last executing test programs: 4m40.306999638s ago: executing program 0 (id=30): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r0, 0x0, 0x25, 0x1, @val=@iter={&(0x7f0000000340)=@cgroup={0x1}, 0x10}}, 0x40) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eeb149d8836acdaaa1bba20000", @ANYRES32=r5, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001400b59500000000002e34000a000000", @ANYRES32=r5, @ANYBLOB="14000100e100000000000000000000000000000014000200fe8000000000000000000000000000aa"], 0x48}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0xfffffff0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x15, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 4m40.200436588s ago: executing program 0 (id=32): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r5, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x0, 0x1}) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x0, 0x8, 0xffffff8a}) fcntl$lock(r5, 0x26, &(0x7f0000000080)) 4m39.298524862s ago: executing program 0 (id=39): socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = gettid() r3 = epoll_create(0x400) r4 = eventfd(0x0) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r4, &(0x7f0000000080)={r3, r4}) r5 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmmsg(r8, &(0x7f00000055c0), 0x400023c, 0x302, 0x0) 4m38.329992588s ago: executing program 0 (id=44): syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x40, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$afs(0x0, &(0x7f0000000380)='./file0/file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) mount$afs(0x0, &(0x7f0000000380)='./file0/file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) epoll_create1(0x80000) syz_usb_disconnect(r0) socket$xdp(0x2c, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x2040, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 4m36.845577671s ago: executing program 0 (id=56): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000440)={0x1d, r3, 0x3, {0x2, 0xf0, 0x2}, 0xfd}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 4m36.475258022s ago: executing program 0 (id=60): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095be9c28dabeeb3a99e13a8ea59b02c9ff220c4523afd106ff25ed6a449c4b1ab907b31b93693127d24b3e9dea86da89bd136d90afceec80e253f7f24b22ea2587c1e9952f195e1f66828fd8e30d82554b2dcf3ec253e8e525585f"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r0}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) syz_clone(0x4eb82100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x8004745a, 0x2000000c) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2d, 'pids'}]}, 0xb) socket$inet_tcp(0x2, 0x1, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)={[{0x2b, 'cpuset'}]}, 0x8) 4m36.462081097s ago: executing program 32 (id=60): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095be9c28dabeeb3a99e13a8ea59b02c9ff220c4523afd106ff25ed6a449c4b1ab907b31b93693127d24b3e9dea86da89bd136d90afceec80e253f7f24b22ea2587c1e9952f195e1f66828fd8e30d82554b2dcf3ec253e8e525585f"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r0}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) syz_clone(0x4eb82100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x8004745a, 0x2000000c) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2d, 'pids'}]}, 0xb) socket$inet_tcp(0x2, 0x1, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)={[{0x2b, 'cpuset'}]}, 0x8) 2m56.314957614s ago: executing program 2 (id=581): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x400) eventfd(0x7) bind$vsock_stream(r2, 0x0, 0x0) listen(r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r4, 0x29, 0x8, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2m55.905485894s ago: executing program 2 (id=583): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x5, 0x12, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x17, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff8000, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x5af, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000040)={[{0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0xf5, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xd3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6}, {0x3fb, 0x3f, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x40}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x1000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 2m55.752641968s ago: executing program 2 (id=584): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000e009000000000000000000000000215da229417c00"/33], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) eventfd2(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x80805, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2m55.742346179s ago: executing program 2 (id=585): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x48482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "db8f2d2b3b7596160c6981acf8805944823a7f"}) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f00000194c0)=""/102376, 0x18fe8) r3 = socket$inet_dccp(0x2, 0x6, 0x0) dup3(r1, r3, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = inotify_init() readv(r5, &(0x7f0000000200)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) 2m54.025155272s ago: executing program 2 (id=586): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x5, 0x0) getdents(r0, 0x0, 0x58) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(r1, &(0x7f00000001c0)='./bus\x00', 0x34) unlinkat(r1, &(0x7f0000000280)='./file0\x00', 0x200) 2m54.02134458s ago: executing program 2 (id=587): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x36}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x24000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x508, 0x0, 0x368, 0x1b0, 0x0, 0x0, 0x438, 0x438, 0x438, 0x438, 0x438, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x2}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [0x0, 0x0, 0xffffff00], [], 'syzkaller0\x00', 'team_slave_1\x00', {}, {}, 0x3c}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x4}, {0x0, 0xfe}, 0xf3dd}}}, {{@ipv6={@mcast1, @remote, [0x0, 0x0, 0xffffff00], [], '\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000400)={{0x3, 0x1, 0x7, 0x3, 0x12}, 0x4, 0x8e7, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x9, 0x400, 0xfffffff1}) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="180000002c000100000000000000000204000080"], 0x18}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2m38.883649618s ago: executing program 33 (id=587): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x36}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x24000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x508, 0x0, 0x368, 0x1b0, 0x0, 0x0, 0x438, 0x438, 0x438, 0x438, 0x438, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x2}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [0x0, 0x0, 0xffffff00], [], 'syzkaller0\x00', 'team_slave_1\x00', {}, {}, 0x3c}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x4}, {0x0, 0xfe}, 0xf3dd}}}, {{@ipv6={@mcast1, @remote, [0x0, 0x0, 0xffffff00], [], '\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000400)={{0x3, 0x1, 0x7, 0x3, 0x12}, 0x4, 0x8e7, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x9, 0x400, 0xfffffff1}) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="180000002c000100000000000000000204000080"], 0x18}], 0x1, 0x0, 0x0, 0x1}, 0x0) 5.449773628s ago: executing program 4 (id=1143): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0xb4, &(0x7f0000000140)=""/180, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendto$inet6(r3, 0x0, 0x0, 0x20000002, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) getsockopt$inet6_buf(r3, 0x29, 0x6, 0x0, &(0x7f0000000080)) 5.076121956s ago: executing program 3 (id=1145): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000640)=""/4096, 0x1000, 0x2000, &(0x7f0000000380)=@generic={0x11, "d71d9c1bf36be386b8195be2f96732daece168ab8c4756fcaaaaa57ab4d9fa9c5e136c872457faea878081b25c7ac9863e328325d3608f7b92b91789fb2322981d60e78ecebc51a8a848ac66a135cbf9adb555f5fff1d2552ce4b120288f1c606bebc17e3b75c547a1c41ac89d1be3f0e179d586d665ef8397dfdbdaa865"}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) 4.419283402s ago: executing program 4 (id=1147): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xc, 0x0, &(0x7f0000000240)) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000002c0)={0x2, 0x0, 0x40000002}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000002c0), 0x2200800, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = open(&(0x7f00000024c0)='./file0\x00', 0x10d442, 0x24) write$binfmt_script(r3, 0x0, 0xffffff3c) close(0x3) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x3a, 0x7) 4.103985014s ago: executing program 3 (id=1148): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000140)={0x3, 0x0, 0x1, 0x7, 0x9, 0x401, 0x5d}) r2 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000b2c000)=[{r6}], 0x2c, 0xffffffffffbffff8) dup2(r5, r6) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 3.725835859s ago: executing program 4 (id=1150): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x2, 0xb, [{}, {}, {}, {0xfffffffd}, {}, {0x0, 0x1000000}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r2, r1, 0x1, 0x0, @val=@netfilter={0x2, 0x0, 0x8000}}, 0x40) r3 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) 2.577750496s ago: executing program 1 (id=1154): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000b, 0x8012, r0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) rseq(&(0x7f0000000280), 0xa1f3ac5c292cc015, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) memfd_create(&(0x7f0000000080)='\xdb`\x10\x98[\x00\x00\xa5\xbe\x00\x00\x00\x00\x00\x00\x00\x00?\x90IA\x9e\xfe \x86?\x05y,\xb8\xa0og\xc3\x87\xe1\xc2\xd0\x0eo\f\\\xd1\x973\"\x96l|v7\xf7\x97\x06\xba\xa5\"k\xdd\x8a\xb4\x1c\x05D\xbe:\x9d7W!\x89\xe9\xefW`c\x0fJ{E\xe0\xabHO^N\xfa\xcd.\x01\xa7Pp|\xe8\xbeO\xeb\xf1\xdf[\xa3>S\xa68G\xf0\xbe\x1f\x8df\xb7B\x0f\x8d\xa2!\xda\xd8\xde\xe4\x9fe%{.