last executing test programs: 8.887871615s ago: executing program 3 (id=687): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x200, &(0x7f00000010c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0xfffe, r5, 0x0}]) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf) write$UHID_INPUT(r4, &(0x7f0000001040)={0xe, {"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", 0x1040}}, 0x1006) socket$netlink(0x10, 0x3, 0x15) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) 8.517265097s ago: executing program 2 (id=688): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x36b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0xd, 0x0, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x40045010, &(0x7f0000000080)=0xd8eb) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, 0x0, 0x20044000) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r5 = syz_open_dev$dri(0x0, 0x7, 0x220042) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000380)={0x3, r8, r7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000440)={0x5, r8}) syz_io_uring_setup(0x7a72, &(0x7f0000000480)={0x0, 0x2d12, 0x1000, 0x2, 0x306}, &(0x7f0000000140), &(0x7f0000000280)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6eb"], 0x10}}, 0x0) 7.396673296s ago: executing program 2 (id=691): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r3) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x200, &(0x7f00000010c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0xfffe, r4, 0x0}]) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) socket$netlink(0x10, 0x3, 0x15) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chown(&(0x7f00000003c0)='./cgroup\x00', 0x0, 0x0) stat(&(0x7f0000000240)='./file0/file0\x00', 0x0) 6.727198808s ago: executing program 0 (id=693): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto$rose(r0, 0x0, 0x0, 0x40, 0x0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f0000000140)={0x74, 0x0, 0x90accf24a4511d13}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x2090}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @local}]}}}, @IFLA_MTU={0x8, 0x4, 0x44}]}, 0x44}, 0x1, 0x2}, 0x4050) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xff}, {0x6, 0x0, 0x0, 0x6}]}, 0x8) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x20040000) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r9}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x1, 0x2ff}, &(0x7f0000000140), &(0x7f0000000280)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r11, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r11, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r11, &(0x7f0000000100)={0x2, 0xfc}, 0x2) sendmsg$NFNL_MSG_CTHELPER_NEW(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x70, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7ff}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x70}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 6.676804172s ago: executing program 3 (id=694): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x36b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0xd, 0x0, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, 0x0, 0x20044000) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r5 = syz_open_dev$dri(0x0, 0x7, 0x220042) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000380)={0x3, r8, r7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000440)={0x5, r8}) syz_io_uring_setup(0x7a72, &(0x7f0000000480)={0x0, 0x2d12, 0x1000, 0x2, 0x306}, &(0x7f0000000140), &(0x7f0000000280)) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6eb"], 0x10}}, 0x0) 6.2189433s ago: executing program 0 (id=695): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto$rose(r0, 0x0, 0x0, 0x40, 0x0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f0000000140)={0x74, 0x0, 0x90accf24a4511d13}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x2090}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @local}]}}}, @IFLA_MTU={0x8, 0x4, 0x44}]}, 0x44}, 0x1, 0x2}, 0x4050) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xff}, {0x6, 0x0, 0x0, 0x6}]}, 0x8) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x20040000) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r9}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x1, 0x2ff}, &(0x7f0000000140), &(0x7f0000000280)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r11, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r11, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r11, &(0x7f0000000100)={0x2, 0xfc}, 0x2) sendmsg$NFNL_MSG_CTHELPER_NEW(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x70, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7ff}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x70}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 5.956987961s ago: executing program 1 (id=696): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) io_uring_setup(0x2cee, &(0x7f0000000200)={0x0, 0x93b0, 0x3, 0x0, 0x315}) socketpair(0x24, 0x3, 0x0, &(0x7f0000000040)={0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f00000000c0)={0x3, 0x102, 0x2, {0xde, 0x7e, 0x1, 0xc4ea}}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000500000085000000d000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000140)=@get={0x1, 0x0, 0x8000000000000001}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x40000000, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x80}}, 0x20000000) sendmsg$key(r7, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 5.767021663s ago: executing program 2 (id=697): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073"], 0x7c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a3100000000090001007379"], 0xec}, 0x1, 0x0, 0x0, 0x840}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYRES16=r0, @ANYRES16, @ANYRES32=0x0, @ANYRESHEX=r6, @ANYBLOB="db10130b39268548be5b43919eedcbe8cfc6a8716b0e7b4eb45be3c7b450b4bb1413920bb5a90306ff745d8f63ee5597631d5c244e4e93270b4e81539d90468cb315454098", @ANYRES16=0x0, @ANYRESDEC=r1], 0x90}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) r7 = socket(0x10, 0x80002, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r8, 0x0, 0x1, &(0x7f0000004200)=""/4087, &(0x7f00000003c0)=0xfffffffffffffe9f) sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r9) mmap(&(0x7f0000479000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x11, r9, 0x0) syz_clone(0x1000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) 5.586732776s ago: executing program 3 (id=698): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0x6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x0, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, 0x0, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(r6, &(0x7f0000000140)='personality\x00') preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/205, 0xcd}], 0x1, 0x0, 0x400) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000001000000000000080000095"], &(0x7f0000000100)='GPL\x00'}, 0x94) 5.125648266s ago: executing program 0 (id=699): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x36b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0xd, 0x0, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, 0x0, 0x20044000) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r5 = syz_open_dev$dri(0x0, 0x7, 0x220042) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000380)={0x3, r8, r7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000440)={0x5, r8}) syz_io_uring_setup(0x7a72, &(0x7f0000000480)={0x0, 0x2d12, 0x1000, 0x2, 0x306}, &(0x7f0000000140), &(0x7f0000000280)) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6eb"], 0x10}}, 0x0) 4.883521572s ago: executing program 1 (id=700): syz_init_net_socket$llc(0x1a, 0x6, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x20000, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r2, 0xc0044dff, &(0x7f0000004000)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) close(0x3) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000000c0)={{0xeb9f, 0x2, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x2}}, 0x0, 0x1a, 0x0, 0x2}, 0x28) 4.40781586s ago: executing program 2 (id=701): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x110) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x25) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$key(0xf, 0x3, 0x2) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) syz_io_uring_setup(0x1765, &(0x7f0000000180)={0x0, 0x5792, 0x4, 0x2, 0x112}, &(0x7f0000000100), &(0x7f0000000240)) r6 = userfaultfd(0x80001) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}}) 3.833714284s ago: executing program 3 (id=702): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x200, &(0x7f00000010c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0xfffe, r5, 0x0}]) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf) write$UHID_INPUT(r4, &(0x7f0000001040)={0xe, {"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", 0x1040}}, 0x1006) socket$netlink(0x10, 0x3, 0x15) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) 3.391847981s ago: executing program 0 (id=703): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) close(r2) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc01c7c02, &(0x7f0000000200)={0x80000000, &(0x7f0000000180), &(0x7f00000002c0)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc01c7c02, &(0x7f0000000400)={r3, &(0x7f0000000340), &(0x7f0000000380)}) r4 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r5}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r6, 0x234f, 0x2d59, 0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0205710, &(0x7f0000000140)={0x0, 0xcf, 0x9e, 0x1, 0x6}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000800)=[{r1, 0x2}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0xb, "0076207365cdde8fb7c3e40000004000006000"}) r9 = syz_open_pts(r1, 0x0) openat$nullb(0xffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$TCFLSH(r9, 0x540b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0, r5}, 0x18) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_open_procfs(0x0, 0x0) getsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000080), 0x2) read$char_usb(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 3.23762761s ago: executing program 2 (id=704): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r3) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x200, &(0x7f00000010c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0xfffe, r4, 0x0}]) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) socket$netlink(0x10, 0x3, 0x15) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chown(&(0x7f00000003c0)='./cgroup\x00', 0x0, 0x0) stat(&(0x7f0000000240)='./file0/file0\x00', 0x0) 2.954849238s ago: executing program 1 (id=705): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x5607, 0x2c) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETVESABLANK(r6, 0x560e, &(0x7f0000000140)) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000040)) r7 = dup(r3) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = syz_io_uring_setup(0x83b, &(0x7f00000000c0)={0x0, 0xc2f6, 0x0, 0x1, 0x319}, &(0x7f0000000500)=0x0, &(0x7f0000000400)=0x0) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x0, 0xfffffff9, 0x3, 0xca60, r7, 0x5, '\x00', 0x0, r7, 0x2, 0x3, 0x3, 0x0, @value=r7}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x19, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x31887ab3, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffa}, @jmp={0x5, 0x0, 0x5, 0x7, 0x9, 0x20, 0x999d1e2a512ef073}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x80000000, 0x68, &(0x7f0000000440)=""/104, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x10, 0x6, 0x76}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[r7, r7, r7, r7, r12, 0x1, r7], &(0x7f0000000600)=[{0x2, 0x4, 0x6, 0x6}, {0x1, 0x5, 0xa, 0x6}, {0x4, 0x4, 0xe, 0x9}, {0x5, 0x5, 0xf, 0xe}, {0x1, 0x1, 0x0, 0xa}], 0x10, 0x5}, 0x94) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000040)=0x5) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000200)=0xc0) prctl$PR_SET_SECUREBITS(0x1c, 0x73) setuid(0xee01) r13 = socket(0x1d, 0x2, 0x6) setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x1a, &(0x7f0000000180)={0x0, &(0x7f0000000140)}, 0x8) syz_io_uring_submit(r9, r10, 0x0) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 1.938483377s ago: executing program 0 (id=706): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x36b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0xd, 0x0, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, 0x0, 0x20044000) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r5 = syz_open_dev$dri(0x0, 0x7, 0x220042) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000380)={0x3, r8, r7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000440)={0x5, r8}) syz_io_uring_setup(0x7a72, &(0x7f0000000480)={0x0, 0x2d12, 0x1000, 0x2, 0x306}, &(0x7f0000000140), &(0x7f0000000280)) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6eb"], 0x10}}, 0x0) 1.887197019s ago: executing program 1 (id=707): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$binderfs_ctrl(0xffffff9c, &(0x7f0000000300)='./binderfs/binder-control\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) socket(0x1a, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x3, 0x3, 0xfffffffffffffffb, 0x432c, 0x3, 0x1, {0xffffffffffffffff, 0x6, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fa, 0x7fffffff, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x3ff}}, {0x0, 0xa}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f04) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') r4 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) open_by_handle_at(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000000", @ANYRES64=r2], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) 965.750566ms ago: executing program 1 (id=708): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto$rose(r0, 0x0, 0x0, 0x40, 0x0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f0000000140)={0x74, 0x0, 0x90accf24a4511d13}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x2090}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @local}]}}}, @IFLA_MTU={0x8, 0x4, 0x44}]}, 0x44}, 0x1, 0x2}, 0x4050) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xff}, {0x6, 0x0, 0x0, 0x6}]}, 0x8) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x20040000) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r9}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x1, 0x2ff}, &(0x7f0000000140), &(0x7f0000000280)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r11, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r11, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r11, &(0x7f0000000100)={0x2, 0xfc}, 0x2) sendmsg$NFNL_MSG_CTHELPER_NEW(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x70, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7ff}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x70}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 915.868809ms ago: executing program 3 (id=709): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a3100000000090001007379"], 0xec}, 0x1, 0x0, 0x0, 0x840}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYRES16=r0, @ANYRES16, @ANYRES32=0x0, @ANYRESHEX=r6, @ANYBLOB="db10130b39268548be5b43919eedcbe8cfc6a8716b0e7b4eb45be3c7b450b4bb1413920bb5a90306ff745d8f63ee5597631d5c244e4e93270b4e81539d90468cb315454098", @ANYRES16=0x0, @ANYRESDEC=r1], 0x90}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) r7 = socket(0x10, 0x80002, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r8, 0x0, 0x1, &(0x7f0000004200)=""/4087, &(0x7f00000003c0)=0xfffffffffffffe9f) sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r9) mmap(&(0x7f0000479000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x11, r9, 0x0) syz_clone(0x1000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) 915.35305ms ago: executing program 2 (id=710): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x36b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0xd, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)=0xd8eb) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r4 = syz_open_dev$dri(0x0, 0x7, 0x220042) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000380)={0x3, r7, r6}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000440)={0x5, r7}) syz_io_uring_setup(0x7a72, &(0x7f0000000480)={0x0, 0x2d12, 0x1000, 0x2, 0x306}, &(0x7f0000000140), &(0x7f0000000280)) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$key(0xf, 0x3, 0x2) 915.01245ms ago: executing program 0 (id=711): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpgid(0x0) mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, 0xffffffffffffffff, 0x800000000000) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) sched_rr_get_interval(r2, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000fcb000), 0x4) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000000)={0xffff1000, 0x13800, 0x8}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) unshare(0x6a040000) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) io_setup(0x222, &(0x7f0000000180)) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x0, 0x0, &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 176.90237ms ago: executing program 1 (id=712): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x200a00, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000080)={0x0, {0x1, 0xffffffff}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = syz_open_pts(r4, 0x101000) ioctl$KDDISABIO(r6, 0x4b37) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff0200000000000000000000000000012c"], 0x0) 0s ago: executing program 3 (id=713): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x36b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0xd, 0x0, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, 0x0, 0x20044000) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r5 = syz_open_dev$dri(0x0, 0x7, 0x220042) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000380)={0x3, r8, r7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000440)={0x5, r8}) syz_io_uring_setup(0x7a72, &(0x7f0000000480)={0x0, 0x2d12, 0x1000, 0x2, 0x306}, &(0x7f0000000140), &(0x7f0000000280)) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6eb"], 0x10}}, 0x0) kernel console output (not intermixed with test programs): v(1) rhport(0) sockfd(5) [ 103.629632][ T6509] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 103.635042][ T6509] vhci_hcd vhci_hcd.0: