last executing test programs: 14.309374488s ago: executing program 3 (id=1004): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)={0x54, r6, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) sendmmsg(r8, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4084) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) 13.639925904s ago: executing program 3 (id=1005): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000040000008500000086000000bf91000000000000b7020000010000008500000085000000b70000000000008095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) openat$vicodec1(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="307b02104deeffff0000"], 0x10, 0x40}}], 0x1, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x20, 0x242) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r9, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0xd6, 0x1c, 0xd, 0x5, 0x401, 0xfff5, 0xa, 0x2, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000100)=[0x0], &(0x7f0000001400), 0x0, 0x1, 0x0, 0x0, r10}) splice(r6, 0x0, r8, 0x0, 0x39011, 0x0) 12.327934713s ago: executing program 1 (id=1008): socket(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x5}, 0x18) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0xb, 0x0) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000280)=0x8001) close(r4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) r5 = io_uring_setup(0x2f00, &(0x7f0000000700)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1) r6 = io_uring_setup(0x3bb3, &(0x7f0000000600)={0x0, 0x653f, 0x80, 0x0, 0x28e}) io_uring_register$IORING_REGISTER_FILES(r6, 0x1e, &(0x7f0000000000)=[r5], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000440), 0x0) unlink(&(0x7f0000000380)='./file0\x00') syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), 0xffffffffffffffff) 10.9732486s ago: executing program 1 (id=1009): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={0x0, @default, @bpq0, 0x6, 'syz0\x00', @default, 0x0, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002dc0)={0x11, 0x3, &(0x7f0000002cc0)=ANY=[@ANYRESHEX], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x6f6) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000007000000140001800500020001000000080006001a000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 9.88313557s ago: executing program 3 (id=1010): syz_emit_ethernet(0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="666f8acb89447047fbddcd1c4170b66386f7"], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000002640)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) close(r2) socket(0x2b, 0x3, 0x8) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x2}, 0x1c) listen(r2, 0x5) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) accept4(r2, &(0x7f0000000200)=@l2, 0x0, 0x80000) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, 0x0, 0x0) 9.023949918s ago: executing program 1 (id=1011): r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) open_tree(0xffffffffffffff9c, 0x0, 0x81000) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20820}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) openat$fuse(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='mm_vmscan_write_folio\x00', r4, 0x0, 0x200}, 0x18) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYBLOB="0700727d45025f29643d17edac4f26753570bf5c98011f743419d10fc19c", @ANYRESDEC=r2]) read$FUSE(r5, &(0x7f0000006180)={0x2020}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000004180)="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", 0x2000, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000740)={0x2020}, 0x2020) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) munlockall() madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x10, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f00000003c0)={'pimreg\x00', 0x7}) syz_usb_connect(0x3, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000440)={0x34, r3, 0x1, 0x8000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 8.942082549s ago: executing program 3 (id=1012): unlink(&(0x7f0000000040)='./file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) r4 = fsopen(&(0x7f0000000180)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x3, 0x0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, 0x0, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r3, 0x3b8b, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x2404c810) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) gettid() timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f0000000440)=@fd={0x9, 0x4, 0x4, 0x70000, 0x87, {0x0, 0xea60}, {0x2, 0x2, 0x5, 0xf, 0x9, 0x3}, 0x1ff, 0x4, {}, 0x4000005}) 8.905072758s ago: executing program 2 (id=1013): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"a2e3ad09ed0d09f91b5e071887f70e09d038e7ff7fc6e5539b0d670a8b089b3f363563030890e0879b0af8c6e70a9b334a959b669a9b2f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d073b5d0acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669114e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813491ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eb4581f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab9640071550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c513a9177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f411254c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486229e5b2e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df7227dfdb0d2b9e935c5af3cf474bed79dfc24ab0f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78c8fa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000026347ee800", 0x1000}}, 0x1006) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r2, @ANYBLOB="c8fd6524d7db696bc508ee46069a11bce1a80743ca86f421352adad007a66689b2f3fc14faaee8aa490d58bea17b47a528d5f4c862d6a72a47d0333b6e38a18a99d59fcac5a4fee5b89ba054f7d5112b38fdd739cc0b59bb65db259fa2c38c0eef82fbbc70a329fcd01d0d44dc2823c8af504e33635f0a596c324ad1e0f234f8b2a564b60e16aaca6f66f04d5bc8bc7ff4305c0b5174a7b9446d6a33e7053562eafcabf38cf3"], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) setreuid(0x0, 0xee00) request_key(&(0x7f0000000440)='rxrpc_s\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f0000000500)='/dev/vcsu#\x00', 0xffffffffffffffff) 7.979714789s ago: executing program 2 (id=1014): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) listen(r1, 0xfffffffe) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000346", @ANYBLOB="b846d3728d141177995583fca2d9faca90f81d165abc0d75b807d3ca3c1abae1fb29ac4b44d8b56b63b5f3e1906b9db4e674ef53f0e00e139603e9ef12055efb5a090573e4075f2eb1ef258a1971e77920670a9a1398a012ef4cbea4590203155f2143c110fe1499b4350b15b26570707b0b7b"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) dup3(r0, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioperm(0x0, 0x83, 0x1f) gettid() timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4cc, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x404, 0x3d8, 0x3d8, 0x404, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x11, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x528) 6.840455403s ago: executing program 2 (id=1015): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) eventfd2(0xff, 0x80801) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="9fe0f59c000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x10, 0x1, 0xfffffffc}, 0x50) r1 = socket$inet_udplite(0x2, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0xa0280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000005c0)={'tunl0\x00', &(0x7f00000007c0)={'ip_vti0\x00', 0x0, 0x40, 0x1, 0xf66, 0x7, {{0xe, 0x4, 0x0, 0x7, 0x38, 0x68, 0x0, 0x3, 0x29, 0x0, @remote, @multicast1, {[@lsrr={0x83, 0x13, 0x4b, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @empty]}, @rr={0x7, 0x3, 0xc5}, @rr={0x7, 0x3, 0xfa}, @end, @rr={0x7, 0x7, 0xe, [@broadcast]}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@mpls_getnetconf={0x14, 0x52, 0x300, 0x70bd2d, 0x25dfdbfc}, 0x14}}, 0x24000010) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r3, 0x20, 0x70bd27, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x407fff}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24044041}, 0x40000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r4 = fsopen(&(0x7f0000000080)='rpc_pipefs\x00', 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000001c0)="c1dfb080cd21d308098ee6888100", 0x0, 0xadec, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000000)=r7, 0x4) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0xc044) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 6.665074034s ago: executing program 0 (id=1016): r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) open_tree(0xffffffffffffff9c, 0x0, 0x81000) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20820}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a0000001801000020646c2500000000002020207b1af8ff00000000bfa1000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='mm_vmscan_write_folio\x00', r4, 0x0, 0x200}, 0x18) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[]) syz_fuse_handle_req(r5, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) munlockall() madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19) mount$fuse(0x0, 0x0, 0x0, 0x10, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f00000003c0)={'pimreg\x00', 0x7}) syz_usb_connect(0x3, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000440)={0x34, r3, 0x1, 0x8000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 6.275886771s ago: executing program 3 (id=1019): socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mlockall(0x2) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mlockall(0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = syz_io_uring_setup(0x151, &(0x7f0000000140)={0x0, 0x8206, 0x400, 0x43, 0x26}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) r6 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r3, 0x3516, 0xf00, 0x0, 0x0, 0xfffffdcf) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000100)=0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 5.981026676s ago: executing program 1 (id=1020): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000040000008500000086000000bf91000000000000b7020000010000008500000085000000b70000000000008095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) openat$vicodec1(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="307b02104deeffff0000"], 0x10, 0x40}}], 0x1, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x20, 0x242) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r9, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0xd6, 0x1c, 0xd, 0x5, 0x401, 0xfff5, 0xa, 0x2, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000100)=[0x0], &(0x7f0000001400), 0x0, 0x1, 0x0, 0x0, r10}) splice(r6, 0x0, r8, 0x0, 0x39011, 0x0) 5.318364662s ago: executing program 0 (id=1021): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d07, 0x0, 0x4}]}) ptrace(0x10, r1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r1) ptrace(0x11, r1) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000440)={0x0, 0x304e, 0x0, 0x2, 0x28d}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xfffffffe, 0x80}, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x108, &(0x7f0000000080)=0xfffffffe, 0x0, 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) copy_file_range(r9, &(0x7f00000001c0)=0xffffffffffffff7f, r8, 0x0, 0x81, 0x10000000000000) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x8, 0x0, r8, 0x0, &(0x7f00000000c0)='./bus\x00', 0x182}) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r9) sendmsg$TIPC_NL_SOCK_GET(r9, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)={0x100, r10, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb39}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x1}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x4, 0x8}, @nested={0x4, 0x10}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) io_uring_enter(r5, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 5.317970444s ago: executing program 2 (id=1022): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={0x0, @default, @bpq0, 0x6, 'syz0\x00', @default, 0x0, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002dc0)={0x11, 0x3, &(0x7f0000002cc0)=ANY=[@ANYRESHEX], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x6f6) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000007000000140001800500020001000000080006001a000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 4.232676275s ago: executing program 0 (id=1023): syz_emit_ethernet(0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="666f8acb89447047fbddcd1c4170b66386f7"], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000002640)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) close(r2) socket(0x2b, 0x3, 0x8) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x2}, 0x1c) listen(r2, 0x5) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) accept4(r2, &(0x7f0000000200)=@l2, 0x0, 0x80000) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, 0x0, 0x0) 3.226157439s ago: executing program 0 (id=1024): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r2, @ANYBLOB="c8fd6524d7db696bc508ee46069a11bce1a80743ca86f421352adad007a66689b2f3fc14faaee8aa490d58bea17b47a528d5f4c862d6a72a47d0333b6e38a18a99d59fcac5a4fee5b89ba054f7d5112b38fdd739cc0b59bb65db259fa2c38c0eef82fbbc70a329fcd01d0d44dc2823c8af504e33635f0a596c324ad1e0f234f8b2a564b60e16aaca6f66f04d5bc8bc7ff4305c0b5174a7b9446d6a33e7053562eafcabf38cf3"], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) setreuid(0x0, 0xee00) request_key(&(0x7f0000000440)='rxrpc_s\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f0000000500)='/dev/vcsu#\x00', 0xffffffffffffffff) 2.497205559s ago: executing program 3 (id=1025): socket$nl_crypto(0x10, 0x3, 0x15) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) io_uring_setup(0x5603, &(0x7f0000000300)={0x0, 0x8062, 0x8000, 0x3, 0x4029d}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r1, &(0x7f0000000680)=""/219, 0xdb) r2 = openat(0xffffffffffffffff, &(0x7f0000000a80)='./file0/file0\x00', 0x3004d0d, 0x13b) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r2, 0x80104d12, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000080)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x6a040000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x111, 0x4}}, 0x20) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r7, &(0x7f0000001440)=[{&(0x7f00000001c0)="be", 0x1}], 0x1, 0x80000000, 0xd) openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) 2.494528132s ago: executing program 1 (id=1033): r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) open_tree(0xffffffffffffff9c, 0x0, 0x81000) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20820}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) openat$fuse(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4, 0x0, 0x200}, 0x18) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYBLOB="0700727d45025f29643d17edac4f26753570bf5c98011f743419d10fc19c", @ANYRESDEC=r2]) read$FUSE(r5, &(0x7f0000006180)={0x2020}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000004180)="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", 0x2000, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000740)={0x2020}, 0x2020) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) munlockall() madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x10, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f00000003c0)={'pimreg\x00', 0x7}) syz_usb_connect(0x3, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000440)={0x34, r3, 0x1, 0x8000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2.289953956s ago: executing program 0 (id=1026): socket$inet6(0xa, 0x3, 0xfffffffd) socket$igmp(0x2, 0x3, 0x2) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f0000001300)={'nr0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x4004990) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) userfaultfd(0x80001) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4040085) r2 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r2, 0x4004510f, &(0x7f0000000240)=0x5) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) pipe(0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) 1.195599669s ago: executing program 0 (id=1027): unlink(&(0x7f0000000040)='./file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) r4 = fsopen(&(0x7f0000000180)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x3, 0x0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, 0x0, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r3, 0x3b8b, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x2404c810) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) gettid() timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f0000000440)=@fd={0x9, 0x4, 0x4, 0x70000, 0x87, {0x0, 0xea60}, {0x2, 0x2, 0x5, 0xf, 0x9, 0x3}, 0x1ff, 0x4, {}, 0x4000005}) 1.077845123s ago: executing program 2 (id=1028): r0 = socket$nl_route(0x10, 0x3, 0x0) syncfs(r0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_cred(r1, 0x1, 0x4d, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0xb285f305e6b16ca5) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800, 0x8, 0x2}, 0x1c) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x0, r5}, 0x10) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x1, r5, 0x8000000, r3}, 0x10) syz_io_uring_setup(0x492c, 0x0, 0x0, &(0x7f0000000340)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r6, &(0x7f0000000980), 0xe) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="40000000100039042cfd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="03000000c310060020001274001400028008000300ac14140006000e0040000000ce9f149f3f0d3b530ec09f616171d6de854a5bd25422d9c0f0e3c587031c37d6551f51d7812169659d7e696c834b2fe491c89615e143e7bc61ad4fb684243681d8d8d1edc45b453ab70f3a8dda18c5f00a200599be0f7fb6b4a99d7845c87e2cc46479f25083fbe80b123f41f4b320a2c58a5b08f7a6abb3504f6cb1150ed8d7f801b1f9d6113ba2a384e2965135d1c3845a216c2c390c6ecb75bf64050cd31fb6cc54dde254f8b884484b0ebab62687b7069b5db8ecb219b2be52"], 0x40}}, 0x0) 72.484611ms ago: executing program 1 (id=1029): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x200a00, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = syz_open_pts(r4, 0x101000) ioctl$KDDISABIO(r6, 0x4b37) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff0200000000000000000000000000012c"], 0x0) 0s ago: executing program 2 (id=1030): r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) open_tree(0xffffffffffffff9c, 