last executing test programs: 9.442933402s ago: executing program 3 (id=618): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r4, 0x0, &(0x7f0000000800)) ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe, 0x1000000}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) io_setup(0x8f0, &(0x7f0000002400)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf8}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@call={0x85, 0x0, 0x0, 0xf}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 7.188477968s ago: executing program 0 (id=622): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffe, 0xd1}]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)="ce89605a43b9e8a29e18354e0cac707858f9b0a4531100", 0x17}, 0x1, 0x0, 0x0, 0x48054}, 0x20044806) r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) ioctl$IOC_PR_PREEMPT(r5, 0x401870cb, &(0x7f0000000800)={0x3000000000000000, 0x40e, 0x6, 0x3}) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x7}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1ff}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r8 = memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\x86\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="81bd2bbd7000fbdbdf251400000018000780080002"], 0x2c}}, 0x80) sendmsg$nl_route(r5, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000006800010000000000000000000a00000000000000040004000087d716a3c2cf96dc2e6a4134ebaf5ffdfeaeeeff77a9bb6d396f99df2bfd4d412ef40dc8ef5906ff69d82a80aa68986a1fed6498d310b310b1b0fa11356d"], 0x1c}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) r8 = openat$binfmt(0xffffffffffffff9c, r4, 0x2, 0x0) close(r8) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000046119641a000000ed858b46cf7a1f5d9cc9f6ec54ce3bee44a0a7b1e4ec4a2b5366cdc3794f30f92dd5f7fe15c76e985d48f20279d545"], &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94) 6.394011995s ago: executing program 2 (id=624): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r0 = open$dir(&(0x7f0000000000)='./file0/file1\x00', 0x200000, 0x116) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000640)="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", 0x16a}, {&(0x7f0000001600)="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", 0x5da}], 0x2, 0x0, 0x0, 0x2c}, 0x40440c4) getsockopt$bt_hci(r2, 0x0, 0x2, &(0x7f0000000100)=""/29, &(0x7f0000000200)=0x1d) r3 = open_tree(r0, &(0x7f0000000080)='./file0/file1\x00', 0x100) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mremap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000000b000/0x3000)=nil) mremap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000008000/0x4000)=nil) r5 = socket(0x10, 0x80002, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r5) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x14}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)={0x4c, r6, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44081}, 0x4040004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x4}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x4c}}, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x14, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}}, 0x14}}, 0x0) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x81c0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r3) 6.180277643s ago: executing program 2 (id=626): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r2, 0x20, 0x70bd2b, 0x0, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x5}]}, 0x24}}, 0x24000000) socket$inet6_tcp(0xa, 0x1, 0x0) fanotify_init(0x200, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f0000000740)='ns/ipc\x00') sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0xc000) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x7, 0xd, 0x5, 0x1, 0x3}, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xb6, 0x0, r5}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) execve(0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x2a020480) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x16c5, 0x0, 0x4, 0x0, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, 0x0, 0x0) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, 0x0) 6.129443644s ago: executing program 3 (id=627): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00890600000000000000000000000088a8140081002b0086dd6900040000082c"], 0x4a) unlink(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x200a00, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000080)={0x0, {0x1, 0xffffffff}}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r7, 0x540a, 0x0) ioctl$TCFLSH(r7, 0x400455c8, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) 6.036309843s ago: executing program 1 (id=628): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) clock_adjtime(0x0, &(0x7f0000000100)={0x2, 0x6a, 0x5, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r5, 0x9000aea4, &(0x7f0000000480)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0xbab58032ce08cbfd, {{0x42}}}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 5.297813546s ago: executing program 0 (id=629): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4c0c8) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) tkill(r4, 0xb) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.032252688s ago: executing program 2 (id=630): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd0, &(0x7f0000004680)=0x80, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x283d, &(0x7f0000000380)={0x0, 0xb173, 0x200, 0x3, 0xce}, &(0x7f0000000100), &(0x7f0000000400)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) 4.861344348s ago: executing program 1 (id=631): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xe, 0x4, 0x8, 0x4f63}, 0x50) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 4.824105231s ago: executing program 1 (id=632): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x10, r2) ptrace$peeksig(0x4212, r2, &(0x7f0000000140), 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x9, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000000)) bind$alg(r4, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)=0x6) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000100)=r0, 0x4) read$dsp(r3, &(0x7f00000011c0)=""/4117, 0x200021d5) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 4.483161363s ago: executing program 1 (id=633): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v1to_da_alloc', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0xa08410, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2, 0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) preadv(r8, &(0x7f0000001cc0)=[{&(0x7f0000000200)=""/130, 0x82}], 0x1, 0x0, 0x7f) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0) 3.303676841s ago: executing program 3 (id=634): execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x2018, 0x103) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001740)=ANY=[@ANYRES16=0x0, @ANYBLOB, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xc, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = openat$binfmt_register(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r4, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x8, 0x3a, '', 0x3a, '[$(.[(', 0x3a, './file0'}, 0x2d) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) write$cgroup_int(r0, &(0x7f0000000040)=0x722, 0xfdef) getpriority(0x2, 0x0) 3.294415983s ago: executing program 0 (id=642): getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_thread_area(&(0x7f0000000300)={0x9, 0x100000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mount$cgroup(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)={[{@subsystem='cpu'}, {@subsystem='net_cls'}, {@clone_children}, {@none}, {@xattr}], [{@measure}, {@obj_type={'obj_type', 0x3d, ',!'}}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) r4 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0), 0x161) unshare(0x40020000) 3.290592591s ago: executing program 1 (id=635): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000380)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000880)={0x0, 0x70e9, 0xffffffff, 0x8000, 0x3e, 0x1, 0x3e, 0xdc, {0x0, @in6={{0xa, 0x4e23, 0xfffff801, @mcast1, 0xcb5}}, 0x7f, 0xfffff801, 0x80, 0x1, 0x4}}, &(0x7f0000000080)=0xb0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f00000005c0)={0x0, 0x7}, &(0x7f0000000600)=0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{}, 0x0, &(0x7f0000001c40)=r4}, 0x20) unshare(0x64000600) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r6, 0xf504, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x1}, [@printk={@d, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2084}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000300)='GPL\x00', 0x6, 0x5, &(0x7f0000000340)=""/5}, 0x94) open(0x0, 0x0, 0x2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf2509000200737b7a32000000000800410073697700140033006c6f0000000000000000000000000000dbb422c6f070cc81453ba110e019957e3c941e62cc44e4154194e90eeb78e3085c83c053640e139557f77e76a6610ace1f5b4850039c107febf5d5d01c09cdd688e26e5d7927552c53846eed"], 0x38}, 0x1, 0x0, 0x0, 0x404c090}, 0x810) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4e}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x271c, 0x0, &(0x7f0000000000)) 2.339197277s ago: executing program 1 (id=636): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) socket$nl_generic(0x10, 0x3, 0x10) epoll_create(0x401) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000100)={0x9}) syz_usb_disconnect(r0) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000002580)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2404c054}, 0x40) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2da8}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000480)=[{{0x2, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x2}}, {{0x4, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}, {{0x1, 0x1, 0x1}, {0x4, 0x1}}], 0x38) r6 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x20000, 0x2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc0045540, &(0x7f0000000100)=0xfdfdffff) close(r3) r7 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) close_range(r7, 0xffffffffffffffff, 0x0) 2.109373059s ago: executing program 3 (id=637): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x10, r2) ptrace$peeksig(0x4212, r2, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x9, 0x0) r3 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000000)) bind$alg(r4, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)=0x6) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000100)=r0, 0x4) read$dsp(r3, &(0x7f00000011c0)=""/4117, 0x200021d5) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 1.916233746s ago: executing program 0 (id=638): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000380)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000880)={0x0, 0x70e9, 0xffffffff, 0x8000, 0x3e, 0x1, 0x3e, 0xdc, {0x0, @in6={{0xa, 0x4e23, 0xfffff801, @mcast1, 0xcb5}}, 0x7f, 0xfffff801, 0x80, 0x1, 0x4}}, &(0x7f0000000080)=0xb0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f00000005c0)={0x0, 0x7}, &(0x7f0000000600)=0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{}, 0x0, &(0x7f0000001c40)=r4}, 0x20) unshare(0x64000600) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r6, 0xf504, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x1}, [@printk={@d, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2084}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000300)='GPL\x00', 0x6, 0x5, &(0x7f0000000340)=""/5}, 0x94) open(0x0, 0x0, 0x2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf2509000200737b7a32000000000800410073697700140033006c6f0000000000000000000000000000dbb422c6f070cc81453ba110e019957e3c941e62cc44e4154194e90eeb78e3085c83c053640e139557f77e76a6610ace1f5b4850039c107febf5d5d01c09cdd688e26e5d7927552c53846eed"], 0x38}, 0x1, 0x0, 0x0, 0x404c090}, 0x810) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4e}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x271c, 0x0, &(0x7f0000000000)) 1.560921931s ago: executing program 0 (id=639): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r2, 0x20, 0x70bd2b, 0x0, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x5}]}, 0x24}}, 0x24000000) socket$inet6_tcp(0xa, 0x1, 0x0) fanotify_init(0x200, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f0000000740)='ns/ipc\x00') sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0xc000) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x7, 0xd, 0x5, 0x1, 0x3}, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xb6, 0x0, r5}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) execve(0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x2a020480) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x16c5, 0x0, 0x4, 0x0, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, 0x0, 0x0) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, 0x0) 1.56076976s ago: executing program 2 (id=640): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xe, 0x4, 0x8, 0x4f63}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1.470504994s ago: executing program 2 (id=641): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x10, r2) ptrace$peeksig(0x4212, r2, &(0x7f0000000140), 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x9, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000000)) bind$alg(r4, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)=0x6) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000100)=r0, 0x4) read$dsp(r3, &(0x7f00000011c0)=""/4117, 0x200021d5) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 569.298814ms ago: executing program 0 (id=643): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00890600000000000000000000000088a8140081002b0086dd6900040000082c"], 0x4a) unlink(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x200a00, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000080)={0x0, {0x1, 0xffffffff}}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r7, 0x540a, 0x0) ioctl$TCFLSH(r7, 0x400455c8, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) 568.883561ms ago: executing program 3 (id=644): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYBLOB="0000000000000000b703000000000000850000000d00"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "ffffffdd00", '\x00', "4807a1e6"}, 0x28) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@ip_tos_int={{0x10, 0x0, 0x1, 0xf8ee}}, @ip_tos_int={{0x10, 0x11a, 0x1, 0x8}}], 0x20}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1b2e}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000080)={0x2c, &(0x7f00000012c0)={0x0, 0x22, 0x5, {0x5, 0xc, "26ed60"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r7 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000140)={0x1, 0x19, 0x0, 0x0}) 0s ago: executing program 2 (id=645): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000056b94e22dc4916cb4e400000005000000000000000000"], 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r4, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0xffff, 0xfff2}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x1c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1a6f}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x24, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:24285' (ED25519) to the list of known hosts. [ 48.669962][ T5888] cgroup: Unknown subsys name 'net' [ 48.796399][ T5888] cgroup: Unknown subsys name 'cpuset' [ 48.800783][ T5888] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.633579][ T5888] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.469538][ T5948] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.469786][ T5949] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.472414][ T5948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.479219][ T5948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.482557][ T5948] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.485944][ T5948] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.487694][ T5950] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.489486][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.491451][ T5950] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.497492][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.500398][ T5955] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.500922][ T5948] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.503379][ T5955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.505543][ T5950] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.510700][ T5955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.511418][ T5954] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.513448][ T5955] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.516539][ T5956] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.520052][ T5955] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.528440][ T5956] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.824133][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 53.829347][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 53.834482][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 53.861343][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 54.008921][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.012272][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.014933][ T5940] bridge_slave_0: entered allmulticast mode [ 54.017833][ T5940] bridge_slave_0: entered promiscuous mode [ 54.022147][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.024570][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.026984][ T5940] bridge_slave_1: entered allmulticast mode [ 54.029815][ T5940] bridge_slave_1: entered promiscuous mode [ 54.034025][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.036688][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.038976][ T5951] bridge_slave_0: entered allmulticast mode [ 54.041653][ T5951] bridge_slave_0: entered promiscuous mode [ 54.064834][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.067114][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.069441][ T5951] bridge_slave_1: entered allmulticast mode [ 54.079652][ T5951] bridge_slave_1: entered promiscuous mode [ 54.093475][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.095776][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.098092][ T5938] bridge_slave_0: entered allmulticast mode [ 54.100822][ T5938] bridge_slave_0: entered promiscuous mode [ 54.105765][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.108107][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.110383][ T5939] bridge_slave_0: entered allmulticast mode [ 54.113866][ T5939] bridge_slave_0: entered promiscuous mode [ 54.118490][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.121546][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.125531][ T5939] bridge_slave_1: entered allmulticast mode [ 54.129285][ T5939] bridge_slave_1: entered promiscuous mode [ 54.148945][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.152317][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.155333][ T5938] bridge_slave_1: entered allmulticast mode [ 54.159132][ T5938] bridge_slave_1: entered promiscuous mode [ 54.181367][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.212826][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.218809][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.237472][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.243308][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.258827][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.264729][ T5940] team0: Port device team_slave_0 added [ 54.276850][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.296034][ T5940] team0: Port device team_slave_1 added [ 54.299878][ T5951] team0: Port device team_slave_0 added [ 54.303777][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.325195][ T5951] team0: Port device team_slave_1 added [ 54.335702][ T5939] team0: Port device team_slave_0 added [ 54.348165][ T5939] team0: Port device team_slave_1 added [ 54.362530][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.365670][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.376965][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.389433][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.391860][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.400310][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.414741][ T5938] team0: Port device team_slave_0 added [ 54.422077][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.424838][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.433765][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.438336][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.440611][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.450812][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.456890][ T5938] team0: Port device team_slave_1 added [ 54.465156][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.467352][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.478538][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.517020][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.520250][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.532023][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.553399][ T5951] hsr_slave_0: entered promiscuous mode [ 54.556703][ T5951] hsr_slave_1: entered promiscuous mode [ 54.562647][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.565276][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.573752][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.581236][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.584081][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.592054][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.599604][ T5940] hsr_slave_0: entered promiscuous mode [ 54.602967][ T5940] hsr_slave_1: entered promiscuous mode [ 54.605619][ T5940] debugfs: 'hsr0' already exists in 'hsr' [ 54.607947][ T5940] Cannot create hsr debugfs directory [ 54.681153][ T5939] hsr_slave_0: entered promiscuous mode [ 54.683581][ T5939] hsr_slave_1: entered promiscuous mode [ 54.685752][ T5939] debugfs: 'hsr0' already exists in 'hsr' [ 54.687582][ T5939] Cannot create hsr debugfs directory [ 54.706807][ T5938] hsr_slave_0: entered promiscuous mode [ 54.709175][ T5938] hsr_slave_1: entered promiscuous mode [ 54.711417][ T5938] debugfs: 'hsr0' already exists in 'hsr' [ 54.713963][ T5938] Cannot create hsr debugfs directory [ 54.991334][ T5951] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.998024][ T5951] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.003873][ T5951] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.015698][ T5951] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.059466][ T5940] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.064812][ T5940] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.073504][ T5940] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.083314][ T5940] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.129214][ T5939] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.139820][ T5939] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.145469][ T5939] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.150229][ T5939] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.256305][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.291637][ T5938] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.299429][ T5938] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.308820][ T5938] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.316411][ T5938] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.334232][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.356676][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.359450][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.374704][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.385625][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.388365][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.394353][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.414659][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.431759][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.437372][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.440183][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.462564][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.465356][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.469673][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.472781][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.488551][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.491491][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.562957][ T5956] Bluetooth: hci3: command tx timeout [ 55.562960][ T5302] Bluetooth: hci0: command tx timeout [ 55.563021][ T5955] Bluetooth: hci1: command tx timeout [ 55.563229][ T5944] Bluetooth: hci2: command tx timeout [ 55.613608][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.630589][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.638496][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.640846][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.658808][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.661237][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.709885][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.734600][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.782733][ T5951] veth0_vlan: entered promiscuous mode [ 55.793183][ T5951] veth1_vlan: entered promiscuous mode [ 55.799527][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.819764][ T5939] veth0_vlan: entered promiscuous mode [ 55.827126][ T5939] veth1_vlan: entered promiscuous mode [ 55.860805][ T5940] veth0_vlan: entered promiscuous mode [ 55.864438][ T5951] veth0_macvtap: entered promiscuous mode [ 55.869620][ T5951] veth1_macvtap: entered promiscuous mode [ 55.878806][ T5940] veth1_vlan: entered promiscuous mode [ 55.885926][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.893043][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.907293][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.910382][ T5939] veth0_macvtap: entered promiscuous mode [ 55.917620][ T5939] veth1_macvtap: entered promiscuous mode [ 55.932470][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.935378][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.944510][ T5940] veth0_macvtap: entered promiscuous mode [ 55.948211][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.950997][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.965266][ T5940] veth1_macvtap: entered promiscuous mode [ 55.975248][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.989897][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.996749][ T5938] veth0_vlan: entered promiscuous mode [ 56.007053][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.013019][ T5938] veth1_vlan: entered promiscuous mode [ 56.033715][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.036712][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.040295][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.053496][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.056198][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.064362][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.081873][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.085788][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.088728][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.092933][ T46] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.116111][ T46] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.119616][ T46] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.141434][ T46] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.142554][ T5951] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.158714][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.161989][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.166614][ T5938] veth0_macvtap: entered promiscuous mode [ 56.171003][ T5938] veth1_macvtap: entered promiscuous mode [ 56.207767][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.210139][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.210373][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.225719][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.228624][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.231270][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.239996][ T80] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.244024][ T80] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.252037][ T80] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.255199][ T80] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.278000][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.280609][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.369449][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.372645][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.400069][ T6032] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.430395][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.434626][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.662879][ T40] audit: type=1326 audit(1769421846.562:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.3.4" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 56.669498][ T40] audit: type=1326 audit(1769421846.562:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.3.4" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 56.856372][ T40] audit: type=1326 audit(1769421846.562:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.3.4" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 56.866177][ T40] audit: type=1326 audit(1769421846.562:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.3.4" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 56.875164][ T40] audit: type=1326 audit(1769421846.562:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.3.4" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 56.884111][ T40] audit: type=1326 audit(1769421846.572:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.3.4" exe="/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 56.892961][ T40] audit: type=1326 audit(1769421846.572:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.3.4" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 56.901622][ T40] audit: type=1326 audit(1769421846.572:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.3.4" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 56.910489][ T40] audit: type=1326 audit(1769421846.572:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.3.4" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 56.925165][ T40] audit: type=1326 audit(1769421846.572:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.3.4" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 57.011365][ T6033] ceph: No mds server is up or the cluster is laggy [ 57.015484][ T10] libceph: connect (1)[c::]:6789 error -101 [ 57.017855][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 57.667144][ T5955] Bluetooth: hci1: command tx timeout [ 57.669605][ T5955] Bluetooth: hci2: command tx timeout [ 57.672202][ T5955] Bluetooth: hci0: command tx timeout [ 57.674121][ T5956] Bluetooth: hci3: command tx timeout [ 57.722501][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.732366][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.103246][ T34] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 58.193414][ T6068] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 58.196145][ T6068] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 58.203866][ T6068] vhci_hcd vhci_hcd.0: Device attached [ 58.254634][ T34] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 58.254664][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 58.254685][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 58.254704][ T34] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 58.254743][ T34] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 58.254761][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.262979][ T34] usb 6-1: config 0 descriptor?? [ 58.502009][ T24] usb 38-1: SetAddress Request (2) to port 0 [ 58.504492][ T24] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 58.712376][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.721145][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.963300][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 58.982632][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 59.019334][ T6070] vhci_hcd: connection reset by peer [ 59.025116][ T1143] vhci_hcd vhci_hcd.0: stop threads [ 59.027236][ T1143] vhci_hcd vhci_hcd.0: release socket [ 59.029443][ T1143] vhci_hcd vhci_hcd.0: disconnect device [ 59.072121][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.075073][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.078025][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.142647][ T0] NOHZ tick-stop error: local softirq work is pending, handler #310!!! [ 59.221344][ T6102] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 59.223455][ T6102] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 59.227005][ T6102] vhci_hcd vhci_hcd.0: Device attached [ 59.271549][ T6102] smc: net device ip6_vti0 applied user defined pnetid SYZ1 [ 59.502250][ T6053] usb 42-1: SetAddress Request (2) to port 0 [ 59.504917][ T6053] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 59.722140][ T5956] Bluetooth: hci3: command tx timeout [ 59.723992][ T5956] Bluetooth: hci2: command tx timeout [ 59.725699][ T5956] Bluetooth: hci1: command tx timeout [ 59.727685][ T5944] Bluetooth: hci0: command tx timeout [ 60.761020][ T6104] vhci_hcd: connection reset by peer [ 60.771265][ T1143] vhci_hcd vhci_hcd.2: stop threads [ 60.773130][ T1143] vhci_hcd vhci_hcd.2: release socket [ 60.775039][ T1143] vhci_hcd vhci_hcd.2: disconnect device [ 60.802282][ T34] usbhid 6-1:0.0: can't add hid device: -71 [ 60.808606][ T34] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 60.814893][ T34] usb 6-1: USB disconnect, device number 2 [ 61.802308][ T5944] Bluetooth: hci1: command tx timeout [ 61.804581][ T5944] Bluetooth: hci2: command tx timeout [ 61.806466][ T5944] Bluetooth: hci3: command tx timeout [ 61.808228][ T5955] Bluetooth: hci0: command tx timeout [ 62.283253][ T6137] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 62.286134][ T6137] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 62.672083][ T6137] vhci_hcd vhci_hcd.0: Device attached [ 62.814708][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 62.814726][ T40] audit: type=1326 audit(1769421852.692:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6138 comm="syz.1.16" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 62.939842][ T40] audit: type=1326 audit(1769421852.692:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6138 comm="syz.1.16" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 62.962136][ T40] audit: type=1326 audit(1769421852.702:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6138 comm="syz.1.16" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 62.970987][ T40] audit: type=1326 audit(1769421852.702:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6138 comm="syz.1.16" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 62.981627][ T40] audit: type=1326 audit(1769421852.702:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6138 comm="syz.1.16" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 62.990597][ T40] audit: type=1326 audit(1769421852.702:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6138 comm="syz.1.16" exe="/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 62.999800][ T40] audit: type=1326 audit(1769421852.702:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6138 comm="syz.1.16" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 63.009379][ T40] audit: type=1326 audit(1769421852.712:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6138 comm="syz.1.16" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 63.018550][ T40] audit: type=1326 audit(1769421852.712:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6138 comm="syz.1.16" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 63.027928][ T40] audit: type=1326 audit(1769421852.712:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6138 comm="syz.1.16" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 63.572122][ T24] usb 38-1: device descriptor read/8, error -110 [ 63.761642][ T6160] loop2: detected capacity change from 0 to 7 [ 63.845799][ T6160] Dev loop2: unable to read RDB block 7 [ 63.848252][ T6160] loop2: unable to read partition table [ 63.851211][ T6160] loop2: partition table beyond EOD, truncated [ 63.854154][ T6160] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 63.973515][ T24] usb usb38-port1: attempt power cycle [ 64.112096][ T6136] Illegal XDP return value 4294967274 on prog (id 6) dev N/A, expect packet loss! [ 64.302491][ T6139] vhci_hcd: connection closed [ 64.313747][ T59] vhci_hcd vhci_hcd.2: stop threads [ 64.317048][ T59] vhci_hcd vhci_hcd.2: release socket [ 64.333817][ T59] vhci_hcd vhci_hcd.2: disconnect device [ 64.592899][ T24] usb usb38-port1: unable to enumerate USB device [ 64.602110][ T6053] usb 42-1: device descriptor read/8, error -110 [ 64.725771][ T6174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 64.734423][ T6174] netlink: 40 bytes leftover after parsing attributes in process `syz.3.22'. [ 64.994994][ T6053] usb usb42-port1: attempt power cycle [ 65.323841][ T6166] Zero length message leads to an empty skb [ 66.480585][ T6053] usb usb42-port1: unable to enumerate USB device [ 66.851400][ T6193] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 66.854279][ T6193] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 66.857740][ T6193] vhci_hcd vhci_hcd.0: Device attached [ 67.244978][ T6201] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 67.247425][ T6201] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 67.260641][ T53] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 67.292177][ T6201] vhci_hcd vhci_hcd.0: Device attached [ 67.682061][ T6053] usb 42-1: SetAddress Request (6) to port 0 [ 67.684118][ T6053] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 67.713176][ T6207] /dev/sr0: Can't open blockdev [ 68.201393][ T6194] vhci_hcd: connection reset by peer [ 68.212543][ T59] vhci_hcd vhci_hcd.3: stop threads [ 68.214277][ T59] vhci_hcd vhci_hcd.3: release socket [ 68.217191][ T59] vhci_hcd vhci_hcd.3: disconnect device [ 68.288951][ T6202] vhci_hcd: connection reset by peer [ 68.292149][ T13] vhci_hcd vhci_hcd.2: stop threads [ 68.294060][ T13] vhci_hcd vhci_hcd.2: release socket [ 68.295878][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 69.923512][ T29] libceph: connect (1)[c::]:6789 error -101 [ 69.926456][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 69.963862][ T6229] ceph: No mds server is up or the cluster is laggy [ 70.803791][ T6244] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 70.813118][ T6244] netlink: 40 bytes leftover after parsing attributes in process `syz.0.34'. [ 72.352968][ T53] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 72.762115][ T6053] usb 42-1: device descriptor read/8, error -110 [ 73.186731][ T6053] usb usb42-port1: attempt power cycle [ 73.905548][ T6053] usb usb42-port1: unable to enumerate USB device [ 74.399714][ T6273] Bluetooth: MGMT ver 1.23 [ 75.966605][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 75.969210][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.316599][ T6289] batman_adv: batadv0: Adding interface: gretap1 [ 76.319470][ T6289] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.330190][ T6289] batman_adv: batadv0: Interface activated: gretap1 [ 76.753024][ T6292] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.351996][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 77.352016][ T40] audit: type=1326 audit(1769421883.226:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.3.50" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 77.375536][ T40] audit: type=1326 audit(1769421883.226:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.3.50" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 77.390957][ T40] audit: type=1326 audit(1769421883.226:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.3.50" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 77.404497][ T40] audit: type=1326 audit(1769421883.226:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.3.50" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 77.417814][ T40] audit: type=1326 audit(1769421883.226:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.3.50" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 77.433212][ T40] audit: type=1326 audit(1769421883.226:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.3.50" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 77.473629][ T40] audit: type=1326 audit(1769421883.226:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.3.50" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 77.489391][ T40] audit: type=1326 audit(1769421883.226:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.3.50" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 77.502181][ T40] audit: type=1326 audit(1769421883.236:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.3.50" exe="/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 77.510893][ T40] audit: type=1326 audit(1769421883.236:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.3.50" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 78.307764][ T6303] pim6reg: entered allmulticast mode [ 81.372540][ T6331] /dev/sr0: Can't open blockdev [ 81.566712][ T6338] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 81.568820][ T6338] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 81.577653][ T6338] vhci_hcd vhci_hcd.0: Device attached [ 81.668501][ T6338] netlink: 'syz.2.57': attribute type 12 has an invalid length. [ 82.008810][ T6347] vhci_hcd: connection closed [ 82.018016][ T1143] vhci_hcd vhci_hcd.2: stop threads [ 82.021441][ T1143] vhci_hcd vhci_hcd.2: release socket [ 82.023368][ T1143] vhci_hcd vhci_hcd.2: disconnect device [ 82.082720][ T5952] usb 42-1: enqueue for inactive port 0 [ 82.365956][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 82.365971][ T40] audit: type=1326 audit(1769421888.276:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6352 comm="syz.1.60" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 82.378025][ T40] audit: type=1326 audit(1769421888.286:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6352 comm="syz.1.60" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 82.430624][ T40] audit: type=1326 audit(1769421888.336:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6352 comm="syz.1.60" exe="/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 82.435862][ T6356] pim6reg: entered allmulticast mode [ 82.439117][ T40] audit: type=1326 audit(1769421888.336:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6352 comm="syz.1.60" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 82.450050][ T40] audit: type=1326 audit(1769421888.336:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6352 comm="syz.1.60" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 82.459524][ T40] audit: type=1326 audit(1769421888.346:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6352 comm="syz.1.60" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 82.468651][ T40] audit: type=1326 audit(1769421888.376:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6352 comm="syz.1.60" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 82.477765][ T40] audit: type=1326 audit(1769421888.376:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6352 comm="syz.1.60" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 82.486839][ T40] audit: type=1326 audit(1769421888.376:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6352 comm="syz.1.60" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 82.500259][ T40] audit: type=1326 audit(1769421888.376:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6352 comm="syz.1.60" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 82.699584][ T5952] usb usb42-port1: attempt power cycle [ 82.723930][ T6357] block device autoloading is deprecated and will be removed. [ 83.312504][ T5952] usb usb42-port1: unable to enumerate USB device [ 83.542717][ T6373] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 83.544969][ T6373] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 83.634061][ T6373] vhci_hcd vhci_hcd.0: Device attached [ 83.962125][ T1327] usb 40-1: SetAddress Request (2) to port 0 [ 83.964750][ T1327] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 85.730712][ T6374] vhci_hcd: connection reset by peer [ 85.733547][ T1142] vhci_hcd vhci_hcd.1: stop threads [ 85.735598][ T1142] vhci_hcd vhci_hcd.1: release socket [ 85.737803][ T1142] vhci_hcd vhci_hcd.1: disconnect device [ 86.316857][ T75] cfg80211: failed to load regulatory.db [ 87.853050][ T6401] /dev/sr0: Can't open blockdev [ 88.847291][ T6410] trusted_key: syz.2.71 sent an empty control message without MSG_MORE. [ 89.002531][ T1327] usb 40-1: device descriptor read/8, error -110 [ 89.392852][ T1327] usb usb40-port1: attempt power cycle [ 89.491127][ T6421] ceph: No mds server is up or the cluster is laggy [ 89.496354][ T75] libceph: connect (1)[c::]:6789 error -101 [ 89.502118][ T75] libceph: mon0 (1)[c::]:6789 connect error [ 89.952775][ T1327] usb usb40-port1: unable to enumerate USB device [ 90.199319][ T6437] syz.3.76 (6437): /proc/6428/oom_adj is deprecated, please use /proc/6428/oom_score_adj instead. [ 90.212183][ T6437] trusted_key: encrypted_key: insufficient parameters specified [ 90.393717][ T6437] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 91.787471][ T6482] input: syz1 as /devices/virtual/input/input5 [ 92.745972][ T6484] /dev/sr0: Can't open blockdev [ 94.771334][ T6499] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 95.471191][ T6515] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 95.473905][ T6515] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 95.477166][ T6515] vhci_hcd vhci_hcd.0: Device attached [ 95.493826][ T75] hid-generic 0003:A7B9:FFFFFFFC.0002: unknown main item tag 0x0 [ 95.496460][ T75] hid-generic 0003:A7B9:FFFFFFFC.0002: unknown main item tag 0x0 [ 95.498913][ T75] hid-generic 0003:A7B9:FFFFFFFC.0002: unknown main item tag 0x0 [ 95.528724][ T75] hid-generic 0003:A7B9:FFFFFFFC.0002: hidraw1: USB HID v0.00 Device [syz1] on syz1 [ 95.672363][ T6015] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 95.732360][ T6015] usb 43-1: new full-speed USB device number 3 using vhci_hcd [ 95.954333][ T6516] vhci_hcd: connection reset by peer [ 95.958799][ T13] vhci_hcd vhci_hcd.3: stop threads [ 95.961168][ T13] vhci_hcd vhci_hcd.3: release socket [ 95.964034][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 100.696486][ T6569] batman_adv: batadv0: Adding interface: gretap1 [ 100.699371][ T6569] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.710247][ T6569] batman_adv: batadv0: Interface activated: gretap1 [ 101.153234][ T6015] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 103.272215][ T6085] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 103.583706][ T6085] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 103.587531][ T6085] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 103.591236][ T6085] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 103.594456][ T6085] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 103.598604][ T6085] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.601603][ T6085] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.609922][ T6085] usb 8-1: config 0 descriptor?? [ 103.778065][ T6597] evm: overlay not supported [ 104.055501][ T6602] ALSA: mixer_oss: invalid OSS volume '' [ 105.507908][ T6085] usbhid 8-1:0.0: can't add hid device: -71 [ 105.510410][ T6085] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 105.517891][ T6085] usb 8-1: USB disconnect, device number 2 [ 105.676928][ T6620] xt_TPROXY: Can be used only with -p tcp or -p udp [ 105.685632][ T6615] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 105.688476][ T6615] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 105.691569][ T6615] vhci_hcd vhci_hcd.0: Device attached [ 105.951996][ T53] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 106.123162][ T6616] vhci_hcd: connection reset by peer [ 106.125139][ T1200] vhci_hcd vhci_hcd.1: stop threads [ 106.126871][ T1200] vhci_hcd vhci_hcd.1: release socket [ 106.129884][ T1200] vhci_hcd vhci_hcd.1: disconnect device [ 106.804731][ T6636] qrtr: Invalid version 0 [ 107.107705][ T6635] batman_adv: batadv0: Adding interface: gretap1 [ 107.109854][ T6635] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.117207][ T6635] batman_adv: batadv0: Interface activated: gretap1 [ 108.852087][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 108.852098][ T40] audit: type=1326 audit(1769421914.756:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz.2.117" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x0 [ 109.054172][ T6657] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 110.413682][ T6670] netlink: 24 bytes leftover after parsing attributes in process `syz.0.121'. [ 111.412075][ T53] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 113.055977][ T40] audit: type=1326 audit(1769421918.966:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.2.125" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 113.071989][ T40] audit: type=1326 audit(1769421918.966:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.2.125" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 113.078655][ T40] audit: type=1326 audit(1769421918.966:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.2.125" exe="/syz-executor" sig=0 arch=40000003 syscall=459 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 113.092005][ T40] audit: type=1326 audit(1769421918.966:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.2.125" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 113.104466][ T40] audit: type=1326 audit(1769421918.966:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.2.125" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 113.111281][ T40] audit: type=1326 audit(1769421918.966:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.2.125" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 