740'. [ 253.643702][ T9128] netlink: 32 bytes leftover after parsing attributes in process `syz.0.751'. [ 253.704191][ T9130] 9pnet: Unknown protocol version 9p20\++} [ 256.055736][ T9160] [U] [ 256.056878][ T9160] [U] [ 256.057813][ T9160] [U] [ 256.058797][ T9160] [U] [ 256.059678][ T9160] [U] [ 256.060563][ T9160] [U] [ 256.061454][ T9160] [U] [ 256.062263][ T9160] [U] [ 256.063156][ T9160] [U] [ 256.064041][ T9160] [U] [ 256.064920][ T9160] [U] [ 256.065775][ T9160] [U] [ 256.067151][ T9160] [U] [ 256.068049][ T9160] [U] [ 256.069133][ T9160] [U] [ 256.070150][ T9160] [U] [ 256.071013][ T9160] [U] [ 256.071886][ T9160] [U] [ 256.072734][ T9160] [U] [ 256.073584][ T9160] [U] [ 256.074358][ T9160] [U] [ 256.075288][ T9160] [U] [ 256.076163][ T9160] [U] [ 256.077007][ T9160] [U] [ 256.078785][ T9160] [U] [ 256.079676][ T9160] [U] [ 256.080641][ T9160] [U] [ 256.081716][ T9160] [U] [ 256.082755][ T9160] [U] [ 256.083810][ T9160] [U] [ 256.084872][ T9160] [U] [ 256.085990][ T9160] [U] [ 256.087438][ T9160] [U] [ 256.088531][ T9160] [U] [ 256.089611][ T9160] [U] [ 256.090662][ T9160] [U] [ 256.092978][ T9160] [U] [ 256.094084][ T9160] [U] [ 256.095208][ T9160] [U] [ 256.096324][ T9160] [U] [ 256.098023][ T9160] [U] [ 256.099138][ T9160] [U] [ 256.100222][ T9160] [U] [ 256.101309][ T9160] [U] [ 256.102382][ T9160] [U] [ 256.103477][ T9160] [U] [ 256.104542][ T9160] [U] [ 256.105621][ T9160] [U] [ 256.107019][ T9160] [U] [ 256.108091][ T9160] [U] [ 256.109177][ T9160] [U] [ 256.110234][ T9160] [U] [ 256.111161][ T9160] [U] [ 256.112057][ T9160] [U] [ 256.113191][ T9160] [U] [ 256.114337][ T9160] [U] [ 256.119231][ T9160] [U] [ 256.120364][ T9160] [U] [ 256.121450][ T9160] [U] [ 256.122531][ T9160] [U] [ 256.123688][ T9160] [U] [ 256.124804][ T9160] [U] [ 256.125653][ T9160] [U] [ 256.126688][ T9160] [U] [ 256.128360][ T9160] [U] [ 256.129291][ T9160] [U] [ 256.130102][ T9160] [U] [ 256.131049][ T9160] [U] [ 256.132150][ T9160] [U] [ 256.133251][ T9160] [U] [ 256.134336][ T9160] [U] [ 256.135466][ T9160] [U] [ 256.139630][ T9160] [U] [ 256.140743][ T9160] [U] [ 256.141827][ T9160] [U] [ 256.142912][ T9160] [U] [ 256.302668][ T9159] [U] [ 257.796156][ T9189] netlink: 32 bytes leftover after parsing attributes in process `syz.1.766'. [ 258.698120][ T9207] netlink: 32 bytes leftover after parsing attributes in process `syz.2.769'. [ 260.297175][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.299240][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.321002][ T9232] netlink: 20 bytes leftover after parsing attributes in process `syz.3.773'. [ 261.518598][ T9254] netlink: 32 bytes leftover after parsing attributes in process `syz.2.779'. [ 264.027373][ T9317] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 264.571600][ T9336] 9pnet: Unknown protocol version 9p20\++} [ 265.145739][ T841] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 265.472516][ T9343] netlink: 32 bytes leftover after parsing attributes in process `syz.0.794'. [ 266.488262][ T9373] syz.0.799: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 266.497528][ T9373] CPU: 1 UID: 0 PID: 9373 Comm: syz.0.799 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 266.497555][ T9373] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 266.497565][ T9373] Call Trace: [ 266.497572][ T9373] [ 266.497579][ T9373] dump_stack_lvl+0x16c/0x1f0 [ 266.497635][ T9373] warn_alloc+0x248/0x3a0 [ 266.497665][ T9373] ? __pfx_warn_alloc+0x10/0x10 [ 266.497690][ T9373] ? __pfx_stack_trace_save+0x10/0x10 [ 266.497711][ T9373] ? stack_depot_save_flags+0x28/0xa40 [ 266.497749][ T9373] ? kasan_save_stack+0x42/0x60 [ 266.497773][ T9373] ? kasan_save_stack+0x33/0x60 [ 266.497796][ T9373] ? kasan_save_track+0x14/0x30 [ 266.497820][ T9373] ? xskq_create+0x52/0x1d0 [ 266.497844][ T9373] ? xsk_setsockopt+0x640/0x840 [ 266.497863][ T9373] ? do_sock_setsockopt+0x224/0x470 [ 266.497885][ T9373] ? xskq_create+0xfb/0x1d0 [ 266.497908][ T9373] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 266.497940][ T9373] ? xskq_create+0xfb/0x1d0 [ 266.497969][ T9373] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 266.498018][ T9373] ? xskq_create+0xfb/0x1d0 [ 266.498045][ T9373] vmalloc_user_noprof+0x9e/0xe0 [ 266.498070][ T9373] ? xskq_create+0xfb/0x1d0 [ 266.498095][ T9373] xskq_create+0xfb/0x1d0 [ 266.498120][ T9373] xsk_setsockopt+0x640/0x840 [ 266.498152][ T9373] ? __pfx_xsk_setsockopt+0x10/0x10 [ 266.498176][ T9373] ? __pfx_aa_sk_perm+0x10/0x10 [ 266.498198][ T9373] ? errseq_sample+0x53/0x70 [ 266.498232][ T9373] ? __pfx_xsk_setsockopt+0x10/0x10 [ 266.498258][ T9373] do_sock_setsockopt+0x224/0x470 [ 266.498277][ T9373] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 266.498312][ T9373] __sys_setsockopt+0x120/0x1a0 [ 266.498342][ T9373] __ia32_sys_setsockopt+0xbc/0x160 [ 266.498366][ T9373] ? lockdep_hardirqs_on+0x7c/0x110 [ 266.498391][ T9373] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 266.498416][ T9373] __do_fast_syscall_32+0x7c/0x3a0 [ 266.498445][ T9373] do_fast_syscall_32+0x32/0x80 [ 266.498471][ T9373] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 266.498493][ T9373] RIP: 0023:0xf7f42579 [ 266.498509][ T9373] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 266.498524][ T9373] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 266.498543][ T9373] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000000000011b [ 266.498556][ T9373] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 266.498568][ T9373] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 266.498578][ T9373] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 266.498588][ T9373] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 266.498611][ T9373] [ 266.498637][ T9373] Mem-Info: [ 266.618142][ T9373] active_anon:18393 inactive_anon:1326 isolated_anon:0 [ 266.618142][ T9373] active_file:8301 inactive_file:34990 isolated_file:0 [ 266.618142][ T9373] unevictable:1768 dirty:363 writeback:0 [ 266.618142][ T9373] slab_reclaimable:7146 slab_unreclaimable:56517 [ 266.618142][ T9373] mapped:23725 shmem:16549 pagetables:1300 [ 266.618142][ T9373] sec_pagetables:311 bounce:0 [ 266.618142][ T9373] kernel_misc_reclaimable:0 [ 266.618142][ T9373] free:41181 free_pcp:11431 free_cma:0 [ 266.633371][ T9373] Node 0 active_anon:2736kB inactive_anon:5228kB active_file:2732kB inactive_file:200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:1916kB dirty:832kB writeback:0kB shmem:9856kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8248kB pagetables:2136kB sec_pagetables:1124kB all_unreclaimable? no Balloon:0kB [ 266.643879][ T9373] Node 1 active_anon:70736kB inactive_anon:76kB active_file:30472kB inactive_file:139760kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:92100kB dirty:620kB writeback:0kB shmem:56340kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4888kB pagetables:3064kB sec_pagetables:120kB all_unreclaimable? no Balloon:0kB [ 266.654680][ T9373] Node 0 DMA free:2084kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12kB inactive_anon:16kB active_file:60kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:620kB local_pcp:144kB free_cma:0kB [ 266.663743][ T9373] lowmem_reserve[]: 0 289 289 289 289 [ 266.667491][ T9373] Node 0 DMA32 free:17548kB boost:0kB min:13220kB low:16524kB high:19828kB reserved_highatomic:4096KB free_highatomic:1304KB active_anon:2724kB inactive_anon:5212kB active_file:2672kB inactive_file:200kB unevictable:3536kB writepending:832kB present:1032196kB managed:296396kB mlocked:0kB bounce:0kB free_pcp:11556kB local_pcp:3652kB free_cma:0kB [ 266.677767][ T9373] lowmem_reserve[]: 0 0 0 0 0 [ 266.679626][ T9373] Node 1 DMA32 free:144964kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:70636kB inactive_anon:76kB active_file:30472kB inactive_file:139760kB unevictable:3536kB writepending:620kB present:1048432kB managed:948284kB mlocked:0kB bounce:0kB free_pcp:34544kB local_pcp:1408kB free_cma:0kB [ 266.690678][ T9373] lowmem_reserve[]: 0 0 0 0 0 [ 266.692697][ T9373] Node 0 DMA: 11*4kB (UM) 19*8kB (UM) 14*16kB (UM) 16*32kB (UM) 0*64kB 1*128kB (M) 2*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2084kB [ 266.699014][ T9373] Node 0 DMA32: 150*4kB (MEH) 95*8kB (MEH) 39*16kB (MEH) 95*32kB (UMEH) 25*64kB (UMEH) 35*128kB (UME) 11*256kB (M) 3*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 17504kB [ 266.705868][ T9373] Node 1 DMA32: 560*4kB (UME) 738*8kB (UME) 749*16kB (UME) 544*32kB (UME) 271*64kB (UME) 131*128kB (UME) 48*256kB (UME) 7*512kB (UM) 18*1024kB (M) 5*2048kB (UM) 7*4096kB (UM) = 144864kB [ 266.713301][ T9373] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 266.717348][ T9373] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 266.721179][ T9373] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 266.724831][ T9373] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 266.728781][ T9373] 60648 total pagecache pages [ 266.730727][ T9373] 812 pages in swap cache [ 266.732538][ T9373] Free swap = 117280kB [ 266.734028][ T9373] Total swap = 124996kB [ 266.735729][ T9373] 524155 pages RAM [ 266.737001][ T9373] 0 pages HighMem/MovableOnly [ 266.738501][ T9373] 209145 pages reserved [ 266.739874][ T9373] 0 pages cma reserved [ 284.208454][ T9423] delete_channel: no stack [ 284.270477][ T9418] misc userio: Invalid payload size [ 285.979141][ T9451] netlink: 32 bytes leftover after parsing attributes in process `syz.0.813'. [ 286.626979][ T9475] block device autoloading is deprecated and will be removed. [ 286.627876][ T9468] block device autoloading is deprecated and will be removed. [ 286.737910][ T9472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.816'. [ 287.426959][ T9489] futex_wake_op: syz.2.820 tries to shift op by -1; fix this program [ 288.581971][ T9500] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 288.584139][ T9500] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 288.587296][ T9500] vhci_hcd vhci_hcd.0: Device attached [ 289.072672][ T9502] vhci_hcd: connection closed [ 289.134070][ T1147] vhci_hcd: stop threads [ 289.139807][ T1147] vhci_hcd: release socket [ 289.165952][ T1147] vhci_hcd: disconnect device [ 289.175338][ T6054] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 289.178506][ T6054] usb 37-1: enqueue for inactive port 0 [ 289.230665][ T9505] "syz.2.821" (9505) uses obsolete ecb(arc4) skcipher [ 289.265507][ T6054] vhci_hcd: vhci_device speed not set [ 289.940021][ T9521] netlink: 32 bytes leftover after parsing attributes in process `syz.2.826'. [ 290.444963][ T9532] syzkaller0: entered promiscuous mode [ 290.447377][ T9532] syzkaller0: entered allmulticast mode [ 290.814832][ T9544] futex_wake_op: syz.3.831 tries to shift op by -1; fix this program [ 292.053642][ T9553] bridge4: entered promiscuous mode [ 292.056021][ T9553] bridge4: entered allmulticast mode [ 292.060198][ T9554] trusted_key: syz.3.832 sent an empty control message without MSG_MORE. [ 294.310188][ T9586] netlink: 24 bytes leftover after parsing attributes in process `syz.1.840'. [ 294.869623][ T40] audit: type=1800 audit(1751065269.919:19): pid=9592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.842" name="dmabuf" dev="dmabuf" ino=1 res=0 errno=0 [ 295.912611][ T9608] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 296.922765][ T9614] syz.0.847 (9614) used greatest stack depth: 19336 bytes left [ 297.292421][ T9630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.850'. [ 298.164556][ T9644] misc userio: Invalid payload size [ 299.251735][ T29] libceph: connect (1)[c::]:6789 error -101 [ 299.254522][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 299.526419][ T29] libceph: connect (1)[c::]:6789 error -101 [ 299.528468][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 300.012347][ T9660] ceph: No mds server is up or the cluster is laggy [ 300.036780][ T29] libceph: connect (1)[c::]:6789 error -101 [ 300.039115][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 300.775204][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 300.960837][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 300.963862][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 300.971573][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 300.981235][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 