last executing test programs: 16.01588297s ago: executing program 2 (id=650): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x2, [{}, {}]}, 0x44) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x100, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x7, &(0x7f00000001c0)) syz_usbip_server_init(0x6) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) socket$netlink(0x10, 0x3, 0x15) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r7, &(0x7f0000000440)=ANY=[@ANYBLOB='stack :'], 0xb3) readv(r7, &(0x7f0000000380)=[{&(0x7f0000000040)=""/11, 0xb}], 0x1) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f000000c2c0)=[0x0], 0x1}, 0x58) 13.952653168s ago: executing program 0 (id=653): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xa0}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xf11b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x0, 0x0) request_key(&(0x7f0000000280)='keyring\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f00000005c0)='/%+@\x01-@\x00', 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x0, 0x8, 0x8000, 0x4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) openat$rdma_cm(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) r5 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file2\x00', 0x8, 0xdfcd) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 13.166125326s ago: executing program 1 (id=655): syz_open_dev$usbfs(0x0, 0x76, 0x101301) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0x52}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) openat$cgroup(r5, 0x0, 0x200002, 0x0) ioctl$EVIOCSREP(r5, 0x40084503, &(0x7f00000001c0)=[0x3, 0x6]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x18c) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@quota}]}) lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) 12.953163017s ago: executing program 2 (id=656): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x8, 0x0, &(0x7f00000002c0)="b80a000500000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x200a00, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000080)={0x0, {0x1, 0xffffffff}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = syz_open_pts(r4, 0x101000) ioctl$KDDISABIO(r6, 0x4b37) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff0200000000000000000000000000012c"], 0x0) 12.299976028s ago: executing program 0 (id=658): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) syz_open_dev$swradio(&(0x7f0000000a00), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_io_uring_setup(0x892, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r4, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000d40), 0xffffffffffffffff) r7 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000600)={0x2, @pix={0x80000000, 0xbb46, 0x34324142, 0x0, 0x0, 0x2c9, 0x0, 0xfffffffd}}) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000080)={0x2, @sliced={0x8, [0x1, 0x7, 0x5, 0x3ff, 0x9, 0x2, 0x6, 0x9, 0x1ff, 0x6, 0x494, 0x139, 0x7, 0x5, 0x5, 0x7, 0x6, 0x9, 0x2, 0x5, 0x1, 0x1, 0xd, 0x6, 0x9, 0x8, 0xf6, 0x5, 0x9, 0x9, 0x1, 0x5, 0x9, 0x5, 0x5, 0x258d, 0xa, 0x9, 0x6, 0x1, 0xe, 0x40, 0x7ff, 0x7, 0x7f, 0xdea, 0x5, 0xbb], 0x80000000}}) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc0205647, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r8, 0x0, 0x0, 0x200007f9, &(0x7f0000000280)={0x2, 0x4e24, @local}, 0x10) 9.780246974s ago: executing program 0 (id=660): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r7, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24) sendmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r7, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0xf000, 0x10002, 0x0) socket$netlink(0x10, 0x3, 0x0) 9.52062831s ago: executing program 1 (id=662): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_sctp(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x11, r3, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000) r5 = dup2(r4, r4) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r5, &(0x7f0000004d80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$vhost_msg_v2(r5, &(0x7f0000000280)={0x2, 0x0, {&(0x7f0000000140)=""/128, 0xfd86, 0x0, 0x0, 0x2}}, 0x48) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffd, 0xfff1}, {0xfff3, 0x1}, {0xd, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040801}, 0x20000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(r6, 0xb130f623bd16319d, &(0x7f0000000100)={0x15, 0x1000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='inet_sk_error_report\x00'}, 0x18) 8.601835933s ago: executing program 3 (id=663): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xd}, 0x18) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="01025673f188"}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) futex(0x0, 0x80, 0x1, 0x0, 0x0, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') readv(r4, &(0x7f0000000200), 0x10000000000000d2) keyctl$get_security(0x11, 0x0, &(0x7f0000000880)=""/4096, 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x28, 0x7, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000140)={0x36, 0x2, 0x0, "d569e8000000fa44966262631e8ac11e00"}) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 8.342963036s ago: executing program 2 (id=664): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0xe, @rand_addr=' \x01\x00', 0xfffffff5}}, 0x40, 0x7, 0x5, 0x4, 0xc, 0x25, 0xb5}, 0x9c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev_mcast\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'pim6reg\x00', 0x1000}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x6, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x395, 0xffffffffffffffff, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xffffffff, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x2002c810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2000000000002) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) pread64(r7, 0x0, 0x0, 0x7) bind$netlink(r7, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfc, 0x2000000}, 0xc) r8 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x25b}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x2, &(0x7f0000000180), 0xfe) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) close(r2) read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x2020) 8.226877368s ago: executing program 1 (id=665): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r3, 0x5608) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ec90000000000000000"], 0xb) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x2, 0xb8, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r8 = syz_io_uring_setup(0x40109, &(0x7f0000000140)={0x0, 0x84d9, 0x0, 0xffffffff, 0x8204}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x9, 0x0, &(0x7f00000000c0)="2a48b9e38190f0c0ee656126cdd7ec87423feac480a9e85b87f249aec93dd8efda6d0efe9bbd1ee5a73b968890440233597e059c66264cbbbaa267019a6e73a6", 0x7}) io_uring_enter(r8, 0x2c89, 0x2ddf, 0x50, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)=ANY=[@ANYBLOB="140100002f00010000000000fbdbdd250101f2800c001300ff070000000000001400010000000000000000000000ffff6401010150ba2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58eda3ddb9ad02a078cf0d972df9e99f0797fa2bd51b9c96eff0ac67734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8c5afae9b3283dd6fa7ef731708d6e4277446e08cacb891c05e5e5e0066fcead810d708aa7568433f39aa9099b1080a4ba7aa1e7c208eced3eda8275160f2aa9963df56d11439c212b6d06dca2247ee5c7e3519437780f4b5d8dac02a2edeba97daa733b49d7af8a597f08f75cf629519890146a834babcfcd12396d2450d796a4cb587945a84189a9c69ee0ddc1fb8a43a891e0507269534b308eaecc9af626fe08f18e46adca5fbc7542d751022373cea794b9921182ce390d0dfe85786ba4867bd68538dbdb2a50136073beffe1f7ddfdc236cda027667d44bbb159850ce6f8a6e2d5f60bc63fed40893b5cd036c1c56ae6eef"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="cf042cbd7000fbdbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff00000600ab000802000005007400010000000c0081000500010006000000200013008b6c128cb66c0c026c24861b84"], 0x74}, 0x1, 0x0, 0x0, 0x40020}, 0x8008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @private=0xa010100}}, 0xb4, 0x0, 0x80000001, 0x0, 0xc4}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$bt_l2cap_L2CAP_LM(r8, 0x6, 0x3, &(0x7f0000000100), &(0x7f00000003c0)=0x4) 7.547325247s ago: executing program 3 (id=666): r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) syz_io_uring_setup(0x53ca, &(0x7f00000000c0)={0x0, 0xde9, 0x8000, 0x0, 0x82}, &(0x7f0000000140), &(0x7f0000000180)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0xc0000010}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) ioctl$TCGETS2(r4, 0x802c542a, &(0x7f0000000280)) sendmmsg$unix(r2, &(0x7f000000bbc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10, 0x1, 0x1, [r2]}}], 0x10, 0x20000041}}], 0x1, 0xc004) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000200e000000e00000e1208000f0100810401a80016ea1f00", 0x36}], 0x1, 0x0, 0x0, 0x7400}, 0x48000) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xcc, 0xffffffff, 0xffffffff, 0xcc, 0xffffffff, 0x1fc, 0xffffffff, 0xffffffff, 0x1fc, 0xffffffff, 0x3, &(0x7f0000000400), {[{{@ip={@multicast2, @loopback, 0xff, 0xff000000, 'macvtap0\x00', 'geneve1\x00', {}, {0xff}, 0x67, 0x0, 0x10}, 0x0, 0x70, 0xcc}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x21}, [0xff000000, 0x0, 0xffffffff, 0xffffff00], 0x4e23, 0x4e20, 0x4e20, 0x4e21, 0x9, 0x603, 0x4, 0x6, 0x8}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@socket0={{0x20}}, @common=@set={{0x40}, {{0x4, [0x4, 0x5, 0x4, 0x1, 0x5], 0x4}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x0, 0x6, 0x0, 0x0, 0x4], 0x6, 0x2}, {0xffffffffffffffff, [0x2, 0x5, 0x6, 0x6, 0x1, 0x3], 0x5}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2ec) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x8aeb01) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYRES8=r6, @ANYRES8=r3], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r7, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) 7.03737505s ago: executing program 1 (id=667): r0 = add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) io_uring_setup(0x2255, &(0x7f0000000440)={0x0, 0x6aec, 0x2000, 0x1, 0x38}) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0xa1e3a9fe3eb9c551) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x2020}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r5, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4b}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ff}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x56}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}]]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4014) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x1e, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffb}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4040) sendfile(r7, r7, 0x0, 0x200000) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04"], 0x7) keyctl$instantiate(0xc, r0, &(0x7f0000000080)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', '$'}, 0x19, 0x0) 5.185740641s ago: executing program 1 (id=668): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x24, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0186405, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x20000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000007}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) pipe(0x0) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r6, 0x1) r7 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) fcntl$setownex(r7, 0xf, &(0x7f0000000280)={0x2, r0}) close(r7) 5.185276476s ago: executing program 3 (id=669): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xd}, 0x18) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="01025673f188"}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) futex(0x0, 0x80, 0x1, 0x0, 0x0, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') readv(r4, &(0x7f0000000200), 0x10000000000000d2) keyctl$get_security(0x11, 0x0, &(0x7f0000000880)=""/4096, 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x28, 0x7, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000140)={0x36, 0x2, 0x0, "d569e8000000fa44966262631e8ac11e00"}) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 5.026050415s ago: executing program 0 (id=670): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x200a00, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000080)={0x0, {0x1, 0xffffffff}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = syz_open_pts(r4, 0x101000) ioctl$KDDISABIO(r6, 0x4b37) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff0200000000000000000000000000012c"], 0x0) 2.871382198s ago: executing program 3 (id=671): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000400)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000340)=0xfffffffffffffff9, 0x12) r2 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x6000, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) sendmmsg$inet(r3, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) dup(0xffffffffffffffff) r4 = timerfd_create(0x8, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, 0x0) clock_adjtime(0x4, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x4000001) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDCTL_MIDI_INFO(r6, 0xc074510c, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x0, 0x0) r8 = syz_io_uring_setup(0x88f, &(0x7f0000000440)={0x0, 0x304e, 0x0, 0x2, 0x28d}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}, 0x0, {0x0, r11}}) io_uring_enter(r8, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 2.733852028s ago: executing program 1 (id=672): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x200a00, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000080)={0x0, {0x1, 0xffffffff}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = syz_open_pts(r4, 0x101000) ioctl$KDDISABIO(r6, 0x4b37) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff0200000000000000000000000000012c"], 0x0) 2.638183804s ago: executing program 2 (id=673): openat$binderfs(0xffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], 0x0) mmap(&(0x7f0000121000/0x1000)=nil, 0x1000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x401, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e51326bd7000ffffffff07000000", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="01030300ff"], 0x38}}, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f0000000f80)={0x16, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x3, 0x7, {"a0a50f8fe5883ff48c127252efc65f92"}, 0x9, 0x100000000, 0x52b6}}}, 0x90) 1.912822831s ago: executing program 3 (id=674): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xd}, 0x18) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="01025673f188"}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) futex(0x0, 0x80, 0x1, 0x0, 0x0, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') readv(r4, &(0x7f0000000200), 0x10000000000000d2) keyctl$get_security(0x11, 0x0, &(0x7f0000000880)=""/4096, 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x28, 0x7, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000140)={0x36, 0x2, 0x0, "d569e8000000fa44966262631e8ac11e00"}) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 1.696783964s ago: executing program 2 (id=675): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r2, 0x1) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) tkill(r7, 0xb) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x55fdb4595c3d8036) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031, 0x60}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_emit_ethernet(0x68, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x32, 0x3a, 0x0, @local, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "251a50", 0x0, 0x2c, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], "fd0a"}}}}}}}, 0x0) 1.030150058s ago: executing program 0 (id=676): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000400)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000340)=0xfffffffffffffff9, 0x12) r2 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x6000, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) sendmmsg$inet(r3, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) dup(0xffffffffffffffff) r4 = timerfd_create(0x8, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, 0x0) clock_adjtime(0x4, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDCTL_MIDI_INFO(r6, 0xc074510c, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x0, 0x0) r8 = syz_io_uring_setup(0x88f, &(0x7f0000000440)={0x0, 0x304e, 0x0, 0x2, 0x28d}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}, 0x0, {0x0, r11}}) io_uring_enter(r8, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 1.022889958s ago: executing program 3 (id=684): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x200a00, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000080)={0x0, {0x1, 0xffffffff}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = syz_open_pts(r4, 0x101000) ioctl$KDDISABIO(r6, 0x4b37) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff0200000000000000000000000000012c"], 0x0) 672.183759ms ago: executing program 2 (id=677): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000280)={0x3, 0x7}, 0x4) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x2, @empty, 0x7}], 0x1c) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000000400)=""/4096, 0x1000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000420000003c00128008000100677470003000028008000200", @ANYRES32=r5], 0x5c}, 0x1, 0xba01}, 0x0) close(r5) 0s ago: executing program 0 (id=678): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r7, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24) sendmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r7, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0xf000, 0x10002, 0x0) socket$netlink(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): de will be removed in future, please upgrade to mdadm-4.5+ [ 69.448048][ T6092] block device autoloading is deprecated and will be removed. [ 69.704629][ T6079] veth0_to_bridge: left promiscuous mode [ 70.281303][ T6088] vhci_hcd: connection reset by peer [ 70.285099][ T61] vhci_hcd vhci_hcd.1: stop threads [ 70.287821][ T61] vhci_hcd vhci_hcd.1: release socket [ 70.293127][ T61] vhci_hcd vhci_hcd.1: disconnect device [ 70.365452][ T6108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14'. [ 71.118508][ T6118] netlink: 'syz.1.17': attribute type 1 has an invalid length. [ 71.334400][ T6122] warning: `syz.2.16' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 71.373335][ T5957] Bluetooth: hci3: command tx timeout [ 71.373407][ T5951] Bluetooth: hci2: command tx timeout [ 71.376910][ T5300] Bluetooth: hci0: command tx timeout [ 71.378748][ T5954] Bluetooth: hci1: command tx timeout [ 71.488838][ T6118] geneve2: entered promiscuous mode [ 71.545941][ T6128] hfs: unable to load iocharset "io#harset" [ 72.160879][ T54] IPVS: starting estimator thread 0... [ 72.224009][ T6143] 9pnet_virtio: no channels available for device syz [ 72.268808][ T6141] IPVS: using max 46 ests per chain, 110400 per kthread [ 73.691081][ T6150] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.331919][ T1333] usb 40-1: device descriptor read/8, error -110 [ 74.425916][ T6155] netlink: 44 bytes leftover after parsing attributes in process `syz.0.24'. [ 74.750958][ T1333] usb usb40-port1: attempt power cycle [ 74.763130][ T6159] syz.3.25 uses obsolete (PF_INET,SOCK_PACKET) [ 75.141866][ T6046] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 75.301871][ T6046] usb 6-1: Using ep0 maxpacket: 8 [ 75.314863][ T1333] usb usb40-port1: unable to enumerate USB device [ 75.316214][ T6046] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 75.332072][ T6046] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 75.339491][ T6046] usb 6-1: config 179 has no interface number 0 [ 75.350772][ T6046] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 75.355415][ T6046] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 75.360286][ T6046] usb 6-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 75.365371][ T6046] usb 6-1: config 179 interface 65 has no altsetting 0 [ 75.367887][ T6046] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 75.370849][ T6046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.591409][ T6176] ======================================================= [ 75.591409][ T6176] WARNING: The mand mount option has been deprecated and [ 75.591409][ T6176] and is ignored by this kernel. Remove the mand [ 75.591409][ T6176] option from the mount to silence this warning. [ 75.591409][ T6176] ======================================================= [ 75.734651][ T6176] loop9: detected capacity change from 0 to 7 [ 75.819506][ T6176] Dev loop9: unable to read RDB block 7 [ 75.839218][ T6176] loop9: unable to read partition table [ 75.841244][ T6176] loop9: partition table beyond EOD, truncated [ 75.843495][ T6176] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 76.672381][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.675965][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.572247][ T6190] ecryptfs: Unknown parameter 'd…`¼?/û' [ 78.972813][ T142] usb 6-1: USB disconnect, device number 2 [ 79.068382][ T6204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.33'. [ 79.146635][ T6207] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 79.149177][ T6207] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 79.193436][ T6207] vhci_hcd vhci_hcd.0: Device attached [ 79.270351][ T6212] netlink: 'syz.1.34': attribute type 6 has an invalid length. [ 79.466277][ T6212] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 79.468917][ T6212] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 79.473853][ T6212] vhci_hcd vhci_hcd.0: Device attached [ 79.492762][ T1333] usb 38-1: SetAddress Request (2) to port 0 [ 79.494741][ T1333] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 79.560013][ T6212] random: crng reseeded on system resumption [ 79.686343][ T6212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.761957][ T55] usb 40-1: SetAddress Request (6) to port 0 [ 79.763976][ T55] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 79.991294][ T6210] vhci_hcd: connection reset by peer [ 79.995556][ T4296] vhci_hcd vhci_hcd.0: stop threads [ 79.997929][ T4296] vhci_hcd vhci_hcd.0: release socket [ 80.001216][ T4296] vhci_hcd vhci_hcd.0: disconnect device [ 80.508783][ T6227] lo speed is unknown, defaulting to 1000 [ 80.510738][ T6227] lo speed is unknown, defaulting to 1000 [ 80.515690][ T6227] lo speed is unknown, defaulting to 1000 [ 80.522281][ T6227] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 80.531195][ T6227] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 80.557032][ T6227] lo speed is unknown, defaulting to 1000 [ 80.561255][ T6227] lo speed is unknown, defaulting to 1000 [ 80.564535][ T6227] lo speed is unknown, defaulting to 1000 [ 80.567602][ T6227] lo speed is unknown, defaulting to 1000 [ 80.832335][ T6234] Zero length message leads to an empty skb [ 81.231958][ T6232] tipc: Started in network mode [ 81.233787][ T6232] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 81.239942][ T6232] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 81.244372][ T6232] tipc: Enabled bearer , priority 10 [ 81.272753][ T6239] netlink: 24 bytes leftover after parsing attributes in process `syz.2.40'. [ 82.013015][ T6218] vhci_hcd: connection reset by peer [ 82.015592][ T61] vhci_hcd vhci_hcd.1: stop threads [ 82.017314][ T61] vhci_hcd vhci_hcd.1: release socket [ 82.019173][ T61] vhci_hcd vhci_hcd.1: disconnect device [ 82.363774][ T142] tipc: Node number set to 1 [ 83.856568][ T24] cfg80211: failed to load regulatory.db [ 84.237035][ T6257] ecryptfs: Unknown parameter 'd…`¼?/û' [ 84.582013][ T1333] usb 38-1: device descriptor read/8, error -110 [ 85.613736][ T55] usb 40-1: device descriptor read/8, error -110 [ 85.898002][ T6272] netlink: 44 bytes leftover after parsing attributes in process `syz.2.45'. [ 85.922646][ T1333] usb usb38-port1: attempt power cycle [ 86.012226][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 86.012721][ T55] usb usb40-port1: attempt power cycle [ 86.212623][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 86.357742][ T24] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 86.402066][ T24] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 86.412703][ T24] usb 5-1: config 179 has no interface number 0 [ 86.415547][ T24] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 86.420792][ T24] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 86.451894][ T24] usb 5-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 86.462865][ T24] usb 5-1: config 179 interface 65 has no altsetting 0 [ 86.466005][ T24] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 86.472202][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.493194][ T1333] usb usb38-port1: unable to enumerate USB device [ 86.613470][ T55] usb usb40-port1: unable to enumerate USB device [ 87.918509][ T6041] usb 5-1: USB disconnect, device number 2 [ 88.032553][ T6288] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 88.034673][ T6288] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 88.038074][ T6288] vhci_hcd vhci_hcd.0: Device attached [ 88.239208][ T6294] 9p: Bad value for 'rfdno' [ 88.342003][ T891] usb 44-1: SetAddress Request (2) to port 0 [ 88.342083][ T891] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 88.585429][ T29] libceph: connect (1)[c::]:6789 error -101 [ 88.597448][ T6299] ceph: No mds server is up or the cluster is laggy [ 88.605330][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 89.027452][ T6305] wg2 speed is unknown, defaulting to 1000 [ 89.304896][ T6305] wg2 speed is unknown, defaulting to 1000 [ 89.327120][ T6305] wg2 speed is unknown, defaulting to 1000 [ 89.876619][ T29] wg2 speed is unknown, defaulting to 1000 [ 89.878779][ T6305] infiniband syz2: set active [ 89.880355][ T6305] infiniband syz2: added wg2 [ 89.935671][ T6289] vhci_hcd: connection reset by peer [ 89.942398][ T1043] vhci_hcd vhci_hcd.3: stop threads [ 89.944336][ T1043] vhci_hcd vhci_hcd.3: release socket [ 89.963398][ T1043] vhci_hcd vhci_hcd.3: disconnect device [ 89.968262][ T6305] RDS/IB: syz2: added [ 89.969953][ T6305] smc: adding ib device syz2 with port count 1 [ 89.981196][ T6305] smc: ib device syz2 port 1 has no pnetid [ 90.032852][ T29] wg2 speed is unknown, defaulting to 1000 [ 90.039337][ T6305] wg2 speed is unknown, defaulting to 1000 [ 90.338425][ T6305] wg2 speed is unknown, defaulting to 1000 [ 90.740451][ T6305] wg2 speed is unknown, defaulting to 1000 [ 90.971801][ T6305] wg2 speed is unknown, defaulting to 1000 [ 92.543148][ T6325] netlink: 44 bytes leftover after parsing attributes in process `syz.3.57'. [ 93.344525][ T6338] tipc: Started in network mode [ 93.347033][ T6338] tipc: Node identity ac14140f, cluster identity 4711 [ 93.351084][ T6338] tipc: New replicast peer: 255.255.255.255 [ 93.354671][ T6338] tipc: Enabled bearer , priority 10 [ 93.360284][ T6338] netlink: 56 bytes leftover after parsing attributes in process `syz.0.58'. [ 93.373808][ T6336] [U] : [ 93.374922][ T6336] [U] [ 93.375882][ T6336] [U] [ 93.376810][ T6336] [U] [ 93.377706][ T6336] [U] [ 93.378593][ T6336] [U] [ 93.379469][ T6336] [U] [ 93.380559][ T6336] [U] [ 93.398784][ T6336] [U] [ 93.400015][ T6336] [U] [ 93.401226][ T6336] [U] [ 93.402321][ T6336] [U] [ 93.403285][ T6336] [U] [ 93.404260][ T6336] [U] [ 93.405252][ T6336] [U] [ 93.406355][ T6336] [U] [ 93.425505][ T6336] [U] [ 93.426755][ T6336] [U] [ 93.427956][ T6336] [U] [ 93.429131][ T6336] [U] [ 93.430318][ T6336] [U] [ 93.431546][ T6336] [U] [ 93.432935][ T6336] [U] [ 93.434141][ T6336] [U] [ 93.438785][ T6336] [U] [ 93.440278][ T6336] [U] [ 93.441579][ T6336] [U] [ 93.442843][ T6336] [U] [ 93.444392][ T6336] [U] [ 93.445712][ T6336] [U] [ 93.447001][ T6336] [U] [ 93.448260][ T6336] [U] [ 93.449849][ T6336] [U] [ 93.451111][ T6336] [U] [ 93.452339][ T6336] [U] [ 93.453553][ T6336] [U] [ 93.454735][ T6336] [U] [ 93.455966][ T6336] [U] [ 93.457169][ T6336] [U] [ 93.458356][ T6336] [U] [ 93.461337][ T6336] [U] [ 93.462583][ T6336] [U] [ 93.462671][ T891] usb 44-1: device descriptor read/8, error -110 [ 93.463888][ T6336] [U] [ 93.467500][ T6336] [U] [ 93.468865][ T6336] [U] [ 93.470061][ T6336] [U] [ 93.471320][ T6336] [U] [ 93.472638][ T6336] [U] [ 93.476053][ T6336] [U] [ 93.477277][ T6336] [U] [ 93.478489][ T6336] [U] [ 93.479740][ T6336] [U] [ 93.481043][ T6336] [U] [ 93.482336][ T6336] [U] [ 93.483586][ T6336] [U] [ 93.484885][ T6336] [U] [ 93.486446][ T6336] [U] [ 93.487652][ T6336] [U] [ 93.488855][ T6336] [U] [ 93.490044][ T6336] [U] [ 93.491264][ T6336] [U] [ 93.492463][ T6336] [U] [ 93.493655][ T6336] [U] [ 93.494821][ T6336] [U] [ 93.500003][ T6336] [U] [ 93.501365][ T6336] [U] [ 93.502607][ T6336] [U] [ 93.504144][ T6336] [U] [ 93.505297][ T6336] [U] [ 93.506568][ T6336] [U] [ 93.507772][ T6336] [U] [ 93.509123][ T6336] [U] [ 93.511071][ T6336] [U] [ 93.512033][ T6336] [U] [ 93.513162][ T6336] [U] [ 93.514069][ T6336] [U] [ 93.514971][ T6336] [U] [ 93.515916][ T6336] [U] [ 93.516819][ T6336] [U] [ 93.517709][ T6336] [U] [ 93.519787][ T6336] [U] [ 93.520734][ T6336] [U] [ 93.521638][ T6336] [U] [ 93.522687][ T6336] [U] [ 93.523795][ T6336] [U] [ 93.524758][ T6336] [U] [ 93.525905][ T6336] [U] [ 93.526850][ T6336] [U] [ 93.528562][ T6336] [U] [ 93.530001][ T6336] [U] [ 93.531028][ T6336] [U] [ 93.532157][ T6336] [U] [ 93.533168][ T6336] [U] [ 93.534075][ T6336] [U] [ 93.534976][ T6336] [U] [ 93.535916][ T6336] [U] [ 93.567710][ T6336] [U] [ 93.568687][ T6336] [U] [ 93.569582][ T6336] [U] [ 93.570516][ T6336] [U] [ 93.571462][ T6336] [U] [ 93.572394][ T6336] [U] [ 93.573307][ T6336] [U] [ 93.574241][ T6336] [U] [ 93.576379][ T6336] [U] [ 93.577442][ T6336] [U] [ 93.578351][ T6336] [U] [ 93.579254][ T6336] [U] [ 93.580217][ T6336] [U] [ 93.581158][ T6336] [U] [ 93.582087][ T6336] [U] [ 93.583021][ T6336] [U] [ 93.585013][ T6336] [U] [ 93.586176][ T6336] [U] [ 93.587081][ T6336] [U] [ 93.588328][ T6336] [U] [ 93.589804][ T6336] [U] [ 93.590966][ T6336] [U] [ 93.592005][ T6336] [U] [ 93.592922][ T6336] [U] [ 93.594299][ T6336] [U] [ 93.595198][ T6336] [U] [ 93.596307][ T6336] [U] [ 93.597478][ T6336] [U] [ 93.598428][ T6336] [U] [ 93.599325][ T6336] [U] [ 93.600499][ T6336] [U] [ 93.677589][ T6345] /dev/nullb0: Can't open blockdev [ 93.989513][ T6333] [U] [ 94.062829][ T891] usb usb44-port1: attempt power cycle [ 94.491866][ T142] tipc: Node number set to 2886997007 [ 94.671459][ T891] usb usb44-port1: unable to enumerate USB device [ 96.953770][ T6376] hfs: unable to load iocharset "io#harset" [ 98.098810][ T6397] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 98.101125][ T6397] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 98.452183][ T6397] vhci_hcd vhci_hcd.0: Device attached [ 98.732381][ T891] usb 42-1: SetAddress Request (2) to port 0 [ 98.734498][ T891] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 98.955214][ T6408] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 98.958159][ T6408] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 98.961896][ T6408] vhci_hcd vhci_hcd.0: Device attached [ 99.252070][ T24] usb 40-1: SetAddress Request (10) to port 0 [ 99.257317][ T24] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 99.449392][ T6398] vhci_hcd: connection reset by peer [ 99.454428][ T94] vhci_hcd vhci_hcd.2: stop threads [ 99.456765][ T94] vhci_hcd vhci_hcd.2: release socket [ 99.458899][ T94] vhci_hcd vhci_hcd.2: disconnect device [ 99.551977][ T6409] vhci_hcd: connection reset by peer [ 99.554613][ T94] vhci_hcd vhci_hcd.1: stop threads [ 99.556452][ T94] vhci_hcd vhci_hcd.1: release socket [ 99.558399][ T94] vhci_hcd vhci_hcd.1: disconnect device [ 100.533764][ T6429] 9pnet_virtio: no channels available for device syz [ 101.991163][ T6443] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 102.052469][ T6434] fuse: Bad value for 'fd' [ 103.753440][ T6457] netlink: 'syz.3.79': attribute type 6 has an invalid length. [ 103.792132][ T891] usb 42-1: device descriptor read/8, error -110 [ 103.904021][ T6452] tipc: Started in network mode [ 103.905740][ T6452] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 103.909051][ T6452] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 103.913508][ T6452] tipc: Enabled bearer , priority 10 [ 103.990358][ T6461] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 103.992974][ T6461] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 104.185350][ T891] usb usb42-port1: attempt power cycle [ 104.279396][ T6465] random: crng reseeded on system resumption [ 104.281924][ T6461] vhci_hcd vhci_hcd.0: Device attached [ 104.311537][ T6461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.339804][ T24] usb 40-1: device descriptor read/8, error -110 [ 104.572179][ T54] usb 44-1: SetAddress Request (6) to port 0 [ 104.575277][ T54] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 105.031942][ T6269] tipc: Node number set to 1 [ 105.238190][ T24] usb usb40-port1: attempt power cycle [ 105.245017][ T891] usb usb42-port1: unable to enumerate USB device [ 105.470270][ T6478] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 105.472495][ T6478] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 105.475450][ T6478] vhci_hcd vhci_hcd.0: Device attached [ 105.641388][ T6463] vhci_hcd: connection reset by peer [ 105.647473][ T5261] vhci_hcd vhci_hcd.3: stop threads [ 105.652599][ T5261] vhci_hcd vhci_hcd.3: release socket [ 105.662302][ T5261] vhci_hcd vhci_hcd.3: disconnect device [ 105.743101][ T891] usb 42-1: SetAddress Request (6) to port 0 [ 105.746574][ T891] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 105.830047][ T24] usb usb40-port1: unable to enumerate USB device [ 105.935452][ T6480] vhci_hcd: connection reset by peer [ 105.954040][ T1043] vhci_hcd vhci_hcd.2: stop threads [ 105.956194][ T1043] vhci_hcd vhci_hcd.2: release socket [ 105.962604][ T1043] vhci_hcd vhci_hcd.2: disconnect device [ 106.381973][ T6491] netlink: 'syz.0.87': attribute type 1 has an invalid length. [ 106.407061][ T6491] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.442759][ T6491] bond1: (slave veth3): Enslaving as an active interface with a down link [ 106.480049][ T6491] bond1: (slave dummy0): making interface the new active one [ 106.484306][ T6491] dummy0: entered promiscuous mode [ 106.486812][ T6491] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 106.492278][ T5951] Bluetooth: hci4: command 0x1003 tx timeout [ 106.495273][ T5957] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 106.681199][ T6491] bond1 (unregistering): (slave veth3): Releasing active interface [ 106.700644][ T6491] bond1 (unregistering): (slave dummy0): Releasing active interface [ 106.710381][ T6491] bond1 (unregistering): Released all slaves [ 106.729283][ T6494] geneve2: entered promiscuous mode [ 106.962953][ T6504] comedi comedi0: Minor 2 could not be opened [ 107.062980][ T6506] 9pnet_virtio: no channels available for device syz [ 107.151388][ T6507] netdevsim netdevsim0: Direct firmware load for þ failed with error -2 [ 107.154305][ T6507] netdevsim netdevsim0: Falling back to sysfs fallback for: þ [ 108.083219][ T6517] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.181907][ T6536] mmap: syz.0.95 (6536) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 109.622144][ T54] usb 44-1: device descriptor read/8, error -110 [ 110.041234][ T54] usb usb44-port1: attempt power cycle [ 110.623171][ T54] usb usb44-port1: unable to enumerate USB device [ 110.812038][ T891] usb 42-1: device descriptor read/8, error -110 [ 111.212968][ T6562] qnx6: unable to read the first superblock [ 111.216724][ T6041] IPVS: starting estimator thread 0... [ 111.219372][ T6563] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 111.222214][ T6563] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 111.243566][ T6563] vhci_hcd vhci_hcd.0: Device attached [ 111.302012][ T6565] IPVS: using max 43 ests per chain, 103200 per kthread [ 111.372004][ T5957] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 111.442455][ T891] usb usb42-port1: attempt power cycle [ 111.511987][ T54] usb 40-1: SetAddress Request (14) to port 0 [ 111.514003][ T54] usb 40-1: new SuperSpeed USB device number 14 using vhci_hcd [ 112.040673][ T6584] 9pnet_virtio: no channels available for device syz [ 112.137797][ T891] usb usb42-port1: unable to enumerate USB device [ 112.685525][ T6576] hfs: unable to load iocharset "io#harset" [ 112.698738][ T6566] vhci_hcd: connection reset by peer [ 112.701682][ T1142] vhci_hcd vhci_hcd.1: stop threads [ 112.704674][ T1142] vhci_hcd vhci_hcd.1: release socket [ 112.707138][ T1142] vhci_hcd vhci_hcd.1: disconnect device [ 112.889987][ T6587] input: syz0 as /devices/virtual/input/input7 [ 112.945924][ T6587] pimreg3: entered allmulticast mode [ 115.242769][ T6628] netlink: 'syz.3.112': attribute type 1 has an invalid length. [ 115.448863][ T6628] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.627434][ T6637] bond1: (slave veth3): Enslaving as an active interface with a down link [ 115.649069][ T6638] bond1: (slave dummy0): making interface the new active one [ 115.655203][ T6638] dummy0: entered promiscuous mode [ 115.663984][ T6638] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 115.731996][ T6639] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 115.734799][ T6639] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 115.743965][ T6639] vhci_hcd vhci_hcd.0: Device attached [ 115.971260][ T6628] bond1 (unregistering): (slave veth3): Releasing active interface [ 116.007004][ T6628] bond1 (unregistering): (slave dummy0): Releasing active interface [ 116.028061][ T6628] bond1 (unregistering): Released all slaves [ 116.061897][ T6037] usb 42-1: SetAddress Request (10) to port 0 [ 116.064541][ T6037] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 116.216049][ T6637] geneve2: entered promiscuous mode [ 116.571944][ T54] usb 40-1: device descriptor read/8, error -110 [ 117.212824][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 117.632082][ T6640] vhci_hcd: connection reset by peer [ 117.639934][ T6120] vhci_hcd vhci_hcd.2: stop threads [ 117.643968][ T6120] vhci_hcd vhci_hcd.2: release socket [ 117.646736][ T6120] vhci_hcd vhci_hcd.2: disconnect device [ 117.835944][ T54] usb usb40-port1: attempt power cycle [ 118.404385][ T54] usb usb40-port1: unable to enumerate USB device [ 119.562176][ T5957] Bluetooth: hci1: connection err: -111 [ 120.311142][ T6678] Driver unsupported XDP return value 0 on prog (id 25) dev N/A, expect packet loss! [ 120.894147][ T6693] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 121.132313][ T6037] usb 42-1: device descriptor read/8, error -110 [ 121.831372][ T6037] usb usb42-port1: attempt power cycle [ 122.583614][ T6037] usb usb42-port1: unable to enumerate USB device [ 123.439794][ T6730] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 123.442630][ T6730] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 123.461405][ T6730] vhci_hcd vhci_hcd.0: Device attached [ 123.732454][ T891] usb 40-1: SetAddress Request (18) to port 0 [ 123.735199][ T891] usb 40-1: new SuperSpeed USB device number 18 using vhci_hcd [ 124.052529][ T6736] rdma_rxe: rxe_newlink: failed to add wg2 [ 124.654917][ T5957] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 124.716094][ T6731] vhci_hcd: connection reset by peer [ 124.734826][ T13] vhci_hcd vhci_hcd.1: stop threads [ 124.736591][ T13] vhci_hcd vhci_hcd.1: release socket [ 124.738412][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 125.700945][ T6758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.136'. [ 125.769401][ T6762] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 126.058568][ T6767] lo speed is unknown, defaulting to 1000 [ 126.061915][ T6767] lo speed is unknown, defaulting to 1000 [ 126.069423][ T6767] lo speed is unknown, defaulting to 1000 [ 126.308693][ T6767] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 126.375588][ T6767] lo speed is unknown, defaulting to 1000 [ 126.394070][ T6767] lo speed is unknown, defaulting to 1000 [ 126.402671][ T6767] lo speed is unknown, defaulting to 1000 [ 126.412475][ T6767] lo speed is unknown, defaulting to 1000 [ 128.812048][ T891] usb 40-1: device descriptor read/8, error -110 [ 129.050258][ T6796] netdevsim netdevsim1: Direct firmware load for þ failed with error -2 [ 129.053491][ T6796] netdevsim netdevsim1: Falling back to sysfs fallback for: þ [ 129.208307][ T891] usb usb40-port1: attempt power cycle [ 129.758246][ T6802] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 129.760961][ T6802] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 129.764592][ T6802] vhci_hcd vhci_hcd.0: Device attached [ 129.793339][ T891] usb usb40-port1: unable to enumerate USB device [ 130.098347][ T6807] vhci_hcd: connection closed [ 130.099253][ T12] vhci_hcd vhci_hcd.2: stop threads [ 130.105477][ T12] vhci_hcd vhci_hcd.2: release socket [ 130.113428][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 130.122054][ T6269] usb 42-1: enqueue for inactive port 0 [ 130.624425][ T6269] usb usb42-port1: attempt power cycle [ 130.651871][ T5957] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 130.651912][ T5951] Bluetooth: hci4: command 0x1003 tx timeout [ 130.938419][ T6822] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 130.940709][ T6822] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 130.962033][ T6822] vhci_hcd vhci_hcd.0: Device attached [ 131.511915][ T6041] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 131.553876][ T6269] usb usb42-port1: unable to enumerate USB device [ 132.129030][ T6823] vhci_hcd: connection reset by peer [ 132.242172][ T6123] vhci_hcd vhci_hcd.1: stop threads [ 132.244723][ T6123] vhci_hcd vhci_hcd.1: release socket [ 132.251868][ T6123] vhci_hcd vhci_hcd.1: disconnect device [ 132.692270][ T6852] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 132.753868][ T6848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.153'. [ 133.196119][ T6849] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 133.204377][ T6849] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 133.209517][ T6849] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 133.435637][ T5951] Bluetooth: hci4: sending frame failed (-49) [ 133.438581][ T5957] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 133.439077][ T6849] kvm: requested 39390 ns i8254 timer period limited to 200000 ns [ 133.484287][ T6849] kvm: requested 56990 ns i8254 timer period limited to 200000 ns [ 133.505576][ T6849] kvm: requested 199466 ns i8254 timer period limited to 200000 ns [ 133.534190][ T6865] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 133.537048][ T6865] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 133.563844][ T6865] vhci_hcd vhci_hcd.0: Device attached [ 133.623949][ T6849] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 133.627672][ T6849] kvm: requested 40228 ns i8254 timer period limited to 200000 ns [ 133.630584][ T6849] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 133.892155][ T29] usb 44-1: SetAddress Request (10) to port 0 [ 133.894649][ T29] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 135.505142][ T6866] vhci_hcd: connection reset by peer [ 135.533494][ T6123] vhci_hcd vhci_hcd.3: stop threads [ 135.535769][ T6123] vhci_hcd vhci_hcd.3: release socket [ 135.551884][ T6123] vhci_hcd vhci_hcd.3: disconnect device [ 136.643833][ T6041] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 137.372198][ T5957] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 137.373013][ T5951] Bluetooth: hci4: command 0x1003 tx timeout [ 137.625563][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.628003][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.971980][ T29] usb 44-1: device descriptor read/8, error -110 [ 139.757423][ T6927] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 139.976657][ T29] usb usb44-port1: attempt power cycle [ 140.092360][ T5951] Bluetooth: hci4: command 0x1003 tx timeout [ 140.131931][ T5957] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 140.622626][ T29] usb usb44-port1: unable to enumerate USB device [ 140.725945][ T40] audit: type=1326 audit(1767732622.175:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6948 comm="syz.1.169" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 140.807108][ T40] audit: type=1326 audit(1767732622.175:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6948 comm="syz.1.169" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 140.841109][ T40] audit: type=1326 audit(1767732622.245:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6948 comm="syz.1.169" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 140.875843][ T40] audit: type=1326 audit(1767732622.245:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6948 comm="syz.1.169" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 140.933126][ T40] audit: type=1326 audit(1767732622.245:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6948 comm="syz.1.169" exe="/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 140.964546][ T40] audit: type=1326 audit(1767732622.245:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6948 comm="syz.1.169" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 140.993786][ T40] audit: type=1326 audit(1767732622.245:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6948 comm="syz.1.169" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 141.001456][ T40] audit: type=1326 audit(1767732622.245:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6948 comm="syz.1.169" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 141.008352][ T40] audit: type=1326 audit(1767732622.245:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6948 comm="syz.1.169" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 141.015544][ T40] audit: type=1326 audit(1767732622.245:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6948 comm="syz.1.169" exe="/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 142.801953][ T6200] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 142.805654][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 142.932079][ T6200] usb 7-1: device descriptor read/64, error -32 [ 143.182643][ T6200] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 143.391893][ T6200] usb 7-1: Using ep0 maxpacket: 8 [ 143.399679][ T6200] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 143.403084][ T6200] usb 7-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 143.406612][ T6200] usb 7-1: config 179 has no interface number 0 [ 143.408894][ T6200] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 143.413206][ T6200] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 143.417556][ T6200] usb 7-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 143.421996][ T6200] usb 7-1: config 179 interface 65 has no altsetting 0 [ 143.424556][ T6200] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 143.427853][ T6200] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.422148][ T6041] usb 7-1: USB disconnect, device number 3 [ 146.391153][ T6985] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 146.394421][ T6985] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 146.402233][ T6985] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 146.407627][ T6985] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 146.411554][ T6985] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 146.415646][ T6985] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 146.421172][ T6985] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 146.424115][ T6985] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 146.427626][ T6985] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 146.482014][ T6985] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 146.484705][ T6985] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 146.489742][ T6985] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 146.492614][ T5957] Bluetooth: hci1: command 0x0c1a tx timeout [ 147.405332][ T7017] usb usb5: usbfs: process 7017 (syz.0.182) did not claim interface 0 before use [ 147.509119][ T7019] netlink: 64 bytes leftover after parsing attributes in process `syz.0.182'. [ 147.747021][ T7017] wg2 speed is unknown, defaulting to 1000 [ 147.870925][ T7017] lo speed is unknown, defaulting to 1000 [ 148.328750][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.186'. [ 148.335807][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.186'. [ 148.341068][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.186'. [ 148.411907][ T5951] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.502234][ T5951] Bluetooth: hci2: command 0x0c1a tx timeout [ 148.502326][ T5954] Bluetooth: hci0: command 0x0c1a tx timeout [ 148.581888][ T5954] Bluetooth: hci1: command 0x0c1a tx timeout [ 148.731944][ T5957] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 148.799660][ T7042] ubi31: attaching mtd0 [ 148.815859][ T7042] ubi31: scanning is finished [ 148.817840][ T7042] ubi31: empty MTD device detected [ 148.992268][ T7042] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 149.005700][ T7042] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 149.033866][ T7042] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 149.036218][ T7042] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 149.052093][ T7042] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 149.068502][ T7042] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 149.074575][ T7042] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2605265081 [ 149.079551][ T7042] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 149.112251][ T7044] ubi31: background thread "ubi_bgt31d" started, PID 7044 [ 149.622618][ T7050] siw: device registration error -23 [ 150.487022][ T7042] evm: overlay not supported [ 150.496303][ T5957] Bluetooth: hci3: command 0x0c1a tx timeout [ 150.572133][ T5957] Bluetooth: hci2: command 0x0c1a tx timeout [ 150.581976][ T5957] Bluetooth: hci0: command 0x0c1a tx timeout [ 150.651948][ T5957] Bluetooth: hci1: command 0x0c1a tx timeout [ 152.506145][ T7081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.509690][ T7081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.512435][ T7083] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.196'. [ 152.543233][ T7081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.547194][ T7081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.572608][ T5957] Bluetooth: hci3: command 0x0c1a tx timeout [ 152.654601][ T5954] Bluetooth: hci2: command 0x0c1a tx timeout [ 152.657002][ T5957] Bluetooth: hci0: command 0x0c1a tx timeout [ 152.747480][ T7086] bridge_slave_0: left allmulticast mode [ 152.750247][ T7086] bridge_slave_0: left promiscuous mode [ 152.754905][ T7086] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.890205][ T7086] bridge_slave_1: left allmulticast mode [ 152.893509][ T7086] bridge_slave_1: left promiscuous mode [ 152.902580][ T7086] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.975937][ T7086] bond0: (slave bond_slave_0): Releasing backup interface [ 153.040229][ T7086] bond0: (slave bond_slave_1): Releasing backup interface [ 153.236576][ T7086] team0: Port device team_slave_0 removed [ 153.321083][ T7086] team0: Port device team_slave_1 removed [ 153.325039][ T7086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.328020][ T7086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.332202][ T7086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.341869][ T7086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.353590][ T7086] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 153.357978][ T7087] team0: Mode changed to "loadbalance" [ 156.088034][ T7131] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 156.653857][ T5954] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 159.909171][ T7183] faux_driver vkms: [drm] Unknown color mode 9; guessing buffer size. [ 161.596522][ T7196] ubi: mtd0 is already attached to ubi31 [ 162.449606][ T7206] wg2 speed is unknown, defaulting to 1000 [ 162.592276][ T7206] lo speed is unknown, defaulting to 1000 [ 162.961127][ T7220] overlayfs: missing 'lowerdir' [ 164.811934][ T5954] Bluetooth: hci4: command 0x1003 tx timeout [ 164.816269][ T5957] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 165.055942][ T7258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.228'. [ 168.568596][ T7283] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 168.570997][ T7283] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 168.575396][ T7283] vhci_hcd vhci_hcd.0: Device attached [ 168.860944][ T7296] overlayfs: missing 'lowerdir' [ 169.162057][ T6068] usb 44-1: SetAddress Request (14) to port 0 [ 169.164595][ T6068] usb 44-1: new SuperSpeed USB device number 14 using vhci_hcd [ 169.812471][ T7284] vhci_hcd: connection reset by peer [ 169.842015][ T1247] vhci_hcd vhci_hcd.3: stop threads [ 169.847211][ T1247] vhci_hcd vhci_hcd.3: release socket [ 169.854831][ T1247] vhci_hcd vhci_hcd.3: disconnect device [ 173.425604][ T7353] overlayfs: missing 'lowerdir' [ 174.347474][ T6068] usb 44-1: device descriptor read/8, error -110 [ 174.604608][ T7388] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.250'. [ 174.706040][ T7388] bridge_slave_0: left allmulticast mode [ 174.708131][ T7388] bridge_slave_0: left promiscuous mode [ 174.712069][ T7388] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.899123][ T7388] bridge_slave_1: left allmulticast mode [ 174.901729][ T7388] bridge_slave_1: left promiscuous mode [ 174.905375][ T7388] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.990387][ T6068] usb usb44-port1: attempt power cycle [ 175.132791][ T7388] bond0: (slave bond_slave_0): Releasing backup interface [ 175.169235][ T7388] bond0: (slave bond_slave_1): Releasing backup interface [ 175.196351][ T7388] team0: Port device team_slave_0 removed [ 175.210282][ T7388] team0: Port device team_slave_1 removed [ 175.219117][ T7388] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 175.228437][ T54] wg2 speed is unknown, defaulting to 1000 [ 175.363882][ T7392] team0: Mode changed to "loadbalance" [ 175.603048][ T6068] usb usb44-port1: unable to enumerate USB device [ 176.232225][ T54] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 176.400691][ T54] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 176.405218][ T54] usb 6-1: config 1 has no interface number 0 [ 176.408708][ T54] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 16 [ 176.419570][ T54] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0xC has invalid maxpacket 16 [ 176.428386][ T54] usb 6-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 176.444982][ T54] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 176.449896][ T54] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.459159][ T54] usb 6-1: Product: syz [ 176.463583][ T54] usb 6-1: Manufacturer: syz [ 176.466077][ T54] usb 6-1: SerialNumber: syz [ 176.511248][ T7409] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 176.515417][ T7409] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 176.543548][ T54] usb 6-1: Expected 3 endpoints, found: 2 [ 177.276827][ T7419] netlink: set zone limit has 4 unknown bytes [ 178.753447][ T7435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.258'. [ 179.398098][ T6041] usb 6-1: USB disconnect, device number 3 [ 179.783819][ T7451] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 179.786343][ T7451] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 179.789785][ T7451] vhci_hcd vhci_hcd.0: Device attached [ 180.061927][ T34] usb 40-1: SetAddress Request (22) to port 0 [ 180.262886][ T34] usb 40-1: new SuperSpeed USB device number 22 using vhci_hcd [ 180.371884][ T6041] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 180.422328][ T7452] vhci_hcd: connection closed [ 180.424340][ T4296] vhci_hcd vhci_hcd.1: stop threads [ 180.428231][ T4296] vhci_hcd vhci_hcd.1: release socket [ 180.430454][ T4296] vhci_hcd vhci_hcd.1: disconnect device [ 180.521947][ T6041] usb 7-1: Using ep0 maxpacket: 16 [ 180.525822][ T6041] usb 7-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 180.529470][ T6041] usb 7-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 180.533231][ T6041] usb 7-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.538553][ T6041] usb 7-1: config 1 interface 0 has no altsetting 0 [ 180.542526][ T6041] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 180.545612][ T6041] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.548442][ T6041] usb 7-1: Product: syz [ 180.550051][ T6041] usb 7-1: Manufacturer: syz [ 180.551549][ T6041] usb 7-1: SerialNumber: syz [ 180.773610][ T6041] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 180.922245][ T34] usb 40-1: enqueue for inactive port 0 [ 181.227513][ T7460] usblp0:failed reading printer status (-32) [ 181.412678][ T34] usb usb40-port1: attempt power cycle [ 182.003933][ T34] usb usb40-port1: unable to enumerate USB device [ 182.429558][ T7497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.269'. [ 183.171098][ T29] usb 7-1: USB disconnect, device number 4 [ 183.176313][ T29] usblp0: removed [ 184.775250][ T7529] wg2 speed is unknown, defaulting to 1000 [ 185.297438][ T7529] lo speed is unknown, defaulting to 1000 [ 185.325037][ T7530] ucma_write: process 315 (syz.3.274) changed security contexts after opening file descriptor, this is not allowed. [ 186.828620][ T7549] netlink: 32 bytes leftover after parsing attributes in process `syz.2.279'. [ 187.379709][ T7561] netlink: 'syz.1.282': attribute type 10 has an invalid length. [ 187.392226][ T7561] netlink: 40 bytes leftover after parsing attributes in process `syz.1.282'. [ 187.432909][ T7561] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 187.436450][ T7561] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 187.441525][ T7561] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 187.664408][ T7561] netlink: 'syz.1.282': attribute type 1 has an invalid length. [ 187.666890][ T7561] netlink: 224 bytes leftover after parsing attributes in process `syz.1.282'. [ 187.855483][ T7577] Bluetooth: MGMT ver 1.23 [ 188.396673][ T7594] 9p: Bad value for 'rfdno' [ 189.371510][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.295'. [ 189.380341][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.295'. [ 189.385936][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.295'. [ 189.943310][ T5957] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 189.956793][ T5957] Bluetooth: hci2: command 0x0c1a tx timeout [ 190.430634][ T7619] netlink: 20 bytes leftover after parsing attributes in process `syz.3.289'. [ 191.127547][ T5961] udevd[5961]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 191.565466][ T7641] Bluetooth: MGMT ver 1.23 [ 192.685991][ T7657] tipc: Started in network mode [ 192.687701][ T7657] tipc: Node identity 4, cluster identity 4711 [ 192.691292][ T7657] tipc: Node number set to 4 [ 192.821844][ T5954] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 192.822011][ T5300] Bluetooth: hci4: command 0x1003 tx timeout [ 193.373538][ T5300] Bluetooth: hci5: command 0x1003 tx timeout [ 193.380306][ T5957] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 193.611854][ T5951] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 194.607802][ T7677] netlink: 24 bytes leftover after parsing attributes in process `syz.3.299'. [ 195.987243][ T7703] wg2 speed is unknown, defaulting to 1000 [ 196.184117][ T7707] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 196.188393][ T7707] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 196.274783][ T7703] lo speed is unknown, defaulting to 1000 [ 196.808919][ T7714] binder: 7713:7714 ioctl 4018620d 0 returned -22 [ 197.900515][ T7731] netlink: 'syz.3.310': attribute type 2 has an invalid length. [ 198.943674][ T7743] can: request_module (can-proto-0) failed. [ 199.056419][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.138167][ T7746] bridge_slave_0: left allmulticast mode [ 199.140453][ T7746] bridge_slave_0: left promiscuous mode [ 199.142858][ T7746] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.150444][ T7746] bridge_slave_1: left allmulticast mode [ 199.152509][ T7746] bridge_slave_1: left promiscuous mode [ 199.154507][ T7746] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.161304][ T7746] bond0: (slave bond_slave_0): Releasing backup interface [ 199.167989][ T7746] bond0: (slave bond_slave_1): Releasing backup interface [ 199.177279][ T7746] team0: Port device team_slave_0 removed [ 199.184988][ T7746] team0: Port device team_slave_1 removed [ 199.187472][ T7746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.189776][ T7747] netlink: 'syz.0.312': attribute type 10 has an invalid length. [ 199.190177][ T7746] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.197669][ T7746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.200797][ T7746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.206414][ T7746] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 199.214825][ T6068] lo speed is unknown, defaulting to 1000 [ 199.224863][ T7747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.228986][ T7747] team0: Port device bond0 added [ 199.273776][ T7746] netlink: 60 bytes leftover after parsing attributes in process `syz.0.312'. [ 199.851895][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 199.852095][ T5957] Bluetooth: hci4: command 0x1003 tx timeout [ 199.998988][ T7756] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.315'. [ 200.020617][ T7756] bridge_slave_0: left allmulticast mode [ 200.024383][ T7756] bridge_slave_0: left promiscuous mode [ 200.027547][ T7756] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.116955][ T7756] bridge_slave_1: left allmulticast mode [ 200.121008][ T7756] bridge_slave_1: left promiscuous mode [ 200.123798][ T7756] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.134981][ T7756] bond0: (slave bond_slave_0): Releasing backup interface [ 200.139680][ T7756] bond0: (slave bond_slave_1): Releasing backup interface [ 200.147691][ T7756] team0: Port device team_slave_0 removed [ 200.153262][ T7756] team0: Port device team_slave_1 removed [ 200.155925][ T7756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.158411][ T7756] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.161644][ T7756] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.164834][ T7756] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.171734][ T7756] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 200.212086][ T7757] team0: Mode changed to "loadbalance" [ 201.453422][ T7765] netlink: 32 bytes leftover after parsing attributes in process `syz.0.317'. [ 201.580920][ T7769] binder: 7767:7769 ioctl 4018620d 0 returned -22 [ 202.163009][ T7781] binder: 7779:7781 ioctl 4018620d 0 returned -22 [ 203.441980][ T6068] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 203.591915][ T6068] usb 5-1: Using ep0 maxpacket: 16 [ 203.596513][ T6068] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 203.600410][ T6068] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 203.606269][ T6068] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.611145][ T6068] usb 5-1: config 1 interface 0 has no altsetting 0 [ 203.618523][ T6068] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 203.627109][ T6068] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.630261][ T6068] usb 5-1: Product: syz [ 203.632089][ T6068] usb 5-1: Manufacturer: syz [ 203.633693][ T6068] usb 5-1: SerialNumber: syz [ 204.000149][ T6068] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 204.369718][ T7819] ubi: mtd0 is already attached to ubi31 [ 204.420543][ T7804] usblp0:failed reading printer status (-32) [ 206.012185][ T5957] Bluetooth: hci4: command 0x1003 tx timeout [ 206.015481][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 206.268742][ T6046] usb 5-1: USB disconnect, device number 3 [ 206.280970][ T6046] usblp0: removed [ 206.379364][ T7842] binder: 7841:7842 ioctl 4018620d 0 returned -22 [ 208.776545][ T7879] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 208.778836][ T7879] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 208.781879][ T7879] vhci_hcd vhci_hcd.0: Device attached [ 209.052295][ T34] usb 44-1: SetAddress Request (18) to port 0 [ 209.054700][ T34] usb 44-1: new SuperSpeed USB device number 18 using vhci_hcd [ 209.615842][ T7880] vhci_hcd: connection reset by peer [ 209.618603][ T6475] vhci_hcd vhci_hcd.3: stop threads [ 209.620914][ T6475] vhci_hcd vhci_hcd.3: release socket [ 209.623577][ T6475] vhci_hcd vhci_hcd.3: disconnect device [ 210.251981][ T5300] Bluetooth: hci4: command 0x1003 tx timeout [ 210.252245][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 210.491972][ T5951] Bluetooth: hci5: command 0x1003 tx timeout [ 210.492665][ T5957] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 210.934471][ T7893] overlayfs: missing 'lowerdir' [ 213.022461][ T7915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.078726][ T7915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.123593][ T7912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.173854][ T7918] overlayfs: missing 'lowerdir' [ 213.480003][ T7925] pim6reg: entered allmulticast mode [ 213.485544][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 213.485556][ T40] audit: type=1326 audit(1767732694.905:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz.1.347" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 213.543318][ T40] audit: type=1326 audit(1767732694.905:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz.1.347" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 213.557770][ T40] audit: type=1326 audit(1767732694.905:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz.1.347" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 213.572193][ T40] audit: type=1326 audit(1767732694.905:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz.1.347" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 213.582434][ T40] audit: type=1326 audit(1767732694.905:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz.1.347" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 213.591024][ T40] audit: type=1326 audit(1767732694.905:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz.1.347" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 213.599240][ T40] audit: type=1326 audit(1767732694.905:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz.1.347" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 213.607766][ T40] audit: type=1326 audit(1767732694.905:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz.1.347" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 213.615811][ T40] audit: type=1326 audit(1767732694.915:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz.1.347" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 213.623405][ T40] audit: type=1326 audit(1767732694.915:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz.1.347" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 213.627778][ T7904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.680263][ T7927] netlink: 16 bytes leftover after parsing attributes in process `syz.0.348'. [ 213.876381][ T7931] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.349'. [ 213.912075][ T7931] team0: Port device bond0 removed [ 213.933520][ T7931] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 214.122131][ T34] usb 44-1: device descriptor read/8, error -110 [ 214.126907][ T7931] team0: Mode changed to "loadbalance" [ 214.130798][ T7920] pim6reg: left allmulticast mode [ 214.527354][ T7936] futex_wake_op: syz.2.351 tries to shift op by -1; fix this program [ 214.907889][ T7943] binder: 7942:7943 ioctl 4018620d 0 returned -22 [ 215.181926][ T34] usb usb44-port1: attempt power cycle [ 215.525941][ T7937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.351'. [ 215.782667][ T34] usb usb44-port1: unable to enumerate USB device [ 216.825988][ T7958] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 216.828155][ T7958] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 216.830903][ T7958] vhci_hcd vhci_hcd.0: Device attached [ 216.983275][ T7962] vhci_hcd: connection closed [ 216.983640][ T6475] vhci_hcd vhci_hcd.1: stop threads [ 216.987318][ T6475] vhci_hcd vhci_hcd.1: release socket [ 216.989352][ T6475] vhci_hcd vhci_hcd.1: disconnect device [ 218.102983][ T7973] wg2 speed is unknown, defaulting to 1000 [ 218.149825][ T7974] overlayfs: missing 'lowerdir' [ 218.243246][ T7973] lo speed is unknown, defaulting to 1000 [ 218.892030][ T5957] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 221.225419][ T7992] binder: 7990:7992 ioctl 4018620d 0 returned -22 [ 222.044052][ T34] kernel read not supported for file /input/event1 (pid: 34 comm: kworker/3:0) [ 223.552816][ T8012] netlink: 16 bytes leftover after parsing attributes in process `syz.1.367'. [ 223.572217][ T8015] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 223.575435][ T8015] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 223.587413][ T8015] vhci_hcd vhci_hcd.0: Device attached [ 223.852081][ T8016] vhci_hcd: connection closed [ 223.852317][ T1043] vhci_hcd vhci_hcd.0: stop threads [ 223.856290][ T1043] vhci_hcd vhci_hcd.0: release socket [ 223.859321][ T1043] vhci_hcd vhci_hcd.0: disconnect device [ 223.942930][ T5957] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 223.951321][ T5957] Bluetooth: hci2: command 0x0c1a tx timeout [ 223.974467][ T8027] overlayfs: missing 'lowerdir' [ 224.670715][ T8032] binder: 8031:8032 ioctl 4018620d 0 returned -22 [ 224.958076][ T8040] batadv_slave_1: entered promiscuous mode [ 225.692033][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 225.692044][ T5300] Bluetooth: hci4: command 0x1003 tx timeout [ 226.092321][ T8050] siw: device registration error -23 [ 227.357753][ T8061] fuse: Bad value for 'fd' [ 227.692128][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 227.891932][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 227.898933][ T10] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 227.902834][ T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 227.913143][ T10] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 227.917864][ T10] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 227.926148][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 227.935068][ T10] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 227.939133][ T10] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 227.943297][ T10] usb 6-1: Product: syz [ 227.945020][ T10] usb 6-1: Manufacturer: syz [ 227.947051][ T10] usb 6-1: SerialNumber: syz [ 227.961658][ T10] usb 6-1: config 0 descriptor?? [ 227.978043][ T10] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 227.982821][ T10] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 228.251643][ T10] usb 6-1: USB disconnect, device number 4 [ 228.256880][ T10] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 229.069746][ T8081] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 229.072517][ T8081] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 229.085130][ T8081] vhci_hcd vhci_hcd.0: Device attached [ 229.117044][ T8085] overlayfs: missing 'workdir' [ 229.688080][ T8082] vhci_hcd: connection closed [ 229.689008][ T1043] vhci_hcd vhci_hcd.0: stop threads [ 229.693414][ T1043] vhci_hcd vhci_hcd.0: release socket [ 229.695630][ T1043] vhci_hcd vhci_hcd.0: disconnect device [ 229.756794][ T8084] kvm: pic: level sensitive irq not supported [ 229.757173][ T8084] kvm: pic: non byte read [ 229.787925][ T8086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.380'. [ 229.859914][ T8084] kvm: pic: level sensitive irq not supported [ 229.882153][ T8084] kvm: pic: non byte read [ 229.905334][ T6068] usb 38-1: enqueue for inactive port 0 [ 229.908126][ T8084] kvm: pic: level sensitive irq not supported [ 229.908391][ T8084] kvm: pic: non byte read [ 230.200537][ T8100] wg2 speed is unknown, defaulting to 1000 [ 230.522709][ T8100] lo speed is unknown, defaulting to 1000 [ 230.628682][ T8097] wg2 speed is unknown, defaulting to 1000 [ 230.736566][ T8097] lo speed is unknown, defaulting to 1000 [ 230.800386][ T8099] orangefs_mount: mount request failed with -4 [ 230.932642][ T6068] usb usb38-port1: attempt power cycle [ 231.170395][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 231.170415][ T40] audit: type=1326 audit(1767732712.615:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8094 comm="syz.1.383" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 231.186625][ T8105] wg2 speed is unknown, defaulting to 1000 [ 231.192107][ T40] audit: type=1326 audit(1767732712.615:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8094 comm="syz.1.383" exe="/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 231.492908][ T6068] usb usb38-port1: unable to enumerate USB device [ 231.972311][ T8105] lo speed is unknown, defaulting to 1000 [ 232.139537][ T40] audit: type=1326 audit(1767732713.585:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8094 comm="syz.1.383" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 232.182073][ T40] audit: type=1326 audit(1767732713.595:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8094 comm="syz.1.383" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 233.291923][ T5957] Bluetooth: hci4: command 0x1003 tx timeout [ 233.295267][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 235.542666][ T8151] overlayfs: missing 'workdir' [ 236.507029][ T8157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.512507][ T8157] bond0: (slave rose0): Enslaving as an active interface with an up link [ 236.731876][ T8165] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 236.735107][ T8165] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 236.740814][ T8165] vhci_hcd vhci_hcd.0: Device attached [ 236.907055][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 236.909364][ T5957] Bluetooth: hci4: command 0x1003 tx timeout [ 237.022079][ T10] usb 42-1: SetAddress Request (18) to port 0 [ 237.024326][ T10] usb 42-1: new SuperSpeed USB device number 18 using vhci_hcd [ 238.536392][ T8167] vhci_hcd: connection reset by peer [ 238.541139][ T85] vhci_hcd vhci_hcd.2: stop threads [ 238.544390][ T85] vhci_hcd vhci_hcd.2: release socket [ 238.547999][ T85] vhci_hcd vhci_hcd.2: disconnect device [ 240.380200][ T40] audit: type=1326 audit(1767732721.825:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.0.395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 240.389426][ T40] audit: type=1326 audit(1767732721.825:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.0.395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 240.399012][ T40] audit: type=1326 audit(1767732721.835:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.0.395" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 240.408284][ T40] audit: type=1326 audit(1767732721.835:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.0.395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 240.419285][ T40] audit: type=1326 audit(1767732721.835:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.0.395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 240.429502][ T40] audit: type=1326 audit(1767732721.835:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.0.395" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 240.436919][ T40] audit: type=1326 audit(1767732721.835:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.0.395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 240.440095][ T8179] pim6reg: entered allmulticast mode [ 240.445237][ T40] audit: type=1326 audit(1767732721.835:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.0.395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 240.455548][ T40] audit: type=1326 audit(1767732721.845:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.0.395" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 240.465774][ T40] audit: type=1326 audit(1767732721.845:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.0.395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 240.902910][ T8173] pim6reg: left allmulticast mode [ 241.394929][ T8215] overlayfs: missing 'workdir' [ 242.092351][ T10] usb 42-1: device descriptor read/8, error -110 [ 242.482615][ T10] usb usb42-port1: attempt power cycle [ 243.042575][ T10] usb usb42-port1: unable to enumerate USB device [ 243.935988][ T5957] Bluetooth: hci4: command 0x1003 tx timeout [ 243.941977][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 244.243982][ T8238] afs: Unknown parameter '#7dyn' [ 244.248364][ T8238] netlink: 24 bytes leftover after parsing attributes in process `syz.3.407'. [ 245.972399][ T8255] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 245.975401][ T8255] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 245.979011][ T8256] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 245.982016][ T8256] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 245.986055][ T8255] vhci_hcd vhci_hcd.0: Device attached [ 246.001365][ T8256] vhci_hcd vhci_hcd.0: Device attached [ 246.183966][ T8255] netlink: 'syz.2.409': attribute type 1 has an invalid length. [ 246.222719][ T6046] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 246.261947][ T34] usb 44-1: SetAddress Request (22) to port 0 [ 246.264104][ T34] usb 44-1: new SuperSpeed USB device number 22 using vhci_hcd [ 246.273611][ T8257] vhci_hcd: connection closed [ 246.278685][ T6123] vhci_hcd vhci_hcd.3: stop threads [ 246.284478][ T6123] vhci_hcd vhci_hcd.3: release socket [ 246.287093][ T6123] vhci_hcd vhci_hcd.3: disconnect device [ 246.292830][ T8255] 8021q: adding VLAN 0 to HW filter on device bond1 [ 246.298610][ T8262] netlink: 56 bytes leftover after parsing attributes in process `syz.2.409'. [ 246.976013][ T8258] vhci_hcd: connection reset by peer [ 246.978711][ T6123] vhci_hcd vhci_hcd.2: stop threads [ 246.981287][ T6123] vhci_hcd vhci_hcd.2: release socket [ 246.984028][ T6123] vhci_hcd vhci_hcd.2: disconnect device [ 248.047351][ T8279] QAT: Device 253 not found [ 248.555196][ T8283] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 248.613013][ T8286] Invalid source name [ 248.614531][ T8286] UBIFS error (pid: 8286): cannot open "usrquota", error -22 [ 251.078841][ T8313] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 251.083755][ T8313] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 251.182026][ T8313] vhci_hcd vhci_hcd.0: Device attached [ 251.293067][ T34] usb 44-1: device descriptor read/8, error -110 [ 251.371965][ T6046] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 251.483802][ T6269] usb 38-1: SetAddress Request (11) to port 0 [ 251.486938][ T6269] usb 38-1: new SuperSpeed USB device number 11 using vhci_hcd [ 251.504600][ T8314] vhci_hcd: connection reset by peer [ 251.506763][ T6123] vhci_hcd vhci_hcd.0: stop threads [ 251.508558][ T6123] vhci_hcd vhci_hcd.0: release socket [ 251.510628][ T6123] vhci_hcd vhci_hcd.0: disconnect device [ 251.644376][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 251.644388][ T40] audit: type=1326 audit(1767732733.095:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8320 comm="syz.3.421" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 251.657753][ T40] audit: type=1326 audit(1767732733.105:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8320 comm="syz.3.421" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 251.667692][ T40] audit: type=1326 audit(1767732733.105:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8320 comm="syz.3.421" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 251.678437][ T40] audit: type=1326 audit(1767732733.105:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8320 comm="syz.3.421" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 251.689580][ T40] audit: type=1326 audit(1767732733.115:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8320 comm="syz.3.421" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 251.706742][ T8323] pim6reg: entered allmulticast mode [ 251.723781][ T40] audit: type=1326 audit(1767732733.115:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8320 comm="syz.3.421" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 251.724209][ T34] usb usb44-port1: attempt power cycle [ 251.731241][ T40] audit: type=1326 audit(1767732733.125:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8320 comm="syz.3.421" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 251.740720][ T40] audit: type=1326 audit(1767732733.125:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8320 comm="syz.3.421" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 251.748572][ T40] audit: type=1326 audit(1767732733.125:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8320 comm="syz.3.421" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 251.759241][ T40] audit: type=1326 audit(1767732733.125:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8320 comm="syz.3.421" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 251.914036][ T8326] overlay: Unknown parameter '/' [ 252.414991][ T34] usb usb44-port1: unable to enumerate USB device [ 252.486961][ T8320] pim6reg: left allmulticast mode [ 252.681116][ T8339] wg2 speed is unknown, defaulting to 1000 [ 253.388786][ T8339] lo speed is unknown, defaulting to 1000 [ 253.389088][ T8337] wg2 speed is unknown, defaulting to 1000 [ 253.451998][ T5957] Bluetooth: hci4: command 0x1003 tx timeout [ 253.452493][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 253.517490][ T8337] lo speed is unknown, defaulting to 1000 [ 253.592405][ T8338] orangefs_mount: mount request failed with -4 [ 253.711084][ T8350] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 253.713595][ T8350] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 253.739547][ T8350] vhci_hcd vhci_hcd.0: Device attached [ 254.022112][ T6046] usb 42-1: SetAddress Request (22) to port 0 [ 254.024893][ T6046] usb 42-1: new SuperSpeed USB device number 22 using vhci_hcd [ 254.130451][ T8365] overlayfs: overlapping lowerdir path [ 254.348996][ T8352] vhci_hcd: connection reset by peer [ 254.351132][ T4296] vhci_hcd vhci_hcd.2: stop threads [ 254.353105][ T4296] vhci_hcd vhci_hcd.2: release socket [ 254.355287][ T4296] vhci_hcd vhci_hcd.2: disconnect device [ 255.071388][ T8376] wg2 speed is unknown, defaulting to 1000 [ 255.095500][ T8375] /dev/sr0: Can't open blockdev [ 255.213163][ T8376] lo speed is unknown, defaulting to 1000 [ 256.571946][ T6269] usb 38-1: device descriptor read/8, error -110 [ 256.601251][ T8382] Invalid source name [ 256.603492][ T8382] UBIFS error (pid: 8382): cannot open "usrquota", error -22 [ 257.393097][ T8387] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 257.827434][ T6269] usb usb38-port1: attempt power cycle [ 257.955311][ T8392] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 258.370509][ T8399] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 258.374117][ T8399] tipc: Enabled bearer , priority 10 [ 258.511957][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 258.772541][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 258.942117][ T8406] wg2 speed is unknown, defaulting to 1000 [ 258.950389][ T6269] usb usb38-port1: unable to enumerate USB device [ 259.051862][ T6046] usb 42-1: device descriptor read/8, error -110 [ 259.250293][ T8406] lo speed is unknown, defaulting to 1000 [ 259.301935][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 259.410291][ T8403] wg2 speed is unknown, defaulting to 1000 [ 259.442602][ T6046] usb usb42-port1: attempt power cycle [ 259.563119][ T8403] lo speed is unknown, defaulting to 1000 [ 259.696776][ T8405] orangefs_mount: mount request failed with -4 [ 260.019508][ T6046] usb usb42-port1: unable to enumerate USB device [ 260.331824][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 260.619317][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.381897][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 262.411890][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 262.741377][ T8481] Invalid source name [ 262.744284][ T8481] UBIFS error (pid: 8481): cannot open "usrquota", error -22 [ 263.451895][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 264.163491][ T8499] netlink: 32 bytes leftover after parsing attributes in process `syz.1.446'. [ 264.501866][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 264.666448][ T8496] afs: Unknown parameter '#7dyn' [ 264.675149][ T8496] netlink: 24 bytes leftover after parsing attributes in process `syz.2.447'. [ 264.790917][ T8507] overlay: ./file1 is not a directory [ 264.866044][ T8509] x_tables: duplicate underflow at hook 1 [ 264.872439][ T8509] hub 8-0:1.0: USB hub found [ 264.875299][ T8509] hub 8-0:1.0: 1 port detected [ 265.291470][ T8514] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 265.296071][ T8515] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 265.301965][ T8514] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 265.364538][ T8515] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 265.398891][ T8514] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 265.401439][ T8514] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 265.435180][ T8514] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 265.437297][ T8514] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 265.541879][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 265.669010][ T8523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.458'. [ 266.571862][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 266.648193][ T40] kauditd_printk_skb: 38 callbacks suppressed [ 266.648205][ T40] audit: type=1326 audit(1767732748.095:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8529 comm="syz.2.451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 266.667034][ T40] audit: type=1326 audit(1767732748.115:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8529 comm="syz.2.451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 266.677310][ T40] audit: type=1326 audit(1767732748.115:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8529 comm="syz.2.451" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 266.688491][ T40] audit: type=1326 audit(1767732748.115:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8529 comm="syz.2.451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 266.822101][ T40] audit: type=1326 audit(1767732748.115:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8529 comm="syz.2.451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 266.889886][ T40] audit: type=1326 audit(1767732748.115:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8529 comm="syz.2.451" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 267.005784][ T40] audit: type=1326 audit(1767732748.115:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8529 comm="syz.2.451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 267.087251][ T40] audit: type=1326 audit(1767732748.115:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8529 comm="syz.2.451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 267.151932][ T40] audit: type=1326 audit(1767732748.125:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8529 comm="syz.2.451" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 267.175244][ T40] audit: type=1326 audit(1767732748.125:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8529 comm="syz.2.451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 267.348066][ T8532] pim6reg: entered allmulticast mode [ 267.535826][ T8529] pim6reg: left allmulticast mode [ 267.611957][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 268.651890][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 269.691875][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 270.731926][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 271.106428][ T8575] futex_wake_op: syz.3.460 tries to shift op by -1; fix this program [ 271.165301][ T8578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.460'. [ 271.199831][ T8568] netlink: 3 bytes leftover after parsing attributes in process `syz.0.455'. [ 271.240459][ T8568] batadv1: entered allmulticast mode [ 271.332300][ T8580] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 271.528198][ T8581] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 271.533902][ T8581] overlayfs: failed to look up (tracing) for ino (-66) [ 271.748857][ T6120] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 271.771870][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 272.312461][ T8588] mkiss: ax0: crc mode is auto. [ 272.570927][ T8590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.462'. [ 272.821946][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 273.861886][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 274.479778][ T8624] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 274.481892][ T8624] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 274.716205][ T8625] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 274.716235][ T8625] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 274.716329][ T8625] vhci_hcd vhci_hcd.0: Device attached [ 274.764082][ T8624] vhci_hcd vhci_hcd.0: Device attached [ 274.891914][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 275.011884][ T6068] usb 42-1: SetAddress Request (26) to port 0 [ 275.015067][ T6068] usb 42-1: new SuperSpeed USB device number 26 using vhci_hcd [ 275.042142][ T8631] vhci_hcd: connection reset