113.118060][ T40] audit: type=1326 audit(1769421918.966:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.2.125" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 113.125256][ T40] audit: type=1326 audit(1769421918.966:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.2.125" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 113.131850][ T40] audit: type=1326 audit(1769421918.966:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.2.125" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 113.219159][ T6689] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 113.221954][ T6689] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 113.227003][ T6689] vhci_hcd vhci_hcd.0: Device attached [ 113.571439][ T5952] usb 44-1: SetAddress Request (2) to port 0 [ 113.577616][ T5952] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 113.881783][ T40] kauditd_printk_skb: 450 callbacks suppressed [ 113.881796][ T40] audit: type=1326 audit(1769421919.786:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.2.125" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 113.891075][ T40] audit: type=1326 audit(1769421919.786:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.2.125" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf739d5a7 code=0x7ffc0000 [ 113.900136][ T40] audit: type=1326 audit(1769421919.786:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.2.125" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 113.907582][ T40] audit: type=1326 audit(1769421919.786:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.2.125" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf739d5a7 code=0x7ffc0000 [ 113.918201][ T40] audit: type=1326 audit(1769421919.786:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.2.125" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 113.928050][ T40] audit: type=1326 audit(1769421919.786:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.2.125" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf739d5a7 code=0x7ffc0000 [ 113.948694][ T40] audit: type=1326 audit(1769421919.786:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.2.125" exe="/syz-executor" sig=0 arch=40000003 syscall=143 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 113.957367][ T40] audit: type=1326 audit(1769421919.786:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.2.125" exe="/syz-executor" sig=0 arch=40000003 syscall=143 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 113.968031][ T40] audit: type=1326 audit(1769421919.786:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.2.125" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 113.978991][ T40] audit: type=1326 audit(1769421919.786:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.2.125" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf739d5a7 code=0x7ffc0000 [ 114.452086][ T6690] vhci_hcd: connection reset by peer [ 114.454983][ T1200] vhci_hcd vhci_hcd.3: stop threads [ 114.456685][ T1200] vhci_hcd vhci_hcd.3: release socket [ 114.458486][ T1200] vhci_hcd vhci_hcd.3: disconnect device [ 114.472044][ T6705] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 114.474347][ T6705] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 114.477445][ T6705] vhci_hcd vhci_hcd.0: Device attached [ 114.625124][ T6705] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 114.742145][ T6015] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 114.945054][ T6714] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 114.947252][ T6714] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 114.950900][ T6714] vhci_hcd vhci_hcd.0: Device attached [ 115.213644][ T6706] vhci_hcd: connection reset by peer [ 115.225574][ T1142] vhci_hcd vhci_hcd.2: stop threads [ 115.255931][ T34] usb 40-1: SetAddress Request (6) to port 0 [ 115.258474][ T1142] vhci_hcd vhci_hcd.2: release socket [ 115.301240][ T1142] vhci_hcd vhci_hcd.2: disconnect device [ 115.307446][ T34] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 115.382121][ T6715] vhci_hcd: connection reset by peer [ 115.386269][ T46] vhci_hcd vhci_hcd.1: stop threads [ 115.388555][ T46] vhci_hcd vhci_hcd.1: release socket [ 115.393026][ T46] vhci_hcd vhci_hcd.1: disconnect device [ 115.635825][ T6724] netlink: 'syz.0.131': attribute type 30 has an invalid length. [ 115.692096][ T6725] netlink: 'syz.0.131': attribute type 30 has an invalid length. [ 117.242477][ T61] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 117.436445][ T61] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 117.462445][ T61] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 117.489870][ T61] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 117.500617][ T61] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.516336][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.135'. [ 117.520691][ T6739] netlink: 24 bytes leftover after parsing attributes in process `syz.0.135'. [ 117.521182][ T6734] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 117.606166][ T61] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 117.806080][ T6734] bridge1: entered allmulticast mode [ 117.822553][ T6734] ªªªªª»: renamed from hsr0 (while UP) [ 118.682140][ T5952] usb 44-1: device descriptor read/8, error -110 [ 119.033797][ T61] usb 7-1: USB disconnect, device number 2 [ 119.254594][ T5952] usb usb44-port1: attempt power cycle [ 119.582877][ T6765] /dev/sr0: Can't open blockdev [ 119.792050][ T6767] capability: warning: `syz.1.139' uses deprecated v2 capabilities in a way that may be insecure [ 119.972094][ T6015] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 120.362099][ T34] usb 40-1: device descriptor read/8, error -110 [ 120.758594][ T34] usb usb40-port1: attempt power cycle [ 120.762907][ T5952] usb usb44-port1: unable to enumerate USB device [ 120.956182][ T6778] batman_adv: batadv0: Adding interface: gretap1 [ 120.958670][ T6778] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.967447][ T6778] batman_adv: batadv0: Interface activated: gretap1 [ 121.355883][ T34] usb usb40-port1: unable to enumerate USB device [ 122.188814][ T6782] : renamed from bond_slave_0 (while UP) [ 123.198615][ T6787] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.203723][ T6787] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.772157][ T6804] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 124.774610][ T6804] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 124.798657][ T6804] vhci_hcd vhci_hcd.0: Device attached [ 125.252052][ T9] usb 42-1: SetAddress Request (14) to port 0 [ 125.254654][ T9] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 126.372510][ T6805] vhci_hcd: connection reset by peer [ 126.468653][ T59] vhci_hcd vhci_hcd.2: stop threads [ 126.470852][ T59] vhci_hcd vhci_hcd.2: release socket [ 126.482073][ T59] vhci_hcd vhci_hcd.2: disconnect device [ 126.752788][ T6829] /dev/sr0: Can't open blockdev [ 128.732466][ T6848] lo speed is unknown, defaulting to 1000 [ 128.735894][ T6848] lo speed is unknown, defaulting to 1000 [ 128.740187][ T6848] lo speed is unknown, defaulting to 1000 [ 128.747886][ T6848] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 128.759637][ T6848] infiniband s{z2: RDMA CMA: cma_listen_on_dev, error -98 [ 128.803364][ T6848] lo speed is unknown, defaulting to 1000 [ 128.808172][ T6848] lo speed is unknown, defaulting to 1000 [ 128.813352][ T6848] lo speed is unknown, defaulting to 1000 [ 128.817158][ T6848] lo speed is unknown, defaulting to 1000 [ 128.820997][ T6848] lo speed is unknown, defaulting to 1000 [ 130.286725][ T9] usb 42-1: device descriptor read/8, error -110 [ 131.064970][ T9] usb usb42-port1: attempt power cycle [ 131.632824][ T9] usb usb42-port1: unable to enumerate USB device [ 135.934248][ T40] kauditd_printk_skb: 296 callbacks suppressed [ 135.934264][ T40] audit: type=1326 audit(1769421941.846:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.0.173" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 135.945921][ T40] audit: type=1326 audit(1769421941.846:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.0.173" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 135.984842][ T40] audit: type=1326 audit(1769421941.896:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.0.173" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 135.993881][ T40] audit: type=1326 audit(1769421941.896:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.0.173" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 136.002023][ T40] audit: type=1326 audit(1769421941.896:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.0.173" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 136.103551][ T40] audit: type=1326 audit(1769421942.016:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.0.173" exe="/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 136.110789][ T40] audit: type=1326 audit(1769421942.016:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.0.173" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 136.118631][ T40] audit: type=1326 audit(1769421942.016:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.0.173" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 136.126571][ T40] audit: type=1326 audit(1769421942.016:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.0.173" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 136.134501][ T40] audit: type=1326 audit(1769421942.016:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.0.173" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 137.420774][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.424690][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.326662][ T6983] pim6reg: entered allmulticast mode [ 139.335206][ T6983] team0: entered allmulticast mode [ 139.337497][ T6983] team_slave_0: entered allmulticast mode [ 139.339657][ T6983] team_slave_1: entered allmulticast mode [ 139.344859][ T6983] team0: left allmulticast mode [ 139.347053][ T6983] team_slave_0: left allmulticast mode [ 139.349148][ T6983] team_slave_1: left allmulticast mode [ 139.353773][ T6983] pim6reg: left allmulticast mode [ 142.109790][ T7010] lo speed is unknown, defaulting to 1000 [ 142.649866][ T7018] SQUASHFS error: Failed to read block 0x0: -5 [ 142.855556][ T7021] bridge1: entered allmulticast mode [ 142.940063][ T7021] ªªªªª»: renamed from hsr0 (while UP) [ 143.705454][ T7033] netlink: 3 bytes leftover after parsing attributes in process `syz.3.187'. [ 143.751050][ T7033] batadv1: entered allmulticast mode [ 143.959937][ T7029] lo speed is unknown, defaulting to 1000 [ 148.590939][ T7071] netlink: 24 bytes leftover after parsing attributes in process `syz.3.198'. [ 148.602857][ T7071] xt_hashlimit: overflow, try lower: 60585/0 [ 149.169894][ T7083] 9pnet_fd: Insufficient options for proto=fd [ 149.965548][ T7087] lo speed is unknown, defaulting to 1000 [ 150.691516][ T5955] Bluetooth: hci3: command tx timeout [ 153.129623][ T7159] netlink: 3 bytes leftover after parsing attributes in process `syz.0.208'. [ 153.182481][ T7159] batadv1: entered allmulticast mode [ 153.785301][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.207'. [ 153.789221][ T7156] netlink: 56 bytes leftover after parsing attributes in process `syz.1.207'. [ 153.824040][ T7156] geneve2: entered promiscuous mode [ 153.825911][ T7156] geneve2: entered allmulticast mode [ 154.932148][ T61] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 155.114160][ T61] usb 5-1: Using ep0 maxpacket: 8 [ 155.115552][ T61] usb 5-1: config 0 interface 0 has no altsetting 0 [ 155.115574][ T61] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 155.115585][ T61] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.120518][ T61] usb 5-1: config 0 descriptor?? [ 155.515367][ T7190] netlink: 24 bytes leftover after parsing attributes in process `syz.2.216'. [ 155.521252][ T7190] xt_hashlimit: overflow, try lower: 60585/0 [ 155.569155][ T61] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 156.152874][ T7203] kvm: pic: non byte read [ 156.154767][ T7203] kvm: pic: non byte read [ 156.156553][ T7203] kvm: pic: non byte read [ 156.158778][ T7203] kvm: pic: non byte read [ 156.160690][ T7203] kvm: pic: non byte read [ 156.162791][ T7203] kvm: pic: non byte read [ 156.164474][ T7203] kvm: pic: non byte read [ 156.172900][ T7203] kvm: pic: non byte read [ 156.185609][ T7203] kvm: pic: non byte read [ 156.187939][ T7203] kvm: pic: non byte read [ 156.492721][ T7212] warning: `syz.1.219' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 157.070419][ T7219] team0: entered allmulticast mode [ 157.072828][ T7219] team_slave_0: entered allmulticast mode [ 157.075284][ T7219] team_slave_1: entered allmulticast mode [ 157.079174][ T7219] team0: left allmulticast mode [ 157.081272][ T7219] team_slave_0: left allmulticast mode [ 157.083725][ T7219] team_slave_1: left allmulticast mode [ 157.086200][ T7219] pim6reg: left allmulticast mode [ 157.385844][ T7224] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 157.387885][ T7224] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 157.390632][ T7224] vhci_hcd vhci_hcd.0: Device attached [ 157.404318][ T7224] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 157.414502][ T29] usb 5-1: USB disconnect, device number 2 [ 157.562356][ T5955] Bluetooth: hci0: command tx timeout [ 157.671994][ T6025] usb 43-1: new low-speed USB device number 4 using vhci_hcd [ 158.017849][ T7235] netlink: 24 bytes leftover after parsing attributes in process `syz.1.225'. [ 158.027779][ T7235] xt_hashlimit: overflow, try lower: 60585/0 [ 158.135162][ T7225] vhci_hcd: connection reset by peer [ 158.137697][ T7139] vhci_hcd vhci_hcd.3: stop threads [ 158.139510][ T7139] vhci_hcd vhci_hcd.3: release socket [ 158.141393][ T7139] vhci_hcd vhci_hcd.3: disconnect device [ 159.991987][ T7249] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 159.994808][ T7249] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 159.998199][ T7249] vhci_hcd vhci_hcd.0: Device attached [ 160.051972][ T5955] Bluetooth: hci1: command tx timeout [ 160.759395][ T7264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.227'. [ 162.544369][ T7250] vhci_hcd: connection closed [ 162.544755][ T80] vhci_hcd vhci_hcd.3: stop threads [ 162.548959][ T80] vhci_hcd vhci_hcd.3: release socket [ 162.689122][ T80] vhci_hcd vhci_hcd.3: disconnect device [ 162.752053][ T6025] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 163.647550][ T7288] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 168.160286][ T7318] process 'syz.1.243' launched './file0' with NULL argv: empty string added [ 168.177554][ T7317] process '/newroot/69/file0' started with executable stack [ 168.869948][ T7331] overlayfs: overlapping lowerdir path [ 169.984677][ T7336] lo speed is unknown, defaulting to 1000 [ 170.022126][ T7336] siw: device registration error -23 [ 170.498277][ T7347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.251'. [ 173.645235][ T7378] lo speed is unknown, defaulting to 1000 [ 173.690268][ T7379] siw: device registration error -23 [ 178.011776][ T7395] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 178.014058][ T7395] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 178.016762][ T7395] vhci_hcd vhci_hcd.0: Device attached [ 178.271993][ T1327] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 178.396184][ T7410] vhci_hcd: connection reset by peer [ 178.400774][ T7145] vhci_hcd vhci_hcd.2: stop threads [ 178.404376][ T7145] vhci_hcd vhci_hcd.2: release socket [ 178.411206][ T7145] vhci_hcd vhci_hcd.2: disconnect device [ 179.477039][ T7419] lo speed is unknown, defaulting to 1000 [ 179.499309][ T7421] lo speed is unknown, defaulting to 1000 [ 179.514723][ T7422] siw: device registration error -23 [ 179.602570][ T7425] siw: device registration error -23 [ 180.445259][ T64] Bluetooth: hci3: command 0x0406 tx timeout [ 180.445344][ T5949] Bluetooth: hci0: command 0x0406 tx timeout [ 180.447523][ T5954] Bluetooth: hci2: command 0x0406 tx timeout [ 180.447558][ T5954] Bluetooth: hci1: command 0x0406 tx timeout [ 181.121563][ T7446] netlink: 3 bytes leftover after parsing attributes in process `syz.3.270'. [ 181.128105][ T7446] batadv1: entered allmulticast mode [ 181.191104][ T7448] random: crng reseeded on system resumption [ 182.150972][ T7459] fuse: Bad value for 'fd' [ 182.362926][ T7465] overlay: Unknown parameter 'obj_type' [ 182.513564][ T53] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 183.192257][ T6008] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 183.342098][ T6008] usb 7-1: Using ep0 maxpacket: 16 [ 183.346281][ T6008] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.353581][ T6008] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 183.357588][ T6008] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.360952][ T6008] usb 7-1: Product: syz [ 183.362835][ T6008] usb 7-1: Manufacturer: syz [ 183.364850][ T6008] usb 7-1: SerialNumber: syz [ 183.372427][ T6008] usb 7-1: config 0 descriptor?? [ 183.379751][ T6008] asix 7-1:0.0: probe with driver asix failed with error -22 [ 183.392121][ T1327] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 186.847192][ T6053] usb 7-1: USB disconnect, device number 3 [ 187.522149][ T7550] random: crng reseeded on system resumption [ 193.048689][ T7572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.285'. [ 193.147260][ T7574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.284'. [ 193.153030][ T7574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.284'. [ 193.158586][ T7574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.284'. [ 193.459688][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 193.459701][ T40] audit: type=1326 audit(1769422007.361:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7568 comm="syz.3.287" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 193.459802][ T7577] ======================================================= [ 193.459802][ T7577] WARNING: The mand mount option has been deprecated and [ 193.459802][ T7577] and is ignored by this kernel. Remove the mand [ 193.459802][ T7577] option from the mount to silence this warning. [ 193.459802][ T7577] ======================================================= [ 193.461788][ T40] audit: type=1326 audit(1769422007.361:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7568 comm="syz.3.287" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 193.500563][ T40] audit: type=1326 audit(1769422007.361:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7568 comm="syz.3.287" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 193.507443][ T40] audit: type=1326 audit(1769422007.361:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7568 comm="syz.3.287" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 193.514439][ T40] audit: type=1326 audit(1769422007.361:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7568 comm="syz.3.287" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 193.521197][ T40] audit: type=1326 audit(1769422007.361:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7568 comm="syz.3.287" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 193.530686][ T40] audit: type=1326 audit(1769422007.381:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7568 comm="syz.3.287" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 193.537466][ T40] audit: type=1326 audit(1769422007.381:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7568 comm="syz.3.287" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 193.544238][ T40] audit: type=1326 audit(1769422007.381:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7568 comm="syz.3.287" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 193.550941][ T40] audit: type=1326 audit(1769422007.381:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7568 comm="syz.3.287" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 194.935143][ T7628] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 194.937256][ T7628] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 194.940080][ T7628] vhci_hcd vhci_hcd.0: Device attached [ 195.262039][ T61] usb 38-1: SetAddress Request (6) to port 0 [ 195.264471][ T61] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 195.267963][ T7628] bridge_slave_0: left allmulticast mode [ 195.275649][ T7628] bridge_slave_0: left promiscuous mode [ 195.281099][ T7628] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.914785][ T7628] bridge_slave_1: left allmulticast mode [ 196.916752][ T7628] bridge_slave_1: left promiscuous mode [ 196.919591][ T7628] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.940741][ T7641] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 196.942891][ T7641] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 197.050541][ T7641] vhci_hcd vhci_hcd.0: Device attached [ 197.130295][ T7628] bond0: (slave bond_slave_0): Releasing backup interface [ 197.159669][ T7628] bond0: (slave bond_slave_1): Releasing backup interface [ 197.267839][ T7628] team0: Port device team_slave_0 removed [ 197.298083][ T7628] team0: Port device team_slave_1 removed [ 197.300918][ T7628] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.312055][ T6025] usb 44-1: SetAddress Request (6) to port 0 [ 197.315071][ T6025] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 197.362764][ T7628] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.452242][ T7628] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.458076][ T7628] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.476440][ T7628] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 197.646053][ T7629] vhci_hcd: connection reset by peer [ 197.650731][ T1148] vhci_hcd vhci_hcd.0: stop threads [ 197.653104][ T1148] vhci_hcd vhci_hcd.0: release socket [ 197.655448][ T1148] vhci_hcd vhci_hcd.0: disconnect device [ 197.667540][ T7642] vhci_hcd: connection reset by peer [ 197.670472][ T1148] vhci_hcd vhci_hcd.3: stop threads [ 197.672244][ T1148] vhci_hcd vhci_hcd.3: release socket [ 197.674275][ T1148] vhci_hcd vhci_hcd.3: disconnect device [ 197.679597][ T7650] 9pnet_virtio: no channels available for device syz [ 198.245749][ T7657] overlayfs: failed to clone lowerpath [ 199.392452][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.395048][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.938102][ T7670] lo speed is unknown, defaulting to 1000 [ 200.200873][ T7674] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 200.203681][ T7674] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 200.322608][ T7674] vhci_hcd vhci_hcd.0: Device attached [ 200.365309][ T61] usb 38-1: device descriptor read/8, error -110 [ 200.545609][ T7686] wg2 speed is unknown, defaulting to 1000 [ 200.551296][ T7686] wg2 speed is unknown, defaulting to 1000 [ 200.561104][ T7686] wg2 speed is unknown, defaulting to 1000 [ 200.753924][ T61] usb usb38-port1: attempt power cycle [ 200.857696][ T7686] infiniband syz2: set active [ 200.860052][ T7686] infiniband syz2: added wg2 [ 200.865710][ T29] wg2 speed is unknown, defaulting to 1000 [ 200.924664][ T7686] RDS/IB: syz2: added [ 200.925864][ T7687] /dev/sr0: Can't open blockdev [ 200.927780][ T7686] smc: adding ib device syz2 with port count 1 [ 200.931253][ T7686] smc: ib device syz2 port 1 has pnetid SYZ1 (user defined) [ 200.942013][ T29] wg2 speed is unknown, defaulting to 1000 [ 200.968661][ T7686] wg2 speed is unknown, defaulting to 1000 [ 201.268131][ T7676] vhci_hcd: connection closed [ 201.268334][ T7136] vhci_hcd vhci_hcd.3: stop threads [ 201.271740][ T7136] vhci_hcd vhci_hcd.3: release socket [ 201.280894][ T7136] vhci_hcd vhci_hcd.3: disconnect device [ 201.385611][ T7699] netlink: 48 bytes leftover after parsing attributes in process `syz.0.304'. [ 201.412494][ T61] usb usb38-port1: unable to enumerate USB device [ 201.500648][ T7686] wg2 speed is unknown, defaulting to 1000 [ 202.067917][ T7686] wg2 speed is unknown, defaulting to 1000 [ 202.246651][ T7709] tipc: MTU too low for tipc bearer [ 202.375543][ T6025] usb 44-1: device descriptor read/8, error -110 [ 202.467526][ T7686] wg2 speed is unknown, defaulting to 1000 [ 202.533503][ T7717] lo speed is unknown, defaulting to 1000 [ 202.776719][ T6025] usb usb44-port1: attempt power cycle [ 203.778799][ T6053] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 204.434783][ T7686] wg2 speed is unknown, defaulting to 1000 [ 204.818557][ T7718] siw: device registration error -23 [ 205.170699][ T7732] bridge0: port 1(erspan0) entered blocking state [ 205.177411][ T7732] bridge0: port 1(erspan0) entered disabled state [ 205.192619][ T7732] erspan0: entered allmulticast mode [ 205.240440][ T7732] erspan0: entered promiscuous mode [ 205.244695][ T7732] bridge0: port 1(erspan0) entered blocking state [ 205.246953][ T7732] bridge0: port 1(erspan0) entered forwarding state [ 205.255177][ T7736] erspan0: left allmulticast mode [ 205.257179][ T7736] erspan0: left promiscuous mode [ 205.260306][ T7736] bridge0: port 1(erspan0) entered disabled state [ 205.313091][ T6025] usb usb44-port1: unable to enumerate USB device [ 205.570712][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 205.570728][ T40] audit: type=1326 audit(1769422019.461:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.1.313" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 205.660922][ T40] audit: type=1326 audit(1769422019.461:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.1.313" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 205.675766][ T40] audit: type=1326 audit(1769422019.461:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.1.313" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 205.706093][ T40] audit: type=1326 audit(1769422019.461:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.1.313" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 205.713766][ T40] audit: type=1326 audit(1769422019.461:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.1.313" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 205.721353][ T40] audit: type=1326 audit(1769422019.461:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.1.313" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 205.730426][ T40] audit: type=1326 audit(1769422019.461:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.1.313" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 205.749683][ T40] audit: type=1326 audit(1769422019.471:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.1.313" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 205.760166][ T40] audit: type=1326 audit(1769422019.471:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.1.313" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 205.768624][ T40] audit: type=1326 audit(1769422019.471:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.1.313" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 208.386320][ T7747] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 208.389117][ T7747] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 208.393918][ T7764] x_tables: duplicate underflow at hook 1 [ 208.408216][ T7747] vhci_hcd vhci_hcd.0: Device attached [ 208.693842][ T53] usb 44-1: SetAddress Request (10) to port 0 [ 208.696248][ T53] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 208.742341][ T7770] netlink: 3 bytes leftover after parsing attributes in process `syz.0.320'. [ 208.748607][ T7770] batadv1: entered allmulticast mode [ 209.086024][ T7762] vhci_hcd: connection reset by peer [ 209.088165][ T7136] vhci_hcd vhci_hcd.3: stop threads [ 209.089868][ T7136] vhci_hcd vhci_hcd.3: release socket [ 209.106679][ T7136] vhci_hcd vhci_hcd.3: disconnect device [ 209.922532][ T7784] x_tables: duplicate underflow at hook 1 [ 210.230034][ T7795] ALSA: mixer_oss: invalid OSS volume '' [ 210.303332][ T7798] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 210.305824][ T7798] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 210.308536][ T7798] vhci_hcd vhci_hcd.0: Device attached [ 210.338138][ T7783] batman_adv: batadv0: Interface deactivated: gretap1 [ 210.367463][ T7139] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.370434][ T7139] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.375092][ T7139] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.379333][ T7139] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.492076][ T1327] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 210.552087][ T1327] usb 41-1: new full-speed USB device number 4 using vhci_hcd [ 210.765921][ T7799] vhci_hcd: connection reset by peer [ 210.769462][ T12] vhci_hcd vhci_hcd.2: stop threads [ 210.771273][ T12] vhci_hcd vhci_hcd.2: release socket [ 210.773389][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 211.276951][ T7811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.326'. [ 211.307679][ T7811] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.310079][ T7811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.312624][ T7811] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.315327][ T7811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.484228][ T7811] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 211.491090][ T29] lo speed is unknown, defaulting to 1000 [ 212.633444][ T7824] lo speed is unknown, defaulting to 1000 [ 212.639266][ T7824] wg2 speed is unknown, defaulting to 1000 [ 213.866732][ T53] usb 44-1: device descriptor read/8, error -110 [ 214.262628][ T53] usb usb44-port1: attempt power cycle [ 214.548891][ T7833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.330'. [ 214.557504][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 214.557516][ T40] audit: type=1326 audit(1769422028.441:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7830 comm="syz.2.330" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 214.569656][ T40] audit: type=1326 audit(1769422028.441:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7830 comm="syz.2.330" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 214.570105][ T7834] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 214.580059][ T7834] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 214.583307][ T7834] vhci_hcd vhci_hcd.0: Device attached [ 214.723814][ T40] audit: type=1326 audit(1769422028.451:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7830 comm="syz.2.330" exe="/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 214.731722][ T40] audit: type=1326 audit(1769422028.451:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7830 comm="syz.2.330" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 214.862137][ T34] usb 38-1: SetAddress Request (10) to port 0 [ 214.864423][ T34] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 214.932385][ T40] audit: type=1326 audit(1769422028.451:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7830 comm="syz.2.330" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 214.944574][ T40] audit: type=1326 audit(1769422028.451:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7830 comm="syz.2.330" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 214.960777][ T40] audit: type=1326 audit(1769422028.451:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7830 comm="syz.2.330" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 214.971869][ T40] audit: type=1326 audit(1769422028.451:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7830 comm="syz.2.330" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 215.000069][ T40] audit: type=1326 audit(1769422028.451:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7830 comm="syz.2.330" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 215.019933][ T40] audit: type=1326 audit(1769422028.451:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7830 comm="syz.2.330" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 215.030705][ T7841] netlink: 64 bytes leftover after parsing attributes in process `syz.0.329'. [ 215.194610][ T53] usb usb44-port1: unable to enumerate USB device [ 215.216099][ T7843] lo speed is unknown, defaulting to 1000 [ 215.222526][ T7843] wg2 speed is unknown, defaulting to 1000 [ 215.355122][ T7844] siw: device registration error -23 [ 215.443565][ T7847] dlm: no local IP address has been set [ 215.446140][ T7847] dlm: cannot start dlm midcomms -107 [ 215.632009][ T1327] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 215.726881][ T7856] lo speed is unknown, defaulting to 1000 [ 215.730793][ T7856] wg2 speed is unknown, defaulting to 1000 [ 218.411129][ T7872] syz.2.338 uses obsolete (PF_INET,SOCK_PACKET) [ 218.414926][ T7872] dummy0: entered promiscuous mode [ 218.417541][ T7872] dummy0: entered allmulticast mode [ 218.715865][ T7877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.340'. [ 218.795171][ T6053] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 218.963511][ T6053] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.978545][ T6053] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 218.982965][ T6053] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.988146][ T6053] usb 7-1: Product: syz [ 218.990162][ T6053] usb 7-1: Manufacturer: syz [ 218.992841][ T6053] usb 7-1: SerialNumber: syz [ 218.998897][ T6053] usb 7-1: config 0 descriptor?? [ 219.268015][ T7836] vhci_hcd: connection reset by peer [ 219.297533][ T1148] vhci_hcd vhci_hcd.0: stop threads [ 219.299539][ T1148] vhci_hcd vhci_hcd.0: release socket [ 219.301651][ T1148] vhci_hcd vhci_hcd.0: disconnect device [ 220.212239][ T34] usb 38-1: device descriptor read/8, error -110 [ 220.833832][ T7911] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 221.489145][ T7909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.345'. [ 221.498912][ T7909] syzkaller1: entered promiscuous mode [ 221.501309][ T7909] syzkaller1: entered allmulticast mode [ 221.506838][ T7909] program syz.3.345 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 221.532730][ T34] usb usb38-port1: attempt power cycle [ 222.123348][ T34] usb usb38-port1: unable to enumerate USB device [ 222.210879][ T6053] keyspan 7-1:0.0: Keyspan 1 port adapter converter detected [ 222.223235][ T6053] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 82 [ 222.228205][ T6053] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 81 [ 222.231548][ T6053] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 1 [ 222.234943][ T6053] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 2 [ 222.242471][ T6053] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 222.255799][ T1112] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 222.266262][ T6053] usb 7-1: USB disconnect, device number 4 [ 222.270842][ T1112] ata1.00: irq_stat 0x40000000 [ 222.275631][ T1112] ata1.00: failed command: ZAC MANAGEMENT OUT [ 222.278366][ T1112] ata1.00: cmd 9f/02:00:00:00:00/00:00:00:00:00/40 tag 27 [ 222.278366][ T1112] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 222.296830][ T6053] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 222.301664][ T6053] keyspan 7-1:0.0: device disconnected [ 222.308007][ T1112] ata1.00: status: { DRDY ERR } [ 222.310155][ T1112] ata1.00: error: { ABRT } [ 222.320835][ T1112] ata1.00: device reported invalid CHS sector 0 [ 222.332948][ C3] ata1: illegal qc_active transition (00000000->40000000) [ 222.376481][ T7923] lo speed is unknown, defaulting to 1000 [ 222.379162][ T7923] wg2 speed is unknown, defaulting to 1000 [ 222.652763][ T1112] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 222.659164][ T1112] ata1.00: configured for UDMA/100 [ 222.812854][ T7926] siw: device registration error -23 [ 223.671724][ T7942] netlink: 12 bytes leftover after parsing attributes in process `syz.3.352'. [ 225.602871][ T7955] lo speed is unknown, defaulting to 1000 [ 225.606692][ T7955] wg2 speed is unknown, defaulting to 1000 [ 225.994760][ T7968] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 225.997458][ T7968] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 226.001072][ T7968] vhci_hcd vhci_hcd.0: Device attached [ 226.262042][ T6053] usb 43-1: new low-speed USB device number 6 using vhci_hcd [ 226.639391][ T7969] vhci_hcd: connection reset by peer [ 226.642315][ T7139] vhci_hcd vhci_hcd.3: stop threads [ 226.644595][ T7139] vhci_hcd vhci_hcd.3: release socket [ 226.912204][ T7139] vhci_hcd vhci_hcd.3: disconnect device [ 228.153011][ T7981] XFS (nullb0): Invalid superblock magic number [ 229.732647][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.362'. [ 230.535194][ T8003] lo speed is unknown, defaulting to 1000 [ 230.537691][ T8003] wg2 speed is unknown, defaulting to 1000 [ 231.415575][ T6053] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 231.418408][ T8009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.432855][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 231.432871][ T40] audit: type=1800 audit(1769422045.331:983): pid=8011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.366" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 232.875584][ T8000] Set syz1 is full, maxelem 65536 reached [ 234.776435][ T8040] lo speed is unknown, defaulting to 1000 [ 234.779083][ T8040] wg2 speed is unknown, defaulting to 1000 [ 234.971048][ T8043] siw: device registration error -23 [ 235.467097][ T8048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.470731][ T8048] batadv_slave_0: entered promiscuous mode [ 236.083226][ T8061] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 236.085411][ T8061] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 236.090109][ T8061] vhci_hcd vhci_hcd.0: Device attached [ 236.282393][ T8061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.376'. [ 236.403434][ T40] audit: type=1326 audit(1769422306.316:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8064 comm="syz.1.379" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 236.412860][ T40] audit: type=1326 audit(1769422306.316:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8064 comm="syz.1.379" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 236.422920][ T40] audit: type=1326 audit(1769422306.326:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8064 comm="syz.1.379" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 236.452626][ T40] audit: type=1326 audit(1769422306.326:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8064 comm="syz.1.379" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 236.460456][ T40] audit: type=1326 audit(1769422306.326:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8064 comm="syz.1.379" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 236.472385][ T40] audit: type=1326 audit(1769422306.336:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8064 comm="syz.1.379" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 236.479362][ T40] audit: type=1326 audit(1769422306.336:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8064 comm="syz.1.379" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 236.488346][ T40] audit: type=1326 audit(1769422306.336:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8064 comm="syz.1.379" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 236.497447][ T40] audit: type=1326 audit(1769422306.366:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8064 comm="syz.1.379" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 236.512279][ T40] audit: type=1326 audit(1769422306.366:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8064 comm="syz.1.379" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 236.520926][ T40] audit: type=1326 audit(1769422306.366:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8064 comm="syz.1.379" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 236.530222][ T40] audit: type=1326 audit(1769422306.366:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8064 comm="syz.1.379" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 236.539098][ T40] audit: type=1326 audit(1769422306.366:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8064 comm="syz.1.379" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 236.711172][ T6025] usb 42-1: SetAddress Request (18) to port 0 [ 236.713994][ T6025] usb 42-1: new SuperSpeed USB device number 18 using vhci_hcd [ 236.898777][ T8062] vhci_hcd: connection reset by peer [ 236.900869][ T12] vhci_hcd vhci_hcd.2: stop threads [ 236.903229][ T12] vhci_hcd vhci_hcd.2: release socket [ 236.905184][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 237.415903][ T8080] /dev/nullb0: Can't lookup blockdev [ 238.121796][ T8083] netlink: 15678 bytes leftover after parsing attributes in process `syz.1.383'. [ 239.830730][ T5952] wg2 speed is unknown, defaulting to 1000 [ 241.806812][ T6025] usb 42-1: device descriptor read/8, error -110 [ 241.831085][ T8114] siw: device registration error -23 [ 242.197826][ T6025] usb usb42-port1: attempt power cycle [ 242.512357][ T8116] XFS (nullb0): Invalid superblock magic number [ 242.548996][ T8106] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 242.551060][ T8106] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 242.554119][ T8106] vhci_hcd vhci_hcd.0: Device attached [ 242.686033][ T8128] sock: sock_set_timeout: `syz.1.393' (pid 8128) tries to set negative timeout [ 242.853684][ T6025] usb 42-1: SetAddress Request (21) to port 0 [ 242.853758][ T6025] usb 42-1: new SuperSpeed USB device number 21 using vhci_hcd [ 242.992740][ T8124] vhci_hcd: connection reset by peer [ 242.995737][ T7139] vhci_hcd vhci_hcd.2: stop threads [ 242.997450][ T7139] vhci_hcd vhci_hcd.2: release socket [ 243.000408][ T7139] vhci_hcd vhci_hcd.2: disconnect device [ 243.914715][ T8143] lo speed is unknown, defaulting to 1000 [ 243.919229][ T8143] wg2 speed is unknown, defaulting to 1000 [ 244.018496][ T8144] siw: device registration error -23 [ 244.476162][ T8154] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 244.566788][ T8154] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 244.572341][ T8154] overlayfs: failed to look up (tracing) for ino (-66) [ 245.920324][ T8168] lo speed is unknown, defaulting to 1000 [ 245.926214][ T8168] wg2 speed is unknown, defaulting to 1000 [ 247.892544][ T6025] usb 42-1: device descriptor read/8, error -110 [ 248.002668][ T6025] usb usb42-port1: unable to enumerate USB device [ 248.930321][ T29] libceph: connect (1)[c::]:6789 error -101 [ 248.932648][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 249.034396][ T8179] ceph: No mds server is up or the cluster is laggy [ 249.195380][ T8188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.405'. [ 249.415944][ T8192] lo speed is unknown, defaulting to 1000 [ 249.419900][ T8192] wg2 speed is unknown, defaulting to 1000 [ 251.517203][ T8216] /dev/nullb0: Can't lookup blockdev [ 252.841195][ T8226] siw: device registration error -23 [ 252.848916][ T8224] lo speed is unknown, defaulting to 1000 [ 252.852956][ T8224] wg2 speed is unknown, defaulting to 1000 [ 255.427475][ T8246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.417'. [ 255.903068][ T8256] lo speed is unknown, defaulting to 1000 [ 255.906207][ T8256] wg2 speed is unknown, defaulting to 1000 [ 256.035017][ T8262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.421'. [ 256.124762][ T8258] siw: device registration error -23 [ 256.523881][ T8268] overlayfs: overlapping lowerdir path [ 259.036429][ T8284] lo speed is unknown, defaulting to 1000 [ 259.068544][ T8284] wg2 speed is unknown, defaulting to 1000 [ 259.966320][ T8287] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 259.968541][ T8287] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 260.256364][ T6053] usb 41-1: new low-speed USB device number 5 using vhci_hcd [ 260.326944][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.329611][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.409160][ T8283] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 260.519431][ T8287] vhci_hcd vhci_hcd.0: Device attached [ 260.619895][ T8283] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 260.624096][ T8283] overlayfs: failed to look up (tracing) for ino (-66) [ 260.922667][ T8299] delete_channel: no stack [ 261.080627][ T8288] vhci_hcd: connection reset by peer [ 261.131733][ T7139] vhci_hcd vhci_hcd.2: stop threads [ 261.133662][ T7139] vhci_hcd vhci_hcd.2: release socket [ 261.135658][ T7139] vhci_hcd vhci_hcd.2: disconnect device [ 261.986762][ T8309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.432'. [ 262.017425][ T8309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.432'. [ 262.020077][ T8309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.432'. [ 262.258022][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 262.258085][ T40] audit: type=1326 audit(1769422588.137:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8311 comm="syz.3.433" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 262.355310][ T8316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.433'. [ 262.399703][ T40] audit: type=1326 audit(1769422588.137:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8311 comm="syz.3.433" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 262.410057][ T40] audit: type=1326 audit(1769422588.187:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8311 comm="syz.3.433" exe="/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 262.420177][ T40] audit: type=1326 audit(1769422588.187:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8311 comm="syz.3.433" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 262.430772][ T40] audit: type=1326 audit(1769422588.187:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8311 comm="syz.3.433" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 262.441780][ T40] audit: type=1326 audit(1769422588.187:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8311 comm="syz.3.433" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 262.451813][ T40] audit: type=1326 audit(1769422588.187:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8311 comm="syz.3.433" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 262.461240][ T40] audit: type=1326 audit(1769422588.197:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8311 comm="syz.3.433" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 262.475259][ T40] audit: type=1326 audit(1769422588.197:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8311 comm="syz.3.433" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 262.490636][ T40] audit: type=1326 audit(1769422588.197:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8311 comm="syz.3.433" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 262.964797][ T8320] lo speed is unknown, defaulting to 1000 [ 262.968451][ T8320] wg2 speed is unknown, defaulting to 1000 [ 263.549867][ T8333] syz_tun: entered allmulticast mode [ 264.078458][ T8344] lo speed is unknown, defaulting to 1000 [ 264.083410][ T8344] wg2 speed is unknown, defaulting to 1000 [ 264.701523][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.439'. [ 264.704591][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.439'. [ 265.363851][ T6053] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 265.403852][ T8353] overlayfs: failed to clone upperpath [ 265.887211][ T8356] ntfs3(nullb0): Primary boot signature is not NTFS. [ 265.890896][ T8356] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 265.911117][ T8358] lo speed is unknown, defaulting to 1000 [ 265.913969][ T8358] wg2 speed is unknown, defaulting to 1000 [ 266.028236][ T8359] siw: device registration error -23 [ 268.410609][ T8386] xt_recent: Unsupported userspace flags (000000fe) [ 269.089740][ T8389] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 269.630293][ T8399] lo speed is unknown, defaulting to 1000 [ 269.633816][ T8399] wg2 speed is unknown, defaulting to 1000 [ 270.880438][ T8415] overlayfs: failed to clone upperpath [ 271.324223][ T8418] ntfs3(nullb0): Primary boot signature is not NTFS. [ 271.327054][ T8418] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 272.526218][ T8421] lo speed is unknown, defaulting to 1000 [ 272.529930][ T8421] wg2 speed is unknown, defaulting to 1000 [ 272.649911][ T8424] siw: device registration error -23 [ 272.999961][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 272.999979][ T40] audit: type=1326 audit(1769422598.862:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.1.460" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 273.011763][ T40] audit: type=1326 audit(1769422598.862:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.1.460" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 273.025336][ T40] audit: type=1326 audit(1769422598.862:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.1.460" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 273.045968][ T40] audit: type=1326 audit(1769422598.872:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.1.460" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 273.061005][ T40] audit: type=1326 audit(1769422598.872:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.1.460" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 273.080535][ T40] audit: type=1326 audit(1769422598.872:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.1.460" exe="/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 273.102183][ T40] audit: type=1326 audit(1769422598.872:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.1.460" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 273.144640][ T40] audit: type=1326 audit(1769422598.872:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.1.460" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 273.164640][ T40] audit: type=1326 audit(1769422598.872:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.1.460" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 273.183488][ T40] audit: type=1326 audit(1769422598.872:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.1.460" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 274.876945][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.883127][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.031660][ T8458] lo speed is unknown, defaulting to 1000 [ 275.038285][ T8458] wg2 speed is unknown, defaulting to 1000 [ 275.071181][ T8460] IPVS: Error connecting to the multicast addr [ 275.816685][ T8470] lo speed is unknown, defaulting to 1000 [ 276.211189][ T8470] wg2 speed is unknown, defaulting to 1000 [ 277.030977][ T8469] siw: device registration error -23 [ 278.504485][ T8502] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 