300.984248][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.989294][ T9] usb 5-1: Product: syz [ 300.991384][ T9] usb 5-1: Manufacturer: syz [ 300.999636][ T9] usb 5-1: SerialNumber: syz [ 301.012975][ T9] hub 5-1:1.0: bad descriptor, ignoring hub [ 301.015004][ T9] hub 5-1:1.0: probe with driver hub failed with error -5 [ 301.235197][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 301.482871][ T9699] random: crng reseeded on system resumption [ 302.166821][ T9679] usb 5-1: reset high-speed USB device number 4 using dummy_hcd [ 302.576875][ T6054] usb 5-1: USB disconnect, device number 4 [ 302.584557][ T6054] usblp0: removed [ 303.612116][ T9728] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 303.614625][ T9728] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 303.620708][ T9728] vhci_hcd vhci_hcd.0: Device attached [ 303.889355][ T6054] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 304.526586][ T9729] vhci_hcd: connection reset by peer [ 304.782581][ T100] vhci_hcd: stop threads [ 304.784055][ T100] vhci_hcd: release socket [ 304.785887][ T100] vhci_hcd: disconnect device [ 304.955134][ T9748] loop6: detected capacity change from 0 to 7 [ 304.960391][ T9471] Dev loop6: unable to read RDB block 7 [ 304.962984][ T9471] loop6: unable to read partition table [ 304.966562][ T9471] loop6: partition table beyond EOD, truncated [ 304.994282][ T9748] Dev loop6: unable to read RDB block 7 [ 304.997919][ T9748] loop6: unable to read partition table [ 305.000388][ T9748] loop6: partition table beyond EOD, truncated [ 305.003567][ T9748] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 307.406803][ T9793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.881'. [ 307.432680][ T9794] netlink: 'syz.3.882': attribute type 10 has an invalid length. [ 307.437319][ T9794] netlink: 40 bytes leftover after parsing attributes in process `syz.3.882'. [ 307.444411][ T9792] tipc: Failed to remove unknown binding: 66,1,1/4294944840:2207726990/2207726992 [ 307.450203][ T9792] tipc: Failed to remove unknown binding: 66,1,1/4294944840:2207726990/2207726992 [ 309.005395][ T6054] vhci_hcd: vhci_device speed not set [ 312.241639][ T9860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.897'. [ 316.503842][ T9946] futex_wake_op: syz.1.906 tries to shift op by -1; fix this program [ 317.897824][ T9961] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 317.899934][ T9961] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 317.906001][ T9961] vhci_hcd vhci_hcd.0: Device attached [ 318.155155][ T9] usb 43-1: new high-speed USB device number 3 using vhci_hcd [ 318.884154][ T9962] vhci_hcd: connection reset by peer [ 318.888360][ T46] vhci_hcd: stop threads [ 318.889752][ T46] vhci_hcd: release socket [ 318.891999][ T46] vhci_hcd: disconnect device [ 320.992774][T10013] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 321.529228][T10021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.923'. [ 321.751871][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.754678][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.246534][ T9] vhci_hcd: vhci_device speed not set [ 325.688875][ T29] libceph: connect (1)[c::]:6789 error -101 [ 325.691345][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 325.980850][ T29] libceph: connect (1)[c::]:6789 error -101 [ 325.982851][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 326.115367][T10068] ceph: No mds server is up or the cluster is laggy [ 326.583534][T10093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.938'. [ 327.739490][T10099] bridge4: entered promiscuous mode [ 328.645202][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 328.805174][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 328.810469][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 328.820776][ T9] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 328.827960][ T9] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 328.830608][ T9] usb 7-1: Product: syz [ 328.831924][ T9] usb 7-1: Manufacturer: syz [ 328.838813][ T9] usb 7-1: SerialNumber: syz [ 328.845432][ T9] usb 7-1: config 0 descriptor?? [ 328.851325][T10110] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 329.246843][ T6202] usb 7-1: USB disconnect, device number 4 [ 329.625156][ T6054] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 329.775955][ T6054] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 329.780606][ T6054] usb 5-1: config index 0 descriptor too short (expected 65412, got 72) [ 329.785414][ T6054] usb 5-1: config index 1 descriptor too short (expected 65412, got 72) [ 329.790419][ T6054] usb 5-1: config index 2 descriptor too short (expected 65412, got 72) [ 329.795123][ T6054] usb 5-1: config index 3 descriptor too short (expected 65412, got 72) [ 329.800019][ T6054] usb 5-1: config index 4 descriptor too short (expected 65412, got 72) [ 329.804983][ T6054] usb 5-1: config index 5 descriptor too short (expected 65412, got 72) [ 329.810022][ T6054] usb 5-1: config index 6 descriptor too short (expected 65412, got 72) [ 329.815751][ T6054] usb 5-1: config index 7 descriptor too short (expected 65412, got 72) [ 329.823965][ T6054] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 329.828760][ T6054] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.832816][ T6054] usb 5-1: Product: syz [ 329.834782][ T6054] usb 5-1: Manufacturer: syz [ 329.838200][ T6054] usb 5-1: SerialNumber: syz [ 329.877494][ T6054] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 329.934807][ T34] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 330.171514][ T9] usb 5-1: USB disconnect, device number 5 [ 330.458846][T10133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.947'. [ 330.514450][T10134] bridge0: port 3(erspan0) entered blocking state [ 330.517398][T10134] bridge0: port 3(erspan0) entered disabled state [ 330.520843][T10134] erspan0: entered allmulticast mode [ 330.524735][T10134] erspan0: entered promiscuous mode [ 331.015438][ T34] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 331.019067][ T34] ath9k_htc: Failed to initialize the device [ 331.031311][ T9] usb 5-1: ath9k_htc: USB layer deinitialized [ 332.155167][ T5943] Bluetooth: hci3: command 0x0405 tx timeout [ 333.728365][T10173] bridge2: entered promiscuous mode [ 333.841575][T10178] netlink: 'syz.1.955': attribute type 10 has an invalid length. [ 333.844731][T10178] veth0_vlan: left promiscuous mode [ 333.847240][T10178] veth0_vlan: entered promiscuous mode [ 333.851223][T10178] team0: Device veth0_vlan failed to register rx_handler [ 334.007188][ T34] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 334.155258][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 334.160196][ T34] usb 7-1: config 0 has an invalid interface number: 244 but max is 0 [ 334.163580][ T34] usb 7-1: config 0 has no interface number 0 [ 334.168073][ T34] usb 7-1: config 0 interface 244 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 334.172509][ T34] usb 7-1: config 0 interface 244 has no altsetting 0 [ 334.177687][ T34] usb 7-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 334.181419][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.184548][ T34] usb 7-1: Product: syz [ 334.186686][ T34] usb 7-1: Manufacturer: syz [ 334.188717][ T34] usb 7-1: SerialNumber: syz [ 334.196297][ T34] usb 7-1: config 0 descriptor?? [ 334.241511][ T34] snd_usb_toneport 7-1:0.244: Line 6 GuitarPort found [ 334.442628][ T34] snd_usb_toneport 7-1:0.244: set_interface failed [ 334.447523][ T34] snd_usb_toneport 7-1:0.244: Line 6 GuitarPort now disconnected [ 334.451032][ T34] snd_usb_toneport 7-1:0.244: probe with driver snd_usb_toneport failed with error -71 [ 334.462093][ T34] usb 7-1: USB disconnect, device number 5 [ 334.644796][T10188] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 334.646949][T10188] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 334.649948][T10188] vhci_hcd vhci_hcd.0: Device attached [ 334.940165][ T72] usb 39-1: new high-speed USB device number 3 using vhci_hcd [ 335.385177][T10189] vhci_hcd: connection reset by peer [ 335.395590][ T1245] vhci_hcd: stop threads [ 335.397159][ T1245] vhci_hcd: release socket [ 335.398801][ T1245] vhci_hcd: disconnect device [ 336.737953][T10206] netlink: 24 bytes leftover after parsing attributes in process `syz.2.964'. [ 339.821734][T10237] bridge4: entered promiscuous mode [ 340.045133][ T72] vhci_hcd: vhci_device speed not set [ 340.064738][T10240] overlayfs: missing 'lowerdir' [ 342.321675][T10266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.977'. [ 343.765990][T10266] Set syz1 is full, maxelem 65536 reached [ 344.974038][T10286] bridge2: left promiscuous mode [ 347.193406][T10324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.988'. [ 347.200467][T10324] bond0: entered promiscuous mode [ 347.202110][T10324] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 347.205009][T10324] batadv0: entered promiscuous mode [ 347.208292][T10324] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 347.211628][T10324] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 347.215202][T10324] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 349.161156][T10347] bridge4: left promiscuous mode [ 351.150628][T10379] netlink: 34 bytes leftover after parsing attributes in process `syz.3.1004'. [ 351.163575][T10379] binder: 10378:10379 ioctl c0306201 800003c0 returned -14 [ 351.187176][T10380] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1003'. [ 353.405860][ T841] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 354.980286][T10438] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 355.309528][T10445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1013'. [ 364.349085][ T40] audit: type=1326 audit(2000000009.080:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10475 comm="syz.3.1022" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705e579 code=0x0 [ 365.401462][T10497] Cannot find del_set index 3 as target [ 365.892438][T10506] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 365.902109][T10506] kvm: pic: level sensitive irq not supported [ 365.902743][T10506] kvm: pic: non byte read [ 365.908170][T10506] kvm: pic: non byte read [ 365.911272][T10506] kvm: pic: non byte read [ 365.914568][T10506] kvm: pic: single mode not supported [ 365.914944][T10506] kvm: pic: non byte read [ 365.919825][T10506] kvm: pic: non byte read [ 367.523572][T10537] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 367.578260][T10537] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 368.806678][T10552] Cannot find del_set index 3 as target [ 368.861094][T10558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1041'. [ 370.643240][T10579] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1045'. [ 371.071450][T10581] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 371.073966][T10581] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 371.076822][T10581] vhci_hcd vhci_hcd.0: Device attached [ 371.578412][T10582] vhci_hcd: connection closed [ 371.582636][ T1245] vhci_hcd: stop threads [ 371.585132][ T6004] usb 43-1: new high-speed USB device number 4 using vhci_hcd [ 371.587331][ T1245] vhci_hcd: release socket [ 371.589631][ T1245] vhci_hcd: disconnect device [ 373.182494][T10600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1052'. [ 373.219949][T10601] Cannot find del_set index 3 as target [ 374.159169][ T40] audit: type=1326 audit(2000000019.120:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10609 comm="syz.3.1055" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x0 [ 374.282142][T10612] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.285399][T10612] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.288028][T10612] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.290603][T10612] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.419085][T10614] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 374.450751][T10614] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 375.025321][ T5944] Bluetooth: hci3: command 0x0405 tx timeout [ 376.714735][T10650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1064'. [ 376.735150][ T6004] vhci_hcd: vhci_device speed not set [ 381.642664][ T5944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 381.648376][ T5944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 381.652404][ T5944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 381.656087][ T5944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 381.658931][T10667] misc userio: Invalid payload size [ 381.659666][ T5944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 381.900424][T10665] chnl_net:caif_netlink_parms(): no params data found [ 382.017549][T10665] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.019885][T10665] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.022225][T10665] bridge_slave_0: entered allmulticast mode [ 382.024966][T10665] bridge_slave_0: entered promiscuous mode [ 382.039472][T10665] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.042331][T10665] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.044700][T10665] bridge_slave_1: entered allmulticast mode [ 382.048421][T10665] bridge_slave_1: entered promiscuous mode [ 382.198627][ T94] team0: Port device geneve0 removed [ 382.853542][ T94] bond0 (unregistering): left promiscuous mode [ 382.857094][ T94] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 382.868929][ T94] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 382.878844][ T94] bond0 (unregistering): Released all slaves [ 382.994935][T10665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.011868][T10665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.068989][T10691] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 383.136403][T10691] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 383.147833][T10665] team0: Port device team_slave_0 added [ 383.164737][T10665] team0: Port device team_slave_1 added [ 383.183253][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.185549][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.266756][T10665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.275278][T10665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.288998][T10665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.296875][T10665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.300474][T10665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.325131][T10665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.567565][T10665] hsr_slave_0: entered promiscuous mode [ 383.570320][T10665] hsr_slave_1: entered promiscuous mode [ 383.572478][T10665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 383.574977][T10665] Cannot create hsr debugfs directory [ 383.735665][ T5943] Bluetooth: hci2: command tx timeout [ 383.810609][T10665] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 383.836258][T10665] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 383.841136][T10665] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 383.845186][T10665] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 383.932036][T10665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.942761][T10665] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.961553][ T100] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.963834][ T100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.970141][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.973285][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.501452][T10665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.591438][T10742] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1075'. [ 384.683144][T10665] veth0_vlan: entered promiscuous mode [ 384.689643][T10665] veth1_vlan: entered promiscuous mode [ 384.713089][ T94] tipc: Left network mode [ 384.717439][T10665] veth0_macvtap: entered promiscuous mode [ 384.732235][T10665] veth1_macvtap: entered promiscuous mode [ 384.749376][T10665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.767431][T10665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.774428][T10665] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.777508][T10665] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.780318][T10665] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.783055][T10665] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.856943][ T100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.860155][ T100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.942495][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.945500][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.195742][ T94] batadv0: left promiscuous mode [ 385.204738][ T94] hsr_slave_0: left promiscuous mode [ 385.208684][ T94] hsr_slave_1: left promiscuous mode [ 385.250180][T10784] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 385.252280][T10784] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 385.255786][T10784] vhci_hcd vhci_hcd.0: Device attached [ 385.336323][T10783] Cannot find del_set index 3 as target [ 385.505185][ T6004] usb 39-1: new high-speed USB device number 4 using vhci_hcd [ 385.815344][ T5943] Bluetooth: hci2: command tx timeout [ 385.901890][T10785] vhci_hcd: connection reset by peer [ 385.904926][ T1245] vhci_hcd: stop threads [ 385.937784][ T1245] vhci_hcd: release socket [ 385.939382][ T1245] vhci_hcd: disconnect device [ 386.909849][T10804] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1080'. [ 387.922589][ T5943] Bluetooth: hci2: command tx timeout [ 388.985162][ T40] audit: type=1326 audit(2000000033.870:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10829 comm="syz.1.1085" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704e579 code=0x0 [ 389.842635][T10855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1088'. [ 389.848485][T10855] program syz.3.1088 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 389.981516][ T5943] Bluetooth: hci2: command tx timeout [ 390.698793][ T6004] vhci_hcd: vhci_device speed not set [ 391.681376][T10861] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 391.996798][T10892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1096'. [ 391.999627][T10892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1096'. [ 392.017981][T10892] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.020542][T10892] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.023116][T10892] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.025821][T10892] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.997188][T10909] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1098'. [ 393.167772][T10913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1100'. [ 393.588682][T10918] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1101'. [ 396.275806][ T841] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 396.733503][ T40] audit: type=1326 audit(2000000041.690:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10962 comm="syz.4.1109" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70fe579 code=0x0 [ 406.450952][T11078] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1118'. [ 406.458900][T11078] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1118'. [ 406.822525][T11088] Cannot find del_set index 3 as target [ 409.574823][T11137] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1131'. [ 409.579459][T11137] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1131'. [ 412.216095][T11182] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1145'. [ 412.219392][T11182] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1145'. [ 412.630041][T11173] Set syz1 is full, maxelem 65536 reached [ 413.557173][T11203] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 414.479261][T11221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1150'. [ 415.364114][T11229] netlink: 'syz.3.1154': attribute type 10 has an invalid length. [ 415.370522][T11229] veth0_vlan: left promiscuous mode [ 415.374207][T11229] veth0_vlan: entered promiscuous mode [ 415.378942][T11229] team0: Device veth0_vlan failed to register rx_handler [ 415.741639][T11241] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1155'. [ 415.744624][T11241] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1155'. [ 415.953101][T11249] syzkaller1: entered promiscuous mode [ 415.954942][T11249] syzkaller1: entered allmulticast mode [ 415.966663][T11249] program syz.4.1156 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 415.971301][T11249] nfs: Unknown parameter 'ntext' [ 418.764619][T11288] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1166'. [ 419.117008][T11301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1169'. [ 419.929129][T11313] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 419.931258][T11313] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 419.934729][T11313] vhci_hcd vhci_hcd.0: Device attached [ 420.175183][ T72] usb 43-1: new high-speed USB device number 5 using vhci_hcd [ 420.923091][T11314] vhci_hcd: connection reset by peer [ 420.989024][ T1245] vhci_hcd: stop threads [ 420.990424][ T1245] vhci_hcd: release socket [ 421.080936][ T1245] vhci_hcd: disconnect device [ 422.865268][T11360] block nbd0: server does not support multiple connections per device. [ 422.879722][T11360] block nbd0: shutting down sockets [ 425.365554][ T72] vhci_hcd: vhci_device speed not set [ 426.038665][T11416] syzkaller1: entered promiscuous mode [ 426.040599][T11416] syzkaller1: entered allmulticast mode [ 426.062768][T11416] program syz.1.1187 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 426.069639][T11416] nfs: Unknown parameter 'ntext' [ 426.109034][T11415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1189'. [ 427.402265][T11425] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 427.404364][T11425] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 427.468838][T11425] vhci_hcd vhci_hcd.0: Device attached [ 427.606075][T11426] vhci_hcd: connection closed [ 427.607374][ T60] vhci_hcd: stop threads [ 427.610716][ T60] vhci_hcd: release socket [ 427.612860][ T60] vhci_hcd: disconnect device [ 427.665227][ T72] vhci_hcd: vhci_device speed not set [ 429.042259][T11432] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1192'. [ 429.994781][ T40] audit: type=1326 audit(2000000020.490:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11453 comm="syz.0.1198" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f42579 code=0x0 [ 431.820456][T11462] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 431.822559][T11462] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 431.826361][T11462] vhci_hcd vhci_hcd.0: Device attached [ 431.834062][T11465] vhci_hcd: connection closed [ 431.837369][ T94] vhci_hcd: stop threads [ 431.841616][ T94] vhci_hcd: release socket [ 431.843045][ T94] vhci_hcd: disconnect device [ 432.552552][T11474] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 433.373995][T11471] Set syz1 is full, maxelem 65536 reached [ 433.685694][T11482] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1205'. [ 433.728848][T11488] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 433.730980][T11488] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 433.735566][T11488] vhci_hcd vhci_hcd.0: Device attached [ 434.078193][ T29] usb 39-1: new high-speed USB device number 5 using vhci_hcd [ 434.496358][ C2] hpet: Lost 1 RTC interrupts [ 434.518225][ C2] hpet: Lost 1 RTC interrupts [ 434.659676][T11489] vhci_hcd: connection reset by peer [ 434.661794][ T1245] vhci_hcd: stop threads [ 434.663162][ T1245] vhci_hcd: release socket [ 434.665737][ T1245] vhci_hcd: disconnect device [ 435.416581][T11499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1215'. [ 436.237619][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1211'. [ 436.981169][ T40] audit: type=1326 audit(2000000027.480:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11522 comm="syz.3.1216" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 437.166561][ T40] audit: type=1326 audit(2000000027.480:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11522 comm="syz.3.1216" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 437.191763][ T40] audit: type=1326 audit(2000000027.480:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11522 comm="syz.3.1216" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 437.199162][ T40] audit: type=1326 audit(2000000027.480:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11522 comm="syz.3.1216" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 