last executing test programs: 21.72405054s ago: executing program 0 (id=1257): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) removexattr(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ftruncate(0xffffffffffffffff, 0x8800000) 16.197829341s ago: executing program 0 (id=1263): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x98) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000240)={0x800, 0x8001, 0xbb9, 0x7, 0xb7}) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15.313203384s ago: executing program 0 (id=1264): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) r0 = getpid() syz_open_dev$sndctrl(&(0x7f0000000280), 0x8, 0x801) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x910ec27568a00e35, 0x40000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1a00fe00000000bda100000000000007010000f8ffffffb702000008000000b70300000000000085000000760000009500000000000000d36b59ac17a5"], &(0x7f0000000180)='GPL\x00', 0x9}, 0x94) openat$kvm(0xffffff9c, &(0x7f0000000300), 0x8001, 0x0) openat$cdrom(0xffffff9c, 0x0, 0x42880, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000080)='./file1\x00', 0x48) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) lseek(r4, 0x40, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r5 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) landlock_restrict_self(r5, 0x0) 12.587402442s ago: executing program 3 (id=1271): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b70200"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) removexattr(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ftruncate(0xffffffffffffffff, 0x8800000) 9.391348001s ago: executing program 3 (id=1274): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = dup(0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) unlink(0x0) bind$inet6(r4, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000000)={0x0, 0x0, 0x3, &(0x7f00000000c0)={0x19, "90f50180e64f61909103f1fbbc2b81c9f144d76e44c700100000e52829e7cb8393"}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000340)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 9.378596779s ago: executing program 0 (id=1283): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x910ec27568a00e35, 0x40000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1a00fe00000000bda100000000000007010000f8ffffffb702000008000000b70300000000000085000000760000009500000000000000d36b59ac17a5"], &(0x7f0000000180)='GPL\x00', 0x9}, 0x94) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$null(0xffffff9c, &(0x7f0000000000), 0x86000, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB]) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x122) connect$packet(r6, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r6, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 9.377021267s ago: executing program 1 (id=1275): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r4) r5 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000014c0)=ANY=[@ANYBLOB="40000041c91d611022b9784279864452a7262b8afa56ff3a9845cc421c0abf0d74ae5651a298369aa6448c4fca4f3f15f787c272846f5a905a3703eea1fa51dcf0f81993de6325d1ce05858ab5a741c7a40f348e9f641825b30c23db4036a955b1d229753cb80ae3011e32f1fd3ac97008ccd0ce82913e7c35aa0f9ff5d9c6ca49349091f2130eebd0f9d5c530a2e4d1445385523ab77d26e8f90e1c3a633a32a47d387622a388b10183476da764040ea754b2f9cdf91bec44e4bc853e0f6ca0626728b5ca522014bd265d2b1859ad54bd9335d80ffc1bc6022250815e04be21f567b7fb6e6af13d", @ANYRES16=r5, @ANYBLOB="00022dbd7000fedbdf253000000005003400090000000a0001007770616e310000000a0001007770616e330000000a0001007770616e30000000"], 0x40}, 0x1, 0x0, 0x0, 0x20040080}, 0x55) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000e171000103004e5c000000000000000000", @ANYBLOB], 0x20}, 0x1, 0xf00, 0x0, 0x20000010}, 0x0) 7.617016571s ago: executing program 3 (id=1279): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'wg2\x00', 0x10}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000004000000060000000100"]) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000043b000/0x1000)=nil, 0xfffffffffffffdb5, &(0x7f0000000080)='\x00\xc9\xf5\x00\x00\x00\x00\x00\x00\x00+\x1ct\xc6\fr\xbaU\xc1\xb2\xd2\xde\xbfk\xc0\x18\x94\xc5&\xec\x03\xa0w\"E\xc9\xf2,K4\x10\xc8\x8cuj\xd3\xf0\xb3\xa9f\xf7\xb7\x17\xdf\xca\xac\x8b\x81K\t\x14^\xc3\xb7<\xa1\x15\v4\xd0\xbe\xa8\x01\x00<:-Y\n<\x1d\xb2\xe0kU\xc0\xc1\x14') openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010008000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020000087a32000000000900010073797a3000000000080005400000003d300011800b00010074617267657400002000028005000300c400000008000240000000000a00010041"], 0xb4}, 0x1, 0x0, 0x0, 0x890}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUTCMAP(r5, 0x4605, &(0x7f0000000100)={0x0, 0x6, &(0x7f0000000380)=[0x0, 0x7, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], &(0x7f0000000440)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 7.50249687s ago: executing program 2 (id=1280): syz_open_dev$vivid(&(0x7f0000002680), 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=@framed={{}, [@printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mlock2(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000640)={0xb, 0x29, 0x2, {0xf}}, 0xfffffc95) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2b20d, 0x11a20}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x201, 0xca25, 0x5}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007"], 0x48}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000006ac0), 0x6, 0x640400c0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r6, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 7.177616881s ago: executing program 1 (id=1281): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi5\x00', 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) unshare(0x22020600) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) close(r2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x2, 0x9, 0x3, 0xd, 0xc9, 0x0, 0x1, 0x0, 0x80, 0x2, 0x5, 0x2, 0x8, 0x6}, 0xe) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000000)=0x2000000a, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 7.126682841s ago: executing program 2 (id=1282): socket(0x2, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_open_dev$sg(0x0, 0x0, 0x38dd80) r0 = socket$inet6(0xa, 0xa, 0x400000) bind$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs$pagemap(0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r3, 0x80044dff, &(0x7f00000003c0)) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000280)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() 6.040907061s ago: executing program 3 (id=1284): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b70200"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) removexattr(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ftruncate(0xffffffffffffffff, 0x8800000) 5.397914857s ago: executing program 1 (id=1285): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r0 = socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0x200cc75, 0x800, 0x200003, 0x26e}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) setsockopt$MRT_DONE(r2, 0x0, 0xc9, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x5f03, &(0x7f00000003c0)={0x0, 0xef71, 0x800, 0x2, 0x2f1}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@migrate={0x50, 0x21, 0xd39, 0x0, 0x0, {{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0xff}}}, 0x50}}, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r8, 0x8919, &(0x7f0000000180)={'netdevsim0\x00', {0x2, 0x0, @private}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) set_robust_list(&(0x7f0000000200)={0x0, 0x2}, 0xc) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$ax25(0x3, 0x3, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x44, r10, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24044815}, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r5, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x8, 0x0, r2, 0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x200, 0x0, {0x0, r11}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x0, 0x25dfdbfe, {}, [@typed={0x8, 0x3ffe, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @fd}]}, 0x24}, 0x1, 0x8000000}, 0x0) 5.397581139s ago: executing program 2 (id=1286): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r1 = openat$dlm_plock(0xffffff9c, &(0x7f0000000180), 0x8a301, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000340)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000640), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0cc5605, &(0x7f0000000680)={0x2, @pix_mp={0x101, 0x0, 0x38416761, 0x2, 0x6, [{0x5, 0x6}, {0x6, 0x7}, {0x6, 0xffffffff}, {0x9, 0x6}, {0xe6, 0xd}, {0x400007f, 0x80000}, {0x6, 0x17}, {0x2000, 0xfffffff3}], 0xfa, 0x4, 0x8, 0x2}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x15) writev(r7, &(0x7f00000001c0)=[{&(0x7f0000000640)="ce", 0x1}], 0x1) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 4.728473238s ago: executing program 1 (id=1287): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = fsopen(&(0x7f00000002c0)='pstore\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000380)=':\x00', 0x0, r3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f00000003c0)='./file0\x00', 0x10241, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c000500010006000000240007800800"], 0x6c}}, 0x0) r8 = add_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r8, 0x220c) 3.87338297s ago: executing program 1 (id=1288): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) r1 = msgget$private(0x0, 0x506eddf4a8b99d3f) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000340)={{0x2, 0x0, 0x0, 0x0, 0xee01, 0x8, 0x1}, 0x0, 0x0, 0x8, 0x3, 0x4, 0x33, 0x1, 0xf9e4, 0x5, 0x5, 0xffffffffffffffff}) msgctl$IPC_INFO(r1, 0x3, &(0x7f00000003c0)=""/198) r2 = socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000044c0)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0, r2}, 0x68) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000540)={0x1, {{0xa, 0x4e22, 0x7, @loopback, 0x100}}, 0x0, 0x2, [{{0xa, 0x4e21, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e24, 0x8000, @ipv4={'\x00', '\xff\xff', @local}, 0x8}}]}, 0x190) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4620, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 3.652495464s ago: executing program 0 (id=1289): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = dup(0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) unlink(0x0) bind$inet6(r4, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000000)={0x0, 0x0, 0x3, &(0x7f00000000c0)={0x19, "90f50180e64f61909103f1fbbc2b81c9f144d76e44c700100000e52829e7cb8393"}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000340)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 3.21180558s ago: executing program 2 (id=1290): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_sctp(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='inet_sk_error_report\x00', r2}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0xbf00, 0xbf}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x7}, @IFLA_TXQLEN={0x8, 0xd, 0xf4c0}]}, 0x40}}, 0x0) 2.999055372s ago: executing program 1 (id=1291): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r4) r5 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000014c0)=ANY=[@ANYBLOB="40000041c91d611022b9784279864452a7262b8afa56ff3a9845cc421c0abf0d74ae5651a298369aa6448c4fca4f3f15f787c272846f5a905a3703eea1fa51dcf0f81993de6325d1ce05858ab5a741c7a40f348e9f641825b30c23db4036a955b1d229753cb80ae3011e32f1fd3ac97008ccd0ce82913e7c35aa0f9ff5d9c6ca49349091f2130eebd0f9d5c530a2e4d1445385523ab77d26e8f90e1c3a633a32a47d387622a388b10183476da764040ea754b2f9cdf91bec44e4bc853e0f6ca0626728b5ca522014bd265d2b1859ad54bd9335d80ffc1bc6022250815e04be21f567b7fb6e6af13d", @ANYRES16=r5, @ANYBLOB="00022dbd7000fedbdf253000000005003400090000000a0001007770616e310000000a0001007770616e330000000a0001007770616e30000000"], 0x40}, 0x1, 0x0, 0x0, 0x20040080}, 0x55) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000e171000103004e5c000000000000000000", @ANYBLOB], 0x20}, 0x1, 0xf00, 0x0, 0x20000010}, 0x0) 1.592481947s ago: executing program 3 (id=1292): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) readv(r5, &(0x7f0000000c40)=[{&(0x7f00000003c0)=""/7, 0x7}], 0x1) r6 = memfd_create(&(0x7f0000001240)='[\v\xdbX\xae[\x1a\xad\xd1md\xc8\x85HX\xa9%\f\x1a,\xe2\x9c\xb4\xd7\xbc\xf1\xb3\x86\xe2/Op\xd0\xa2\x82\x1eb;(\xb5\xe1j\xc8\f\xe5\x89\x17\xee|J\x90=5\xed\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q%\x8a\xda\x05\x00f\xe3j%\x00\x00\x1c#\xc6\xd8\xdbD\x92P\xe16W\x10\xdau\xc7\x8f\xaa\x8d\xa9\x97\x9d\xcb\x1e\x80\xe7\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\xbdD\xcc\'\xa2\xaf`\xf6L\x0e\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecM\xe4H\xb7\xaf\xa8\x96dh\xa9\xab > \xac\x00O^\x14\xcbv\x17Hkb\xe7\xcb\x9d;\xd2\x9f\x05\xd1\x00\x8b\xd3\x9f\a\x99^v\xf7\xfa\xe5\xf0h\x87l\xd9\x15\xd2\x87~?\xb1\x9d\xc1\x92`\x8a\r\xfc\xeb\x14\xd1\x94\fv\x8a\xe3\x1d\x0fj}\x9f\xedsc\xd3\xee\xe6cXw\xa1\xbc\xd0o\xf9\x9cJ\b\x00\xd8;\\ik0+\xc8\xf2\x87\xdf\t\x97\x9dB\xc1\xa0\xa71\xf25GU|]A\x1eel \x8ff\xc6\nt\xd0\x91\x9d\x8c\xa4\xe5\xde\x06\x00\xffE\xf4\x96#\x92-9\xe5\xa7\xf8%\xb0I\xd4\x91r\xbf\x1bOS\xee}\x16\x87\x05\xf2\xb9\x81\x14\xe2NZ\\I\xd0[\xc4\xf2\"\x87\xf5\xb8\x95.M\xb1S\xbd\xe4i\x00\xc1b\t]?}0\t\xebV\xbci\xa5\x05\xca\xb6\xc22\x7fL\x89&\xa0\xcfMULr0rs\xb4\n\xa6)\xe23\xf0\x8d\x9dO\xb9\xc9\x83\xabS\x013\"\x1b\x97K\x17\x16\x89\a\xee\xc903\xad\x15\x1cH\xd2\x95\x91\xb4$\x1b\xbf\xaf\xf5\x9b\xc2\x85\xe7[\xe5\xfb}\x1d@f2\x11\x13Y\x98\xa4\xecWEE\x9eI\x05\v\x11\xad\x93!^T\xe5N\xf6LI\x9a6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x1a\xc9(a\x06>g\xe5\x00:\x9au\xef\x14\t\x1f8E\x86\xcb\xd0e\x17\xfb\xc1', 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000003d0007010000000000000000037c000014003780100003"], 0x28}}, 0xc000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c011}, 0xc000) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) getuid() sysinfo(&(0x7f0000000240)=""/60) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0xb, 0x4, 0x1, 0x5, 0x34, 0x64, 0x0, 0x3, 0x1, 0x0, @multicast2, @local, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x93, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_addr={0x44, 0xc, 0x2f, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x3f}, 0x9}]}]}}, @address_request={0x11, 0x0, 0x0, 0x7f}}}}}, 0x0) 1.584884307s ago: executing program 2 (id=1300): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_sctp(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='inet_sk_error_report\x00', r2}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0xbf00, 0xbf}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x7}, @IFLA_TXQLEN={0x8, 0xd, 0xf4c0}]}, 0x40}}, 0x0) 302.336844ms ago: executing program 2 (id=1293): r0 = socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) syz_init_net_socket$ax25(0x3, 0x7, 0xcc) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r4, &(0x7f0000000180)=[{0x0}], 0x1) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e79"]) chdir(&(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x66801, 0x19d) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 247.33318ms ago: executing program 0 (id=1294): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffff1e00ff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_DEV_DESTROY(r4, 0x5502) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={&(0x7f0000000640)="008ba4026138c95a77702660e19b133bfedf8a271b4ad23f2eb8947da7ee3404ea6ade7b0f1b3f46fa52a8f3472b5796b7f7905b9138aec4bd45b74f59804a11a53c3cab209986c2a7d6656827383da29c2dd36b89e35cb527068e0e5955fd6ce4fc6a3100bb3e069cc786edc9ee9defaecac60d683fbd0266487c201b41dd71598d474cd2603d4c8902c2e3da0d16864520815ef855f5e199c154ac130a84fc9f31ce794e632cb7cb735c656e53c56369b8080b8624e72120a67262b2028d33cfbcc26ba8fd7884bf849bfb7fbc202e8a1172743eb7ea299099ea769cecd5c65f850c727c3f10f4", &(0x7f00000004c0)=""/72, &(0x7f0000000740)="effc933fe97c092030ca0851ca0cc117e36a7e03595e3af0c20ebb7e88059987afe046f064cfa53bb46c81b7863201e3f94db67db895893f0f", &(0x7f00000007c0)="df74c55f844757ee72779411b6043dd1c270b9048ad1f690a1dd3174496dc63d4f16ba8ef113afbf4139d33458e94867b75fd01544123aeb56aa0f50817c7bb7eef34c440e32c12df88697d1ffa6fe1a918b750f3768ac90aaa83e573281748a56722a4805f9", 0x1, 0xffffffffffffffff, 0x4}, 0x38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x2000211, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=1295): mknod$loop(&(0x7f0000000400)='./file0\x00', 0x10, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000001001000001"], 0x10}, 0x8000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000280)='rxrpc_local\x00', r3, 0x0, 0x5}, 0xfffffe2e) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) r4 = socket$inet6(0xa, 0x80002, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80882, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ily 0 port 6081 - 0 [ 49.679782][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.684826][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.728798][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.731354][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.760797][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.763582][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.045508][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 50.262343][ T6075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 50.286822][ T6075] netlink: 'syz.1.5': attribute type 10 has an invalid length. [ 50.308926][ T6075] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 50.681937][ T63] Bluetooth: hci0: command tx timeout [ 50.753565][ T63] Bluetooth: hci2: command tx timeout [ 50.776120][ T63] Bluetooth: hci1: command tx timeout [ 50.777918][ T63] Bluetooth: hci3: command tx timeout [ 51.108051][ T6087] fuse: Bad value for 'fd' [ 51.292757][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.409894][ T24] cfg80211: failed to load regulatory.db [ 51.564013][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'. [ 52.093615][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 52.752814][ T5980] Bluetooth: hci0: command tx timeout [ 52.832542][ T5980] Bluetooth: hci3: command tx timeout [ 52.834343][ T5980] Bluetooth: hci1: command tx timeout [ 52.835559][ T63] Bluetooth: hci2: command tx timeout [ 53.857886][ T6135] vlan0: entered promiscuous mode [ 53.938390][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 54.363424][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 54.365931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 54.368706][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 54.371236][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 54.433389][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 54.574313][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 54.590246][ T6143] mmap: syz.2.19 (6143) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 54.619084][ T6147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20'. [ 54.846118][ T63] Bluetooth: hci0: command tx timeout [ 54.912584][ T63] Bluetooth: hci2: command tx timeout [ 54.914508][ T63] Bluetooth: hci1: command tx timeout [ 54.916416][ T63] Bluetooth: hci3: command tx timeout [ 55.422576][ T840] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 55.584614][ T840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 55.589108][ T840] usb 5-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 55.593192][ T840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.598764][ T840] usb 5-1: config 0 descriptor?? [ 56.357984][ T840] usbhid 5-1:0.0: can't add hid device: -71 [ 56.372703][ T840] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 56.393092][ T840] usb 5-1: USB disconnect, device number 2 [ 56.716386][ T55] libceph: connect (1)[c::]:6789 error -101 [ 56.719818][ T55] libceph: mon0 (1)[c::]:6789 connect error [ 56.752834][ T6175] ceph: No mds server is up or the cluster is laggy [ 57.134580][ T6183] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 57.147016][ T6183] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 58.508879][ T54] IPVS: starting estimator thread 0... [ 58.612824][ T6203] IPVS: using max 26 ests per chain, 62400 per kthread [ 60.043054][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 60.850185][ T6257] netlink: 40 bytes leftover after parsing attributes in process `syz.2.40'. [ 60.872288][ T6259] overlayfs: failed to resolve './file1': -2 [ 62.401988][ T10] libceph: connect (1)[c::]:6789 error -101 [ 62.413846][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 62.446051][ T6272] ceph: No mds server is up or the cluster is laggy [ 62.649645][ T6281] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.759858][ T6267] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.830517][ T6283] binder: 6282:6283 ioctl c0306201 0 returned -14 [ 62.899300][ T6267] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.046299][ T6267] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.164310][ T6267] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.289898][ T61] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.311154][ T61] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.333292][ T1157] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.352508][ T1157] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.998245][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.000906][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.883900][ T6329] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.951724][ T6329] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.459367][ T6329] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.580552][ T6329] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.670825][ T1139] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.678346][ T1139] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.687781][ T1139] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.695877][ T1139] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.053459][ T839] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 73.875836][ T6369] overlayfs: failed to resolve './file1': -2 [ 74.118869][ T6371] netlink: 40 bytes leftover after parsing attributes in process `syz.0.57'. [ 81.563503][ T839] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 81.683087][ T34] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 81.892524][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 81.922392][ T34] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 81.929304][ T34] usb 7-1: config 0 has no interface number 0 [ 81.933897][ T34] usb 7-1: config 0 interface 184 has no altsetting 0 [ 81.940713][ T34] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 81.945900][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.948557][ T34] usb 7-1: Product: syz [ 81.949938][ T34] usb 7-1: Manufacturer: syz [ 81.951488][ T34] usb 7-1: SerialNumber: syz [ 81.960159][ T34] usb 7-1: config 0 descriptor?? [ 81.969222][ T34] smsc75xx v1.0.0 [ 81.971115][ T34] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 81.975447][ T34] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -22 [ 83.377051][ T6473] netlink: 40 bytes leftover after parsing attributes in process `syz.1.73'. [ 83.456223][ T6474] overlayfs: failed to resolve './file1': -2 [ 84.268586][ T839] usb 7-1: USB disconnect, device number 2 [ 84.681482][ T6495] 9pnet_virtio: no channels available for device syz [ 86.347322][ T6489] process 'syz.3.75' launched './file1' with NULL argv: empty string added [ 99.694906][ T6534] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.055957][ T6518] ALSA: mixer_oss: invalid OSS volume '' [ 101.052641][ T6550] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.056232][ T6550] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.209717][ T6550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.230282][ T6550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.699374][ T85] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.702741][ T85] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.705543][ T85] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.709114][ T85] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.853128][ T6559] lo speed is unknown, defaulting to 1000 [ 101.982670][ T6559] lo speed is unknown, defaulting to 1000 [ 101.987011][ T6559] lo speed is unknown, defaulting to 1000 [ 102.004255][ T6559] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 102.035428][ T6559] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 102.472027][ T6559] lo speed is unknown, defaulting to 1000 [ 102.483521][ T6559] lo speed is unknown, defaulting to 1000 [ 102.498436][ T6559] lo speed is unknown, defaulting to 1000 [ 102.508454][ T6559] lo speed is unknown, defaulting to 1000 [ 102.710838][ T6558] ALSA: mixer_oss: invalid OSS volume '' [ 103.275208][ T6579] netlink: 84 bytes leftover after parsing attributes in process `syz.3.91'. [ 103.975518][ T6589] netlink: 'syz.1.92': attribute type 10 has an invalid length. [ 104.744618][ T6602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.95'. [ 105.540394][ T6607] ubi31: attaching mtd0 [ 105.548914][ T6607] ubi31: scanning is finished [ 105.550862][ T6607] ubi31: empty MTD device detected [ 105.754347][ T6607] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 105.774128][ T6607] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 105.777256][ T6607] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 105.780204][ T6607] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 105.796965][ T6616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.98'. [ 105.881817][ T6607] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 105.887270][ T6607] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 105.910639][ T6607] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2981545735 [ 105.925232][ T6607] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 105.953219][ T6613] ubi31: background thread "ubi_bgt31d" started, PID 6613 [ 106.068929][ T6595] kexec: Could not allocate control_code_buffer [ 106.947146][ T6630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.100'. [ 106.970250][ T6630] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 108.947771][ T6656] 9pnet_virtio: no channels available for device syz [ 109.065130][ T6657] overlayfs: failed to resolve './file1': -2 [ 111.009157][ T6670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.108'. [ 111.969684][ T6669] kexec: Could not allocate control_code_buffer [ 112.354885][ T6681] ubi: mtd0 is already attached to ubi31 [ 112.969067][ T6676] ALSA: mixer_oss: invalid OSS volume '' [ 113.397541][ T6691] netlink: 84 bytes leftover after parsing attributes in process `syz.2.113'. [ 113.854253][ T6698] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 114.072207][ T6706] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.116'. [ 114.107190][ T6703] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.116'. [ 114.780060][ T6711] veth0: entered promiscuous mode [ 115.725560][ T6710] veth0: left promiscuous mode [ 115.919619][ T6724] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.922382][ T6724] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.212275][ T6724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.254974][ T6724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.560793][ T1144] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.564821][ T1144] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.568566][ T1144] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.572549][ T1144] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.451451][ T6743] trusted_key: encrypted_key: key user:syz not found [ 117.977197][ T6748] overlayfs: failed to resolve './file1': -2 [ 119.069596][ T6751] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 119.564323][ T6763] siw: device registration error -23 [ 119.673130][ T6768] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.133'. [ 119.676157][ T6766] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.133'. [ 123.544048][ T6811] ALSA: mixer_oss: invalid OSS volume '' [ 124.554735][ T6839] siw: device registration error -23 [ 124.743754][ T40] audit: type=1804 audit(1755978147.257:2): pid=6847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.151" name="/newroot/39/bus/bus" dev="overlay" ino=244 res=1 errno=0 [ 124.757533][ T6848] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.150'. [ 124.760680][ T6844] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.150'. [ 128.248115][ T6880] ALSA: mixer_oss: invalid OSS volume '' [ 130.754657][ T6927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.171'. [ 130.797580][ T6927] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.803883][ T55] lo speed is unknown, defaulting to 1000 [ 132.434992][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.437757][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.441376][ T6946] fuse: Bad value for 'fd' [ 132.511496][ T6932] ALSA: mixer_oss: invalid OSS volume '' [ 133.826990][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 133.829429][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 133.831672][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 133.835403][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 133.837789][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 133.840142][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 133.844787][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 133.847161][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 133.849531][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 133.852091][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 133.856648][ T6966] netlink: 'syz.2.182': attribute type 21 has an invalid length. [ 133.886723][ T10] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [Zw[ba|\rn)A#6oү?aIs5hV3(; [ 133.886723][ T10] ѝP$zɷX$w[SRezxuSrl[5l'ZCz2] on tDKY縣Ϫ򞿹,UOp{"ixA[ewÒ}ZXA [ 135.478685][ T6981] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 135.481379][ T6981] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 135.486411][ T6981] vhci_hcd vhci_hcd.0: Device attached [ 135.494214][ T6981] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(10) [ 135.496585][ T6981] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 135.499213][ T6981] vhci_hcd vhci_hcd.0: Device attached [ 135.555301][ T6981] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(12) [ 135.558077][ T6981] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 135.572552][ T6981] vhci_hcd vhci_hcd.0: Device attached [ 135.624789][ T6981] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(14) [ 135.627044][ T6981] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 135.631353][ T6981] vhci_hcd vhci_hcd.0: Device attached [ 135.636444][ T6988] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(18) [ 135.638574][ T6988] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 135.653662][ T6988] vhci_hcd vhci_hcd.0: Device attached [ 135.662576][ T839] vhci_hcd: vhci_device speed not set [ 135.704350][ T6981] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(17) [ 135.706502][ T6981] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 135.709070][ T6981] vhci_hcd vhci_hcd.0: Device attached [ 135.722661][ T839] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 135.787515][ T6981] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 135.792164][ T6981] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 135.796781][ T6981] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 135.804189][ T6981] vhci_hcd vhci_hcd.0: port 0 already used [ 135.828381][ T6990] vhci_hcd: connection closed [ 135.829845][ T6994] vhci_hcd: connection closed [ 135.831478][ T6986] vhci_hcd: connection closed [ 135.833838][ T6984] vhci_hcd: connection closed [ 135.834945][ T6992] vhci_hcd: connection closed [ 135.838413][ T6982] vhci_hcd: connection reset by peer [ 135.844175][ T85] vhci_hcd: stop threads [ 135.846075][ T85] vhci_hcd: release socket [ 135.848403][ T85] vhci_hcd: disconnect device [ 135.878817][ T85] vhci_hcd: stop threads [ 135.880239][ T85] vhci_hcd: release socket [ 135.881980][ T85] vhci_hcd: disconnect device [ 135.886309][ T85] vhci_hcd: stop threads [ 135.887859][ T85] vhci_hcd: release socket [ 135.889234][ T6999] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 135.889462][ T85] vhci_hcd: disconnect device [ 135.894103][ T6999] veth1_to_bond: entered allmulticast mode [ 135.894427][ T85] vhci_hcd: stop threads [ 135.897870][ T85] vhci_hcd: release socket [ 135.899396][ T85] vhci_hcd: disconnect device [ 135.900728][ T6999] ubi31: detaching mtd0 [ 135.904002][ T85] vhci_hcd: stop threads [ 135.905494][ T85] vhci_hcd: release socket [ 135.906995][ T85] vhci_hcd: disconnect device [ 135.908644][ T85] vhci_hcd: stop threads [ 135.909294][ T6999] ubi31: mtd0 is detached [ 135.910729][ T85] vhci_hcd: release socket [ 135.913681][ T85] vhci_hcd: disconnect device [ 135.923473][ T6998] veth1_to_bond: left allmulticast mode [ 135.965069][ T55] IPVS: starting estimator thread 0... [ 136.062557][ T7003] IPVS: using max 24 ests per chain, 57600 per kthread [ 137.457269][ T7014] block nbd2: shutting down sockets [ 137.680635][ T7026] 9pnet_virtio: no channels available for device syz [ 139.553274][ T7054] lo speed is unknown, defaulting to 1000 [ 139.602912][ T40] audit: type=1326 audit(1755978162.107:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.1.199" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 139.652674][ T40] audit: type=1326 audit(1755978162.107:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.1.199" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 139.682242][ T40] audit: type=1326 audit(1755978162.127:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.1.199" exe="/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 139.690343][ T40] audit: type=1326 audit(1755978162.127:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.1.199" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 139.702507][ T40] audit: type=1326 audit(1755978162.127:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.1.199" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 139.712571][ T40] audit: type=1326 audit(1755978162.127:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.1.199" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 139.722643][ T40] audit: type=1326 audit(1755978162.127:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.1.199" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 139.732594][ T40] audit: type=1326 audit(1755978162.127:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.1.199" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 139.743029][ T40] audit: type=1326 audit(1755978162.127:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.1.199" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 139.753615][ T40] audit: type=1326 audit(1755978162.127:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.1.199" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 140.982613][ T839] vhci_hcd: vhci_device speed not set [ 141.167328][ T7065] ALSA: mixer_oss: invalid OSS volume '' [ 142.285704][ T24] usb usb40-port1: attempt power cycle [ 142.511070][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.210'. [ 142.889304][ T7107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.897130][ T7107] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.017399][ T7107] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 143.037078][ T24] usb usb40-port1: unable to enumerate USB device [ 144.423464][ T7135] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 144.553010][ T839] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 145.496295][ T7162] trusted_key: encrypted_key: key user:syz not found [ 145.843656][ T7145] ALSA: mixer_oss: invalid OSS volume '' [ 148.438360][ T7183] ALSA: mixer_oss: invalid OSS volume '' [ 154.939053][ T7206] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 154.942009][ T7206] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 154.945351][ T7206] vhci_hcd vhci_hcd.0: Device attached [ 154.986749][ T7208] vhci_hcd: connection closed [ 154.988587][ T41] vhci_hcd: stop threads [ 154.991827][ T41] vhci_hcd: release socket [ 154.994539][ T41] vhci_hcd: disconnect device [ 155.215812][ T7213] lo speed is unknown, defaulting to 1000 [ 155.233101][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 156.819497][ T7232] ALSA: mixer_oss: invalid OSS volume '' [ 158.082379][ T7273] vivid-000: disconnect [ 158.086596][ T7273] vivid-000: reconnect [ 158.217305][ T7275] trusted_key: encrypted_key: key user:syz not found [ 158.384575][ T7259] ALSA: mixer_oss: invalid OSS volume '' [ 165.922040][ T7304] Illegal XDP return value 4294967274 on prog (id 68) dev N/A, expect packet loss! [ 166.243033][ T7299] tipc: Started in network mode [ 166.245316][ T7299] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 166.247716][ T7299] tipc: Enabled bearer , priority 0 [ 166.281449][ T7296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.239'. [ 166.386629][ T7301] netdevsim netdevsim2: Direct firmware load for . [ 166.386629][ T7301] failed with error -2 [ 166.405384][ T7301] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 166.405384][ T7301] [ 167.243957][ T10] tipc: Node number set to 11578026 [ 167.303100][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 169.206467][ T7340] ALSA: mixer_oss: invalid OSS volume '' [ 170.399683][ T5982] Bluetooth: hci2: command 0x0406 tx timeout [ 170.402190][ T5982] Bluetooth: hci0: command 0x0406 tx timeout [ 170.406076][ T5982] Bluetooth: hci1: command 0x0406 tx timeout [ 178.075213][ T40] kauditd_printk_skb: 217 callbacks suppressed [ 178.075223][ T40] audit: type=1326 audit(1755978200.597:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.1.254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 178.090777][ T40] audit: type=1326 audit(1755978200.607:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.1.254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 178.121971][ T40] audit: type=1326 audit(1755978200.637:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.1.254" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 178.169245][ T40] audit: type=1326 audit(1755978200.637:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.1.254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 178.185755][ T40] audit: type=1326 audit(1755978200.637:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.1.254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 178.199925][ T40] audit: type=1326 audit(1755978200.647:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.1.254" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 178.227651][ T40] audit: type=1326 audit(1755978200.647:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.1.254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 178.244975][ T40] audit: type=1326 audit(1755978200.647:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.1.254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 178.254589][ T40] audit: type=1326 audit(1755978200.657:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.1.254" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 178.270762][ T40] audit: type=1326 audit(1755978200.657:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.1.254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 180.200861][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.260'. [ 180.205471][ T7430] netlink: 24 bytes leftover after parsing attributes in process `syz.3.260'. [ 180.209806][ T7430] netlink: 24 bytes leftover after parsing attributes in process `syz.3.260'. [ 180.447074][ T7437] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 181.318319][ T1472] IPVS: starting estimator thread 0... [ 181.772670][ T7444] IPVS: using max 43 ests per chain, 103200 per kthread [ 181.842344][ T7456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.266'. [ 181.903979][ T7462] capability: warning: `syz.3.266' uses deprecated v2 capabilities in a way that may be insecure [ 182.427451][ T24] hid_parser_main: 6 callbacks suppressed [ 182.427463][ T24] hid-generic 0000:FFFFFFFE:0000.0003: unknown main item tag 0x0 [ 182.475983][ T24] hid-generic 0000:FFFFFFFE:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 184.131015][ T7484] ubi31: attaching mtd0 [ 184.133496][ T7484] ubi31: scanning is finished [ 184.266664][ T7484] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 184.269046][ T7484] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 184.271319][ T7484] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 184.273592][ T7484] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 184.275940][ T7484] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 184.278152][ T7484] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 184.280657][ T7484] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2981545735 [ 184.284021][ T7484] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 184.290493][ T7492] ubi31: background thread "ubi_bgt31d" started, PID 7492 [ 184.363717][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 184.363729][ T40] audit: type=1804 audit(1755978206.887:260): pid=7493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.270" name="/newroot/68/file0/file0" dev="9p" ino=35913915 res=1 errno=0 [ 187.480180][ T7523] lo speed is unknown, defaulting to 1000 [ 188.562180][ T7538] IPVS: length: 139 != 8 [ 188.933315][ T7547] ubi: mtd0 is already attached to ubi31 [ 189.861579][ T7560] : entered promiscuous mode [ 189.881532][ T7560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.284'. [ 190.167710][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.170204][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.777378][ T40] audit: type=1804 audit(1755978213.297:261): pid=7568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.287" name="/newroot/70/bus/bus" dev="overlay" ino=429 res=1 errno=0 [ 190.819502][ T40] audit: type=1804 audit(1755978213.337:262): pid=7568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.287" name="/newroot/70/bus/bus" dev="overlay" ino=429 res=1 errno=0 [ 193.877529][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.879569][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.988354][ T5980] Bluetooth: hci1: unexpected event 0x14 length: 20 > 6 [ 194.491184][ T7605] block nbd3: Attempted send on invalid socket [ 194.497582][ T7605] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 194.501658][ T7605] ADFS-fs (nbd3): error: unable to read block 3, try 0 [ 195.143756][ T7612] ubi: mtd0 is already attached to ubi31 [ 197.239206][ T7639] syz.1.304 (7639) used greatest stack depth: 19672 bytes left [ 197.656625][ T7653] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 197.699774][ T7654] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 197.924620][ T7647] Process accounting resumed [ 198.758100][ T7671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.311'. [ 199.035442][ T7671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.090165][ T7671] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.105196][ T7671] tipc: Resetting bearer [ 199.110277][ T7671] tipc: Resetting bearer [ 199.135821][ T7671] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 199.885851][ T1472] IPVS: starting estimator thread 0... [ 200.003592][ T7687] IPVS: using max 43 ests per chain, 103200 per kthread [ 200.666082][ C2] vcan0: j1939_tp_rxtimer: 0xffff88806034ec00: rx timeout, send abort [ 200.670453][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff88806034ec00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 200.919938][ T7703] Zero length message leads to an empty skb [ 201.795509][ T7709] program syz.2.319 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 202.840791][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.321'. [ 202.853543][ T7725] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 202.853543][ T7725] program syz.0.321 not setting count and/or reply_len properly [ 203.335130][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.353863][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.862721][ T7729] lo speed is unknown, defaulting to 1000 [ 204.089204][ T7731] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 205.386252][ T7749] ubi: mtd0 is already attached to ubi31 [ 206.542323][ T7758] cgroup: fork rejected by pids controller in /syz1 [ 207.365996][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.333'. [ 207.655023][ T7809] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 207.894392][ T7816] netlink: 'syz.2.336': attribute type 1 has an invalid length. [ 208.246488][ T7823] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 208.578470][ T7826] input: syz0 as /devices/virtual/input/input5 [ 209.066201][ T7838] : entered promiscuous mode [ 209.077035][ T7838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.340'. [ 210.474408][ T5980] Bluetooth: hci3: unexpected event 0x14 length: 20 > 6 [ 210.928978][ T7865] block nbd0: Attempted send on invalid socket [ 210.934959][ T7865] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 210.938900][ T7865] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 212.017371][ T7878] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 215.257452][ C2] vcan0: j1939_tp_rxtimer: 0xffff888013b60000: rx timeout, send abort [ 215.260338][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff888013b60000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 216.916327][ T7946] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 217.827849][ T7957] 9p: Unknown Cache mode or invalid value fscac [ 218.891963][ T7970] netlink: 'syz.1.377': attribute type 1 has an invalid length. [ 223.416080][ T8026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.381'. [ 223.432207][ T8026] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 223.432207][ T8026] program syz.1.381 not setting count and/or reply_len properly [ 224.330675][ C2] vcan0: j1939_tp_rxtimer: 0xffff888012983800: rx timeout, send abort [ 224.333722][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff888012983800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 224.497965][ T8036] netlink: 'syz.0.382': attribute type 1 has an invalid length. [ 225.144596][ T8046] warning: `syz.2.386' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 228.034736][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.396'. [ 228.038451][ T8093] netlink: 24 bytes leftover after parsing attributes in process `syz.0.396'. [ 228.042172][ T8093] netlink: 24 bytes leftover after parsing attributes in process `syz.0.396'. [ 228.623452][ T24] lo speed is unknown, defaulting to 1000 [ 228.625132][ T24] syz0: Port: 1 Link DOWN [ 229.387101][ T40] audit: type=1326 audit(1755978251.907:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8110 comm="syz.1.400" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x0 [ 229.762533][ T1342] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 229.912577][ T1342] usb 6-1: Using ep0 maxpacket: 8 [ 229.925519][ T1342] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 229.928680][ T1342] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 229.940905][ T1342] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 229.948286][ T1342] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 229.963016][ T1342] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 229.969495][ T1342] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 229.981698][ T1342] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 229.992815][ T1342] usb 6-1: config 168 interface 0 has no altsetting 0 [ 230.002363][ T1342] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 230.009730][ T1342] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 230.019545][ T1342] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 230.031799][ T1342] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 230.050079][ T1342] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 230.061003][ T1342] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 230.074203][ T1342] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 230.079977][ T1342] usb 6-1: config 168 interface 0 has no altsetting 0 [ 230.115760][ T1342] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 230.118843][ T1342] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 230.123801][ T1342] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 230.128925][ T1342] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 230.135364][ T1342] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 230.140168][ T1342] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 230.156017][ T1342] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 230.167316][ T1342] usb 6-1: config 168 interface 0 has no altsetting 0 [ 230.176085][ T1342] usb 6-1: string descriptor 0 read error: -22 [ 230.178874][ T1342] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 230.193765][ T1342] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.261847][ T1342] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 230.300046][ T8125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.403'. [ 231.397069][ T840] usb 6-1: USB disconnect, device number 2 [ 233.455133][ T8161] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 233.457455][ T8161] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 233.478737][ T8161] vhci_hcd vhci_hcd.0: Device attached [ 233.510987][ T8161] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(12) [ 233.513126][ T8161] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 233.518245][ T8161] vhci_hcd vhci_hcd.0: Device attached [ 233.522800][ T8161] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 233.534891][ T8161] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(17) [ 233.537331][ T8161] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 233.540601][ T8161] vhci_hcd vhci_hcd.0: Device attached [ 233.544407][ T8161] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 233.550636][ T8161] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(21) [ 233.552739][ T8161] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 233.562502][ T8161] vhci_hcd vhci_hcd.0: Device attached [ 233.565749][ T8161] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 233.579799][ T8167] vhci_hcd: connection closed [ 233.580172][ T8164] vhci_hcd: connection closed [ 233.580224][ T8162] vhci_hcd: connection closed [ 233.581704][ T12] vhci_hcd: stop threads [ 233.581716][ T12] vhci_hcd: release socket [ 233.581723][ T12] vhci_hcd: disconnect device [ 233.582309][ T8170] vhci_hcd: connection closed [ 233.584666][ T12] vhci_hcd: stop threads [ 233.593653][ T12] vhci_hcd: release socket [ 233.595123][ T12] vhci_hcd: disconnect device [ 233.600333][ T12] vhci_hcd: stop threads [ 233.601766][ T12] vhci_hcd: release socket [ 233.603437][ T12] vhci_hcd: disconnect device [ 233.605042][ T12] vhci_hcd: stop threads [ 233.606442][ T12] vhci_hcd: release socket [ 233.607942][ T12] vhci_hcd: disconnect device [ 233.652890][ T1342] vhci_hcd: vhci_device speed not set [ 236.024497][ T8202] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 236.028979][ T8202] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 236.361257][ T8212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.421'. [ 236.365194][ T8212] netlink: 24 bytes leftover after parsing attributes in process `syz.2.421'. [ 236.369447][ T8212] netlink: 24 bytes leftover after parsing attributes in process `syz.2.421'. [ 236.555347][ T8215] netlink: 'syz.0.419': attribute type 1 has an invalid length. [ 236.567444][ T8215] netlink: 224 bytes leftover after parsing attributes in process `syz.0.419'. [ 238.269052][ T40] audit: type=1326 audit(1755978260.787:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8235 comm="syz.2.426" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 238.279534][ T40] audit: type=1326 audit(1755978260.797:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8235 comm="syz.2.426" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 238.290917][ T40] audit: type=1326 audit(1755978260.807:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8235 comm="syz.2.426" exe="/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 238.302390][ T40] audit: type=1326 audit(1755978260.807:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8235 comm="syz.2.426" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 238.309725][ T40] audit: type=1326 audit(1755978260.807:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8235 comm="syz.2.426" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 238.317153][ T40] audit: type=1326 audit(1755978260.817:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8235 comm="syz.2.426" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 238.324221][ T40] audit: type=1326 audit(1755978260.817:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8235 comm="syz.2.426" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 238.331803][ T40] audit: type=1326 audit(1755978260.817:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8235 comm="syz.2.426" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 238.339461][ T40] audit: type=1326 audit(1755978260.817:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8235 comm="syz.2.426" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 238.347856][ T40] audit: type=1326 audit(1755978260.817:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8235 comm="syz.2.426" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 238.620227][ T8239] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 