0x0, 0x81000) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20820}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a0000001801000020646c2500000000002020207b1af8ff00000000bfa1000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='mm_vmscan_write_folio\x00', r4, 0x0, 0x200}, 0x18) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[]) syz_fuse_handle_req(r5, &(0x7f0000004180)="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", 0x2000, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) munlockall() madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x10, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000440)={0x34, r3, 0x1, 0x8000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) kernel console output (not intermixed with test programs): disconnect device [ 238.776888][ T7772] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 239.063544][ T6029] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 239.236055][ T6029] usb 5-1: Using ep0 maxpacket: 32 [ 239.241735][ T6029] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 239.244463][ T6029] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 239.251558][ T6029] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 239.254562][ T6029] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 239.263846][ T6029] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 239.275558][ T6029] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 239.346090][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 239.366123][ T6029] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 239.369300][ T6029] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 239.373536][ T6029] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 239.386079][ T6029] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.401688][ T6029] usb 5-1: config 0 descriptor?? [ 239.516073][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 239.519918][ T9] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 239.523421][ T9] usb 8-1: config 0 has no interface number 0 [ 239.547211][ T9] usb 8-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 239.551135][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.554297][ T9] usb 8-1: Product: syz [ 239.566053][ T9] usb 8-1: Manufacturer: syz [ 239.567924][ T9] usb 8-1: SerialNumber: syz [ 239.572895][ T9] usb 8-1: config 0 descriptor?? [ 239.583844][ T9] hub 8-1:0.89: bad descriptor, ignoring hub [ 239.585861][ T9] hub 8-1:0.89: probe with driver hub failed with error -5 [ 239.589034][ T9] option 8-1:0.89: GSM modem (1-port) converter detected [ 239.730847][ T6029] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 239.891909][ T7791] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 239.894192][ T7791] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 239.916035][ T7791] vhci_hcd vhci_hcd.0: Device attached [ 240.078006][ T7790] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 240.080141][ T7790] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 240.083575][ T7790] vhci_hcd vhci_hcd.0: Device attached [ 240.346220][ T24] usb 42-1: SetAddress Request (46) to port 0 [ 240.349102][ T24] usb 42-1: new SuperSpeed USB device number 46 using vhci_hcd [ 240.652727][ T7794] vhci_hcd: connection reset by peer [ 240.655121][ T6126] vhci_hcd vhci_hcd.2: stop threads [ 240.657347][ T6126] vhci_hcd vhci_hcd.2: release socket [ 240.659274][ T6126] vhci_hcd vhci_hcd.2: disconnect device [ 240.727501][ T7792] vhci_hcd: connection closed [ 240.728379][ T6126] vhci_hcd vhci_hcd.1: stop threads [ 240.732627][ T6126] vhci_hcd vhci_hcd.1: release socket [ 240.734871][ T6126] vhci_hcd vhci_hcd.1: disconnect device [ 241.446803][ T7803] netlink: 16 bytes leftover after parsing attributes in process `syz.1.328'. [ 242.469206][ T55] usb 5-1: USB disconnect, device number 4 [ 242.474747][ T55] usblp0: removed [ 242.576420][ T6029] usb 8-1: USB disconnect, device number 3 [ 242.647248][ T6029] option 8-1:0.89: device disconnected [ 242.777884][ T7816] loop5: detected capacity change from 0 to 7 [ 242.788756][ T7816] Dev loop5: unable to read RDB block 7 [ 242.790688][ T7816] loop5: AHDI p1 p2 [ 242.792012][ T7816] loop5: partition table partially beyond EOD, truncated [ 242.794758][ T7816] loop5: p1 start 1702000233 is beyond EOD, truncated [ 243.646156][ T6100] usb 40-1: device descriptor read/8, error -110 [ 244.083231][ T6100] usb usb40-port1: attempt power cycle [ 244.677057][ T6100] usb usb40-port1: unable to enumerate USB device [ 245.406167][ T24] usb 42-1: device descriptor read/8, error -110 [ 245.797442][ T24] usb usb42-port1: attempt power cycle [ 246.400605][ T24] usb usb42-port1: unable to enumerate USB device [ 246.686468][ T7826] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 246.689043][ T7826] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 246.696252][ T7826] vhci_hcd vhci_hcd.0: Device attached [ 246.711777][ T7826] overlayfs: failed to resolve './file0': -2 [ 246.847977][ T7834] vhci_hcd: connection closed [ 246.856118][ T1144] vhci_hcd vhci_hcd.3: stop threads [ 246.862580][ T1144] vhci_hcd vhci_hcd.3: release socket [ 246.865033][ T1144] vhci_hcd vhci_hcd.3: disconnect device [ 247.566233][ T34] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 247.726069][ T34] usb 6-1: Using ep0 maxpacket: 32 [ 247.903149][ T6224] IPVS: starting estimator thread 0... [ 247.904983][ T7862] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 248.016774][ T7863] IPVS: using max 47 ests per chain, 112800 per kthread [ 248.798083][ T34] usb 6-1: unable to get BOS descriptor or descriptor too short [ 248.874831][ T34] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 248.877510][ T34] usb 6-1: can't read configurations, error -71 [ 249.178230][ T7894] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 249.180887][ T7894] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 249.184951][ T7894] vhci_hcd vhci_hcd.0: Device attached [ 249.456075][ T24] usb 38-1: SetAddress Request (34) to port 0 [ 249.458605][ T24] usb 38-1: new SuperSpeed USB device number 34 using vhci_hcd [ 249.520953][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.342'. [ 250.673076][ T7895] vhci_hcd: connection reset by peer [ 250.678432][ T1144] vhci_hcd vhci_hcd.0: stop threads [ 250.684253][ T1144] vhci_hcd vhci_hcd.0: release socket [ 250.691074][ T1144] vhci_hcd vhci_hcd.0: disconnect device [ 250.722212][ T7908] loop5: detected capacity change from 0 to 7 [ 250.725781][ T7908] Dev loop5: unable to read RDB block 7 [ 250.728248][ T7908] loop5: AHDI p1 p2 [ 250.730060][ T7908] loop5: partition table partially beyond EOD, truncated [ 250.733155][ T7908] loop5: p1 start 1702000233 is beyond EOD, truncated [ 251.882696][ T7919] xt_CT: You must specify a L4 protocol and not use inversions on it [ 254.557553][ T24] usb 38-1: device descriptor read/8, error -110 [ 254.967343][ T24] usb usb38-port1: attempt power cycle [ 255.374162][ T7937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.350'. [ 255.378464][ T7937] netlink: 44 bytes leftover after parsing attributes in process `syz.2.350'. [ 255.381496][ T7937] netlink: 44 bytes leftover after parsing attributes in process `syz.2.350'. [ 255.581879][ T24] usb usb38-port1: unable to enumerate USB device [ 257.607264][ T7936] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 257.609390][ T7936] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 257.612028][ T7936] vhci_hcd vhci_hcd.0: Device attached [ 257.634561][ T7936] overlayfs: failed to resolve './file0': -2 [ 257.795304][ T7948] vhci_hcd: connection closed [ 257.795672][ T6126] vhci_hcd vhci_hcd.3: stop threads [ 257.800062][ T6126] vhci_hcd vhci_hcd.3: release socket [ 257.802764][ T6126] vhci_hcd vhci_hcd.3: disconnect device [ 260.042479][ T7946] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 260.045358][ T7946] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 260.049415][ T7946] vhci_hcd vhci_hcd.0: Device attached [ 260.187712][ T7967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.356'. [ 260.198292][ T7967] netlink: 'syz.1.356': attribute type 30 has an invalid length. [ 260.280058][ T7969] netlink: 'syz.1.356': attribute type 30 has an invalid length. [ 260.311171][ T7961] vhci_hcd: connection closed [ 260.312136][ T6126] vhci_hcd vhci_hcd.2: stop threads [ 260.315443][ T6126] vhci_hcd vhci_hcd.2: release socket [ 260.317463][ T6126] vhci_hcd vhci_hcd.2: disconnect device [ 260.376988][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.386086][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.420831][ T7971] overlayfs: missing 'lowerdir' [ 260.435581][ T7971] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 260.493397][ T7971] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 260.497675][ T7971] overlayfs: failed to look up (tracing) for ino (-66) [ 261.288771][ T9] usb 42-1: enqueue for inactive port 0 [ 262.428658][ T7980] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 262.430876][ T7980] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 262.434283][ T7980] vhci_hcd vhci_hcd.0: Device attached [ 262.676767][ T9] usb usb42-port1: attempt power cycle [ 262.706186][ T6029] usb 38-1: SetAddress Request (38) to port 0 [ 262.708506][ T6029] usb 38-1: new SuperSpeed USB device number 38 using vhci_hcd [ 263.664854][ T7980] overlayfs: failed to resolve './file0': -2 [ 263.936714][ T7981] vhci_hcd: connection reset by peer [ 263.938943][ T1179] vhci_hcd vhci_hcd.0: stop threads [ 263.940675][ T1179] vhci_hcd vhci_hcd.0: release socket [ 263.942392][ T1179] vhci_hcd vhci_hcd.0: disconnect device [ 264.186846][ T9] usb usb42-port1: unable to enumerate USB device [ 265.380506][ T8011] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 265.382551][ T8011] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 265.385501][ T8011] vhci_hcd vhci_hcd.0: Device attached [ 265.420180][ T8011] overlayfs: failed to resolve './file0': -2 [ 265.949743][ T8012] vhci_hcd: connection closed [ 265.951113][ T6133] vhci_hcd vhci_hcd.0: stop threads [ 265.960437][ T6133] vhci_hcd vhci_hcd.0: release socket [ 265.971486][ T6133] vhci_hcd vhci_hcd.0: disconnect device [ 267.434481][ T8025] netlink: 24 bytes leftover after parsing attributes in process `syz.3.369'. [ 269.001209][ T6029] usb 38-1: device descriptor read/8, error -110 [ 269.097717][ T8047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.186765][ T8039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.220738][ T8039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.277297][ T6029] usb usb38-port1: attempt power cycle [ 270.505056][ T8035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.606554][ T8054] veth4: left promiscuous mode [ 270.608174][ T8054] veth4: left allmulticast mode [ 270.689790][ T5949] Bluetooth: Frame is too long (len 24, expected len 4) [ 271.067230][ T6029] usb usb38-port1: unable to enumerate USB device [ 272.497342][ T8067] netlink: 'syz.1.378': attribute type 16 has an invalid length. [ 272.499980][ T8067] netlink: 'syz.1.378': attribute type 17 has an invalid length. [ 275.073138][ T8067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.075841][ T8067] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.081834][ T8067] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 276.597686][ T8101] netlink: 'syz.0.384': attribute type 30 has an invalid length. [ 276.706316][ T8105] netlink: 'syz.0.384': attribute type 30 has an invalid length. [ 277.333249][ T8104] ceph: No mds server is up or the cluster is laggy [ 277.337389][ T34] libceph: connect (1)[c::]:6789 error -101 [ 277.344231][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 281.010909][ T8129] futex_wake_op: syz.0.400 tries to shift op by 32; fix this program [ 281.199357][ T8139] overlayfs: failed to resolve './file1': -2 [ 282.124893][ T8141] FAT-fs (sr0): bogus number of reserved sectors [ 282.127724][ T8141] FAT-fs (sr0): Can't find a valid FAT filesystem [ 284.851640][ T8168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.399'. [ 284.879676][ T8168] netlink: 'syz.2.399': attribute type 30 has an invalid length. [ 284.933335][ T8170] netlink: 'syz.2.399': attribute type 30 has an invalid length. [ 285.753820][ T8175] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 285.755934][ T8175] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 285.837224][ T8175] vhci_hcd vhci_hcd.0: Device attached [ 285.883555][ T8178] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 286.106096][ T24] usb 44-1: SetAddress Request (33) to port 0 [ 286.108047][ T24] usb 44-1: new SuperSpeed USB device number 33 using vhci_hcd [ 286.519235][ T8176] vhci_hcd: connection reset by peer [ 286.521772][ T12] vhci_hcd vhci_hcd.3: stop threads [ 286.523534][ T12] vhci_hcd vhci_hcd.3: release socket [ 286.526428][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 289.086863][ T8208] netlink: 'syz.1.407': attribute type 1 has an invalid length. [ 289.089358][ T8208] netlink: 224 bytes leftover after parsing attributes in process `syz.1.407'. [ 289.257692][ T8214] overlayfs: failed to resolve './file1': -2 [ 290.739140][ T8220] FAT-fs (sr0): bogus number of reserved sectors [ 290.741288][ T8220] FAT-fs (sr0): Can't find a valid FAT filesystem [ 291.132905][ T6029] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 291.176095][ T24] usb 44-1: device descriptor read/8, error -110 [ 291.406236][ T6029] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 291.408951][ T6029] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 291.412554][ T6029] usb 6-1: config 0 interface 0 has no altsetting 0 [ 291.425488][ T6029] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 291.428924][ T6029] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 291.432123][ T6029] usb 6-1: Product: syz [ 291.434309][ T6029] usb 6-1: Manufacturer: syz [ 291.440083][ T6029] usb 6-1: SerialNumber: syz [ 292.286909][ T24] usb usb44-port1: attempt power cycle [ 292.410783][ T6029] usb 6-1: config 0 descriptor?? [ 292.415026][ T6029] hub 6-1:0.0: bad descriptor, ignoring hub [ 292.417051][ T6029] hub 6-1:0.0: probe with driver hub failed with error -5 [ 292.420673][ T6029] usb 6-1: selecting invalid altsetting 0 [ 292.857168][ T24] usb usb44-port1: unable to enumerate USB device [ 293.528554][ T8236] trusted_key: syz.1.411 sent an empty control message without MSG_MORE. [ 294.219843][ T8237] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 294.222006][ T8237] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 294.267046][ T8237] vhci_hcd vhci_hcd.0: Device attached [ 294.516122][ T34] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 295.296109][ T8238] vhci_hcd: connection reset by peer [ 295.298365][ T1179] vhci_hcd vhci_hcd.3: stop threads [ 295.300378][ T1179] vhci_hcd vhci_hcd.3: release socket [ 295.302729][ T1179] vhci_hcd vhci_hcd.3: disconnect device [ 295.676334][ T141] usb 6-1: USB disconnect, device number 7 [ 297.570941][ T8253] /dev/nullb0: Can't open blockdev [ 298.363926][ T8263] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 298.366061][ T8263] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 298.486911][ T8263] vhci_hcd vhci_hcd.0: Device attached [ 298.756246][ T6100] usb 42-1: SetAddress Request (54) to port 0 [ 298.758784][ T6100] usb 42-1: new SuperSpeed USB device number 54 using vhci_hcd [ 299.936193][ T34] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 300.064052][ T8264] vhci_hcd: connection reset by peer [ 300.075281][ T12] vhci_hcd vhci_hcd.2: stop threads [ 300.077364][ T12] vhci_hcd vhci_hcd.2: release socket [ 300.079208][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 300.246050][ T8281] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 300.248211][ T8281] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 300.251354][ T8281] vhci_hcd vhci_hcd.0: Device attached [ 300.442943][ T8288] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 300.526247][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 300.556139][ T55] usb 38-1: SetAddress Request (42) to port 0 [ 300.622993][ T55] usb 38-1: new SuperSpeed USB device number 42 using vhci_hcd [ 300.829184][ T24] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 300.836079][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 300.839489][ T24] usb 5-1: Product: syz [ 300.841211][ T24] usb 5-1: Manufacturer: syz [ 300.846632][ T24] usb 5-1: SerialNumber: syz [ 300.854779][ T24] usb 5-1: config 0 descriptor?? [ 300.861466][ T24] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 300.864942][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 300.879428][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 300.883457][ T24] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 300.892620][ T24] usb 5-1: media controller created [ 301.892160][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 303.041018][ T8282] vhci_hcd: connection reset by peer [ 303.041044][ T24] cxusb: set interface failed [ 303.043562][ T6133] vhci_hcd vhci_hcd.0: stop threads [ 303.044835][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 303.046951][ T6133] vhci_hcd vhci_hcd.0: release socket [ 303.056147][ T6133] vhci_hcd vhci_hcd.0: disconnect device [ 303.077997][ T24] DVB: Unable to find symbol mt352_attach() [ 303.080945][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 303.082986][ T24] zl10353_read_register: readreg error (reg=127, ret==-121) [ 303.085738][ T24] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 303.904876][ T6100] usb 42-1: device descriptor read/8, error -110 [ 303.966053][ T24] rc_core: IR keymap rc-dvico-mce not found [ 303.968044][ T24] Registered IR keymap rc-empty [ 304.008815][ T24] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 305.090529][ T24] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input5 [ 305.105060][ T24] dvb-usb: schedule remote query interval to 100 msecs. [ 305.107670][ T24] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 305.113416][ T24] usb 5-1: USB disconnect, device number 5 [ 305.931346][ T55] usb 38-1: device descriptor read/8, error -110 [ 305.933720][ T6100] usb usb42-port1: attempt power cycle [ 305.947397][ T24] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 306.663773][ T55] usb usb38-port1: attempt power cycle [ 307.007442][ T6100] usb usb42-port1: unable to enumerate USB device [ 307.676690][ T8341] netlink: 'syz.3.433': attribute type 16 has an invalid length. [ 307.679431][ T8341] netlink: 