437.217772][ T40] audit: type=1326 audit(2000000027.480:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11522 comm="syz.3.1216" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 437.224502][ T40] audit: type=1326 audit(2000000027.480:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11522 comm="syz.3.1216" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 437.231697][ T40] audit: type=1326 audit(2000000027.480:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11522 comm="syz.3.1216" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 437.238402][ T40] audit: type=1326 audit(2000000027.480:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11522 comm="syz.3.1216" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 437.244987][ T40] audit: type=1326 audit(2000000027.480:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11522 comm="syz.3.1216" exe="/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 437.251765][ T40] audit: type=1326 audit(2000000027.480:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11522 comm="syz.3.1216" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 437.326020][T11532] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 439.327938][ T29] vhci_hcd: vhci_device speed not set [ 439.339241][T11561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1221'. [ 441.859615][T11598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1234'. [ 444.617120][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.619251][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.695862][T11661] hub 9-0:1.0: USB hub found [ 445.698459][T11661] hub 9-0:1.0: 1 port detected [ 446.377112][T11674] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 446.379880][T11674] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 446.384985][T11674] vhci_hcd vhci_hcd.0: Device attached [ 446.395440][T11675] usbip_core: unknown command [ 446.396972][T11675] vhci_hcd: unknown pdu 0 [ 446.398354][T11675] usbip_core: unknown command [ 446.403640][ T94] vhci_hcd: stop threads [ 446.409565][ T94] vhci_hcd: release socket [ 446.411051][ T94] vhci_hcd: disconnect device [ 446.569570][T11679] team0: No ports can be present during mode change [ 446.578917][T11679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1250'. [ 446.831217][T11672] Cannot find del_set index 3 as target [ 446.882905][T11679] team0 (unregistering): Port device team_slave_0 removed [ 446.897609][T11679] team0 (unregistering): Port device team_slave_1 removed [ 446.905692][T11679] team0 (unregistering): Port device geneve0 removed [ 447.216911][T11688] wireguard0: entered promiscuous mode [ 447.218806][T11688] wireguard0: entered allmulticast mode [ 447.567713][T11685] netlink: 'syz.3.1253': attribute type 9 has an invalid length. [ 447.597528][T11685] tmpfs: Unknown parameter 'usrquotahefiles' [ 447.706383][ T5943] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 447.842129][T11699] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1254'. [ 448.752921][ T5943] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 448.832276][T11718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1258'. [ 449.181693][T11724] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 449.184341][T11724] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 449.187549][T11724] vhci_hcd vhci_hcd.0: Device attached [ 449.434614][ T840] usb 43-1: new high-speed USB device number 6 using vhci_hcd [ 449.541370][T11739] block nbd1: NBD_DISCONNECT [ 449.808520][T11728] vhci_hcd: connection reset by peer [ 449.814264][ T75] vhci_hcd: stop threads [ 449.818311][ T75] vhci_hcd: release socket [ 449.818366][ T75] vhci_hcd: disconnect device [ 450.762053][T11753] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 452.698277][ T5943] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 452.830279][T11805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1269'. [ 454.554453][ T840] vhci_hcd: vhci_device speed not set [ 456.024597][T11853] befs: (nullb0): No write support. Marking filesystem read-only [ 456.035349][T11853] befs: (nullb0): invalid magic header [ 457.264177][T11862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1281'. [ 457.435649][T11869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1283'. [ 459.894470][ T6202] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 461.331567][ T5943] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 461.402730][T11949] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 461.407344][T11949] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 461.413058][T11949] vhci_hcd vhci_hcd.0: Device attached [ 461.417761][T11948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1297'. [ 461.645227][ T29] usb 45-1: new high-speed USB device number 3 using vhci_hcd [ 462.074685][T11951] vhci_hcd: connection reset by peer [ 462.082710][ T1245] vhci_hcd: stop threads [ 462.084181][ T1245] vhci_hcd: release socket [ 462.085864][ T1245] vhci_hcd: disconnect device [ 466.763775][ T29] vhci_hcd: vhci_device speed not set [ 470.864778][ T5943] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 471.236684][T11988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1303'. [ 474.064464][ T6202] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 474.497919][T12059] ip6_vti0 speed is unknown, defaulting to 1000 [ 474.501691][T12059] ip6_vti0 speed is unknown, defaulting to 1000 [ 474.513764][T12059] ip6_vti0 speed is unknown, defaulting to 1000 [ 474.651571][T12059] infiniband syz2: set active [ 474.654274][ T6202] ip6_vti0 speed is unknown, defaulting to 1000 [ 474.656445][T12059] infiniband syz2: added ip6_vti0 [ 474.691853][T12059] RDS/IB: syz2: added [ 474.693694][T12059] smc: adding ib device syz2 with port count 1 [ 474.695740][T12059] smc: ib device syz2 port 1 has pnetid [ 474.701332][ T6202] ip6_vti0 speed is unknown, defaulting to 1000 [ 474.705607][T12059] ip6_vti0 speed is unknown, defaulting to 1000 [ 474.897579][T12059] ip6_vti0 speed is unknown, defaulting to 1000 [ 474.939444][T12071] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 475.076691][T12059] ip6_vti0 speed is unknown, defaulting to 1000 [ 475.158550][T12059] ip6_vti0 speed is unknown, defaulting to 1000 [ 475.255636][T12065] lo speed is unknown, defaulting to 1000 [ 475.257492][T12065] lo speed is unknown, defaulting to 1000 [ 475.259560][T12065] lo speed is unknown, defaulting to 1000 [ 475.555845][T12084] ip6_vti0 speed is unknown, defaulting to 1000 [ 475.559710][T12065] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 475.573737][T12065] lo speed is unknown, defaulting to 1000 [ 475.576410][T12065] lo speed is unknown, defaulting to 1000 [ 475.578936][T12065] lo speed is unknown, defaulting to 1000 [ 475.581595][T12065] lo speed is unknown, defaulting to 1000 [ 475.584184][T12065] lo speed is unknown, defaulting to 1000 [ 475.726373][T12089] nft_compat: unsupported protocol 0 [ 476.270480][T12102] netlink: 'syz.3.1320': attribute type 1 has an invalid length. [ 476.309931][T12102] bond1: entered promiscuous mode [ 476.312049][T12102] 8021q: adding VLAN 0 to HW filter on device bond1 [ 476.371045][T12102] bond1: (slave veth3): making interface the new active one [ 476.374503][T12102] veth3: entered promiscuous mode [ 476.380874][T12102] bond1: (slave veth3): Enslaving as an active interface with an up link [ 488.412667][ T34] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 488.522821][ T59] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 488.546679][T12132] ip6_vti0 speed is unknown, defaulting to 1000 [ 488.564175][ T34] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.577917][ T34] usb 5-1: config 0 has no interfaces? [ 488.585030][ T34] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 488.595492][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.629041][ T34] usb 5-1: config 0 descriptor?? [ 488.658011][T12132] lo speed is unknown, defaulting to 1000 [ 489.128251][T12155] input: syz1 as /devices/virtual/input/input33 [ 489.556938][ T5943] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 490.496527][T12171] ip6_vti0 speed is unknown, defaulting to 1000 [ 490.595911][T12171] lo speed is unknown, defaulting to 1000 [ 491.212985][ T34] usb 5-1: USB disconnect, device number 6 [ 493.584181][ T5943] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 493.586933][ T5943] Bluetooth: hci3: Injecting HCI hardware error event [ 493.589746][ T5943] Bluetooth: hci3: hardware error 0x00 [ 495.652046][ T5943] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 496.142469][T12211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1334'. [ 496.146669][T12211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1334'. [ 496.186205][T12215] ip6_vti0 speed is unknown, defaulting to 1000 [ 496.257487][T12215] lo speed is unknown, defaulting to 1000 [ 497.072569][ T59] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 497.247660][T12234] ip6_vti0 speed is unknown, defaulting to 1000 [ 497.495349][T12234] lo speed is unknown, defaulting to 1000 [ 498.525893][ T840] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 498.933010][ T840] usb 9-1: Using ep0 maxpacket: 8 [ 498.936374][ T840] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 498.938976][ T840] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 498.942063][ T840] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 498.945493][ T840] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 498.949486][ T840] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 498.953723][ T840] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 498.956903][ T840] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.055157][T12277] ip6_vti0 speed is unknown, defaulting to 1000 [ 499.132359][T12277] lo speed is unknown, defaulting to 1000 [ 499.165424][ T840] usb 9-1: GET_CAPABILITIES returned 0 [ 499.167250][ T840] usbtmc 9-1:16.0: can't read capabilities [ 499.475300][ T840] usb 9-1: USB disconnect, device number 2 [ 499.479355][T12249] usbtmc 9-1:16.0: usb_control_msg returned -71 [ 499.835047][T12294] ip6_vti0 speed is unknown, defaulting to 1000 [ 499.975748][T12294] lo speed is unknown, defaulting to 1000 [ 500.362373][ T6202] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 500.443005][T12308] ip6_vti0 speed is unknown, defaulting to 1000 [ 500.672071][T12308] lo speed is unknown, defaulting to 1000 [ 500.870852][T12323] mmap: syz.1.1353 (12323) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 501.999362][T12343] netlink: 'syz.3.1357': attribute type 10 has an invalid length. [ 502.002076][T12343] syz_tun: entered promiscuous mode [ 502.007984][T12343] syz_tun: tun_net_xmit 42 [ 502.015923][T12343] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 502.611703][ T34] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 502.761636][ T34] usb 9-1: Using ep0 maxpacket: 32 [ 502.767650][ T34] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 502.778504][ T34] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 502.782922][ T34] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 502.786174][ T34] usb 9-1: Product: syz [ 502.788039][ T34] usb 9-1: Manufacturer: syz [ 502.790023][ T34] usb 9-1: SerialNumber: syz [ 502.798673][ T34] usb 9-1: config 0 descriptor?? [ 502.803284][T12352] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 502.806839][ T34] hub 9-1:0.0: bad descriptor, ignoring hub [ 502.808862][ T34] hub 9-1:0.0: probe with driver hub failed with error -5 [ 503.095586][T12366] ip6_vti0 speed is unknown, defaulting to 1000 [ 503.160665][T12355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.163932][T12355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.219110][T12366] lo speed is unknown, defaulting to 1000 [ 503.403083][ T840] usb 9-1: USB disconnect, device number 3 [ 503.981963][ T59] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 504.155077][T12383] ip6_vti0 speed is unknown, defaulting to 1000 [ 504.233259][T12383] lo speed is unknown, defaulting to 1000 [ 504.921531][T12401] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 504.923656][T12401] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 504.926108][T12401] vhci_hcd vhci_hcd.0: Device attached [ 505.344064][T11328] usb 44-1: SetAddress Request (2) to port 0 [ 505.346583][T11328] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 505.662186][T12408] vhci_hcd: connection reset by peer [ 505.664330][ T100] vhci_hcd: stop threads [ 505.665744][ T100] vhci_hcd: release socket [ 505.667210][ T100] vhci_hcd: disconnect device [ 506.054288][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.056342][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.349901][T12438] ip6_vti0 speed is unknown, defaulting to 1000 [ 506.429536][T12438] lo speed is unknown, defaulting to 1000 [ 508.131385][T12195] Bluetooth: hci2: command 0x0406 tx timeout [ 510.371411][T11328] usb 44-1: device descriptor read/8, error -110 [ 510.806722][T11328] usb usb44-port1: attempt power cycle [ 510.994909][T12465] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 510.997353][T12465] UDF-fs: Scanning with blocksize 2048 failed [ 511.000715][T12465] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 511.003132][T12465] UDF-fs: Scanning with blocksize 4096 failed [ 511.006234][T12455] ptrace attach of "/syz-executor exec"[5941] was attempted by "/syz-executor exec"[12455] [ 511.297084][T12465] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 511.379369][T11328] usb usb44-port1: unable to enumerate USB device [ 511.381746][ T6202] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 511.701121][T12481] ip6_vti0 speed is unknown, defaulting to 1000 [ 511.795976][T12481] lo speed is unknown, defaulting to 1000 [ 512.123405][T12503] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1381'. [ 512.145882][T12503] batadv1: entered allmulticast mode [ 512.196063][T12504] input: syz1 as /devices/virtual/input/input34 [ 512.927462][T12520] ip6_vti0 speed is unknown, defaulting to 1000 [ 513.003189][T12520] lo speed is unknown, defaulting to 1000 [ 518.529060][T12552] bridge4: entered promiscuous mode [ 518.911152][ T6202] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 520.358768][T12596] ip6_vti0 speed is unknown, defaulting to 1000 [ 520.439107][T12596] lo speed is unknown, defaulting to 1000 [ 520.597552][T12604] ip6_vti0 speed is unknown, defaulting to 1000 [ 520.616680][ T9] IPVS: starting estimator thread 0... [ 520.619718][T12603] tipc: Started in network mode [ 520.621360][T12603] tipc: Node identity ac1414aa, cluster identity 4711 [ 520.624208][T12603] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 520.626569][T12603] tipc: Enabled bearer , priority 10 [ 520.670590][T12604] lo speed is unknown, defaulting to 1000 [ 520.710760][T12606] IPVS: using max 44 ests per chain, 105600 per kthread [ 520.762151][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 520.900731][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 521.040797][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 521.180772][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 521.320790][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 521.460739][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 521.600780][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 521.743667][ T9] tipc: Node number set to 2886997162 [ 521.880842][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 522.150873][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 525.810880][ C1] net_ratelimit: 3 callbacks suppressed [ 525.810897][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 526.850786][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 527.890844][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 528.930770][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 529.970836][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 531.010874][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 532.050922][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 532.998937][T12628] Bluetooth: hci4: Frame reassembly failed (-84) [ 533.004078][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 533.021429][T12628] capability: warning: `syz.0.1399' uses 32-bit capabilities (legacy support in use) [ 533.090755][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 533.801407][T12197] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 534.075837][T12664] tipc: Started in network mode [ 534.077568][T12664] tipc: Node identity ac141425, cluster identity 4711 [ 534.080125][T12664] tipc: New replicast peer: 0.0.0.0 [ 534.082566][T12664] tipc: Enabled bearer , priority 10 [ 534.085711][T12664] tipc: New replicast peer: 172.20.20.170 [ 534.130733][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 534.369700][ T6202] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 535.010887][T12195] Bluetooth: hci4: command 0xfc11 tx timeout [ 535.010909][ T5943] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 535.090795][ T6054] tipc: Node number set to 2886997029 [ 535.180729][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 535.196462][T12682] ip6_vti0 speed is unknown, defaulting to 1000 [ 535.270032][T12682] lo speed is unknown, defaulting to 1000 [ 535.514218][T12692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1411'. [ 535.517713][T12692] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 535.520358][T12692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.556151][T12688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1410'. [ 535.702330][T12699] ip6_vti0 speed is unknown, defaulting to 1000 [ 535.774599][T12699] lo speed is unknown, defaulting to 1000 [ 536.210738][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 537.250872][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 538.290903][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 539.330770][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 540.370809][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 541.420743][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 542.450906][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 543.490766][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 544.530933][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 545.570764][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 546.610778][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 547.650776][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 548.690757][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 548.751314][ T6202] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 548.998258][T12760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1416'. [ 549.019253][T12760] netlink: 'syz.1.1416': attribute type 5 has an invalid length. [ 549.023391][T12760] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1416'. [ 549.038502][T12760] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 549.041579][T12760] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 549.086925][T12760] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 549.089521][T12760] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 549.091430][T12753] syz.0.1417 (12753): drop_caches: 2 [ 549.094916][T12753] syz.0.1417 (12753): drop_caches: 2 [ 549.226819][T12760] geneve2: entered promiscuous mode [ 549.232125][T12760] geneve2: entered allmulticast mode [ 549.414581][T12775] ip6_vti0 speed is unknown, defaulting to 1000 [ 549.484445][T12775] lo speed is unknown, defaulting to 1000 [ 549.730727][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 549.995494][T12788] ip6_vti0 speed is unknown, defaulting to 1000 [ 550.066854][T12788] lo speed is unknown, defaulting to 1000 [ 550.303820][T12798] input: syz1 as /devices/virtual/input/input35 [ 550.780711][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 551.810804][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 552.850905][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 553.680712][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 553.711355][ T6202] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 553.840749][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 553.849118][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 553.858117][ T9] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 553.865027][ T9] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 553.867603][ T9] usb 5-1: Product: syz [ 553.874531][ T9] usb 5-1: Manufacturer: syz [ 553.876066][ T9] usb 5-1: SerialNumber: syz [ 553.882768][ T9] usb 5-1: config 0 descriptor?? [ 553.886370][T12815] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 553.890729][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 553.893834][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 553.895730][ T9] hub 5-1:0.0: probe with driver hub failed with error -5 [ 554.332839][T12837] futex_wake_op: syz.3.1429 tries to shift op by 32; fix this program [ 554.347113][T12837] fuse: Unknown parameter 'rLotmode' [ 554.699374][T12850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1430'. [ 554.702530][T12850] netlink: 'syz.4.1430': attribute type 5 has an invalid length. [ 554.705125][T12850] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1430'. [ 554.725313][T12850] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 554.728199][T12850] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 554.731202][T12850] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 554.734122][T12850] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 554.737196][T12850] geneve2: entered promiscuous mode [ 554.739029][T12850] geneve2: entered allmulticast mode [ 554.940737][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 554.962762][ T9] raw-gadget.0 gadget.0: failed to queue suspend event [ 555.031097][T12815] raw-gadget.0 gadget.0: failed to queue resume event [ 555.051349][ T9] raw-gadget.0 gadget.0: failed to queue suspend event [ 555.120790][T12815] raw-gadget.0 gadget.0: failed to queue resume event [ 555.142086][ T72] raw-gadget.0 gadget.0: failed to queue suspend event [ 555.162574][T12837] orangefs_mount: mount request failed with -4 [ 555.252244][T12815] raw-gadget.0 gadget.0: failed to queue resume event [ 555.281505][ T6202] raw-gadget.0 gadget.0: failed to queue suspend event [ 555.350934][T12815] raw-gadget.0 gadget.0: failed to queue resume event [ 555.474198][T12863] ip6_vti0 speed is unknown, defaulting to 1000 [ 555.551734][ T72] raw-gadget.0 gadget.0: failed to queue suspend event [ 555.599007][T12864] ip6_vti0 speed is unknown, defaulting to 1000 [ 555.599134][T12863] lo speed is unknown, defaulting to 1000 [ 555.677355][T12864] lo speed is unknown, defaulting to 1000 [ 555.703043][T12815] raw-gadget.0 gadget.0: failed to queue resume event [ 555.723713][ T72] raw-gadget.0 gadget.0: failed to queue suspend event [ 555.790782][T12815] raw-gadget.0 gadget.0: failed to queue resume event [ 555.835347][ T9] raw-gadget.0 gadget.0: failed to queue suspend event [ 555.940964][T12815] raw-gadget.0 gadget.0: failed to queue resume event [ 555.962033][ T9] raw-gadget.0 gadget.0: failed to queue suspend event [ 555.980721][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 556.033046][T12815] raw-gadget.0 gadget.0: failed to queue resume event [ 556.096672][ T9] raw-gadget.0 gadget.0: failed to queue suspend event [ 556.124959][T12875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1435'. [ 556.161142][T12875] bond0: (slave syz_tun): Releasing backup interface [ 556.174399][T12815] raw-gadget.0 gadget.0: failed to queue resume event [ 556.193664][ T9] raw-gadget.0 gadget.0: failed to queue suspend event [ 556.323689][T12815] raw-gadget.0 gadget.0: failed to queue resume event [ 556.380041][ T6202] raw-gadget.0 gadget.0: failed to queue suspend event [ 556.419326][T12197] usb 5-1: USB disconnect, device number 7 [ 556.421381][T12815] raw-gadget.0 gadget.0: failed to queue disconnect event [ 557.010786][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 558.050788][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 559.090850][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 560.130719][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 561.170857][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 562.210836][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 563.250843][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 564.290858][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 565.330964][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 