238.622359][ T8239] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 238.632582][ T8239] vhci_hcd vhci_hcd.0: Device attached [ 238.644900][ T8239] usb usb8: usbfs: process 8239 (syz.2.426) did not claim interface 0 before use [ 239.474642][ T8240] vhci_hcd: connection closed [ 239.474978][ T1157] vhci_hcd: stop threads [ 239.479749][ T1157] vhci_hcd: release socket [ 239.481906][ T1157] vhci_hcd: disconnect device [ 241.801210][ T8268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.432'. [ 241.805273][ T8268] netlink: 24 bytes leftover after parsing attributes in process `syz.1.432'. [ 241.809458][ T8268] netlink: 24 bytes leftover after parsing attributes in process `syz.1.432'. [ 242.035600][ T5980] Bluetooth: hci3: command 0x0406 tx timeout [ 242.782513][ T8278] ceph: No mds server is up or the cluster is laggy [ 242.798314][ T8283] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 242.801214][ T8283] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 242.804110][ T8283] vhci_hcd vhci_hcd.0: Device attached [ 242.807653][ T1472] libceph: connect (1)[c::]:6789 error -101 [ 242.811779][ T1472] libceph: mon0 (1)[c::]:6789 connect error [ 243.239350][ T1472] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 243.421210][ T8284] vhci_hcd: connection reset by peer [ 243.470940][ T85] vhci_hcd: stop threads [ 243.475354][ T85] vhci_hcd: release socket [ 243.499619][ T85] vhci_hcd: disconnect device [ 244.647487][ T8310] netlink: 'syz.1.438': attribute type 1 has an invalid length. [ 244.803237][ T8310] netlink: 224 bytes leftover after parsing attributes in process `syz.1.438'. [ 245.663269][ T8325] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 245.666156][ T8325] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 245.675934][ T8325] vhci_hcd vhci_hcd.0: Device attached [ 245.681087][ T8325] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(13) [ 245.684161][ T8325] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 245.688000][ T8325] vhci_hcd vhci_hcd.0: Device attached [ 245.694330][ T8325] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(15) [ 245.697130][ T8325] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 245.700492][ T8325] vhci_hcd vhci_hcd.0: Device attached [ 245.704362][ T8325] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 245.709771][ T8325] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(19) [ 245.712548][ T8325] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 245.716366][ T8325] vhci_hcd vhci_hcd.0: Device attached [ 245.720683][ T8325] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(21) [ 245.723486][ T8325] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 245.727149][ T8325] vhci_hcd vhci_hcd.0: Device attached [ 245.730774][ T8325] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 245.736480][ T8325] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(25) [ 245.739196][ T8325] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 245.742718][ T8325] vhci_hcd vhci_hcd.0: Device attached [ 245.746010][ T8325] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 245.758317][ T8336] vhci_hcd: connection closed [ 245.759024][ T8334] vhci_hcd: connection closed [ 245.760367][ T8328] vhci_hcd: connection closed [ 245.763136][ T8332] vhci_hcd: connection closed [ 245.765299][ T85] vhci_hcd: stop threads [ 245.765561][ T8326] vhci_hcd: connection closed [ 245.767357][ T85] vhci_hcd: release socket [ 245.772309][ T85] vhci_hcd: disconnect device [ 245.776804][ T8330] vhci_hcd: connection closed [ 245.778106][ T85] vhci_hcd: stop threads [ 245.782100][ T85] vhci_hcd: release socket [ 245.784201][ T85] vhci_hcd: disconnect device [ 245.786732][ T85] vhci_hcd: stop threads [ 245.788715][ T85] vhci_hcd: release socket [ 245.790617][ T85] vhci_hcd: disconnect device [ 245.793257][ T85] vhci_hcd: stop threads [ 245.795075][ T85] vhci_hcd: release socket [ 245.797143][ T85] vhci_hcd: disconnect device [ 245.800489][ T85] vhci_hcd: stop threads [ 245.802367][ T85] vhci_hcd: release socket [ 245.805632][ T85] vhci_hcd: disconnect device [ 245.808101][ T85] vhci_hcd: stop threads [ 245.810117][ T85] vhci_hcd: release socket [ 245.812264][ T85] vhci_hcd: disconnect device [ 246.829793][ T8343] netlink: 32 bytes leftover after parsing attributes in process `syz.2.444'. [ 246.833865][ T8343] netlink: 32 bytes leftover after parsing attributes in process `syz.2.444'. [ 246.867391][ T8343] netlink: 32 bytes leftover after parsing attributes in process `syz.2.444'. [ 246.871264][ T8343] netlink: 32 bytes leftover after parsing attributes in process `syz.2.444'. [ 246.921543][ T8343] netlink: 32 bytes leftover after parsing attributes in process `syz.2.444'. [ 246.925533][ T8343] netlink: 32 bytes leftover after parsing attributes in process `syz.2.444'. [ 247.117414][ T8347] Process accounting resumed [ 247.167879][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 247.167893][ T40] audit: type=1326 audit(1755978269.687:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8356 comm="syz.0.455" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x0 [ 247.230368][ T40] audit: type=1326 audit(1755978269.747:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.3.448" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 247.253544][ T40] audit: type=1326 audit(1755978269.747:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.3.448" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 247.259546][ T40] audit: type=1326 audit(1755978269.747:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.3.448" exe="/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 247.336451][ T40] audit: type=1326 audit(1755978269.747:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.3.448" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 247.346123][ T40] audit: type=1326 audit(1755978269.747:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.3.448" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 247.356512][ T40] audit: type=1326 audit(1755978269.747:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.3.448" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 247.366575][ T40] audit: type=1326 audit(1755978269.747:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.3.448" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 247.376889][ T40] audit: type=1326 audit(1755978269.747:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.3.448" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 247.386011][ T40] audit: type=1326 audit(1755978269.747:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.3.448" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 247.502766][ T8370] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 247.504956][ T8370] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 247.518397][ T8370] vhci_hcd vhci_hcd.0: Device attached [ 247.560693][ T8370] usb usb8: usbfs: process 8370 (syz.3.448) did not claim interface 0 before use [ 247.922589][ T6556] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 248.363276][ T1472] vhci_hcd: vhci_device speed not set [ 248.459074][ T8371] vhci_hcd: connection reset by peer [ 248.461088][ T85] vhci_hcd: stop threads [ 248.462609][ T85] vhci_hcd: release socket [ 248.464095][ T85] vhci_hcd: disconnect device [ 251.484829][ T8406] could not allocate digest TFM handle sha1-ssse3 [ 252.088639][ T8414] netlink: 32 bytes leftover after parsing attributes in process `syz.1.458'. [ 252.091878][ T8414] netlink: 32 bytes leftover after parsing attributes in process `syz.1.458'. [ 252.424721][ T8414] netlink: 32 bytes leftover after parsing attributes in process `syz.1.458'. [ 252.427905][ T8414] netlink: 32 bytes leftover after parsing attributes in process `syz.1.458'. [ 252.499137][ T8414] netlink: 32 bytes leftover after parsing attributes in process `syz.1.458'. [ 252.502171][ T8414] netlink: 32 bytes leftover after parsing attributes in process `syz.1.458'. [ 252.666235][ T8415] Process accounting resumed [ 253.070402][ T6556] vhci_hcd: vhci_device speed not set [ 253.398142][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 253.398155][ T40] audit: type=1326 audit(1755978275.917:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.2.462" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 253.588191][ T40] audit: type=1326 audit(1755978275.917:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.2.462" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 253.597736][ T40] audit: type=1326 audit(1755978275.917:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.2.462" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 253.607594][ T40] audit: type=1326 audit(1755978275.927:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.2.462" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 253.616210][ T40] audit: type=1326 audit(1755978275.927:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.2.462" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 253.628551][ T40] audit: type=1326 audit(1755978275.927:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.2.462" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 253.635546][ T40] audit: type=1326 audit(1755978275.927:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.2.462" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 253.642513][ T40] audit: type=1326 audit(1755978275.927:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.2.462" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 253.650436][ T40] audit: type=1326 audit(1755978275.927:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.2.462" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 253.658683][ T40] audit: type=1326 audit(1755978275.927:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.2.462" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 254.056108][ T8440] can0: slcan on pty22. [ 255.317880][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.320748][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.464668][ T8437] can0 (unregistered): slcan off pty22. [ 258.872066][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.472'. [ 258.975862][ T8510] lo speed is unknown, defaulting to 1000 [ 260.137976][ T8523] ubi: mtd0 is already attached to ubi31 [ 261.189741][ T8529] netlink: 'syz.2.478': attribute type 2 has an invalid length. [ 261.192234][ T8529] netlink: 'syz.2.478': attribute type 4 has an invalid length. [ 263.552950][ T5980] Bluetooth: hci3: command 0x0406 tx timeout [ 264.139410][ T8561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.483'. [ 264.292252][ T8569] lo speed is unknown, defaulting to 1000 [ 266.436468][ T8591] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.441380][ T8591] Bluetooth: MGMT ver 1.23 [ 266.448270][ T8591] netlink: 'syz.2.490': attribute type 29 has an invalid length. [ 266.451327][ T8591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.490'. [ 266.472872][ T8591] lo speed is unknown, defaulting to 1000 [ 267.427991][ T8610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.500'. [ 268.287352][ T8608] kexec: Could not allocate control_code_buffer [ 268.302056][ T8608] Process accounting resumed [ 268.512570][ T5339] Bluetooth: hci0: command 0x0406 tx timeout [ 271.023186][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 271.023202][ T40] audit: type=1326 audit(1755978293.547:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.1.495" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 271.040989][ T40] audit: type=1326 audit(1755978293.547:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.1.495" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 271.049411][ T40] audit: type=1326 audit(1755978293.547:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.1.495" exe="/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 271.059516][ T40] audit: type=1326 audit(1755978293.547:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.1.495" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 271.068850][ T40] audit: type=1326 audit(1755978293.557:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.1.495" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 271.082207][ T40] audit: type=1326 audit(1755978293.557:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.1.495" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 271.096670][ T40] audit: type=1326 audit(1755978293.557:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.1.495" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 271.106961][ T40] audit: type=1326 audit(1755978293.557:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.1.495" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 271.118203][ T40] audit: type=1326 audit(1755978293.557:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.1.495" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 271.131036][ T40] audit: type=1326 audit(1755978293.557:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.1.495" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 271.528406][ T8638] usb usb8: usbfs: process 8638 (syz.1.495) did not claim interface 0 before use [ 271.534578][ T8636] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 271.536682][ T8636] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 271.539229][ T8636] vhci_hcd vhci_hcd.0: Device attached [ 271.782519][ T6556] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 272.665877][ T8637] vhci_hcd: connection reset by peer [ 272.668086][ T85] vhci_hcd: stop threads [ 272.670076][ T85] vhci_hcd: release socket [ 272.673087][ T85] vhci_hcd: disconnect device [ 276.912933][ T6556] vhci_hcd: vhci_device speed not set [ 277.697760][ T8721] ubi: mtd0 is already attached to ubi31 [ 278.304040][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 278.304052][ T40] audit: type=1326 audit(1755978300.827:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8727 comm="syz.3.514" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 278.313776][ T40] audit: type=1326 audit(1755978300.827:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8727 comm="syz.3.514" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 278.332633][ T40] audit: type=1326 audit(1755978300.827:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8727 comm="syz.3.514" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 278.341815][ T40] audit: type=1326 audit(1755978300.827:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8727 comm="syz.3.514" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 278.368313][ T40] audit: type=1326 audit(1755978300.827:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8727 comm="syz.3.514" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 278.377565][ T40] audit: type=1326 audit(1755978300.827:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8727 comm="syz.3.514" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 278.386654][ T40] audit: type=1326 audit(1755978300.827:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8727 comm="syz.3.514" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 278.395662][ T40] audit: type=1326 audit(1755978300.827:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8727 comm="syz.3.514" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 278.404576][ T40] audit: type=1326 audit(1755978300.827:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8727 comm="syz.3.514" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 278.413746][ T40] audit: type=1326 audit(1755978300.837:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8727 comm="syz.3.514" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 279.900053][ T8742] lo speed is unknown, defaulting to 1000 [ 280.715049][ T8757] can0: slcan on pty26. [ 281.926015][ T8781] lo speed is unknown, defaulting to 1000 [ 282.238128][ T8789] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 282.745493][ T8754] can0 (unregistered): slcan off pty26. [ 282.852935][ T8802] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 282.855593][ T8802] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 282.859491][ T8802] vhci_hcd vhci_hcd.0: Device attached [ 283.082172][ T8802] usb usb8: usbfs: process 8802 (syz.0.523) did not claim interface 0 before use [ 283.172593][ T6556] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 283.638669][ T8803] vhci_hcd: connection reset by peer [ 283.639039][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 283.639052][ T40] audit: type=1326 audit(1755978306.157:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.0.523" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 283.641261][ T40] audit: type=1326 audit(1755978306.157:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.0.523" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 283.643838][ T41] vhci_hcd: stop threads [ 283.661823][ T41] vhci_hcd: release socket [ 283.663598][ T41] vhci_hcd: disconnect device [ 283.844756][ T8824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.527'. [ 284.062382][ T8837] tipc: Failed to remove unknown binding: 66,1,1/0:73360629/73360631 [ 284.067936][ T8837] tipc: Failed to remove unknown binding: 66,1,1/0:73360629/73360631 [ 284.268395][ T8837] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.745975][ T8863] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 288.584070][ T6556] vhci_hcd: vhci_device speed not set [ 288.723410][ T8899] netlink: 'syz.0.543': attribute type 27 has an invalid length. [ 288.756526][ T8899] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.760136][ T8899] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.863506][ T8899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.868442][ T8899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.914174][ T41] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.920329][ T41] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.928769][ T8908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.545'. [ 