'syz.3.433': attribute type 17 has an invalid length. [ 307.776928][ T55] usb usb38-port1: unable to enumerate USB device [ 307.878426][ T8348] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 307.880804][ T8348] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 307.883751][ T8348] vhci_hcd vhci_hcd.0: Device attached [ 308.246199][ T34] usb 40-1: SetAddress Request (38) to port 0 [ 308.249089][ T34] usb 40-1: new SuperSpeed USB device number 38 using vhci_hcd [ 308.250511][ T8352] netfs: Couldn't get user pages (rc=-14) [ 308.323389][ T8341] bridge0: port 3(erspan0) entered blocking state [ 308.325489][ T8341] bridge0: port 3(erspan0) entered forwarding state [ 308.399941][ T8341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.437212][ T8341] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.978613][ T8341] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 309.446785][ T8349] vhci_hcd: connection reset by peer [ 309.449331][ T6133] vhci_hcd vhci_hcd.1: stop threads [ 309.451561][ T6133] vhci_hcd vhci_hcd.1: release socket [ 309.453806][ T6133] vhci_hcd vhci_hcd.1: disconnect device [ 310.636267][ T8360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.806475][ T8361] block nbd0: server does not support multiple connections per device. [ 310.810952][ T8361] block nbd0: shutting down sockets [ 311.755285][ T8372] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 311.838004][ T8375] 9pnet_virtio: no channels available for device syz [ 311.855570][ T8375] overlayfs: missing 'lowerdir' [ 311.864394][ T8375] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 311.930786][ T8375] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 311.934090][ T8375] overlayfs: failed to look up (tracing) for ino (-66) [ 312.953161][ T8370] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 312.955701][ T8370] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 312.990515][ T8370] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 312.993098][ T8370] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 313.012144][ T8370] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 313.015023][ T8370] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 313.326084][ T34] usb 40-1: device descriptor read/8, error -110 [ 313.856894][ T34] usb usb40-port1: attempt power cycle [ 315.156305][ T5940] Bluetooth: hci1: command 0x0406 tx timeout [ 315.158835][ T5940] Bluetooth: hci3: command 0x0405 tx timeout [ 315.161436][ T5949] Bluetooth: hci2: command 0x0406 tx timeout [ 315.346863][ T34] usb usb40-port1: unable to enumerate USB device [ 315.613694][ T8403] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 316.236078][ T55] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 316.403601][ T55] usb 5-1: config 0 has no interfaces? [ 316.407147][ T55] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 316.410888][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.417461][ T55] usb 5-1: config 0 descriptor?? [ 317.176760][ T5940] Bluetooth: hci1: command 0x0406 tx timeout [ 317.178637][ T5949] Bluetooth: hci3: command 0x0405 tx timeout [ 317.180577][ T64] Bluetooth: hci2: command 0x0406 tx timeout [ 317.946081][ T34] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 318.097413][ T34] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 318.100065][ T34] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 318.103209][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 318.107790][ T34] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 318.110807][ T34] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 318.113417][ T34] usb 7-1: Product: syz [ 318.114816][ T34] usb 7-1: Manufacturer: syz [ 318.116665][ T34] usb 7-1: SerialNumber: syz [ 318.120540][ T34] usb 7-1: config 0 descriptor?? [ 318.124710][ T34] hub 7-1:0.0: bad descriptor, ignoring hub [ 318.127299][ T34] hub 7-1:0.0: probe with driver hub failed with error -5 [ 318.130974][ T34] usb 7-1: selecting invalid altsetting 0 [ 318.341068][ T55] usb 5-1: USB disconnect, device number 6 [ 318.785900][ T6027] libceph: connect (1)[c::]:6789 error -101 [ 318.788340][ T6027] libceph: mon0 (1)[c::]:6789 connect error [ 318.813936][ T8417] ceph: No mds server is up or the cluster is laggy [ 318.832986][ T8421] 8021q: adding VLAN 0 to HW filter on device .` [ 318.835696][ T8421] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.872516][ T8421] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 319.033447][ T8425] geneve2: entered promiscuous mode [ 319.035810][ T8425] geneve2: entered allmulticast mode [ 319.041501][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.044948][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.048222][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.052538][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.624848][ T8431] overlayfs: missing 'lowerdir' [ 319.631001][ T8431] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 319.671726][ T8431] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 319.675010][ T8431] overlayfs: failed to look up (tracing) for ino (-66) [ 320.019386][ T8434] netlink: 20 bytes leftover after parsing attributes in process `syz.0.455'. [ 320.022854][ T8434] netlink: 28 bytes leftover after parsing attributes in process `syz.0.455'. [ 321.346434][ T55] usb 7-1: USB disconnect, device number 6 [ 321.455262][ T8447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.458'. [ 321.807862][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.810318][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.517283][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 322.517300][ T40] audit: type=1400 audit(1766100319.123:95): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=232822 pid=8452 comm="syz.2.460" [ 322.542052][ T8455] XFS (nullb0): Invalid superblock magic number [ 322.595946][ T8449] dlm: plock device version mismatch: kernel (1.2.0), user (458753.0.0) [ 324.466038][ T6224] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 324.630886][ T6224] usb 8-1: config 0 has no interfaces? [ 324.632699][ T6224] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 324.635601][ T6224] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.644015][ T6224] usb 8-1: config 0 descriptor?? [ 324.925449][ T8466] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 324.927525][ T8466] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 324.932327][ T8466] vhci_hcd vhci_hcd.0: Device attached [ 325.346160][ T8471] vhci_hcd: connection closed [ 325.346379][ T61] vhci_hcd vhci_hcd.2: stop threads [ 325.349735][ T61] vhci_hcd vhci_hcd.2: release socket [ 325.352661][ T61] vhci_hcd vhci_hcd.2: disconnect device [ 325.729969][ T6029] usb 42-1: enqueue for inactive port 0 [ 326.759328][ T6029] usb usb42-port1: attempt power cycle [ 326.984860][ T6224] usb 8-1: USB disconnect, device number 4 [ 327.100910][ T8490] geneve2: left promiscuous mode [ 327.103062][ T8490] geneve2: left allmulticast mode [ 327.107195][ T1144] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.110654][ T1144] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.114122][ T1144] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.136107][ T1144] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.386270][ T6224] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 327.547812][ T6224] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 327.548842][ T6029] usb usb42-port1: unable to enumerate USB device [ 327.551385][ T6224] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 327.557011][ T6224] usb 8-1: config 0 interface 0 has no altsetting 0 [ 327.562779][ T6224] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 327.567656][ T6224] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 327.571151][ T6224] usb 8-1: Product: syz [ 327.572962][ T6224] usb 8-1: Manufacturer: syz [ 327.575315][ T6224] usb 8-1: SerialNumber: syz [ 327.584735][ T6224] usb 8-1: config 0 descriptor?? [ 327.592628][ T6224] hub 8-1:0.0: bad descriptor, ignoring hub [ 327.595326][ T6224] hub 8-1:0.0: probe with driver hub failed with error -5 [ 327.601340][ T6224] usb 8-1: selecting invalid altsetting 0 [ 328.469726][ T64] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 330.427484][ T6224] usb 8-1: USB disconnect, device number 5 [ 330.572182][ T6027] kernel read not supported for file 517/task/518/auxv (pid: 6027 comm: kworker/1:4) [ 330.970848][ T8527] cgroup: Need name or subsystem set [ 335.082131][ T8542] netlink: 24 bytes leftover after parsing attributes in process `syz.0.479'. [ 335.465063][ T8541] netlink: 16 bytes leftover after parsing attributes in process `syz.0.479'. [ 336.763856][ T55] libceph: connect (1)[c::]:6789 error -101 [ 336.765927][ T55] libceph: mon0 (1)[c::]:6789 connect error [ 336.814762][ T8540] ceph: No mds server is up or the cluster is laggy [ 336.872966][ T8558] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 337.357461][ T8563] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 337.359594][ T8563] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 337.362573][ T8563] vhci_hcd vhci_hcd.0: Device attached [ 337.636148][ T6224] usb 42-1: SetAddress Request (62) to port 0 [ 337.638812][ T6224] usb 42-1: new SuperSpeed USB device number 62 using vhci_hcd [ 337.958447][ T8564] vhci_hcd: connection reset by peer [ 337.960506][ T1144] vhci_hcd vhci_hcd.2: stop threads [ 337.962234][ T1144] vhci_hcd vhci_hcd.2: release socket [ 337.964080][ T1144] vhci_hcd vhci_hcd.2: disconnect device [ 341.590249][ T8581] overlayfs: failed to resolve './file1': -2 [ 342.171793][ T8594] FAT-fs (sr0): bogus number of reserved sectors [ 342.174289][ T8594] FAT-fs (sr0): Can't find a valid FAT filesystem [ 342.618282][ T8596] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 342.620898][ T8596] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 342.646029][ T8596] vhci_hcd vhci_hcd.0: Device attached [ 342.896212][ T34] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 344.122426][ T34] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 344.141415][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 344.143952][ T34] usb 7-1: Product: syz [ 344.145260][ T34] usb 7-1: Manufacturer: syz [ 344.150850][ T34] usb 7-1: SerialNumber: syz [ 344.154488][ T34] usb 7-1: config 0 descriptor?? [ 344.159925][ T34] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 344.162549][ T34] dvb-usb: bulk message failed: -22 (2/0) [ 344.167648][ T34] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 344.170939][ T34] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 344.173520][ T34] usb 7-1: media controller created [ 344.182615][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 344.474137][ T8593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.478345][ T8593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.164760][ T8603] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 345.713640][ T8611] netfs: Couldn't get user pages (rc=-14) [ 346.587498][ T34] cxusb: set interface failed [ 346.589091][ T8597] vhci_hcd: connection reset by peer [ 346.590967][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 346.591414][ T1147] vhci_hcd vhci_hcd.2: stop threads [ 346.595113][ T1147] vhci_hcd vhci_hcd.2: release socket [ 346.601686][ T6224] usb 42-1: device descriptor read/8, error -110 [ 346.606334][ T1147] vhci_hcd vhci_hcd.2: disconnect device [ 346.688436][ T34] DVB: Unable to find symbol mt352_attach() [ 346.691110][ T34] dvb-usb: bulk message failed: -22 (5/0) [ 346.693481][ T34] zl10353_read_register: readreg error (reg=127, ret==-121) [ 346.697410][ T34] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 346.746048][ T34] rc_core: IR keymap rc-dvico-mce not found [ 346.748031][ T34] Registered IR keymap rc-empty [ 346.751452][ T34] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 346.755910][ T34] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input6 [ 346.763579][ T34] dvb-usb: schedule remote query interval to 100 msecs. [ 346.765919][ T34] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 347.219638][ T6051] dvb-usb: bulk message failed: -22 (1/0) [ 347.226955][ T34] usb 7-1: USB disconnect, device number 7 [ 347.427483][ T6224] usb usb42-port1: attempt power cycle [ 347.501301][ T34] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 347.834751][ T8636] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 348.007447][ T6224] usb usb42-port1: unable to enumerate USB device [ 348.086082][ T55] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 348.319349][ T8635] ALSA: mixer_oss: invalid OSS volume '' [ 348.331029][ T8635] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 348.333651][ T8635] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 348.337432][ T8635] vhci_hcd vhci_hcd.0: Device attached [ 348.458929][ T8642] vhci_hcd: connection closed [ 348.460236][ T6133] vhci_hcd vhci_hcd.2: stop threads [ 348.464734][ T6133] vhci_hcd vhci_hcd.2: release socket [ 348.470361][ T6133] vhci_hcd vhci_hcd.2: disconnect device [ 348.520800][ T141] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 348.606085][ T55] usb 8-1: Using ep0 maxpacket: 32 [ 348.610246][ T55] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 348.613124][ T55] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 348.617205][ T55] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 348.620759][ T55] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 348.623936][ T55] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 348.627057][ T55] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 348.630096][ T55] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 348.633126][ T55] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 348.637326][ T55] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 348.640193][ T55] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.644369][ T55] usb 8-1: config 0 descriptor?? [ 348.859481][ T55] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 350.776148][ T6224] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 350.926174][ T6224] usb 5-1: Using ep0 maxpacket: 32 [ 350.930187][ T6224] usb 5-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6 [ 350.933225][ T6224] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.937723][ T6224] usb 5-1: config 0 descriptor?? [ 350.942110][ T6224] usb 5-1: dvb_usb_v2: found a 'Anysee' in warm state [ 350.944837][ T6224] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 350.947936][ T6224] dvb_usb_anysee 5-1:0.0: probe with driver dvb_usb_anysee failed with error -22 [ 351.006133][ T5949] Bluetooth: hci4: command 0x1003 tx timeout [ 351.006161][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 351.108763][ T8656] IPVS: length: 228 != 24 [ 351.113723][ T6029] usb 8-1: USB disconnect, device number 6 [ 351.117984][ T6029] usblp0: removed [ 351.376053][ T8654] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 351.383814][ T8660] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 351.388140][ T8654] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 351.397611][ T8660] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 351.402158][ T8654] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 351.404725][ T8654] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 351.434322][ T8654] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 351.437236][ T8654] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 352.254151][ T55] usb 5-1: USB disconnect, device number 7 [ 353.010892][ T8684] cgroup: Need name or subsystem set [ 353.187702][ T8683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.508'. [ 356.349469][ T40] audit: type=1800 audit(1766100352.873:96): pid=8706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.512" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 356.751017][ T8721] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 356.836220][ T6224] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 356.990413][ T6224] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 356.994897][ T6224] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 357.001549][ T6224] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 357.005301][ T6224] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.011396][ T34] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 357.012547][ T8724] netlink: 'syz.0.523': attribute type 16 has an invalid length. [ 357.017752][ T8724] netlink: 'syz.0.523': attribute type 17 has an invalid length. [ 357.108484][ T8718] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 357.175004][ T6224] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 357.181782][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 357.202109][ T34] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 357.211220][ T8724] 8021q: adding VLAN 0 to HW filter on device .