278.506849][ T8502] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 278.509865][ T8502] vhci_hcd vhci_hcd.0: Device attached [ 278.518871][ T8502] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.475'. [ 278.739278][ T8502] syz.0.475 (8502): drop_caches: 2 [ 278.745678][ T8502] syz.0.475 (8502): drop_caches: 2 [ 278.748971][ T8503] vhci_hcd: cannot find a urb of seqnum 8 max seqnum 3 [ 278.763392][ T1148] vhci_hcd vhci_hcd.0: stop threads [ 278.765160][ T1148] vhci_hcd vhci_hcd.0: release socket [ 278.767066][ T1148] vhci_hcd vhci_hcd.0: disconnect device [ 279.082931][ T8507] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 279.085683][ T8507] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 279.089519][ T8507] vhci_hcd vhci_hcd.0: Device attached [ 279.424077][ T61] usb 42-1: SetAddress Request (22) to port 0 [ 279.426643][ T61] usb 42-1: new SuperSpeed USB device number 22 using vhci_hcd [ 279.888646][ T8513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.476'. [ 279.894335][ T8513] netlink: 56 bytes leftover after parsing attributes in process `syz.1.476'. [ 279.940727][ T8508] vhci_hcd: connection reset by peer [ 279.943124][ T80] vhci_hcd vhci_hcd.2: stop threads [ 279.945345][ T80] vhci_hcd vhci_hcd.2: release socket [ 279.947542][ T80] vhci_hcd vhci_hcd.2: disconnect device [ 280.373105][ T8522] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 280.375246][ T8522] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 280.392374][ T8522] vhci_hcd vhci_hcd.0: Device attached [ 280.665822][ T6053] usb 44-1: SetAddress Request (14) to port 0 [ 280.667968][ T6053] usb 44-1: new SuperSpeed USB device number 14 using vhci_hcd [ 280.988782][ T8523] vhci_hcd: connection reset by peer [ 280.992388][ T1142] vhci_hcd vhci_hcd.3: stop threads [ 280.994682][ T1142] vhci_hcd vhci_hcd.3: release socket [ 280.999446][ T1142] vhci_hcd vhci_hcd.3: disconnect device [ 283.810108][ T6025] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 283.959936][ T8554] netlink: 'syz.1.485': attribute type 4 has an invalid length. [ 283.988449][ T29] lo speed is unknown, defaulting to 1000 [ 283.991135][ T29] s{z2: Port: 1 Link DOWN [ 284.011585][ T6025] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 284.015955][ T6025] usb 7-1: config 0 interface 0 has no altsetting 0 [ 284.021467][ T6025] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 284.024327][ T6025] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 284.026908][ T6025] usb 7-1: Product: syz [ 284.028491][ T6025] usb 7-1: Manufacturer: syz [ 284.030173][ T6025] usb 7-1: SerialNumber: syz [ 284.037857][ T6025] usb 7-1: config 0 descriptor?? [ 284.044281][ T6025] usb 7-1: selecting invalid altsetting 0 [ 284.045490][ T8554] netlink: 'syz.1.485': attribute type 4 has an invalid length. [ 284.075762][ T5952] lo speed is unknown, defaulting to 1000 [ 284.078205][ T5952] s{z2: Port: 1 Link ACTIVE [ 284.501044][ T61] usb 42-1: device descriptor read/8, error -110 [ 284.902484][ T61] usb usb42-port1: attempt power cycle [ 285.482884][ T61] usb usb42-port1: unable to enumerate USB device [ 285.702894][ T6053] usb 44-1: device descriptor read/8, error -110 [ 285.889230][ T8568] lo speed is unknown, defaulting to 1000 [ 285.891911][ T8568] wg2 speed is unknown, defaulting to 1000 [ 285.969600][ T8569] siw: device registration error -23 [ 286.093802][ T6053] usb usb44-port1: attempt power cycle [ 286.999951][ T1471] usb 7-1: USB disconnect, device number 5 [ 287.466542][ T6053] usb usb44-port1: unable to enumerate USB device [ 288.109205][ T8599] overlayfs: failed to clone upperpath [ 288.294619][ T8598] siw: device registration error -23 [ 289.031795][ T8605] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 292.943518][ T8638] lo speed is unknown, defaulting to 1000 [ 292.946115][ T8638] wg2 speed is unknown, defaulting to 1000 [ 296.691753][ T8687] loop2: detected capacity change from 0 to 7 [ 296.713856][ T8687] Dev loop2: unable to read RDB block 7 [ 296.716830][ T8687] loop2: unable to read partition table [ 296.717009][ T8687] loop2: partition table beyond EOD, truncated [ 296.720397][ T8687] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 299.997209][ T8712] netlink: 'syz.1.524': attribute type 1 has an invalid length. [ 300.207491][ T8714] bond1: (slave geneve3): making interface the new active one [ 300.215296][ T8714] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 300.292346][ T80] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 300.296776][ T80] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 300.301121][ T80] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 300.303969][ T80] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 300.573057][ T8717] hsr0: entered promiscuous mode [ 300.577013][ T8717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.518'. [ 300.603725][ T8717] hsr_slave_0: left promiscuous mode [ 300.622430][ T8717] hsr_slave_1: left promiscuous mode [ 300.674744][ T8717] hsr0 (unregistering): left promiscuous mode [ 300.792680][ T8723] lo speed is unknown, defaulting to 1000 [ 300.857015][ T8723] wg2 speed is unknown, defaulting to 1000 [ 301.253623][ T8732] A link change request failed with some changes committed already. Interface gretap1 may have been left with an inconsistent configuration, please check. [ 301.671880][ T8732] netlink: 'syz.0.520': attribute type 1 has an invalid length. [ 302.670756][ T8746] fuse: Unknown parameter 'max_r' [ 304.265260][ T8772] overlay: Unknown parameter '/' [ 304.543132][ T8773] overlayfs: failed to clone lowerpath [ 304.609175][ T8770] 9pnet_virtio: no channels available for device syz [ 307.508261][ T8800] lo speed is unknown, defaulting to 1000 [ 307.512009][ T8800] wg2 speed is unknown, defaulting to 1000 [ 307.744300][ T8804] netlink: 24 bytes leftover after parsing attributes in process `syz.1.537'. [ 309.107198][ T8818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.541'. [ 309.111095][ T8818] netlink: 'syz.3.541': attribute type 30 has an invalid length. [ 309.138165][ T1142] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.140880][ T1142] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.154221][ T1142] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.160403][ T8818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.541'. [ 309.164196][ T8818] netlink: 'syz.3.541': attribute type 30 has an invalid length. [ 309.164516][ T1142] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.070391][ T8837] lo speed is unknown, defaulting to 1000 [ 313.075776][ T8837] wg2 speed is unknown, defaulting to 1000 [ 313.200475][ T8838] siw: device registration error -23 [ 314.325449][ T8850] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 314.457403][ T8855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.548'. [ 314.460347][ T8855] lo: entered promiscuous mode [ 314.462178][ T8855] lo: entered allmulticast mode [ 314.469510][ T8855] tunl0: entered promiscuous mode [ 314.471704][ T8855] tunl0: entered allmulticast mode [ 314.473760][ T8855] gre0: entered promiscuous mode [ 314.475407][ T8855] gre0: entered allmulticast mode [ 314.479205][ T8855] gretap0: entered promiscuous mode [ 314.481430][ T8855] gretap0: entered allmulticast mode [ 314.484055][ T8855] erspan0: entered promiscuous mode [ 314.485915][ T8855] erspan0: entered allmulticast mode [ 314.488937][ T8855] ip_vti0: entered promiscuous mode [ 314.490692][ T8855] ip_vti0: entered allmulticast mode [ 314.493952][ T8855] ip6_vti0: entered promiscuous mode [ 314.495728][ T8855] ip6_vti0: entered allmulticast mode [ 314.498429][ T8855] sit0: entered promiscuous mode [ 314.500061][ T8855] sit0: entered allmulticast mode [ 314.503073][ T8855] ip6tnl0: entered promiscuous mode [ 314.504972][ T8855] ip6tnl0: entered allmulticast mode [ 314.510406][ T8855] ip6gre0: entered promiscuous mode [ 314.513525][ T8855] ip6gre0: entered allmulticast mode [ 314.526462][ T8855] syz_tun: entered promiscuous mode [ 314.528410][ T8855] syz_tun: entered allmulticast mode [ 314.548318][ T8855] ip6gretap0: entered promiscuous mode [ 314.550037][ T8855] ip6gretap0: entered allmulticast mode [ 314.554182][ T8855] bridge0: entered promiscuous mode [ 314.556303][ T8855] bridge0: entered allmulticast mode [ 314.562170][ T8855] vcan0: entered promiscuous mode [ 314.597233][ T8855] vcan0: entered allmulticast mode [ 314.602439][ T8855] bond0: entered promiscuous mode [ 314.604803][ T8855] : entered promiscuous mode [ 314.606989][ T8855] bond_slave_1: entered promiscuous mode [ 314.610159][ T8855] bond0: entered allmulticast mode [ 314.612527][ T8855] : entered allmulticast mode [ 314.632839][ T8855] bond_slave_1: entered allmulticast mode [ 314.638915][ T8855] team0: entered promiscuous mode [ 314.640907][ T8855] team_slave_0: entered promiscuous mode [ 314.649548][ T8850] netlink: 'syz.1.546': attribute type 1 has an invalid length. [ 314.656864][ T8855] team_slave_1: entered promiscuous mode [ 314.660938][ T8855] team0: entered allmulticast mode [ 314.719425][ T8855] team_slave_0: entered allmulticast mode [ 314.722082][ T8855] team_slave_1: entered allmulticast mode [ 314.770349][ T8855] dummy0: entered promiscuous mode [ 314.772448][ T8855] dummy0: entered allmulticast mode [ 314.803994][ T8855] nlmon0: entered promiscuous mode [ 314.805520][ T8855] nlmon0: entered allmulticast mode [ 314.807549][ T8855] caif0: entered promiscuous mode [ 314.809023][ T8855] caif0: entered allmulticast mode [ 314.810514][ T8855] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 316.216439][ T8864] lo speed is unknown, defaulting to 1000 [ 316.219670][ T8864] wg2 speed is unknown, defaulting to 1000 [ 318.108799][ T8884] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 321.419706][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.559'. [ 321.424114][ T8910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.425501][ T8911] lo: entered promiscuous mode [ 321.430243][ T8911] lo: entered allmulticast mode [ 321.436323][ T8910] Bluetooth: MGMT ver 1.23 [ 321.437701][ T8911] tunl0: entered promiscuous mode [ 321.439981][ T8911] tunl0: entered allmulticast mode [ 321.454204][ T8911] gre0: entered promiscuous mode [ 321.456308][ T8911] gre0: entered allmulticast mode [ 321.459042][ T8911] gretap0: entered promiscuous mode [ 321.461284][ T8911] gretap0: entered allmulticast mode [ 321.464489][ T8911] erspan0: entered promiscuous mode [ 321.466703][ T8911] erspan0: entered allmulticast mode [ 321.469910][ T8911] ip_vti0: entered promiscuous mode [ 321.520392][ T8911] ip_vti0: entered allmulticast mode [ 321.525991][ T8911] ip6_vti0: entered promiscuous mode [ 321.528385][ T8911] ip6_vti0: entered allmulticast mode [ 321.533876][ T8911] sit0: entered promiscuous mode [ 321.536146][ T8911] sit0: entered allmulticast mode [ 321.540732][ T8911] ip6tnl0: entered promiscuous mode [ 321.543359][ T8911] ip6tnl0: entered allmulticast mode [ 321.548424][ T8911] ip6gre0: entered promiscuous mode [ 321.550771][ T8911] ip6gre0: entered allmulticast mode [ 321.555678][ T8911] syz_tun: entered promiscuous mode [ 321.561372][ T8911] ip6gretap0: entered promiscuous mode [ 321.564547][ T8911] ip6gretap0: entered allmulticast mode [ 321.569642][ T8911] bridge0: entered promiscuous mode [ 321.573708][ T8911] bridge0: entered allmulticast mode [ 321.588851][ T8911] vcan0: entered promiscuous mode [ 321.591113][ T8911] vcan0: entered allmulticast mode [ 321.613722][ T8911] bond0: entered promiscuous mode [ 321.618840][ T8911] bond_slave_0: entered promiscuous mode [ 321.626839][ T8911] bond_slave_1: entered promiscuous mode [ 321.629194][ T8911] bond0: entered allmulticast mode [ 321.633653][ T8911] bond_slave_0: entered allmulticast mode [ 321.637112][ T8911] bond_slave_1: entered allmulticast mode [ 321.643239][ T8911] team0: entered promiscuous mode [ 321.648414][ T8911] team_slave_0: entered promiscuous mode [ 321.654169][ T8911] team_slave_1: entered promiscuous mode [ 321.660039][ T8911] team0: entered allmulticast mode [ 321.664493][ T8911] team_slave_0: entered allmulticast mode [ 321.670212][ T8911] team_slave_1: entered allmulticast mode [ 321.679805][ T8911] nlmon0: entered promiscuous mode [ 321.687122][ T8911] nlmon0: entered allmulticast mode [ 321.842762][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.844748][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.862704][ T8911] caif0: entered promiscuous mode [ 321.872739][ T8911] caif0: entered allmulticast mode [ 321.875126][ T8911] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 322.237845][ T8909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.514795][ T5944] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 323.514829][ T5955] Bluetooth: hci2: command 0x0406 tx timeout [ 324.938429][ T8933] netlink: 'syz.3.566': attribute type 4 has an invalid length. [ 324.950156][ T8933] netlink: 'syz.3.566': attribute type 4 has an invalid length. [ 327.153904][ T8956] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 327.304655][ T8956] netlink: 'syz.2.568': attribute type 1 has an invalid length. [ 328.601113][ T8974] lo speed is unknown, defaulting to 1000 [ 328.604967][ T8974] wg2 speed is unknown, defaulting to 1000 [ 328.768538][ T8976] siw: device registration error -23 [ 330.597660][ T8992] tipc: Started in network mode [ 330.599893][ T8992] tipc: Node identity 4, cluster identity 4711 [ 330.602650][ T8992] tipc: Node number set to 4 [ 332.101009][ T9013] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.144114][ T9038] lo speed is unknown, defaulting to 1000 [ 335.151704][ T9038] wg2 speed is unknown, defaulting to 1000 [ 335.177971][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 335.178066][ T40] audit: type=1326 audit(1769422660.956:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.1.590" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x0 [ 336.333460][ T9050] netlink: zone id is out of range [ 336.354399][ T9050] netlink: 9 bytes leftover after parsing attributes in process `syz.1.592'. [ 336.374468][ T9050] gretap0: entered promiscuous mode [ 336.389526][ T9050] overlayfs: failed to clone upperpath [ 337.602486][ T9070] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 337.605687][ T9070] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 337.615062][ T9070] vhci_hcd vhci_hcd.0: Device attached [ 337.712466][ T9070] autofs: Unknown parameter '0x0000000000000000' [ 337.892195][ T9076] mmap: syz.0.597 (9076) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 337.973658][ T53] usb 44-1: SetAddress Request (18) to port 0 [ 337.975728][ T53] usb 44-1: new SuperSpeed USB device number 18 using vhci_hcd [ 338.286522][ T9071] vhci_hcd: connection reset by peer [ 338.288803][ T7147] vhci_hcd vhci_hcd.3: stop threads [ 338.291027][ T7147] vhci_hcd vhci_hcd.3: release socket [ 338.293415][ T7147] vhci_hcd vhci_hcd.3: disconnect device [ 339.455200][ T5955] Bluetooth: hci4: command 0x1003 tx timeout [ 339.455222][ T5944] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 339.696579][ T9091] pim6reg: entered allmulticast mode [ 340.128001][ T9089] 9p: Bad value for 'rfdno' [ 340.132268][ T9089] overlayfs: failed to clone lowerpath [ 340.135130][ T9089] overlayfs: failed to clone lowerpath [ 340.419029][ T9098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.729137][ T9112] netlink: 'syz.2.603': attribute type 4 has an invalid length. [ 341.742981][ T9112] netlink: 'syz.2.603': attribute type 4 has an invalid length. [ 341.876329][ T9120] overlay: Unknown parameter '/' [ 341.903759][ T9120] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 341.939082][ T9120] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 341.942332][ T9120] overlayfs: failed to look up (tracing) for ino (-66) [ 343.058467][ T53] usb 44-1: device descriptor read/8, error -110 [ 343.612020][ T53] usb usb44-port1: attempt power cycle [ 344.190012][ T53] usb usb44-port1: unable to enumerate USB device [ 345.271291][ T9133] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 345.274260][ T9133] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 345.278248][ T9133] vhci_hcd vhci_hcd.0: Device attached [ 345.334114][ T9133] autofs: Unknown parameter '0x0000000000000000' [ 345.540619][ T6053] usb 38-1: SetAddress Request (14) to port 0 [ 345.542870][ T6053] usb 38-1: new SuperSpeed USB device number 14 using vhci_hcd [ 345.659909][ T9134] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 345.740700][ T9136] vhci_hcd: connection reset by peer [ 345.742774][ T7136] vhci_hcd vhci_hcd.0: stop threads [ 345.744497][ T7136] vhci_hcd vhci_hcd.0: release socket [ 345.746325][ T7136] vhci_hcd vhci_hcd.0: disconnect device [ 347.856612][ T9171] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 