288.932560][ T8908] netlink: 16 bytes leftover after parsing attributes in process `syz.2.545'. [ 288.954645][ T41] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.958654][ T41] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.899950][ T8940] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 291.298794][ T40] audit: type=1804 audit(1755978313.817:419): pid=8941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.550" name="/newroot/138/bus" dev="tmpfs" ino=793 res=1 errno=0 [ 291.423594][ T8939] can0: slcan on pty20. [ 293.212661][ T8935] can0 (unregistered): slcan off pty20. [ 295.711547][ T9019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.563'. [ 297.878456][ T40] audit: type=1326 audit(1755978320.397:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9037 comm="syz.1.566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 297.886974][ T40] audit: type=1326 audit(1755978320.397:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9037 comm="syz.1.566" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 297.894135][ T40] audit: type=1326 audit(1755978320.397:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9037 comm="syz.1.566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 297.900913][ T40] audit: type=1326 audit(1755978320.397:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9037 comm="syz.1.566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 297.909612][ T40] audit: type=1326 audit(1755978320.397:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9037 comm="syz.1.566" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 297.922505][ T40] audit: type=1326 audit(1755978320.397:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9037 comm="syz.1.566" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 297.929320][ T40] audit: type=1326 audit(1755978320.397:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9037 comm="syz.1.566" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 297.955549][ T40] audit: type=1326 audit(1755978320.397:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9037 comm="syz.1.566" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 297.965653][ T40] audit: type=1326 audit(1755978320.397:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9037 comm="syz.1.566" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 297.977476][ T40] audit: type=1326 audit(1755978320.397:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9037 comm="syz.1.566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 298.756560][ T9055] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 298.759391][ T9055] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 298.763620][ T9055] vhci_hcd vhci_hcd.0: Device attached [ 299.036758][ T9055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.572'. [ 299.093031][ T24] usb 38-1: SetAddress Request (2) to port 0 [ 299.096036][ T24] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 299.123775][ T9067] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 300.229321][ T9075] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.307383][ T9060] vhci_hcd: connection reset by peer [ 300.311141][ T41] vhci_hcd: stop threads [ 300.312671][ T41] vhci_hcd: release socket [ 300.314415][ T41] vhci_hcd: disconnect device [ 300.362165][ T9075] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.454892][ T9075] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.547210][ T9075] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.698452][ T1157] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.710521][ T1157] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.726162][ T1157] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.736252][ T1157] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.470814][ T9094] tipc: Failed to remove unknown binding: 66,1,1/0:405510166/405510168 [ 301.474511][ T9094] tipc: Failed to remove unknown binding: 66,1,1/0:405510166/405510168 [ 301.575294][ T9094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.529139][ T9115] lo speed is unknown, defaulting to 1000 [ 303.526700][ T9129] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 303.632912][ C1] vcan0: j1939_tp_rxtimer: 0xffff888020713400: rx timeout, send abort [ 303.637211][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888020713400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 303.997198][ T9127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.585'. [ 304.004199][ T9127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.585'. [ 304.192752][ T24] usb 38-1: device descriptor read/8, error -110 [ 304.583915][ T24] usb usb38-port1: attempt power cycle [ 304.818447][ T9136] lo speed is unknown, defaulting to 1000 [ 305.164784][ T24] usb usb38-port1: unable to enumerate USB device [ 305.638801][ T9147] netlink: 20 bytes leftover after parsing attributes in process `syz.1.590'. [ 305.647631][ T9148] openvswitch: : Dropping previously announced user features [ 305.995555][ T9152] tipc: Failed to remove unknown binding: 66,1,1/11578026:1418742270/1418742272 [ 305.999409][ T9152] tipc: Failed to remove unknown binding: 66,1,1/11578026:1418742270/1418742272 [ 306.090560][ T9152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.853539][ T9196] fuse: Bad value for 'fd' [ 310.735758][ T9202] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 312.767016][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 312.767028][ T40] audit: type=1326 audit(1755978335.287:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9210 comm="syz.0.606" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf711e579 code=0x0 [ 313.348811][ T9232] snd_dummy snd_dummy.0: control 4:2:0:syz0:211 is already present [ 313.355097][ T9232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.610'. [ 313.358473][ T9232] netlink: 16 bytes leftover after parsing attributes in process `syz.0.610'. [ 315.090602][ T9254] nfs: Unknown parameter 'ntext' [ 315.205556][ T9257] bridge2: entered promiscuous mode [ 315.402304][ T9263] tipc: Failed to remove unknown binding: 66,1,1/0:3768396655/3768396657 [ 315.405546][ T9263] tipc: Failed to remove unknown binding: 66,1,1/0:3768396655/3768396657 [ 315.409008][ T9255] "syz.0.614" (9255) uses obsolete ecb(arc4) skcipher [ 315.487879][ T9263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.574767][ T9265] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 315.577068][ T9265] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 315.580147][ T9265] vhci_hcd vhci_hcd.0: Device attached [ 315.628110][ T9265] netdevsim netdevsim1: Direct firmware load for @ failed with error -2 [ 315.631432][ T9265] netdevsim netdevsim1: Falling back to sysfs fallback for: @ [ 315.947307][ T55] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 316.755030][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.757268][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.311610][ T9266] vhci_hcd: connection reset by peer [ 317.313924][ T1144] vhci_hcd: stop threads [ 317.313950][ T1144] vhci_hcd: release socket [ 317.314007][ T1144] vhci_hcd: disconnect device [ 318.492652][ T9297] nfs: Deprecated parameter 'nointr' [ 318.721911][ T9284] [U] R5JCҰ~V6|7KXVZZGR $ [ 318.860537][ T9298] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 318.862771][ T9298] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 318.871594][ T9298] vhci_hcd vhci_hcd.0: Device attached [ 318.879801][ T9298] Device name cannot be null; rc = [-22] [ 318.985007][ T9300] vhci_hcd: connection closed [ 318.986930][ T41] vhci_hcd: stop threads [ 318.990340][ T41] vhci_hcd: release socket [ 319.002872][ T41] vhci_hcd: disconnect device [ 319.082721][ T840] vhci_hcd: vhci_device speed not set [ 321.051689][ T9324] ubi: mtd0 is already attached to ubi31 [ 321.062699][ T55] vhci_hcd: vhci_device speed not set [ 321.971561][ T9333] openvswitch: : Dropping previously announced user features [ 322.335577][ T9343] netlink: 20 bytes leftover after parsing attributes in process `syz.3.631'. [ 323.063845][ T9353] 9pnet_virtio: no channels available for device syz [ 323.385184][ T9359] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 323.387393][ T9359] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 323.390247][ T9359] vhci_hcd vhci_hcd.0: Device attached [ 323.532109][ T9363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.637'. [ 323.550495][ T9363] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 323.550495][ T9363] program syz.3.637 not setting count and/or reply_len properly [ 323.982307][ T9366] delete_channel: no stack [ 324.002553][ T55] usb 42-1: SetAddress Request (2) to port 0 [ 324.008895][ T55] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 324.051563][ T9360] vhci_hcd: connection reset by peer [ 324.055682][ T1144] vhci_hcd: stop threads [ 324.057093][ T1144] vhci_hcd: release socket [ 324.058573][ T1144] vhci_hcd: disconnect device [ 325.223839][ T9375] tipc: Resetting bearer [ 325.226734][ T9375] bridge_slave_0: left allmulticast mode [ 325.229102][ T9375] bridge_slave_0: left promiscuous mode [ 325.231665][ T9375] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.332096][ T9381] netlink: 16 bytes leftover after parsing attributes in process `syz.1.647'. [ 325.340897][ T9375] bridge_slave_1: left allmulticast mode [ 325.343628][ T9375] bridge_slave_1: left promiscuous mode [ 325.346489][ T9375] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.353304][ T9375] bond0: (slave bond_slave_0): Releasing backup interface [ 325.357906][ T9375] bond0: (slave bond_slave_1): Releasing backup interface [ 325.362466][ T9375] team0: Port device team_slave_0 removed [ 325.365380][ T9375] team0: Port device team_slave_1 removed [ 325.367746][ T9375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.371075][ T9375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.381067][ T9375] bond0: (slave wlan1): Releasing backup interface [ 325.386378][ T9381] netlink: 16 bytes leftover after parsing attributes in process `syz.1.647'. [ 325.389918][ T9378] vlan0: entered promiscuous mode [ 325.418605][ T9375] tipc: Enabling of bearer rejected, already enabled [ 325.545401][ T9376] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 326.075095][ T40] audit: type=1400 audit(1755978348.597:453): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=9394 comm="syz.1.643" [ 327.227187][ T9405] lo speed is unknown, defaulting to 1000 [ 327.430006][ T9408] netlink: 20 bytes leftover after parsing attributes in process `syz.0.645'. [ 327.812536][ T24] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 327.975874][ T24] usb 6-1: config 195 has an invalid interface number: 145 but max is 0 [ 327.979543][ T24] usb 6-1: config 195 has no interface number 0 [ 327.982541][ T24] usb 6-1: config 195 interface 145 has no altsetting 0 [ 328.005523][ T24] usb 6-1: New USB device found, idVendor=055f, idProduct=c211, bcdDevice=9b.e4 [ 328.085500][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.088904][ T24] usb 6-1: Product: syz [ 328.103968][ T24] usb 6-1: Manufacturer: syz [ 328.105817][ T24] usb 6-1: SerialNumber: syz [ 328.390353][ T9417] ubi: mtd0 is already attached to ubi31 [ 328.431548][ T9416] netlink: 56 bytes leftover after parsing attributes in process `syz.0.650'. [ 328.587760][ T24] gspca_main: sunplus-2.14.0 probing 055f:c211 [ 328.603279][ T24] gspca_sunplus: reg_r err -71 [ 329.080876][ T55] usb 42-1: device descriptor read/8, error -110 [ 329.517662][ T9423] block device autoloading is deprecated and will be removed. [ 329.813147][ T24] sunplus 6-1:195.145: probe with driver sunplus failed with error -71 [ 329.824038][ T24] usb 6-1: USB disconnect, device number 3 [ 330.293210][ T55] usb usb42-port1: attempt power cycle [ 330.317817][ T40] audit: type=1326 audit(1755978352.837:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9424 comm="syz.1.652" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f54579 code=0x0 [ 330.972995][ T55] usb usb42-port1: unable to enumerate USB device [ 331.204842][ T9457] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 331.263104][ T9458] syz.0.658 uses obsolete (PF_INET,SOCK_PACKET) [ 332.367569][ T9477] hid-generic 0003:0627:0001.0001: pid 9477 passed too short report [ 332.518482][ T9487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.661'. [ 332.655364][ T9488] lo speed is unknown, defaulting to 1000 [ 332.801646][ T9489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.664'. [ 332.815774][ T9489] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 332.815774][ T9489] program syz.1.664 not setting count and/or reply_len properly [ 334.354765][ T9505] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 334.358467][ T9505] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 334.396577][ T9505] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 334.399671][ T9505] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 334.414401][ T9505] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 334.417336][ T9505] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 335.792676][ T5980] Bluetooth: hci1: command 0x0406 tx timeout [ 336.443207][ T5980] Bluetooth: hci3: command 0x0406 tx timeout [ 336.446549][ T5339] Bluetooth: hci2: command 0x0406 tx timeout [ 337.873704][ T5339] Bluetooth: hci1: command 0x0406 tx timeout [ 338.641170][ T5339] Bluetooth: hci2: command 0x0406 tx timeout [ 338.641216][ T5980] Bluetooth: hci3: command 0x0406 tx timeout [ 339.168242][ T9567] lo speed is unknown, defaulting to 1000 [ 340.533573][ T9589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.684'. [ 340.797532][ T9583] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 340.797532][ T9583] program syz.2.684 not setting count and/or reply_len properly [ 341.750302][ T9598] fuse: Bad value for 'fd' [ 341.759122][ T9598] geneve2: entered promiscuous mode [ 341.761384][ T9598] geneve2: entered allmulticast mode [ 341.768451][ T85] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 341.773357][ T85] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 341.777918][ T85] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 341.778174][ T85] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 342.991938][ T40] audit: type=1326 audit(1755978365.507:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9601 comm="syz.0.697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 343.007472][ T40] audit: type=1326 audit(1755978365.517:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9601 comm="syz.0.697" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 343.019390][ T40] audit: type=1326 audit(1755978365.517:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9601 comm="syz.0.697" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf711e5a7 code=0x7ffc0000 [ 343.027429][ T40] audit: type=1326 audit(1755978365.517:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9601 comm="syz.0.697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 343.035818][ T40] audit: type=1326 audit(1755978365.517:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9601 comm="syz.0.697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 343.043969][ T40] audit: type=1326 audit(1755978365.517:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9601 comm="syz.0.697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 343.050885][ T40] audit: type=1326 audit(1755978365.517:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9601 comm="syz.0.697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 343.059387][ T40] audit: type=1326 audit(1755978365.517:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9601 comm="syz.0.697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 343.062696][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f99ac00: rx timeout, send abort [ 343.066435][ T40] audit: type=1326 audit(1755978365.517:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9601 comm="syz.0.697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 343.070473][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805f99ac00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 343.078066][ T40] audit: type=1326 audit(1755978365.517:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9601 comm="syz.0.697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 343.180491][ T9603] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 343.612639][ T1342] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 343.764599][ T1342] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.768359][ T1342] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 343.775851][ T1342] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 343.779762][ T1342] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.798432][ T1342] usb 6-1: config 0 descriptor?? [ 344.214156][ T9602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.225995][ T9602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.419772][ T1342] usb 6-1: string descriptor 0 read error: -71 [ 344.426742][ T1342] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 344.432739][ T1342] usb 6-1: USB disconnect, device number 4 [ 345.213194][ T9635] "syz.1.694" (9635) uses obsolete ecb(arc4) skcipher [ 345.258511][ T9635] bridge1: entered promiscuous mode [ 345.419292][ T9640] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 345.423605][ T9640] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 346.248332][ T9642] /dev/sr0: Can't open blockdev [ 346.997936][ T9645] 9pnet_virtio: no channels available for device syz [ 347.216782][ T9666] 9pnet_virtio: no channels available for device syz [ 348.244268][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024d25000: rx timeout, send abort [ 348.248012][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888024d25000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 349.871239][ T9702] "syz.2.708" (9702) uses obsolete ecb(arc4) skcipher [ 349.916845][ T9702] bridge2: entered promiscuous mode [ 351.107739][ T9718] 9pnet_virtio: no channels available for device syz [ 351.472818][ T9721] Bluetooth: Invalid byte 00 after esc byte [ 352.897097][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.716'. [ 353.126012][ T9738] ubi: mtd0 is already attached to ubi31 [ 353.473402][ T5339] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 354.127499][ T9752] block nbd0: Attempted send on invalid socket [ 354.130254][ T9752] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 354.138189][ T40] kauditd_printk_skb: 1705 callbacks suppressed [ 354.138199][ T40] audit: type=1804 audit(1755978376.657:2170): pid=9745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.718" name="/newroot/172/bus/bus" dev="overlay" ino=1018 res=1 errno=0 [ 354.230957][ T40] audit: type=1804 audit(1755978376.747:2171): pid=9753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.718" name="/newroot/172/bus/bus" dev="overlay" ino=1018 res=1 errno=0 [ 355.354253][ T9771] "syz.3.720" (9771) uses obsolete ecb(arc4) skcipher [ 355.497744][ T9771] bridge1: entered promiscuous mode [ 356.253812][ T9784] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 356.632831][ T9794] IPv6: Can't replace route, no match found [ 357.640771][ T9805] ubi: mtd0 is already attached to ubi31 [ 359.494519][ T9828] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 359.496710][ T9828] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 359.499844][ T9828] vhci_hcd vhci_hcd.0: Device attached [ 359.736057][ T9838] "syz.3.735" (9838) uses obsolete ecb(arc4) skcipher [ 359.780029][ T9838] bridge2: entered promiscuous mode [ 359.862770][ T55] usb 40-1: SetAddress Request (6) to port 0 [ 359.865034][ T55] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 362.986568][ T9829] vhci_hcd: connection reset by peer [ 363.001079][ T41] vhci_hcd: stop threads [ 363.002791][ T41] vhci_hcd: release socket [ 363.004438][ T41] vhci_hcd: disconnect device [ 364.121353][ T9876] delete_channel: no stack [ 364.642632][ T5339] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 365.426109][ T9891] lo speed is unknown, defaulting to 1000 [ 365.634971][ T55] usb 40-1: device descriptor read/8, error -110 [ 366.896186][ T9908] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 366.899248][ T9908] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 366.901125][ T9908] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 367.233602][ T55] usb usb40-port1: attempt power cycle [ 368.025522][ T55] usb usb40-port1: unable to enumerate USB device [ 368.133955][ T9932] ubi: mtd0 is already attached to ubi31 [ 368.832531][ T5980] Bluetooth: hci1: command 0x0406 tx timeout [ 368.834666][ T9943] lo speed is unknown, defaulting to 1000 [ 368.912775][ T5339] Bluetooth: hci2: command 0x0406 tx timeout [ 368.912806][ T5980] Bluetooth: hci3: command 0x0406 tx timeout [ 373.274024][ T9989] /dev/sr0: Can't open blockdev [ 373.970710][T10007] ubi: mtd0 is already attached to ubi31 [ 375.058392][T10025] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 376.879511][ T1342] libceph: connect (1)[c::]:6789 error -101 [ 376.882327][ T1342] libceph: mon0 (1)[c::]:6789 connect error [ 376.997705][T10060] ceph: No mds server is up or the cluster is laggy [ 377.587706][T10072] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 377.834437][T10070] /dev/sr0: Can't open blockdev [ 378.194399][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.196488][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.685250][T10096] block nbd0: Attempted send on invalid socket [ 378.688008][T10096] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 379.625909][T10107] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 381.786079][T10146] lo speed is unknown, defaulting to 1000 [ 381.965276][T10148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.803'. [ 382.083511][T10148] netlink: 111 bytes leftover after parsing attributes in process `syz.1.803'. [ 382.505293][T10157] ubi: mtd0 is already attached to ubi31 [ 383.648715][T10170] fuse: Bad value for 'fd' [ 384.746423][ T40] audit: type=1326 audit(1755978407.267:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10179 comm="syz.0.811" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 384.756240][ T40] audit: type=1326 audit(1755978407.267:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10179 comm="syz.0.811" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 384.762270][ T40] audit: type=1326 audit(1755978407.267:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10179 comm="syz.0.811" exe="/syz-executor" sig=0 arch=40000003 syscall=47 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 384.765170][T10180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.811'. [ 384.782478][ T40] audit: type=1326 audit(1755978407.267:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10179 comm="syz.0.811" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 384.788949][ T40] audit: type=1326 audit(1755978407.267:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10179 comm="syz.0.811" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 384.804394][ T40] audit: type=1326 audit(1755978407.267:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10179 comm="syz.0.811" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 384.811014][ T40] audit: type=1326 audit(1755978407.267:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10179 comm="syz.0.811" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 384.823712][ T40] audit: type=1326 audit(1755978407.267:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10179 comm="syz.0.811" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 384.832401][ T40] audit: type=1326 audit(1755978407.267:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10179 comm="syz.0.811" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 384.847423][ T40] audit: type=1326 audit(1755978407.267:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10179 comm="syz.0.811" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 385.576439][T10196] ubi: mtd0 is already attached to ubi31 [ 387.595844][T10207] netlink: 'syz.1.818': attribute type 4 has an invalid length. [ 387.903504][T10206] block nbd0: Attempted send on invalid socket [ 387.905846][T10206] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 389.666539][T10232] block nbd0: Attempted send on invalid socket [ 389.668664][T10232] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 389.816252][T10242] lo speed is unknown, defaulting to 1000 [ 390.168869][T10249] ubi: mtd0 is already attached to ubi31 [ 393.028151][T10266] fuse: Bad value for 'fd' [ 393.748608][T10277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.833'. [ 393.768577][T10277] netlink: 12 bytes leftover after parsing attributes in process `syz.2.833'. [ 394.338886][T10281] lo speed is unknown, defaulting to 1000 [ 395.691647][T10296] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 396.559389][T10309] netlink: 'syz.0.839': attribute type 4 has an invalid length. [ 396.610481][T10312] ubi: mtd0 is already attached to ubi31 [ 396.978289][T10316] netlink: 52 bytes leftover after parsing attributes in process `syz.2.842'. [ 397.674847][ T40] kauditd_printk_skb: 58 callbacks suppressed [ 397.674858][ T40] audit: type=1800 audit(1755978420.197:2240): pid=10314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.842" name="bus" dev="ramfs" ino=27702 res=0 errno=0 [ 398.737679][T10338] overlayfs: missing 'lowerdir' [ 399.103946][T10337] /dev/sr0: Can't open blockdev [ 400.444468][ T1144] Bluetooth: Error in BCSP hdr checksum [ 400.833788][ T41] Bluetooth: Error in BCSP hdr checksum [ 401.627501][T10365] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 401.631659][T10365] hfsplus: unable to find HFS+ superblock [ 402.202591][ T5339] Bluetooth: hci4: command 0x1003 tx timeout [ 402.206256][ T5980] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 402.308533][T10381] lo speed is unknown, defaulting to 1000 [ 402.740763][T10393] fuse: Bad value for 'fd' [ 402.797857][T10375] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 403.065673][T10386] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 403.076888][T10386] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 403.079765][T10386] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 403.447111][ T40] audit: type=1804 audit(1755978425.967:2241): pid=10399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.859" name="/newroot/217/bus/bus" dev="overlay" ino=1248 res=1 errno=0 [ 403.470180][ T40] audit: type=1804 audit(1755978425.987:2242): pid=10399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.859" name="/newroot/217/bus/bus" dev="overlay" ino=1248 res=1 errno=0 [ 405.072799][ T5980] Bluetooth: hci2: command 0x0406 tx timeout [ 405.072838][ T5339] Bluetooth: hci1: command 0x0406 tx timeout [ 405.162697][ T5339] Bluetooth: hci3: command 0x0406 tx timeout [ 406.876146][T10424] delete_channel: no stack [ 408.778243][T10466] ubi: mtd0 is already attached to ubi31 [ 413.910906][T10523] ubi: mtd0 is already attached to ubi31 [ 413.914022][T10529] ubi: mtd0 is already attached to ubi31 [ 414.583610][T10537] ubi: mtd0 is already attached to ubi31 [ 415.044759][T10548] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 416.446947][T10563] input: syz1 as /devices/virtual/input/input9 [ 418.706986][T10594] ubi: mtd0 is already attached to ubi31 [ 419.292798][T10599] lo speed is unknown, defaulting to 1000 [ 421.986191][T10621] ubi: mtd0 is already attached to ubi31 [ 422.008866][T10617] ubi: mtd0 is already attached to ubi31 [ 423.552017][T10651] lo speed is unknown, defaulting to 1000 [ 423.779228][T10648] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 424.170966][T10663] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 425.277326][T10678] trusted_key: encrypted_key: master key parameter '' is invalid [ 425.352543][ T54] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 425.512595][ T54] usb 7-1: Using ep0 maxpacket: 8 [ 425.515835][ T54] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 425.519724][ T54] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 425.522934][ T54] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 425.526292][ T54] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 425.529812][ T54] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 425.532940][ T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.538192][ T54] hub 7-1:1.0: bad descriptor, ignoring hub [ 425.540108][ T54] hub 7-1:1.0: probe with driver hub failed with error -5 [ 425.542809][ T54] cdc_wdm 7-1:1.0: skipping garbage [ 425.544500][ T54] cdc_wdm 7-1:1.0: skipping garbage [ 425.552326][ T54] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 425.554535][ T54] cdc_wdm 7-1:1.0: Unknown control protocol [ 425.968004][T10685] ubi: mtd0 is already attached to ubi31 [ 426.217450][T10671] usb 7-1: reset high-speed USB device number 3 using dummy_hcd [ 428.240966][T10715] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 428.403729][ T54] usb 7-1: USB disconnect, device number 3 [ 428.903451][ T55] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 429.054474][ T55] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 429.059048][ T55] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 429.064014][ T55] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 429.068201][ T55] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 429.071677][ T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.090809][T10713] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 429.099774][ T55] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 429.412930][ T24] usb 7-1: USB disconnect, device number 4 [ 430.612700][T10743] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 430.615064][T10743] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 430.624188][T10743] vhci_hcd vhci_hcd.0: Device attached [ 430.630412][T10743] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(14) [ 430.633258][T10743] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 430.638553][T10743] vhci_hcd vhci_hcd.0: Device attached [ 430.711430][T10754] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 430.727695][T10743] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(16) [ 430.730536][T10743] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 430.733709][T10754] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(21) [ 430.736149][T10754] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 430.742550][T10743] vhci_hcd vhci_hcd.0: Device attached [ 430.747254][T10754] vhci_hcd vhci_hcd.0: Device attached [ 430.760436][T10743] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(18) [ 430.763034][T10743] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 430.769880][T10743] vhci_hcd vhci_hcd.0: Device attached [ 430.804315][T10754] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 430.819479][T10754] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(27) [ 430.821846][T10754] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 430.882546][ T1342] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 430.981004][T10768] netlink: 52 bytes leftover after parsing attributes in process `syz.0.929'. [ 430.988646][T10769] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 430.996786][T10754] vhci_hcd vhci_hcd.0: Device attached [ 431.051461][T10749] vhci_hcd: connection closed [ 431.051649][T10745] vhci_hcd: connection reset by peer [ 431.052023][T10753] vhci_hcd: connection closed [ 431.055489][ T12] vhci_hcd: stop threads [ 431.055572][T10760] vhci_hcd: connection closed [ 431.057064][ T12] vhci_hcd: release socket [ 431.058399][T10764] vhci_hcd: connection closed [ 431.059944][ T12] vhci_hcd: disconnect device [ 431.061511][T10758] vhci_hcd: connection closed [ 431.063407][ T12] vhci_hcd: stop threads [ 431.071522][ T12] vhci_hcd: release socket [ 431.076201][ T12] vhci_hcd: disconnect device [ 431.081005][ T12] vhci_hcd: stop threads [ 431.084591][ T12] vhci_hcd: release socket [ 431.088103][ T12] vhci_hcd: disconnect device [ 431.091825][ T12] vhci_hcd: stop threads [ 431.096462][ T12] vhci_hcd: release socket [ 431.100520][ T12] vhci_hcd: disconnect device [ 431.107688][ T12] vhci_hcd: stop threads [ 431.110767][ T12] vhci_hcd: release socket [ 431.114596][ T12] vhci_hcd: disconnect device [ 431.118394][ T12] vhci_hcd: stop threads [ 431.122282][ T12] vhci_hcd: release socket [ 431.129176][ T12] vhci_hcd: disconnect device [ 431.785589][ T40] audit: type=1804 audit(1755978454.307:2243): pid=10779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.936" name="/newroot/229/bus/bus" dev="overlay" ino=1354 res=1 errno=0 [ 431.807999][ T40] audit: type=1804 audit(1755978454.327:2244): pid=10779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.936" name="/newroot/229/bus/bus" dev="overlay" ino=1354 res=1 errno=0 [ 432.766151][T10797] block nbd0: Attempted send on invalid socket [ 432.768859][T10797] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 433.112528][ T54] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 433.272494][ T54] usb 7-1: Using ep0 maxpacket: 32 [ 433.288243][ T54] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 433.294848][ T54] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 433.299395][ T54] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 433.308561][ T54] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 433.313533][ T54] usb 7-1: config 0 interface 0 has no altsetting 0 [ 433.318721][ T54] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 433.321752][ T54] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 433.325045][ T54] usb 7-1: Product: syz [ 433.326848][ T54] usb 7-1: Manufacturer: syz [ 433.329145][ T54] usb 7-1: SerialNumber: syz [ 433.335325][ T54] usb 7-1: config 0 descriptor?? [ 433.346175][ T54] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 433.363805][ T54] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 433.808869][ T24] usb 7-1: USB disconnect, device number 5 [ 433.869702][ T24] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 434.675690][T10822] ubi: mtd0 is already attached to ubi31 [ 434.868078][T10828] netlink: 62 bytes leftover after parsing attributes in process `syz.1.944'. [ 435.852536][T10843] ubi: mtd0 is already attached to ubi31 [ 436.115086][ T1342] vhci_hcd: vhci_device speed not set [ 436.473853][T10859] input: syz0 as /devices/virtual/input/input10 [ 437.883638][T10883] ubi: mtd0 is already attached to ubi31 [ 438.478826][T10893] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.653278][T10893] could not allocate digest TFM handle rmd256 [ 439.637373][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.639789][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.012323][T10908] ubi: mtd0 is already attached to ubi31 [ 440.643000][T10917] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 440.645174][T10917] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 440.647917][T10917] vhci_hcd vhci_hcd.0: Device attached [ 440.670195][T10923] input: syz0 as /devices/virtual/input/input11 [ 440.684217][T10918] vhci_hcd: connection closed [ 440.685006][ T41] vhci_hcd: stop threads [ 440.688057][ T41] vhci_hcd: release socket [ 440.689565][ T41] vhci_hcd: disconnect device [ 440.842938][T10927] ip6tnl1: entered promiscuous mode [ 440.844732][T10927] ip6tnl1: entered allmulticast mode [ 440.848050][T10927] team0: Device ip6tnl1 is of different type [ 441.144862][T10932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.966'. [ 441.605494][T10942] ubi: mtd0 is already attached to ubi31 [ 445.704001][T10987] lo speed is unknown, defaulting to 1000 [ 446.300145][T10997] ubi: mtd0 is already attached to ubi31 [ 447.017787][T11008] input: syz1 as /devices/virtual/input/input12 [ 448.769387][T11027] netlink: 62 bytes leftover