\xcc*\x9b\x11\x8f\xf5n\x05S\x81\x03\xe5\xdal\x93\x0f[\x93p\x1ecg\x91\x13\xf2T\xf0fp\xbb\xfcYL\x9c\x8f\xf6', 0x0) mq_timedreceive(r4, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x2) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir_on}]}) 2.286149142s ago: executing program 4 (id=1155): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000140)={@random="5b1a033f2511", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000000c0)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='yeah\x00', 0x5) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r1, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0xa, 0x0, 0x46, 0x407006}, 0x104) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000100)=0x1, 0x4) 2.277551822s ago: executing program 3 (id=1157): r0 = syz_open_dev$MSR(&(0x7f0000019340), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r2, r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000000)='\x00\f\x00\x00\t', 0x5) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) socket$inet6_sctp(0xa, 0x5, 0x84) 2.208580989s ago: executing program 4 (id=1158): openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/diskstats\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.07517831s ago: executing program 5 (id=1159): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) 2.065636512s ago: executing program 1 (id=1167): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f0000807000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0) mremap(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00006e6000/0x3000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 1.967313276s ago: executing program 1 (id=1160): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000002c0)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/42, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 1.849970649s ago: executing program 3 (id=1161): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xc, 0x0, &(0x7f0000000240)) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000002c0)={0x2, 0x0, 0x40000002}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000002c0), 0x2200800, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = open(&(0x7f00000024c0)='./file0\x00', 0x10d442, 0x24) write$binfmt_script(r3, 0x0, 0xffffff3c) close(0x3) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x3a, 0x7) 1.807820254s ago: executing program 5 (id=1162): r0 = socket(0x40000000015, 0x5, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5}, 0x0) ioprio_get$uid(0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xf}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000200), 0x3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304, 0x38}, "faffffff0000003c", "82d7773879241628cb2d7129d5a01853", "fb00eeff", "00aa04009700"}, 0x28) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000200)) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000100)=0x7, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/127, 0x7f}}], 0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 1.579184767s ago: executing program 5 (id=1163): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x3, [@var={0xd, 0x0, 0x0, 0xe, 0x1, 0x2}, @enum64={0x1, 0x7, 0x0, 0x13, 0x1, 0x2, [{0xc, 0x3, 0x5}, {0x10, 0x0, 0xb2}, {0x5, 0x4, 0x101}, {0x7, 0x7, 0x115}, {0x9, 0x2, 0xfffffc00}, {0xe, 0x0, 0x9}, {0x8, 0x6, 0x5e}]}]}, {0x0, [0x0]}}, &(0x7f0000000000), 0x8b, 0x0, 0x0, 0xfffffffe, 0x10000, @value}, 0x28) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xa0000) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000300)='./file0\x00', 0x500, 0x0) renameat2(r3, &(0x7f0000000100)='./file0\x00', r3, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7cb, &(0x7f0000000140)={0x0, 0x0, 0x20000000}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000006deff0000000000000000000095000000000000001fcf5cdf0e3b3083a7f755a4ff8401376a978da18215efb00b2b48fe095d770aafa30ebade7c3bacdf1aeb5d9a6b000b8dbb206cded836499126c30b27027ad11bba59ba2d4703e009e398f81305f98acb33bccaa635a5a4fab69c6a428fe56b7429"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='contention_end\x00', r4}, 0x18) r5 = openat$sw_sync(0xffffff9c, &(0x7f0000000240), 0x18002, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000280)={0x3, "bc2bffe0c52211dbae57db130e147feb798ba1ad0d55fbdbd68259c02dece758"}) r6 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8982, &(0x7f0000000000)={0x6, '\x00', {0x5}, 0xffff}) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, &(0x7f0000001a80), &(0x7f0000001ac0)=0x30) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfe00, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9a02fff0}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.568722547s ago: executing program 1 (id=1164): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000037e28053aa00010324bd7002f9dbdf2505000000"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x200, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/stat\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000000)=""/137, 0x89}], 0x1, 0x4, 0x0) 1.561607224s ago: executing program 5 (id=1165): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x2, 0xb, [{}, {}, {}, {0xfffffffd}, {}, {0x0, 0x1000000}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r2, r1, 0x1, 0x0, @val=@netfilter={0x2, 0x0, 0x8000}}, 0x40) r3 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) 1.021688215s ago: executing program 5 (id=1166): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000000c0)={0x0, 0x4533, 0x10100, 0xffffdffe, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_open_dev$rtc(&(0x7f0000000140), 0x9, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x400017e) socket$inet6(0xa, 0x3, 0x8000000003c) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup(r5) getsockopt$inet6_mreq(r6, 0x29, 0x8, 0x0, &(0x7f0000005580)) read$msr(r6, &(0x7f00000001c0)=""/145, 0x91) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r7, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x102) 921.875635ms ago: executing program 3 (id=1168): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xce}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r2 = io_uring_setup(0x1aec, &(0x7f0000000140)={0x0, 0x1acc, 0x0, 0x0, 0x182}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x100006, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r4, 0x0, 0x80, 0x5, 0x9, 0x0, {0xa, 0xd6, 0x1c, 0x7, 0xfe, 0x401, 0xfff5, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x5, "cb630dab3a0338057401a192419598961f50dc45c87d55b42a28b8f01c0e0e7a"}}) close_range(r2, 0xffffffffffffffff, 0x0) 911.077798ms ago: executing program 4 (id=1169): syz_emit_ethernet(0x3e, 0x0, 0x0) syz_usbip_server_init(0x1) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r0 = msgget(0x2, 0x201) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000001500)=""/240) landlock_create_ruleset(&(0x7f0000000140)={0x10800, 0x3}, 0x18, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) get_mempolicy(0x0, 0x0, 0x400010, &(0x7f0000394000/0x3000)=nil, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100001727694500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 725.19191ms ago: executing program 3 (id=1170): syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x800, 0x70bd29, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x17, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r0, 0x0, 0x0, 0x0, 0x40000}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 536.092409ms ago: executing program 1 (id=1171): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000100)={0x0, 0x1, 0xffffffffffffffff, 0x6}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'bond_slave_0\x00', &(0x7f00000004c0)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}}) close_range(r1, 0xffffffffffffffff, 0x0) 93.484395ms ago: executing program 5 (id=1172): socket$qrtr(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=1173): bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r4, 0xab00, r3) ioctl$NBD_DO_IT(r2, 0xab03) close_range(r1, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) kernel console output (not intermixed with test programs): -1:1.0: Stall on int endpoint [ 66.361378][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 66.362865][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 66.364454][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 66.365979][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 66.367641][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 66.369137][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 66.370761][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 66.372239][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 66.373916][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 66.375571][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 66.377071][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 66.378687][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 66.380191][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 66.381828][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 66.383334][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 66.384938][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 66.386427][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 66.388097][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 66.389588][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 66.391201][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 66.392682][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 66.394566][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 66.396286][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 66.397855][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 66.399548][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 66.401089][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 66.402752][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 66.404250][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 66.405908][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 66.407421][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 