566.370926][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 567.410729][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 567.494710][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.496868][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.460721][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 568.724683][T12906] ip6_vti0 speed is unknown, defaulting to 1000 [ 568.731139][ T6202] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 568.805405][T12906] lo speed is unknown, defaulting to 1000 [ 568.820781][T12893] block nbd0: server does not support multiple connections per device. [ 568.842227][T12893] block nbd0: shutting down sockets [ 568.926293][T12911] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 568.928394][T12911] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 569.025255][T12911] vhci_hcd vhci_hcd.0: Device attached [ 569.372476][T12926] ip6_vti0 speed is unknown, defaulting to 1000 [ 569.447118][T12926] lo speed is unknown, defaulting to 1000 [ 569.500715][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 569.600718][ T9] usb 37-1: new high-speed USB device number 3 using vhci_hcd [ 569.640972][T12944] ip6_vti0 speed is unknown, defaulting to 1000 [ 569.941909][T12944] lo speed is unknown, defaulting to 1000 [ 570.371452][T12915] vhci_hcd: connection reset by peer [ 570.373407][ T60] vhci_hcd: stop threads [ 570.374724][ T60] vhci_hcd: release socket [ 570.376594][ T60] vhci_hcd: disconnect device [ 570.530744][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 571.570751][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 571.735446][T12971] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 571.737527][T12971] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 571.741421][T12971] vhci_hcd vhci_hcd.0: Device attached [ 571.862262][T12962] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1448'. [ 571.991693][ T72] usb 39-1: new high-speed USB device number 6 using vhci_hcd [ 572.336573][T12972] vhci_hcd: connection reset by peer [ 572.338550][ T1245] vhci_hcd: stop threads [ 572.339867][ T1245] vhci_hcd: release socket [ 572.342102][ T1245] vhci_hcd: disconnect device [ 572.610741][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 573.650790][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 574.690832][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 574.841104][ T9] vhci_hcd: vhci_device speed not set [ 575.730839][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 576.770806][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 577.080880][ T72] vhci_hcd: vhci_device speed not set [ 577.820782][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 578.850752][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 578.910207][T13020] input: syz1 as /devices/virtual/input/input36 [ 579.039520][T13030] ip6_vti0 speed is unknown, defaulting to 1000 [ 579.117670][T13030] lo speed is unknown, defaulting to 1000 [ 579.852870][ T40] kauditd_printk_skb: 175 callbacks suppressed [ 579.852884][ T40] audit: type=1326 audit(2000000170.355:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13040 comm="syz.1.1454" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704e579 code=0x0 [ 579.900718][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 580.940711][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 581.970782][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 582.391858][T13060] ip6_vti0 speed is unknown, defaulting to 1000 [ 582.607438][T13060] lo speed is unknown, defaulting to 1000 [ 583.010730][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 583.414329][T13075] ip6_vti0 speed is unknown, defaulting to 1000 [ 583.527369][T13075] lo speed is unknown, defaulting to 1000 [ 583.960434][T13084] ip6_vti0 speed is unknown, defaulting to 1000 [ 584.060875][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 584.130775][T13084] lo speed is unknown, defaulting to 1000 [ 584.495604][T13086] ip6_vti0 speed is unknown, defaulting to 1000 [ 584.569076][T13086] lo speed is unknown, defaulting to 1000 [ 585.059233][T13092] ip6_vti0 speed is unknown, defaulting to 1000 [ 585.090853][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 585.146595][T13092] lo speed is unknown, defaulting to 1000 [ 585.176452][T13097] ip6_vti0 speed is unknown, defaulting to 1000 [ 585.353562][T13097] lo speed is unknown, defaulting to 1000 [ 585.777681][T13104] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 585.780351][T13104] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 585.786941][T13104] vhci_hcd vhci_hcd.0: Device attached [ 585.995561][T13111] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1468'. [ 586.098057][T11328] usb 39-1: new high-speed USB device number 7 using vhci_hcd [ 586.118748][T13117] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 586.120773][T13117] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 586.123648][T13117] vhci_hcd vhci_hcd.0: Device attached [ 586.130765][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 586.235701][T13105] vhci_hcd: connection reset by peer [ 586.253275][ T46] vhci_hcd: stop threads [ 586.254666][ T46] vhci_hcd: release socket [ 586.256151][ T46] vhci_hcd: disconnect device [ 586.390860][ T72] usb 43-1: new high-speed USB device number 7 using vhci_hcd [ 586.439082][T13122] ip6_vti0 speed is unknown, defaulting to 1000 [ 586.555565][T13122] lo speed is unknown, defaulting to 1000 [ 586.681991][T13118] vhci_hcd: connection reset by peer [ 586.684119][ T46] vhci_hcd: stop threads [ 586.685525][ T46] vhci_hcd: release socket [ 586.688177][ T46] vhci_hcd: disconnect device [ 587.170834][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 588.141584][ T6202] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 588.210857][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 588.989112][T13164] ip6_vti0 speed is unknown, defaulting to 1000 [ 589.260740][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 589.344624][T13164] lo speed is unknown, defaulting to 1000 [ 589.359598][T13165] ip6_vti0 speed is unknown, defaulting to 1000 [ 589.462467][T13165] lo speed is unknown, defaulting to 1000 [ 589.487210][T13171] ip6_vti0 speed is unknown, defaulting to 1000 [ 589.557792][T13171] lo speed is unknown, defaulting to 1000 [ 589.994088][T13194] ip6_vti0 speed is unknown, defaulting to 1000 [ 590.081444][T13194] lo speed is unknown, defaulting to 1000 [ 590.131587][T13197] ip6_vti0 speed is unknown, defaulting to 1000 [ 590.290740][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 590.338124][T13197] lo speed is unknown, defaulting to 1000 [ 590.457620][T13193] ip6_vti0 speed is unknown, defaulting to 1000 [ 590.573170][T13193] lo speed is unknown, defaulting to 1000 [ 591.240762][T11328] vhci_hcd: vhci_device speed not set [ 591.330811][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 591.490869][ T72] vhci_hcd: vhci_device speed not set [ 592.370948][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 593.410883][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 594.450784][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 595.490878][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 596.530975][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 597.571045][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 598.610749][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 599.650761][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 600.690724][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 601.730832][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 602.463215][T13232] ip6_vti0 speed is unknown, defaulting to 1000 [ 602.545854][T13232] lo speed is unknown, defaulting to 1000 [ 602.545958][T13234] ip6_vti0 speed is unknown, defaulting to 1000 [ 602.623869][T13234] lo speed is unknown, defaulting to 1000 [ 602.770820][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 603.249111][T13250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1489'. [ 603.265867][T13252] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 603.267986][T13252] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 603.270400][T13252] vhci_hcd vhci_hcd.0: Device attached [ 603.418552][T13256] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 603.420572][T13256] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 603.432459][T13256] vhci_hcd vhci_hcd.0: Device attached [ 603.477888][T13257] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 603.479991][T13257] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 603.503182][T13257] vhci_hcd vhci_hcd.0: Device attached [ 603.590833][T11328] usb 39-1: new high-speed USB device number 8 using vhci_hcd [ 603.711210][ T29] usb 37-1: new high-speed USB device number 4 using vhci_hcd [ 603.771043][ T9] usb 45-1: new high-speed USB device number 4 using vhci_hcd [ 603.810728][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 603.995504][T13258] vhci_hcd: connection reset by peer [ 603.998235][ T1245] vhci_hcd: stop threads [ 603.999926][ T1245] vhci_hcd: release socket [ 604.003407][ T1245] vhci_hcd: disconnect device [ 604.850762][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 605.040776][T13261] vhci_hcd: connection reset by peer [ 605.042596][ T100] vhci_hcd: stop threads [ 605.044097][ T100] vhci_hcd: release socket [ 605.045566][ T100] vhci_hcd: disconnect device [ 605.045928][T13253] vhci_hcd: connection reset by peer [ 605.050920][ T100] vhci_hcd: stop threads [ 605.060889][ T100] vhci_hcd: release socket [ 605.068987][ T100] vhci_hcd: disconnect device [ 605.425614][T13274] devtmpfs: Too few inodes for current use [ 605.807042][T13280] ip6_vti0 speed is unknown, defaulting to 1000 [ 605.890737][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 606.071386][T13280] lo speed is unknown, defaulting to 1000 [ 606.694539][T13284] ip6_vti0 speed is unknown, defaulting to 1000 [ 606.775200][T13284] lo speed is unknown, defaulting to 1000 [ 606.930718][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 607.839879][T13294] ip6_vti0 speed is unknown, defaulting to 1000 [ 607.980768][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 608.271262][T13294] lo speed is unknown, defaulting to 1000 [ 608.271331][T13301] ip6_vti0 speed is unknown, defaulting to 1000 [ 608.521163][T13301] lo speed is unknown, defaulting to 1000 [ 608.564593][T13297] ip6_vti0 speed is unknown, defaulting to 1000 [ 608.700925][T11328] vhci_hcd: vhci_device speed not set [ 608.732731][T13311] ip6_vti0 speed is unknown, defaulting to 1000 [ 608.810090][T13297] lo speed is unknown, defaulting to 1000 [ 608.895626][T13311] lo speed is unknown, defaulting to 1000 [ 608.920798][ T9] vhci_hcd: vhci_device speed not set [ 609.008348][ T29] vhci_hcd: vhci_device speed not set [ 609.020746][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 609.658441][T13327] ip6_vti0 speed is unknown, defaulting to 1000 [ 609.730472][T13327] lo speed is unknown, defaulting to 1000 [ 609.824847][T13326] ip6_vti0 speed is unknown, defaulting to 1000 [ 609.900376][T13326] lo speed is unknown, defaulting to 1000 [ 609.902338][T13332] ip6_vti0 speed is unknown, defaulting to 1000 [ 609.922301][T13334] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 609.924362][T13334] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 609.992941][T13332] lo speed is unknown, defaulting to 1000 [ 610.060721][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 610.104063][T13334] vhci_hcd vhci_hcd.0: Device attached [ 610.460758][T13336] vhci_hcd: connection closed [ 610.464095][ T60] vhci_hcd: stop threads [ 610.467505][ T60] vhci_hcd: release socket [ 610.487654][ T60] vhci_hcd: disconnect device [ 610.670752][T13343] ip6_vti0 speed is unknown, defaulting to 1000 [ 610.761494][T13343] lo speed is unknown, defaulting to 1000 [ 610.811567][T13350] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 610.813712][T13350] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 610.897445][T13350] vhci_hcd vhci_hcd.0: Device attached [ 611.090726][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 611.090968][T13359] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 611.095276][T13359] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 