after parsing attributes in process `syz.3.986'. [ 449.932959][ T54] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 449.993729][T11044] befs: (nbd2): No write support. Marking filesystem read-only [ 449.998452][T11044] block nbd2: Attempted send on invalid socket [ 450.002922][T11044] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 450.010965][T11044] befs: (nbd2): unable to read superblock [ 450.877801][ T54] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 450.893648][ T54] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 450.928605][ T54] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 450.952190][ T54] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 450.959832][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.121120][T11038] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 451.142857][T11054] wireguard0: entered promiscuous mode [ 451.145376][T11054] wireguard0: entered allmulticast mode [ 451.147845][ T54] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 451.596486][ T55] usb 6-1: USB disconnect, device number 5 [ 452.016668][T11071] input: syz1 as /devices/virtual/input/input13 [ 452.899598][T11085] netlink: 'syz.2.997': attribute type 4 has an invalid length. [ 453.184871][T11090] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 454.164050][T11106] kvm: Disabled LAPIC found during irq injection [ 454.170945][T11106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1003'. [ 454.178470][T11106] dlm: plock device version mismatch: kernel (1.2.0), user (4207673345.1574799195.3139252685) [ 454.764470][T11111] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 454.767293][T11111] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 454.802238][T11111] vhci_hcd vhci_hcd.0: Device attached [ 455.048955][T11113] vhci_hcd: connection closed [ 455.052534][ T54] usb 43-1: new low-speed USB device number 4 using vhci_hcd [ 455.058063][ T61] vhci_hcd: stop threads [ 455.059906][ T61] vhci_hcd: release socket [ 455.068436][ T61] vhci_hcd: disconnect device [ 456.257968][ T40] audit: type=1804 audit(1755978478.777:2245): pid=11136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1015" name="/newroot/246/bus/bus" dev="overlay" ino=1396 res=1 errno=0 [ 456.279227][ T40] audit: type=1804 audit(1755978478.797:2246): pid=11136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1015" name="/newroot/246/bus/bus" dev="overlay" ino=1396 res=1 errno=0 [ 460.048499][T11168] netlink: 'syz.3.1011': attribute type 4 has an invalid length. [ 460.182785][ T54] vhci_hcd: vhci_device speed not set [ 462.410921][T11187] IPVS: stopping backup sync thread 7654 ... [ 462.523134][T11191] ubi: mtd0 is already attached to ubi31 [ 464.994836][T11213] ubi: mtd0 is already attached to ubi31 [ 465.008530][T11212] fuse: Unknown parameter 'rootm00000000000000000000' [ 465.060764][T11212] 9pnet: Could not find request transport: xen [ 465.071270][T11212] tmpfs: Unknown parameter '"]^H~/}quota' [ 465.075021][ T40] audit: type=1326 audit(1755978487.597:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11211 comm="syz.3.1027" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 465.082032][ T40] audit: type=1326 audit(1755978487.597:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11211 comm="syz.3.1027" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 465.095914][ T40] audit: type=1326 audit(1755978487.597:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11211 comm="syz.3.1027" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 465.103177][ T40] audit: type=1326 audit(1755978487.597:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11211 comm="syz.3.1027" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 465.109996][ T40] audit: type=1326 audit(1755978487.597:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11211 comm="syz.3.1027" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 465.118456][ T40] audit: type=1326 audit(1755978487.597:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11211 comm="syz.3.1027" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 465.125953][ T40] audit: type=1326 audit(1755978487.597:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11211 comm="syz.3.1027" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 465.132974][ T40] audit: type=1326 audit(1755978487.597:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11211 comm="syz.3.1027" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 465.146674][ T40] audit: type=1326 audit(1755978487.597:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11211 comm="syz.3.1027" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 465.156658][ T40] audit: type=1326 audit(1755978487.597:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11211 comm="syz.3.1027" exe="/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 466.833026][T11237] input: syz1 as /devices/virtual/input/input14 [ 467.220902][T11234] ubi: mtd0 is already attached to ubi31 [ 469.183583][T11259] ceph: No mds server is up or the cluster is laggy [ 471.468905][ T5339] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 471.468966][ T5339] Bluetooth: hci1: adv larger than maximum supported [ 471.471444][ T5339] Bluetooth: hci1: Malformed LE Event: 0x0d [ 472.193518][T11305] ubi: mtd0 is already attached to ubi31 [ 472.205969][T11301] lo speed is unknown, defaulting to 1000 [ 472.559835][T11312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1047'. [ 472.876143][T11316] lo speed is unknown, defaulting to 1000 [ 473.725472][T11330] vivid-007: ================= START STATUS ================= [ 473.731957][T11330] vivid-007: Enable Output Cropping: true [ 473.735431][T11330] vivid-007: Enable Output Composing: true [ 473.738736][T11330] vivid-007: Enable Output Scaler: true [ 473.742341][T11330] vivid-007: Tx RGB Quantization Range: Automatic [ 473.745706][T11330] vivid-007: Transmit Mode: HDMI [ 473.747948][T11330] vivid-007: Hotplug Present: 0x00000000 [ 473.750896][T11330] vivid-007: RxSense Present: 0x00000000 [ 473.753832][T11330] vivid-007: EDID Present: 0x00000000 [ 473.756540][T11330] vivid-007: ================== END STATUS ================== [ 474.755208][T11342] befs: (nbd1): No write support. Marking filesystem read-only [ 474.761929][T11342] block nbd1: Attempted send on invalid socket [ 474.764587][T11342] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 474.768014][T11342] befs: (nbd1): unable to read superblock [ 475.845497][T11351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.911895][T11351] could not allocate digest TFM handle rmd256 [ 476.641769][T11360] lo speed is unknown, defaulting to 1000 [ 477.143864][T11366] ubi: mtd0 is already attached to ubi31 [ 477.475432][T11375] lo speed is unknown, defaulting to 1000 [ 477.833084][T11384] input: syz1 as /devices/virtual/input/input15 [ 477.972628][ T1472] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 478.124298][ T1472] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 478.134646][ T1472] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 478.145566][ T1472] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 478.156101][ T1472] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 478.160547][ T1472] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.177665][T11373] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 478.201532][ T1472] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 479.417950][ T1342] usb 6-1: USB disconnect, device number 6 [ 479.998726][T11461] ubi: mtd0 is already attached to ubi31 [ 483.915688][T11495] ubi: mtd0 is already attached to ubi31 [ 484.183896][T11501] input: syz1 as /devices/virtual/input/input16 [ 485.450253][T11521] fuse: Unknown parameter 'rootm00000000000000000000' [ 485.482856][T11521] 9pnet: Could not find request transport: xen [ 485.485869][T11521] tmpfs: Unknown parameter '"]^H~/}quota' [ 485.489209][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 485.489259][ T40] audit: type=1326 audit(1755978508.007:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11520 comm="syz.2.1079" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 485.499858][ T40] audit: type=1326 audit(1755978508.007:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11520 comm="syz.2.1079" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 485.510576][ T40] audit: type=1326 audit(1755978508.007:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11520 comm="syz.2.1079" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 485.520936][ T40] audit: type=1326 audit(1755978508.007:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11520 comm="syz.2.1079" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 485.532763][ T40] audit: type=1326 audit(1755978508.007:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11520 comm="syz.2.1079" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 485.541556][ T40] audit: type=1326 audit(1755978508.007:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11520 comm="syz.2.1079" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 485.551403][ T40] audit: type=1326 audit(1755978508.007:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11520 comm="syz.2.1079" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 485.561236][ T40] audit: type=1326 audit(1755978508.007:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11520 comm="syz.2.1079" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 485.568518][ T40] audit: type=1326 audit(1755978508.007:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11520 comm="syz.2.1079" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 485.576994][ T40] audit: type=1326 audit(1755978508.007:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11520 comm="syz.2.1079" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 486.634208][T11523] delete_channel: no stack [ 487.737220][T11553] ubi: mtd0 is already attached to ubi31 [ 492.390235][T11606] ubi: mtd0 is already attached to ubi31 [ 493.421073][T11610] ALSA: mixer_oss: invalid OSS volume '' [ 493.820773][T11626] ubi: mtd0 is already attached to ubi31 [ 497.470363][T11649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1107'. [ 498.494908][T11665] ubi: mtd0 is already attached to ubi31 [ 499.889365][T11682] ubi: mtd0 is already attached to ubi31 [ 500.542723][T11688] bond1: entered promiscuous mode [ 500.544870][T11688] bond1: entered allmulticast mode [ 500.547290][T11688] 8021q: adding VLAN 0 to HW filter on device bond1 [ 501.073578][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.075726][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.752015][T11751] ubi: mtd0 is already attached to ubi31 [ 505.985383][T11757] bridge0: port 3(erspan0) entered blocking state [ 505.988352][T11757] bridge0: port 3(erspan0) entered disabled state [ 505.995263][T11757] erspan0: entered allmulticast mode [ 506.013661][T11757] erspan0: entered promiscuous mode [ 507.509670][T11774] ubi: mtd0 is already attached to ubi31 [ 509.123414][T11801] program syz.3.1139 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 509.151234][T11801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1139'. [ 510.468940][T11822] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1142'. [ 514.042082][T11857] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 514.046006][T11857] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 514.059423][T11857] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 514.734667][T11875] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 516.112183][ T5339] Bluetooth: hci3: command 0x0406 tx timeout [ 516.112520][T11888] Bluetooth: hci2: command 0x0406 tx timeout [ 516.114809][ T5339] Bluetooth: hci1: command 0x0406 tx timeout [ 516.140425][T11887] netlink: 'syz.2.1159': attribute type 1 has an invalid length. [ 521.218098][T11959] ubi: mtd0 is already attached to ubi31 [ 523.640059][T11990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1185'. [ 524.319028][T12004] ubi: mtd0 is already attached to ubi31 [ 524.839083][T12010] ubi: mtd0 is already attached to ubi31 [ 525.668355][T12026] program syz.2.1194 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 525.688840][T12026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1194'. [ 527.576344][T12040] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1198'. [ 527.581707][T12040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1198'. [ 527.628830][T12041] JFS: charset not found [ 527.637188][T12041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1197'. [ 527.641186][T12041] netlink: 'syz.2.1197': attribute type 5 has an invalid length. [ 527.645085][T12041] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1197'. [ 527.681700][T12041] geneve2: entered promiscuous mode [ 527.684075][T12041] geneve2: entered allmulticast mode [ 527.696023][T11426] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 527.701571][T11426] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 527.707168][T11426] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 527.711127][T11423] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 528.409522][T12045] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 528.412762][T12045] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 528.415888][T12045] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 530.430453][ T5339] Bluetooth: hci2: command 0x0406 tx timeout [ 530.433621][T11888] Bluetooth: hci3: command 0x0406 tx timeout [ 530.442807][T11888] Bluetooth: hci1: command 0x0406 tx timeout [ 531.439622][T12064] ubi: mtd0 is already attached to ubi31 [ 532.014161][T12073] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.1204'. [ 533.574745][T12083] lo speed is unknown, defaulting to 1000 [ 534.480099][T12097] lo speed is unknown, defaulting to 1000 [ 535.515994][T12114] capability: warning: `syz.0.1213' uses 32-bit capabilities (legacy support in use) [ 536.171446][T12119] ubi: mtd0 is already attached to ubi31 [ 539.883284][T12150] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1221'. [ 539.904248][T12150] gretap0: entered promiscuous mode [ 540.842713][T12165] lo speed is unknown, defaulting to 1000 [ 546.761757][T12224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1244'. [ 547.891291][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 547.891306][ T40] audit: type=1804 audit(1755978570.421:2298): pid=12231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1238" name="/newroot/303/bus/bus" dev="overlay" ino=1708 res=1 errno=0 [ 547.904631][ T40] audit: type=1804 audit(1755978570.431:2299): pid=12231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1238" name="/newroot/303/bus/bus" dev="overlay" ino=1708 res=1 errno=0 [ 549.986576][T12260] ubi: mtd0 is already attached to ubi31 [ 550.820694][T12259] ceph: No mds server is up or the cluster is laggy [ 553.689008][T12285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1250'. [ 553.696118][T12285] gretap0: left promiscuous mode [ 553.700472][T12285] tipc: Resetting bearer [ 553.703479][T12285] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 554.576329][T12305] lo speed is unknown, defaulting to 1000 [ 555.267016][T12311] : renamed from hsr0 (while UP) [ 557.257230][T12334] input: syz1 as /devices/virtual/input/input19 [ 557.377913][ T40] audit: type=1326 audit(1755978579.901:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12333 comm="syz.3.1261" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 557.388801][ T40] audit: type=1326 audit(1755978579.901:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12333 comm="syz.3.1261" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 557.399944][ T40] audit: type=1326 audit(1755978579.911:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12333 comm="syz.3.1261" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 557.412542][ T40] audit: type=1326 audit(1755978579.911:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12333 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 557.423717][ T40] audit: type=1326 audit(1755978579.911:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12333 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 557.433678][ T40] audit: type=1326 audit(1755978579.911:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12333 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 557.444489][ T40] audit: type=1326 audit(1755978579.911:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12333 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 557.463355][ T40] audit: type=1326 audit(1755978579.911:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12333 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 557.484674][ T40] audit: type=1326 audit(1755978579.911:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12333 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 557.496347][ T40] audit: type=1326 audit(1755978579.911:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12333 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 557.519144][T12335] JFS: charset not found [ 557.590749][T12335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1259'. [ 557.594955][T12335] netlink: 'syz.1.1259': attribute type 5 has an invalid length. [ 557.598277][T12335] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1259'. [ 557.663554][T12335] geneve2: entered promiscuous mode [ 557.668534][T12335] geneve2: entered allmulticast mode [ 557.688644][T11428] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 557.703983][T11428] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 557.707700][T11428] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 557.720479][T11428] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 559.308544][T11888] Bluetooth: hci1: command 0x0406 tx timeout [ 559.308863][ T1342] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 559.313340][ T1342] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 