66.409337][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 66.411789][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 66.413258][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 66.414904][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 66.416409][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 66.418092][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 66.419577][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 66.421315][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 66.421511][ T1135] bridge_slave_1: left allmulticast mode [ 66.422968][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 66.424805][ T1135] bridge_slave_1: left promiscuous mode [ 66.426313][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 66.428505][ T1135] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.429874][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 66.433668][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 66.435322][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 66.436822][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 66.438468][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 66.439725][ T1135] bridge_slave_0: left allmulticast mode [ 66.440097][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 66.441959][ T1135] bridge_slave_0: left promiscuous mode [ 66.443436][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 66.445561][ T1135] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.447234][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 66.451129][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 66.452784][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 66.454289][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 66.455915][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 66.457484][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 66.459129][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 66.460784][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 66.462460][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 66.464114][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 66.465626][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 66.467284][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 66.468851][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 66.474902][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 66.476438][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 66.478260][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 66.479737][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 66.481377][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 66.482895][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 66.484483][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 66.485989][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 66.487619][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 66.489091][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 66.490700][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 66.492172][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 66.493658][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 66.496550][ T63] usb 9-1: USB disconnect, device number 3 [ 66.719103][ T1135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.722623][ T1135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.726479][ T1135] bond0 (unregistering): Released all slaves [ 67.029903][ T1135] hsr_slave_0: left promiscuous mode [ 67.047423][ T1135] hsr_slave_1: left promiscuous mode [ 67.059840][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.062278][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.126996][ T39] kauditd_printk_skb: 8 callbacks suppressed [ 67.127005][ T39] audit: type=1326 audit(1734531635.730:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6502 comm="syz.1.116" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 67.137422][ T39] audit: type=1326 audit(1734531635.750:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6502 comm="syz.1.116" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 67.211197][ T65] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.224365][ T65] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.236951][ T65] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.244121][ T65] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.251832][ T65] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.253847][ T65] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.741208][ T1135] team0 (unregistering): Port device team_slave_1 removed [ 68.383342][ T6515] chnl_net:caif_netlink_parms(): no params data found [ 68.477982][ T6515] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.479884][ T6515] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.481809][ T6515] bridge_slave_0: entered allmulticast mode [ 68.483813][ T6515] bridge_slave_0: entered promiscuous mode [ 68.488129][ T6515] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.490017][ T6515] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.491908][ T6515] bridge_slave_1: entered allmulticast mode [ 68.493939][ T6515] bridge_slave_1: entered promiscuous mode [ 68.528433][ T6515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.535749][ T6515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.556498][ T6515] team0: Port device team_slave_0 added [ 68.566253][ T6515] team0: Port device team_slave_1 added [ 68.593248][ T1135] IPVS: stop unused estimator thread 0... [ 68.596967][ T6515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.601914][ T6515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.613864][ T6515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.622416][ T6515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.625951][ T6515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.638341][ T6515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.678392][ T6515] hsr_slave_0: entered promiscuous mode [ 68.683748][ T6515] hsr_slave_1: entered promiscuous mode [ 68.687699][ T6515] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.690270][ T6515] Cannot create hsr debugfs directory [ 69.070446][ T39] audit: type=1326 audit(1734531637.680:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.4.124" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 69.076008][ T39] audit: type=1326 audit(1734531637.680:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.4.124" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 69.083307][ T39] audit: type=1326 audit(1734531637.690:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.4.124" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 69.089370][ T39] audit: type=1326 audit(1734531637.690:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.4.124" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 69.094895][ T39] audit: type=1326 audit(1734531637.690:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.4.124" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 69.103142][ T39] audit: type=1326 audit(1734531637.700:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.4.124" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 69.113274][ T39] audit: type=1326 audit(1734531637.700:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.4.124" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 69.122049][ T39] audit: type=1326 audit(1734531637.700:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.4.124" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 69.141140][ T6574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.124'. [ 69.161205][ T6574] tipc: Started in network mode [ 69.162635][ T6574] tipc: Node identity ac14140f, cluster identity 4711 [ 69.165508][ T6574] tipc: New replicast peer: 255.255.255.255 [ 69.168250][ T6574] tipc: Enabled bearer , priority 10 [ 69.224156][ T6585] netlink: 28 bytes leftover after parsing attributes in process `syz.4.125'. [ 69.253118][ T6515] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.256713][ T6515] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.297393][ T35] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 69.297712][ T6515] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.303350][ T6515] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.327579][ T65] Bluetooth: hci2: command tx timeout [ 69.334422][ T6515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.341541][ T6515] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.346837][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.349487][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.355772][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.357783][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.445747][ T6515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.457441][ T35] usb 8-1: Using ep0 maxpacket: 8 [ 69.460403][ T35] usb 8-1: config 1 has an invalid descriptor of length 106, skipping remainder of the config [ 69.463843][ T35] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 69.468751][ T6515] veth0_vlan: entered promiscuous mode [ 69.469238][ T35] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.57 [ 69.472560][ T6515] veth1_vlan: entered promiscuous mode [ 69.473275][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 69.477757][ T35] usb 8-1: SerialNumber: syz [ 69.482028][ T6556] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 69.485047][ T35] cdc_ether 8-1:1.0: skipping garbage [ 69.486890][ T35] usb 8-1: bad CDC descriptors [ 69.489767][ T6515] veth0_macvtap: entered promiscuous mode [ 69.493582][ T6515] veth1_macvtap: entered promiscuous mode [ 69.501991][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.504728][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.508047][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.510783][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.513321][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.515969][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.519289][ T6515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.524260][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.527062][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.530438][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.533205][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.535744][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.538754][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.541991][ T6515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.546910][ T6515] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.550084][ T6515] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.552437][ T6515] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.554700][ T6515] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.576758][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.578952][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.588125][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.591777][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.688959][ T35] usb 8-1: USB disconnect, device number 4 [ 70.308863][ T35] tipc: Node number set to 2886997007 [ 70.690486][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.692322][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.407352][ T65] Bluetooth: hci2: command tx timeout [ 72.220335][ T6716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.146'. [ 72.240368][ T6716] bridge_slave_1: left allmulticast mode [ 72.241916][ T6716] bridge_slave_1: left promiscuous mode [ 72.243688][ T6716] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.248216][ T6716] bridge1: port 1(bridge_slave_1) entered blocking state [ 72.250284][ T6716] bridge1: port 1(bridge_slave_1) entered disabled state [ 72.252366][ T6716] bridge_slave_1: entered allmulticast mode [ 72.254455][ T6716] bridge_slave_1: entered promiscuous mode [ 72.689540][ T6741] trusted_key: syz.2.152 sent an empty control message without MSG_MORE. [ 72.694827][ T6740] ALSA: mixer_oss: invalid OSS volume 'PHONEI' [ 72.696698][ T6740] ALSA: mixer_oss: invalid OSS volume 'LXTp0' [ 73.057247][ T8] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 73.207795][ T8] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 73.211629][ T8] usb 7-1: config 0 has no interfaces? [ 73.214036][ T8] usb 7-1: config 0 has no interfaces? [ 73.216597][ T8] usb 7-1: config 0 has no interfaces? [ 73.219529][ T8] usb 7-1: config 0 has no interfaces? [ 73.222312][ T8] usb 7-1: config 0 has no interfaces? [ 73.226969][ T8] usb 7-1: config 0 has no interfaces? [ 73.229861][ T8] usb 7-1: config 0 has no interfaces? [ 73.232161][ T8] usb 7-1: config 0 has no interfaces? [ 73.235317][ T8] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 73.238060][ T8] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 73.240226][ T8] usb 7-1: Product: syz [ 73.241618][ T8] usb 7-1: Manufacturer: syz [ 73.243426][ T8] usb 7-1: SerialNumber: syz [ 73.247071][ T8] usb 7-1: config 0 descriptor?? [ 73.497226][ T65] Bluetooth: hci2: command tx timeout [ 73.609822][ T5986] usb 7-1: USB disconnect, device number 3 [ 74.403005][ T6782] overlayfs: failed to get inode (-116) [ 74.405245][ T6782] overlayfs: failed to get inode (-116) [ 74.406872][ T6782] overlayfs: failed to get inode (-116) [ 74.412880][ T6782] overlayfs: failed to get inode (-116) [ 75.522882][ T6811] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 75.568375][ T65] Bluetooth: hci2: command tx timeout [ 75.810581][ T62] cfg80211: failed to load regulatory.db [ 77.053701][ T6842] netlink: 28 bytes leftover after parsing attributes in process `syz.2.179'. [ 77.396459][ T6855] netlink: 76 bytes leftover after parsing attributes in process `syz.4.182'. [ 78.547367][ T65] Bluetooth: hci1: Malformed LE Event: 0x1b [ 78.569293][ T65] Bluetooth: hci2: unexpected subevent 0x01 length: 12 < 18 [ 78.591035][ T6881] netlink: 28 bytes leftover after parsing attributes in process `syz.1.191'. [ 79.676753][ T6903] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 79.685894][ T6904] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 1 [ 79.686126][ T6905] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 2 [ 79.693629][ T6906] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 3 [ 79.820767][ T6912] netlink: 76 bytes leftover after parsing attributes in process `syz.1.195'. [ 80.109976][ T6919] netlink: 36 bytes leftover after parsing attributes in process `syz.4.201'. [ 80.112308][ T6919] netlink: 16 bytes leftover after parsing attributes in process `syz.4.201'. [ 80.114590][ T6919] netlink: 36 bytes leftover after parsing attributes in process `syz.4.201'. [ 80.117761][ T6919] netlink: 36 bytes leftover after parsing attributes in process `syz.4.201'. [ 80.448497][ T65] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 80.450734][ T65] Bluetooth: hci0: Injecting HCI hardware error event [ 80.453571][ T5956] Bluetooth: hci0: hardware error 0x00 [ 82.527371][ T5956] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 82.627571][ T833] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 82.777784][ T833] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 82.780666][ T833] usb 8-1: config 0 has no interfaces? [ 82.783076][ T833] usb 8-1: config 0 has no interfaces? [ 82.785324][ T833] usb 8-1: config 0 has no interfaces? [ 82.787883][ T833] usb 8-1: config 0 has no interfaces? [ 82.790597][ T833] usb 8-1: config 0 has no interfaces? [ 82.793676][ T833] usb 8-1: config 0 has no interfaces? [ 82.795993][ T833] usb 8-1: config 0 has no interfaces? [ 82.798216][ T833] usb 8-1: config 0 has no interfaces? [ 82.801202][ T833] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 82.804141][ T833] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 82.807054][ T833] usb 8-1: Product: syz [ 82.808624][ T833] usb 8-1: Manufacturer: syz [ 82.810265][ T833] usb 8-1: SerialNumber: syz [ 82.813857][ T833] usb 8-1: config 0 descriptor?? [ 83.174726][ T39] kauditd_printk_skb: 18 callbacks suppressed [ 83.174738][ T39] audit: type=1326 audit(1734531651.780:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6957 comm="syz.2.212" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf579 code=0x7ffc0000 [ 83.197218][ T39] audit: type=1326 audit(1734531651.780:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6957 comm="syz.2.212" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf579 code=0x7ffc0000 [ 83.247329][ T30] usb 8-1: USB disconnect, device number 5 [ 84.362241][ T39] audit: type=1326 audit(1734531652.970:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6984 comm="syz.4.221" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x0 [ 85.257850][ T6996] Cannot find add_set index 0 as target [ 87.491736][ T7040] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 87.501291][ T7040] kvm: pic: non byte read [ 87.503623][ T7040] kvm: pic: level sensitive irq not supported [ 87.503971][ T7040] kvm: pic: non byte read [ 87.582278][ T7044] 9pnet: bogus RWRITE count (512 > 41) [ 87.657491][ T7051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.247'. [ 87.674152][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.676705][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.107786][ T7077] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 88.110856][ T7078] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 1 [ 88.113582][ T7079] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 2 [ 88.118233][ T7080] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 3 [ 88.195638][ T39] audit: type=1326 audit(1734531656.800:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.2.242" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf579 code=0x7ffc0000 [ 88.206934][ T39] audit: type=1326 audit(1734531656.800:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.2.242" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf579 code=0x7ffc0000 [ 88.226986][ T39] audit: type=1326 audit(1734531656.800:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.2.242" exe="/syz-executor" sig=0 arch=40000003 syscall=151 compat=1 ip=0xf7fcf579 code=0x7ffc0000 [ 88.245434][ T39] audit: type=1326 audit(1734531656.800:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.2.242" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf579 code=0x7ffc0000 [ 88.264078][ T39] audit: type=1326 audit(1734531656.800:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.2.242" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf579 code=0x7ffc0000 [ 88.279794][ T39] audit: type=1326 audit(1734531656.800:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.2.242" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fcf579 code=0x7ffc0000 [ 88.292280][ T39] audit: type=1326 audit(1734531656.850:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.2.242" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf579 code=0x7ffc0000 [ 88.312464][ T39] audit: type=1326 audit(1734531656.860:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.2.242" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf579 code=0x7ffc0000 [ 88.327437][ T39] audit: type=1326 audit(1734531656.870:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.2.242" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fcf579 code=0x7ffc0000 [ 88.344165][ T39] audit: type=1326 audit(1734531656.870:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.2.242" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf579 code=0x7ffc0000 [ 89.688835][ T8] IPVS: starting estimator thread 0... [ 89.777327][ T7126] IPVS: using max 22 ests per chain, 52800 per kthread [ 89.889228][ T7130] kvm: pic: non byte read [ 89.893709][ T7130] kvm: pic: non byte read [ 89.897299][ T7130] kvm: pic: single mode not supported [ 89.897537][ T7130] kvm: pic: non byte read [ 89.903434][ T7130] kvm: pic: level sensitive irq not supported [ 89.903640][ T7130] kvm: pic: non byte read [ 89.911971][ T7130] kvm: pic: single mode not supported [ 89.911983][ T7130] kvm: pic: level sensitive irq not supported [ 89.916729][ T7130] kvm: pic: non byte read [ 89.924475][ T7130] kvm: pic: non byte read [ 89.929130][ T7130] kvm: pic: non