` [ 357.218861][ T34] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 357.225626][ T8724] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.242644][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 357.309466][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 357.324298][ T34] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 357.344311][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 357.349629][ T8724] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 357.382391][ T34] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 357.415576][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 357.434541][ T34] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 357.437691][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.448708][ T34] usb 7-1: config 0 descriptor?? [ 357.771295][ T34] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 358.214819][ T6224] usb 8-1: USB disconnect, device number 7 [ 359.372523][ T8751] netlink: 24 bytes leftover after parsing attributes in process `syz.3.520'. [ 359.510425][ T8753] netlink: 16 bytes leftover after parsing attributes in process `syz.3.520'. [ 359.900984][ T6027] usb 7-1: USB disconnect, device number 8 [ 359.907358][ T6027] usblp0: removed [ 359.982824][ T8763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.522'. [ 360.767210][ T40] audit: type=1800 audit(1766100357.343:97): pid=8770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.525" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 361.116278][ T8779] 9pnet_virtio: no channels available for device syz [ 362.216181][ T8788] x_tables: duplicate underflow at hook 1 [ 362.228274][ T8786] hub 8-0:1.0: USB hub found [ 362.231098][ T8786] hub 8-0:1.0: 1 port detected [ 362.962706][ T8798] netlink: 20 bytes leftover after parsing attributes in process `syz.2.538'. [ 362.966812][ T8798] netlink: 28 bytes leftover after parsing attributes in process `syz.2.538'. [ 364.245569][ T8807] ceph: No mds server is up or the cluster is laggy [ 364.274276][ T141] libceph: connect (1)[c::]:6789 error -101 [ 364.276620][ T141] libceph: mon0 (1)[c::]:6789 connect error [ 364.763896][ T8820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.532'. [ 365.120645][ T8825] lo speed is unknown, defaulting to 1000 [ 365.124777][ T8825] lo speed is unknown, defaulting to 1000 [ 365.130486][ T8825] lo speed is unknown, defaulting to 1000 [ 365.134212][ T8825] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 365.146438][ T8825] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 365.162940][ T8825] lo speed is unknown, defaulting to 1000 [ 365.165567][ T8825] lo speed is unknown, defaulting to 1000 [ 365.174010][ T8825] lo speed is unknown, defaulting to 1000 [ 365.181552][ T8825] lo speed is unknown, defaulting to 1000 [ 365.193127][ T8828] syz_tun: entered allmulticast mode [ 365.222617][ T8826] syz_tun: left allmulticast mode [ 369.006099][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 369.006155][ T5949] Bluetooth: hci4: command 0x1003 tx timeout [ 369.396266][ T8882] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 369.398445][ T8882] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 369.459997][ T8882] vhci_hcd vhci_hcd.0: Device attached [ 369.737141][ T34] usb 42-1: SetAddress Request (66) to port 0 [ 369.739782][ T34] usb 42-1: new SuperSpeed USB device number 66 using vhci_hcd [ 371.380516][ T8883] vhci_hcd: connection reset by peer [ 371.386202][ T6126] vhci_hcd vhci_hcd.2: stop threads [ 371.387896][ T6126] vhci_hcd vhci_hcd.2: release socket [ 371.393705][ T6126] vhci_hcd vhci_hcd.2: disconnect device [ 374.846183][ T34] usb 42-1: device descriptor read/8, error -110 [ 375.246625][ T34] usb usb42-port1: attempt power cycle [ 375.821813][ T34] usb usb42-port1: unable to enumerate USB device [ 376.846115][ T5949] Bluetooth: hci4: command 0x1003 tx timeout [ 376.849899][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 377.408290][ T8947] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 378.213391][ T8956] netlink: 20 bytes leftover after parsing attributes in process `syz.1.566'. [ 378.217340][ T8956] netlink: 28 bytes leftover after parsing attributes in process `syz.1.566'. [ 380.703360][ T8967] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 381.781633][ T8980] xt_CT: You must specify a L4 protocol and not use inversions on it [ 382.470051][ T8989] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 382.474682][ T8989] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 382.754976][ T8989] vhci_hcd vhci_hcd.0: Device attached [ 383.026104][ T34] usb 38-1: SetAddress Request (46) to port 0 [ 383.030915][ T34] usb 38-1: new SuperSpeed USB device number 46 using vhci_hcd [ 383.166835][ T8990] vhci_hcd: connection reset by peer [ 383.168924][ T6133] vhci_hcd vhci_hcd.0: stop threads [ 383.170860][ T6133] vhci_hcd vhci_hcd.0: release socket [ 383.173883][ T6133] vhci_hcd vhci_hcd.0: disconnect device [ 383.249832][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.252619][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.272310][ T8995] bridge0: port 3(erspan0) entered disabled state [ 384.164784][ T8999] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 384.167698][ T8999] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 384.172476][ T8999] vhci_hcd vhci_hcd.0: Device attached [ 384.226699][ T8999] kAFS: No cell specified [ 384.312228][ T9004] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 384.436321][ T6141] usb 44-1: SetAddress Request (37) to port 0 [ 384.438621][ T6141] usb 44-1: new SuperSpeed USB device number 37 using vhci_hcd [ 384.904558][ T9000] vhci_hcd: connection reset by peer [ 384.908055][ T1179] vhci_hcd vhci_hcd.3: stop threads [ 384.910333][ T1179] vhci_hcd vhci_hcd.3: release socket [ 384.912466][ T1179] vhci_hcd vhci_hcd.3: disconnect device [ 385.074711][ T9006] comedi comedi4: bad chanlist[0]=0x00000009 chan=9 range length=2 [ 385.782903][ T9020] netlink: 20 bytes leftover after parsing attributes in process `syz.3.579'. [ 385.787366][ T9020] netlink: 28 bytes leftover after parsing attributes in process `syz.3.579'. [ 385.930574][ T9019] x_tables: duplicate underflow at hook 1 [ 385.945802][ T9019] hub 8-0:1.0: USB hub found [ 385.958677][ T9019] hub 8-0:1.0: 1 port detected [ 386.938954][ T141] libceph: connect (1)[c::]:6789 error -101 [ 386.941557][ T141] libceph: mon0 (1)[c::]:6789 connect error [ 387.166262][ T9041] netlink: 20 bytes leftover after parsing attributes in process `syz.0.592'. [ 387.169384][ T9041] netlink: 28 bytes leftover after parsing attributes in process `syz.0.592'. [ 387.175529][ T9037] ceph: No mds server is up or the cluster is laggy [ 387.842620][ T40] audit: type=1800 audit(1766100384.443:98): pid=9035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.583" name="cpuset.memory_pressure_enabled" dev="9p" ino=71827845 res=0 errno=0 [ 387.858258][ T141] libceph: connect (1)[c::]:6789 error -101 [ 387.863404][ T141] libceph: mon0 (1)[c::]:6789 connect error [ 388.138377][ T34] usb 38-1: device descriptor read/8, error -110 [ 389.129947][ T9066] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 389.486744][ T6141] usb 44-1: device descriptor read/8, error -110 [ 389.879179][ T6141] usb usb44-port1: attempt power cycle [ 390.447745][ T6141] usb usb44-port1: unable to enumerate USB device [ 391.265269][ T9076] mkiss: ax0: crc mode is auto. [ 391.796682][ T34] usb usb38-port1: attempt power cycle [ 392.172397][ T9083] dlm: plock device version mismatch: kernel (1.2.0), user (458753.0.0) [ 392.356489][ T34] usb usb38-port1: unable to enumerate USB device [ 393.721181][ T9103] netlink: 24 bytes leftover after parsing attributes in process `syz.1.596'. [ 393.795651][ T9103] netlink: 16 bytes leftover after parsing attributes in process `syz.1.596'. [ 394.416475][ T9099] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 394.418563][ T9099] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 394.422968][ T9099] vhci_hcd vhci_hcd.0: Device attached [ 394.493996][ T9099] netlink: 20 bytes leftover after parsing attributes in process `syz.0.603'. [ 394.746088][ T9] usb 38-1: SetAddress Request (50) to port 0 [ 394.748095][ T9] usb 38-1: new SuperSpeed USB device number 50 using vhci_hcd [ 395.382544][ T9108] vhci_hcd: connection reset by peer [ 395.425269][ T13] vhci_hcd vhci_hcd.0: stop threads [ 395.434932][ T13] vhci_hcd vhci_hcd.0: release socket [ 395.457247][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 396.817772][ T9134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.605'. [ 397.945348][ T9151] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 397.947466][ T9151] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 397.961764][ T9151] vhci_hcd vhci_hcd.0: Device attached [ 398.226207][ T6224] usb 40-1: SetAddress Request (42) to port 0 [ 398.228885][ T6224] usb 40-1: new SuperSpeed USB device number 42 using vhci_hcd [ 398.426490][ T9160] netlink: 24 bytes leftover after parsing attributes in process `syz.2.610'. [ 398.569300][ T9156] netlink: 16 bytes leftover after parsing attributes in process `syz.2.610'. [ 399.083065][ T9152] vhci_hcd: connection reset by peer [ 399.085221][ T1179] vhci_hcd vhci_hcd.1: stop threads [ 399.087164][ T1179] vhci_hcd vhci_hcd.1: release socket [ 399.088936][ T1179] vhci_hcd vhci_hcd.1: disconnect device [ 399.432259][ T9171] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 4Ï€!FõïVl‘uc'f`å”Þ†’;œ1µ [ 399.835106][ T9] usb 38-1: device descriptor read/8, error -110 [ 403.175727][ T9] usb usb38-port1: attempt power cycle [ 403.330527][ T6224] usb 40-1: device descriptor read/8, error -110 [ 403.333792][ T9197] bridge0: port 1(erspan0) entered blocking state [ 403.336162][ T9197] bridge0: port 1(erspan0) entered disabled state [ 403.338361][ T9197] erspan0: entered allmulticast mode [ 403.344381][ T9197] erspan0: entered promiscuous mode [ 403.405539][ T9197] erspan0: left allmulticast mode [ 403.407566][ T9197] erspan0: left promiscuous mode [ 403.409648][ T9197] bridge0: port 1(erspan0) entered disabled state [ 403.436937][ T9202] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 403.440056][ T9202] block device autoloading is deprecated and will be removed. [ 403.597036][ T9206] netlink: 36 bytes leftover after parsing attributes in process `syz.3.619'. [ 403.704059][ T9212] netlink: 24 bytes leftover after parsing attributes in process `syz.2.621'. [ 403.779003][ T9213] netlink: 16 bytes leftover after parsing attributes in process `syz.2.621'. [ 403.920075][ T9] usb usb38-port1: unable to enumerate USB device [ 404.377767][ T9217] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 404.474982][ T6224] usb usb40-port1: attempt power cycle [ 404.748266][ T9224] ptrace attach of ""[9225] was attempted by "/syz-executor exec"[9224] [ 404.790983][ T9227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.624'. [ 404.808646][ T9224] hub 8-0:1.0: USB hub found [ 404.818613][ T9224] hub 8-0:1.0: 1 port detected [ 405.081517][ T6224] usb usb40-port1: unable to enumerate USB device [ 405.603520][ T9235] netlink: 'syz.1.626': attribute type 4 has an invalid length. [ 405.995234][ T9239] autofs4:pid:9239:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 405.999858][ T9239] autofs4:pid:9239:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 406.040414][ T9242] netlink: 40 bytes leftover after parsing attributes in process `syz.1.627'. [ 406.043631][ T9242] hsr_slave_1: entered allmulticast mode [ 408.946795][ T9257] xt_CT: You must specify a L4 protocol and not use inversions on it [ 409.152973][ T9261] netlink: 24 bytes leftover after parsing attributes in process `syz.1.632'. [ 409.227390][ T9263] netlink: 16 bytes leftover after parsing attributes in process `syz.1.632'. [ 409.841566][ T9267] ntfs3(nullb0): Primary boot signature is not NTFS. [ 409.847617][ T9267] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 410.312459][ T9273] mkiss: ax0: crc mode is auto. [ 412.144859][ T9293] overlayfs: overlapping lowerdir path [ 412.762179][ T9301] mkiss: ax0: crc mode is auto. [ 412.973762][ T9303] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 412.976646][ T9303] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 412.980478][ T9303] vhci_hcd vhci_hcd.0: Device attached [ 412.991917][ T9303] netlink: 20 bytes leftover after parsing attributes in process `syz.1.638'. [ 413.276101][ T6027] usb 40-1: SetAddress Request (46) to port 0 [ 413.278144][ T6027] usb 40-1: new SuperSpeed USB device number 46 using vhci_hcd [ 413.885126][ T9314] siw: device registration error -23 [ 413.941447][ T9312] sysfs: cannot create duplicate filename '/class/ieee80211/4Ï€!FõïVl‘uc'f`å”Þ†’;œ1µx%ñ†‹M¹Fœ-ôÁõîI' [ 413.945558][ T9312] CPU: 2 UID: 0 PID: 9312 Comm: syz.0.640 Tainted: G L syzkaller #0 PREEMPT(full) [ 413.945577][ T9312] Tainted: [L]=SOFTLOCKUP [ 413.945581][ T9312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 413.945588][ T9312] Call Trace: [ 413.945593][ T9312] [ 413.945598][ T9312] dump_stack_lvl+0x16c/0x1f0 [ 413.945618][ T9312] sysfs_warn_dup+0x7f/0xa0 [ 413.945633][ T9312] sysfs_do_create_link_sd+0x124/0x140 [ 413.945647][ T9312] sysfs_create_link+0x61/0xc0 [ 413.945659][ T9312] device_add+0x652/0x1980 [ 413.945675][ T9312] ? __pfx_device_add+0x10/0x10 [ 413.945688][ T9312] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 413.945707][ T9312] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 413.945725][ T9312] wiphy_register+0x1ea1/0x2cc0 [ 413.945735][ T9312] ? __rtnl_unlock+0x68/0xf0 [ 413.945749][ T9312] ? napi_enable_locked+0x650/0xa00 [ 413.945765][ T9312] ? __pfx_wiphy_register+0x10/0x10 [ 413.945774][ T9312] ? __asan_memset+0x23/0x50 [ 413.945791][ T9312] ? ieee80211_init_rate_ctrl_alg+0x125/0x680 [ 413.945810][ T9312] ieee80211_register_hw+0x2bb2/0x4160 [ 413.945825][ T9312] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 413.945835][ T9312] ? __pfx___debug_object_init+0x10/0x10 [ 413.945853][ T9312] ? find_held_lock+0x2b/0x80 [ 413.945867][ T9312] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 413.945882][ T9312] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 413.945896][ T9312] ? __hrtimer_setup+0x176/0x280 [ 413.945910][ T9312] mac80211_hwsim_new_radio+0x3323/0x5150 [ 413.945929][ T9312] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 413.945942][ T9312] ? __asan_memcpy+0x3c/0x60 [ 413.945972][ T9312] hwsim_new_radio_nl+0xba2/0x1330 [ 413.945986][ T9312] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 413.946003][ T9312] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 413.946022][ T9312] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 413.946043][ T9312] genl_family_rcv_msg_doit+0x209/0x2f0 [ 413.946061][ T9312] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 413.946078][ T9312] ? genl_get_cmd+0x194/0x580 [ 413.946096][ T9312] ? bpf_lsm_capable+0x9/0x10 [ 413.946109][ T9312] ? security_capable+0x7e/0x260 [ 413.946125][ T9312] ? ns_capable+0xd7/0x110 [ 413.946146][ T9312] genl_rcv_msg+0x55c/0x800 [ 413.946158][ T9312] ? __pfx_genl_rcv_msg+0x10/0x10 [ 413.946168][ T9312] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 413.946183][ T9312] ? __lock_acquire+0x436/0x2890 [ 413.946196][ T9312] netlink_rcv_skb+0x158/0x420 [ 413.946211][ T9312] ? __pfx_genl_rcv_msg+0x10/0x10 [ 413.946221][ T9312] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 413.946243][ T9312] ? netlink_deliver_tap+0x1ae/0xd30 [ 413.946264][ T9312] genl_rcv+0x28/0x40 [ 413.946282][ T9312] netlink_unicast+0x5aa/0x870 [ 413.946306][ T9312] ? __pfx_netlink_unicast+0x10/0x10 [ 413.946335][ T9312] netlink_sendmsg+0x8c8/0xdd0 [ 413.946362][ T9312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.946388][ T9312] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 413.946418][ T9312] ____sys_sendmsg+0xa5d/0xc30 [ 413.946447][ T9312] ? __pfx_____sys_sendmsg+0x10/0x10 [ 413.946470][ T9312] ? get_compat_msghdr+0x11a/0x170 [ 413.946495][ T9312] ? __pfx_futex_wake_mark+0x10/0x10 [ 413.946521][ T9312] ___sys_sendmsg+0x134/0x1d0 [ 413.946545][ T9312] ? __pfx____sys_sendmsg+0x10/0x10 [ 413.946566][ T9312] ? futex_private_hash_put+0x160/0x1b0 [ 413.946597][ T9312] ? find_held_lock+0x2b/0x80 [ 413.946636][ T9312] __sys_sendmsg+0x16d/0x220 [ 413.946658][ T9312] ? __pfx___sys_sendmsg+0x10/0x10 [ 413.946679][ T9312] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 413.946717][ T9312] __do_fast_syscall_32+0xe8/0x680 [ 413.946747][ T9312] do_fast_syscall_32+0x32/0x80 [ 413.946764][ T9312] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 413.946785][ T9312] RIP: 0023:0xf703d579 [ 413.946799][ T9312] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 413.946815][ T9312] RSP: 002b:00000000f540c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 413.946831][ T9312] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040 [ 413.946842][ T9312] RDX: 0000000000000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 413.946853][ T9312] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 413.946864][ T9312] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 413.946874][ T9312] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 413.946899][ T9312] [ 414.105925][ T9304] vhci_hcd: connection reset by peer [ 414.108037][ T1179] vhci_hcd vhci_hcd.1: stop threads [ 414.110210][ T1179] vhci_hcd vhci_hcd.1: release socket [ 414.118812][ T1179] vhci_hcd vhci_hcd.1: disconnect device [ 414.760742][ T9323] Cannot find del_set index 1 as target [ 416.218016][ T9330] ntfs3(nullb0): Primary boot signature is not NTFS. [ 416.221513][ T9330] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 416.839739][ T9347] xt_CT: You must specify a L4 protocol and not use inversions on it [ 418.425835][ T6027] usb 40-1: device descriptor read/8, error -110 [ 418.886536][ T9365] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 419.105389][ T6027] usb usb40-port1: attempt power cycle [ 419.623218][ T9373] siw: device registration error -23 [ 420.702548][ T6027] usb usb40-port1: unable to enumerate USB device [ 421.151108][ T9384] x_tables: duplicate underflow at hook 1 [ 421.155884][ T9384] hub 8-0:1.0: USB hub found [ 421.216802][ T9384] hub 8-0:1.0: 1 port detected [ 421.546559][ T9398] netlink: 36 bytes leftover after parsing attributes in process `syz.0.659'. [ 422.434879][ T9409] ubi31: attaching mtd0 [ 422.440032][ T9409] ubi31: scanning is finished [ 422.474369][ T9409] ubi31: empty MTD device detected [ 422.481156][ T40] audit: type=1804 audit(1766100419.083:99): pid=9396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.656" name="/newroot/167/file0/file0" dev="9p" ino=71827763 res=1 errno=0 [ 422.686637][ T9409] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 422.689347][ T9409] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 422.691735][ T9409] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 422.694219][ T9409] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 422.697156][ T9409] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 422.707358][ T9409] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 422.711547][ T9409] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2535357069 [ 422.715013][ T9409] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 422.727566][ T9412] ubi31: background thread "ubi_bgt31d" started, PID 9412 [ 423.240925][ T9424] ntfs3(nullb0): Primary boot signature is not NTFS. [ 423.243965][ T9424] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 423.412440][ T9425] mkiss: ax0: crc mode is auto. [ 423.606044][ T40] audit: type=1326 audit(1766100420.163:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.1.663" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x0 [ 423.961951][ T9427] lo speed is unknown, defaulting to 1000 [ 425.262101][ T9444] xt_CT: You must specify a L4 protocol and not use inversions on it [ 427.358591][ T9462] ubi: mtd0 is already attached to ubi31 [ 427.826509][ T9466] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 427.829414][ T9466] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 427.838387][ T9466] vhci_hcd vhci_hcd.0: Device attached [ 428.116117][ T9] usb 42-1: SetAddress Request (70) to port 0 [ 428.118683][ T9] usb 42-1: new SuperSpeed USB device number 70 using vhci_hcd [ 428.676113][ T9469] vhci_hcd: connection reset by peer [ 428.686133][ T1179] vhci_hcd vhci_hcd.2: stop threads [ 428.687830][ T1179] vhci_hcd vhci_hcd.2: release socket [ 428.689595][ T1179] vhci_hcd vhci_hcd.2: disconnect device [ 429.111083][ T9491] mkiss: ax0: crc mode is auto. [ 429.815325][ T9498] netlink: 16 bytes leftover after parsing attributes in process `syz.0.679'. [ 430.691732][ T9503] omfs: Invalid superblock (0) [ 431.290082][ T9514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.681'. [ 431.344327][ T9517] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 431.346840][ T9517] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 431.355349][ T9517] vhci_hcd vhci_hcd.0: Device attached [ 431.606202][ T6029] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 431.617956][ T9525] netlink: 40 bytes leftover after parsing attributes in process `syz.0.682'. [ 431.626498][ T9525] hsr_slave_1: entered allmulticast mode [ 431.900566][ T9518] vhci_hcd: connection reset by peer [ 431.903205][ T1215] vhci_hcd vhci_hcd.1: stop threads [ 431.905429][ T1215] vhci_hcd vhci_hcd.1: release socket [ 431.908284][ T1215] vhci_hcd vhci_hcd.1: disconnect device [ 432.137736][ T9533] xt_CT: You must specify a L4 protocol and not use inversions on it [ 432.326605][ T9535] hsr_slave_1: left allmulticast mode [ 433.176124][ T9] usb 42-1: device descriptor read/8, error -110 [ 433.576971][ T9] usb usb42-port1: attempt power cycle [ 434.137067][ T9] usb usb42-port1: unable to enumerate USB device [ 436.756183][ T6029] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 437.253361][ T9562] netlink: 16 bytes leftover after parsing attributes in process `syz.3.690'. [ 438.606058][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 438.672222][ T9576] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 438.674477][ T9576] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 438.689841][ T9576] vhci_hcd vhci_hcd.0: Device attached [ 438.966107][ T6029] usb 42-1: SetAddress Request (74) to port 0 [ 438.968113][ T6029] usb 42-1: new SuperSpeed USB device number 74 using vhci_hcd [ 438.974657][ T9584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.694'. [ 439.099454][ T9588] autofs4:pid:9588:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 439.104015][ T9588] autofs4:pid:9588:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 439.222594][ T9578] vhci_hcd: connection reset by peer [ 439.225432][ T1215] vhci_hcd vhci_hcd.2: stop threads [ 439.244333][ T1215] vhci_hcd vhci_hcd.2: release socket [ 439.251803][ T1215] vhci_hcd vhci_hcd.2: disconnect device [ 440.061016][ T9599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.699'. [ 443.287766][ T40] audit: type=1800 audit(1766100439.893:101): pid=9631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.705" name="file0" dev="9p" ino=71827763 res=0 errno=0 [ 444.046124][ T6029] usb 42-1: device descriptor read/8, error -110 [ 444.436759][ T6029] usb usb42-port1: attempt power cycle [ 444.689397][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.692287][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.016506][ T6029] usb usb42-port1: unable to enumerate USB device [ 445.086064][ T5949] Bluetooth: hci4: command 0x1003 tx timeout [ 445.086114][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 445.202226][ T9641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.708'. [ 445.422866][ T9648] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 445.425454][ T9648] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 445.429388][ T9648] vhci_hcd vhci_hcd.0: Device attached [ 445.723081][ T9653] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 445.725252][ T9653] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 445.728562][ T9648] wg2 speed is unknown, defaulting to 1000 [ 445.732863][ T9653] vhci_hcd vhci_hcd.0: Device attached [ 445.739780][ T9648] wg2 speed is unknown, defaulting to 1000 [ 445.747426][ T9648] wg2 speed is unknown, defaulting to 1000 [ 445.866106][ T6224] usb 38-1: SetAddress Request (54) to port 0 [ 445.868893][ T6224] usb 38-1: new SuperSpeed USB device number 54 using vhci_hcd [ 446.018144][ T6100] usb 40-1: SetAddress Request (50) to port 0 [ 446.021538][ T6100] usb 40-1: new SuperSpeed USB device number 50 using vhci_hcd [ 446.329550][ T9666] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 446.331681][ T9666] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 446.339555][ T9666] vhci_hcd vhci_hcd.0: Device attached [ 446.586544][ T55] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 447.254122][ T9654] vhci_hcd: connection reset by peer [ 447.256613][ T6133] vhci_hcd vhci_hcd.1: stop threads [ 447.258384][ T6133] vhci_hcd vhci_hcd.1: release socket [ 447.260324][ T6133] vhci_hcd vhci_hcd.1: disconnect device [ 447.627901][ T9667] vhci_hcd: connection reset by peer [ 447.636299][ T6133] vhci_hcd vhci_hcd.3: stop threads [ 447.638064][ T6133] vhci_hcd vhci_hcd.3: release socket [ 447.639861][ T6133] vhci_hcd vhci_hcd.3: disconnect device [ 447.665643][ T9648] infiniband syz2: set down [ 447.667883][ T6027] wg2 speed is unknown, defaulting to 1000 [ 447.677914][ T9649] vhci_hcd: connection reset by peer [ 447.681265][ T9648] infiniband syz2: added wg2 [ 447.684261][ T6133] vhci_hcd vhci_hcd.0: stop threads [ 447.686293][ T6133] vhci_hcd vhci_hcd.0: release socket [ 447.688300][ T6133] vhci_hcd vhci_hcd.0: disconnect device [ 447.701614][ T9648] RDS/IB: syz2: added [ 447.703277][ T9648] smc: adding ib device syz2 with port count 1 [ 447.705799][ T9648] smc: ib device syz2 port 1 has no pnetid [ 447.708376][ T6027] wg2 speed is unknown, defaulting to 1000 [ 447.716218][ T9648] wg2 speed is unknown, defaulting to 1000 [ 447.895039][ T9648] wg2 speed is unknown, defaulting to 1000 [ 448.067504][ T9648] wg2 speed is unknown, defaulting to 1000 [ 449.107021][ T9648] wg2 speed is unknown, defaulting to 1000 [ 449.295912][ T9682] sysfs: cannot create duplicate filename '/class/ieee80211/4Ï€!FõïVl‘uc'f`å”Þ†’;œ1µx%ñ†‹M¹Fœ-ôÁõîI' [ 449.300658][ T9682] CPU: 2 UID: 0 PID: 9682 Comm: syz.1.714 Tainted: G L syzkaller #0 PREEMPT(full) [ 449.300686][ T9682] Tainted: [L]=SOFTLOCKUP [ 449.300691][ T9682] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 449.300700][ T9682] Call Trace: [ 449.300706][ T9682] [ 449.300711][ T9682] dump_stack_lvl+0x16c/0x1f0 [ 449.300736][ T9682] sysfs_warn_dup+0x7f/0xa0 [ 449.300749][ T9682] sysfs_do_create_link_sd+0x124/0x140 [ 449.300763][ T9682] sysfs_create_link+0x61/0xc0 [ 449.300780][ T9682] device_add+0x652/0x1980 [ 449.300804][ T9682] ? __pfx_device_add+0x10/0x10 [ 449.300825][ T9682] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 449.300852][ T9682] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 449.300882][ T9682] wiphy_register+0x1ea1/0x2cc0 [ 449.300897][ T9682] ? __rtnl_unlock+0x68/0xf0 [ 449.300922][ T9682] ? napi_enable_locked+0x650/0xa00 [ 449.300948][ T9682] ? __pfx_wiphy_register+0x10/0x10 [ 449.300963][ T9682] ? __asan_memset+0x23/0x50 [ 449.300991][ T9682] ? ieee80211_init_rate_ctrl_alg+0x125/0x680 [ 449.301023][ T9682] ieee80211_register_hw+0x2bb2/0x4160 [ 449.301050][ T9682] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 449.301070][ T9682] ? __pfx___debug_object_init+0x10/0x10 [ 449.301101][ T9682] ? find_held_lock+0x2b/0x80 [ 449.301124][ T9682] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 449.301149][ T9682] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 449.301174][ T9682] ? __hrtimer_setup+0x176/0x280 [ 449.301197][ T9682] mac80211_hwsim_new_radio+0x3323/0x5150 [ 449.301231][ T9682] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 449.301252][ T9682] ? __asan_memcpy+0x3c/0x60 [ 449.301276][ T9682] hwsim_new_radio_nl+0xba2/0x1330 [ 449.301297][ T9682] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 449.301324][ T9682] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 449.301352][ T9682] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 449.301386][ T9682] genl_family_rcv_msg_doit+0x209/0x2f0 [ 449.301415][ T9682] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 449.301442][ T9682] ? genl_get_cmd+0x194/0x580 [ 449.301472][ T9682] ? bpf_lsm_capable+0x9/0x10 [ 449.301494][ T9682] ? security_capable+0x7e/0x260 [ 449.301522][ T9682] ? ns_capable+0xd7/0x110 [ 449.301546][ T9682] genl_rcv_msg+0x55c/0x800 [ 449.301564][ T9682] ? __pfx_genl_rcv_msg+0x10/0x10 [ 449.301580][ T9682] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 449.301601][ T9682] ? __lock_acquire+0x436/0x2890 [ 449.301621][ T9682] netlink_rcv_skb+0x158/0x420 [ 449.301644][ T9682] ? __pfx_genl_rcv_msg+0x10/0x10 [ 449.301661][ T9682] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 449.301695][ T9682] ? netlink_deliver_tap+0x1ae/0xd30 [ 449.301722][ T9682] genl_rcv+0x28/0x40 [ 449.301751][ T9682] netlink_unicast+0x5aa/0x870 [ 449.301778][ T9682] ? __pfx_netlink_unicast+0x10/0x10 [ 449.301812][ T9682] netlink_sendmsg+0x8c8/0xdd0 [ 449.301841][ T9682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.301868][ T9682] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 449.301901][ T9682] ____sys_sendmsg+0xa5d/0xc30 [ 449.301932][ T9682] ? __pfx_____sys_sendmsg+0x10/0x10 [ 449.301955][ T9682] ? get_compat_msghdr+0x11a/0x170 [ 449.301978][ T9682] ? __pfx_futex_wake_mark+0x10/0x10 [ 449.302005][ T9682] ___sys_sendmsg+0x134/0x1d0 [ 449.302028][ T9682] ? __pfx____sys_sendmsg+0x10/0x10 [ 449.302049][ T9682] ? futex_private_hash_put+0x160/0x1b0 [ 449.302077][ T9682] ? find_held_lock+0x2b/0x80 [ 449.302115][ T9682] __sys_sendmsg+0x16d/0x220 [ 449.302137][ T9682] ? __pfx___sys_sendmsg+0x10/0x10 [ 449.302158][ T9682] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 449.302188][ T9682] ? irq_work_single+0x13a/0x260 [ 449.302219][ T9682] __do_fast_syscall_32+0xe8/0x680 [ 449.302249][ T9682] do_fast_syscall_32+0x32/0x80 [ 449.302264][ T9682] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 449.302285][ T9682] RIP: 0023:0xf702d579 [ 449.302297][ T9682] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 449.302315][ T9682] RSP: 002b:00000000f53fc55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 449.302331][ T9682] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040 [ 449.302342][ T9682] RDX: 0000000000000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 449.302352][ T9682] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 449.302362][ T9682] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 449.302371][ T9682] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 449.302395][ T9682] [ 449.972030][ T9691] xt_CT: You must specify a L4 protocol and not use inversions on it [ 450.506052][ T9700] netlink: 'syz.2.719': attribute type 4 has an invalid length. [ 450.963993][ T6224] usb 38-1: device descriptor read/8, error -110 [ 450.985842][ T9708] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 450.988003][ T9708] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 451.000229][ T9708] vhci_hcd vhci_hcd.0: Device attached [ 451.246066][ T6051] usb 41-1: new high-speed USB device number 3 using vhci_hcd [ 451.356993][ T6224] usb usb38-port1: attempt power cycle [ 451.484501][ T9711] lo speed is unknown, defaulting to 1000 [ 451.491507][ T9711] wg2 speed is unknown, defaulting to 1000 [ 451.856791][ T40] audit: type=1326 audit(1766100448.183:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9701 comm="syz.0.721" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x0 [ 451.917193][ T6224] usb usb38-port1: unable to enumerate USB device [ 451.964318][ T6100] usb 40-1: device descriptor read/8, error -110 [ 452.036124][ T55] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 452.286175][ T5949] Bluetooth: hci4: command 0x1003 tx timeout [ 452.288926][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 452.320984][ T40] audit: type=1804 audit(1766100448.923:103): pid=9708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.720" name="/newroot/182/file0/file1" dev="overlay" ino=1020 res=1 errno=0 [ 452.376900][ T6100] usb usb40-port1: attempt power cycle [ 452.534143][ T9709] vhci_hcd: connection reset by peer [ 452.536931][ T6133] vhci_hcd vhci_hcd.2: stop threads [ 452.538883][ T6133] vhci_hcd vhci_hcd.2: release socket [ 452.540762][ T6133] vhci_hcd vhci_hcd.2: disconnect device [ 452.956786][ T6100] usb usb40-port1: unable to enumerate USB device [ 452.986386][ T9722] input: syz1 as /devices/virtual/input/input8 [ 456.356101][ T6051] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 457.505306][ T9737] lo speed is unknown, defaulting to 1000 [ 457.507990][ T9737] wg2 speed is unknown, defaulting to 1000 [ 458.373936][ T9748] netlink: 'syz.3.729': attribute type 4 has an invalid length. [ 458.756318][ T9751] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 458.758611][ T9751] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 458.761334][ T9751] vhci_hcd vhci_hcd.0: Device attached [ 459.066225][ T6051] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 459.509290][ T9752] vhci_hcd: connection reset by peer [ 459.512279][ T1144] vhci_hcd vhci_hcd.0: stop threads [ 459.514274][ T1144] vhci_hcd vhci_hcd.0: release socket [ 459.527876][ T1144] vhci_hcd vhci_hcd.0: disconnect device [ 459.846205][ T9767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.732'. [ 461.400242][ T9774] netlink: 'syz.1.733': attribute type 4 has an invalid length. [ 461.405709][ T9774] netlink: 'syz.1.733': attribute type 4 has an invalid length. [ 461.413001][ T6141] lo speed is unknown, defaulting to 1000 [ 461.415243][ T6141] syz0: Port: 1 Link ACTIVE [ 461.486059][ T6100] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 461.646067][ T6100] usb 7-1: Using ep0 maxpacket: 32 [ 461.812302][ T141] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 461.819625][ T6100] usb 7-1: unable to get BOS descriptor or descriptor too short [ 461.822715][ T6100] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 461.829306][ T6100] usb 7-1: can't read configurations, error -71 [ 461.931354][ T9792] netlink: 3 bytes leftover after parsing attributes in process `syz.1.738'. [ 461.962108][ T9792] batadv1: entered allmulticast mode [ 461.975106][ T141] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 461.978591][ T141] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 461.982661][ T141] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 461.986174][ T141] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.994310][ T141] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 461.998093][ T141] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 462.001367][ T141] usb 8-1: Product: syz [ 462.003160][ T141] usb 8-1: Manufacturer: syz [ 462.067787][ T141] cdc_wdm 8-1:1.0: skipping garbage [ 462.071143][ T141] cdc_wdm 8-1:1.0: skipping garbage [ 462.082865][ T141] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 462.085229][ T141] cdc_wdm 8-1:1.0: Unknown control protocol [ 462.498658][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 462.498718][ T6029] usb 8-1: USB disconnect, device number 8 [ 462.500906][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 462.504802][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 463.494948][ T9816] netlink: 'syz.0.740': attribute type 4 has an invalid length. [ 463.596070][ T6100] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 463.758616][ T6100] usb 8-1: config index 0 descriptor too short (expected 28277, got 36) [ 463.761760][ T6100] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.764975][ T6100] usb 8-1: config 0 has no interfaces? [ 463.766860][ T6100] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 463.771321][ T6100] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.783514][ T6100] usb 8-1: config 0 descriptor?? [ 464.206142][ T6051] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 465.693995][ T9835] lo speed is unknown, defaulting to 1000 [ 465.699141][ T40] audit: type=1326 audit(1766100462.303:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9827 comm="syz.2.746" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x0 [ 465.712783][ T9835] wg2 speed is unknown, defaulting to 1000 [ 466.384460][ T6051] usb 8-1: USB disconnect, device number 9 [ 468.355665][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.752'. [ 468.865351][ T9861] 8021q: adding VLAN 0 to HW filter on device .