348.843722][ T9175] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 348.846277][ T9175] team0: Cannot enslave team device to itself [ 349.283397][ T9179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.620'. [ 349.374059][ T9177] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 349.376399][ T9177] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 349.384904][ T9177] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 349.386898][ T9177] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 349.394931][ T9177] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 349.396962][ T9177] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 350.069392][ T9188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.623'. [ 350.161117][ T9189] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 350.163726][ T9189] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 350.171790][ T9189] vhci_hcd vhci_hcd.0: Device attached [ 350.196498][ T9189] ieee802154 phy0 wpan0: encryption failed: -22 [ 350.378710][ T9193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.624'. [ 350.387499][ T9193] netfs: Duplicate cookie detected [ 350.389740][ T9193] netfs: O-cookie c=00000003 [fl=4008 na=0 nA=0 s=-] [ 350.392390][ T9193] netfs: O-cookie V=00000002 [9p,syz,] [ 350.394871][ T9193] netfs: O-key=[8] 'c300540400000000' [ 350.396993][ T9193] netfs: N-cookie c=00000004 [fl=8 na=0 nA=0 s=-] [ 350.399499][ T9193] netfs: N-cookie V=00000002 [9p,syz,] [ 350.401687][ T9193] netfs: N-key=[8] 'c300540400000000' [ 350.766022][ T9190] vhci_hcd: connection reset by peer [ 350.769274][ T7147] vhci_hcd vhci_hcd.0: stop threads [ 350.770990][ T7147] vhci_hcd vhci_hcd.0: release socket [ 350.773722][ T6053] usb 38-1: device descriptor read/8, error -110 [ 350.791202][ T7147] vhci_hcd vhci_hcd.0: disconnect device [ 351.265725][ T6053] usb usb38-port1: attempt power cycle [ 351.314887][ T5955] Bluetooth: hci2: command 0x0406 tx timeout [ 351.472261][ T5955] Bluetooth: hci1: command 0x0406 tx timeout [ 351.472283][ T5956] Bluetooth: hci3: command 0x0406 tx timeout [ 351.836116][ T6053] usb usb38-port1: unable to enumerate USB device [ 352.020400][ T9217] ceph: No mds server is up or the cluster is laggy [ 352.023121][ T75] libceph: connect (1)[c::]:6789 error -101 [ 352.025594][ T75] libceph: mon0 (1)[c::]:6789 connect error [ 352.986373][ T5956] Bluetooth: hci4: command 0x1003 tx timeout [ 352.986675][ T5944] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 353.396602][ T5944] Bluetooth: hci2: command 0x0406 tx timeout [ 353.488687][ T9241] lo speed is unknown, defaulting to 1000 [ 353.492494][ T9241] wg2 speed is unknown, defaulting to 1000 [ 353.546729][ T5944] Bluetooth: hci3: command 0x0406 tx timeout [ 353.556715][ T5944] Bluetooth: hci1: command 0x0406 tx timeout [ 354.221058][ T40] audit: type=1326 audit(1769422679.989:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9237 comm="syz.0.642" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 354.299531][ T9254] cgroup: Unknown subsys name 'measure' [ 354.420254][ T40] audit: type=1326 audit(1769422679.989:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9237 comm="syz.0.642" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 354.429416][ T40] audit: type=1326 audit(1769422679.989:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9237 comm="syz.0.642" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 354.486126][ T9245] lo speed is unknown, defaulting to 1000 [ 354.489347][ T9245] wg2 speed is unknown, defaulting to 1000 [ 354.613412][ T40] audit: type=1326 audit(1769422680.379:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9237 comm="syz.0.642" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 354.626099][ T40] audit: type=1326 audit(1769422680.379:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9237 comm="syz.0.642" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 354.863543][ T9270] lo speed is unknown, defaulting to 1000 [ 354.866558][ T9270] wg2 speed is unknown, defaulting to 1000 [ 355.066978][ T9271] siw: device registration error -23 [ 356.499106][ T53] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 356.649957][ T53] usb 8-1: Using ep0 maxpacket: 8 [ 356.656968][ T53] usb 8-1: config 0 interface 0 has no altsetting 0 [ 356.661953][ T53] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 356.665522][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.674105][ T53] usb 8-1: config 0 descriptor?? [ 356.791515][ T6085] ================================================================== [ 356.794224][ T6085] BUG: KASAN: slab-use-after-free in hci_uart_write_work+0x81c/0x950 [ 356.797117][ T6085] Read of size 4 at addr ffff88802b496cf0 by task kworker/0:4/6085 [ 356.801286][ T6085] [ 356.802513][ T6085] CPU: 0 UID: 0 PID: 6085 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 356.802542][ T6085] Tainted: [L]=SOFTLOCKUP [ 356.802548][ T6085] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 356.802561][ T6085] Workqueue: events hci_uart_write_work [ 356.802585][ T6085] Call Trace: [ 356.802593][ T6085] [ 356.802599][ T6085] dump_stack_lvl+0x100/0x190 [ 356.802622][ T6085] print_report+0x156/0x4c9 [ 356.802643][ T6085] ? __virt_addr_valid+0x81/0x620 [ 356.802666][ T6085] ? __phys_addr+0xe8/0x180 [ 356.802692][ T6085] ? hci_uart_write_work+0x81c/0x950 [ 356.802707][ T6085] kasan_report+0xdf/0x1a0 [ 356.802732][ T6085] ? hci_uart_write_work+0x81c/0x950 [ 356.802759][ T6085] hci_uart_write_work+0x81c/0x950 [ 356.802777][ T6085] ? __pfx_pty_write+0x10/0x10 [ 356.802800][ T6085] process_one_work+0x9c2/0x1840 [ 356.802830][ T6085] ? __pfx_process_one_work+0x10/0x10 [ 356.802857][ T6085] ? assign_work+0x19c/0x250 [ 356.802880][ T6085] worker_thread+0x5da/0xe40 [ 356.802905][ T6085] ? __pfx_worker_thread+0x10/0x10 [ 356.802930][ T6085] ? kthread+0x17d/0x730 [ 356.802951][ T6085] ? __pfx_worker_thread+0x10/0x10 [ 356.802974][ T6085] kthread+0x3b3/0x730 [ 356.802995][ T6085] ? __pfx_kthread+0x10/0x10 [ 356.803016][ T6085] ? ret_from_fork+0x79/0xaf0 [ 356.803033][ T6085] ? ret_from_fork+0x79/0xaf0 [ 356.803048][ T6085] ? rcu_is_watching+0x12/0xc0 [ 356.803065][ T6085] ? __pfx_kthread+0x10/0x10 [ 356.803087][ T6085] ret_from_fork+0x754/0xaf0 [ 356.803103][ T6085] ? __pfx_ret_from_fork+0x10/0x10 [ 356.803119][ T6085] ? __switch_to+0x7b9/0x10c0 [ 356.803140][ T6085] ? __pfx_kthread+0x10/0x10 [ 356.803164][ T6085] ret_from_fork_asm+0x1a/0x30 [ 356.803192][ T6085] [ 356.803198][ T6085] [ 356.873345][ T6085] Allocated by task 61: [ 356.875120][ T6085] kasan_save_stack+0x30/0x50 [ 356.877160][ T6085] kasan_save_track+0x14/0x30 [ 356.879131][ T6085] __kasan_slab_alloc+0x89/0x90 [ 356.881207][ T6085] kmem_cache_alloc_node_noprof+0x303/0x880 [ 356.883546][ T6085] __alloc_skb+0x156/0x410 [ 356.885389][ T6085] bcsp_prepare_pkt+0xe0/0xa90 [ 356.887384][ T6085] bcsp_dequeue+0x237/0x4b0 [ 356.889290][ T6085] hci_uart_write_work+0x4d9/0x950 [ 356.891390][ T6085] process_one_work+0x9c2/0x1840 [ 356.893481][ T6085] worker_thread+0x5da/0xe40 [ 356.895373][ T6085] kthread+0x3b3/0x730 [ 356.897134][ T6085] ret_from_fork+0x754/0xaf0 [ 356.899029][ T6085] ret_from_fork_asm+0x1a/0x30 [ 356.901034][ T6085] [ 356.902041][ T6085] The buggy address belongs to the object at ffff88802b496c80 [ 356.902041][ T6085] which belongs to the cache skbuff_head_cache of size 240 [ 356.907651][ T6085] The buggy address is located 112 bytes inside of [ 356.907651][ T6085] freed 240-byte region [ffff88802b496c80, ffff88802b496d70) [ 356.913049][ T6085] [ 356.914079][ T6085] The buggy address belongs to the physical page: [ 356.916763][ T6085] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b496 [ 356.920395][ T6085] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 356.923832][ T6085] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 356.926950][ T6085] page_type: f5(slab) [ 356.928647][ T6085] raw: 00fff00000000040 ffff88801c74ca00 ffffea00008e8a80 dead000000000002 [ 356.932213][ T6085] raw: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 356.935818][ T6085] head: 00fff00000000040 ffff88801c74ca00 ffffea00008e8a80 dead000000000002 [ 356.939447][ T6085] head: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 356.943021][ T6085] head: 00fff00000000001 ffffea0000ad2581 00000000ffffffff 00000000ffffffff [ 356.946590][ T6085] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 356.950180][ T6085] page dumped because: kasan: bad access detected [ 356.952762][ T6085] page_owner tracks the page as allocated [ 356.955124][ T6085] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 8969, tgid 8965 (syz.2.573), ts 329725250384, free_ts 222732359412 [ 356.962927][ T6085] post_alloc_hook+0x1e1/0x250 [ 356.964949][ T6085] get_page_from_freelist+0xe3d/0x2e10 [ 356.967269][ T6085] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 356.969742][ T6085] alloc_pages_mpol+0x1fb/0x550 [ 356.971800][ T6085] new_slab+0x2c4/0x440 [ 356.973554][ T6085] ___slab_alloc+0xda3/0x1ca0 [ 356.975538][ T6085] __slab_alloc.isra.0+0x63/0x110 [ 356.977679][ T6085] kmem_cache_alloc_noprof+0x4ec/0x780 [ 356.979958][ T6085] skb_clone+0x190/0x400 [ 356.981667][ T6085] inet_frag_reasm_prepare+0x151/0xed0 [ 356.983700][ T6085] ip_defrag+0x1091/0x2730 [ 356.985596][ T6085] ip_local_deliver+0x114/0x1f0 [ 356.987661][ T6085] ip_rcv+0x2d9/0x5d0 [ 356.989346][ T6085] __netif_receive_skb_one_core+0x197/0x1e0 [ 356.991825][ T6085] __netif_receive_skb+0x1f/0x120 [ 356.993957][ T6085] process_backlog+0x37a/0x1580 [ 356.996009][ T6085] page last free pid 5350 tgid 5350 stack trace: [ 356.998707][ T6085] __free_frozen_pages+0x822/0x1130 [ 357.000905][ T6085] __put_partials+0x127/0x160 [ 357.002871][ T6085] qlist_free_all+0x47/0xe0 [ 357.004832][ T6085] kasan_quarantine_reduce+0x1a0/0x1f0 [ 357.007112][ T6085] __kasan_slab_alloc+0x69/0x90 [ 357.009148][ T6085] kmem_cache_alloc_noprof+0x2ad/0x780 [ 357.011411][ T6085] getname_flags.part.0+0x4c/0x540 [ 357.013562][ T6085] getname_flags+0x93/0xf0 [ 357.015434][ T6085] do_sys_openat2+0xc5/0x220 [ 357.017398][ T6085] __x64_sys_openat+0x12d/0x210 [ 357.019436][ T6085] do_syscall_64+0xc9/0xf80 [ 357.021355][ T6085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.023802][ T6085] [ 357.024827][ T6085] Memory state around the buggy address: [ 357.027157][ T6085] ffff88802b496b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 357.030452][ T6085] ffff88802b496c00: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 357.033796][ T6085] >ffff88802b496c80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 357.037105][ T6085] ^ [ 357.040260][ T6085] ffff88802b496d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 357.043540][ T6085] ffff88802b496d80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 357.046824][ T6085] ================================================================== [ 357.312967][ T53] mcp2221 0003:04D8:00DD.0004: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 357.525921][ T53] usb 8-1: USB disconnect, device number 3 [ 358.002000][ T6085] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 358.004684][ T6085] CPU: 0 UID: 0 PID: 6085 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 358.008607][ T6085] Tainted: [L]=SOFTLOCKUP [ 358.010209][ T6085] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 358.013837][ T6085] Workqueue: events hci_uart_write_work [ 358.015848][ T6085] Call Trace: [ 358.017140][ T6085] [ 358.018231][ T6085] dump_stack_lvl+0x100/0x190 [ 358.019960][ T6085] vpanic+0x20d/0x630 [ 358.021455][ T6085] panic+0xd1/0xd1 [ 358.022839][ T6085] ? __pfx_panic+0x10/0x10 [ 358.024473][ T6085] ? hci_uart_write_work+0x81c/0x950 [ 358.026419][ T6085] ? preempt_schedule_common+0x42/0xc0 [ 358.028427][ T6085] ? check_panic_on_warn+0x1f/0x90 [ 358.030318][ T6085] check_panic_on_warn.cold+0x19/0x34 [ 358.032274][ T6085] end_report.part.0+0x3a/0x90 [ 358.033936][ T6085] kasan_report.cold+0xe/0x18 [ 358.035671][ T6085] ? hci_uart_write_work+0x81c/0x950 [ 358.037656][ T6085] hci_uart_write_work+0x81c/0x950 [ 358.039520][ T6085] ? __pfx_pty_write+0x10/0x10 [ 358.041296][ T6085] process_one_work+0x9c2/0x1840 [ 358.043133][ T6085] ? __pfx_process_one_work+0x10/0x10 [ 358.045102][ T6085] ? assign_work+0x19c/0x250 [ 358.046805][ T6085] worker_thread+0x5da/0xe40 [ 358.048544][ T6085] ? __pfx_worker_thread+0x10/0x10 [ 358.050432][ T6085] ? kthread+0x17d/0x730 [ 358.052026][ T6085] ? __pfx_worker_thread+0x10/0x10 [ 358.053899][ T6085] kthread+0x3b3/0x730 [ 358.055399][ T6085] ? __pfx_kthread+0x10/0x10 [ 358.057142][ T6085] ? ret_from_fork+0x79/0xaf0 [ 358.058863][ T6085] ? ret_from_fork+0x79/0xaf0 [ 358.060509][ T6085] ? rcu_is_watching+0x12/0xc0 [ 358.062272][ T6085] ? __pfx_kthread+0x10/0x10 [ 358.063968][ T6085] ret_from_fork+0x754/0xaf0 [ 358.065665][ T6085] ? __pfx_ret_from_fork+0x10/0x10 [ 358.067548][ T6085] ? __switch_to+0x7b9/0x10c0 [ 358.069110][ T6085] ? __pfx_kthread+0x10/0x10 [ 358.070763][ T6085] ret_from_fork_asm+0x1a/0x30 [ 358.072533][ T6085] [ 358.074386][ T6085] Kernel Offset: disabled [ 358.075755][ T6085] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:09:06 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85672525 RDI=ffffffff9b1f2260 RBP=ffffffff9b1f2220 RSP=ffffc90004e47568 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000038 R14=0000000000000010 R15=ffffffff856724c0 RIP=ffffffff8567254f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880973e3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f53945fc CR3=0000000070c82000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000c1770f RBX=ffff88801dada4c0 RCX=ffffffff8b73f4b5 RDX=0000000000000000 RSI=ffffffff8dc413f0 RDI=ffffffff8bfa32a0 RBP=0000000000000001 RSP=ffffc9000046fdf0 R8 =0000000000000001 R9 =ffffed100566673d R10=ffff88802b3339eb R11=0000000000000000 R12=ffffed1003b5b498 R13=0000000000000001 R14=ffffffff90b771d0 R15=0000000000000000 RIP=ffffffff8b73de1f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974e3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f53a4ff4 CR3=0000000070c82000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000102 RBX=0000000000000002 RCX=ffffffff878b7925 RDX=0000000000000002 RSI=0000000000000002 RDI=ffff8880274024c0 RBP=0000000000000000 RSP=ffffc90000538c10 R8 =0000000000000005 R9 =0000000000000002 R10=0000000000000002 R11=0000000000000000 R12=0000000000000000 R13=ffff8880236fbe08 R14=1ffff920000a71b0 R15=ffff888044da8418 RIP=ffffffff82064a8b RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975e3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005598ebddeec8 CR3=000000000e392000 CR4=00352ef0 DR0=000000006000003f DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=62df3431a0737df0 b6f5e5bbab220dd5 62df3431a0737df0 b6f5e5bbab220dd5 62df3431a0737df0 b6f5e5bbab220dd5 62df3431a0737df0 b6f5e5bbab220dd5 ZMM18=b90a76e8330d0b12 66b9dd3680f4005a b90a76e8330d0b12 66b9dd3680f4005a b90a76e8330d0b12 66b9dd3680f4005a b90a76e8330d0b12 66b9dd3680f4005a ZMM19=d708000000000000 0000000000000004 d708000000000000 0000000000000003 d708000000000000 0000000000000002 d708000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c8bffffffff8a2b 7435ffffffff8912 8991ffffffff8913 3096ffffffff8a9c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e983ffffffff8a9c c341ffffffff84ba ac8cffffffff8270 0453ffffffff84ba ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9780ffffffff84ab 63a4ffffffff84ba acdcffffffff84ba 9f57ffffffff81f1 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8a9cc341 ffffffff84baac8c ffffffff82700453 ffffffff84ba9780 ZMM25=66b9dd3666b9dd36 66b9dd3666b9dd36 66b9dd3666b9dd36 66b9dd3666b9dd36 66b9dd3666b9dd36 66b9dd3666b9dd36 66b9dd3666b9dd36 66b9dd3666b9dd36 ZMM26=330d0b12330d0b12 330d0b12330d0b12 330d0b12330d0b12 330d0b12330d0b12 330d0b12330d0b12 330d0b12330d0b12 330d0b12330d0b12 330d0b12330d0b12 ZMM27=b90a76e8b90a76e8 b90a76e8b90a76e8 b90a76e8b90a76e8 b90a76e8b90a76e8 b90a76e8b90a76e8 b90a76e8b90a76e8 b90a76e8b90a76e8 b90a76e8b90a76e8 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=d5080000d5080000 d5080000d5080000 d5080000d5080000 d5080000d5080000 d5080000d5080000 d5080000d5080000 d5080000d5080000 d5080000d5080000 info registers vcpu 3 CPU#3 RAX=000000000054c893 RBX=ffff88801dea0000 RCX=ffffffff8b73f4b5 RDX=0000000000000000 RSI=ffffffff8dc413f0 RDI=ffffffff8bfa32a0 RBP=0000000000000003 RSP=ffffc9000048fdf0 R8 =0000000000000001 R9 =ffffed10056a673d R10=ffff88802b5339eb R11=0000000000000000 R12=ffffed1003bd4000 R13=0000000000000003 R14=ffffffff90b771d0 R15=0000000000000000 RIP=ffffffff8b73de1f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976e3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7115700 CR3=000000006d9b8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000014000000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000