byte read [ 89.933489][ T7130] kvm: pic: level sensitive irq not supported [ 89.933701][ T7130] kvm: pic: non byte read [ 89.944780][ T7130] kvm: pic: level sensitive irq not supported [ 89.951240][ T7130] kvm: pic: level sensitive irq not supported [ 89.955125][ T7130] kvm: pic: level sensitive irq not supported [ 89.980233][ T7130] kvm: pic: level sensitive irq not supported [ 89.984430][ T7130] kvm: pic: level sensitive irq not supported [ 89.994474][ T7130] kvm: pic: level sensitive irq not supported [ 91.856648][ T7159] netlink: 36 bytes leftover after parsing attributes in process `syz.2.264'. [ 91.861197][ T7159] netlink: 16 bytes leftover after parsing attributes in process `syz.2.264'. [ 91.863500][ T7159] netlink: 36 bytes leftover after parsing attributes in process `syz.2.264'. [ 91.865818][ T7159] netlink: 36 bytes leftover after parsing attributes in process `syz.2.264'. [ 95.176496][ T7181] mmap: syz.4.275 (7181) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 95.457063][ T7189] netlink: zone id is out of range [ 95.502330][ T7191] netlink: 76 bytes leftover after parsing attributes in process `syz.2.266'. [ 96.373704][ T7213] 9pnet: bogus RWRITE count (512 > 41) [ 96.953758][ T7220] syz.3.280 (7220): drop_caches: 1 [ 99.935338][ T39] kauditd_printk_skb: 9 callbacks suppressed [ 99.935349][ T39] audit: type=1326 audit(1734531668.540:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.2.286" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf579 code=0x7ffc0000 [ 99.956731][ T39] audit: type=1326 audit(1734531668.540:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.2.286" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf579 code=0x7ffc0000 [ 100.024942][ T39] audit: type=1326 audit(1734531668.540:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.2.286" exe="/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf7fcf579 code=0x7ffc0000 [ 100.053664][ T39] audit: type=1326 audit(1734531668.540:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.2.286" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf579 code=0x7ffc0000 [ 100.060529][ T39] audit: type=1326 audit(1734531668.540:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.2.286" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fcf579 code=0x7ffc0000 [ 100.066931][ T39] audit: type=1326 audit(1734531668.540:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.2.286" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf579 code=0x7ffc0000 [ 100.072544][ T39] audit: type=1326 audit(1734531668.540:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.2.286" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf579 code=0x7ffc0000 [ 100.078659][ T39] audit: type=1326 audit(1734531668.540:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.2.286" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fcf579 code=0x7ffc0000 [ 100.084298][ T39] audit: type=1326 audit(1734531668.540:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.2.286" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf579 code=0x7ffc0000 [ 100.091198][ T39] audit: type=1326 audit(1734531668.540:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.2.286" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf579 code=0x7ffc0000 [ 101.108843][ T25] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 101.257244][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 101.260532][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.263317][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.266422][ T25] usb 6-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 101.268917][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.272017][ T25] usb 6-1: config 0 descriptor?? [ 101.274932][ T25] usbhid 6-1:0.0: can't add hid device: -22 [ 101.276573][ T25] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 101.550378][ T7284] qnx6: Unknown parameter 'trans' [ 101.554714][ T7284] netlink: 244 bytes leftover after parsing attributes in process `syz.3.297'. [ 101.612930][ T1323] usb 6-1: USB disconnect, device number 2 [ 101.991276][ T7291] syz.2.299 (7291): drop_caches: 1 [ 102.043299][ T7294] vcan0: Master is either lo or non-ether device [ 102.083293][ T7296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.301'. [ 102.085652][ T7296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.301'. [ 102.094130][ T7296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.301'. [ 102.156691][ T7296] bond0: (slave bond_slave_0): Releasing backup interface [ 102.370022][ T7305] bridge0: port 2(syz_tun) entered blocking state [ 102.372216][ T7305] bridge0: port 2(syz_tun) entered disabled state [ 102.374116][ T7305] syz_tun: entered allmulticast mode [ 102.376424][ T7305] syz_tun: entered promiscuous mode [ 102.378677][ T7305] bridge0: port 2(syz_tun) entered blocking state [ 102.381209][ T7305] bridge0: port 2(syz_tun) entered forwarding state [ 102.399039][ T7303] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 102.400747][ T7303] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 102.430735][ T7303] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 102.435094][ T7303] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 102.436798][ T7303] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 102.441379][ T7303] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 102.445906][ T7303] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 102.447962][ T7303] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 102.452075][ T7303] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 102.699134][ T6007] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 102.728683][ T7320] Cannot find add_set index 0 as target [ 102.847361][ T6007] usb 7-1: Using ep0 maxpacket: 32 [ 102.850118][ T6007] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 102.852620][ T6007] usb 7-1: config 7 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.855342][ T6007] usb 7-1: config 7 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.858101][ T6007] usb 7-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 102.861381][ T6007] usb 7-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 102.864179][ T6007] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.224576][ T7327] syz.1.311 (7327): drop_caches: 1 [ 103.294564][ T6007] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 103.298917][ T6007] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 103.304890][ T6007] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 103.310762][ T6007] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 103.316236][ T6007] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 103.326766][ T6007] ntrig 0003:1B96:000A.0003: hidraw1: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.2-1/input0 [ 103.548608][ T6007] usb 7-1: USB disconnect, device number 4 [ 103.763970][ T7310] hid-generic 0003:0627:0001.0001: pid 7310 passed too short report [ 103.796638][ T7351] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 103.932643][ T7362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.318'. [ 104.185688][ T7378] netlink: 'syz.4.319': attribute type 4 has an invalid length. [ 104.333773][ T7387] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 104.340261][ T7387] picdev_read: 44 callbacks suppressed [ 104.340271][ T7387] kvm: pic: non byte read [ 104.343940][ T7387] pic_ioport_write: 4 callbacks suppressed [ 104.343948][ T7387] kvm: pic: level sensitive irq not supported [ 104.345894][ T7387] kvm: pic: non byte read [ 104.352719][ T7387] kvm: pic: level sensitive irq not supported [ 104.353811][ T7387] kvm: pic: non byte read [ 104.358051][ T7387] kvm: pic: level sensitive irq not supported [ 104.358294][ T7387] kvm: pic: non byte read [ 104.447286][ T5956] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.447486][ T65] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.448978][ T5956] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.227717][ T63] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 106.528147][ T5947] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.529840][ T5947] Bluetooth: hci2: command 0x0c1a tx timeout [ 106.531446][ T5947] Bluetooth: hci3: command 0x0c1a tx timeout [ 107.110054][ T7456] bridge_slave_0: left allmulticast mode [ 107.111598][ T7456] bridge_slave_0: left promiscuous mode [ 107.113145][ T7456] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.123472][ T7456] bond0: (slave bond_slave_0): Releasing backup interface [ 107.130016][ T7456] bond0: (slave bond_slave_1): Releasing backup interface [ 107.145822][ T7456] team0: Port device team_slave_0 removed [ 107.154658][ T7456] team0: Port device team_slave_1 removed [ 107.156548][ T7456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.161234][ T7456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.163438][ T7463] netlink: zone id is out of range [ 107.170099][ T7456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.173347][ T7456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.204814][ T7460] team0: Port device wg2 added [ 108.134453][ T7476] syz.4.337 (7476): drop_caches: 1 [ 108.607335][ T5947] Bluetooth: hci2: command 0x0c1a tx timeout [ 108.607413][ T65] Bluetooth: hci1: command 0x0c1a tx timeout [ 108.608952][ T5956] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.962071][ T7495] pim6reg: entered allmulticast mode [ 116.966999][ T7495] pim6reg: left allmulticast mode [ 117.236211][ T7508] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 117.657073][ T63] libceph: connect (1)[c::]:6789 error -101 [ 117.659117][ T63] libceph: mon0 (1)[c::]:6789 connect error [ 117.931498][ T7501] ceph: No mds server is up or the cluster is laggy [ 117.933822][ T63] libceph: connect (1)[c::]:6789 error -101 [ 117.939036][ T63] libceph: mon0 (1)[c::]:6789 connect error [ 118.042763][ T7521] /dev/nullb0: Can't open blockdev [ 120.844252][ T39] kauditd_printk_skb: 13 callbacks suppressed [ 120.844262][ T39] audit: type=1804 audit(1734531689.450:93): pid=7580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.359" name="/newroot/86/bus/file1" dev="overlay" ino=488 