Device attached [ 104.015027][ T6516] ptrace attach of ""[6519] was attempted by "/syz-executor exec"[6516] [ 104.048416][ T6509] random: crng reseeded on system resumption [ 104.120785][ T6258] usb 40-1: SetAddress Request (2) to port 0 [ 104.122874][ T6258] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 104.230244][ T6509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.272706][ T6516] hub 8-0:1.0: USB hub found [ 104.323302][ T6516] hub 8-0:1.0: 1 port detected [ 105.586005][ T6510] vhci_hcd: connection reset by peer [ 105.588879][ T6275] vhci_hcd vhci_hcd.1: stop threads [ 105.591316][ T6275] vhci_hcd vhci_hcd.1: release socket [ 105.596960][ T6275] vhci_hcd vhci_hcd.1: disconnect device [ 106.788091][ T5946] Bluetooth: hci3: command 0x0405 tx timeout [ 106.795785][ T6236] Bluetooth: hci4: Frame reassembly failed (-84) [ 106.866618][ T6547] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 106.869035][ T6547] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 106.888861][ T6547] vhci_hcd vhci_hcd.0: Device attached [ 107.146605][ T73] usb 42-1: SetAddress Request (10) to port 0 [ 107.146666][ T73] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 107.978395][ T6561] netlink: 'syz.3.79': attribute type 1 has an invalid length. [ 107.981339][ T6561] netlink: 224 bytes leftover after parsing attributes in process `syz.3.79'. [ 108.464093][ T6548] vhci_hcd: connection reset by peer [ 108.467247][ T1180] vhci_hcd vhci_hcd.2: stop threads [ 108.469306][ T1180] vhci_hcd vhci_hcd.2: release socket [ 108.471236][ T1180] vhci_hcd vhci_hcd.2: disconnect device [ 108.796667][ T5951] Bluetooth: hci4: command 0x1003 tx timeout [ 108.799240][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 108.950173][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.80'. [ 109.045768][ T6568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.053590][ T6568] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.068126][ T6568] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 109.196642][ T6258] usb 40-1: device descriptor read/8, error -110 [ 109.474812][ T6573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.81'. [ 109.587387][ T6258] usb usb40-port1: attempt power cycle [ 109.676582][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 109.677319][ T6557] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 110.118431][ T6557] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 110.145966][ T6557] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 110.159605][ T6258] usb usb40-port1: unable to enumerate USB device [ 110.160821][ T6557] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 110.164394][ T6557] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 110.173018][ T6557] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 110.180288][ T6557] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 110.182649][ T6557] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 110.191200][ T6557] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 110.198783][ T6557] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 110.201275][ T6557] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 110.209895][ T6557] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 111.131763][ T6597] batadv_slave_1: entered promiscuous mode [ 111.756661][ T5951] Bluetooth: hci0: command 0x0c1a tx timeout [ 112.236569][ T5951] Bluetooth: hci2: command 0x0c1a tx timeout [ 112.236580][ T73] usb 42-1: device descriptor read/8, error -110 [ 112.238862][ T5951] Bluetooth: hci3: command 0x0405 tx timeout [ 112.243936][ T5946] Bluetooth: hci1: command 0x0c1a tx timeout [ 112.637444][ T73] usb usb42-port1: attempt power cycle [ 113.284394][ T73] usb usb42-port1: unable to enumerate USB device [ 113.847797][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 113.968207][ T6636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.88'. [ 114.221889][ T6631] bridge1: entered allmulticast mode [ 114.322753][ T5946] Bluetooth: hci2: command 0x0c1a tx timeout [ 114.325247][ T64] Bluetooth: hci3: command 0x0405 tx timeout [ 114.327531][ T5951] Bluetooth: hci1: command 0x0c1a tx timeout [ 114.358892][ T6631] ªªªªª»: renamed from hsr0 (while UP) [ 114.405380][ T6646] ALSA: mixer_oss: invalid OSS volume '' [ 114.487658][ T6646] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 114.490162][ T6646] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 114.494485][ T6646] vhci_hcd vhci_hcd.0: Device attached [ 114.686857][ T6035] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 114.766860][ T6035] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 115.602366][ T6665] netlink: 44 bytes leftover after parsing attributes in process `syz.2.93'. [ 115.887510][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 115.989728][ T6648] vhci_hcd: connection reset by peer [ 115.992339][ T6275] vhci_hcd vhci_hcd.3: stop threads [ 115.994447][ T6275] vhci_hcd vhci_hcd.3: release socket [ 115.996871][ T6275] vhci_hcd vhci_hcd.3: disconnect device [ 116.081474][ T40] audit: type=1326 audit(1767171995.018:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.0.94" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 116.116280][ T40] audit: type=1326 audit(1767171995.018:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.0.94" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 116.150264][ T40] audit: type=1326 audit(1767171995.028:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.0.94" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 116.158566][ T40] audit: type=1326 audit(1767171995.028:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.0.94" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 116.195886][ T40] audit: type=1326 audit(1767171995.028:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.0.94" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 116.222077][ T40] audit: type=1326 audit(1767171995.028:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.0.94" exe="/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 116.250316][ T40] audit: type=1326 audit(1767171995.028:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.0.94" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 116.287695][ T40] audit: type=1326 audit(1767171995.028:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.0.94" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 116.309541][ T5946] Bluetooth: hci1: connection err: -111 [ 116.326529][ T40] audit: type=1326 audit(1767171995.038:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.0.94" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 116.334239][ T40] audit: type=1326 audit(1767171995.038:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.0.94" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 116.407233][ T5946] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.409670][ T5946] Bluetooth: hci1: command 0x0c1a tx timeout [ 116.414501][ T5951] Bluetooth: hci3: command 0x0405 tx timeout [ 116.679226][ T6688] Bluetooth: MGMT ver 1.23 [ 117.686627][ T6700] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 118.047537][ T6708] overlayfs: failed to resolve './file0': -2 [ 118.185414][ T6713] input: syz0 as /devices/virtual/input/input9 [ 118.188309][ T6713] input: failed to attach handler leds to device input9, error: -6 [ 118.490423][ T5951] Bluetooth: hci3: command 0x0405 tx timeout [ 118.668773][ T6717] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 118.671054][ T6717] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 118.678093][ T6717] vhci_hcd vhci_hcd.0: Device attached [ 118.705887][ T6717] netlink: 20 bytes leftover after parsing attributes in process `syz.3.98'. [ 119.334784][ T6724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.102'. [ 119.927184][ T6035] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 120.003879][ T6724] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.008097][ T6724] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.097865][ T6724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.103860][ T6724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.214365][ T6051] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.220932][ T6051] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.224582][ T6051] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.229286][ T6051] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.423718][ T6718] vhci_hcd: connection closed [ 120.424353][ T1143] vhci_hcd vhci_hcd.3: stop threads [ 120.428683][ T1143] vhci_hcd vhci_hcd.3: release socket [ 120.431299][ T1143] vhci_hcd vhci_hcd.3: disconnect device [ 120.718088][ T6743] binder: 6740:6743 ioctl 8008662c 80000240 returned -22 [ 121.140006][ T6743] netlink: 28 bytes leftover after parsing attributes in process `syz.0.104'. [ 121.328192][ T6037] kernel read not supported for file 124/task/125/auxv (pid: 6037 comm: kworker/1:6) [ 121.357238][ T6020] usb usb44-port1: attempt power cycle [ 122.469701][ T6020] usb usb44-port1: unable to enumerate USB device [ 123.545927][ T6778] ubi31: attaching mtd0 [ 123.557135][ T6778] ubi31: scanning is finished [ 123.559076][ T6778] ubi31: empty MTD device detected [ 123.618725][ T6779] mmap: syz.0.111 (6779) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 124.076891][ T6783] IPVS: set_ctl: invalid protocol: 41 255.255.255.255:20004 [ 124.153169][ T6786] afs: Unknown parameter 'measure' [ 124.877910][ T6778] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 125.141685][ T6792] futex_wake_op: syz.3.114 tries to shift op by 32; fix this program [ 126.168053][ T6812] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 126.171107][ T6812] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 126.175059][ T6812] vhci_hcd vhci_hcd.0: Device attached [ 126.333271][ T6813] vhci_hcd: connection closed [ 126.333519][ T792] vhci_hcd vhci_hcd.0: stop threads [ 126.338707][ T792] vhci_hcd vhci_hcd.0: release socket [ 126.341554][ T792] vhci_hcd vhci_hcd.0: disconnect device [ 126.356670][ T34] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 127.140874][ T6826] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.262297][ T6824] ceph: No mds server is up or the cluster is laggy [ 127.266750][ T6020] libceph: connect (1)[c::]:6789 error -101 [ 127.270555][ T6020] libceph: mon0 (1)[c::]:6789 connect error [ 127.854211][ T6831] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 127.857638][ T6831] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 127.897674][ T6831] vhci_hcd vhci_hcd.0: Device attached [ 127.910411][ T6835] omfs: Invalid superblock (0) [ 128.186593][ T9] usb 42-1: SetAddress Request (14) to port 0 [ 128.189309][ T9] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 128.217186][ T54] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 128.366699][ T54] usb 7-1: Using ep0 maxpacket: 8 [ 128.377706][ T54] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 128.382307][ T54] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 128.385843][ T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.390743][ T54] usb 7-1: config 0 descriptor?? [ 128.456615][ T6035] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 128.578516][ T6843] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 128.786755][ T6035] usb 8-1: Using ep0 maxpacket: 32 [ 128.839802][ T6035] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.843312][ T6035] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 128.849055][ T6035] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 128.852034][ T6035] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.854815][ T6035] usb 8-1: Product: syz [ 128.876667][ T6035] usb 8-1: Manufacturer: syz [ 128.878506][ T6035] usb 8-1: SerialNumber: syz [ 128.907887][ T849] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 128.918090][ T54] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 129.004329][ T6851] misc userio: The device must be registered before sending interrupts [ 129.009083][ T6850] netlink: 'syz.0.126': attribute type 1 has an invalid length. [ 129.012292][ T6850] netlink: 'syz.0.126': attribute type 2 has an invalid length. [ 129.096825][ T849] usb 6-1: Using ep0 maxpacket: 32 [ 129.102031][ T849] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 129.105775][ T849] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 129.108909][ T849] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 129.116405][ T849] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 129.120624][ T849] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 129.127600][ T849] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 129.130918][ T849] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 129.134409][ T849] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 129.155300][ T849] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 129.162199][ T849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.168273][ T849] usb 6-1: config 0 descriptor?? [ 129.407107][ T849] usblp 6-1:0.0: usblp1: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 130.866261][ T6020] usb 7-1: USB disconnect, device number 3 [ 130.866357][ C0] iowarrior 7-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 130.877406][ T6832] vhci_hcd: connection reset by peer [ 130.880157][ T6051] vhci_hcd vhci_hcd.2: stop threads [ 130.882151][ T6051] vhci_hcd vhci_hcd.2: release socket [ 130.884156][ T6051] vhci_hcd vhci_hcd.2: disconnect device [ 131.049354][ T6859] netlink: 'syz.2.128': attribute type 1 has an invalid length. [ 131.053251][ T6859] netlink: 'syz.2.128': attribute type 2 has an invalid length. [ 131.212222][ T6035] usb 8-1: 0:2 : does not exist [ 131.242506][ T6035] usb 8-1: USB disconnect, device number 3 [ 131.293702][ T5950] udevd[5950]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.556827][ T849] usb 6-1: USB disconnect, device number 2 [ 131.568424][ T849] usblp1: removed [ 132.274083][ T6870] ptrace attach of ""[6872] was attempted by "/syz-executor exec"[6870] [ 132.708366][ T6870] hub 8-0:1.0: USB hub found [ 132.711263][ T6870] hub 8-0:1.0: 1 port detected [ 133.258051][ T6888] netlink: 'syz.2.135': attribute type 1 has an invalid length. [ 133.261528][ T6888] netlink: 'syz.2.135': attribute type 2 has an invalid length. [ 133.277180][ T9] usb 42-1: device descriptor read/8, error -110 [ 133.684579][ T9] usb usb42-port1: attempt power cycle [ 135.033393][ T9] usb usb42-port1: unable to enumerate USB device [ 136.049657][ T6919] ntfs3(nullb0): Primary boot signature is not NTFS. [ 136.052395][ T6919] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 137.567817][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.571255][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.752027][ T13] ODEBUG: Out of memory. ODEBUG disabled [ 138.962615][ T6939] ptrace attach of ""[6940] was attempted by "/syz-executor exec"[6939] [ 139.013381][ T6939] hub 8-0:1.0: USB hub found [ 139.016541][ T6939] hub 8-0:1.0: 1 port detected [ 139.277010][ T6944] netlink: 'syz.3.147': attribute type 1 has an invalid length. [ 139.280477][ T6944] netlink: 'syz.3.147': attribute type 2 has an invalid length. [ 140.869478][ T24] IPVS: starting estimator thread 0... [ 140.956597][ T6963] IPVS: using max 44 ests per chain, 105600 per kthread [ 142.666721][ T6982] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 142.679451][ T6979] ceph: No mds server is up or the cluster is laggy [ 142.683466][ T144] libceph: connect (1)[c::]:6789 error -101 [ 142.686117][ T144] libceph: mon0 (1)[c::]:6789 connect error [ 146.359976][ T7015] evm: overlay not supported [ 146.504316][ T7021] ptrace attach of ""[7022] was attempted by "/syz-executor exec"[7021] [ 146.654934][ T7021] hub 8-0:1.0: USB hub found [ 146.663198][ T7021] hub 8-0:1.0: 1 port detected [ 146.925396][ T7023] netlink: 'syz.3.163': attribute type 1 has an invalid length. [ 147.277067][ T7023] bond1: entered promiscuous mode [ 147.403893][ T7023] bond1: entered allmulticast mode [ 147.452528][ T7023] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.822043][ T7035] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 147.824052][ T7035] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 147.831161][ T7035] vhci_hcd vhci_hcd.0: Device attached [ 147.920785][ T7035] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 147.955469][ T7035] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 148.066680][ T34] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 148.938967][ T7036] vhci_hcd: connection reset by peer [ 148.942511][ T1143] vhci_hcd vhci_hcd.2: stop threads [ 148.946491][ T1143] vhci_hcd vhci_hcd.2: release socket [ 148.949798][ T1143] vhci_hcd vhci_hcd.2: disconnect device [ 149.352673][ T7050] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 149.355630][ T7050] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 149.543631][ T7050] vhci_hcd vhci_hcd.0: Device attached [ 149.642811][ T7054] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 149.645707][ T7054] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 149.650394][ T7054] vhci_hcd vhci_hcd.0: Device attached [ 149.776590][ T24] usb 40-1: SetAddress Request (6) to port 0 [ 149.779520][ T24] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 149.928002][ T76] usb 38-1: SetAddress Request (10) to port 0 [ 149.930173][ T76] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 150.034880][ T7055] vhci_hcd: connection reset by peer [ 150.038193][ T1143] vhci_hcd vhci_hcd.0: stop threads [ 150.040654][ T1143] vhci_hcd vhci_hcd.0: release socket [ 150.042708][ T1143] vhci_hcd vhci_hcd.0: disconnect device [ 151.258808][ T7051] vhci_hcd: connection reset by peer [ 151.260971][ T1143] vhci_hcd vhci_hcd.1: stop threads [ 151.263420][ T1143] vhci_hcd vhci_hcd.1: release socket [ 151.268235][ T1143] vhci_hcd vhci_hcd.1: disconnect device [ 152.670325][ T7093] netlink: 'syz.3.176': attribute type 1 has an invalid length. [ 152.673757][ T7093] netlink: 'syz.3.176': attribute type 2 has an invalid length. [ 152.858530][ T7111] netlink: 44 bytes leftover after parsing attributes in process `syz.0.175'. [ 153.196710][ T34] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 153.312263][ T6039] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 153.412875][ T7116] netlink: 'syz.3.179': attribute type 4 has an invalid length. [ 153.441201][ T7116] netlink: 'syz.3.179': attribute type 4 has an invalid length. [ 154.082388][ T5946] Bluetooth: hci4: command 0x1003 tx timeout [ 154.085277][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 154.432135][ T54] IPVS: starting estimator thread 0... [ 154.526773][ T7143] IPVS: using max 44 ests per chain, 105600 per kthread [ 154.569314][ T7130] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 154.571636][ T7130] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 154.574818][ T7130] vhci_hcd vhci_hcd.0: Device attached [ 154.866831][ T54] usb 42-1: SetAddress Request (18) to port 0 [ 154.899981][ T54] usb 42-1: new SuperSpeed USB device number 18 using vhci_hcd [ 154.903651][ T24] usb 40-1: device descriptor read/8, error -110 [ 154.957132][ T76] usb 38-1: device descriptor read/8, error -110 [ 155.031596][ T7149] vhci_hcd: connection reset by peer [ 155.035093][ T1143] vhci_hcd vhci_hcd.2: stop threads [ 155.037434][ T1143] vhci_hcd vhci_hcd.2: release socket [ 155.040007][ T1143] vhci_hcd vhci_hcd.2: disconnect device [ 155.336130][ T24] usb usb40-port1: attempt power cycle [ 155.387380][ T76] usb usb38-port1: attempt power cycle [ 155.926978][ T24] usb usb40-port1: unable to enumerate USB device [ 156.067377][ T76] usb usb38-port1: unable to enumerate USB device [ 159.996874][ T54] usb 42-1: device descriptor read/8, error -110 [ 160.387718][ T54] usb usb42-port1: attempt power cycle [ 160.947119][ T54] usb usb42-port1: unable to enumerate USB device [ 163.641844][ T7181] netlink: 'syz.1.187': attribute type 1 has an invalid length. [ 163.645321][ T7181] netlink: 'syz.1.187': attribute type 2 has an invalid length. [ 163.680095][ T7191] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 163.682931][ T7191] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 163.743686][ T7191] vhci_hcd vhci_hcd.0: Device attached [ 163.878888][ T144] IPVS: starting estimator thread 0... [ 164.102107][ T7198] IPVS: using max 44 ests per chain, 105600 per kthread [ 164.446569][ T6035] usb 38-1: SetAddress Request (14) to port 0 [ 164.451987][ T6035] usb 38-1: new SuperSpeed USB device number 14 using vhci_hcd [ 164.495357][ T7191] random: crng reseeded on system resumption [ 165.043773][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 165.043791][ T40] audit: type=1326 audit(1767172043.978:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7205 comm="syz.3.191" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x0 [ 165.293375][ T7204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.596527][ T5946] Bluetooth: hci4: command 0x1003 tx timeout [ 165.598925][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 166.335623][ T7192] vhci_hcd: connection reset by peer [ 166.346608][ T12] vhci_hcd vhci_hcd.0: stop threads [ 166.348450][ T12] vhci_hcd vhci_hcd.0: release socket [ 166.354441][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 166.513750][ T7216] can0: slcan on pty22. [ 167.422319][ T7221] mkiss: ax0: crc mode is auto. [ 167.452282][ T7213] can0 (unregistered): slcan off pty22. [ 169.422588][ T7267] misc userio: The device must be registered before sending interrupts [ 169.425835][ T7267] netlink: 'syz.2.200': attribute type 1 has an invalid length. [ 169.429195][ T7267] netlink: 'syz.2.200': attribute type 2 has an invalid length. [ 169.436674][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 169.520080][ T6035] usb 38-1: device descriptor read/8, error -110 [ 169.697043][ T5946] Bluetooth: hci0: connection err: -111 [ 169.882428][ T7273] bridge1: entered allmulticast mode [ 169.928441][ T7273] ªªªªª»: renamed from hsr0 (while UP) [ 169.960515][ T6035] usb usb38-port1: attempt power cycle [ 170.652716][ T6035] usb usb38-port1: unable to enumerate USB device [ 171.163545][ T7288] can0: slcan on pty24. [ 172.316976][ T7280] can0 (unregistered): slcan off pty24. [ 172.860695][ T7305] syz.2.208 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=1000 [ 172.872836][ T7305] CPU: 0 UID: 0 PID: 7305 Comm: syz.2.208 Not tainted syzkaller #0 PREEMPT(full) [ 172.872854][ T7305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 172.872861][ T7305] Call Trace: [ 172.872866][ T7305] [ 172.872882][ T7305] dump_stack_lvl+0x16c/0x1f0 [ 172.872905][ T7305] dump_header+0x101/0x960 [ 172.872919][ T7305] oom_kill_process+0x176/0x910 [ 172.872931][ T7305] ? oom_cpuset_eligible.isra.0+0x199/0x2d0 [ 172.872944][ T7305] out_of_memory+0x1407/0x1700 [ 172.872959][ T7305] ? __pfx_out_of_memory+0x10/0x10 [ 172.872975][ T7305] __alloc_frozen_pages_noprof+0x1dbc/0x2430 [ 172.872997][ T7305] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 172.873014][ T7305] ? mas_find+0x156/0x6d0 [ 172.873026][ T7305] ? validate_mm+0x403/0x560 [ 172.873041][ T7305] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 172.873058][ T7305] ? cpuset_nodemask_valid_mems_allowed+0x5f/0x80 [ 172.873073][ T7305] ? policy_nodemask+0xea/0x4e0 [ 172.873092][ T7305] alloc_pages_mpol+0x1fb/0x550 [ 172.873110][ T7305] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 172.873131][ T7305] alloc_pages_noprof+0x131/0x390 [ 172.873148][ T7305] pte_alloc_one+0x1e/0x3d0 [ 172.873164][ T7305] __pte_alloc+0x6d/0x3f0 [ 172.873180][ T7305] ? __pfx___pte_alloc+0x10/0x10 [ 172.873199][ T7305] do_anonymous_page+0x1092/0x2190 [ 172.873211][ T7305] ? mtree_range_walk+0x718/0xc00 [ 172.873228][ T7305] ? find_held_lock+0x2b/0x80 [ 172.873244][ T7305] __handle_mm_fault+0x1ecf/0x2bb0 [ 172.873260][ T7305] ? __pfx___handle_mm_fault+0x10/0x10 [ 172.873283][ T7305] handle_mm_fault+0x3fe/0xad0 [ 172.873297][ T7305] __get_user_pages+0x54e/0x3590 [ 172.873320][ T7305] ? __pfx___get_user_pages+0x10/0x10 [ 172.873353][ T7305] populate_vma_page_range+0x267/0x3f0 [ 172.873372][ T7305] ? __pfx_populate_vma_page_range+0x10/0x10 [ 172.873389][ T7305] ? __pfx_find_vma_intersection+0x10/0x10 [ 172.873407][ T7305] ? do_mmap+0x69c/0x1210 [ 172.873424][ T7305] __mm_populate+0x1d8/0x380 [ 172.873442][ T7305] ? __pfx___mm_populate+0x10/0x10 [ 172.873461][ T7305] ? up_write+0x282/0x4e0 [ 172.873474][ T7305] vm_mmap_pgoff+0x37f/0x470 [ 172.873492][ T7305] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 172.873509][ T7305] ? __ia32_sys_futex_time32+0x2fc/0x460 [ 172.873525][ T7305] ? xfd_validate_state+0x61/0x180 [ 172.873538][ T7305] ksys_mmap_pgoff+0x7d/0x5c0 [ 172.873555][ T7305] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 172.873572][ T7305] __do_fast_syscall_32+0xe8/0x680 [ 172.873596][ T7305] do_fast_syscall_32+0x32/0x80 [ 172.873614][ T7305] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 172.873628][ T7305] RIP: 0023:0xf70dd579 [ 172.873637][ T7305] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 172.873648][ T7305] RSP: 002b:00000000f54cd55c EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 172.873659][ T7305] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000b36000 [ 172.873666][ T7305] RDX: 000000000000000f RSI: 0000000004008032 RDI: 00000000ffffffff [ 172.873672][ T7305] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 172.873679][ T7305] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 172.873685][ T7305] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 172.873699][ T7305] [ 172.986545][ T7305] Mem-Info: [ 173.022811][ T7305] active_anon:8438 inactive_anon:63 isolated_anon:0 [ 173.022811][ T7305] active_file:18146 inactive_file:12574 isolated_file:0 [ 173.022811][ T7305] unevictable:1768 dirty:69 writeback:22 [ 173.022811][ T7305] slab_reclaimable:6296 slab_unreclaimable:50947 [ 173.022811][ T7305] mapped:28619 shmem:5160 pagetables:1054 [ 173.022811][ T7305] sec_pagetables:312 bounce:0 [ 173.022811][ T7305] kernel_misc_reclaimable:0 [ 173.022811][ T7305] free:79663 free_pcp:26 free_cma:0 [ 173.042982][ T7305] Node 0 active_anon:0kB inactive_anon:232kB active_file:52kB inactive_file:996kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:8kB writeback:4kB shmem:3540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9552kB pagetables:1468kB sec_pagetables:1128kB all_unreclaimable? no Balloon:0kB [ 173.056508][ T7305] Node 0 DMA free:2572kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 173.069287][ T7305] lowmem_reserve[]: 0 289 289 289 289 [ 173.071722][ T7305] Node 0 DMA32 free:33924kB boost:0kB min:13332kB low:16664kB high:19996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12kB inactive_anon:240kB active_file:0kB inactive_file:948kB unevictable:3536kB writepending:16kB zspages:0kB present:1032196kB managed:296812kB mlocked:0kB bounce:0kB free_pcp:312kB local_pcp:72kB free_cma:0kB [ 173.155820][ T7305] lowmem_reserve[]: 0 0 0 0 0 [ 173.162315][ T7305] Node 0 DMA: 29*4kB (UM) 17*8kB (UM) 7*16kB (UM) 14*32kB (UM) 2*64kB (UM) 1*128kB (M) 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2604kB [ 173.165514][ T7315] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 173.169928][ T7315] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 173.173166][ T7305] Node 0 DMA32: 752*4kB (UE) 363*8kB (UE) 235*16kB (UME) 286*32kB (UME) 75*64kB (UME) 24*128kB (UME) 11*256kB (UM) 2*512kB (M) 2*1024kB (M) 0*2048kB 0*4096kB = 32584kB [ 173.179341][ T7305] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 173.182784][ T7305] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 173.187756][ T7315] vhci_hcd vhci_hcd.0: Device attached [ 173.190261][ T7305] 37026 total pagecache pages [ 173.192056][ T7305] 1177 pages in swap cache [ 173.193927][ T7305] Free swap = 116624kB [ 173.195533][ T7305] Total swap = 124996kB [ 173.205964][ T7305] 524155 pages RAM [ 173.208068][ T7305] 0 pages HighMem/MovableOnly [ 173.210415][ T7305] 209059 pages reserved [ 173.212509][ T7305] 0 pages cma reserved [ 173.218236][ T7305] Unreclaimable slab info: [ 173.220584][ T7305] Name Used Total [ 173.223336][ T7305] bio-184 4KB 4KB [ 173.234658][ T7305] pid_3 23KB 23KB [ 173.237602][ T7305] pid_2 102KB 102KB [ 173.240153][ T7305] bio-472 15KB 15KB [ 173.242842][ T7305] bio-536 15KB 15KB [ 173.255136][ T7305] bio-552 15KB 15KB [ 173.258301][ T7305] bio-584 15KB 15KB [ 173.261071][ T7305] afs_inode_cache 30KB 30KB [ 173.263934][ T7305] zspage-zswap1 74KB 74KB [ 173.275583][ T7305] zs_handle-zswap1 54KB 72KB [ 173.279213][ T7305] zswap_entry 121KB 142KB [ 173.285744][ T7305] AF_VSOCK 122KB 122KB [ 173.288938][ T7305] batadv_tt_change_cache 16KB 16KB [ 173.291820][ T7305] batadv_tl_cache 16KB 16KB [ 173.294894][ T7305] ceph_osd_request 63KB 63KB [ 173.306164][ T7305] ceph_msg 15KB 15KB [ 173.309395][ T7305] IEEE-802.15.4-RAW 126KB 126KB [ 173.312216][ T7305] p9_req_t 23KB 23KB [ 173.317430][ T7305] SMC 93KB 93KB [ 173.320285][ T7305] TIPC 123KB 123KB [ 173.323215][ T7305] SCTPv6 120KB 120KB [ 173.326381][ T7305] SCTP 122KB 122KB [ 173.337068][ T7305] sctp_chunk 109KB 148KB [ 173.340305][ T7305] sctp_bind_bucket 16KB 16KB [ 173.343047][ T7305] PNPIPE 30KB 30KB [ 173.345998][ T7305] L2TP/IPv6 31KB 31KB [ 173.357373][ T7305] RXRPC 128KB 128KB [ 173.378004][ T7305] rxrpc_call_jar 191KB 191KB [ 173.380740][ T7305] can_receiver 3KB 3KB [ 173.383764][ T7305] net_bridge_fdb_entry 15KB 15KB [ 173.388825][ T7305] MPTCPv6 93KB 93KB [ 173.391871][ T7305] fib6_node 98KB 132KB [ 173.394690][ T7305] ip6_dst_cache 162KB 429KB [ 173.409367][ T7305] PINGv6 30KB 30KB [ 173.412348][ T7305] RAWv6 154KB 154KB [ 173.415478][ T7305] UDPLITEv6 61KB 61KB [ 173.418220][ T7305] UDPv6 122KB 122KB [ 173.420092][ T7315] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 173.425150][ T7315] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 173.429182][ T7305] tw_sock_TCPv6 23KB 23KB [ 173.439547][ T7305] request_sock_TCPv6 7KB 7KB [ 173.447525][ T34] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 173.450402][ T7305] TCPv6 178KB 178KB [ 173.457687][ T7305] ip_vs_conn 15KB 15KB [ 173.460787][ T7305] nf_conntrack 39KB 39KB [ 173.463608][ T7305] wg_peer 118KB 118KB [ 173.466367][ T7305] allowedips_node 15KB 15KB [ 173.469411][ T7305] ubi_wl_entry_slab 3KB 3KB [ 173.472261][ T7305] t10_alua_lu_gp_cache 7KB 7KB [ 173.475286][ T7305] scsi_sense_cache 48KB 48KB [ 173.478469][ T7305] virtio_scsi_cmd 16KB 16KB [ 173.482131][ T7305] bio-136 74KB 96KB [ 173.485683][ T7305] io_kiocb 101KB 171KB [ 173.488752][ T7305] bio-264 7KB 7KB [ 173.491388][ T7305] mqueue_inode_cache 121KB 121KB [ 173.494307][ T7305] f2fs_bio_post_read_ctx 23KB 23KB [ 173.498390][ T7305] jfs_mp 7KB 7KB [ 173.515478][ T7305] fuse_request 118KB 158KB [ 173.518588][ T7305] cifs_small_rq 16KB 16KB [ 173.521295][ T7305] cifs_request 67KB 67KB [ 173.524493][ T7305] cifs_mpx_ids 7KB 7KB [ 173.527362][ T7305] cifs_io_subrequest 39KB 39KB [ 173.531837][ T7305] cifs_io_request 95KB 95KB [ 173.537693][ T7305] nfs_commit_data 15KB 15KB [ 173.541797][ T7305] nfs_write_data 63KB 63KB [ 173.547014][ T7305] jbd2_inode 7KB 7KB [ 173.555744][ T7305] ext4_system_zone 3KB 3KB [ 173.563877][ T7305] ext4_io_end_vec 15KB 15KB [ 173.572269][ T7305] kioctx 63KB 63KB [ 173.580481][ T7305] aio_kiocb 7KB 7KB [ 173.587695][ T7305] userfaultfd_ctx_cache 63KB 63KB [ 173.592090][ T7305] dnotify_mark 3KB 3KB [ 173.599008][ T7305] dnotify_struct 3KB 3KB [ 173.602040][ T7305] pid_namespace 46KB 46KB [ 173.632530][ T7305] kvm_gmem_inode_cache 31KB 31KB [ 173.635774][ T7305] kvm_async_pf 3KB 3KB [ 173.638833][ T7305] kvm_vcpu 123KB 123KB [ 173.641905][ T7305] kvm_mmu_page_header 11KB 11KB [ 173.644770][ T7305] pte_list_desc 7KB 7KB [ 173.647896][ T7305] x86_emulator 126KB 126KB [ 173.650687][ T7305] rpc_buffers 31KB 31KB [ 173.653408][ T7305] rpc_tasks 7KB 7KB [ 173.656311][ T7305] UNIX-STREAM 275KB 275KB [ 173.659208][ T7305] UNIX 365KB 643KB [ 173.661958][ T7305] UDP-Lite 123KB 123KB [ 173.664834][ T7305] MPTCP 120KB 120KB [ 173.671401][ T7305] request_sock_subflow_v4 7KB 7KB [ 173.674356][ T7305] tcp_bind2_bucket 16KB 16KB [ 173.679950][ T7320] misc userio: The device must be registered before sending interrupts [ 173.683913][ T7320] netlink: 'syz.0.211': attribute type 1 has an invalid length. [ 173.687800][ T7320] netlink: 'syz.0.211': attribute type 2 has an invalid length. [ 173.701963][ T7305] tcp_bind_bucket 16KB 16KB [ 173.704069][ T7305] xfrm_dst 23KB 23KB [ 173.706117][ T7305] xfrm_state 587KB 765KB [ 173.708843][ T7305] ip_fib_trie 24KB 24KB [ 173.710900][ T7305] ip_fib_alias 64KB 71KB [ 173.712992][ T7305] rtable 91KB 144KB [ 173.715011][ T7305] PING 63KB 63KB [ 173.726583][ T7305] RAW 127KB 127KB [ 173.729348][ T7305] UDP 123KB 123KB [ 173.731959][ T7305] tw_sock_TCP 7KB 7KB [ 173.734443][ T7305] request_sock_TCP 15KB 15KB [ 173.737223][ T7305] TCP 360KB 446KB [ 173.739930][ T7305] hugetlbfs_inode_cache 93KB 93KB [ 173.743286][ T7305] netfs_subrequest 31KB 31KB [ 173.746118][ T7305] netfs_request 95KB 95KB [ 173.776699][ T7305] bio-280 15KB 15KB [ 173.778869][ T7305] ep_head 16KB 16KB [ 173.781082][ T7305] eventpoll_pwq 19KB 19KB [ 173.783265][ T7305] eventpoll_epi 63KB 63KB [ 173.785494][ T7305] inotify_inode_mark 23KB 23KB [ 173.787888][ T7305] sgpool-128 29KB 29KB [ 173.790110][ T7305] sgpool-64 31KB 31KB [ 173.792374][ T7305] sgpool-32 189KB 189KB [ 173.794535][ T7305] sgpool-16 62KB 62KB [ 173.796834][ T7305] sgpool-8 54KB 54KB [ 173.798939][ T7305] bio_crypt_ctx 7KB 7KB [ 173.801043][ T7305] bio_integrity_data 4KB 4KB [ 173.803293][ T7305] request_queue 247KB 247KB [ 173.805380][ T7305] blkdev_ioc 15KB 15KB [ 173.807888][ T7305] bio-200 428KB 500KB [ 173.810047][ T7305] biovec-max 773KB 1071KB [ 173.812247][ T7305] biovec-64 283KB 283KB [ 173.826662][ T7305] biovec-16 31KB 31KB [ 173.828829][ T7305] mm_slot 15KB 15KB [ 173.830949][ T7305] uid_cache 23KB 23KB [ 173.833162][ T7305] iommu_iova_magazine 1032KB 1071KB [ 173.835496][ T7305] iommu_iova 172KB 172KB [ 173.837885][ T7305] dmaengine-unmap-256 30KB 30KB [ 173.840172][ T7305] dmaengine-unmap-128 30KB 30KB [ 173.842561][ T7305] dmaengine-unmap-16 4KB 4KB [ 173.844682][ T7305] dmaengine-unmap-2 4KB 4KB [ 173.847005][ T7305] QIPCRTR 93KB 93KB [ 173.849207][ T7305] audit_buffer 15KB 15KB [ 173.851261][ T7305] skbuff_ext_cache 28KB 28KB [ 173.853486][ T7305] skbuff_small_head 2748KB 2794KB [ 173.855503][ T7305] skbuff_fclone_cache 343KB 421KB [ 173.857797][ T7305] skbuff_head_cache 1542KB 1585KB [ 173.859882][ T7305] configfs_dir_cache 12KB 12KB [ 173.862185][ T7305] file_lock_cache 39KB 39KB [ 173.864153][ T7305] file_lock_ctx 19KB 19KB [ 173.866610][ T7305] fsnotify_mark_connector 15KB 15KB [ 173.869414][ T7305] posix_timers_cache 16KB 16KB [ 173.871551][ T7305] taskstats 61KB 61KB [ 173.873719][ T7305] mem_cgroup_per_node 136KB 154KB [ 173.876060][ T7305] mem_cgroup 119KB 119KB [ 173.879388][ T7323] misc userio: No port type given on /dev/userio [ 173.882798][ T7323] misc userio: The device must be registered before sending interrupts [ 173.887227][ T7305] proc_dir_entry 644KB 679KB [ 173.887521][ T7323] netlink: 'syz.0.212': attribute type 1 has an invalid length. [ 173.889442][ T7305] pde_opener 15KB 15KB [ 173.893347][ T7323] netlink: 'syz.0.212': attribute type 2 has an invalid length. [ 173.894446][ T7305] seq_file 117KB 156KB [ 173.916680][ T7305] sigqueue 23KB 23KB [ 173.919339][ T7305] shmem_inode_cache 7844KB 7896KB [ 173.922312][ T7305] kernfs_iattrs_cache 15KB 15KB [ 173.925213][ T7305] kernfs_node_cache 25810KB 25810KB [ 173.938621][ T7305] mnt_cache 110KB 110KB [ 173.941754][ T7305] filp 459KB 543KB [ 173.944278][ T7305] names_cache 5168KB 5295KB [ 173.947911][ T7305] net_namespace 84KB 84KB [ 173.952387][ T7305] ima_iint_cache 63KB 63KB [ 173.955167][ T7305] lsm_inode_cache 1398KB 1807KB [ 173.961643][ T7305] lsm_file_cache 151KB 180KB [ 173.964146][ T7305] key_jar 31KB 31KB [ 174.006751][ T7305] uts_namespace 46KB 46KB [ 174.010418][ T7305] nsproxy 15KB 15KB [ 174.013621][ T7305] vm_area_struct 758KB 1187KB [ 174.016696][ T7305] fs_cache 65KB 104KB [ 174.020043][ T7305] files_cache 310KB 366KB [ 174.023138][ T7305] signal_cache 1038KB 2064KB [ 174.026028][ T7305] sighand_cache 1197KB 2284KB [ 174.030140][ T7305] task_struct 4593KB 4823KB [ 174.033273][ T7305] cred 177KB 348KB [ 174.035880][ T7305] anon_vma_chain 220KB 338KB [ 174.039260][ T7305] anon_vma 278KB 462KB [ 174.041951][ T7305] pid 218KB 425KB [ 174.044990][ T7305] Acpi-Operand 231KB 336KB [ 174.048113][ T7305] Acpi-ParseExt 98KB 133KB [ 174.051453][ T7305] Acpi-Parse 74KB 114KB [ 174.054307][ T7305] Acpi-State 39KB 74KB [ 174.055820][ T7316] vhci_hcd: connection reset by peer [ 174.057179][ T7305] Acpi-Namespace 56KB 56KB [ 174.062471][ T7305] numa_policy 7KB 7KB [ 174.062970][ T13] vhci_hcd vhci_hcd.3: stop threads [ 174.065452][ T7305] perf_event 31KB 31KB [ 174.070755][ T13] vhci_hcd vhci_hcd.3: release socket [ 174.072122][ T7305] trace_event_file 528KB 528KB [ 174.075239][ T7305] ftrace_event_field 1004KB 1004KB [ 174.078220][ T7305] pool_workqueue 1872KB 1872KB [ 174.080964][ T7305] task_group 46KB 46KB [ 174.083816][ T7305] maple_node 790KB 1504KB [ 174.086635][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 174.090028][ T7305] mm_struct 450KB 612KB [ 174.093061][ T7305] vmap_area 509KB 784KB [ 174.096644][ T7305] debug_objects_cache 2218KB 2411KB [ 174.099603][ T7305] page->ptl 121KB 141KB [ 174.099618][ T7305] kmalloc-cg-8k 1440KB 1440KB [ 174.099634][ T7305] kmalloc-cg-4k 12168KB 12256KB [ 174.099646][ T7305] kmalloc-cg-2k 8040KB 8128KB [ 174.102151][ T7305] kmalloc-cg-1k 2504KB 2592KB [ 174.102173][ T7305] kmalloc-cg-512 1232KB 1248KB [ 174.102190][ T7305] kmalloc-cg-256 408KB 408KB [ 174.102207][ T7305] kmalloc-cg-128 219KB 228KB [ 174.102218][ T7305] kmalloc-cg-64 76KB 96KB [ 174.102250][ T7305] kmalloc-cg-32 83KB 152KB [ 174.102261][ T7305] kmalloc-cg-16 16KB 20KB [ 174.102273][ T7305] kmalloc-cg-8 28KB 28KB [ 174.102284][ T7305] kmalloc-cg-192 88KB 88KB [ 174.102295][ T7305] kmalloc-cg-96 56KB 56KB [ 174.102324][ T7305] kmalloc-8k 5664KB 5728KB [ 174.102338][ T7305] kmalloc-4k 21048KB 21344KB [ 174.102358][ T7305] kmalloc-2k 12464KB 13248KB [ 174.102377][ T7305] kmalloc-1k 7072KB 7808KB [ 174.102410][ T7305] kmalloc-512 7752KB 8528KB [ 174.102436][ T7305] kmalloc-256 3653KB 3904KB [ 174.102458][ T7305] kmalloc-128 1079KB 1156KB [ 174.102485][ T7305] kmalloc-64 2897KB 2952KB [ 174.102524][ T7305] kmalloc-32 1442KB 1752KB [ 174.102538][ T7305] kmalloc-16 411KB 424KB [ 174.102553][ T7305] kmalloc-8 418KB 428KB [ 174.102572][ T7305] kmalloc-192 1328KB 1360KB [ 174.102589][ T7305] kmalloc-96 1504KB 1568KB [ 174.102601][ T7305] kmem_cache_node 220KB 220KB [ 174.102614][ T7305] kmem_cache 195KB 195KB [ 174.102627][ T7305] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz2,task=syz.2.208,pid=7305,uid=0 [ 174.197819][ T7305] Out of memory (oom_kill_allocating_task): Killed process 7304 (syz.2.208) total-vm:104404kB, anon-rss:128kB, file-rss:23360kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 174.431451][ T7337] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 174.433934][ T7337] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 174.437948][ T7337] vhci_hcd vhci_hcd.0: Device attached [ 174.460430][ T7337] netlink: 20 bytes leftover after parsing attributes in process `syz.1.213'. [ 174.717134][ T6057] usb 40-1: SetAddress Request (10) to port 0 [ 174.719305][ T6057] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 174.903462][ T7338] vhci_hcd: connection reset by peer [ 174.906723][ T12] vhci_hcd vhci_hcd.1: stop threads [ 174.908413][ T12] vhci_hcd vhci_hcd.1: release socket [ 174.916702][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 175.197052][ T54] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 175.373348][ T7355] mkiss: ax0: crc mode is auto. [ 175.890103][ T7370] binder: 7365:7370 ioctl 8008662c 80000240 returned -22 [ 175.996459][ T7372] netlink: 28 bytes leftover after parsing attributes in process `syz.1.219'. [ 177.200449][ T7383] misc userio: No port type given on /dev/userio [ 177.203804][ T7383] misc userio: The device must be registered before sending interrupts [ 177.204022][ T7383] netlink: 'syz.0.222': attribute type 1 has an invalid length. [ 177.204032][ T7383] netlink: 'syz.0.222': attribute type 2 has an invalid length. [ 177.431535][ T7396] netlink: 'syz.0.225': attribute type 1 has an invalid length. [ 177.434650][ T7396] netlink: 'syz.0.225': attribute type 2 has an invalid length. [ 177.559063][ T7400] mkiss: ax0: crc mode is auto. [ 178.217058][ T7413] mkiss: ax0: crc mode is auto. [ 178.313267][ T7415] binder: BINDER_SET_CONTEXT_MGR already set [ 178.313288][ T7415] binder: 7409:7415 ioctl 4018620d 80000040 returned -16 [ 178.335284][ T7415] syz.3.228 (7415): drop_caches: 2 [ 178.556551][ T34] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 179.756738][ T6057] usb 40-1: device descriptor read/8, error -110 [ 180.148064][ T6057] usb usb40-port1: attempt power cycle [ 180.708469][ T6057] usb usb40-port1: unable to enumerate USB device [ 183.598452][ T7444] mkiss: ax0: crc mode is auto. [ 184.504939][ T7452] binder: 7448:7452 ioctl 8008662c 80000240 returned -22 [ 184.654128][ T7452] netlink: 28 bytes leftover after parsing attributes in process `syz.3.233'. [ 185.516539][ T5951] Bluetooth: hci4: command 0x1003 tx timeout [ 185.516607][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 185.572407][ T7462] mkiss: ax0: crc mode is auto. [ 185.607760][ T7463] misc userio: No port type given on /dev/userio [ 185.610636][ T7463] misc userio: The device must be registered before sending interrupts [ 185.613731][ T7465] netlink: 'syz.0.236': attribute type 1 has an invalid length. [ 185.616854][ T7465] netlink: 'syz.0.236': attribute type 2 has an invalid length. [ 185.619576][ T7463] netlink: 'syz.3.235': attribute type 1 has an invalid length. [ 185.623023][ T7463] netlink: 'syz.3.235': attribute type 2 has an invalid length. [ 185.918818][ T7475] mkiss: ax0: crc mode is auto. [ 186.856832][ T7488] binder: BINDER_SET_CONTEXT_MGR already set [ 186.859800][ T7488] binder: 7477:7488 ioctl 4018620d 80000040 returned -16 [ 186.869726][ T7488] syz.1.240 (7488): drop_caches: 2 [ 188.058038][ T40] audit: type=1804 audit(1767172066.958:43): pid=7507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.244" name="/newroot/55/bus/file0" dev="overlay" ino=333 res=1 errno=0 [ 188.170755][ T7510] misc userio: No port type given on /dev/userio [ 188.173794][ T7510] misc userio: The device must be registered before sending interrupts [ 188.178685][ T7510] netlink: 'syz.1.246': attribute type 1 has an invalid length. [ 188.182988][ T7510] netlink: 'syz.1.246': attribute type 2 has an invalid length. [ 190.269495][ T7538] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 190.271874][ T7538] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 190.274917][ T7538] vhci_hcd vhci_hcd.0: Device attached [ 190.396667][ T5951] Bluetooth: hci4: command 0x1003 tx timeout [ 190.396689][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 190.576817][ T6039] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 190.606796][ T6037] usb 38-1: SetAddress Request (18) to port 0 [ 190.609322][ T6037] usb 38-1: new SuperSpeed USB device number 18 using vhci_hcd [ 190.726691][ T6039] usb 5-1: Using ep0 maxpacket: 8 [ 190.731079][ T6039] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 190.735796][ T6039] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 190.739436][ T6039] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.744417][ T6039] usb 5-1: config 0 descriptor?? [ 191.013328][ T6039] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 192.973970][ T24] usb 5-1: USB disconnect, device number 5 [ 192.978920][ T7539] vhci_hcd: connection reset by peer [ 192.988622][ T13] vhci_hcd vhci_hcd.0: stop threads [ 192.990962][ T13] vhci_hcd vhci_hcd.0: release socket [ 192.993141][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 193.164173][ T7549] misc userio: No port type given on /dev/userio [ 193.168043][ T7549] misc userio: The device must be registered before sending interrupts [ 193.175981][ T7549] netlink: 'syz.2.255': attribute type 1 has an invalid length. [ 193.179750][ T7549] netlink: 'syz.2.255': attribute type 2 has an invalid length. [ 193.325981][ T7556] mkiss: ax0: crc mode is auto. [ 193.329940][ T7557] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 193.332268][ T7557] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 193.335796][ T7557] vhci_hcd vhci_hcd.0: Device attached [ 193.636988][ T34] usb 44-1: SetAddress Request (14) to port 0 [ 193.648399][ T34] usb 44-1: new SuperSpeed USB device number 14 using vhci_hcd [ 193.926279][ T7558] vhci_hcd: connection reset by peer [ 193.930698][ T1141] vhci_hcd vhci_hcd.3: stop threads [ 193.932597][ T1141] vhci_hcd vhci_hcd.3: release socket [ 193.934419][ T1141] vhci_hcd vhci_hcd.3: disconnect device [ 194.117566][ T7568] binder: 7563:7568 ioctl 8008662c 80000240 returned -22 [ 194.235384][ T7569] netlink: 28 bytes leftover after parsing attributes in process `syz.2.256'. [ 195.274528][ T7580] mkiss: ax0: crc mode is auto. [ 195.375124][ T7581] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 195.377631][ T7581] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 195.386847][ T7581] vhci_hcd vhci_hcd.0: Device attached [ 195.511506][ T6020] kernel read not supported for file 284/task/285/auxv (pid: 6020 comm: kworker/1:4) [ 195.677665][ T6037] usb 38-1: device descriptor read/8, error -110 [ 196.004014][ T7582] vhci_hcd: connection closed [ 196.020703][ T1141] vhci_hcd vhci_hcd.3: stop threads [ 196.025461][ T1141] vhci_hcd vhci_hcd.3: release socket [ 196.028835][ T1141] vhci_hcd vhci_hcd.3: disconnect device [ 196.103601][ T6037] usb usb38-port1: attempt power cycle [ 196.503732][ T7593] syz.0.261 (7593): drop_caches: 2 [ 196.762936][ T6037] usb usb38-port1: unable to enumerate USB device [ 196.955154][ T7597] mkiss: ax0: crc mode is auto. [ 197.853195][ T7612] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 197.855446][ T7612] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 197.863508][ T7612] vhci_hcd vhci_hcd.0: Device attached [ 198.131688][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.267'. [ 198.247816][ T849] usb 40-1: SetAddress Request (14) to port 0 [ 198.250937][ T849] usb 40-1: new SuperSpeed USB device number 14 using vhci_hcd [ 198.286581][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 198.387755][ T7626] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 198.390698][ T7626] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 198.393731][ T7626] vhci_hcd vhci_hcd.0: Device attached [ 198.466505][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 198.470769][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 198.474554][ T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 198.478546][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.483955][ T9] usb 6-1: config 0 descriptor?? [ 198.696600][ T6037] usb 38-1: SetAddress Request (22) to port 0 [ 198.699299][ T6037] usb 38-1: new SuperSpeed USB device number 22 using vhci_hcd [ 198.716640][ T34] usb 44-1: device descriptor read/8, error -110 [ 198.733037][ T9] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 198.937907][ T7627] vhci_hcd: connection reset by peer [ 198.940324][ T12] vhci_hcd vhci_hcd.0: stop threads [ 198.942271][ T12] vhci_hcd vhci_hcd.0: release socket [ 198.944465][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 198.961887][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.964619][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.107343][ T34] usb usb44-port1: attempt power cycle [ 199.669727][ T34] usb usb44-port1: unable to enumerate USB device [ 200.613727][ T144] usb 6-1: USB disconnect, device number 3 [ 200.629674][ T7613] vhci_hcd: connection reset by peer [ 200.638605][ T12] vhci_hcd vhci_hcd.1: stop threads [ 200.640409][ T12] vhci_hcd vhci_hcd.1: release socket [ 200.642369][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 201.395462][ T7656] loop2: detected capacity change from 0 to 7 [ 201.502542][ T7656] Dev loop2: unable to read RDB block 7 [ 201.504716][ T7656] loop2: unable to read partition table [ 201.507732][ T7656] loop2: partition table beyond EOD, truncated [ 201.510317][ T7656] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 201.658813][ T7664] mkiss: ax0: crc mode is auto. [ 202.247798][ T7680] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 202.250043][ T7680] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 202.254300][ T7680] vhci_hcd vhci_hcd.0: Device attached [ 202.536663][ T6020] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 202.661184][ T7686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.282'. [ 202.700874][ T6020] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.704371][ T6020] usb 8-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 202.709423][ T6020] usb 8-1: config 0 interface 0 has no altsetting 0 [ 202.716661][ T6020] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 202.720529][ T6020] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 202.724177][ T6020] usb 8-1: Product: syz [ 202.725839][ T6020] usb 8-1: Manufacturer: syz [ 202.729591][ T6020] usb 8-1: SerialNumber: syz [ 202.741856][ T6020] usb 8-1: config 0 descriptor?? [ 202.834001][ T6020] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 202.853453][ T7681] vhci_hcd: connection closed [ 202.857787][ T46] vhci_hcd vhci_hcd.1: stop threads [ 202.857973][ T7447] udevd[7447]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 202.859603][ T46] vhci_hcd vhci_hcd.1: release socket [ 202.869132][ T46] vhci_hcd vhci_hcd.1: disconnect device [ 203.123230][ T6057] usb 8-1: USB disconnect, device number 4 [ 203.286800][ T849] usb 40-1: device descriptor read/8, error -110 [ 203.677044][ T849] usb usb40-port1: attempt power cycle [ 203.756550][ T6037] usb 38-1: device descriptor read/8, error -110 [ 204.063669][ T7701] netlink: 'syz.3.285': attribute type 1 has an invalid length. [ 204.066583][ T7701] netlink: 'syz.3.285': attribute type 2 has an invalid length. [ 204.147396][ T6037] usb usb38-port1: attempt power cycle [ 204.156616][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 204.156819][ T5951] Bluetooth: hci4: command 0x1003 tx timeout [ 204.266975][ T849] usb usb40-port1: unable to enumerate USB device [ 204.626685][ T7713] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 204.629378][ T7713] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 204.633175][ T7713] vhci_hcd vhci_hcd.0: Device attached [ 204.836594][ T6037] usb 38-1: SetAddress Request (25) to port 0 [ 204.839310][ T6037] usb 38-1: new SuperSpeed USB device number 25 using vhci_hcd [ 205.245639][ T7714] vhci_hcd: connection reset by peer [ 205.248671][ T1141] vhci_hcd vhci_hcd.0: stop threads [ 205.250764][ T1141] vhci_hcd vhci_hcd.0: release socket [ 205.252864][ T1141] vhci_hcd vhci_hcd.0: disconnect device [ 205.991270][ T7725] netlink: 'syz.3.291': attribute type 1 has an invalid length. [ 205.993941][ T7725] netlink: 'syz.3.291': attribute type 2 has an invalid length. [ 208.271699][ T7751] netlink: 'syz.2.296': attribute type 1 has an invalid length. [ 208.275108][ T7751] netlink: 'syz.2.296': attribute type 2 has an invalid length. [ 208.719311][ T7766] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 208.722545][ T7766] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 208.726189][ T7766] vhci_hcd vhci_hcd.0: Device attached [ 209.008162][ T6039] usb 44-1: SetAddress Request (18) to port 0 [ 209.011756][ T6039] usb 44-1: new SuperSpeed USB device number 18 using vhci_hcd [ 209.016079][ T7773] netlink: 24 bytes leftover after parsing attributes in process `syz.2.301'. [ 209.295843][ T7767] vhci_hcd: connection reset by peer [ 209.298304][ T1142] vhci_hcd vhci_hcd.3: stop threads [ 209.300651][ T1142] vhci_hcd vhci_hcd.3: release socket [ 209.302940][ T1142] vhci_hcd vhci_hcd.3: disconnect device [ 209.811012][ T7782] capability: warning: `syz.1.304' uses 32-bit capabilities (legacy support in use) [ 209.834957][ T7782] usb 2-1: USB disconnect, device number 2 [ 209.946005][ T6037] usb 38-1: device descriptor read/8, error -110 [ 210.058031][ T6037] usb usb38-port1: unable to enumerate USB device [ 210.156593][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 210.194962][ T7788] binder: 7785:7788 ioctl 8008662c 80000240 returned -22 [ 210.304157][ T7788] netlink: 28 bytes leftover after parsing attributes in process `syz.1.305'. [ 211.241537][ T7797] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 211.244432][ T7797] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 211.255039][ T7797] vhci_hcd vhci_hcd.0: Device attached [ 211.432800][ T7808] netlink: 'syz.2.309': attribute type 1 has an invalid length. [ 211.435528][ T7808] netlink: 'syz.2.309': attribute type 2 has an invalid length. [ 211.536640][ T76] usb 38-1: SetAddress Request (26) to port 0 [ 211.539003][ T76] usb 38-1: new SuperSpeed USB device number 26 using vhci_hcd [ 213.029643][ T1180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.033216][ T1180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.297755][ T7798] vhci_hcd: connection reset by peer [ 213.301626][ T6130] vhci_hcd vhci_hcd.0: stop threads [ 213.303653][ T6130] vhci_hcd vhci_hcd.0: release socket [ 213.305953][ T6130] vhci_hcd vhci_hcd.0: disconnect device [ 213.329569][ T7823] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 213.332154][ T7823] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 213.336990][ T7823] vhci_hcd vhci_hcd.0: Device attached [ 213.501628][ T7827] netlink: 'syz.3.314': attribute type 1 has an invalid length. [ 213.504441][ T7827] netlink: 'syz.3.314': attribute type 2 has an invalid length. [ 213.536783][ T6037] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 213.583442][ T7824] vhci_hcd: connection closed [ 213.583649][ T792] vhci_hcd vhci_hcd.1: stop threads [ 213.587624][ T792] vhci_hcd vhci_hcd.1: release socket [ 213.589783][ T792] vhci_hcd vhci_hcd.1: disconnect device [ 213.596806][ T6037] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 213.600531][ T6037] usb 39-1: enqueue for inactive port 0 [ 213.676583][ T6037] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 214.028071][ T7836] afs: Unknown parameter 'measure' [ 214.077335][ T6039] usb 44-1: device descriptor read/8, error -110 [ 214.125808][ T7838] netlink: 'syz.2.318': attribute type 1 has an invalid length. [ 214.129475][ T7838] netlink: 'syz.2.318': attribute type 2 has an invalid length. [ 214.536594][ T6039] usb usb44-port1: attempt power cycle [ 214.886716][ T7851] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 214.889100][ T7851] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 214.897511][ T7851] vhci_hcd vhci_hcd.0: Device attached [ 215.147494][ T6039] usb usb44-port1: unable to enumerate USB device [ 215.176744][ T6037] usb 42-1: SetAddress Request (22) to port 0 [ 215.179693][ T6037] usb 42-1: new SuperSpeed USB device number 22 using vhci_hcd [ 215.251051][ T7855] netlink: 'syz.0.321': attribute type 1 has an invalid length. [ 215.254968][ T7855] netlink: 