by peer [ 275.045024][ T61] vhci_hcd vhci_hcd.2: stop threads [ 275.046940][ T61] vhci_hcd vhci_hcd.2: release socket [ 275.050909][ T61] vhci_hcd vhci_hcd.2: disconnect device [ 275.061966][ T34] usb 38-1: SetAddress Request (15) to port 0 [ 275.064982][ T34] usb 38-1: new SuperSpeed USB device number 15 using vhci_hcd [ 275.330293][ T8638] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 275.619337][ T8626] vhci_hcd: connection reset by peer [ 275.622592][ T1152] vhci_hcd vhci_hcd.0: stop threads [ 275.628039][ T1152] vhci_hcd vhci_hcd.0: release socket [ 275.631314][ T1152] vhci_hcd vhci_hcd.0: disconnect device [ 275.931916][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 276.272040][ T8620] orangefs_mount: mount request failed with -4 [ 276.451587][ T8662] netlink: 'syz.1.473': attribute type 10 has an invalid length. [ 276.971887][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 277.071437][ T8675] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 277.257476][ T8657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.507494][ T8662] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 278.011855][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 278.357880][ T8685] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 278.360857][ T8685] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 278.365745][ T8685] vhci_hcd vhci_hcd.0: Device attached [ 278.647193][ T6269] usb 40-1: SetAddress Request (27) to port 0 [ 278.737390][ T6269] usb 40-1: new SuperSpeed USB device number 27 using vhci_hcd [ 279.051957][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 279.132754][ T8696] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 279.272808][ T8696] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 279.276648][ T8696] overlayfs: failed to look up (tracing) for ino (-66) [ 279.464980][ T8686] vhci_hcd: connection reset by peer [ 279.595699][ T6475] vhci_hcd vhci_hcd.1: stop threads [ 279.597552][ T6475] vhci_hcd vhci_hcd.1: release socket [ 279.841970][ T6475] vhci_hcd vhci_hcd.1: disconnect device [ 280.091860][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 280.095382][ T6068] usb 42-1: device descriptor read/8, error -110 [ 280.098856][ T34] usb 38-1: device descriptor read/8, error -110 [ 280.232685][ T8710] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 280.235762][ T8710] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 280.252069][ T8710] vhci_hcd vhci_hcd.0: Device attached [ 280.332015][ T6068] usb 42-1: SetAddress Request (27) to port 0 [ 280.332061][ T6068] usb 42-1: new SuperSpeed USB device number 27 using vhci_hcd [ 280.360887][ T8714] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 280.497961][ T34] usb usb38-port1: attempt power cycle [ 281.131956][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 281.137008][ T34] usb usb38-port1: unable to enumerate USB device [ 282.171848][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 282.619107][ T8739] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 283.221893][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 283.852287][ T6269] usb 40-1: device descriptor read/8, error -110 [ 283.899368][ T8711] vhci_hcd: connection reset by peer [ 283.927006][ T46] vhci_hcd vhci_hcd.2: stop threads [ 283.930129][ T46] vhci_hcd vhci_hcd.2: release socket [ 283.934152][ T46] vhci_hcd vhci_hcd.2: disconnect device [ 284.261862][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 284.582582][ T6269] usb usb40-port1: attempt power cycle [ 284.913755][ T8769] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 285.162717][ T6269] usb usb40-port1: unable to enumerate USB device [ 285.291941][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 285.371925][ T6068] usb 42-1: device descriptor read/8, error -110 [ 285.482845][ T6068] usb usb42-port1: attempt power cycle [ 286.000950][ T8792] comedi comedi0: pcmmio: I/O port conflict (0xfff,32) [ 286.010362][ T8792] netlink: 'syz.0.497': attribute type 4 has an invalid length. [ 286.041460][ T6046] lo speed is unknown, defaulting to 1000 [ 286.042725][ T6068] usb usb42-port1: unable to enumerate USB device [ 286.044821][ T6046] syz0: Port: 1 Link DOWN [ 286.332278][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 286.344408][ T8795] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 286.505320][ T8789] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 286.507479][ T8789] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 286.802838][ T8789] vhci_hcd vhci_hcd.0: Device attached [ 287.130428][ T891] usb 42-1: SetAddress Request (30) to port 0 [ 287.130831][ T891] usb 42-1: new SuperSpeed USB device number 30 using vhci_hcd [ 287.381901][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 287.616369][ T8809] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 287.618640][ T8809] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 287.625899][ T8809] vhci_hcd vhci_hcd.0: Device attached [ 287.720595][ T8790] vhci_hcd: connection reset by peer [ 287.722709][ T85] vhci_hcd vhci_hcd.2: stop threads [ 287.724966][ T85] vhci_hcd vhci_hcd.2: release socket [ 287.729351][ T85] vhci_hcd vhci_hcd.2: disconnect device [ 287.912121][ T6013] usb 40-1: SetAddress Request (31) to port 0 [ 287.915102][ T6013] usb 40-1: new SuperSpeed USB device number 31 using vhci_hcd [ 288.312145][ T8823] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 288.411905][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 288.950711][ T8810] vhci_hcd: connection reset by peer [ 288.964957][ T46] vhci_hcd vhci_hcd.1: stop threads [ 288.973998][ T46] vhci_hcd vhci_hcd.1: release socket [ 289.004208][ T8827] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 289.007137][ T8827] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 289.011281][ T8827] vhci_hcd vhci_hcd.0: Device attached [ 289.012020][ T46] vhci_hcd vhci_hcd.1: disconnect device [ 289.461859][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 289.625517][ T8844] netlink: 'syz.3.507': attribute type 4 has an invalid length. [ 289.940432][ T8809] orangefs_mount: mount request failed with -4 [ 289.975960][ T8828] vhci_hcd: connection closed [ 289.995876][ T46] vhci_hcd vhci_hcd.2: stop threads [ 290.012765][ T46] vhci_hcd vhci_hcd.2: release socket [ 290.015155][ T46] vhci_hcd vhci_hcd.2: disconnect device [ 290.124347][ T8852] comedi comedi0: Minor 2147483647 is invalid! [ 290.502042][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 291.379539][ T8875] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 291.382492][ T8875] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 291.392030][ T8875] vhci_hcd vhci_hcd.0: Device attached [ 291.531837][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 291.661883][ T6068] usb 38-1: SetAddress Request (19) to port 0 [ 291.664104][ T6068] usb 38-1: new SuperSpeed USB device number 19 using vhci_hcd [ 292.172042][ T891] usb 42-1: device descriptor read/8, error -110 [ 292.183116][ T8890] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 292.571898][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 292.572862][ T891] usb usb42-port1: attempt power cycle [ 292.643908][ T8876] vhci_hcd: connection reset by peer [ 292.646534][ T1152] vhci_hcd vhci_hcd.0: stop threads [ 292.648599][ T1152] vhci_hcd vhci_hcd.0: release socket [ 292.651180][ T1152] vhci_hcd vhci_hcd.0: disconnect device [ 292.918583][ T34] kernel read not supported for file /input/event1 (pid: 34 comm: kworker/3:0) [ 292.971908][ T6013] usb 40-1: device descriptor read/8, error -110 [ 293.148298][ T891] usb usb42-port1: unable to enumerate USB device [ 293.222570][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 293.225024][ T5957] Bluetooth: hci4: command 0x1003 tx timeout [ 293.393948][ T6013] usb usb40-port1: attempt power cycle [ 293.611844][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 293.823171][ T8914] netlink: 4276 bytes leftover after parsing attributes in process `syz.3.519'. [ 293.827002][ T8914] netlink: 46 bytes leftover after parsing attributes in process `syz.3.519'. [ 293.853149][ T8914] netlink: 16 bytes leftover after parsing attributes in process `syz.3.519'. [ 293.968031][ T6013] usb usb40-port1: unable to enumerate USB device [ 294.651877][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 294.685187][ T8931] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 294.687907][ T8931] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 294.836487][ T8931] vhci_hcd vhci_hcd.0: Device attached [ 294.913533][ T8939] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 295.472167][ T34] usb 40-1: SetAddress Request (35) to port 0 [ 295.474670][ T34] usb 40-1: new SuperSpeed USB device number 35 using vhci_hcd [ 295.691933][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 295.948935][ T8949] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 296.286495][ T8933] vhci_hcd: connection reset by peer [ 296.288974][ T1152] vhci_hcd vhci_hcd.1: stop threads [ 296.290735][ T1152] vhci_hcd vhci_hcd.1: release socket [ 296.292908][ T1152] vhci_hcd vhci_hcd.1: disconnect device [ 296.731884][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 296.735313][ T6068] usb 38-1: device descriptor read/8, error -110 [ 296.788166][ T8950] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 297.144142][ T6068] usb usb38-port1: attempt power cycle [ 297.493364][ T8970] netlink: 'syz.1.528': attribute type 10 has an invalid length. [ 297.506949][ T8970] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 297.512233][ T8970] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 297.517831][ T8970] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 297.771834][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 297.842791][ T6068] usb usb38-port1: unable to enumerate USB device [ 298.811870][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 299.211973][ T5957] Bluetooth: hci4: command 0x1003 tx timeout [ 299.215345][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 299.444291][ T8994] openvswitch: netlink: Missing key (keys=40, expected=100) [ 299.851856][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 299.890789][ T9003] 9pnet_virtio: no channels available for device syz [ 300.791295][ T34] usb 40-1: device descriptor read/8, error -110 [ 300.891908][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 301.040873][ T9007] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 301.043028][ T9007] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 301.048811][ T9007] vhci_hcd vhci_hcd.0: Device attached [ 301.536208][ T34] usb 40-1: SetAddress Request (36) to port 0 [ 301.539430][ T34] usb 40-1: new SuperSpeed USB device number 36 using vhci_hcd [ 301.588715][ T9013] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 301.591931][ T9013] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 301.614512][ T9013] vhci_hcd vhci_hcd.0: Device attached [ 301.901958][ T6046] usb 38-1: SetAddress Request (23) to port 0 [ 301.904450][ T6046] usb 38-1: new SuperSpeed USB device number 23 using vhci_hcd [ 301.941892][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 302.587161][ T9008] vhci_hcd: connection reset by peer [ 302.589576][ T6120] vhci_hcd vhci_hcd.1: stop threads [ 302.592097][ T6120] vhci_hcd vhci_hcd.1: release socket [ 302.595040][ T6120] vhci_hcd vhci_hcd.1: disconnect device [ 302.941607][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 302.941628][ T40] audit: type=1326 audit(1767732784.385:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9018 comm="syz.2.540" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 302.954770][ T40] audit: type=1326 audit(1767732784.385:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9018 comm="syz.2.540" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 302.954818][ T40] audit: type=1326 audit(1767732784.395:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9018 comm="syz.2.540" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 302.954857][ T40] audit: type=1326 audit(1767732784.395:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9018 comm="syz.2.540" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 302.954901][ T40] audit: type=1326 audit(1767732784.395:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9018 comm="syz.2.540" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 302.954941][ T40] audit: type=1326 audit(1767732784.395:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9018 comm="syz.2.540" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 302.954980][ T40] audit: type=1326 audit(1767732784.395:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9018 comm="syz.2.540" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 302.955017][ T40] audit: type=1326 audit(1767732784.395:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9018 comm="syz.2.540" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 302.955056][ T40] audit: type=1326 audit(1767732784.395:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9018 comm="syz.2.540" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 302.955095][ T40] audit: type=1326 audit(1767732784.395:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9018 comm="syz.2.540" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 302.971896][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 303.019743][ T9014] vhci_hcd: connection reset by peer [ 303.041695][ T46] vhci_hcd vhci_hcd.0: stop threads [ 303.043821][ T46] vhci_hcd vhci_hcd.0: release socket [ 303.045666][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 303.774414][ T9035] pim6reg: entered allmulticast mode [ 303.860568][ T9043] afs: Unknown parameter '#7dyn' [ 303.864889][ T9043] netlink: 24 bytes leftover after parsing attributes in process `syz.0.544'. [ 304.012028][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 304.182836][ T9028] pim6reg: left allmulticast mode [ 304.942938][ T9058] 9pnet_virtio: no channels available for device syz [ 305.051845][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 305.371999][ T5957] Bluetooth: hci4: command 0x1003 tx timeout [ 305.412014][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 306.091853][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 306.488313][ T9063] netlink: 'syz.2.549': attribute type 10 has an invalid length. [ 306.528765][ T9063] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 306.572163][ T34] usb 40-1: device descriptor read/8, error -110 [ 306.682058][ T34] usb usb40-port1: attempt power cycle [ 307.131890][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 307.867793][ T6046] usb 38-1: device descriptor read/8, error -110 [ 308.155416][ T34] usb usb40-port1: unable to enumerate USB device [ 308.171854][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 308.375012][ T9062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.506739][ T6046] usb usb38-port1: attempt power cycle [ 309.062839][ T6046] usb usb38-port1: unable to enumerate USB device [ 309.221908][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 309.340548][ T9089] netlink: 'syz.3.555': attribute type 10 has an invalid length. [ 310.021982][ T9085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.071077][ T9089] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 310.251872][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 311.291903][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 312.331963][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 312.444191][ T9112] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 312.446551][ T9112] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 312.449317][ T9112] vhci_hcd vhci_hcd.0: Device attached [ 312.682141][ T34] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 312.839086][ T9121] netlink: 63 bytes leftover after parsing attributes in process `syz.2.559'. [ 312.935002][ T9123] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 313.371878][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 313.579794][ T9122] mkiss: ax0: crc mode is auto. [ 313.738860][ T9127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.562'. [ 313.963218][ T9113] vhci_hcd: connection reset by peer [ 313.965418][ T85] vhci_hcd vhci_hcd.3: stop threads [ 313.967732][ T85] vhci_hcd vhci_hcd.3: release socket [ 313.970583][ T85] vhci_hcd vhci_hcd.3: disconnect device [ 314.386927][ T40] kauditd_printk_skb: 59 callbacks suppressed [ 314.386938][ T40] audit: type=1326 audit(1767732795.835:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9124 comm="syz.2.564" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706d579 code=0x0 [ 314.411908][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 315.452001][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 316.204529][ T9150] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 316.491868][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 316.571997][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 317.347544][ T9154] pim6reg: entered allmulticast mode [ 317.398360][ T40] audit: type=1326 audit(1767732798.765:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9148 comm="syz.3.567" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 317.409884][ T40] audit: type=1326 audit(1767732798.765:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9148 comm="syz.3.567" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 317.420404][ T40] audit: type=1326 audit(1767732798.765:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9148 comm="syz.3.567" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 317.428783][ T40] audit: type=1326 audit(1767732798.765:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9148 comm="syz.3.567" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 317.439421][ T40] audit: type=1326 audit(1767732798.775:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9148 comm="syz.3.567" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 