res=1 errno=0 [ 121.066503][ T7592] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 121.149926][ T7592] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 122.141944][ T7612] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 122.591480][ T5956] Bluetooth: hci1: unexpected event 0x2f length: 1017 > 260 [ 124.194382][ T7656] netlink: zone id is out of range [ 124.967070][ T7661] kvm: pic: level sensitive irq not supported [ 124.968077][ T7661] kvm: pic: single mode not supported [ 124.971693][ T7661] kvm: pic: single mode not supported [ 124.975007][ T7661] kvm: pic: single mode not supported [ 124.977369][ T7661] kvm: pic: single mode not supported [ 124.979316][ T7661] kvm: pic: single mode not supported [ 124.981768][ T7661] kvm: pic: single mode not supported [ 124.983492][ T7661] kvm: pic: single mode not supported [ 124.985767][ T7661] kvm: pic: single mode not supported [ 124.988109][ T7661] kvm: pic: single mode not supported [ 124.990063][ T7661] kvm: pic: single mode not supported [ 127.985112][ T7727] netlink: 28 bytes leftover after parsing attributes in process `syz.2.399'. [ 127.987560][ T7727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.399'. [ 128.955717][ T7751] netlink: 20 bytes leftover after parsing attributes in process `syz.2.406'. [ 128.987756][ T25] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 129.138721][ T25] usb 8-1: config 0 has no interfaces? [ 129.140628][ T25] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 129.143686][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.149127][ T25] usb 8-1: config 0 descriptor?? [ 129.421561][ T7764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.424658][ T7764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.444442][ T7749] usb usb9: usbfs: process 7749 (syz.3.404) did not claim interface 0 before use [ 129.550701][ T1323] usb 8-1: USB disconnect, device number 6 [ 131.380548][ T7814] netlink: 'syz.4.421': attribute type 1 has an invalid length. [ 131.399095][ T7814] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.412943][ T7814] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.415624][ T7814] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 131.421700][ T7814] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 131.521823][ T7819] netlink: 36 bytes leftover after parsing attributes in process `syz.3.422'. [ 131.524058][ T7819] netlink: 16 bytes leftover after parsing attributes in process `syz.3.422'. [ 131.526485][ T7819] netlink: 36 bytes leftover after parsing attributes in process `syz.3.422'. [ 131.529923][ T7819] netlink: 36 bytes leftover after parsing attributes in process `syz.3.422'. [ 131.637702][ T7822] vivid-004: disconnect [ 131.647555][ T7820] vivid-004: reconnect [ 131.987500][ T56] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 132.129254][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.131144][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.147346][ T56] usb 6-1: Using ep0 maxpacket: 8 [ 132.150484][ T56] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 132.152992][ T56] usb 6-1: config 0 has no interface number 0 [ 132.155117][ T56] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 132.158898][ T56] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 132.161721][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.165515][ T56] usb 6-1: config 0 descriptor?? [ 132.170062][ T56] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 133.412313][ T1331] usb 6-1: USB disconnect, device number 3 [ 133.457774][ T7858] input: syz0 as /devices/virtual/input/input9 [ 133.519173][ T39] audit: type=1326 audit(1734531702.130:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7861 comm="syz.2.436" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf579 code=0x7ffc0000 [ 133.525520][ T39] audit: type=1326 audit(1734531702.130:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7861 comm="syz.2.436" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf579 code=0x7ffc0000 [ 133.533965][ T39] audit: type=1326 audit(1734531702.130:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7861 comm="syz.2.436" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fcf579 code=0x7ffc0000 [ 133.540230][ T39] audit: type=1326 audit(1734531702.130:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7861 comm="syz.2.436" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf579 code=0x7ffc0000 [ 133.546615][ T39] audit: type=1326 audit(1734531702.130:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7861 comm="syz.2.436" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fcf579 code=0x7ffc0000 [ 133.551599][ T7862] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 133.555919][ T39] audit: type=1326 audit(1734531702.130:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7861 comm="syz.2.436" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf579 code=0x7ffc0000 [ 133.562618][ T39] audit: type=1326 audit(1734531702.130:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7861 comm="syz.2.436" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf579 code=0x7ffc0000 [ 133.573376][ T39] audit: type=1326 audit(1734531702.130:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7861 comm="syz.2.436" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fcf579 code=0x7ffc0000 [ 133.580554][ T39] audit: type=1326 audit(1734531702.130:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7861 comm="syz.2.436" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf579 code=0x7ffc0000 [ 133.591952][ T39] audit: type=1326 audit(1734531702.130:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7861 comm="syz.2.436" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf579 code=0x7ffc0000 [ 137.662176][ T7956] block nbd3: NBD_DISCONNECT [ 137.666376][ T7956] block nbd3: Disconnected due to user request. [ 137.671487][ T7956] block nbd3: shutting down sockets [ 137.717509][ T7962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.466'. [ 138.708327][ T8002] tipc: Started in network mode [ 138.709787][ T8002] tipc: Node identity 1e9f7b74f11b, cluster identity 4711 [ 138.711888][ T8002] tipc: Enabled bearer , priority 0 [ 138.719753][ T8001] tipc: Disabling bearer [ 138.720472][ T5956] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 139.832971][ T8036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.489'. [ 140.585816][ T8071] netlink: 'syz.3.493': attribute type 39 has an invalid length. [ 141.052658][ T8088] netlink: 32 bytes leftover after parsing attributes in process `syz.3.498'. [ 141.125169][ T8090] netlink: 44 bytes leftover after parsing attributes in process `syz.2.499'. [ 141.132236][ T8090] netlink: 59 bytes leftover after parsing attributes in process `syz.2.499'. [ 141.590138][ T8100] kernel profiling enabled (shift: 9) [ 141.810640][ T8086] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 141.812557][ T8086] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 141.819226][ T8086] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 141.822574][ T8086] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 141.828409][ T8086] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 141.830117][ T8086] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 142.161314][ T8115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.507'. [ 142.181169][ T8115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.507'. [ 143.564735][ T8153] cgroup: Name too long [ 143.617516][ T30] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 143.738800][ T8130] delete_channel: no stack [ 143.791495][ T8159] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 143.800401][ T8159] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 143.818485][ T8159] kvm: requested 90514 ns i8254 timer period limited to 200000 ns [ 143.820917][ T8159] kvm: requested 86323 ns i8254 timer period limited to 200000 ns [ 143.824742][ T8159] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 143.842929][ T8159] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 143.847249][ T30] usb 8-1: Using ep0 maxpacket: 8 [ 143.855658][ T30] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 143.857741][ T30] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 143.860660][ T30] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 143.863662][ T30] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 143.866532][ T30] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 143.870364][ T30] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 143.872348][ T30] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 143.875287][ T30] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 143.878468][ T30] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 143.881356][ T30] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 143.885284][ T30] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 143.887373][ T30] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 143.890350][ T30] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 143.893527][ T30] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 143.896440][ T30] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 143.904115][ T30] usb 8-1: string descriptor 0 read error: -22 [ 143.906446][ T30] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 143.909261][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.929508][ T30] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 144.292974][ T1331] usb 8-1: USB disconnect, device number 7 [ 145.438808][ T8206] bond0: entered allmulticast mode [ 145.809421][ T25] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 146.077308][ T25] usb 7-1: Using ep0 maxpacket: 16 [ 146.079926][ T25] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 146.082048][ T25] usb 7-1: config 0 has no interface number 0 [ 146.083641][ T25] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 146.086624][ T25] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 146.090867][ T25] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 