'syz.0.321': attribute type 2 has an invalid length. [ 215.434725][ T7852] vhci_hcd: connection reset by peer [ 215.439074][ T46] vhci_hcd vhci_hcd.2: stop threads [ 215.441707][ T46] vhci_hcd vhci_hcd.2: release socket [ 215.445682][ T46] vhci_hcd vhci_hcd.2: disconnect device [ 215.917340][ T5946] Bluetooth: hci4: command 0x1003 tx timeout [ 215.921021][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 216.070553][ T7861] netlink: 'syz.0.323': attribute type 1 has an invalid length. [ 216.073308][ T7861] netlink: 'syz.0.323': attribute type 2 has an invalid length. [ 216.351488][ T7874] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 216.353934][ T7874] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 216.358382][ T7874] vhci_hcd vhci_hcd.0: Device attached [ 216.626590][ T6020] usb 44-1: SetAddress Request (22) to port 0 [ 216.629071][ T6020] usb 44-1: new SuperSpeed USB device number 22 using vhci_hcd [ 216.655754][ T76] usb 38-1: device descriptor read/8, error -110 [ 216.703694][ T7880] netlink: 'syz.0.328': attribute type 1 has an invalid length. [ 216.706768][ T7880] netlink: 'syz.0.328': attribute type 2 has an invalid length. [ 216.846548][ T34] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 216.911392][ T7875] vhci_hcd: connection reset by peer [ 216.913541][ T1142] vhci_hcd vhci_hcd.3: stop threads [ 216.916181][ T1142] vhci_hcd vhci_hcd.3: release socket [ 216.918472][ T1142] vhci_hcd vhci_hcd.3: disconnect device [ 217.050646][ T76] usb usb38-port1: attempt power cycle [ 217.252180][ T7887] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 217.254416][ T7887] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 217.257886][ T7887] vhci_hcd vhci_hcd.0: Device attached [ 217.326793][ T34] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.330506][ T34] usb 6-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 217.334946][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 217.342709][ T34] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 217.345790][ T34] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 217.349297][ T34] usb 6-1: Product: syz [ 217.350989][ T34] usb 6-1: Manufacturer: syz [ 217.352827][ T34] usb 6-1: SerialNumber: syz [ 217.387306][ T34] usb 6-1: config 0 descriptor?? [ 217.396588][ T76] usb 38-1: SetAddress Request (28) to port 0 [ 217.398813][ T76] usb 38-1: new SuperSpeed USB device number 28 using vhci_hcd [ 217.445903][ T34] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 217.487818][ T7447] udevd[7447]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 217.856754][ T34] usb 6-1: USB disconnect, device number 4 [ 217.944442][ T7888] vhci_hcd: connection reset by peer [ 217.946797][ T46] vhci_hcd vhci_hcd.0: stop threads [ 217.949203][ T46] vhci_hcd vhci_hcd.0: release socket [ 217.951542][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 218.763568][ T7907] misc userio: No port type given on /dev/userio [ 218.766163][ T7907] misc userio: The device must be registered before sending interrupts [ 218.769613][ T7906] netlink: 'syz.0.333': attribute type 1 has an invalid length. [ 218.772483][ T7906] netlink: 'syz.0.333': attribute type 2 has an invalid length. [ 219.182337][ T7917] netlink: 'syz.1.336': attribute type 1 has an invalid length. [ 219.185319][ T7917] netlink: 'syz.1.336': attribute type 2 has an invalid length. [ 219.585950][ T7921] netlink: 'syz.1.337': attribute type 1 has an invalid length. [ 219.588728][ T7921] netlink: 'syz.1.337': attribute type 2 has an invalid length. [ 220.032882][ T7930] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 220.035310][ T7930] UDF-fs: Scanning with blocksize 2048 failed [ 220.039386][ T7930] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 220.041875][ T7930] UDF-fs: Scanning with blocksize 4096 failed [ 220.157037][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 220.235041][ T7931] wg1: entered promiscuous mode [ 220.236862][ T7931] wg1: entered allmulticast mode [ 220.265678][ T6037] usb 42-1: device descriptor read/8, error -110 [ 220.556597][ T5946] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 220.556606][ T5951] Bluetooth: hci5: command 0x1003 tx timeout [ 220.658566][ T6037] usb usb42-port1: attempt power cycle [ 220.933308][ T7941] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 220.936574][ T7941] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 220.943647][ T7941] vhci_hcd vhci_hcd.0: Device attached [ 221.081099][ T6037] usb 42-1: SetAddress Request (24) to port 0 [ 221.084074][ T6037] usb 42-1: new SuperSpeed USB device number 24 using vhci_hcd [ 221.503526][ T7958] mkiss: ax0: crc mode is auto. [ 221.515755][ T7942] vhci_hcd: connection reset by peer [ 221.518343][ T12] vhci_hcd vhci_hcd.2: stop threads [ 221.520450][ T12] vhci_hcd vhci_hcd.2: release socket [ 221.526980][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 221.676634][ T6020] usb 44-1: device descriptor read/8, error -110 [ 222.077692][ T6020] usb usb44-port1: attempt power cycle [ 222.342847][ T7960] netlink: 'syz.2.345': attribute type 1 has an invalid length. [ 222.347232][ T7960] netlink: 'syz.2.345': attribute type 2 has an invalid length. [ 222.476727][ T76] usb 38-1: device descriptor read/8, error -110 [ 222.647768][ T6020] usb usb44-port1: unable to enumerate USB device [ 222.867167][ T76] usb usb38-port1: unable to enumerate USB device [ 223.116800][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 223.117179][ T5957] Bluetooth: hci5: command 0x1003 tx timeout [ 223.117200][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 223.125841][ T5951] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 225.307125][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 225.437058][ T5957] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 225.620640][ T8002] netlink: 'syz.1.355': attribute type 1 has an invalid length. [ 225.624219][ T8002] netlink: 'syz.1.355': attribute type 2 has an invalid length. [ 225.954970][ T6020] libceph: connect (1)[c::]:6789 error -101 [ 225.977183][ T8011] ceph: No mds server is up or the cluster is laggy [ 226.213280][ T6037] usb 42-1: device descriptor read/8, error -110 [ 226.225568][ T6020] libceph: mon0 (1)[c::]:6789 connect error [ 226.397634][ T8017] netlink: 'syz.1.358': attribute type 1 has an invalid length. [ 226.400585][ T8017] netlink: 'syz.1.358': attribute type 2 has an invalid length. [ 226.617834][ T6037] usb usb42-port1: unable to enumerate USB device [ 227.083015][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.360'. [ 227.105042][ T8025] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 227.596662][ T5951] Bluetooth: hci4: command 0x1003 tx timeout [ 227.599924][ T5957] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 228.617069][ T8062] wg1: entered promiscuous mode [ 228.619108][ T8062] wg1: entered allmulticast mode [ 228.722337][ T8064] netlink: 32 bytes leftover after parsing attributes in process `syz.3.366'. [ 230.076653][ T5946] Bluetooth: hci4: command 0x1003 tx timeout [ 230.079763][ T5957] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 230.316727][ T5951] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 231.288619][ T8086] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 231.291494][ T8086] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 231.302289][ T8086] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 231.305123][ T8086] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 231.311445][ T8086] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 231.314106][ T8086] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 231.323508][ T8086] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 231.326305][ T8086] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 231.395020][ T5946] Bluetooth: hci5: sending frame failed (-49) [ 231.397698][ T5957] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 231.955918][ T8147] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 231.958977][ T8147] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 232.014185][ T8147] vhci_hcd vhci_hcd.0: Device attached [ 232.278197][ T6039] usb 44-1: SetAddress Request (26) to port 0 [ 232.280586][ T6039] usb 44-1: new SuperSpeed USB device number 26 using vhci_hcd [ 232.476674][ T5946] Bluetooth: hci4: command 0x1003 tx timeout [ 232.476876][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 232.572619][ T8148] vhci_hcd: connection reset by peer [ 232.575498][ T6236] vhci_hcd vhci_hcd.3: stop threads [ 232.580068][ T6236] vhci_hcd vhci_hcd.3: release socket [ 232.582593][ T6236] vhci_hcd vhci_hcd.3: disconnect device [ 233.677487][ T5957] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 233.716547][ T8167] mkiss: ax0: crc mode is auto. [ 234.112946][ T8164] netlink: 24 bytes leftover after parsing attributes in process `syz.3.381'. [ 234.760128][ T8184] netlink: 'syz.2.384': attribute type 1 has an invalid length. [ 234.763224][ T8184] netlink: 'syz.2.384': attribute type 2 has an invalid length. [ 234.823463][ T8190] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 234.826450][ T8190] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 234.832004][ T8190] vhci_hcd vhci_hcd.0: Device attached [ 235.126608][ T76] usb 38-1: SetAddress Request (30) to port 0 [ 235.128775][ T76] usb 38-1: new SuperSpeed USB device number 30 using vhci_hcd [ 235.454560][ T8191] vhci_hcd: connection reset by peer [ 235.457620][ T12] vhci_hcd vhci_hcd.0: stop threads [ 235.459911][ T12] vhci_hcd vhci_hcd.0: release socket [ 235.462184][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 235.788505][ T8209] mkiss: ax0: crc mode is auto. [ 236.365371][ T8218] ceph: No mds server is up or the cluster is laggy [ 237.018086][ T6037] libceph: connect (1)[c::]:6789 error -101 [ 237.021380][ T6037] libceph: mon0 (1)[c::]:6789 connect error [ 237.200505][ T8223] netlink: 'syz.2.393': attribute type 1 has an invalid length. [ 237.203292][ T8223] netlink: 'syz.2.393': attribute type 2 has an invalid length. [ 237.310522][ T8230] netlink: 'syz.0.394': attribute type 1 has an invalid length. [ 237.313312][ T8230] netlink: 'syz.0.394': attribute type 2 has an invalid length. [ 237.356677][ T6039] usb 44-1: device descriptor read/8, error -110 [ 237.425780][ T8233] mkiss: ax0: crc mode is auto. [ 237.763431][ T6039] usb usb44-port1: attempt power cycle [ 238.156648][ T5957] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 238.157658][ T5951] Bluetooth: hci4: command 0x1003 tx timeout [ 238.342247][ T6039] usb usb44-port1: unable to enumerate USB device [ 238.914164][ T8256] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 238.916434][ T8256] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 238.936850][ T8256] vhci_hcd vhci_hcd.0: Device attached [ 239.116668][ T9] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 239.186530][ T9] usb 43-1: new full-speed USB device number 4 using vhci_hcd [ 239.706004][ T8266] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 239.710030][ T8266] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 239.737796][ T8266] vhci_hcd vhci_hcd.0: Device attached [ 239.845876][ T8273] netlink: 'syz.2.404': attribute type 1 has an invalid length. [ 239.850224][ T8273] netlink: 'syz.2.404': attribute type 2 has an invalid length. [ 240.026613][ T34] usb 40-1: SetAddress Request (18) to port 0 [ 240.066686][ T34] usb 40-1: new SuperSpeed USB device number 18 using vhci_hcd [ 240.156839][ T76] usb 38-1: device descriptor read/8, error -110 [ 240.355983][ T8267] vhci_hcd: connection reset by peer [ 240.358452][ T6236] vhci_hcd vhci_hcd.1: stop threads [ 240.360416][ T6236] vhci_hcd vhci_hcd.1: release socket [ 240.362558][ T6236] vhci_hcd vhci_hcd.1: disconnect device [ 240.406858][ T8257] vhci_hcd: connection reset by peer [ 240.409583][ T1142] vhci_hcd vhci_hcd.3: stop threads [ 240.412214][ T1142] vhci_hcd vhci_hcd.3: release socket [ 240.414483][ T1142] vhci_hcd vhci_hcd.3: disconnect device [ 240.557473][ T76] usb usb38-port1: attempt power cycle [ 240.632007][ T8278] netlink: 'syz.2.405': attribute type 1 has an invalid length. [ 240.635006][ T8278] netlink: 'syz.2.405': attribute type 2 has an invalid length. [ 241.138525][ T76] usb usb38-port1: unable to enumerate USB device [ 241.208895][ T8289] mkiss: ax0: crc mode is auto. [ 243.116527][ T5951] Bluetooth: hci4: command 0x1003 tx timeout [ 243.116548][ T5957] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 243.190125][ T8317] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 243.193230][ T8317] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 243.200150][ T8317] vhci_hcd vhci_hcd.0: Device attached [ 243.512885][ T8325] netlink: 'syz.1.415': attribute type 1 has an invalid length. [ 243.516372][ T8325] netlink: 'syz.1.415': attribute type 2 has an invalid length. [ 243.921564][ T8318] vhci_hcd: connection closed [ 243.927040][ T13] vhci_hcd vhci_hcd.3: stop threads [ 243.938495][ T13] vhci_hcd vhci_hcd.3: release socket [ 243.966815][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 243.971344][ T8335] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 243.974747][ T8335] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 243.979817][ T8335] vhci_hcd vhci_hcd.0: Device attached [ 244.256763][ T76] usb 38-1: SetAddress Request (34) to port 0 [ 244.260194][ T76] usb 38-1: new SuperSpeed USB device number 34 using vhci_hcd [ 244.394310][ T9] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 244.912301][ T8344] hub 8-0:1.0: USB hub found [ 244.926592][ T8344] hub 8-0:1.0: 1 port detected [ 244.940950][ T8344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.418'. [ 244.944933][ T8344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.418'. [ 244.956960][ T8344] netlink: 'syz.2.418': attribute type 12 has an invalid length. [ 244.978837][ T8344] netlink: 'syz.2.418': attribute type 4 has an invalid length. [ 244.982506][ T8344] netlink: 152 bytes leftover after parsing attributes in process `syz.2.418'. [ 244.998794][ T8344] .`: renamed from bond0 [ 245.076982][ T8336] vhci_hcd: connection reset by peer [ 245.080040][ T13] vhci_hcd vhci_hcd.0: stop threads [ 245.082278][ T13] vhci_hcd vhci_hcd.0: release socket [ 245.089480][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 245.120139][ T34] usb 40-1: device descriptor read/8, error -110 [ 245.527302][ T34] usb usb40-port1: attempt power cycle [ 245.787394][ T6057] usb usb44-port1: attempt power cycle [ 246.096958][ T34] usb usb40-port1: unable to enumerate USB device [ 246.368573][ T6057] usb usb44-port1: unable to enumerate USB device [ 246.463054][ T8362] overlayfs: overlapping lowerdir path [ 249.357206][ T76] usb 38-1: device descriptor read/8, error -110 [ 249.734174][ T8405] netlink: 32 bytes leftover after parsing attributes in process `syz.1.427'. [ 249.927019][ T76] usb usb38-port1: attempt power cycle [ 250.370113][ T8412] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 250.372527][ T8412] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 250.375592][ T8412] vhci_hcd vhci_hcd.0: Device attached [ 250.521185][ T76] usb usb38-port1: unable to enumerate USB device [ 250.716593][ T76] usb 42-1: SetAddress Request (26) to port 0 [ 250.719299][ T76] usb 42-1: new SuperSpeed USB device number 26 using vhci_hcd [ 250.885151][ T8425] netlink: 24 bytes leftover after parsing attributes in process `syz.1.430'. [ 250.953754][ T8413] vhci_hcd: connection reset by peer [ 250.966718][ T1180] vhci_hcd vhci_hcd.2: stop threads [ 250.968717][ T1180] vhci_hcd vhci_hcd.2: release socket [ 250.970741][ T1180] vhci_hcd vhci_hcd.2: disconnect device [ 251.015750][ T8423] netlink: 'syz.3.431': attribute type 10 has an invalid length. [ 251.066161][ T8427] netlink: 'syz.3.431': attribute type 10 has an invalid length. [ 251.079576][ T8423] batman_adv: batadv0: Adding interface: team0 [ 251.082167][ T8427] netlink: 2 bytes leftover after parsing attributes in process `syz.3.431'. [ 251.088420][ T8423] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.097579][ T8423] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 251.103488][ T8427] team0: entered promiscuous mode [ 251.105412][ T8427] team_slave_0: entered promiscuous mode [ 251.108743][ T8427] team_slave_1: entered promiscuous mode [ 251.120338][ T8427] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.123971][ T8427] batman_adv: batadv0: Interface activated: team0 [ 251.126303][ T8427] batman_adv: batadv0: Interface deactivated: team0 [ 251.129712][ T8427] batman_adv: batadv0: Removing interface: team0 [ 251.135645][ T8427] bridge0: port 3(team0) entered blocking state [ 251.138935][ T8427] bridge0: port 3(team0) entered disabled state [ 251.141988][ T8427] team0: entered allmulticast mode [ 251.143940][ T8427] team_slave_0: entered allmulticast mode [ 251.146038][ T8427] team_slave_1: entered allmulticast mode [ 251.160224][ T8426] netlink: 'syz.0.432': attribute type 1 has an invalid length. [ 251.162992][ T8426] netlink: 'syz.0.432': attribute type 2 has an invalid length. [ 251.725414][ T24] libceph: connect (1)[c::]:6789 error -101 [ 251.729643][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 251.984244][ T8436] ceph: No mds server is up or the cluster is laggy [ 251.997907][ T24] libceph: connect (1)[c::]:6789 error -101 [ 252.000874][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 252.226795][ T8449] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 252.229448][ T8449] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 252.246831][ T8449] vhci_hcd vhci_hcd.0: Device attached [ 252.921940][ T8458] Bluetooth: MGMT ver 1.23 [ 253.114432][ T8450] vhci_hcd: connection closed [ 253.114851][ T46] vhci_hcd vhci_hcd.2: stop threads [ 253.124793][ T46] vhci_hcd vhci_hcd.2: release socket [ 253.136835][ T46] vhci_hcd vhci_hcd.2: disconnect device [ 254.131465][ T8469] netlink: 'syz.1.439': attribute type 30 has an invalid length. [ 254.233566][ T8471] netlink: 'syz.1.439': attribute type 30 has an invalid length. [ 254.779396][ T8481] netlink: 'syz.3.441': attribute type 1 has an invalid length. [ 254.784014][ T8481] netlink: 'syz.3.441': attribute type 2 has an invalid length. [ 254.826976][ T8485] netlink: 32 bytes leftover after parsing attributes in process `syz.2.449'. [ 255.326495][ T8490] netlink: 'syz.1.443': attribute type 1 has an invalid length. [ 255.332721][ T8490] netlink: 'syz.1.443': attribute type 2 has an invalid