611.100562][T13359] vhci_hcd vhci_hcd.0: Device attached [ 611.230922][T11328] usb 43-1: new high-speed USB device number 8 using vhci_hcd [ 611.340329][ T29] usb 45-1: new high-speed USB device number 5 using vhci_hcd [ 611.361701][T13353] vhci_hcd: connection reset by peer [ 611.369163][ T1147] vhci_hcd: stop threads [ 611.369825][T13364] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 611.372221][T13364] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 611.381829][ T1147] vhci_hcd: release socket [ 611.387666][ T1147] vhci_hcd: disconnect device [ 611.399636][T13364] vhci_hcd vhci_hcd.0: Device attached [ 611.539803][T13360] vhci_hcd: connection reset by peer [ 611.545828][ T94] vhci_hcd: stop threads [ 611.547434][ T94] vhci_hcd: release socket [ 611.549310][ T94] vhci_hcd: disconnect device [ 611.651016][ T72] usb 37-1: new high-speed USB device number 5 using vhci_hcd [ 611.944457][T13365] vhci_hcd: connection reset by peer [ 611.946555][ T1147] vhci_hcd: stop threads [ 611.947958][ T1147] vhci_hcd: release socket [ 611.980137][ T1147] vhci_hcd: disconnect device [ 612.130739][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 612.594006][T13372] ip6_vti0 speed is unknown, defaulting to 1000 [ 612.670057][T13372] lo speed is unknown, defaulting to 1000 [ 613.180729][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 613.697847][T13379] ip6_vti0 speed is unknown, defaulting to 1000 [ 613.856843][T13379] lo speed is unknown, defaulting to 1000 [ 614.210767][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 614.783608][T13387] ip6_vti0 speed is unknown, defaulting to 1000 [ 615.037282][T13387] lo speed is unknown, defaulting to 1000 [ 615.061041][T13392] ip6_vti0 speed is unknown, defaulting to 1000 [ 615.156207][T13392] lo speed is unknown, defaulting to 1000 [ 615.260722][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 615.937111][T13405] ip6_vti0 speed is unknown, defaulting to 1000 [ 616.074796][T13405] lo speed is unknown, defaulting to 1000 [ 616.110908][T13407] ip6_vti0 speed is unknown, defaulting to 1000 [ 616.290717][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 616.307920][T13407] lo speed is unknown, defaulting to 1000 [ 616.390846][T11328] vhci_hcd: vhci_device speed not set [ 616.461072][ T29] vhci_hcd: vhci_device speed not set [ 616.481675][T13414] ip6_vti0 speed is unknown, defaulting to 1000 [ 616.566129][T13414] lo speed is unknown, defaulting to 1000 [ 617.045652][T13418] ip6_vti0 speed is unknown, defaulting to 1000 [ 617.112694][ T72] vhci_hcd: vhci_device speed not set [ 617.186738][T13418] lo speed is unknown, defaulting to 1000 [ 617.330846][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 617.400288][T13429] ip6_vti0 speed is unknown, defaulting to 1000 [ 618.020342][T13429] lo speed is unknown, defaulting to 1000 [ 618.124777][T13436] ip6_vti0 speed is unknown, defaulting to 1000 [ 618.319106][T13436] lo speed is unknown, defaulting to 1000 [ 618.370802][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 618.375526][T13438] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 618.377625][T13438] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 618.381682][T13438] vhci_hcd vhci_hcd.0: Device attached [ 618.391554][T13441] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 618.393658][T13441] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 618.396241][T13441] vhci_hcd vhci_hcd.0: Device attached [ 618.497828][T13439] vhci_hcd: connection closed [ 618.498123][ T94] vhci_hcd: stop threads [ 618.502892][ T94] vhci_hcd: release socket [ 618.504829][ T94] vhci_hcd: disconnect device [ 618.703876][T13443] vhci_hcd: connection closed [ 618.704328][ T94] vhci_hcd: stop threads [ 618.710189][ T94] vhci_hcd: release socket [ 618.713815][ T94] vhci_hcd: disconnect device [ 619.410845][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 619.782514][T13452] ip6_vti0 speed is unknown, defaulting to 1000 [ 619.854299][T13452] lo speed is unknown, defaulting to 1000 [ 620.046829][T13456] ip6_vti0 speed is unknown, defaulting to 1000 [ 620.284624][T13456] lo speed is unknown, defaulting to 1000 [ 620.450746][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 620.647773][T13464] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 620.649896][T13464] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 620.652671][T13464] vhci_hcd vhci_hcd.0: Device attached [ 620.910823][ T72] usb 39-1: new high-speed USB device number 9 using vhci_hcd [ 621.333411][T13465] vhci_hcd: connection reset by peer [ 621.336977][ T1147] vhci_hcd: stop threads [ 621.338793][ T1147] vhci_hcd: release socket [ 621.351038][ T1147] vhci_hcd: disconnect device [ 621.481034][T13471] ip6_vti0 speed is unknown, defaulting to 1000 [ 621.500742][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 621.583801][T13471] lo speed is unknown, defaulting to 1000 [ 621.871497][ C2] hpet: Lost 2 RTC interrupts [ 622.190847][T13478] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 622.193022][T13478] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 622.203810][T13478] vhci_hcd vhci_hcd.0: Device attached [ 622.470863][ T29] usb 45-1: new high-speed USB device number 6 using vhci_hcd [ 622.483442][T13483] ip6_vti0 speed is unknown, defaulting to 1000 [ 622.540779][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 622.635278][T13483] lo speed is unknown, defaulting to 1000 [ 622.716669][T13480] vhci_hcd: connection reset by peer [ 622.720755][ T13] vhci_hcd: stop threads [ 622.724533][ T13] vhci_hcd: release socket [ 622.732349][ T13] vhci_hcd: disconnect device [ 623.570788][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 623.582948][T13493] ip6_vti0 speed is unknown, defaulting to 1000 [ 623.662619][T13494] ip6_vti0 speed is unknown, defaulting to 1000 [ 623.663032][T13493] lo speed is unknown, defaulting to 1000 [ 623.826350][T13494] lo speed is unknown, defaulting to 1000 [ 623.897271][T13499] ip6_vti0 speed is unknown, defaulting to 1000 [ 624.102529][T13499] lo speed is unknown, defaulting to 1000 [ 624.620722][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 624.972060][T13512] ip6_vti0 speed is unknown, defaulting to 1000 [ 625.279619][T13512] lo speed is unknown, defaulting to 1000 [ 625.310983][T13518] ip6_vti0 speed is unknown, defaulting to 1000 [ 625.415602][T13518] lo speed is unknown, defaulting to 1000 [ 625.432921][T13513] ip6_vti0 speed is unknown, defaulting to 1000 [ 625.512111][T13513] lo speed is unknown, defaulting to 1000 [ 625.650775][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 626.190833][ T72] vhci_hcd: vhci_device speed not set [ 626.297549][T13521] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1534'. [ 626.571504][T13527] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 626.574305][T13527] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 626.603623][T13527] vhci_hcd vhci_hcd.0: Device attached [ 626.700752][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 627.040819][ T72] usb 39-1: device descriptor read/64, error -110 [ 627.143452][T13530] vhci_hcd: connection closed [ 627.144532][ T46] vhci_hcd: stop threads [ 627.150890][ T46] vhci_hcd: release socket [ 627.154078][ T46] vhci_hcd: disconnect device [ 627.375261][ T72] vhci_hcd: vhci_device speed not set [ 627.492922][T13537] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 627.495454][T13537] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 627.498925][T13537] vhci_hcd vhci_hcd.0: Device attached [ 627.650863][ T29] vhci_hcd: vhci_device speed not set [ 627.740721][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 627.771067][T11328] usb 37-1: new high-speed USB device number 6 using vhci_hcd [ 628.055003][T13538] vhci_hcd: connection reset by peer [ 628.137216][ T100] vhci_hcd: stop threads [ 628.140786][ T100] vhci_hcd: release socket [ 628.149171][ T100] vhci_hcd: disconnect device [ 628.203686][T13547] ip6_vti0 speed is unknown, defaulting to 1000 [ 628.278550][T13547] lo speed is unknown, defaulting to 1000 [ 628.574264][T13542] block nbd0: server does not support multiple connections per device. [ 628.577385][T13542] block nbd0: shutting down sockets [ 628.725681][T13560] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1541'. [ 628.780722][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 628.951713][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 628.954263][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.518596][T13567] ip6_vti0 speed is unknown, defaulting to 1000 [ 630.640731][T13567] lo speed is unknown, defaulting to 1000 [ 631.391739][ T1419] ================================================================== [ 631.395081][ T1419] BUG: KASAN: slab-use-after-free in tty_write_room+0x7d/0x90 [ 631.399004][ T1419] Read of size 8 at addr ffff88805dd82020 by task aoe_tx0/1419 [ 631.404057][ T1419] [ 631.405091][ T1419] CPU: 0 UID: 0 PID: 1419 Comm: aoe_tx0 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 631.405113][ T1419] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 631.405123][ T1419] Call Trace: [ 631.405130][ T1419] [ 631.405137][ T1419] dump_stack_lvl+0x116/0x1f0 [ 631.405175][ T1419] print_report+0xcd/0x680 [ 631.405190][ T1419] ? __virt_addr_valid+0x81/0x610 [ 631.405207][ T1419] ? __phys_addr+0xe8/0x180 [ 631.405223][ T1419] ? tty_write_room+0x7d/0x90 [ 631.405241][ T1419] kasan_report+0xe0/0x110 [ 631.405256][ T1419] ? tty_write_room+0x7d/0x90 [ 631.405276][ T1419] tty_write_room+0x7d/0x90 [ 631.405294][ T1419] handle_tx+0x14f/0x630 [ 631.405312][ T1419] dev_hard_start_xmit+0x97/0x740 [ 631.405336][ T1419] __dev_queue_xmit+0x7eb/0x43e0 [ 631.405359][ T1419] ? lockdep_hardirqs_on+0x7c/0x110 [ 631.405381][ T1419] ? finish_task_switch.isra.0+0x221/0xc10 [ 631.405399][ T1419] ? rcu_is_watching+0x12/0xc0 [ 631.405415][ T1419] ? __pfx___dev_queue_xmit+0x10/0x10 [ 631.405437][ T1419] ? __lock_acquire+0xb8a/0x1c90 [ 631.405458][ T1419] ? __lock_acquire+0xb8a/0x1c90 [ 631.405481][ T1419] ? do_raw_spin_lock+0x12c/0x2b0 [ 631.405506][ T1419] ? find_held_lock+0x2b/0x80 [ 631.405521][ T1419] ? skb_dequeue+0x126/0x180 [ 631.405540][ T1419] ? find_held_lock+0x2b/0x80 [ 631.405555][ T1419] ? rcu_is_watching+0x12/0xc0 [ 631.405573][ T1419] tx+0xcc/0x190 [ 631.405590][ T1419] ? __pfx_tx+0x10/0x10 [ 631.405604][ T1419] kthread+0x1e4/0x3e0 [ 631.405628][ T1419] ? find_held_lock+0x2b/0x80 [ 631.405642][ T1419] ? __pfx_kthread+0x10/0x10 [ 631.405665][ T1419] ? __pfx_default_wake_function+0x10/0x10 [ 631.405681][ T1419] ? lockdep_hardirqs_on+0x7c/0x110 [ 631.405704][ T1419] ? __kthread_parkme+0x19e/0x250 [ 631.405724][ T1419] ? __pfx_kthread+0x10/0x10 [ 631.405747][ T1419] kthread+0x3c5/0x780 [ 631.405769][ T1419] ? __pfx_kthread+0x10/0x10 [ 631.405792][ T1419] ? rcu_is_watching+0x12/0xc0 [ 631.405811][ T1419] ? __pfx_kthread+0x10/0x10 [ 631.405833][ T1419] ret_from_fork+0x5d4/0x6f0 [ 631.405853][ T1419] ? __pfx_kthread+0x10/0x10 [ 631.405875][ T1419] ret_from_fork_asm+0x1a/0x30 [ 631.405897][ T1419] [ 631.405903][ T1419] [ 631.496679][ T1419] Allocated by task 13548: [ 631.498569][ T1419] kasan_save_stack+0x33/0x60 [ 631.500641][ T1419] kasan_save_track+0x14/0x30 [ 631.502624][ T1419] __kasan_kmalloc+0xaa/0xb0 [ 631.504596][ T1419] alloc_tty_struct+0x96/0x8c0 [ 631.506573][ T1419] tty_init_dev.part.0+0x1e/0x500 [ 631.508658][ T1419] tty_open+0xa50/0xf90 [ 631.510401][ T1419] chrdev_open+0x231/0x6a0 [ 631.512301][ T1419] do_dentry_open+0x744/0x1c10 [ 631.514298][ T1419] vfs_open+0x82/0x3f0 [ 631.516080][ T1419] path_openat+0x1de4/0x2cb0 [ 631.518015][ T1419] do_filp_open+0x20b/0x470 [ 631.519939][ T1419] do_sys_openat2+0x11b/0x1d0 [ 631.521913][ T1419] __ia32_compat_sys_openat+0x16d/0x210 [ 631.524224][ T1419] __do_fast_syscall_32+0x7c/0x3a0 [ 631.526386][ T1419] do_fast_syscall_32+0x32/0x80 [ 631.528450][ T1419] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 631.531099][ T1419] [ 631.532129][ T1419] Freed by task 12197: [ 631.533829][ T1419] kasan_save_stack+0x33/0x60 [ 631.535837][ T1419] kasan_save_track+0x14/0x30 [ 631.537824][ T1419] kasan_save_free_info+0x3b/0x60 [ 631.539922][ T1419] __kasan_slab_free+0x51/0x70 [ 631.541896][ T1419] kfree+0x2b4/0x4d0 [ 631.543564][ T1419] process_one_work+0x9cc/0x1b70 [ 631.545517][ T1419] worker_thread+0x6c8/0xf10 [ 631.547555][ T1419] kthread+0x3c5/0x780 [ 631.549300][ T1419] ret_from_fork+0x5d4/0x6f0 [ 631.551240][ T1419] ret_from_fork_asm+0x1a/0x30 [ 631.553278][ T1419] [ 631.554319][ T1419] Last potentially related work creation: [ 631.556686][ T1419] kasan_save_stack+0x33/0x60 [ 631.558685][ T1419] kasan_record_aux_stack+0xa7/0xc0 [ 631.560774][ T1419] insert_work+0x36/0x230 [ 631.562581][ T1419] __queue_work+0x97e/0x10f0 [ 631.564539][ T1419] queue_work_on+0x1a4/0x1f0 [ 631.566509][ T1419] release_tty+0x4de/0x5d0 [ 631.568406][ T1419] tty_release_struct+0xb7/0xe0 [ 631.570372][ T1419] tty_release+0xe2d/0x1430 [ 631.572218][ T1419] __fput+0x3ff/0xb70 [ 631.573822][ T1419] task_work_run+0x14d/0x240 [ 631.575735][ T1419] do_exit+0x86c/0x2bd0 [ 631.577414][ T1419] do_group_exit+0xd3/0x2a0 [ 631.579315][ T1419] get_signal+0x2673/0x26d0 [ 631.581137][ T1419] arch_do_signal_or_restart+0x8f/0x790 [ 631.583395][ T1419] irqentry_exit_to_user_mode+0x12a/0x270 [ 631.585768][ T1419] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 631.588246][ T1419] [ 631.589267][ T1419] The buggy address belongs to the object at ffff88805dd82000 [ 631.589267][ T1419] which belongs to the cache kmalloc-cg-2k of size 2048 [ 631.595077][ T1419] The buggy address is located 32 bytes inside of [ 631.595077][ T1419] freed 2048-byte region [ffff88805dd82000, ffff88805dd82800) [ 631.600664][ T1419] [ 631.601692][ T1419] The buggy address belongs to the physical page: [ 631.604406][ T1419] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805dd84000 pfn:0x5dd80 [ 631.608371][ T1419] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 631.611590][ T1419] memcg:ffff88806c59fd01 [ 631.613344][ T1419] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 631.616692][ T1419] page_type: f5(slab) [ 631.618308][ T1419] raw: 04fff00000000240 ffff88801b84c140 ffffea00018fd010 ffffea0001ae2e10 [ 631.621689][ T1419] raw: ffff88805dd84000 0000000000080006 00000000f5000000 ffff88806c59fd01 [ 631.625290][ T1419] head: 04fff00000000240 ffff88801b84c140 ffffea00018fd010 ffffea0001ae2e10 [ 631.628863][ T1419] head: ffff88805dd84000 0000000000080006 00000000f5000000 ffff88806c59fd01 [ 631.632395][ T1419] head: 04fff00000000003 ffffea0001776001 00000000ffffffff 00000000ffffffff [ 631.635929][ T1419] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 631.639451][ T1419] page dumped because: kasan: bad access detected [ 631.642188][ T1419] page_owner tracks the page as allocated [ 631.644541][ T1419] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 13301, tgid 13292 (syz.4.1496), ts 608534799729, free_ts 607748094176 [ 631.653722][ T1419] post_alloc_hook+0x1c0/0x230 [ 631.655730][ T1419] get_page_from_freelist+0x1321/0x3890 [ 631.658089][ T1419] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 631.660551][ T1419] alloc_pages_mpol+0x1fb/0x550 [ 631.662573][ T1419] new_slab+0x23b/0x330 [ 631.664330][ T1419] ___slab_alloc+0xd9c/0x1940 [ 631.666304][ T1419] __slab_alloc.constprop.0+0x56/0xb0 [ 631.668545][ T1419] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 631.671129][ T1419] kmemdup_noprof+0x29/0x60 [ 631.673069][ T1419] neigh_sysctl_register+0xb2/0x670 [ 631.675237][ T1419] devinet_sysctl_register+0xb6/0x200 [ 631.677481][ T1419] inetdev_init+0x2b8/0x5a0 [ 631.679388][ T1419] inetdev_event+0xc5f/0x18a0 [ 631.681422][ T1419] notifier_call_chain+0xb9/0x410 [ 631.683521][ T1419] call_netdevice_notifiers_info+0xbe/0x140 [ 631.686000][ T1419] register_netdevice+0x182e/0x2270 [ 631.688208][ T1419] page last free pid 5351 tgid 5351 stack trace: [ 631.690777][ T1419] __free_frozen_pages+0x7fe/0x1180 [ 631.692842][ T1419] __put_partials+0x16d/0x1c0 [ 631.694635][ T1419] qlist_free_all+0x4d/0x120 [ 631.696591][ T1419] kasan_quarantine_reduce+0x195/0x1e0 [ 631.698823][ T1419] __kasan_slab_alloc+0x69/0x90 [ 631.700712][ T1419] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 631.702958][ T1419] getname_flags.part.0+0x4c/0x550 [ 631.705104][ T1419] getname_flags+0x93/0xf0 [ 631.706932][ T1419] do_sys_openat2+0xb8/0x1d0 [ 631.708796][ T1419] __x64_sys_openat+0x174/0x210 [ 631.710826][ T1419] do_syscall_64+0xcd/0x490 [ 631.712738][ T1419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.715205][ T1419] [ 631.716245][ T1419] Memory state around the buggy address: [ 631.718567][ T1419] ffff88805dd81f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 631.721842][ T1419] ffff88805dd81f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 631.725139][ T1419] >ffff88805dd82000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 631.728403][ T1419] ^ [ 631.730527][ T1419] ffff88805dd82080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 631.733817][ T1419] ffff88805dd82100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 631.737180][ T1419] ================================================================== [ 631.740568][ T1419] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 631.743594][ T1419] CPU: 0 UID: 0 PID: 1419 Comm: aoe_tx0 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 631.748341][ T1419] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 631.752758][ T1419] Call Trace: [ 631.754138][ T1419] [ 631.755381][ T1419] dump_stack_lvl+0x3d/0x1f0 [ 631.756949][ T1419] panic+0x71c/0x800 [ 631.758202][ T1419] ? __pfx_panic+0x10/0x10 [ 631.759619][ T1419] ? irqentry_exit+0x3b/0x90 [ 631.761072][ T1419] ? lockdep_hardirqs_on+0x7c/0x110 [ 631.762715][ T1419] ? tty_write_room+0x7d/0x90 [ 631.764212][ T1419] ? check_panic_on_warn+0x1f/0xb0 [ 631.765882][ T1419] ? tty_write_room+0x7d/0x90 [ 631.767338][ T1419] check_panic_on_warn+0xab/0xb0 [ 631.768782][ T1419] end_report+0x107/0x170 [ 631.770164][ T1419] kasan_report+0xee/0x110 [ 631.771591][ T1419] ? tty_write_room+0x7d/0x90 [ 631.773084][ T1419] tty_write_room+0x7d/0x90 [ 631.774507][ T1419] handle_tx+0x14f/0x630 [ 631.775858][ T1419] dev_hard_start_xmit+0x97/0x740 [ 631.777435][ T1419] __dev_queue_xmit+0x7eb/0x43e0 [ 631.778990][ T1419] ? lockdep_hardirqs_on+0x7c/0x110 [ 631.780628][ T1419] ? finish_task_switch.isra.0+0x221/0xc10 [ 631.782486][ T1419] ? rcu_is_watching+0x12/0xc0 [ 631.783985][ T1419] ? __pfx___dev_queue_xmit+0x10/0x10 [ 631.785656][ T1419] ? __lock_acquire+0xb8a/0x1c90 [ 631.787200][ T1419] ? __lock_acquire+0xb8a/0x1c90 [ 631.788771][ T1419] ? do_raw_spin_lock+0x12c/0x2b0 [ 631.790346][ T1419] ? find_held_lock+0x2b/0x80 [ 631.791835][ T1419] ? skb_dequeue+0x126/0x180 [ 631.793301][ T1419] ? find_held_lock+0x2b/0x80 [ 631.794773][ T1419] ? rcu_is_watching+0x12/0xc0 [ 631.796322][ T1419] tx+0xcc/0x190 [ 631.797525][ T1419] ? __pfx_tx+0x10/0x10 [ 631.798827][ T1419] kthread+0x1e4/0x3e0 [ 631.800161][ T1419] ? find_held_lock+0x2b/0x80 [ 631.801638][ T1419] ? __pfx_kthread+0x10/0x10 [ 631.803116][ T1419] ? __pfx_default_wake_function+0x10/0x10 [ 631.804993][ T1419] ? lockdep_hardirqs_on+0x7c/0x110 [ 631.806629][ T1419] ? __kthread_parkme+0x19e/0x250 [ 631.808236][ T1419] ? __pfx_kthread+0x10/0x10 [ 631.809692][ T1419] kthread+0x3c5/0x780 [ 631.810986][ T1419] ? __pfx_kthread+0x10/0x10 [ 631.812501][ T1419] ? rcu_is_watching+0x12/0xc0 [ 631.814014][ T1419] ? __pfx_kthread+0x10/0x10 [ 631.815467][ T1419] ret_from_fork+0x5d4/0x6f0 [ 631.816939][ T1419] ? __pfx_kthread+0x10/0x10 [ 631.818390][ T1419] ret_from_fork_asm+0x1a/0x30 [ 631.819910][ T1419] [ 631.821549][ T1419] Kernel Offset: disabled [ 631.822930][ T1419] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:02:30 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85587910 RDI=ffffffff9b06fa00 RBP=ffffffff9b06f9c0 RSP=ffffc9000756f3e0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff360df92 R15=dffffc0000000000 RIP=ffffffff85587937 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809755d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc2e1582ff8 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffff888027943ac0 RBX=0000000000000400 RCX=ffffffff8b4a3e0a RDX=0000000000000400 RSI=0000000000000400 RDI=0000000000000013 RBP=0000000000000013 RSP=ffffc900010efb20 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000001 R13=0000000000000000 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff81bb875a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809765d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f3229988 CR3=000000004c3bd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9591ffffffff8b79 94dcffffffff8b79 948affffffff8b79 945affffffff8b79 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9974ffffffff8b79 979cffffffff8b79 9655ffffffff8b79 95adffffffff8b79 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 dd67ffffffff8b79 dc43ffffffff8b79 9a52ffffffff8b79 9a05ffffffff8b79 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8693ffffffff8b7a 864cffffffff8b7a 8558ffffffff8b7a 84f7ffffffff8b7a ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 84ebffffffff8b7a 84c9ffffffff8b7a 8379ffffffff8b7a 8314ffffffff8b7a ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 82ebffffffff8b7a 82c3ffffffff8b79 de94ffffffff8b79 de79ffffffff8b79 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 de2effffffff8b79 de07ffffffff8b79 ddceffffffff8b79 dd8fffffffff8b79 ZMM24=b8a31017b8a31017 b8a31017b8a31017 b8a31017b8a31017 b8a31017b8a31017 b8a31017b8a31017 b8a31017b8a31017 b8a31017b8a31017 b8a31017b8a31017 ZMM25=4e872df04e872df0 4e872df04e872df0 4e872df04e872df0 4e872df04e872df0 4e872df04e872df0 4e872df04e872df0 4e872df04e872df0 4e872df04e872df0 ZMM26=f9e9b622f9e9b622 f9e9b622f9e9b622 f9e9b622f9e9b622 f9e9b622f9e9b622 f9e9b622f9e9b622 f9e9b622f9e9b622 f9e9b622f9e9b622 f9e9b622f9e9b622 ZMM27=0f126fab0f126fab 0f126fab0f126fab 0f126fab0f126fab 0f126fab0f126fab 0f126fab0f126fab 0f126fab0f126fab 0f126fab0f126fab 0f126fab0f126fab ZMM28=000001a00000019f 0000019e0000019d 0000019c0000019b 0000019a00000199 0000019800000197 0000019600000195 0000019400000193 0000019200000191 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=8920000089200000 8920000089200000 8920000089200000 8920000089200000 8920000089200000 8920000089200000 8920000089200000 8920000089200000 info registers vcpu 2 CPU#2 RAX=0000000000000002 RBX=ffffffff93cd6228 RCX=ffffc90000539001 RDX=ffffc90000537e18 RSI=ffffffff8c156860 RDI=ffffffff8df1edb0 RBP=0000000000000002 RSP=ffffc900005373e0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=000000000008e410 R12=ffffc900005374b8 R13=ffffc90000537468 R14=ffffc90000537e10 R15=ffffc9000053749c RIP=ffffffff81a0e5cc RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809775d000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000ff90defc CR3=0000000067425000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000003 RBX=ffff888060637540 RCX=0000000000000100 RDX=0000000000000001 RSI=ffffffff8b7fbdc1 RDI=ffffffff8c1568e0 RBP=dffffc0000000000 RSP=ffffc900039176d8 R8 =0000000000000001 R9 =0000000000000001 R10=ffffffff90a83057 R11=0000000000000001 R12=000000000000084e R13=0000000000000000 R14=ffff88802b53b380 R15=ffffed100c0c6ea8 RIP=ffffffff8b7fbd18 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809785d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f82bb1cde9c CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000080001 Opmask01=0000000000000001 Opmask02=00000000fff7ffdf Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005608448a9323 00005608448a9323 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f82bb4fe050 00007f82bb4fd0c0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f82bb4fe580 00007f82bb4fdb20 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f82bb2000c0 00007f82bb4feab0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f82bb53cda0 00007f82bb4fd5f0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f82bb2006b0 00007f82bb2000c0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f82bb4feab0 00007f82bb4fe580 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f82bb4fdb20 00007f82bb4fe050 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692074616d726f66 2064616200707865 6765722073756f69 76657270206f6e00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 450c584d415e434a 0c484d4e005c5449 4b495e0c5f594345 5a495e5c0c434200 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000