` [ 468.869792][ T9861] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.664067][ T9861] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 469.959361][ T9874] input: syz1 as /devices/virtual/input/input10 [ 471.136163][ T6051] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 471.377761][ T6051] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 471.380679][ T6051] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 471.384016][ T6051] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 471.407638][ T6051] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 471.411608][ T6051] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 471.418904][ T6051] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 471.422016][ T6051] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 471.427159][ T6051] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 471.431148][ T6051] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 471.434617][ T6051] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 471.439848][ T6051] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 471.442976][ T6051] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 471.448376][ T6051] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 471.453170][ T6051] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 471.457938][ T6051] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 471.525491][ T6051] usb 7-1: string descriptor 0 read error: -22 [ 471.527804][ T6051] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 471.530806][ T6051] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.546889][ T6051] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 472.310461][ T9] usb 7-1: USB disconnect, device number 11 [ 473.417373][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 473.462384][ T9894] ceph: No mds server is up or the cluster is laggy [ 474.326670][ T141] libceph: connect (1)[c::]:6789 error -101 [ 474.328825][ T141] libceph: mon0 (1)[c::]:6789 connect error [ 474.870304][ T9915] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 474.873054][ T9915] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 474.879757][ T9915] vhci_hcd vhci_hcd.0: Device attached [ 474.904114][ T9904] netlink: 'syz.2.764': attribute type 4 has an invalid length. [ 475.031660][ T9920] netlink: 60 bytes leftover after parsing attributes in process `syz.1.761'. [ 475.156535][ T6029] usb 44-1: SetAddress Request (41) to port 0 [ 475.159110][ T6029] usb 44-1: new SuperSpeed USB device number 41 using vhci_hcd [ 475.834429][ T9916] vhci_hcd: connection reset by peer [ 475.844375][ T1215] vhci_hcd vhci_hcd.3: stop threads [ 475.846777][ T1215] vhci_hcd vhci_hcd.3: release socket [ 475.849166][ T1215] vhci_hcd vhci_hcd.3: disconnect device [ 477.378427][ T55] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 478.188155][ T9953] sysfs: cannot create duplicate filename '/class/ieee80211/4Ï€!FõïVl‘uc'f`å”Þ†’;œ1µx%ñ†‹M¹Fœ-ôÁõîI' [ 478.193207][ T9953] CPU: 1 UID: 0 PID: 9953 Comm: syz.3.768 Tainted: G L syzkaller #0 PREEMPT(full) [ 478.193251][ T9953] Tainted: [L]=SOFTLOCKUP [ 478.193257][ T9953] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 478.193268][ T9953] Call Trace: [ 478.193276][ T9953] [ 478.193284][ T9953] dump_stack_lvl+0x16c/0x1f0 [ 478.193316][ T9953] sysfs_warn_dup+0x7f/0xa0 [ 478.193338][ T9953] sysfs_do_create_link_sd+0x124/0x140 [ 478.193360][ T9953] sysfs_create_link+0x61/0xc0 [ 478.193380][ T9953] device_add+0x652/0x1980 [ 478.193407][ T9953] ? __pfx_device_add+0x10/0x10 [ 478.193429][ T9953] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 478.193457][ T9953] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 478.193495][ T9953] wiphy_register+0x1ea1/0x2cc0 [ 478.193511][ T9953] ? __rtnl_unlock+0x68/0xf0 [ 478.193539][ T9953] ? napi_enable_locked+0x650/0xa00 [ 478.193566][ T9953] ? __pfx_wiphy_register+0x10/0x10 [ 478.193584][ T9953] ? __asan_memset+0x23/0x50 [ 478.193614][ T9953] ? ieee80211_init_rate_ctrl_alg+0x125/0x680 [ 478.193645][ T9953] ieee80211_register_hw+0x2bb2/0x4160 [ 478.193673][ T9953] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 478.193690][ T9953] ? __pfx___debug_object_init+0x10/0x10 [ 478.193722][ T9953] ? find_held_lock+0x2b/0x80 [ 478.193745][ T9953] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 478.193772][ T9953] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 478.193796][ T9953] ? __hrtimer_setup+0x176/0x280 [ 478.193820][ T9953] mac80211_hwsim_new_radio+0x3323/0x5150 [ 478.193855][ T9953] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 478.193876][ T9953] ? __asan_memcpy+0x3c/0x60 [ 478.193898][ T9953] hwsim_new_radio_nl+0xba2/0x1330 [ 478.193915][ T9953] ? lockdep_hardirqs_on+0x7c/0x110 [ 478.193940][ T9953] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 478.193966][ T9953] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 478.193987][ T9953] genl_family_rcv_msg_doit+0x209/0x2f0 [ 478.194014][ T9953] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 478.194060][ T9953] ? genl_get_cmd+0x194/0x580 [ 478.194093][ T9953] ? bpf_lsm_capable+0x9/0x10 [ 478.194117][ T9953] ? security_capable+0x7e/0x260 [ 478.194145][ T9953] ? ns_capable+0xd7/0x110 [ 478.194169][ T9953] genl_rcv_msg+0x55c/0x800 [ 478.194189][ T9953] ? __pfx_genl_rcv_msg+0x10/0x10 [ 478.194207][ T9953] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 478.194229][ T9953] ? __lock_acquire+0x436/0x2890 [ 478.194249][ T9953] netlink_rcv_skb+0x158/0x420 [ 478.194273][ T9953] ? __pfx_genl_rcv_msg+0x10/0x10 [ 478.194291][ T9953] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 478.194327][ T9953] ? netlink_deliver_tap+0x1ae/0xd30 [ 478.194355][ T9953] genl_rcv+0x28/0x40 [ 478.194380][ T9953] netlink_unicast+0x5aa/0x870 [ 478.194406][ T9953] ? __pfx_netlink_unicast+0x10/0x10 [ 478.194442][ T9953] netlink_sendmsg+0x8c8/0xdd0 [ 478.194472][ T9953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 478.194531][ T9953] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 478.194567][ T9953] ____sys_sendmsg+0xa5d/0xc30 [ 478.194599][ T9953] ? __pfx_____sys_sendmsg+0x10/0x10 [ 478.194625][ T9953] ? get_compat_msghdr+0x11a/0x170 [ 478.194652][ T9953] ? __pfx_futex_wake_mark+0x10/0x10 [ 478.194681][ T9953] ___sys_sendmsg+0x134/0x1d0 [ 478.194704][ T9953] ? __pfx____sys_sendmsg+0x10/0x10 [ 478.194721][ T9953] ? futex_private_hash_put+0x160/0x1b0 [ 478.194748][ T9953] ? find_held_lock+0x2b/0x80 [ 478.194786][ T9953] __sys_sendmsg+0x16d/0x220 [ 478.194808][ T9953] ? __pfx___sys_sendmsg+0x10/0x10 [ 478.194829][ T9953] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 478.194868][ T9953] __do_fast_syscall_32+0xe8/0x680 [ 478.194899][ T9953] do_fast_syscall_32+0x32/0x80 [ 478.194915][ T9953] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 478.194938][ T9953] RIP: 0023:0xf7f51579 [ 478.194953][ T9953] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 478.194972][ T9953] RSP: 002b:00000000f540455c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 478.194989][ T9953] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040 [ 478.195001][ T9953] RDX: 0000000000000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 478.195011][ T9953] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 478.195021][ T9953] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 478.195030][ T9953] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 478.195056][ T9953] [ 478.459643][ T9961] netlink: 'syz.2.770': attribute type 10 has an invalid length. [ 478.518253][ T9964] netlink: 2188 bytes leftover after parsing attributes in process `syz.2.770'. [ 478.700061][ T9959] bond0: (slave bond_slave_0): Releasing backup interface [ 478.719194][ T9959] bond0: (slave bond_slave_1): Releasing backup interface [ 478.729329][ T9959] team0: Port device team_slave_0 removed [ 478.742900][ T9959] team0: Port device team_slave_1 removed [ 478.746360][ T9959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.751568][ T9959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.755363][ T9959] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 478.763261][ T9961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.769156][ T9961] team0: Port device bond0 added [ 478.781802][ T9964] team0 (unregistering): Port device bond0 removed [ 480.206200][ T6029] usb 44-1: device descriptor read/8, error -110 [ 480.597078][ T6029] usb usb44-port1: attempt power cycle [ 480.766065][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 480.766082][ T5949] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 481.157171][ T6029] usb usb44-port1: unable to enumerate USB device [ 481.874334][ T40] audit: type=1326 audit(1766100478.473:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9987 comm="syz.3.774" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x0 [ 482.122994][ T9994] lo speed is unknown, defaulting to 1000 [ 482.128583][ T9994] wg2 speed is unknown, defaulting to 1000 [ 487.013412][T10022] Bluetooth: MGMT ver 1.23 [ 487.606648][ T55] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 488.048491][T10047] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 488.050581][T10047] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 488.053310][T10047] vhci_hcd vhci_hcd.0: Device attached [ 488.302419][T10049] vhci_hcd: connection closed [ 488.302657][ T1215] vhci_hcd vhci_hcd.1: stop threads [ 488.305859][ T1215] vhci_hcd vhci_hcd.1: release socket [ 488.326162][ T1215] vhci_hcd vhci_hcd.1: disconnect device [ 488.328376][ T55] usb 40-1: enqueue for inactive port 0 [ 489.591283][ T55] usb usb40-port1: attempt power cycle [ 489.962263][T10065] sysfs: cannot create duplicate filename '/class/ieee80211/4Ï€!FõïVl‘uc'f`å”Þ†’;œ1µx%ñ†‹M¹Fœ-ôÁõîI' [ 489.966168][T10065] CPU: 1 UID: 0 PID: 10065 Comm: syz.1.782 Tainted: G L syzkaller #0 PREEMPT(full) [ 489.966197][T10065] Tainted: [L]=SOFTLOCKUP [ 489.966201][T10065] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 489.966208][T10065] Call Trace: [ 489.966212][T10065] [ 489.966216][T10065] dump_stack_lvl+0x16c/0x1f0 [ 489.966238][T10065] sysfs_warn_dup+0x7f/0xa0 [ 489.966250][T10065] sysfs_do_create_link_sd+0x124/0x140 [ 489.966265][T10065] sysfs_create_link+0x61/0xc0 [ 489.966276][T10065] device_add+0x652/0x1980 [ 489.966292][T10065] ? __pfx_device_add+0x10/0x10 [ 489.966304][T10065] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 489.966320][T10065] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 489.966338][T10065] wiphy_register+0x1ea1/0x2cc0 [ 489.966348][T10065] ? __rtnl_unlock+0x68/0xf0 [ 489.966363][T10065] ? napi_enable_locked+0x650/0xa00 [ 489.966379][T10065] ? __pfx_wiphy_register+0x10/0x10 [ 489.966406][T10065] ? __asan_memset+0x23/0x50 [ 489.966425][T10065] ? ieee80211_init_rate_ctrl_alg+0x125/0x680 [ 489.966449][T10065] ieee80211_register_hw+0x2bb2/0x4160 [ 489.966465][T10065] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 489.966475][T10065] ? __pfx___debug_object_init+0x10/0x10 [ 489.966495][T10065] ? find_held_lock+0x2b/0x80 [ 489.966509][T10065] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 489.966525][T10065] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 489.966540][T10065] ? __hrtimer_setup+0x176/0x280 [ 489.966554][T10065] mac80211_hwsim_new_radio+0x3323/0x5150 [ 489.966574][T10065] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 489.966586][T10065] ? __asan_memcpy+0x3c/0x60 [ 489.966599][T10065] hwsim_new_radio_nl+0xba2/0x1330 [ 489.966612][T10065] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 489.966628][T10065] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 489.966645][T10065] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 489.966665][T10065] genl_family_rcv_msg_doit+0x209/0x2f0 [ 489.966682][T10065] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 489.966698][T10065] ? genl_get_cmd+0x194/0x580 [ 489.966716][T10065] ? bpf_lsm_capable+0x9/0x10 [ 489.966729][T10065] ? security_capable+0x7e/0x260 [ 489.966745][T10065] ? ns_capable+0xd7/0x110 [ 489.966759][T10065] genl_rcv_msg+0x55c/0x800 [ 489.966770][T10065] ? __pfx_genl_rcv_msg+0x10/0x10 [ 489.966780][T10065] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 489.966793][T10065] ? __lock_acquire+0x436/0x2890 [ 489.966804][T10065] netlink_rcv_skb+0x158/0x420 [ 489.966818][T10065] ? __pfx_genl_rcv_msg+0x10/0x10 [ 489.966828][T10065] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 489.966848][T10065] ? netlink_deliver_tap+0x1ae/0xd30 [ 489.966864][T10065] genl_rcv+0x28/0x40 [ 489.966878][T10065] netlink_unicast+0x5aa/0x870 [ 489.966895][T10065] ? __pfx_netlink_unicast+0x10/0x10 [ 489.966914][T10065] netlink_sendmsg+0x8c8/0xdd0 [ 489.966931][T10065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 489.966947][T10065] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 489.966966][T10065] ____sys_sendmsg+0xa5d/0xc30 [ 489.966983][T10065] ? __pfx_____sys_sendmsg+0x10/0x10 [ 489.966998][T10065] ? get_compat_msghdr+0x11a/0x170 [ 489.967013][T10065] ? __pfx_futex_wake_mark+0x10/0x10 [ 489.967029][T10065] ___sys_sendmsg+0x134/0x1d0 [ 489.967043][T10065] ? __pfx____sys_sendmsg+0x10/0x10 [ 489.967056][T10065] ? futex_private_hash_put+0x160/0x1b0 [ 489.967072][T10065] ? find_held_lock+0x2b/0x80 [ 489.967094][T10065] __sys_sendmsg+0x16d/0x220 [ 489.967106][T10065] ? __pfx___sys_sendmsg+0x10/0x10 [ 489.967119][T10065] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 489.967140][T10065] __do_fast_syscall_32+0xe8/0x680 [ 489.967158][T10065] do_fast_syscall_32+0x32/0x80 [ 489.967167][T10065] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 489.967180][T10065] RIP: 0023:0xf702d579 [ 489.967189][T10065] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 489.967199][T10065] RSP: 002b:00000000f53db55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 489.967209][T10065] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040 [ 489.967215][T10065] RDX: 0000000000000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 489.967221][T10065] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 489.967227][T10065] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 489.967232][T10065] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 489.967246][T10065] [ 490.172049][ T55] usb usb40-port1: unable to enumerate USB device [ 490.377018][T10077] snd_aloop snd_aloop.0: control 2:-2:3:syz1:2 is already present [ 490.682891][ T141] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 490.967969][T10082] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 490.970073][T10082] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 490.976269][T10082] vhci_hcd vhci_hcd.0: Device attached [ 491.046651][ T141] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 491.062893][ T141] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 491.066496][ T141] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 491.071336][ T141] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 491.075146][ T141] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 491.276096][ T6029] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 491.407869][ T141] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 491.411019][ T141] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 491.415275][ T141] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 491.454244][ T141] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 491.782657][ T141] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 491.810700][ T141] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 491.813217][ T141] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 491.818398][ T141] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 491.825779][ T141] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 491.834160][ T141] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 491.881727][ T141] usb 8-1: string descriptor 0 read error: -22 [ 491.889953][ T141] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 491.892924][ T141] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.934691][ T141] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 492.023506][T10083] vhci_hcd: connection reset by peer [ 492.028531][ T1147] vhci_hcd vhci_hcd.1: stop threads [ 492.031520][ T1147] vhci_hcd vhci_hcd.1: release socket [ 492.034021][ T1147] vhci_hcd vhci_hcd.1: disconnect device [ 492.197133][ T141] usb 8-1: USB disconnect, device number 10 [ 496.516485][ T6029] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 498.023844][T10124] ubi: mtd0 is already attached to ubi31 [ 499.018824][T10128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.793'. [ 500.675258][T10151] ubi: mtd0 is already attached to ubi31 [ 501.026633][ T55] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 503.178596][T10194] netlink: 40 bytes leftover after parsing attributes in process `syz.0.800'. [ 503.183728][T10194] hsr_slave_1: entered allmulticast mode [ 504.625873][T10209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.805'. [ 504.840290][T10212] netlink: 'syz.3.806': attribute type 4 has an invalid length. [ 505.024863][T10210] netlink: 'syz.3.806': attribute type 4 has an invalid length. [ 505.104239][T10214] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 506.128675][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.130710][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.516967][T10238] lo speed is unknown, defaulting to 1000 [ 509.519688][T10238] wg2 speed is unknown, defaulting to 1000 [ 510.936515][ T55] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 513.300822][T10296] ubi: mtd0 is already attached to ubi31 [ 513.566069][T10298] netlink: 'syz.0.816': attribute type 4 has an invalid length. [ 513.585798][T10298] netlink: 'syz.0.816': attribute type 4 has an invalid length. [ 513.868333][T10303] netlink: 28 bytes leftover after parsing attributes in process `syz.3.819'. [ 513.892626][T10303] siw: device registration error -23 [ 514.334797][T10305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.818'. [ 515.472770][T10310] lo speed is unknown, defaulting to 1000 [ 515.475469][T10310] wg2 speed is unknown, defaulting to 1000 [ 518.262586][T10331] netlink: 76 bytes leftover after parsing attributes in process `syz.0.821'. [ 518.299234][T10326] netlink: 'syz.1.822': attribute type 16 has an invalid length. [ 518.301821][T10326] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.822'. [ 518.553952][ T55] IPVS: starting estimator thread 0... [ 518.656125][T10339] IPVS: using max 30 ests per chain, 72000 per kthread [ 522.276872][ T55] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 522.430205][T10367] netlink: 'syz.2.831': attribute type 4 has an invalid length. [ 522.467639][T10367] netlink: 'syz.2.831': attribute type 4 has an invalid length. [ 524.736771][T10410] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 524.738937][T10410] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 524.746217][T10410] vhci_hcd vhci_hcd.0: Device attached [ 524.976096][ T55] usb 39-1: new low-speed USB device number 6 using vhci_hcd [ 526.563452][T10408] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 526.566188][T10408] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 526.574932][T10408] vhci_hcd vhci_hcd.0: Device attached [ 526.716511][T10411] vhci_hcd: connection reset by peer [ 526.721222][ T61] vhci_hcd vhci_hcd.1: stop threads [ 526.723872][ T61] vhci_hcd vhci_hcd.1: release socket [ 526.725944][ T61] vhci_hcd vhci_hcd.1: disconnect device [ 526.836058][ T6035] usb 42-1: SetAddress Request (78) to port 0 [ 526.838121][ T6035] usb 42-1: new SuperSpeed USB device number 78 using vhci_hcd [ 527.602448][T10417] vhci_hcd: connection reset by peer [ 527.651968][ T6133] vhci_hcd vhci_hcd.2: stop threads [ 527.654197][ T6133] vhci_hcd vhci_hcd.2: release socket [ 527.656629][ T6133] vhci_hcd vhci_hcd.2: disconnect device [ 530.116241][ T55] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 531.886256][ T6035] usb 42-1: device descriptor read/8, error -110 [ 532.287201][ T6035] usb usb42-port1: attempt power cycle [ 532.856596][ T6035] usb usb42-port1: unable to enumerate USB device [ 540.658607][T10451] ceph: No mds server is up or the cluster is laggy [ 540.660900][ T6027] libceph: connect (1)[c::]:6789 error -101 [ 540.666166][ T6027] libceph: mon0 (1)[c::]:6789 connect error [ 540.855141][T10459] netlink: 'syz.1.841': attribute type 4 has an invalid length. [ 540.874123][ T6023] lo speed is unknown, defaulting to 1000 [ 540.876741][ T6023] syz0: Port: 1 Link DOWN [ 540.893684][T10459] netlink: 'syz.1.841': attribute type 4 has an invalid length. [ 540.907706][ T6023] lo speed is unknown, defaulting to 1000 [ 540.915673][ T6023] syz0: Port: 1 Link ACTIVE [ 542.216146][ T6023] IPVS: starting estimator thread 0... [ 542.372708][T10472] IPVS: using max 44 ests per chain, 105600 per kthread [ 544.380451][T10490] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 544.382750][T10490] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 544.386356][T10490] vhci_hcd vhci_hcd.0: Device attached [ 544.399514][T10490] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 544.563703][T10491] vhci_hcd: connection closed [ 544.566370][ T1144] vhci_hcd vhci_hcd.3: stop threads [ 544.570801][ T1144] vhci_hcd vhci_hcd.3: release socket [ 544.573442][ T1144] vhci_hcd vhci_hcd.3: disconnect device [ 545.607383][T10497] ceph: No mds server is up or the cluster is laggy [ 545.616650][ T6023] libceph: connect (1)[c::]:6789 error -101 [ 545.616831][ T6023] libceph: mon0 (1)[c::]:6789 connect error [ 546.536347][T10523] netlink: 'syz.3.854': attribute type 4 has an invalid length. [ 546.543695][T10523] netlink: 'syz.3.854': attribute type 4 has an invalid length. [ 546.768352][T10520] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 546.768484][T10520] UDF-fs: Scanning with blocksize 2048 failed [ 546.771009][T10520] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 546.771050][T10520] UDF-fs: Scanning with blocksize 4096 failed [ 547.617887][T10531] dlm: no local IP address has been set [ 547.620488][T10531] dlm: cannot start dlm midcomms -107 [ 547.635707][T10531] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 547.641737][T10531] netlink: 'syz.0.857': attribute type 12 has an invalid length. [ 548.679157][T10544] hsr_slave_1: left allmulticast mode [ 553.035438][T10575] overlayfs: missing 'lowerdir' [ 554.657180][T10586] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 554.659375][T10586] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 554.662111][T10586] vhci_hcd vhci_hcd.0: Device attached [ 554.695557][T10586] 9p: Bad value for 'rfdno' [ 554.727476][T10586] netlink: 'syz.2.867': attribute type 1 has an invalid length. [ 555.056085][ T55] usb 42-1: SetAddress Request (82) to port 0 [ 555.058381][ T55] usb 42-1: new SuperSpeed USB device number 82 using vhci_hcd [ 555.115792][T10587] vhci_hcd: connection closed [ 555.117174][ T13] vhci_hcd vhci_hcd.2: stop threads [ 555.124185][ T13] vhci_hcd vhci_hcd.2: release socket [ 555.129050][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 555.156826][ T55] usb 42-1: enqueue for inactive port 0 [ 555.233312][T10597] ntfs3(nullb0): Primary boot signature is not NTFS. [ 555.237590][T10597] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 555.245953][T10596] netlink: 'syz.1.871': attribute type 1 has an invalid length. [ 555.249201][T10596] netlink: 224 bytes leftover after parsing attributes in process `syz.1.871'. [ 555.599462][ T55] usb usb42-port1: attempt power cycle [ 556.266243][ T55] usb usb42-port1: unable to enumerate USB device [ 558.098014][T10623] overlayfs: failed to resolve './file0': -2 [ 558.307867][T10623] input: syz0 as /devices/virtual/input/input16 [ 558.309929][T10623] input: failed to attach handler leds to device input16, error: -6 [ 559.476263][T10639] dlm: no local IP address has been set [ 559.480024][T10639] dlm: cannot start dlm midcomms -107 [ 559.500416][T10639] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 559.507318][T10639] netlink: 'syz.2.882': attribute type 12 has an invalid length. [ 559.630066][T10626] random: crng reseeded on system resumption [ 559.686076][T10633] syz.0.880 (10633): /proc/10627/oom_adj is deprecated, please use /proc/10627/oom_score_adj instead. [ 559.711003][T10633] tmpfs: Bad value for 'mpol' [ 560.016531][T10645] orangefs: client-core tried to read wrong size [ 566.241978][T10689] netlink: 'syz.2.892': attribute type 4 has an invalid length. [ 566.294340][T10689] netlink: 'syz.2.892': attribute type 4 has an invalid length. [ 566.961287][T10697] dlm: no local IP address has been set [ 566.963270][T10697] dlm: cannot start dlm midcomms -107 [ 566.980112][T10697] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 566.987236][T10697] netlink: 'syz.3.894': attribute type 12 has an invalid length. [ 567.571388][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.574734][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.743097][T10743] netlink: 16 bytes leftover after parsing attributes in process `syz.2.905'. [ 569.935095][T10748] ntfs3(nullb0): Primary boot signature is not NTFS. [ 569.939052][T10748] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 571.488094][ T5949] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 577.892064][T10810] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 577.894947][T10810] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 577.906974][T10810] vhci_hcd vhci_hcd.0: Device attached [ 578.146195][ T6224] usb 41-1: new low-speed USB device number 4 using vhci_hcd [ 578.546015][T10811] vhci_hcd: connection reset by peer [ 578.548115][ T1179] vhci_hcd vhci_hcd.2: stop threads [ 578.549829][ T1179] vhci_hcd vhci_hcd.2: release socket [ 578.556099][ T1179] vhci_hcd vhci_hcd.2: disconnect device [ 578.809959][T10826] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 578.812775][T10826] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 578.837562][T10826] vhci_hcd vhci_hcd.0: Device attached [ 579.345778][ T6027] usb 38-1: SetAddress Request (58) to port 0 [ 579.345851][ T6027] usb 38-1: new SuperSpeed USB device number 58 using vhci_hcd [ 579.599755][T10826] 9p: Bad value for 'rfdno' [ 579.619959][T10826] netlink: 'syz.0.922': attribute type 1 has an invalid length. [ 581.049553][T10828] vhci_hcd: connection reset by peer [ 581.052111][ T12] vhci_hcd vhci_hcd.0: stop threads [ 581.086061][ T12] vhci_hcd vhci_hcd.0: release socket [ 581.087850][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 583.236162][ T6224] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 584.447965][ T6027] usb 38-1: device descriptor read/8, error -110 [ 584.856973][ T6027] usb usb38-port1: attempt power cycle [ 585.326140][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 585.326161][ T5949] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 585.517700][ T6027] usb usb38-port1: unable to enumerate USB device [ 585.577229][T10884] dlm: no local IP address has been set [ 585.579138][T10884] dlm: cannot start dlm midcomms -107 [ 585.591582][T10884] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 585.597606][T10884] netlink: 'syz.1.933': attribute type 12 has an invalid length. [ 586.000561][T10890] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 586.003289][T10890] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 586.007012][T10890] vhci_hcd vhci_hcd.0: Device attached [ 586.292414][ T9] usb 43-1: new low-speed USB device number 4 using vhci_hcd [ 586.574225][T10891] vhci_hcd: connection reset by peer [ 586.576185][ T1144] vhci_hcd vhci_hcd.3: stop threads [ 586.577957][ T1144] vhci_hcd vhci_hcd.3: release socket [ 586.579830][ T1144] vhci_hcd vhci_hcd.3: disconnect device [ 586.722155][T10900] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 586.724245][T10900] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 586.763500][T10900] vhci_hcd vhci_hcd.0: Device attached [ 586.917258][T10900] 9p: Bad value for 'rfdno' [ 586.941696][T10900] netlink: 'syz.1.937': attribute type 1 has an invalid length. [ 587.026103][ T6224] usb 40-1: SetAddress Request (58) to port 0 [ 587.028862][ T6224] usb 40-1: new SuperSpeed USB device number 58 using vhci_hcd [ 587.436081][ T40] audit: type=1326 audit(1766100584.033:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10906 comm="syz.3.938" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x0 [ 587.620619][T10902] vhci_hcd: connection reset by peer [ 587.706138][ T1144] vhci_hcd vhci_hcd.1: stop threads [ 587.708252][ T1144] vhci_hcd vhci_hcd.1: release socket [ 587.709872][ T1144] vhci_hcd vhci_hcd.1: disconnect device [ 587.886160][ T5949] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 587.887194][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 589.074625][T10922] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 589.076745][T10922] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 589.079511][T10922] vhci_hcd vhci_hcd.0: Device attached [ 589.104105][T10926] ntfs3(nullb0): Primary boot signature is not NTFS. [ 589.109177][T10926] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 589.275352][T10927] mkiss: ax0: crc mode is auto. [ 589.346071][ T6051] usb 38-1: SetAddress Request (62) to port 0 [ 589.350456][ T6051] usb 38-1: new SuperSpeed USB device number 62 using vhci_hcd [ 589.434170][T10923] vhci_hcd: connection reset by peer [ 589.481026][ T13] vhci_hcd vhci_hcd.0: stop threads [ 589.482986][ T13] vhci_hcd vhci_hcd.0: release socket [ 589.484858][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 590.156286][T10934] netlink: 28 bytes leftover after parsing attributes in process `syz.3.944'. [ 590.159996][T10934] netlink: 28 bytes leftover after parsing attributes in process `syz.3.944'. [ 590.168740][T10934] team0: entered promiscuous mode [ 590.170870][T10934] team_slave_0: entered promiscuous mode [ 590.172963][T10934] team_slave_1: entered promiscuous mode [ 590.175745][T10934] bond0: entered promiscuous mode [ 590.177674][T10934] bond_slave_0: entered promiscuous mode [ 590.179744][T10934] bond_slave_1: entered promiscuous mode [ 590.183278][T10934] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 590.186633][T10934] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 590.190362][T10934] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 590.977463][T10942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.946'. [ 591.406199][ T9] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 592.000840][T10961] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 592.002767][T10961] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 592.005197][T10961] vhci_hcd vhci_hcd.0: Device attached [ 592.795332][ T6224] usb 40-1: device descriptor read/8, error -110 [ 593.186702][ T6224] usb usb40-port1: attempt power cycle [ 593.366729][T10962] vhci_hcd: connection closed [ 593.366940][ T12] vhci_hcd vhci_hcd.0: stop threads [ 593.370503][ T12] vhci_hcd vhci_hcd.0: release socket [ 593.372337][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 593.446088][ T34] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 593.486841][ T5949] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 593.551398][T10971] warning: `syz.2.952' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 593.756575][ T6224] usb usb40-port1: unable to enumerate USB device [ 593.876088][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 594.333926][ T34] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 594.390202][T10978] ubi31: detaching mtd0 [ 594.399766][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 594.403618][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 594.404832][T10978] ubi31: mtd0 is detached [ 594.407688][ T34] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 594.414237][ T34] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 594.417204][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.446400][ T6051] usb 38-1: device descriptor read/8, error -110 [ 594.589230][T10983] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 594.591344][T10983] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 594.594557][T10983] vhci_hcd vhci_hcd.0: Device attached [ 594.640245][T10983] No control pipe specified [ 594.706162][ T34] usb 6-1: usb_control_msg returned -32 [ 594.708656][ T34] usbtmc 6-1:16.0: can't read capabilities [ 594.711096][ T6051] usb 38-1: SetAddress Request (63) to port 0 [ 594.720460][ T6051] usb 38-1: new SuperSpeed USB device number 63 using vhci_hcd [ 595.108762][T10984] vhci_hcd: connection reset by peer [ 595.112513][ T89] vhci_hcd vhci_hcd.0: stop threads [ 595.114759][ T89] vhci_hcd vhci_hcd.0: release socket [ 595.117812][ T89] vhci_hcd vhci_hcd.0: disconnect device [ 595.709316][T10990] lo speed is unknown, defaulting to 1000 [ 595.712159][T10990] wg2 speed is unknown, defaulting to 1000 [ 595.941178][ T40] audit: type=1326 audit(1766100592.543:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10966 comm="syz.1.951" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x0 [ 596.058881][ C1] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 596.066509][T11000] usbtmc 6-1:16.0: Unable to send data, error -71 [ 596.300788][T11007] loop6: detected capacity change from 0 to 2560 [ 596.304605][T10968] Buffer I/O error on dev loop6, logical block 0, async page read [ 596.395353][T10968] Buffer I/O error on dev loop6, logical block 0, async page read [ 596.408996][T10968] Buffer I/O error on dev loop6, logical block 0, async page read [ 596.414513][T10968] Buffer I/O error on dev loop6, logical block 0, async page read [ 596.429926][T10968] Buffer I/O error on dev loop6, logical block 0, async page read [ 596.432529][T10968] Buffer I/O error on dev loop6, logical block 0, async page read [ 596.435204][T10968] Buffer I/O error on dev loop6, logical block 0, async page read [ 596.441526][T10968] Buffer I/O error on dev loop6, logical block 0, async page read [ 596.443997][T10968] ldm_validate_partition_table(): Disk read failed. [ 596.446808][T10968] Buffer I/O error on dev loop6, logical block 0, async page read [ 596.449592][T10968] Buffer I/O error on dev loop6, logical block 0, async page read [ 596.452183][T10968] Dev loop6: unable to read RDB block 0 [ 596.454319][T10968] loop6: unable to read partition table [ 596.567128][T11014] syz.3.960: attempt to access beyond end of device [ 596.567128][T11014] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 596.571738][T11014] gfs2: error -5 reading superblock [ 597.479396][ T6027] usb 6-1: USB disconnect, device number 8 [ 597.499309][T11007] ldm_validate_partition_table(): Disk read failed. [ 597.501702][T11007] Dev loop6: unable to read RDB block 0 [ 597.504100][T11007] loop6: unable to read partition table [ 597.536689][T11007] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 597.862868][T11039] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 597.865351][T11039] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 597.868695][T11039] vhci_hcd vhci_hcd.0: Device attached [ 598.156052][ T6035] usb 39-1: new low-speed USB device number 7 using vhci_hcd [ 598.161177][ T40] audit: type=1804 audit(1766100594.763:108): pid=11013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.961" name="/newroot/236/bus/file0" dev="overlay" ino=1331 res=1 errno=0 [ 598.242739][ T40] audit: type=1804 audit(1766100594.843:109): pid=11013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.961" name="/newroot/236/bus/file0" dev="overlay" ino=1331 res=1 errno=0 [ 598.545853][T11040] vhci_hcd: connection reset by peer [ 598.549763][ T89] vhci_hcd vhci_hcd.1: stop threads [ 598.552073][ T89] vhci_hcd vhci_hcd.1: release socket [ 598.554394][ T89] vhci_hcd vhci_hcd.1: disconnect device [ 599.806354][ T6051] usb 38-1: device descriptor read/8, error -110 [ 599.916536][ T6051] usb usb38-port1: attempt power cycle [ 599.996188][ T6029] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 600.206142][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 600.209081][ T5949] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 600.354615][T11064] ntfs3(nullb0): Primary boot signature is not NTFS. [ 600.373250][T11064] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 601.740502][T11081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.971'. [ 602.207035][ T6051] usb usb38-port1: unable to enumerate USB device [ 602.333262][T11087] netlink: 'syz.3.972': attribute type 1 has an invalid length. [ 602.346152][T11087] 8021q: adding VLAN 0 to HW filter on device bond1 [ 602.394753][T11087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.972'. [ 602.398059][T11087] netlink: 16 bytes leftover after parsing attributes in process `syz.3.972'. [ 602.506191][ T6027] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 602.598441][T11095] netlink: 'syz.0.974': attribute type 10 has an invalid length. [ 602.643424][T11087] bond1 (unregistering): Released all slaves [ 602.666081][ T6027] usb 7-1: Using ep0 maxpacket: 16 [ 602.673251][ T6027] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 602.680946][ T6027] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 602.684584][ T6027] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.687825][ T6027] usb 7-1: Product: syz [ 602.689629][ T6027] usb 7-1: Manufacturer: syz [ 602.691460][ T6027] usb 7-1: SerialNumber: syz [ 602.699667][ T6027] usb 7-1: config 0 descriptor?? [ 602.707427][ T6027] hub 7-1:0.0: bad descriptor, ignoring hub [ 602.709608][ T6027] hub 7-1:0.0: probe with driver hub failed with error -5 [ 602.718756][ T6027] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input17 [ 602.845337][T11099] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 603.008298][T11099] /dev/sr0: Can't open blockdev [ 603.021897][T11102] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 603.276263][ T6035] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 604.606510][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 604.611563][ T5949] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 605.263271][ T40] audit: type=1326 audit(1766100601.863:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11117 comm="syz.2.981" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f85579 code=0x0 [ 605.324458][T11124] openvswitch: netlink: IPv4 tun info is not correct [ 608.380230][ T6051] usb 7-1: USB disconnect, device number 12 [ 608.771805][T11144] loop6: detected capacity change from 0 to 2560 [ 608.774248][T11144] buffer_io_error: 27 callbacks suppressed [ 608.774257][T11144] Buffer I/O error on dev loop6, logical block 0, async page read [ 608.779058][T11152] hsr_slave_1: left allmulticast mode [ 608.779120][T11144] Buffer I/O error on dev loop6, logical block 0, async page read [ 608.784217][T11144] Buffer I/O error on dev loop6, logical block 0, async page read [ 608.788463][T11144] Buffer I/O error on dev loop6, logical block 0, async page read [ 608.791772][T11144] Buffer