317.448023][ T40] audit: type=1326 audit(1767732798.775:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9148 comm="syz.3.567" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 317.455539][ T40] audit: type=1326 audit(1767732798.775:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9148 comm="syz.3.567" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 317.463073][ T40] audit: type=1326 audit(1767732798.775:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9148 comm="syz.3.567" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 317.470224][ T40] audit: type=1326 audit(1767732798.775:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9148 comm="syz.3.567" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 317.531917][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 317.590725][ T9148] pim6reg: left allmulticast mode [ 317.864800][ T9161] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 317.867138][ T9161] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 317.870781][ T9161] vhci_hcd vhci_hcd.0: Device attached [ 317.971940][ T34] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 318.161963][ T8010] usb 42-1: SetAddress Request (34) to port 0 [ 318.165221][ T8010] usb 42-1: new SuperSpeed USB device number 34 using vhci_hcd [ 318.183846][ T6039] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 318.412054][ T6039] usb 7-1: Using ep0 maxpacket: 8 [ 318.505902][ T6039] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 318.509744][ T6039] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 318.513533][ T6039] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.517484][ T6039] usb 7-1: config 0 descriptor?? [ 318.564032][ T9175] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 318.566486][ T9175] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 318.570337][ T9175] vhci_hcd vhci_hcd.0: Device attached [ 318.571933][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 318.718286][ T9178] netlink: 'syz.0.572': attribute type 4 has an invalid length. [ 318.841962][ T6068] usb 40-1: SetAddress Request (39) to port 0 [ 318.844209][ T6068] usb 40-1: new SuperSpeed USB device number 39 using vhci_hcd [ 319.261252][ T9186] x_tables: duplicate underflow at hook 1 [ 319.275890][ T9186] hub 8-0:1.0: USB hub found [ 319.282156][ T9186] hub 8-0:1.0: 1 port detected [ 319.567177][ T9176] vhci_hcd: connection reset by peer [ 319.572834][ T1142] vhci_hcd vhci_hcd.1: stop threads [ 319.574899][ T1142] vhci_hcd vhci_hcd.1: release socket [ 319.581987][ T1142] vhci_hcd vhci_hcd.1: disconnect device [ 319.611899][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 320.390315][ T9200] overlay: ./file1 is not a directory [ 320.468363][ T9201] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 320.651903][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 320.923622][ T9200] netlink: 'syz.3.575': attribute type 10 has an invalid length. [ 320.929769][ T9200] netlink: 40 bytes leftover after parsing attributes in process `syz.3.575'. [ 320.937983][ T9162] vhci_hcd: connection reset by peer [ 320.940894][ T1142] vhci_hcd vhci_hcd.2: stop threads [ 320.941094][ T6039] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 320.959133][ T6039] usb 7-1: USB disconnect, device number 5 [ 320.971037][ T1142] vhci_hcd vhci_hcd.2: release socket [ 320.988585][ T1142] vhci_hcd vhci_hcd.2: disconnect device [ 321.004467][ T9200] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 321.480074][ T9212] 9pnet_virtio: no channels available for device syz [ 321.691897][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 322.193116][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.566309][ T9223] wg2 speed is unknown, defaulting to 1000 [ 322.731882][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 322.784680][ T9223] lo speed is unknown, defaulting to 1000 [ 322.786847][ T9224] wg2 speed is unknown, defaulting to 1000 [ 322.896367][ T9224] lo speed is unknown, defaulting to 1000 [ 323.212230][ T8010] usb 42-1: device descriptor read/8, error -110 [ 323.771864][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 323.932093][ T6068] usb 40-1: device descriptor read/8, error -110 [ 324.026642][ T8010] usb usb42-port1: attempt power cycle [ 324.049008][ T9235] x_tables: duplicate underflow at hook 1 [ 324.054570][ T9235] hub 8-0:1.0: USB hub found [ 324.056924][ T9235] hub 8-0:1.0: 1 port detected [ 324.612350][ T8010] usb usb42-port1: unable to enumerate USB device [ 324.671917][ T6068] usb usb40-port1: attempt power cycle [ 324.821969][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 325.126976][ T9243] geneve1 speed is unknown, defaulting to 1000 [ 325.131690][ T9243] geneve1 speed is unknown, defaulting to 1000 [ 325.138667][ T9243] geneve1 speed is unknown, defaulting to 1000 [ 325.253825][ T6068] usb usb40-port1: unable to enumerate USB device [ 325.563744][ T9243] infiniband syz1: set active [ 325.565995][ T9243] infiniband syz1: added geneve1 [ 325.592628][ T7532] geneve1 speed is unknown, defaulting to 1000 [ 325.759956][ T9243] RDS/IB: syz1: added [ 325.761341][ T9243] smc: adding ib device syz1 with port count 1 [ 325.763603][ T9243] smc: ib device syz1 port 1 has no pnetid [ 325.766454][ T9243] geneve1 speed is unknown, defaulting to 1000 [ 325.850392][ T9243] geneve1 speed is unknown, defaulting to 1000 [ 325.851928][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 325.932054][ T9243] geneve1 speed is unknown, defaulting to 1000 [ 325.992235][ T7532] geneve1 speed is unknown, defaulting to 1000 [ 326.017095][ T9243] geneve1 speed is unknown, defaulting to 1000 [ 326.173767][ T9238] netlink: 4276 bytes leftover after parsing attributes in process `syz.2.584'. [ 326.177107][ T9238] netlink: 46 bytes leftover after parsing attributes in process `syz.2.584'. [ 326.180924][ T9238] netlink: 16 bytes leftover after parsing attributes in process `syz.2.584'. [ 326.880056][ T9254] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 326.891942][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 327.052806][ T9263] comedi comedi0: pcmmio: I/O port conflict (0xfff,32) [ 327.059150][ T9263] netlink: 'syz.2.589': attribute type 4 has an invalid length. [ 327.113022][ T9264] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 327.115192][ T9264] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 327.120157][ T9264] vhci_hcd vhci_hcd.0: Device attached [ 327.340775][ T9267] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 327.343008][ T9267] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 327.346032][ T9267] vhci_hcd vhci_hcd.0: Device attached [ 327.351932][ T6013] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 327.625286][ T6068] usb 38-1: SetAddress Request (27) to port 0 [ 327.628275][ T6068] usb 38-1: new SuperSpeed USB device number 27 using vhci_hcd [ 327.931896][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 328.908049][ T9265] vhci_hcd: connection reset by peer [ 328.912100][ T6120] vhci_hcd vhci_hcd.1: stop threads [ 328.914073][ T6120] vhci_hcd vhci_hcd.1: release socket [ 328.915971][ T6120] vhci_hcd vhci_hcd.1: disconnect device [ 328.936268][ T9268] vhci_hcd: connection reset by peer [ 328.939157][ T6120] vhci_hcd vhci_hcd.0: stop threads [ 328.941466][ T6120] vhci_hcd vhci_hcd.0: release socket [ 328.943673][ T6120] vhci_hcd vhci_hcd.0: disconnect device [ 328.981926][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 330.021859][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 330.087695][ T9295] 9p: Bad value for 'rfdno' [ 330.604534][ T9303] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 330.607097][ T9303] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 330.628492][ T9303] vhci_hcd vhci_hcd.0: Device attached [ 330.901961][ T1020] usb 44-1: SetAddress Request (26) to port 0 [ 330.904639][ T1020] usb 44-1: new SuperSpeed USB device number 26 using vhci_hcd [ 331.061925][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 331.954933][ T9311] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 332.091838][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 332.691919][ T6013] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 333.008416][ T6068] usb 38-1: device descriptor read/8, error -110 [ 333.131900][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 333.423683][ T6068] usb usb38-port1: attempt power cycle [ 333.985005][ T6068] usb usb38-port1: unable to enumerate USB device [ 334.171937][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 334.656238][ T9304] vhci_hcd: connection reset by peer [ 334.658490][ T1247] vhci_hcd vhci_hcd.3: stop threads [ 334.660720][ T1247] vhci_hcd vhci_hcd.3: release socket [ 334.664105][ T1247] vhci_hcd vhci_hcd.3: disconnect device [ 335.211928][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 335.932016][ T1020] usb 44-1: device descriptor read/8, error -110 [ 335.983155][ T9332] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 335.985856][ T9332] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 336.135572][ T9332] vhci_hcd vhci_hcd.0: Device attached [ 336.251881][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 336.412373][ T1020] usb usb44-port1: attempt power cycle [ 336.431937][ T6046] usb 42-1: SetAddress Request (38) to port 0 [ 336.435417][ T6046] usb 42-1: new SuperSpeed USB device number 38 using vhci_hcd [ 336.663332][ T9347] siw: device registration error -23 [ 336.972633][ T1020] usb usb44-port1: unable to enumerate USB device [ 337.021430][ T9346] hub 8-0:1.0: USB hub found [ 337.024655][ T9346] hub 8-0:1.0: 1 port detected [ 337.302100][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 337.530678][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 337.530697][ T40] audit: type=1804 audit(1767732818.975:299): pid=9357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.610" name="/newroot/147/bus/bus" dev="overlay" ino=858 res=1 errno=0 [ 337.636751][ T40] audit: type=1804 audit(1767732819.075:300): pid=9358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.610" name="/newroot/147/bus/bus" dev="overlay" ino=858 res=1 errno=0 [ 337.648458][ T40] audit: type=1800 audit(1767732819.075:301): pid=9358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.610" name="bus" dev="overlay" ino=858 res=0 errno=0 [ 337.803732][ T9335] vhci_hcd: connection reset by peer [ 337.807034][ T1152] vhci_hcd vhci_hcd.2: stop threads [ 337.808912][ T1152] vhci_hcd vhci_hcd.2: release socket [ 337.811224][ T1152] vhci_hcd vhci_hcd.2: disconnect device [ 338.331882][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 338.536565][ T9366] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 339.371934][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 339.427051][ T9374] gtp0: entered promiscuous mode [ 339.428811][ T9374] gtp0: entered allmulticast mode [ 339.484670][ T9381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.615'. [ 339.501882][ T9381] veth1_macvtap: left promiscuous mode [ 340.082884][ T9394] netlink: 'syz.2.617': attribute type 10 has an invalid length. [ 340.340557][ T9396] overlay: Unknown parameter '/' [ 340.353491][ T9396] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 340.411897][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 340.427614][ T9396] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 340.431664][ T9396] overlayfs: failed to look up (tracing) for ino (-66) [ 340.488771][ T9396] netlink: 36 bytes leftover after parsing attributes in process `syz.3.618'. [ 341.254147][ T9390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.451967][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 341.454864][ T5951] Bluetooth: hci4: command 0x1003 tx timeout [ 341.510979][ T5957] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 341.533561][ T6046] usb 42-1: device descriptor read/8, error -110 [ 341.990496][ T6046] usb usb42-port1: attempt power cycle [ 342.321508][ T9413] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 342.389914][ T9410] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 342.392890][ T9410] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 342.491873][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 342.589681][ T9410] vhci_hcd vhci_hcd.0: Device attached [ 342.631875][ T6046] usb 42-1: SetAddress Request (41) to port 0 [ 342.634575][ T6046] usb 42-1: new SuperSpeed USB device number 41 using vhci_hcd [ 343.071839][ T9411] vhci_hcd: connection reset by peer [ 343.082988][ T6120] vhci_hcd vhci_hcd.2: stop threads [ 343.091392][ T6120] vhci_hcd vhci_hcd.2: release socket [ 343.098421][ T9414] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 343.098727][ T6120] vhci_hcd vhci_hcd.2: disconnect device [ 343.100757][ T9414] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 343.106273][ T9414] vhci_hcd vhci_hcd.0: Device attached [ 343.280493][ T9422] vhci_hcd: connection closed [ 343.280858][ T6120] vhci_hcd vhci_hcd.3: stop threads [ 343.286298][ T6120] vhci_hcd vhci_hcd.3: release socket [ 343.288600][ T6120] vhci_hcd vhci_hcd.3: disconnect device [ 343.531884][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 343.704246][ T9435] ceph: No mds server is up or the cluster is laggy [ 343.877148][ T7532] libceph: connect (1)[c::]:6789 error -101 [ 343.880749][ T7532] libceph: mon0 (1)[c::]:6789 connect error [ 343.886390][ T29] geneve1 speed is unknown, defaulting to 1000 [ 344.157163][ T9444] syzkaller0: entered promiscuous mode [ 344.159231][ T9444] syzkaller0: entered allmulticast mode [ 344.572038][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 345.601340][ T9456] 9pnet_virtio: no channels available for device syz [ 345.611987][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 346.091933][ T5951] Bluetooth: hci4: command 0x1003 tx timeout [ 346.101981][ T5957] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 346.110294][ T9459] overlay: Unknown parameter '/' [ 346.300793][ T9462] overlayfs: missing 'lowerdir' [ 346.651855][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 347.691903][ T6046] usb 42-1: device descriptor read/8, error -110 [ 347.691912][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 347.802135][ T6046] usb usb42-port1: unable to enumerate USB device [ 348.731882][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 349.078289][ T9483] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 349.080411][ T9483] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 349.083449][ T9483] vhci_hcd vhci_hcd.0: Device attached [ 349.352543][ T6046] usb 38-1: SetAddress Request (31) to port 0 [ 349.355485][ T6046] usb 38-1: new SuperSpeed USB device number 31 using vhci_hcd [ 349.437251][ T9489] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 349.439619][ T9489] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 349.502928][ T9489] vhci_hcd vhci_hcd.0: Device attached [ 349.686713][ T9484] vhci_hcd: connection reset by peer [ 349.689192][ T46] vhci_hcd vhci_hcd.0: stop threads [ 349.691447][ T46] vhci_hcd vhci_hcd.0: release socket [ 349.693820][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 349.772056][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 349.776770][ T6068] usb 44-1: SetAddress Request (31) to port 0 [ 349.779645][ T6068] usb 44-1: new SuperSpeed USB device number 31 using vhci_hcd [ 350.811917][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 351.851851][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 352.109155][ T9509] netlink: 'syz.0.640': attribute type 1 has an invalid length. [ 352.111706][ T9509] netlink: 224 bytes leftover after parsing attributes in process `syz.0.640'. [ 352.119856][ T9509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.640'. [ 352.136757][ T9490] vhci_hcd: connection reset by peer [ 352.139472][ T85] vhci_hcd vhci_hcd.3: stop threads [ 352.154351][ T85] vhci_hcd vhci_hcd.3: release socket [ 352.161200][ T85] vhci_hcd vhci_hcd.3: disconnect device [ 352.346349][ T9512] binder_alloc: 9510: binder_alloc_buf, no vma [ 352.891869][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 353.558761][ T9528] pim6reg: entered allmulticast mode [ 353.580528][ T9528] pim6reg: left allmulticast mode [ 353.592404][ T40] audit: type=1326 audit(1767732834.955:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9519 comm="syz.3.644" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 353.612894][ T40] audit: type=1326 audit(1767732834.955:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9519 comm="syz.3.644" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 353.623086][ T40] audit: type=1326 audit(1767732834.955:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9519 comm="syz.3.644" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 353.637048][ T40] audit: type=1326 audit(1767732834.955:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9519 comm="syz.3.644" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 353.644398][ T40] audit: type=1326 audit(1767732834.955:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9519 comm="syz.3.644" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 353.651598][ T40] audit: type=1326 audit(1767732834.965:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9519 comm="syz.3.644" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 353.659214][ T40] audit: type=1326 audit(1767732834.965:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9519 comm="syz.3.644" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 353.672613][ T40] audit: type=1326 audit(1767732834.965:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9519 comm="syz.3.644" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 353.680129][ T40] audit: type=1326 audit(1767732834.965:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9519 comm="syz.3.644" exe="/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 353.688918][ T40] audit: type=1326 audit(1767732834.965:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9519 