559.486100][T12362] random: crng reseeded on system resumption [ 561.388387][ T1342] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 561.391467][ T1342] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 561.394887][T11888] Bluetooth: hci2: command 0x0406 tx timeout [ 562.525328][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.551610][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.468369][T11888] Bluetooth: hci3: command 0x0406 tx timeout [ 563.471267][ T1342] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 563.474080][ T1342] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 566.655470][T12430] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1280'. [ 566.666594][T12430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1280'. [ 568.959380][T12452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1286'. [ 569.178069][T12452] bridge0: port 3(erspan0) entered blocking state [ 569.180315][T12452] bridge0: port 3(erspan0) entered listening state [ 569.359504][T12452] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 573.092475][T12483] lo speed is unknown, defaulting to 1000 [ 574.211812][ C0] ================================================================== [ 574.216265][ C0] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 [ 574.223091][ C0] Read of size 1 at addr ffff888073c85818 by task syz.2.1293/12495 [ 574.242553][ C0] [ 574.244183][ C0] CPU: 0 UID: 0 PID: 12495 Comm: syz.2.1293 Not tainted syzkaller #0 PREEMPT(full) [ 574.244207][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 574.244218][ C0] Call Trace: [ 574.244226][ C0] [ 574.244235][ C0] dump_stack_lvl+0x116/0x1f0 [ 574.244259][ C0] print_report+0xcd/0x630 [ 574.244277][ C0] ? __virt_addr_valid+0x81/0x610 [ 574.244294][ C0] ? __phys_addr+0xe8/0x180 [ 574.244312][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 574.244328][ C0] kasan_report+0xe0/0x110 [ 574.244347][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 574.244364][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 574.244380][ C0] __kasan_check_byte+0x36/0x50 [ 574.244396][ C0] lock_acquire+0xfc/0x350 [ 574.244415][ C0] ? do_raw_spin_unlock+0x53/0x230 [ 574.244433][ C0] ? .slowpath+0x9/0x18 [ 574.244450][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 574.244466][ C0] ? p9_req_put+0xaf/0x250 [ 574.244485][ C0] p9_req_put+0xaf/0x250 [ 574.244503][ C0] req_done+0x1dc/0x2e0 [ 574.244525][ C0] ? __pfx_req_done+0x10/0x10 [ 574.244541][ C0] ? __pfx_req_done+0x10/0x10 [ 574.244555][ C0] vring_interrupt+0x31b/0x400 [ 574.244571][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 574.244584][ C0] __handle_irq_event_percpu+0x22c/0x7d0 [ 574.244600][ C0] handle_irq_event+0xab/0x1e0 [ 574.244614][ C0] handle_edge_irq+0x3ca/0x9e0 [ 574.244638][ C0] __common_interrupt+0xd0/0x2f0 [ 574.244659][ C0] common_interrupt+0xba/0xe0 [ 574.244674][ C0] [ 574.244680][ C0] [ 574.244686][ C0] asm_common_interrupt+0x26/0x40 [ 574.244702][ C0] RIP: 0010:write_comp_data+0x0/0x90 [ 574.244722][ C0] Code: 48 8b 05 2b ce 1a 12 48 8b 80 30 16 00 00 c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <49> 89 d2 49 89 f8 49 89 f1 65 48 8b 15 f7 cd 1a 12 65 8b 05 08 ce [ 574.244736][ C0] RSP: 0018:ffffc900046ef828 EFLAGS: 00000246 [ 574.244751][ C0] RAX: 0000000000000000 RBX: ffff888051320000 RCX: ffffffff8a36787e [ 574.244762][ C0] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000005 [ 574.244772][ C0] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000000000 [ 574.244781][ C0] R10: ffffc900046ef8f8 R11: 0000000000000000 R12: ffff888051320570 [ 574.244791][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88802803a280 [ 574.244804][ C0] ? __unix_dgram_recvmsg+0x62e/0xc30 [ 574.244830][ C0] __unix_dgram_recvmsg+0x62e/0xc30 [ 574.244854][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 574.244878][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 574.244898][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 574.244919][ C0] unix_dgram_recvmsg+0xd0/0x110 [ 574.244940][ C0] ____sys_recvmsg+0x5f9/0x6b0 [ 574.244958][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 574.244971][ C0] ? import_iovec+0x86/0xb0 [ 574.244989][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 574.245010][ C0] ___sys_recvmsg+0x114/0x1a0 [ 574.245029][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 574.245049][ C0] ? find_held_lock+0x2b/0x80 [ 574.245067][ C0] ? __pfx___might_resched+0x10/0x10 [ 574.245084][ C0] do_recvmmsg+0x55d/0x750 [ 574.245104][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 574.245124][ C0] ? rcu_is_watching+0x12/0xc0 [ 574.245144][ C0] ? __pfx_sched_setaffinity+0x10/0x10 [ 574.245163][ C0] __sys_recvmmsg+0x21c/0x280 [ 574.245184][ C0] ? __pfx___sys_recvmmsg+0x10/0x10 [ 574.245205][ C0] ? xfd_validate_state+0x61/0x180 [ 574.245227][ C0] ? __pfx___ia32_compat_sys_sched_setaffinity+0x10/0x10 [ 574.245249][ C0] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 574.245270][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 574.245289][ C0] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 574.245311][ C0] __do_fast_syscall_32+0x7c/0x3a0 [ 574.245333][ C0] do_fast_syscall_32+0x32/0x80 [ 574.245354][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 574.245372][ C0] RIP: 0023:0xf710e579 [ 574.245383][ C0] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 574.245396][ C0] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 574.245409][ C0] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040 [ 574.245418][ C0] RDX: 00000000080002c1 RSI: 0000000000000002 RDI: 0000000000000000 [ 574.245426][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 574.245435][ C0] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 574.245444][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 574.245459][ C0] [ 574.245464][ C0] [ 574.779481][ C0] Allocated by task 12496: [ 574.782732][ C0] kasan_save_stack+0x33/0x60 [ 574.786554][ C0] kasan_save_track+0x14/0x30 [ 574.788565][ C0] __kasan_kmalloc+0xaa/0xb0 [ 574.790653][ C0] p9_client_create+0xc7/0x11c0 [ 574.793713][ C0] v9fs_session_init+0x1f7/0x1a80 [ 574.803176][ C0] v9fs_mount+0xc5/0xa90 [ 574.806078][ C0] legacy_get_tree+0x109/0x220 [ 574.816395][ C0] vfs_get_tree+0x8e/0x340 [ 574.820493][ C0] path_mount+0x1513/0x2000 [ 574.824067][ C0] __ia32_sys_mount+0x28b/0x310 [ 574.833901][ C0] __do_fast_syscall_32+0x7c/0x3a0 [ 574.837905][ C0] do_fast_syscall_32+0x32/0x80 [ 574.853096][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 574.857517][ C0] [ 574.859230][ C0] Freed by task 12496: [ 574.861653][ C0] kasan_save_stack+0x33/0x60 [ 574.873121][ C0] kasan_save_track+0x14/0x30 [ 574.877119][ C0] kasan_save_free_info+0x3b/0x60 [ 574.881033][ C0] __kasan_slab_free+0x60/0x70 [ 574.893945][ C0] kfree+0x2b4/0x4d0 [ 574.896747][ C0] p9_client_create+0xa28/0x11c0 [ 574.900262][ C0] v9fs_session_init+0x1f7/0x1a80 [ 574.905038][ C0] v9fs_mount+0xc5/0xa90 [ 574.913965][ C0] legacy_get_tree+0x109/0x220 [ 574.917558][ C0] vfs_get_tree+0x8e/0x340 [ 574.923117][ C0] path_mount+0x1513/0x2000 [ 574.933054][ C0] __ia32_sys_mount+0x28b/0x310 [ 574.936879][ C0] __do_fast_syscall_32+0x7c/0x3a0 [ 574.940142][ C0] do_fast_syscall_32+0x32/0x80 [ 574.943874][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 574.956687][ C0] [ 574.958041][ C0] The buggy address belongs to the object at ffff888073c85800 [ 574.958041][ C0] which belongs to the cache kmalloc-512 of size 512 [ 574.969834][ C0] The buggy address is located 24 bytes inside of [ 574.969834][ C0] freed 512-byte region [ffff888073c85800, ffff888073c85a00) [ 574.974738][ C0] [ 574.975705][ C0] The buggy address belongs to the physical page: [ 574.996481][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x73c84 [ 575.002873][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 575.008440][ C0] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 575.012119][ C0] page_type: f5(slab) [ 575.013993][ C0] raw: 04fff00000000040 ffff88801b842c80 ffffea00017dc800 dead000000000002 [ 575.024295][ C0] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 575.031400][ C0] head: 04fff00000000040 ffff88801b842c80 ffffea00017dc800 dead000000000002 [ 575.048795][ C0] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 575.052496][ C0] head: 04fff00000000002 ffffea0001cf2101 00000000ffffffff 00000000ffffffff [ 575.057469][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 575.065362][ C0] page dumped because: kasan: bad access detected [ 575.071349][ C0] page_owner tracks the page as allocated [ 575.076746][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12071, tgid 12066 (syz.2.1203), ts 532695430841, free_ts 525042913558 [ 575.106804][ C0] post_alloc_hook+0x1c0/0x230 [ 575.108837][ C0] get_page_from_freelist+0x132b/0x38e0 [ 575.110941][ C0] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 575.126866][ C0] alloc_pages_mpol+0x1fb/0x550 [ 575.128855][ C0] new_slab+0x247/0x330 [ 575.130744][ C0] ___slab_alloc+0xcf2/0x1740 [ 575.133751][ C0] __slab_alloc.constprop.0+0x56/0xb0 [ 575.138568][ C0] __kmalloc_cache_noprof+0xfb/0x3e0 [ 575.140797][ C0] io_sq_offload_create+0x4cb/0x1270 [ 575.152384][ C0] io_uring_setup+0x1493/0x2080 [ 575.154820][ C0] __ia32_sys_io_uring_setup+0xc2/0x170 [ 575.157449][ C0] do_int80_emulation+0x104/0x460 [ 575.160320][ C0] asm_int80_emulation+0x1a/0x20 [ 575.178692][ C0] page last free pid 12015 tgid 12014 stack trace: [ 575.182373][ C0] __free_frozen_pages+0x7d5/0x10f0 [ 575.185572][ C0] qlist_free_all+0x4d/0x120 [ 575.189163][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 575.197518][ C0] __kasan_slab_alloc+0x69/0x90 [ 575.200003][ C0] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 575.226745][ C0] ptlock_alloc+0x1f/0x70 [ 575.228961][ C0] pte_alloc_one+0x82/0x3a0 [ 575.231845][ C0] do_pte_missing+0x1afc/0x3ba0 [ 575.234147][ C0] __handle_mm_fault+0x152a/0x2a50 [ 575.236352][ C0] handle_mm_fault+0x589/0xd10 [ 575.238381][ C0] __get_user_pages+0x551/0x34a0 [ 575.240594][ C0] populate_vma_page_range+0x267/0x3f0 [ 575.253626][ C0] __mm_populate+0x1d8/0x380 [ 575.255576][ C0] vm_mmap_pgoff+0x37f/0x470 [ 575.257372][ C0] ksys_mmap_pgoff+0x7d/0x5c0 [ 575.261436][ C0] __do_fast_syscall_32+0x7c/0x3a0 [ 575.273962][ C0] [ 575.275126][ C0] Memory state around the buggy address: [ 575.277940][ C0] ffff888073c85700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 575.283036][ C0] ffff888073c85780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 575.304361][ C0] >ffff888073c85800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 575.309889][ C0] ^ [ 575.312457][ C0] ffff888073c85880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 575.318829][ C0] ffff888073c85900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 575.333100][ C0] ================================================================== [ 575.338193][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 575.344604][ C0] CPU: 0 UID: 0 PID: 12495 Comm: syz.2.1293 Not tainted syzkaller #0 PREEMPT(full) [ 575.356096][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 575.374875][ C0] Call Trace: [ 575.377002][ C0] [ 575.378269][ C0] dump_stack_lvl+0x3d/0x1f0 [ 575.380269][ C0] vpanic+0x6e8/0x7a0 [ 575.382167][ C0] ? __pfx_vpanic+0x10/0x10 [ 575.383807][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 575.385715][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 575.387916][ C0] panic+0xca/0xd0 [ 575.389607][ C0] ? __pfx_panic+0x10/0x10 [ 575.391805][ C0] ? end_report+0x4c/0x170 [ 575.408271][ C0] ? rcu_is_watching+0x12/0xc0 [ 575.411872][ C0] ? lock_release+0x201/0x2f0 [ 575.425312][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 575.427855][ C0] check_panic_on_warn+0xab/0xb0 [ 575.430674][ C0] end_report+0x107/0x170 [ 575.432904][ C0] kasan_report+0xee/0x110 [ 575.435086][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 575.437648][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 575.440250][ C0] __kasan_check_byte+0x36/0x50 [ 575.447764][ C0] lock_acquire+0xfc/0x350 [ 575.449984][ C0] ? do_raw_spin_unlock+0x53/0x230 [ 575.452952][ C0] ? .slowpath+0x9/0x18 [ 575.455629][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 575.459279][ C0] ? p9_req_put+0xaf/0x250 [ 575.462128][ C0] p9_req_put+0xaf/0x250 [ 575.464800][ C0] req_done+0x1dc/0x2e0 [ 575.467656][ C0] ? __pfx_req_done+0x10/0x10 [ 575.470610][ C0] ? __pfx_req_done+0x10/0x10 [ 575.473601][ C0] vring_interrupt+0x31b/0x400 [ 575.476496][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 575.479181][ C0] __handle_irq_event_percpu+0x22c/0x7d0 [ 575.481824][ C0] handle_irq_event+0xab/0x1e0 [ 575.484696][ C0] handle_edge_irq+0x3ca/0x9e0 [ 575.487760][ C0] __common_interrupt+0xd0/0x2f0 [ 575.490299][ C0] common_interrupt+0xba/0xe0 [ 575.493971][ C0] [ 575.496574][ C0] [ 575.498697][ C0] asm_common_interrupt+0x26/0x40 [ 575.501764][ C0] RIP: 0010:write_comp_data+0x0/0x90 [ 575.505617][ C0] Code: 48 8b 05 2b ce 1a 12 48 8b 80 30 16 00 00 c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <49> 89 d2 49 89 f8 49 89 f1 65 48 8b 15 f7 cd 1a 12 65 8b 05 08 ce [ 575.517750][ C0] RSP: 0018:ffffc900046ef828 EFLAGS: 00000246 [ 575.521042][ C0] RAX: 0000000000000000 RBX: ffff888051320000 RCX: ffffffff8a36787e [ 575.526072][ C0] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000005 [ 575.533120][ C0] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000000000 [ 575.539229][ C0] R10: ffffc900046ef8f8 R11: 0000000000000000 R12: ffff888051320570 [ 575.544898][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88802803a280 [ 575.550201][ C0] ? __unix_dgram_recvmsg+0x62e/0xc30 [ 575.553644][ C0] __unix_dgram_recvmsg+0x62e/0xc30 [ 575.557709][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 575.561734][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 575.564860][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 575.568556][ C0] unix_dgram_recvmsg+0xd0/0x110 [ 575.571509][ C0] ____sys_recvmsg+0x5f9/0x6b0 [ 575.574267][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 575.577536][ C0] ? import_iovec+0x86/0xb0 [ 575.581655][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 575.585018][ C0] ___sys_recvmsg+0x114/0x1a0 [ 575.587975][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 575.591322][ C0] ? find_held_lock+0x2b/0x80 [ 575.602720][ C0] ? __pfx___might_resched+0x10/0x10 [ 575.607918][ C0] do_recvmmsg+0x55d/0x750 [ 575.610828][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 575.614195][ C0] ? rcu_is_watching+0x12/0xc0 [ 575.617826][ C0] ? __pfx_sched_setaffinity+0x10/0x10 [ 575.621525][ C0] __sys_recvmmsg+0x21c/0x280 [ 575.625024][ C0] ? __pfx___sys_recvmmsg+0x10/0x10 [ 575.628486][ C0] ? xfd_validate_state+0x61/0x180 [ 575.631702][ C0] ? __pfx___ia32_compat_sys_sched_setaffinity+0x10/0x10 [ 575.635529][ C0] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 575.639924][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 575.643345][ C0] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 575.647372][ C0] __do_fast_syscall_32+0x7c/0x3a0 [ 575.650617][ C0] do_fast_syscall_32+0x32/0x80 [ 575.653520][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 575.657408][ C0] RIP: 0023:0xf710e579 [ 575.660094][ C0] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 575.673757][ C0] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 575.679699][ C0] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040 [ 575.684866][ C0] RDX: 00000000080002c1 RSI: 0000000000000002 RDI: 0000000000000000 [ 575.689299][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 575.692813][ C0] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 575.696679][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 575.700847][ C0] [ 575.718836][ C0] Kernel Offset: disabled [ 575.722992][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:49:56 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85616e45 RDI=ffffffff9b0f9700 RBP=ffffffff9b0f96c0 RSP=ffffc90000007760 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3730383838666666 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b0f96c0 R15=ffffffff85616de0 RIP=ffffffff85616e6f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880974c3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2695b1 CR3=0000000023795000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000173a27b RBX=0000000000000001 RCX=ffffffff8b90abf9 RDX=0000000000000000 RSI=ffffffff8de4cab1 RDI=ffffffff8c162d00 RBP=ffffed1003bdb488 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =ffffed1005666655 R10=ffff88802b3332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801deda440 R14=ffffffff90ab8190 R15=0000000000000000 RIP=ffffffff8b90975f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975c3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000023795000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff8e5c10a0 RBP=0000000000000000 RSP=ffffc900046cf258 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=ffff88806caf8000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81973aff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880976c3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2ae309 CR3=000000004bc9f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000800019 RBX=0000000000000003 RCX=ffffffff8b90abf9 RDX=0000000000000000 RSI=ffffffff8de4cab1 RDI=ffffffff8c162d00 RBP=ffffed1003864000 RSP=ffffc9000048fdf8 R8 =0000000000000001 R9 =ffffed10056a6655 R10=ffff88802b5332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801c320000 R14=ffffffff90ab8190 R15=0000000000000000 RIP=ffffffff8b90975f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00000000 FS =0000 0000000000000000 ffffffff 00000000 GS =0000 ffff8880977c3000 ffffffff 00000000 LDT=0000 0000000000000000 ffffffff 00000000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f54edda4 CR3=000000004bc9f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000