I/O error on dev loop6, logical block 0, async page read [ 608.794499][T11144] Buffer I/O error on dev loop6, logical block 0, async page read [ 608.798084][T11144] Buffer I/O error on dev loop6, logical block 0, async page read [ 608.801535][T11144] Buffer I/O error on dev loop6, logical block 0, async page read [ 608.805039][T11144] ldm_validate_partition_table(): Disk read failed. [ 608.808053][T11144] Buffer I/O error on dev loop6, logical block 0, async page read [ 608.810809][T11144] Buffer I/O error on dev loop6, logical block 0, async page read [ 608.813442][T11144] Dev loop6: unable to read RDB block 0 [ 608.815522][T11144] loop6: unable to read partition table [ 608.818483][T11144] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 609.192927][ T6051] lo speed is unknown, defaulting to 1000 [ 609.194886][ T6051] syz0: Port: 1 Link DOWN [ 609.869458][T11173] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 609.871631][T11173] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 609.930187][T11173] vhci_hcd vhci_hcd.0: Device attached [ 610.136131][ T6035] usb 44-1: SetAddress Request (46) to port 0 [ 610.138761][ T6035] usb 44-1: new SuperSpeed USB device number 46 using vhci_hcd [ 611.316276][T11174] vhci_hcd: connection reset by peer [ 611.319026][ T61] vhci_hcd vhci_hcd.3: stop threads [ 611.321223][ T61] vhci_hcd vhci_hcd.3: release socket [ 611.323525][ T61] vhci_hcd vhci_hcd.3: disconnect device [ 611.957457][T11200] ntfs3(nullb0): Primary boot signature is not NTFS. [ 611.959865][T11200] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 612.634410][T11204] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 613.336092][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 613.336124][ T5949] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 614.251877][ T40] audit: type=1326 audit(1766100610.853:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11215 comm="syz.3.994" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 614.260910][ T40] audit: type=1326 audit(1766100610.863:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11215 comm="syz.3.994" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 614.271466][ T40] audit: type=1326 audit(1766100610.873:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11215 comm="syz.3.994" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 614.303830][ T40] audit: type=1326 audit(1766100610.873:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11215 comm="syz.3.994" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 614.315641][ T40] audit: type=1326 audit(1766100610.873:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11215 comm="syz.3.994" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 614.326510][ T40] audit: type=1326 audit(1766100610.903:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11215 comm="syz.3.994" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 614.434803][ T40] audit: type=1326 audit(1766100610.903:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11215 comm="syz.3.994" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 614.449736][ T40] audit: type=1326 audit(1766100610.903:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11215 comm="syz.3.994" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 614.457232][ T40] audit: type=1326 audit(1766100610.923:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11215 comm="syz.3.994" exe="/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 614.463892][ T40] audit: type=1326 audit(1766100610.923:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11215 comm="syz.3.994" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 615.166153][ T6035] usb 44-1: device descriptor read/8, error -110 [ 615.566977][ T6035] usb usb44-port1: attempt power cycle [ 616.976834][ T6035] usb usb44-port1: unable to enumerate USB device [ 617.480417][T11241] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1001'. [ 617.484505][T11241] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1001'. [ 617.497898][T11241] team0: entered promiscuous mode [ 617.501183][T11241] bond0: entered promiscuous mode [ 617.504045][T11241] debugfs: 'hsr1' already exists in 'hsr' [ 617.507254][T11241] Cannot create hsr debugfs directory [ 617.509825][T11241] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 617.513872][T11241] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 617.519187][T11241] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 617.647848][T11245] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 617.649973][T11245] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 617.652829][T11245] vhci_hcd vhci_hcd.0: Device attached [ 617.679137][ T6027] kernel read not supported for file /fb0 (pid: 6027 comm: kworker/1:4) [ 617.692426][T11245] netlink: 28 bytes leftover after parsing attributes in process `syz.2.999'. [ 617.946485][ T6023] usb 42-1: SetAddress Request (86) to port 0 [ 617.951985][ T6023] usb 42-1: new SuperSpeed USB device number 86 using vhci_hcd [ 618.643446][T11246] vhci_hcd: connection reset by peer [ 618.648720][ T12] vhci_hcd vhci_hcd.2: stop threads [ 618.650983][ T12] vhci_hcd vhci_hcd.2: release socket [ 618.655627][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 619.606099][ T6029] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 619.789396][ T6029] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 619.792452][ T6029] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 619.795502][ T6029] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 619.802371][ T6029] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 619.806258][ T6029] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 619.808859][ T6029] usb 5-1: Product: syz [ 619.810224][ T6029] usb 5-1: Manufacturer: syz [ 619.811719][ T6029] usb 5-1: SerialNumber: syz [ 620.023485][ T6029] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 621.846072][ T6051] usb 5-1: USB disconnect, device number 8 [ 621.849326][ T6051] usblp0: removed [ 623.290160][ T6023] usb 42-1: device descriptor read/8, error -110 [ 623.795433][T11292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1010'. [ 623.961317][ T6023] usb usb42-port1: attempt power cycle [ 624.548328][ T6023] usb usb42-port1: unable to enumerate USB device [ 625.303127][T11309] ntfs3(nullb0): Primary boot signature is not NTFS. [ 625.305335][T11309] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 628.092345][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 628.092604][ T40] audit: type=1326 audit(1766100624.693:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11328 comm="syz.0.1021" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703d579 code=0x0 [ 628.181114][T11332] openvswitch: netlink: IPv4 tun info is not correct [ 629.011310][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.014071][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.170505][T11341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1023'. [ 631.026078][ T6035] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 631.186013][ T6035] usb 8-1: Using ep0 maxpacket: 8 [ 631.189073][ T6035] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 631.192472][ T6035] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 631.195662][ T6035] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 631.199465][ T6035] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 631.203624][ T6035] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 631.206898][ T6035] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.416622][ T6035] usb 8-1: usb_control_msg returned -32 [ 631.419033][ T6035] usbtmc 8-1:16.0: can't read capabilities [ 632.174171][ T40] audit: type=1326 audit(1766100628.773:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11350 comm="syz.3.1025" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x0 [ 633.134306][T11362] lo speed is unknown, defaulting to 1000 [ 633.136946][T11362] wg2 speed is unknown, defaulting to 1000 [ 633.487504][ T6029] ================================================================== [ 633.490093][ T6029] BUG: KASAN: slab-use-after-free in hci_uart_write_work+0x82d/0x960 [ 633.492931][ T6029] Read of size 4 at addr ffff88804f21ee30 by task kworker/0:6/6029 [ 633.496230][ T6029] [ 633.497381][ T6029] CPU: 0 UID: 0 PID: 6029 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 633.497398][ T6029] Tainted: [L]=SOFTLOCKUP [ 633.497402][ T6029] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 633.497411][ T6029] Workqueue: events hci_uart_write_work [ 633.497425][ T6029] Call Trace: [ 633.497429][ T6029] [ 633.497433][ T6029] dump_stack_lvl+0x116/0x1f0 [ 633.497450][ T6029] print_report+0xcd/0x630 [ 633.497465][ T6029] ? __virt_addr_valid+0x81/0x610 [ 633.497481][ T6029] ? __phys_addr+0xe8/0x180 [ 633.497496][ T6029] ? hci_uart_write_work+0x82d/0x960 [ 633.497505][ T6029] kasan_report+0xe0/0x110 [ 633.497520][ T6029] ? hci_uart_write_work+0x82d/0x960 [ 633.497531][ T6029] hci_uart_write_work+0x82d/0x960 [ 633.497540][ T6029] ? __pfx_pty_write+0x10/0x10 [ 633.497554][ T6029] process_one_work+0x9ba/0x1b20 [ 633.497568][ T6029] ? __pfx_process_one_work+0x10/0x10 [ 633.497581][ T6029] ? assign_work+0x1a0/0x250 [ 633.497591][ T6029] worker_thread+0x6c8/0xf10 [ 633.497604][ T6029] ? __pfx_worker_thread+0x10/0x10 [ 633.497615][ T6029] kthread+0x3c5/0x780 [ 633.497626][ T6029] ? __pfx_kthread+0x10/0x10 [ 633.497635][ T6029] ? rcu_is_watching+0x12/0xc0 [ 633.497649][ T6029] ? __pfx_kthread+0x10/0x10 [ 633.497659][ T6029] ret_from_fork+0x983/0xb10 [ 633.497669][ T6029] ? __pfx_ret_from_fork+0x10/0x10 [ 633.497679][ T6029] ? __switch_to+0x7af/0x10d0 [ 633.497692][ T6029] ? __pfx_kthread+0x10/0x10 [ 633.497701][ T6029] ret_from_fork_asm+0x1a/0x30 [ 633.497720][ T6029] [ 633.497723][ T6029] [ 633.547519][ T6029] Allocated by task 6023: [ 633.548900][ T6029] kasan_save_stack+0x33/0x60 [ 633.550379][ T6029] kasan_save_track+0x14/0x30 [ 633.551882][ T6029] __kasan_slab_alloc+0x89/0x90 [ 633.553450][ T6029] kmem_cache_alloc_node_noprof+0x298/0x800 [ 633.555320][ T6029] __alloc_skb+0x156/0x410 [ 633.556768][ T6029] bcsp_prepare_pkt+0xe0/0xae0 [ 633.558338][ T6029] bcsp_dequeue+0x237/0x4b0 [ 633.560086][ T6029] hci_uart_write_work+0x4e3/0x960 [ 633.561726][ T6029] process_one_work+0x9ba/0x1b20 [ 633.563302][ T6029] worker_thread+0x6c8/0xf10 [ 633.564772][ T6029] kthread+0x3c5/0x780 [ 633.566081][ T6029] ret_from_fork+0x983/0xb10 [ 633.567590][ T6029] ret_from_fork_asm+0x1a/0x30 [ 633.569134][ T6029] [ 633.569917][ T6029] The buggy address belongs to the object at ffff88804f21edc0 [ 633.569917][ T6029] which belongs to the cache skbuff_head_cache of size 240 [ 633.574410][ T6029] The buggy address is located 112 bytes inside of [ 633.574410][ T6029] freed 240-byte region [ffff88804f21edc0, ffff88804f21eeb0) [ 633.578845][ T6029] [ 633.579621][ T6029] The buggy address belongs to the physical page: [ 633.581653][ T6029] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4f21e [ 633.584393][ T6029] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 633.587102][ T6029] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 633.589832][ T6029] page_type: f5(slab) [ 633.591120][ T6029] raw: 04fff00000000040 ffff88801c348a00 dead000000000122 0000000000000000 [ 633.593826][ T6029] raw: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 633.596515][ T6029] head: 04fff00000000040 ffff88801c348a00 dead000000000122 0000000000000000 [ 633.599568][ T6029] head: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 633.602280][ T6029] head: 04fff00000000001 ffffea00013c8781 00000000ffffffff 00000000ffffffff [ 633.604973][ T6029] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 633.607729][ T6029] page dumped because: kasan: bad access detected [ 633.609768][ T6029] page_owner tracks the page as allocated [ 633.611561][ T6029] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5846, tgid 5846 (sshd-session), ts 633154109524, free_ts 633146209539 [ 633.617977][ T6029] post_alloc_hook+0x1af/0x220 [ 633.619512][ T6029] get_page_from_freelist+0xd0b/0x31a0 [ 633.621256][ T6029] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 633.623131][ T6029] alloc_pages_mpol+0x1fb/0x550 [ 633.624691][ T6029] new_slab+0x2c3/0x430 [ 633.626035][ T6029] ___slab_alloc+0xe18/0x1c90 [ 633.627563][ T6029] __slab_alloc.constprop.0+0x63/0x110 [ 633.629609][ T6029] kmem_cache_alloc_noprof+0x44d/0x770 [ 633.631328][ T6029] skb_clone+0x190/0x3f0 [ 633.632678][ T6029] dev_queue_xmit_nit+0x25b/0xac0 [ 633.634282][ T6029] dev_hard_start_xmit+0x56b/0x6e0 [ 633.635897][ T6029] sch_direct_xmit+0x1b2/0xcd0 [ 633.637470][ T6029] __dev_queue_xmit+0x14a6/0x4650 [ 633.639370][ T6029] ip_finish_output2+0xc38/0x21a0 [ 633.640975][ T6029] __ip_finish_output.part.0+0x1b4/0x350 [ 633.642756][ T6029] ip_output+0x35f/0xa90 [ 633.644100][ T6029] page last free pid 11362 tgid 11350 stack trace: [ 633.646139][ T6029] __free_frozen_pages+0x7df/0x1170 [ 633.647822][ T6029] __put_partials+0x130/0x170 [ 633.649343][ T6029] qlist_free_all+0x4c/0xf0 [ 633.650792][ T6029] kasan_quarantine_reduce+0x195/0x1e0 [ 633.652519][ T6029] __kasan_slab_alloc+0x69/0x90 [ 633.654086][ T6029] __kmalloc_node_track_caller_noprof+0x30b/0x930 [ 633.656453][ T6029] kstrdup+0x53/0x100 [ 633.658090][ T6029] kstrdup_const+0x63/0x80 [ 633.659879][ T6029] __kernfs_new_node+0x9b/0x990 [ 633.661882][ T6029] kernfs_new_node+0x13c/0x1e0 [ 633.663443][ T6029] __kernfs_create_file+0x53/0x350 [ 633.665080][ T6029] sysfs_add_file_mode_ns+0x207/0x3c0 [ 633.666834][ T6029] internal_create_group+0x597/0xf70 [ 633.668818][ T6029] internal_create_groups+0x9d/0x150 [ 633.670523][ T6029] setup_port+0x409/0x1720 [ 633.671955][ T6029] ib_setup_port_attrs+0x201/0x600 [ 633.673607][ T6029] [ 633.674387][ T6029] Memory state around the buggy address: [ 633.676163][ T6029] ffff88804f21ed00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc [ 633.679019][ T6029] ffff88804f21ed80: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 633.681564][ T6029] >ffff88804f21ee00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 633.684079][ T6029] ^ [ 633.685861][ T6029] ffff88804f21ee80: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 633.688419][ T6029] ffff88804f21ef00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 633.690964][ T6029] ================================================================== [ 633.719275][ T6029] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 633.721691][ T6029] CPU: 0 UID: 0 PID: 6029 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 633.725435][ T6029] Tainted: [L]=SOFTLOCKUP [ 633.726838][ T6029] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 633.730181][ T6029] Workqueue: events hci_uart_write_work [ 633.732205][ T6029] Call Trace: [ 633.733306][ T6029] [ 633.734259][ T6029] dump_stack_lvl+0x3d/0x1f0 [ 633.735753][ T6029] vpanic+0x640/0x6f0 [ 633.737176][ T6029] panic+0xca/0xd0 [ 633.738415][ T6029] ? __pfx_panic+0x10/0x10 [ 633.739848][ T6029] ? hci_uart_write_work+0x82d/0x960 [ 633.741547][ T6029] ? preempt_schedule_common+0x44/0xc0 [ 633.743280][ T6029] ? preempt_schedule_thunk+0x16/0x30 [ 633.744988][ T6029] ? check_panic_on_warn+0x1f/0xb0 [ 633.746901][ T6029] check_panic_on_warn+0xab/0xb0 [ 633.748510][ T6029] end_report+0x107/0x160 [ 633.749904][ T6029] kasan_report+0xee/0x110 [ 633.751333][ T6029] ? hci_uart_write_work+0x82d/0x960 [ 633.753003][ T6029] hci_uart_write_work+0x82d/0x960 [ 633.754632][ T6029] ? __pfx_pty_write+0x10/0x10 [ 633.756158][ T6029] process_one_work+0x9ba/0x1b20 [ 633.757765][ T6029] ? __pfx_process_one_work+0x10/0x10 [ 633.759470][ T6029] ? assign_work+0x1a0/0x250 [ 633.760935][ T6029] worker_thread+0x6c8/0xf10 [ 633.762426][ T6029] ? __pfx_worker_thread+0x10/0x10 [ 633.764060][ T6029] kthread+0x3c5/0x780 [ 633.765373][ T6029] ? __pfx_kthread+0x10/0x10 [ 633.766863][ T6029] ? rcu_is_watching+0x12/0xc0 [ 633.768401][ T6029] ? __pfx_kthread+0x10/0x10 [ 633.769882][ T6029] ret_from_fork+0x983/0xb10 [ 633.771360][ T6029] ? __pfx_ret_from_fork+0x10/0x10 [ 633.772987][ T6029] ? __switch_to+0x7af/0x10d0 [ 633.774781][ T6029] ? __pfx_kthread+0x10/0x10 [ 633.776257][ T6029] ret_from_fork_asm+0x1a/0x30 [ 633.777854][ T6029] [ 633.779541][ T6029] Kernel Offset: disabled [ 633.780902][ T6029] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:30:30 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000072 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff853011e5 RDI=ffffffff9aed9260 RBP=ffffffff9aed9220 RSP=ffffc90004d5f5a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3430383838666666 R12=0000000000000000 R13=0000000000000072 R14=ffffffff9aed9220 R15=ffffffff85301180 RIP=ffffffff8530120f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976fc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73f6288 CR3=0000000078a0c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000005 RBX=ffff888024158000 RCX=ffffffff815e3180 RDX=0000000000000000 RSI=ffffffff815e3199 RDI=ffff8880279abdb4 RBP=ffff8880279aa4c0 RSP=ffffc900070af4f0 R8 =0000000000000003 R9 =0000000000000000 R10=000000000000002b R11=0000000000000001 R12=ffff8880241598f6 R13=0000000000000000 R14=000000000000002b R15=000000000000002b RIP=ffffffff815e31d2 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977fc000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080021000 CR3=000000006c40e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=ffff88804e328000 RSI=ffffffff81b1afa5 RDI=ffff888071698140 RBP=ffff88804e328000 RSP=ffffc900074bfa78 R8 =0000000000000000 R9 =ffffed100e2d3029 R10=ffff88807169814b R11=ffff88804e328b30 R12=0000000000000000 R13=ffff888071698140 R14=ffff88804e328000 R15=0000000000000000 RIP=ffffffff81b09740 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880978fc000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5455da4 CR3=000000006b04d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000008f7e6f RBX=0000000000000003 RCX=ffffffff8b7576d9 RDX=0000000000000000 RSI=ffffffff8daca44f RDI=ffffffff8bf2b500 RBP=ffffed1003b51000 RSP=ffffc9000048fde8 R8 =0000000000000001 R9 =ffffed10056a673d R10=ffff88802b5339eb R11=ffff88801da88b30 R12=0000000000000003 R13=ffff88801da88000 R14=ffffffff9088e7d0 R15=0000000000000000 RIP=ffffffff8b755dcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979fc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f716f4e0 CR3=000000006b04d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000