comm="syz.3.644" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 353.931888][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 354.042953][ T9531] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 354.412303][ T6046] usb 38-1: device descriptor read/8, error -110 [ 354.492288][ T5986] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 354.654729][ T5986] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 354.686457][ T5986] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.713018][ T5986] usb 6-1: config 0 has no interface number 0 [ 354.731688][ T5986] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 354.737791][ T5986] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.756219][ T5986] usb 6-1: config 0 descriptor?? [ 354.781012][ T5986] iowarrior 6-1:0.1: no interrupt-in endpoint found [ 354.812188][ T6068] usb 44-1: device descriptor read/8, error -110 [ 354.875258][ T6046] usb usb38-port1: attempt power cycle [ 354.972185][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 354.991272][ T5986] usb 6-1: USB disconnect, device number 5 [ 355.371889][ T6068] usb usb44-port1: attempt power cycle [ 355.729139][ T6046] usb usb38-port1: unable to enumerate USB device [ 355.989721][ T6068] usb usb44-port1: unable to enumerate USB device [ 356.011855][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 356.829058][ T9566] netlink: 'syz.0.651': attribute type 10 has an invalid length. [ 356.903097][ T9565] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 356.906250][ T9565] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 356.909861][ T9565] vhci_hcd vhci_hcd.0: Device attached [ 356.929752][ T9566] batman_adv: batadv0: Adding interface: team0 [ 356.932723][ T9566] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.941977][ T9566] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 357.051931][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 357.181960][ T6068] usb 42-1: SetAddress Request (42) to port 0 [ 357.185426][ T6068] usb 42-1: new SuperSpeed USB device number 42 using vhci_hcd [ 357.512530][ T9577] comedi comedi0: Minor 2147483647 is invalid! [ 357.841373][ T9568] vhci_hcd: connection reset by peer [ 357.851649][ T85] vhci_hcd vhci_hcd.2: stop threads [ 357.853677][ T85] vhci_hcd vhci_hcd.2: release socket [ 357.855733][ T85] vhci_hcd vhci_hcd.2: disconnect device [ 357.857881][ T9582] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 357.860335][ T9582] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 357.873276][ T9582] vhci_hcd vhci_hcd.0: Device attached [ 358.091904][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 358.202535][ T9589] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 358.322092][ T1020] usb 38-1: SetAddress Request (35) to port 0 [ 358.324077][ T1020] usb 38-1: new SuperSpeed USB device number 35 using vhci_hcd [ 358.450119][ T9583] vhci_hcd: connection reset by peer [ 358.454159][ T85] vhci_hcd vhci_hcd.0: stop threads [ 358.456407][ T85] vhci_hcd vhci_hcd.0: release socket [ 358.459509][ T85] vhci_hcd vhci_hcd.0: disconnect device [ 358.614815][ T9595] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 358.617340][ T9595] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 358.622193][ T9595] vhci_hcd vhci_hcd.0: Device attached [ 358.912995][ T6269] usb 40-1: SetAddress Request (43) to port 0 [ 358.918128][ T6269] usb 40-1: new SuperSpeed USB device number 43 using vhci_hcd [ 358.961907][ T6039] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 359.131829][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 359.131872][ T6039] usb 6-1: Using ep0 maxpacket: 8 [ 359.139307][ T6039] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 359.145244][ T6039] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 359.149138][ T6039] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.160583][ T6039] usb 6-1: config 0 descriptor?? [ 360.171860][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 360.812175][ T5951] Bluetooth: hci4: command 0x1003 tx timeout [ 360.816335][ T5957] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 361.211914][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 361.487427][ T9596] vhci_hcd: connection reset by peer [ 361.489785][ T94] vhci_hcd vhci_hcd.1: stop threads [ 361.492696][ T94] vhci_hcd vhci_hcd.1: release socket [ 361.494472][ T6039] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 361.495285][ T94] vhci_hcd vhci_hcd.1: disconnect device [ 361.554108][ T6039] usb 6-1: USB disconnect, device number 6 [ 362.251927][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 362.255568][ T6068] usb 42-1: device descriptor read/8, error -110 [ 362.643928][ T6068] usb usb42-port1: attempt power cycle [ 363.224038][ T6068] usb usb42-port1: unable to enumerate USB device [ 363.291846][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 363.382889][ T1020] usb 38-1: device descriptor read/8, error -110 [ 363.707372][ T9639] netlink: 'syz.1.665': attribute type 1 has an invalid length. [ 363.710247][ T9639] netlink: 224 bytes leftover after parsing attributes in process `syz.1.665'. [ 363.842855][ T1020] usb usb38-port1: attempt power cycle [ 364.022023][ T6269] usb 40-1: device descriptor read/8, error -110 [ 364.331881][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 364.412881][ T1020] usb usb38-port1: unable to enumerate USB device [ 364.422559][ T6269] usb usb40-port1: attempt power cycle [ 365.371910][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 365.400321][ T6269] usb usb40-port1: unable to enumerate USB device [ 366.411894][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 366.678453][ T9663] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 366.680764][ T9663] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 366.717286][ T9663] vhci_hcd vhci_hcd.0: Device attached [ 366.991949][ T6046] usb 40-1: SetAddress Request (47) to port 0 [ 366.994179][ T6046] usb 40-1: new SuperSpeed USB device number 47 using vhci_hcd [ 367.397576][ T9664] vhci_hcd: connection reset by peer [ 367.399939][ T1152] vhci_hcd vhci_hcd.1: stop threads [ 367.401924][ T1152] vhci_hcd vhci_hcd.1: release socket [ 367.403813][ T1152] vhci_hcd vhci_hcd.1: disconnect device [ 367.461925][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 368.501913][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 368.651930][ T5951] Bluetooth: hci4: command 0x1003 tx timeout [ 368.651961][ T5957] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 369.163981][ T9678] siw: device registration error -23 [ 369.531954][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 370.068504][ T7532] libceph: connect (1)[c::]:6789 error -101 [ 370.070982][ T7532] libceph: mon0 (1)[c::]:6789 connect error [ 370.114342][ T9690] ceph: No mds server is up or the cluster is laggy [ 370.348316][ T7532] libceph: connect (1)[c::]:6789 error -101 [ 370.353904][ T7532] libceph: mon0 (1)[c::]:6789 connect error [ 370.571844][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 371.238175][ T9704] overlay: Unknown parameter '/' [ 371.302265][ T9705] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 371.344913][ T9705] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 371.349063][ T9705] overlayfs: failed to look up (tracing) for ino (-66) [ 371.394924][ T9705] netlink: 36 bytes leftover after parsing attributes in process `syz.2.677'. [ 371.611873][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 371.611911][ T5957] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 371.646638][ T5986] ================================================================== [ 371.649420][ T5986] BUG: KASAN: slab-use-after-free in hci_uart_write_work+0x82d/0x960 [ 371.652160][ T5986] Read of size 4 at addr ffff8880424f6a70 by task kworker/2:3/5986 [ 371.656428][ T5986] [ 371.658735][ T5986] CPU: 2 UID: 0 PID: 5986 Comm: kworker/2:3 Not tainted syzkaller #0 PREEMPT(full) [ 371.658762][ T5986] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 371.658776][ T5986] Workqueue: events hci_uart_write_work [ 371.658800][ T5986] Call Trace: [ 371.658807][ T5986] [ 371.658816][ T5986] dump_stack_lvl+0x116/0x1f0 [ 371.658846][ T5986] print_report+0xcd/0x630 [ 371.658886][ T5986] ? __virt_addr_valid+0x81/0x610 [ 371.658914][ T5986] ? __phys_addr+0xe8/0x180 [ 371.658942][ T5986] ? hci_uart_write_work+0x82d/0x960 [ 371.658959][ T5986] kasan_report+0xe0/0x110 [ 371.658987][ T5986] ? hci_uart_write_work+0x82d/0x960 [ 371.659008][ T5986] hci_uart_write_work+0x82d/0x960 [ 371.659025][ T5986] ? __pfx_pty_write+0x10/0x10 [ 371.659050][ T5986] process_one_work+0x9ba/0x1b20 [ 371.659076][ T5986] ? __pfx_process_one_work+0x10/0x10 [ 371.659097][ T5986] ? assign_work+0x1a0/0x250 [ 371.659115][ T5986] worker_thread+0x6c8/0xf10 [ 371.659139][ T5986] ? __pfx_worker_thread+0x10/0x10 [ 371.659158][ T5986] kthread+0x3c5/0x780 [ 371.659175][ T5986] ? __pfx_kthread+0x10/0x10 [ 371.659194][ T5986] ? rcu_is_watching+0x12/0xc0 [ 371.659219][ T5986] ? __pfx_kthread+0x10/0x10 [ 371.659235][ T5986] ret_from_fork+0x983/0xb10 [ 371.659255][ T5986] ? __pfx_ret_from_fork+0x10/0x10 [ 371.659274][ T5986] ? __switch_to+0x7af/0x10d0 [ 371.659298][ T5986] ? __pfx_kthread+0x10/0x10 [ 371.659315][ T5986] ret_from_fork_asm+0x1a/0x30 [ 371.659348][ T5986] [ 371.659354][ T5986] [ 371.723916][ T5986] Allocated by task 34: [ 371.725676][ T5986] kasan_save_stack+0x33/0x60 [ 371.727692][ T5986] kasan_save_track+0x14/0x30 [ 371.729685][ T5986] __kasan_slab_alloc+0x89/0x90 [ 371.731680][ T5986] kmem_cache_alloc_node_noprof+0x298/0x800 [ 371.734355][ T5986] __alloc_skb+0x156/0x410 [ 371.736285][ T5986] bcsp_prepare_pkt+0xe0/0xae0 [ 371.738466][ T5986] bcsp_dequeue+0x237/0x4b0 [ 371.740432][ T5986] hci_uart_write_work+0x4e3/0x960 [ 371.742807][ T5986] process_one_work+0x9ba/0x1b20 [ 371.744971][ T5986] worker_thread+0x6c8/0xf10 [ 371.747144][ T5986] kthread+0x3c5/0x780 [ 371.748894][ T5986] ret_from_fork+0x983/0xb10 [ 371.750853][ T5986] ret_from_fork_asm+0x1a/0x30 [ 371.752876][ T5986] [ 371.753915][ T5986] The buggy address belongs to the object at ffff8880424f6a00 [ 371.753915][ T5986] which belongs to the cache skbuff_head_cache of size 240 [ 371.760196][ T5986] The buggy address is located 112 bytes inside of [ 371.760196][ T5986] freed 240-byte region [ffff8880424f6a00, ffff8880424f6af0) [ 371.766437][ T5986] [ 371.767509][ T5986] The buggy address belongs to the physical page: [ 371.770223][ T5986] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x424f6 [ 371.774047][ T5986] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 371.777978][ T5986] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 371.781889][ T5986] page_type: f5(slab) [ 371.783796][ T5986] raw: 04fff00000000040 ffff888040ef48c0 dead000000000122 0000000000000000 [ 371.787609][ T5986] raw: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 371.791402][ T5986] head: 04fff00000000040 ffff888040ef48c0 dead000000000122 0000000000000000 [ 371.795282][ T5986] head: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 371.799199][ T5986] head: 04fff00000000001 ffffea0001093d81 00000000ffffffff 00000000ffffffff [ 371.803231][ T5986] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 371.806826][ T5986] page dumped because: kasan: bad access detected [ 371.809619][ T5986] page_owner tracks the page as allocated [ 371.811906][ T5986] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1043, tgid 1043 (kworker/u32:6), ts 371545668065, free_ts 368731245031 [ 371.820099][ T5986] post_alloc_hook+0x1af/0x220 [ 371.822655][ T5986] get_page_from_freelist+0xd0b/0x31a0 [ 371.825281][ T5986] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 371.827999][ T5986] alloc_pages_mpol+0x1fb/0x550 [ 371.830106][ T5986] new_slab+0x2c3/0x430 [ 371.831909][ T5986] ___slab_alloc+0xe18/0x1c90 [ 371.833970][ T5986] __slab_alloc.constprop.0+0x63/0x110 [ 371.836437][ T5986] kmem_cache_alloc_node_noprof+0x44a/0x800 [ 371.839119][ T5986] __alloc_skb+0x156/0x410 [ 371.841156][ T5986] nsim_dev_trap_report_work+0x2b1/0xcf0 [ 371.843700][ T5986] process_one_work+0x9ba/0x1b20 [ 371.845882][ T5986] worker_thread+0x6c8/0xf10 [ 371.847864][ T5986] kthread+0x3c5/0x780 [ 371.849589][ T5986] ret_from_fork+0x983/0xb10 [ 371.851463][ T5986] ret_from_fork_asm+0x1a/0x30 [ 371.853484][ T5986] page last free pid 5944 tgid 5944 stack trace: [ 371.855865][ T5986] __free_frozen_pages+0x7df/0x1170 [ 371.857819][ T5986] qlist_free_all+0x4c/0xf0 [ 371.859543][ T5986] kasan_quarantine_reduce+0x195/0x1e0 [ 371.861780][ T5986] __kasan_slab_alloc+0x69/0x90 [ 371.863979][ T5986] kmem_cache_alloc_noprof+0x25e/0x770 [ 371.866220][ T5986] getname_flags.part.0+0x4c/0x550 [ 371.868212][ T5986] getname_flags+0x93/0xf0 [ 371.869976][ T5986] __ia32_sys_unlinkat+0xe4/0x130 [ 371.872069][ T5986] __do_fast_syscall_32+0xe8/0x680 [ 371.874266][ T5986] do_fast_syscall_32+0x32/0x80 [ 371.876258][ T5986] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 371.878795][ T5986] [ 371.879940][ T5986] Memory state around the buggy address: [ 371.882255][ T5986] ffff8880424f6900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 371.885726][ T5986] ffff8880424f6980: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 371.889062][ T5986] >ffff8880424f6a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 371.892407][ T5986] ^ [ 371.895854][ T5986] ffff8880424f6a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 371.899640][ T5986] ffff8880424f6b00: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 371.903204][ T5986] ================================================================== [ 371.931451][ T5986] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 371.934531][ T5986] CPU: 2 UID: 0 PID: 5986 Comm: kworker/2:3 Not tainted syzkaller #0 PREEMPT(full) [ 371.938441][ T5986] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 371.942967][ T5986] Workqueue: events hci_uart_write_work [ 371.945363][ T5986] Call Trace: [ 371.946789][ T5986] [ 371.948053][ T5986] dump_stack_lvl+0x3d/0x1f0 [ 371.950073][ T5986] vpanic+0x640/0x6f0 [ 371.951701][ T5986] panic+0xca/0xd0 [ 371.953358][ T5986] ? __pfx_panic+0x10/0x10 [ 371.955247][ T5986] ? hci_uart_write_work+0x82d/0x960 [ 371.957394][ T5986] ? preempt_schedule_common+0x44/0xc0 [ 371.959827][ T5986] ? preempt_schedule_thunk+0x16/0x30 [ 371.962175][ T5986] ? check_panic_on_warn+0x1f/0xb0 [ 371.964332][ T5986] check_panic_on_warn+0xab/0xb0 [ 371.966329][ T5986] end_report+0x107/0x160 [ 371.968148][ T5986] kasan_report+0xee/0x110 [ 371.969983][ T5986] ? hci_uart_write_work+0x82d/0x960 [ 371.972270][ T5986] hci_uart_write_work+0x82d/0x960 [ 371.974490][ T5986] ? __pfx_pty_write+0x10/0x10 [ 371.976532][ T5986] process_one_work+0x9ba/0x1b20 [ 371.978646][ T5986] ? __pfx_process_one_work+0x10/0x10 [ 371.980909][ T5986] ? assign_work+0x1a0/0x250 [ 371.982914][ T5986] worker_thread+0x6c8/0xf10 [ 371.984855][ T5986] ? __pfx_worker_thread+0x10/0x10 [ 371.987006][ T5986] kthread+0x3c5/0x780 [ 371.988741][ T5986] ? __pfx_kthread+0x10/0x10 [ 371.990695][ T5986] ? rcu_is_watching+0x12/0xc0 [ 371.992640][ T5986] ? __pfx_kthread+0x10/0x10 [ 371.994540][ T5986] ret_from_fork+0x983/0xb10 [ 371.996574][ T5986] ? __pfx_ret_from_fork+0x10/0x10 [ 371.998826][ T5986] ? __switch_to+0x7af/0x10d0 [ 372.000719][ T5986] ? __pfx_kthread+0x10/0x10 [ 372.002637][ T5986] ret_from_fork_asm+0x1a/0x30 [ 372.004853][ T5986] [ 372.006959][ T5986] Kernel Offset: disabled [ 372.008904][ T5986] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:54:13 Registers: info registers vcpu 0 CPU#0 RAX=fffffbfff2111d7a RBX=fffffbfff2111d7b RCX=ffffffff893ff568 RDX=0000000000000000 RSI=0000000000000008 RDI=ffffffff9088ebd0 RBP=fffffbfff2111d7a RSP=ffffc9002499f7d0 R8 =0000000000000000 R9 =fffffbfff2111d7a R10=ffffffff9088ebd7 R11=ffff888073912ff0 R12=0000000000000000 R13=0000000000000000 R14=ffffc9002499fd58 R15=ffff88804ae94500 RIP=ffffffff8227412f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880976fc000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f51948ca CR3=0000000077c68000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000018800000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000007 RBX=000000000000000a RCX=ffffffff8a13c200 RDX=ffff88802a3ac980 RSI=000000000000000b RDI=0000000000000004 RBP=1ffff92001ddbef6 RSP=ffffc9000eedf7a8 R8 =0000000000000004 R9 =000000000000000b R10=000000000000000a R11=ffff88802a3ad4b0 R12=7fffffffffffffff R13=ffff88806aa3bbc0 R14=000000000000000b R15=ffff88806aa3bb48 RIP=ffffffff81be63d1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977fc000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000306e0ffc CR3=0000000077c68000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005a00000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff8b72d6fa RDX=ffff8880275ca4c0 RSI=0000000000000000 RDI=0000000000000007 RBP=ffffc9000432f710 RSP=ffffc9000432f630 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000008 R11=3430383838666666 R12=0000000000000000 R13=ffffffff8dab7ef7 R14=0000000000000008 R15=ffffc9000432f860 RIP=ffffffff81be6ae0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978fc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73d6288 CR3=0000000070d42000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ac00000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=ffffc900005bfbd8 RCX=ffffc900005c0000 RDX=1ffff920000b7ef1 RSI=ffffc900005bfbc8 RDI=ffffc900005bf788 RBP=ffff88802b53bd80 RSP=ffffc900005bf710 R8 =0000000000000001 R9 =00000000ba928765 R10=0000000000000002 R11=0000000000011bdf R12=ffffc900005bf7d0 R13=ffffc900005bf780 R14=ffffc900005bfbd8 R15=ffffc900005bf7b4 RIP=ffffffff816c9c0c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979fc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f719a920 CR3=0000000070d42000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ac00000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000