length. [ 255.756617][ T76] usb 42-1: device descriptor read/8, error -110 [ 255.902169][ T8492] netlink: 24 bytes leftover after parsing attributes in process `syz.0.442'. [ 256.237585][ T76] usb usb42-port1: attempt power cycle [ 256.821903][ T76] usb usb42-port1: unable to enumerate USB device [ 256.845218][ T8499] bridge1: entered allmulticast mode [ 259.483396][ T8536] netlink: 32 bytes leftover after parsing attributes in process `syz.0.455'. [ 260.187892][ T8543] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 260.190294][ T8543] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 260.305763][ T8548] netlink: 'syz.0.457': attribute type 1 has an invalid length. [ 260.309309][ T8548] netlink: 'syz.0.457': attribute type 2 has an invalid length. [ 260.331082][ T8543] vhci_hcd vhci_hcd.0: Device attached [ 260.410739][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.413984][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.416559][ T6034] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 260.606567][ T6034] usb 8-1: Using ep0 maxpacket: 8 [ 260.608309][ T73] usb 40-1: SetAddress Request (22) to port 0 [ 260.608343][ T73] usb 40-1: new SuperSpeed USB device number 22 using vhci_hcd [ 260.737681][ T6034] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 260.737709][ T6034] usb 8-1: config 0 has no interface number 0 [ 260.737747][ T6034] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 260.737767][ T6034] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 260.737789][ T6034] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 260.737811][ T6034] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 260.737845][ T6034] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 260.737864][ T6034] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.739837][ T6034] usb 8-1: config 0 descriptor?? [ 261.102842][ T8557] netlink: 'syz.0.459': attribute type 1 has an invalid length. [ 261.102860][ T8557] netlink: 'syz.0.459': attribute type 2 has an invalid length. [ 261.109034][ T6034] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 261.455359][ T8544] vhci_hcd: connection reset by peer [ 261.458934][ T6275] vhci_hcd vhci_hcd.1: stop threads [ 261.461458][ T6275] vhci_hcd vhci_hcd.1: release socket [ 261.464336][ T6275] vhci_hcd vhci_hcd.1: disconnect device [ 261.802412][ T8569] qrtr: Invalid version 0 [ 262.707585][ T6034] usb 8-1: USB disconnect, device number 5 [ 262.713669][ T6034] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 263.055229][ T8580] mkiss: ax0: crc mode is auto. [ 263.830518][ T8590] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 263.832947][ T8590] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 263.847989][ T8590] vhci_hcd vhci_hcd.0: Device attached [ 263.982776][ T8596] overlayfs: overlapping lowerdir path [ 264.106642][ T10] usb 38-1: SetAddress Request (38) to port 0 [ 264.126354][ T10] usb 38-1: new SuperSpeed USB device number 38 using vhci_hcd [ 264.800086][ T8591] vhci_hcd: connection reset by peer [ 264.802658][ T12] vhci_hcd vhci_hcd.0: stop threads [ 264.804429][ T12] vhci_hcd vhci_hcd.0: release socket [ 264.806406][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 265.008834][ T8601] hub 8-0:1.0: USB hub found [ 265.010847][ T8601] hub 8-0:1.0: 1 port detected [ 265.020913][ T8601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.467'. [ 265.024216][ T8601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.467'. [ 265.033749][ T8601] netlink: 'syz.3.467': attribute type 12 has an invalid length. [ 265.066693][ T8601] netlink: 'syz.3.467': attribute type 4 has an invalid length. [ 265.069453][ T8601] netlink: 152 bytes leftover after parsing attributes in process `syz.3.467'. [ 265.106828][ T8601] .`: renamed from bond0 (while UP) [ 265.585982][ T8605] netlink: 'syz.3.468': attribute type 1 has an invalid length. [ 265.588957][ T8605] netlink: 'syz.3.468': attribute type 2 has an invalid length. [ 265.676700][ T73] usb 40-1: device descriptor read/8, error -110 [ 266.010024][ T8622] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 266.012608][ T8622] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 266.018035][ T8622] vhci_hcd vhci_hcd.0: Device attached [ 266.067187][ T73] usb usb40-port1: attempt power cycle [ 266.647964][ T73] usb usb40-port1: unable to enumerate USB device [ 266.655451][ T8628] netlink: 'syz.1.473': attribute type 1 has an invalid length. [ 266.658175][ T8628] netlink: 'syz.1.473': attribute type 2 has an invalid length. [ 267.227778][ T8636] 9p: Bad value for 'wfdno' [ 267.235827][ T8623] vhci_hcd: connection closed [ 267.236162][ T13] vhci_hcd vhci_hcd.0: stop threads [ 267.241405][ T13] vhci_hcd vhci_hcd.0: release socket [ 267.244216][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 267.325273][ T8637] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 267.327830][ T8637] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 267.336816][ T8637] vhci_hcd vhci_hcd.0: Device attached [ 267.627054][ T73] usb 44-1: SetAddress Request (34) to port 0 [ 267.630185][ T73] usb 44-1: new SuperSpeed USB device number 34 using vhci_hcd [ 267.955075][ T8638] vhci_hcd: connection reset by peer [ 267.960031][ T12] vhci_hcd vhci_hcd.3: stop threads [ 267.962566][ T12] vhci_hcd vhci_hcd.3: release socket [ 267.965305][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 268.054292][ T8643] netlink: 28 bytes leftover after parsing attributes in process `syz.0.476'. [ 268.057572][ T8643] netlink: 28 bytes leftover after parsing attributes in process `syz.0.476'. [ 268.065033][ T8643] team0: entered promiscuous mode [ 268.066940][ T8643] team_slave_0: entered promiscuous mode [ 268.069204][ T8643] team_slave_1: entered promiscuous mode [ 268.073262][ T8643] bond0: entered promiscuous mode [ 268.075034][ T8643] bond_slave_0: entered promiscuous mode [ 268.077316][ T8643] bond_slave_1: entered promiscuous mode [ 268.083341][ T8643] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 268.274072][ T8645] netlink: 'syz.1.477': attribute type 1 has an invalid length. [ 268.277057][ T8645] netlink: 'syz.1.477': attribute type 2 has an invalid length. [ 268.886303][ T8652] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 268.888612][ T8652] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 268.926210][ T8652] vhci_hcd vhci_hcd.0: Device attached [ 269.196565][ T10] usb 38-1: device descriptor read/8, error -110 [ 269.215273][ T8668] mkiss: ax0: crc mode is auto. [ 269.220529][ T34] usb 40-1: SetAddress Request (26) to port 0 [ 269.223488][ T34] usb 40-1: new SuperSpeed USB device number 26 using vhci_hcd [ 269.495444][ T8653] vhci_hcd: connection reset by peer [ 269.500536][ T1141] vhci_hcd vhci_hcd.1: stop threads [ 269.503613][ T1141] vhci_hcd vhci_hcd.1: release socket [ 269.507109][ T1141] vhci_hcd vhci_hcd.1: disconnect device [ 269.599231][ T10] usb usb38-port1: attempt power cycle [ 269.915696][ T8673] netlink: 20 bytes leftover after parsing attributes in process `syz.0.482'. [ 270.331433][ T7439] udevd[7439]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 270.348631][ T7447] udevd[7447]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 270.439569][ T10] usb usb38-port1: unable to enumerate USB device [ 270.590288][ T8688] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 270.592590][ T8688] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 270.595623][ T8688] vhci_hcd vhci_hcd.0: Device attached [ 270.680921][ T8691] bridge2: entered allmulticast mode [ 271.519590][ T8689] vhci_hcd: connection closed [ 271.520046][ T12] vhci_hcd vhci_hcd.3: stop threads [ 271.524142][ T12] vhci_hcd vhci_hcd.3: release socket [ 271.535828][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 272.110338][ T8713] mkiss: ax0: crc mode is auto. [ 272.722142][ T73] usb 44-1: device descriptor read/8, error -110 [ 273.046551][ T5946] Bluetooth: hci4: command 0x1003 tx timeout [ 273.051539][ T5957] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 273.517136][ T73] usb usb44-port1: attempt power cycle [ 273.916679][ T5951] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 273.962002][ T8730] overlayfs: overlapping lowerdir path [ 274.105165][ T73] usb usb44-port1: unable to enumerate USB device [ 274.326797][ T34] usb 40-1: device descriptor read/8, error -110 [ 274.727399][ T34] usb usb40-port1: attempt power cycle [ 275.307043][ T34] usb usb40-port1: unable to enumerate USB device [ 276.176942][ T8733] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 276.180816][ T8733] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 276.184820][ T8733] vhci_hcd vhci_hcd.0: Device attached [ 276.358506][ T8734] vhci_hcd: connection closed [ 276.358746][ T13] vhci_hcd vhci_hcd.2: stop threads [ 276.363252][ T13] vhci_hcd vhci_hcd.2: release socket [ 276.366666][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 277.437352][ T8760] mkiss: ax0: crc mode is auto. [ 278.625210][ T8779] overlayfs: overlapping lowerdir path [ 279.559765][ T8775] mkiss: ax0: crc mode is auto. [ 279.938073][ T8787] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 279.940841][ T8787] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 279.945042][ T8787] vhci_hcd vhci_hcd.0: Device attached [ 280.266566][ T6035] usb 38-1: SetAddress Request (42) to port 0 [ 280.269445][ T6035] usb 38-1: new SuperSpeed USB device number 42 using vhci_hcd [ 280.618628][ T8804] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 280.621507][ T8804] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 280.670750][ T8804] vhci_hcd vhci_hcd.0: Device attached [ 280.787818][ T8788] vhci_hcd: connection reset by peer [ 280.792290][ T1142] vhci_hcd vhci_hcd.0: stop threads [ 280.794767][ T1142] vhci_hcd vhci_hcd.0: release socket [ 280.806906][ T1142] vhci_hcd vhci_hcd.0: disconnect device [ 280.936729][ T6057] usb 44-1: SetAddress Request (38) to port 0 [ 280.939565][ T6057] usb 44-1: new SuperSpeed USB device number 38 using vhci_hcd [ 281.076329][ T8805] vhci_hcd: connection reset by peer [ 281.079403][ T12] vhci_hcd vhci_hcd.3: stop threads [ 281.081287][ T12] vhci_hcd vhci_hcd.3: release socket [ 281.083178][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 282.028330][ T8812] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 282.031056][ T8812] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 282.066680][ T8812] vhci_hcd vhci_hcd.0: Device attached [ 282.137076][ T40] audit: type=1400 audit(1767172161.068:44): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8807 comm="syz.0.508" [ 282.476706][ T5951] Bluetooth: hci4: command 0x1003 tx timeout [ 282.480193][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 282.548197][ T8813] vhci_hcd: connection closed [ 282.548717][ T1142] vhci_hcd vhci_hcd.0: stop threads [ 282.552298][ T1142] vhci_hcd vhci_hcd.0: release socket [ 282.554200][ T1142] vhci_hcd vhci_hcd.0: disconnect device [ 283.016110][ T8828] mkiss: ax0: crc mode is auto. [ 283.488558][ T8830] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 283.492054][ T8830] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 283.498487][ T8830] vhci_hcd vhci_hcd.0: Device attached [ 283.790879][ T8840] misc userio: No port type given on /dev/userio [ 283.793783][ T8840] misc userio: The device must be registered before sending interrupts [ 283.797275][ T8840] netlink: 'syz.0.515': attribute type 1 has an invalid length. [ 283.799810][ T8840] netlink: 'syz.0.515': attribute type 2 has an invalid length. [ 283.841479][ T8839] netlink: 28 bytes leftover after parsing attributes in process `syz.2.514'. [ 283.848110][ T8839] netlink: 28 bytes leftover after parsing attributes in process `syz.2.514'. [ 283.929296][ T8839] team0: entered promiscuous mode [ 283.931304][ T8839] team_slave_0: entered promiscuous mode [ 283.952808][ T8839] team_slave_1: entered promiscuous mode [ 283.965142][ T8839] .`: entered promiscuous mode [ 283.967570][ T8839] bond_slave_0: entered promiscuous mode [ 283.971983][ T8831] vhci_hcd: connection closed [ 283.972374][ T13] vhci_hcd vhci_hcd.3: stop threads [ 283.977004][ T13] vhci_hcd vhci_hcd.3: release socket [ 283.978890][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 283.981551][ T8839] bond_slave_1: entered promiscuous mode [ 284.088826][ T8839] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 284.093033][ T8839] hsr1: Slave B (.`) is not up; please bring it up to get a fully working HSR network [ 284.116975][ T8839] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 285.027572][ T8860] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 285.029794][ T8860] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 285.055785][ T8860] vhci_hcd vhci_hcd.0: Device attached [ 285.306922][ T76] usb 40-1: SetAddress Request (30) to port 0 [ 285.309916][ T76] usb 40-1: new SuperSpeed USB device number 30 using vhci_hcd [ 285.366694][ T6035] usb 38-1: device descriptor read/8, error -110 [ 285.499865][ T8861] vhci_hcd: connection reset by peer [ 285.502467][ T1142] vhci_hcd vhci_hcd.1: stop threads [ 285.504940][ T1142] vhci_hcd vhci_hcd.1: release socket [ 285.508167][ T1142] vhci_hcd vhci_hcd.1: disconnect device [ 285.768048][ T6035] usb usb38-port1: attempt power cycle [ 286.006674][ T6057] usb 44-1: device descriptor read/8, error -110 [ 286.193613][ T8876] overlayfs: missing 'lowerdir' [ 286.231198][ T8876] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 286.288085][ T8876] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 286.292088][ T8876] overlayfs: failed to look up (tracing) for ino (-66) [ 286.427908][ T6035] usb usb38-port1: unable to enumerate USB device [ 287.337039][ T6057] usb usb44-port1: attempt power cycle [ 287.526659][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 288.048870][ T8886] misc userio: No port type given on /dev/userio [ 288.055182][ T8891] netlink: 'syz.0.526': attribute type 30 has an invalid length. [ 288.066295][ T8886] misc userio: The device must be registered before sending interrupts [ 288.074674][ T8886] netlink: 'syz.2.525': attribute type 1 has an invalid length. [ 288.077169][ T6057] usb usb44-port1: unable to enumerate USB device [ 288.112485][ T8894] netlink: 'syz.0.526': attribute type 30 has an invalid length. [ 288.126865][ T8886] netlink: 'syz.2.525': attribute type 2 has an invalid length. [ 288.670737][ T8904] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 288.673752][ T8904] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 288.678161][ T8904] vhci_hcd vhci_hcd.0: Device attached [ 288.956768][ T24] usb 42-1: SetAddress Request (31) to port 0 [ 288.959711][ T24] usb 42-1: new SuperSpeed USB device number 31 using vhci_hcd [ 289.250108][ T8905] vhci_hcd: connection reset by peer [ 289.252427][ T13] vhci_hcd vhci_hcd.2: stop threads [ 289.254333][ T13] vhci_hcd vhci_hcd.2: release socket [ 289.256216][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 290.049729][ T8914] netlink: 'syz.3.530': attribute type 1 has an invalid length. [ 290.053054][ T8914] netlink: 'syz.3.530': attribute type 2 has an invalid length. [ 290.267133][ T8918] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 290.269524][ T8918] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 290.273073][ T8918] vhci_hcd vhci_hcd.0: Device attached [ 290.319216][ T8917] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 290.321587][ T8917] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 290.324813][ T8917] vhci_hcd vhci_hcd.0: Device attached [ 290.396801][ T76] usb 40-1: device descriptor read/8, error -110 [ 290.494934][ T8919] vhci_hcd: connection closed [ 290.508777][ T1142] vhci_hcd vhci_hcd.0: stop threads [ 290.519466][ T1142] vhci_hcd vhci_hcd.0: release socket [ 290.523046][ T1142] vhci_hcd vhci_hcd.0: disconnect device [ 290.556671][ T6034] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 290.559917][ T6034] usb 37-1: enqueue for inactive port 0 [ 290.626584][ T6034] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 290.797140][ T76] usb usb40-port1: attempt power cycle [ 291.132240][ T8921] vhci_hcd: connection closed [ 291.133464][ T46] vhci_hcd vhci_hcd.2: stop threads [ 291.137633][ T46] vhci_hcd vhci_hcd.2: release socket [ 291.139551][ T46] vhci_hcd vhci_hcd.2: disconnect device [ 291.398824][ T76] usb usb40-port1: unable to enumerate USB device [ 293.255487][ T8972] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 293.258510][ T8972] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 293.277851][ T8972] vhci_hcd vhci_hcd.0: Device attached [ 293.516676][ T5946] Bluetooth: hci4: command 0x1003 tx timeout [ 293.520530][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 293.546609][ T6057] usb 38-1: SetAddress Request (46) to port 0 [ 293.549694][ T6057] usb 38-1: new SuperSpeed USB device number 46 using vhci_hcd [ 293.770825][ T8974] vhci_hcd: connection reset by peer [ 293.772969][ T6236] vhci_hcd vhci_hcd.0: stop threads [ 293.775042][ T6236] vhci_hcd vhci_hcd.0: release socket [ 293.778048][ T6236] vhci_hcd vhci_hcd.0: disconnect device [ 293.996843][ T24] usb 42-1: device descriptor read/8, error -110 [ 294.307959][ T8997] netlink: 'syz.3.540': attribute type 1 has an invalid length. [ 294.311638][ T8997] netlink: 'syz.3.540': attribute type 2 has an invalid length. [ 294.388039][ T24] usb usb42-port1: attempt power cycle [ 295.526983][ T24] usb usb42-port1: unable to enumerate USB device [ 296.942509][ T9034] netlink: 20 bytes leftover after parsing attributes in process `syz.3.549'. [ 297.664937][ T9031] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 297.667922][ T9031] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 297.671114][ T9031] vhci_hcd vhci_hcd.0: Device attached [ 297.769717][ T7439] udevd[7439]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 297.781748][ T7447] udevd[7447]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 297.808570][ T9040] vhci_hcd: connection closed [ 297.809453][ T6236] vhci_hcd vhci_hcd.1: stop threads [ 297.813836][ T6236] vhci_hcd vhci_hcd.1: release socket [ 297.816231][ T6236] vhci_hcd vhci_hcd.1: disconnect device [ 297.940370][ T9050] netlink: 'syz.3.551': attribute type 1 has an invalid length. [ 297.943307][ T9050] netlink: 'syz.3.551': attribute type 2 has an invalid length. [ 298.087620][ T5957] Bluetooth: hci4: command 0x1003 tx timeout [ 298.087654][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 298.636636][ T6057] usb 38-1: device descriptor read/8, error -110 [ 298.769745][ T9067] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 298.771988][ T9067] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 298.775509][ T9067] vhci_hcd vhci_hcd.0: Device attached [ 298.877105][ T6057] usb 38-1: SetAddress Request (47) to port 0 [ 298.879306][ T6057] usb 38-1: new SuperSpeed USB device number 47 using vhci_hcd [ 298.886405][ T9072] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 298.888751][ T9072] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 298.891935][ T9072] vhci_hcd vhci_hcd.0: Device attached [ 299.156614][ T34] usb 40-1: SetAddress Request (34) to port 0 [ 299.159622][ T34] usb 40-1: new SuperSpeed USB device number 34 using vhci_hcd [ 299.499477][ T9073] vhci_hcd: connection reset by peer [ 299.507021][ T1142] vhci_hcd vhci_hcd.1: stop threads [ 299.532794][ T1142] vhci_hcd vhci_hcd.1: release socket [ 299.536829][ T1142] vhci_hcd vhci_hcd.1: disconnect device [ 299.761417][ T9069] vhci_hcd: connection reset by peer [ 299.764627][ T1142] vhci_hcd vhci_hcd.0: stop threads [ 299.767714][ T1142] vhci_hcd vhci_hcd.0: release socket [ 299.770589][ T1142] vhci_hcd vhci_hcd.0: disconnect device [ 300.076699][ T5951] Bluetooth: hci5: command 0x1003 tx timeout [ 300.080964][ T5946] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 300.224841][ T9086] random: crng reseeded on system resumption [ 300.242949][ T9082] netlink: 'syz.2.557': attribute type 1 has an invalid length. [ 300.246357][ T9082] netlink: 'syz.2.557': attribute type 2 has an invalid length. [ 300.386255][ T9091] loop7: detected capacity change from 0 to 16384 [ 300.471950][ T9090] Unrecognized hibernate image header format! [ 300.475389][ T9090] PM: hibernation: Image mismatch: architecture specific data [ 301.306557][ T9099] netlink: 'syz.2.561': attribute type 1 has an invalid length. [ 301.321280][ T9099] netlink: 'syz.2.561': attribute type 2 has an invalid length. [ 302.796739][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 302.846218][ T9121] mkiss: ax0: crc mode is auto. [ 303.517795][ T9129] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 303.520391][ T9129] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 303.522983][ T9129] vhci_hcd vhci_hcd.0: Device attached [ 303.762017][ T9136] netlink: 'syz.2.570': attribute type 1 has an invalid length. [ 303.764784][ T9136] netlink: 'syz.2.570': attribute type 2 has an invalid length. [ 303.796773][ T24] usb 44-1: SetAddress Request (42) to port 0 [ 303.800861][ T24] usb 44-1: new SuperSpeed USB device number 42 using vhci_hcd [ 303.916658][ T6057] usb 38-1: device descriptor read/8, error -110 [ 303.920910][ T9139] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 303.923033][ T9139] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 303.936813][ T9139] vhci_hcd vhci_hcd.0: Device attached [ 304.026900][ T6057] usb usb38-port1: attempt power cycle [ 304.156549][ T6057] usb 38-1: SetAddress Request (48) to port 0 [ 304.158941][ T6057] usb 38-1: new SuperSpeed USB device number 48 using vhci_hcd [ 304.172092][ T9130] vhci_hcd: connection reset by peer [ 304.179053][ T1142] vhci_hcd vhci_hcd.3: stop threads [ 304.180925][ T1142] vhci_hcd vhci_hcd.3: release socket [ 304.183247][ T1142] vhci_hcd vhci_hcd.3: disconnect device [ 304.236668][ T34] usb 40-1: device descriptor read/8, error -110 [ 304.407613][ T9144] binder: 9142:9144 ioctl 0 80000040 returned -22 [ 304.564491][ T9140] vhci_hcd: connection reset by peer [ 304.572673][ T46] vhci_hcd vhci_hcd.0: stop threads [ 304.575272][ T46] vhci_hcd vhci_hcd.0: release socket [ 304.577990][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.571'. [ 304.583797][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 304.629675][ T34] usb usb40-port1: attempt power cycle [ 304.956613][ T5951] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 304.956625][ T5946] Bluetooth: hci5: command 0x1003 tx timeout [ 305.181093][ T9152] netlink: 'syz.3.572': attribute type 1 has an invalid length. [ 305.183804][ T9152] netlink: 'syz.3.572': attribute type 2 has an invalid length. [ 305.208775][ T34] usb usb40-port1: unable to enumerate USB device [ 305.376057][ T9157] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 305.379094][ T9157] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 305.383356][ T9157] vhci_hcd vhci_hcd.0: Device attached [ 305.540914][ T9158] vhci_hcd: connection closed [ 305.542157][ T1142] vhci_hcd vhci_hcd.1: stop threads [ 305.546021][ T1142] vhci_hcd vhci_hcd.1: release socket [ 305.566697][ T1142] vhci_hcd vhci_hcd.1: disconnect device [ 305.583067][ T73] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 305.600358][ T9165] netlink: 20 bytes leftover after parsing attributes in process `syz.3.576'. [ 305.603636][ T9165] netlink: 28 bytes leftover after parsing attributes in process `syz.3.576'. [ 306.512791][ T9181] batman_adv: batadv0: Adding interface: gretap1 [ 306.523926][ T9181] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.535447][ T9181] batman_adv: batadv0: Interface activated: gretap1 [ 307.054133][ T9185] overlayfs: missing 'lowerdir' [ 307.133252][ T9186] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 307.227013][ T9186] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 307.231881][ T9186] overlayfs: failed to look up (tracing) for ino (-66) [ 308.006941][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 308.876640][ T24] usb 44-1: device descriptor read/8, error -110 [ 309.149172][ T9193] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 309.151749][ T9193] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 309.155164][ T9193] vhci_hcd vhci_hcd.0: Device attached [ 309.196803][ T6057] usb 38-1: device descriptor read/8, error -110 [ 309.223574][ T9198] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 309.226144][ T9198] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 309.239229][ T9198] vhci_hcd vhci_hcd.0: Device attached [ 309.267142][ T24] usb usb44-port1: attempt power cycle [ 309.355867][ T9194] vhci_hcd: connection closed [ 309.356171][ T6275] vhci_hcd vhci_hcd.2: stop threads [ 309.360782][ T6275] vhci_hcd vhci_hcd.2: release socket [ 309.362913][ T6275] vhci_hcd vhci_hcd.2: disconnect device [ 309.506784][ T34] usb 40-1: SetAddress Request (38) to port 0 [ 309.510146][ T34] usb 40-1: new SuperSpeed USB device number 38 using vhci_hcd [ 309.523224][ T9199] vhci_hcd: connection closed [ 309.523665][ T1142] vhci_hcd vhci_hcd.1: stop threads [ 309.530209][ T1142] vhci_hcd vhci_hcd.1: release socket [ 309.532386][ T1142] vhci_hcd vhci_hcd.1: disconnect device [ 309.618561][ T6057] usb usb38-port1: unable to enumerate USB device [ 309.848377][ T24] usb usb44-port1: unable to enumerate USB device [ 310.617556][ T9213] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 310.620302][ T9213] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 310.625542][ T9213] vhci_hcd vhci_hcd.0: Device attached [ 311.436650][ T5946] Bluetooth: hci4: command 0x1003 tx timeout [ 311.440761][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 311.609189][ T73] usb 42-1: SetAddress Request (36) to port 0 [ 311.612105][ T73] usb 42-1: new SuperSpeed USB device number 36 using vhci_hcd [ 312.745294][ T9214] vhci_hcd: connection reset by peer [ 312.749280][ T13] vhci_hcd vhci_hcd.2: stop threads [ 312.752148][ T13] vhci_hcd vhci_hcd.2: release socket [ 312.765288][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 313.453049][ T9248] mkiss: ax0: crc mode is auto. [ 314.087393][ T9261] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 314.091271][ T9261] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 314.105873][ T9261] vhci_hcd vhci_hcd.0: Device attached [ 314.234291][ T9267] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 314.237770][ T9267] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 314.246147][ T9267] vhci_hcd vhci_hcd.0: Device attached [ 314.386652][ T24] usb 44-1: SetAddress Request (46) to port 0 [ 314.389547][ T24] usb 44-1: new SuperSpeed USB device number 46 using vhci_hcd [ 314.491527][ T9262] vhci_hcd: connection reset by peer [ 314.516659][ T1142] vhci_hcd vhci_hcd.3: stop threads [ 314.519263][ T1142] vhci_hcd vhci_hcd.3: release socket [ 314.521498][ T1142] vhci_hcd vhci_hcd.3: disconnect device [ 314.562777][ T34] usb 40-1: device descriptor read/8, error -110 [ 314.856776][ T9268] vhci_hcd: connection closed [ 314.859311][ T1142] vhci_hcd vhci_hcd.2: stop threads [ 314.865795][ T1142] vhci_hcd vhci_hcd.2: release socket [ 314.869360][ T1142] vhci_hcd vhci_hcd.2: disconnect device [ 314.957472][ T34] usb usb40-port1: attempt power cycle [ 315.517585][ T34] usb usb40-port1: unable to enumerate USB device [ 316.284203][ T9301] netlink: 'syz.1.602': attribute type 1 has an invalid length. [ 316.288072][ T9301] netlink: 'syz.1.602': attribute type 2 has an invalid length. [ 316.717036][ T73] usb 42-1: device descriptor read/8, error -110 [ 317.127548][ T73] usb usb42-port1: attempt power cycle [ 317.280210][ T5946] Bluetooth: hci4: command 0x1003 tx timeout [ 317.284681][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 317.688689][ T73] usb usb42-port1: unable to enumerate USB device [ 319.035087][ T9331] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 319.037347][ T9331] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 319.043728][ T9331] vhci_hcd vhci_hcd.0: Device attached [ 319.326704][ T76] usb 40-1: SetAddress Request (42) to port 0 [ 319.329911][ T76] usb 40-1: new SuperSpeed USB device number 42 using vhci_hcd [ 319.429475][ T9335] netlink: 'syz.2.609': attribute type 1 has an invalid length. [ 319.436614][ T5946] Bluetooth: hci4: command 0x1003 tx timeout [ 319.436694][ T9335] netlink: 'syz.2.609': attribute type 2 has an invalid length. [ 319.439075][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 319.461084][ T24] usb 44-1: device descriptor read/8, error -110 [ 319.774858][ T9332] vhci_hcd: connection reset by peer [ 319.785392][ T13] vhci_hcd vhci_hcd.1: stop threads [ 319.790055][ T13] vhci_hcd vhci_hcd.1: release socket [ 319.792944][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 319.974553][ T40] audit: type=1326 audit(1767172198.908:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9342 comm="syz.3.611" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f57579 code=0x0 [ 320.444217][ T24] usb usb44-port1: attempt power cycle [ 321.405406][ T24] usb usb44-port1: unable to enumerate USB device [ 321.851594][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.854166][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.989807][ T9379] mkiss: ax0: crc mode is auto. [ 322.724568][ T9390] netlink: 'syz.2.620': attribute type 1 has an invalid length. [ 322.728450][ T9390] netlink: 'syz.2.620': attribute type 2 has an invalid length. [ 323.116693][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 323.116972][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 323.996682][ T64] Bluetooth: hci5: command 0x1003 tx timeout [ 323.996704][ T5946] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 324.093992][ T9400] random: crng reseeded on system resumption [ 324.316576][ T64] Bluetooth: hci6: command 0x1003 tx timeout [ 324.317461][ T5957] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 324.476621][ T76] usb 40-1: device descriptor read/8, error -110 [ 324.767755][ T40] audit: type=1326 audit(1767172203.678:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9405 comm="syz.0.623" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70fd579 code=0x0 [ 324.904702][ T76] usb usb40-port1: attempt power cycle [ 325.437481][ T5957] Bluetooth: hci4: command 0x1003 tx timeout [ 325.441443][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 325.487595][ T76] usb usb40-port1: unable to enumerate USB device [ 325.520593][ T9416] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 325.536224][ T9416] netlink: 'syz.0.625': attribute type 10 has an invalid length. [ 325.737343][ T9425] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 325.821190][ T9432] mkiss: ax0: crc mode is auto. [ 326.135507][ T9436] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 326.137774][ T9436] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 326.141612][ T9436] vhci_hcd vhci_hcd.0: Device attached [ 326.316594][ T5951] Bluetooth: hci5: command 0x1003 tx timeout [ 326.320569][ T5946] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 326.416652][ T76] usb 38-1: SetAddress Request (50) to port 0 [ 326.419191][ T76] usb 38-1: new SuperSpeed USB device number 50 using vhci_hcd [ 326.767912][ T9437] vhci_hcd: connection reset by peer [ 326.776827][ T6275] vhci_hcd vhci_hcd.0: stop threads [ 326.778671][ T6275] vhci_hcd vhci_hcd.0: release socket [ 326.781823][ T6275] vhci_hcd vhci_hcd.0: disconnect device [ 327.084334][ T9451] binder: 9445:9451 ioctl 0 80000040 returned -22 [ 327.190007][ T9452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'. [ 327.809340][ T9464] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 327.811610][ T9464] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 327.815208][ T9464] vhci_hcd vhci_hcd.0: Device attached [ 328.481506][ T9465] vhci_hcd: connection closed [ 328.481831][ T46] vhci_hcd vhci_hcd.0: stop threads [ 328.487621][ T46] vhci_hcd vhci_hcd.0: release socket [ 328.490497][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 329.157248][ T9492] mkiss: ax0: crc mode is auto. [ 330.100600][ T9506] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 330.102793][ T9506] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 330.106005][ T9506] vhci_hcd vhci_hcd.0: Device attached [ 330.761189][ T9507] vhci_hcd: connection closed [ 330.762637][ T1142] vhci_hcd vhci_hcd.0: stop threads [ 330.785634][ T1142] vhci_hcd vhci_hcd.0: release socket [ 330.796964][ T1142] vhci_hcd vhci_hcd.0: disconnect device [ 330.876732][ T5951] Bluetooth: hci4: command 0x1003 tx timeout [ 330.881882][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 331.536552][ T76] usb 38-1: device descriptor read/8, error -110 [ 331.743481][ T9525] overlayfs: missing 'lowerdir' [ 331.754783][ T9525] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 331.819754][ T9525] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 331.823606][ T9525] overlayfs: failed to look up (tracing) for ino (-66) [ 332.092277][ T9523] binder: 9515:9523 ioctl 0 80000040 returned -22 [ 332.611059][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.648'. [ 332.704108][ T76] usb usb38-port1: attempt power cycle [ 333.271211][ T76] usb usb38-port1: unable to enumerate USB device [ 334.337903][ T9543] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 334.340853][ T9543] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 334.345391][ T9543] vhci_hcd vhci_hcd.0: Device attached [ 334.544160][ T9544] vhci_hcd: connection closed [ 334.544470][ T46] vhci_hcd vhci_hcd.0: stop threads [ 334.550076][ T46] vhci_hcd vhci_hcd.0: release socket [ 334.553338][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 334.811046][ T9556] mkiss: ax0: crc mode is auto. [ 335.356618][ T5951] Bluetooth: hci4: command 0x1003 tx timeout [ 335.360608][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 335.709405][ T9568] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 335.712077][ T9568] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 335.715508][ T9568] vhci_hcd vhci_hcd.0: Device attached [ 335.747198][ T9571] mkiss: ax0: crc mode is auto. [ 335.986623][ T76] usb 40-1: SetAddress Request (46) to port 0 [ 335.990093][ T76] usb 40-1: new SuperSpeed USB device number 46 using vhci_hcd [ 336.276787][ T40] audit: type=1326 audit(1767172215.178:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9572 comm="syz.2.660" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70dd579 code=0x0 [ 336.291235][ T9569] vhci_hcd: connection reset by peer [ 336.304101][ T13] vhci_hcd vhci_hcd.1: stop threads [ 336.307038][ T13] vhci_hcd vhci_hcd.1: release socket [ 336.321064][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 336.830237][ T9585] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 336.833712][ T9585] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 336.866571][ T9585] vhci_hcd vhci_hcd.0: Device attached [ 337.146607][ T24] usb 44-1: SetAddress Request (50) to port 0 [ 337.149487][ T24] usb 44-1: new SuperSpeed USB device number 50 using vhci_hcd [ 337.310974][ T9595] xt_CT: You must specify a L4 protocol and not use inversions on it [ 337.459258][ T9586] vhci_hcd: connection reset by peer [ 337.475098][ T9598] netlink: 'syz.0.665': attribute type 1 has an invalid length. [ 337.478671][ T9598] netlink: 'syz.0.665': attribute type 2 has an invalid length. [ 337.491120][ T13] vhci_hcd vhci_hcd.3: stop threads [ 337.493215][ T13] vhci_hcd vhci_hcd.3: release socket [ 337.495646][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 338.232146][ T9609] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 338.234510][ T9609] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 338.237790][ T9609] vhci_hcd vhci_hcd.0: Device attached [ 338.846599][ T9610] vhci_hcd: connection closed [ 338.847660][ T6275] vhci_hcd vhci_hcd.0: stop threads [ 338.851481][ T6275] vhci_hcd vhci_hcd.0: release socket [ 338.853802][ T6275] vhci_hcd vhci_hcd.0: disconnect device [ 338.950947][ T9613] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 338.953250][ T9613] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 338.956649][ T9613] vhci_hcd vhci_hcd.0: Device attached [ 338.985797][ T40] audit: type=1400 audit(1767172217.918:48): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=9607 comm="syz.3.668" [ 339.311855][ T9614] vhci_hcd: connection closed [ 339.312168][ T6236] vhci_hcd vhci_hcd.3: stop threads [ 339.317900][ T6236] vhci_hcd vhci_hcd.3: release socket [ 339.320631][ T6236] vhci_hcd vhci_hcd.3: disconnect device [ 339.691356][ T9622] mkiss: ax0: crc mode is auto. [ 339.879006][ T9621] binder: 9617:9621 ioctl 0 80000040 returned -22 [ 340.066886][ T9621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.669'. [ 341.037150][ T76] usb 40-1: device descriptor read/8, error -110 [ 341.075561][ T9635] netlink: 'syz.0.674': attribute type 1 has an invalid length. [ 341.087182][ T9635] netlink: 'syz.0.674': attribute type 2 has an invalid length. [ 341.315099][ T9641] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 341.317405][ T9641] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 341.321083][ T9641] vhci_hcd vhci_hcd.0: Device attached [ 341.506582][ T76] usb 40-1: SetAddress Request (47) to port 0 [ 341.512064][ T9642] vhci_hcd: connection closed [ 341.513060][ T1142] vhci_hcd vhci_hcd.1: stop threads [ 341.523593][ T1142] vhci_hcd vhci_hcd.1: release socket [ 341.525691][ T1142] vhci_hcd vhci_hcd.1: disconnect device [ 341.525708][ T76] usb 40-1: new SuperSpeed USB device number 47 using vhci_hcd [ 341.556640][ T76] usb 40-1: enqueue for inactive port 0 [ 341.691286][ T76] usb usb40-port1: attempt power cycle [ 341.775122][ T9650] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 341.777593][ T9650] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 341.781390][ T9650] vhci_hcd vhci_hcd.0: Device attached [ 342.002695][ T9656] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 342.004793][ T9656] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 342.020474][ T9656] vhci_hcd vhci_hcd.0: Device attached [ 342.046685][ T6039] usb 42-1: SetAddress Request (40) to port 0 [ 342.049086][ T6039] usb 42-1: new SuperSpeed USB device number 40 using vhci_hcd [ 342.236583][ T24] usb 44-1: device descriptor read/8, error -110 [ 342.267347][ T76] usb usb40-port1: unable to enumerate USB device [ 342.296800][ T34] usb 38-1: SetAddress Request (56) to port 0 [ 342.299768][ T34] usb 38-1: new SuperSpeed USB device number 56 using vhci_hcd [ 342.407497][ T9662] debugfs: 'ttyS3' already exists in 'caif_serial' [ 342.622451][ T9651] vhci_hcd: connection reset by peer [ 342.631533][ T6275] vhci_hcd vhci_hcd.2: stop threads [ 342.633740][ T6275] vhci_hcd vhci_hcd.2: release socket [ 342.656572][ T24] usb usb44-port1: attempt power cycle [ 342.679799][ T6275] vhci_hcd vhci_hcd.2: disconnect device [ 342.695879][ T9657] vhci_hcd: connection reset by peer [ 342.708109][ T6275] vhci_hcd vhci_hcd.0: stop threads [ 342.715856][ T6275] vhci_hcd vhci_hcd.0: release socket [ 342.725700][ T6275] vhci_hcd vhci_hcd.0: disconnect device [ 343.251598][ T24] usb usb44-port1: unable to enumerate USB device [ 343.617691][ T9696] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 343.619943][ T9696] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 343.626555][ T9696] vhci_hcd vhci_hcd.0: Device attached [ 343.736365][ T9704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.682'. [ 343.947013][ T10] usb 44-1: SetAddress Request (54) to port 0 [ 343.949917][ T10] usb 44-1: new SuperSpeed USB device number 54 using vhci_hcd [ 344.234395][ T9697] vhci_hcd: connection reset by peer [ 344.237566][ T6275] vhci_hcd vhci_hcd.3: stop threads [ 344.240193][ T6275] vhci_hcd vhci_hcd.3: release socket [ 344.242886][ T6275] vhci_hcd vhci_hcd.3: disconnect device [ 345.091013][ T9729] netlink: 'syz.3.685': attribute type 1 has an invalid length. [ 345.094339][ T9729] netlink: 'syz.3.685': attribute type 2 has an invalid length. [ 345.848634][ T9740] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 345.850950][ T9740] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 345.854031][ T9740] vhci_hcd vhci_hcd.0: Device attached [ 345.916590][ T5957] Bluetooth: hci4: command 0x1003 tx timeout [ 345.919610][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 346.515675][ T9741] vhci_hcd: connection closed [ 346.516804][ T6275] vhci_hcd vhci_hcd.3: stop threads [ 346.521242][ T6275] vhci_hcd vhci_hcd.3: release socket [ 346.523917][ T6275] vhci_hcd vhci_hcd.3: disconnect device [ 346.876697][ T5946] Bluetooth: hci5: command 0x1003 tx timeout [ 346.876726][ T5951] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 347.122089][ T6039] usb 42-1: device descriptor read/8, error -110 [ 347.356821][ T34] usb 38-1: device descriptor read/8, error -110 [ 347.507834][ T6039] usb usb42-port1: attempt power cycle [ 347.654214][ T9759] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 347.656523][ T9759] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 347.671099][ T9759] vhci_hcd vhci_hcd.0: Device attached [ 347.757088][ T34] usb usb38-port1: attempt power cycle [ 347.846775][ T6039] usb 42-1: SetAddress Request (42) to port 0 [ 347.900327][ T6039] usb 42-1: new SuperSpeed USB device number 42 using vhci_hcd [ 347.944351][ T9767] IPVS: Error connecting to the multicast addr [ 348.015151][ T9766] netlink: 'syz.0.693': attribute type 1 has an invalid length. [ 348.024589][ T9766] netlink: 'syz.0.693': attribute type 2 has an invalid length. [ 348.076373][ T9760] vhci_hcd: connection reset by peer [ 348.080964][ T6236] vhci_hcd vhci_hcd.2: stop threads [ 348.083064][ T6236] vhci_hcd vhci_hcd.2: release socket [ 348.085582][ T6236] vhci_hcd vhci_hcd.2: disconnect device [ 348.317283][ T34] usb usb38-port1: unable to enumerate USB device [ 348.492271][ T9777] netlink: 'syz.0.695': attribute type 1 has an invalid length. [ 348.495884][ T9777] netlink: 'syz.0.695': attribute type 2 has an invalid length. [ 348.810782][ T9782] batman_adv: batadv0: Adding interface: gretap1 [ 348.813549][ T9782] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.825162][ T9782] batman_adv: batadv0: Interface activated: gretap1 [ 349.037021][ T10] usb 44-1: device descriptor read/8, error -110 [ 349.638259][ T10] usb usb44-port1: attempt power cycle [ 350.247003][ T10] usb usb44-port1: unable to enumerate USB device [ 351.348545][ T9812] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 351.350802][ T9812] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 351.371915][ T9812] vhci_hcd vhci_hcd.0: Device attached [ 351.736654][ T34] usb 44-1: SetAddress Request (58) to port 0 [ 351.739460][ T34] usb 44-1: new SuperSpeed USB device number 58 using vhci_hcd [ 351.970592][ T9824] mkiss: ax0: crc mode is auto. [ 352.244030][ T9815] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 352.247002][ T9815] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 352.251821][ T9815] vhci_hcd vhci_hcd.0: Device attached [ 352.273460][ T9813] vhci_hcd: connection reset by peer [ 352.280411][ T6236] vhci_hcd vhci_hcd.3: stop threads [ 352.282898][ T6236] vhci_hcd vhci_hcd.3: release socket [ 352.284957][ T6236] vhci_hcd vhci_hcd.3: disconnect device [ 352.399538][ T9826] vhci_hcd: connection closed [ 352.406684][ T12] vhci_hcd vhci_hcd.2: stop threads [ 352.410373][ T12] vhci_hcd vhci_hcd.2: release socket [ 352.412696][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 352.958407][ T6039] usb 42-1: device descriptor read/8, error -110 [ 353.359713][ T6039] usb usb42-port1: unable to enumerate USB device [ 354.003751][ T9837] netlink: 'syz.1.708': attribute type 1 has an invalid length. [ 354.007897][ T9837] netlink: 'syz.1.708': attribute type 2 has an invalid length. [ 354.677466][ T10] ================================================================== [ 354.681240][ T10] BUG: KASAN: slab-use-after-free in hci_uart_write_work+0x82d/0x960 [ 354.685245][ T10] Read of size 4 at addr ffff888028ca9970 by task kworker/0:1/10 [ 354.691328][ T10] [ 354.692399][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 354.692421][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 354.692434][ T10] Workqueue: events hci_uart_write_work [ 354.692457][ T10] Call Trace: [ 354.692464][ T10] [ 354.692471][ T10] dump_stack_lvl+0x116/0x1f0 [ 354.692497][ T10] print_report+0xcd/0x630 [ 354.692535][ T10] ? __virt_addr_valid+0x81/0x610 [ 354.692560][ T10] ? __phys_addr+0xe8/0x180 [ 354.692584][ T10] ? hci_uart_write_work+0x82d/0x960 [ 354.692599][ T10] kasan_report+0xe0/0x110 [ 354.692624][ T10] ? hci_uart_write_work+0x82d/0x960 [ 354.692641][ T10] hci_uart_write_work+0x82d/0x960 [ 354.692657][ T10] ? __pfx_pty_write+0x10/0x10 [ 354.692678][ T10] process_one_work+0x9ba/0x1b20 [ 354.692701][ T10] ? __pfx_process_one_work+0x10/0x10 [ 354.692722][ T10] ? assign_work+0x1a0/0x250 [ 354.692739][ T10] worker_thread+0x6c8/0xf10 [ 354.692761][ T10] ? __pfx_worker_thread+0x10/0x10 [ 354.692779][ T10] kthread+0x3c5/0x780 [ 354.692802][ T10] ? __pfx_kthread+0x10/0x10 [ 354.692819][ T10] ? rcu_is_watching+0x12/0xc0 [ 354.692842][ T10] ? __pfx_kthread+0x10/0x10 [ 354.692858][ T10] ret_from_fork+0x983/0xb10 [ 354.692876][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 354.692893][ T10] ? __switch_to+0x7af/0x10d0 [ 354.692913][ T10] ? __pfx_kthread+0x10/0x10 [ 354.692928][ T10] ret_from_fork_asm+0x1a/0x30 [ 354.692959][ T10] [ 354.692964][ T10] [ 354.758986][ T10] Allocated by task 6039: [ 354.760863][ T10] kasan_save_stack+0x33/0x60 [ 354.763102][ T10] kasan_save_track+0x14/0x30 [ 354.765372][ T10] __kasan_slab_alloc+0x89/0x90 [ 354.768171][ T10] kmem_cache_alloc_node_noprof+0x298/0x800 [ 354.771076][ T10] __alloc_skb+0x156/0x410 [ 354.773215][ T10] bcsp_prepare_pkt+0xe0/0xae0 [ 354.775697][ T10] bcsp_dequeue+0x237/0x4b0 [ 354.777403][ T10] hci_uart_write_work+0x4e3/0x960 [ 354.779484][ T10] process_one_work+0x9ba/0x1b20 [ 354.781707][ T10] worker_thread+0x6c8/0xf10 [ 354.784144][ T10] kthread+0x3c5/0x780 [ 354.786082][ T10] ret_from_fork+0x983/0xb10 [ 354.788356][ T10] ret_from_fork_asm+0x1a/0x30 [ 354.790743][ T10] [ 354.791868][ T10] The buggy address belongs to the object at ffff888028ca9900 [ 354.791868][ T10] which belongs to the cache skbuff_head_cache of size 240 [ 354.798240][ T10] The buggy address is located 112 bytes inside of [ 354.798240][ T10] freed 240-byte region [ffff888028ca9900, ffff888028ca99f0) [ 354.805121][ T10] [ 354.806340][ T10] The buggy address belongs to the physical page: [ 354.809207][ T10] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28ca8 [ 354.812122][ T10] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 354.815039][ T10] memcg:ffff88802b06be01 [ 354.816885][ T10] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 354.820232][ T10] page_type: f5(slab) [ 354.821924][ T10] raw: 00fff00000000040 ffff88801c3f08c0 0000000000000000 dead000000000001 [ 354.826248][ T10] raw: 0000000000000000 0000000080190019 00000000f5000000 ffff88802b06be01 [ 354.830566][ T10] head: 00fff00000000040 ffff88801c3f08c0 0000000000000000 dead000000000001 [ 354.834528][ T10] head: 0000000000000000 0000000080190019 00000000f5000000 ffff88802b06be01 [ 354.838470][ T10] head: 00fff00000000001 ffffea0000a32a01 00000000ffffffff 00000000ffffffff [ 354.842522][ T10] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 354.846917][ T10] page dumped because: kasan: bad access detected [ 354.849969][ T10] page_owner tracks the page as allocated [ 354.852422][ T10] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 12, tgid 12 (kworker/u32:0), ts 297976799931, free_ts 236083919855 [ 354.860614][ T10] post_alloc_hook+0x1af/0x220 [ 354.862569][ T10] get_page_from_freelist+0xd0b/0x31a0 [ 354.865375][ T10] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 354.868601][ T10] alloc_pages_mpol+0x1fb/0x550 [ 354.871256][ T10] new_slab+0x2c3/0x430 [ 354.873323][ T10] ___slab_alloc+0xe18/0x1c90 [ 354.875418][ T10] __slab_alloc.constprop.0+0x63/0x110 [ 354.877718][ T10] kmem_cache_alloc_node_noprof+0x44a/0x800 [ 354.880343][ T10] __alloc_skb+0x156/0x410 [ 354.882302][ T10] nsim_dev_trap_report_work+0x2b1/0xcf0 [ 354.885058][ T10] process_one_work+0x9ba/0x1b20 [ 354.887234][ T10] worker_thread+0x6c8/0xf10 [ 354.889247][ T10] kthread+0x3c5/0x780 [ 354.891203][ T10] ret_from_fork+0x983/0xb10 [ 354.893430][ T10] ret_from_fork_asm+0x1a/0x30 [ 354.895553][ T10] page last free pid 5351 tgid 5351 stack trace: [ 354.898077][ T10] __free_frozen_pages+0x7df/0x1170 [ 354.900341][ T10] __put_partials+0x130/0x170 [ 354.902375][ T10] qlist_free_all+0x4c/0xf0 [ 354.904646][ T10] kasan_quarantine_reduce+0x195/0x1e0 [ 354.907586][ T10] __kasan_slab_alloc+0x69/0x90 [ 354.909870][ T10] kmem_cache_alloc_lru_noprof+0x262/0x770 [ 354.912567][ T10] shmem_alloc_inode+0x25/0x50 [ 354.914626][ T10] alloc_inode+0x64/0x240 [ 354.917086][ T10] new_inode+0x22/0x1c0 [ 354.918948][ T10] shmem_get_inode+0x19a/0xfb0 [ 354.921170][ T10] shmem_mknod+0x1a2/0x3b0 [ 354.923173][ T10] lookup_open.isra.0+0x12dc/0x1780 [ 354.925402][ T10] path_openat+0xa95/0x3140 [ 354.927423][ T10] do_filp_open+0x20b/0x470 [ 354.928966][ T10] do_sys_openat2+0x121/0x290 [ 354.931109][ T10] __x64_sys_openat+0x174/0x210 [ 354.933267][ T10] [ 354.934336][ T10] Memory state around the buggy address: [ 354.936822][ T10] ffff888028ca9800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 354.940345][ T10] ffff888028ca9880: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 354.943546][ T10] >ffff888028ca9900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 354.947050][ T10] ^ [ 354.949874][ T10] ffff888028ca9980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 354.953470][ T10] ffff888028ca9a00: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 354.956628][ T10] ================================================================== [ 354.996705][ T10] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 354.999862][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 355.003674][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 355.007848][ T10] Workqueue: events hci_uart_write_work [ 355.010232][ T10] Call Trace: [ 355.011724][ T10] [ 355.013021][ T10] dump_stack_lvl+0x3d/0x1f0 [ 355.015119][ T10] vpanic+0x640/0x6f0 [ 355.016902][ T10] panic+0xca/0xd0 [ 355.018544][ T10] ? __pfx_panic+0x10/0x10 [ 355.020506][ T10] ? hci_uart_write_work+0x82d/0x960 [ 355.022702][ T10] ? preempt_schedule_common+0x44/0xc0 [ 355.025063][ T10] ? preempt_schedule_thunk+0x16/0x30 [ 355.027516][ T10] ? check_panic_on_warn+0x1f/0xb0 [ 355.029756][ T10] check_panic_on_warn+0xab/0xb0 [ 355.032138][ T10] end_report+0x107/0x160 [ 355.034263][ T10] kasan_report+0xee/0x110 [ 355.036566][ T10] ? hci_uart_write_work+0x82d/0x960 [ 355.038922][ T10] hci_uart_write_work+0x82d/0x960 [ 355.041123][ T10] ? __pfx_pty_write+0x10/0x10 [ 355.042960][ T10] process_one_work+0x9ba/0x1b20 [ 355.045118][ T10] ? __pfx_process_one_work+0x10/0x10 [ 355.047483][ T10] ? assign_work+0x1a0/0x250 [ 355.049497][ T10] worker_thread+0x6c8/0xf10 [ 355.051300][ T10] ? __pfx_worker_thread+0x10/0x10 [ 355.053307][ T10] kthread+0x3c5/0x780 [ 355.055057][ T10] ? __pfx_kthread+0x10/0x10 [ 355.057041][ T10] ? rcu_is_watching+0x12/0xc0 [ 355.059176][ T10] ? __pfx_kthread+0x10/0x10 [ 355.061183][ T10] ret_from_fork+0x983/0xb10 [ 355.063196][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 355.065454][ T10] ? __switch_to+0x7af/0x10d0 [ 355.067596][ T10] ? __pfx_kthread+0x10/0x10 [ 355.069603][ T10] ret_from_fork_asm+0x1a/0x30 [ 355.071746][ T10] [ 355.074065][ T10] Kernel Offset: disabled [ 355.076061][ T10] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:10:33 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85301b75 RDI=ffffffff9aed9260 RBP=ffffffff9aed9220 RSP=ffffc900001c75a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000064 R14=ffffffff9aed9220 R15=ffffffff85301b10 RIP=ffffffff85301b9f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976fc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7496288 CR3=000000006cd0d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003800000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000db5aaf RBX=0000000000000001 RCX=ffffffff8b7576d9 RDX=0000000000000000 RSI=ffffffff8daca5cd RDI=ffffffff8bf2b580 RBP=ffffed1003ad9498 RSP=ffffc9000046fde8 R8 =0000000000000001 R9 =ffffed100566673d R10=ffff88802b3339eb R11=ffff88801d6caff0 R12=0000000000000001 R13=ffff88801d6ca4c0 R14=ffffffff9088e9d0 R15=0000000000000000 RIP=ffffffff8b755dcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977fc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080002018 CR3=0000000050fb6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000568529 RBX=0000000000000002 RCX=ffffffff8b7576d9 RDX=0000000000000000 RSI=ffffffff8daca5cd RDI=ffffffff8bf2b580 RBP=ffffed1003ad9930 RSP=ffffc9000047fde8 R8 =0000000000000001 R9 =ffffed100568673d R10=ffff88802b4339eb R11=ffff88801d6cd4b0 R12=0000000000000002 R13=ffff88801d6cc980 R14=ffffffff9088e9d0 R15=0000000000000000 RIP=ffffffff8b755dcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978fc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5446ba8 CR3=0000000024d17000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffff888051b5c000 RBX=0000000000001000 RCX=0000000000000080 RDX=0000000000001000 RSI=ffff888071c29f80 RDI=ffff888051b5cf80 RBP=ffff888051b5c000 RSP=ffffc9000429f0c0 R8 =0000000000000000 R9 =ffffed100e3853ff R10=ffff888071c29fff R11=0000000000000000 R12=ffff888071c29000 R13=dffffc0000000000 R14=ffffea0001c70a40 R15=000000000e230000 RIP=ffffffff8b741156 RFL=00010246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880979fc000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080202018 CR3=000000006ca41000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000015422003 Opmask01=0000000000000001 Opmask02=00000000efffbfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000006 0000004000010015 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000001100010015 0000000900000050 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000600000048 0000000000000006 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000006 00001fff01000045 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000f00000054 0000000000000050 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000c 0000000400000024 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004400010015 0000000200000048 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6168730073257325 7325204650420050 5241006e65706f5f 667062203a732500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 444d560056005600 5600054650420050 5241004b40554a5f 435547051f560000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000e07ffffffff ffffffff00060014 e6882f581960aaae 00000000000080fe ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008000080008 00000e2900000e29 ffffffffffffffff 0006001419d61eb6 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f0f113eb00000000 000080fe00010014 00000006fd80400a aad3ef9e6954e74d ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002001400000048 0000008000080008 00000e0700000e07 ffffffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00060014e6882f58 1960aaae00000000 000080fe00010014 00000005fd80400a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a35206420382064 0a2036006661640a 2064202032330a64 6461206465002061 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000