146.093257][ T25] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 146.095386][ T25] usb 7-1: Product: syz [ 146.096508][ T25] usb 7-1: SerialNumber: syz [ 146.099136][ T25] usb 7-1: config 0 descriptor?? [ 146.102257][ T25] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 146.105308][ T25] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.8/input/input10 [ 146.530269][ T8233] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 146.683216][ T8240] netlink: 12 bytes leftover after parsing attributes in process `syz.4.540'. [ 146.693672][ T8240] bond2: entered promiscuous mode [ 146.695812][ T8240] 8021q: adding VLAN 0 to HW filter on device bond2 [ 146.761914][ T8242] netlink: 3 bytes leftover after parsing attributes in process `syz.4.540'. [ 146.776177][ T8242] batadv1: entered promiscuous mode [ 146.778041][ T8242] batadv1: entered allmulticast mode [ 146.780572][ T8242] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 146.785124][ T8242] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 148.605662][ C2] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 148.606461][ T56] usb 7-1: USB disconnect, device number 5 [ 148.607556][ C2] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 148.641395][ T56] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 149.979845][ T8295] random: crng reseeded on system resumption [ 149.991883][ T8297] Bluetooth: MGMT ver 1.23 [ 151.577545][ T8344] evm: overlay not supported [ 153.962237][ T39] kauditd_printk_skb: 56 callbacks suppressed [ 153.962247][ T39] audit: type=1326 audit(1734531722.570:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8361 comm="syz.4.574" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 153.971706][ T39] audit: type=1326 audit(1734531722.590:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8361 comm="syz.4.574" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 153.982038][ T39] audit: type=1326 audit(1734531722.590:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8361 comm="syz.4.574" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 153.991119][ T39] audit: type=1326 audit(1734531722.590:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8361 comm="syz.4.574" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 153.999492][ T39] audit: type=1326 audit(1734531722.590:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8361 comm="syz.4.574" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 154.007711][ T39] audit: type=1326 audit(1734531722.590:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8361 comm="syz.4.574" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 154.014779][ T39] audit: type=1326 audit(1734531722.590:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8361 comm="syz.4.574" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 154.021254][ T39] audit: type=1326 audit(1734531722.590:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8361 comm="syz.4.574" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 154.028175][ T39] audit: type=1326 audit(1734531722.590:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8361 comm="syz.4.574" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 154.034466][ T39] audit: type=1326 audit(1734531722.590:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8361 comm="syz.4.574" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 154.485775][ T8382] syzkaller0: entered promiscuous mode [ 154.487302][ T8382] syzkaller0: entered allmulticast mode [ 154.757345][ T833] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 154.908857][ T833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.913001][ T833] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 154.917779][ T833] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 154.921123][ T833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.925409][ T833] usb 6-1: config 0 descriptor?? [ 155.351976][ T833] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 155.353999][ T833] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 155.356485][ T833] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 155.363961][ T833] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 155.521724][ T8396] netlink: 'syz.2.584': attribute type 4 has an invalid length. [ 155.635516][ T30] usb 6-1: USB disconnect, device number 4 [ 157.513155][ T8407] netlink: 48 bytes leftover after parsing attributes in process `syz.1.590'. [ 157.619648][ T8412] ptrace attach of ""[8413] was attempted by "/syz-executor exec"[8412] [ 158.235938][ T8422] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 158.927264][ T1323] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 159.097447][ T1323] usb 9-1: Using ep0 maxpacket: 32 [ 159.102659][ T1323] usb 9-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 159.105204][ T1323] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.107704][ T1323] usb 9-1: Product: syz [ 159.108939][ T1323] usb 9-1: Manufacturer: syz [ 159.110467][ T1323] usb 9-1: SerialNumber: syz [ 159.119243][ T1323] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 159.647446][ T1323] gspca_stk1135: reg_w 0x0 err -71 [ 159.650119][ T1323] gspca_stk1135: serial bus timeout: status=0x00 [ 159.653792][ T1323] gspca_stk1135: Sensor write failed [ 159.655580][ T1323] gspca_stk1135: serial bus timeout: status=0x00 [ 159.657754][ T1323] gspca_stk1135: Sensor write failed [ 159.659305][ T1323] gspca_stk1135: serial bus timeout: status=0x00 [ 159.661172][ T1323] gspca_stk1135: Sensor read failed [ 159.662697][ T1323] gspca_stk1135: serial bus timeout: status=0x00 [ 159.664469][ T1323] gspca_stk1135: Sensor read failed [ 159.666103][ T1323] gspca_stk1135: Detected sensor type unknown (0x0) [ 159.668241][ T1323] gspca_stk1135: serial bus timeout: status=0x00 [ 159.670179][ T1323] gspca_stk1135: Sensor read failed [ 159.671767][ T1323] gspca_stk1135: serial bus timeout: status=0x00 [ 159.673544][ T1323] gspca_stk1135: Sensor read failed [ 159.675021][ T1323] gspca_stk1135: serial bus timeout: status=0x00 [ 159.676824][ T1323] gspca_stk1135: Sensor write failed [ 159.678767][ T1323] gspca_stk1135: serial bus timeout: status=0x00 [ 159.680907][ T1323] gspca_stk1135: Sensor write failed [ 159.682553][ T1323] stk1135 9-1:64.0: probe with driver stk1135 failed with error -71 [ 159.686583][ T1323] usb 9-1: USB disconnect, device number 4 [ 161.191596][ T8479] binder: 8470:8479 ioctl c0306201 0 returned -14 [ 161.230840][ T8479] sp0: Synchronizing with TNC [ 161.726484][ T8496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.607'. [ 161.870421][ T8470] [U] [ 162.020295][ T5956] block nbd3: Receive control failed (result -32) [ 162.025836][ T7514] block nbd3: shutting down sockets [ 162.606043][ T8526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.612'. [ 162.614082][ T8526] netlink: 64 bytes leftover after parsing attributes in process `syz.1.612'. [ 165.397353][ T833] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 165.561482][ T833] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 165.565324][ T833] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 165.569817][ T833] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 165.572817][ T833] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.589568][ T8563] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 165.595799][ T833] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 165.799641][ T833] usb 9-1: USB disconnect, device number 5 [ 166.038437][ T8581] netlink: 'syz.4.629': attribute type 1 has an invalid length. [ 166.059316][ T8581] 8021q: adding VLAN 0 to HW filter on device bond3 [ 166.082594][ T8581] bond3: (slave bridge1): making interface the new active one [ 166.086072][ T8581] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 166.101181][ T8581] bond3: (slave bridge2): Enslaving as an active interface with a down link [ 166.477318][ T1323] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 166.647334][ T1323] usb 9-1: Using ep0 maxpacket: 32 [ 166.651736][ T1323] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.654850][ T1323] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.657620][ T1323] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 166.660043][ T1323] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.663908][ T1323] usb 9-1: config 0 descriptor?? [ 167.084683][ T1323] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 168.420745][ T8606] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 168.436436][ T8606] kvm: pic: level sensitive irq not supported [ 168.436816][ T8606] kvm: pic: non byte read [ 168.442617][ T8606] kvm: pic: level sensitive irq not supported [ 168.443352][ T8606] kvm: pic: non byte read [ 168.528113][ T1323] usb 9-1: reset high-speed USB device number 6 using dummy_hcd [ 168.867239][ T8] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 169.048536][ T8] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 169.052500][ T8] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.055247][ T8] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 169.059265][ T8] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 169.062179][ T8] usb 6-1: config 0 interface 0 has no altsetting 0 [ 169.068805][ T8] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.071266][ T8] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 169.074262][ T8] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 169.081905][ T8] usb 6-1: config 0 interface 0 has no altsetting 0 [ 169.090508][ T8] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.092967][ T8] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 169.095878][ T8] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 169.108038][ T8] usb 6-1: config 0 interface 0 has no altsetting 0 [ 169.113907][ T8] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.116393][ T8] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 169.126795][ T8] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 169.134272][ T8] usb 6-1: config 0 interface 0 has no altsetting 0 [ 169.142567][ T8] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.147012][ T8] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 169.152883][ T8] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 169.158123][ T8] usb 6-1: config 0 interface 0 has no altsetting 0 [ 169.164071][ T8] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.169017][ T8] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 169.175318][ T8] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 169.180771][ T8] usb 6-1: config 0 interface 0 has no altsetting 0 [ 169.185844][ T8] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.189012][ T8] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 169.192150][ T8] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 169.196021][ T8] usb 6-1: config 0 interface 0 has no altsetting 0 [ 169.202093][ T8] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.206276][ T8] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 169.209675][ T8] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 169.212915][ T8] usb 6-1: config 0 interface 0 has no altsetting 0 [ 169.225433][ T8] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 169.228171][ T8] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 169.230540][ T8] usb 6-1: Product: syz [ 169.231717][ T8] usb 6-1: Manufacturer: syz [ 169.233012][ T8] usb 6-1: SerialNumber: syz [ 169.243481][ T8] usb 6-1: config 0 descriptor?? [ 169.253010][ T8] yurex 6-1:0.0: Could not submitting URB [ 169.254939][ T8] yurex 6-1:0.0: probe with driver yurex failed with error -5 [ 169.382424][ T8619] sch_fq: defrate 0 ignored. [ 169.508481][ T8623] No buffer was provided with the request [ 169.513617][ T833] usb 6-1: USB disconnect, device number 5 [ 170.085249][ T1331] usb 9-1: USB disconnect, device number 6 [ 170.457709][ T8641] ======================================================= [ 170.457709][ T8641] WARNING: The mand mount option has been deprecated and [ 170.457709][ T8641] and is ignored by this kernel. Remove the mand [ 170.457709][ T8641] option from the mount to silence this warning. [ 170.457709][ T8641] ======================================================= [ 172.070318][ T8675] capability: warning: `syz.3.653' uses 32-bit capabilities (legacy support in use) [ 172.578404][ T65] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 172.582981][ T65] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 172.586760][ T65] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 172.590132][ T65] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 172.592580][ T65] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 172.595579][ T65] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 172.608808][ T5956] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 172.612537][ T5956] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 172.615734][ T5956] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 172.620713][ T5956] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 172.622866][ T5956] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 172.624938][ T5956] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 172.755583][ T8689] chnl_net:caif_netlink_parms(): no params data found [ 172.803646][ T1135] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.848933][ T8689] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.850971][ T8689] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.852986][ T8689] bridge_slave_0: entered allmulticast mode [ 172.854941][ T8689] bridge_slave_0: entered promiscuous mode [ 172.858015][ T8689] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.860016][ T8689] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.862052][ T8689] bridge_slave_1: entered allmulticast mode [ 172.864213][ T8689] bridge_slave_1: entered promiscuous mode [ 172.909472][ T1135] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.916131][ T8689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.923033][ T8689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.955145][ T8689] team0: Port device team_slave_0 added [ 172.958400][ T8689] team0: Port device team_slave_1 added [ 172.995629][ T8689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.000090][ T8689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.010059][ T8689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.015533][ T8689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.018663][ T8689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.025805][ T8689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.051669][ T8689] hsr_slave_0: entered promiscuous mode [ 173.053737][ T8689] hsr_slave_1: entered promiscuous mode [ 173.055826][ T8689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.058284][ T8689] Cannot create hsr debugfs directory [ 173.082130][ T1135] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.159138][ T1135] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.209390][ T8689] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 173.212754][ T8689] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 173.216374][ T8689] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 173.222190][ T8689] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 173.242807][ T8689] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.244793][ T8689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.246841][ T8689] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.248733][ T8689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.269844][ T1135] bridge_slave_1: left allmulticast mode [ 173.277854][ T1135] bridge_slave_1: left promiscuous mode [ 173.283182][ T1135] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.289236][ T1135] bridge_slave_0: left allmulticast mode [ 173.291312][ T1135] bridge_slave_0: left promiscuous mode [ 173.293516][ T1135] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.736477][ T1135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.741757][ T1135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.745154][ T1135] bond0 (unregistering): Released all slaves [ 173.753990][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.757044][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.797406][ T8689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.805840][ T8689] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.821451][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.823698][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.826697][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.828874][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.833199][ T1135] tipc: Left network mode [ 174.009365][ T8689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.065471][ T1135] hsr_slave_0: left promiscuous mode [ 174.068008][ T1135] hsr_slave_1: left promiscuous mode [ 174.070074][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.072017][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.074315][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.076270][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.103320][ T1135] veth1_macvtap: left promiscuous mode [ 174.104867][ T1135] veth0_macvtap: left promiscuous mode [ 174.106519][ T1135] veth1_vlan: left promiscuous mode [ 174.108878][ T1135] veth0_vlan: left promiscuous mode [ 174.207466][ T35] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 174.377331][ T35] usb 8-1: Using ep0 maxpacket: 8 [ 174.381000][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.383816][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.386547][ T35] usb 8-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 174.389490][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.394238][ T35] usb 8-1: config 0 descriptor?? [ 174.400973][ T35] usbhid 8-1:0.0: can't add hid device: -22 [ 174.402902][ T35] usbhid 8-1:0.0: probe with driver usbhid failed with error -22 [ 174.689128][ T5956] Bluetooth: hci2: command tx timeout [ 174.764027][ T25] usb 8-1: USB disconnect, device number 8 [ 174.971329][ T1135] team0 (unregistering): Port device team_slave_1 removed [ 175.055449][ T1135] team0 (unregistering): Port device team_slave_0 removed [ 175.709075][ T30] libceph: connect (1)[c::]:6789 error -101 [ 175.711393][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 176.003232][ T30] libceph: connect (1)[c::]:6789 error -101 [ 176.015764][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 176.200828][ T8689] veth0_vlan: entered promiscuous mode [ 176.210622][ T8689] veth1_vlan: entered promiscuous mode [ 176.233736][ T8689] veth0_macvtap: entered promiscuous mode [ 176.253287][ T8689] veth1_macvtap: entered promiscuous mode [ 176.276498][ T8689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.282308][ T8689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.285699][ T8689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.291723][ T8689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.303943][ T8689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.322402][ T8689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.326299][ T8689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.326553][ T8747] ceph: No mds server is up or the cluster is laggy [ 176.330019][ T8689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.335360][ T8689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.344027][ T8689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.371403][ T8689] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.374567][ T8689] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.378359][ T8689] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.381546][ T8689] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.471874][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.476864][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.490940][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.493741][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.564373][ T8774] netlink: 48 bytes leftover after parsing attributes in process `syz.4.673'. [ 176.777408][ T5956] Bluetooth: hci2: command tx timeout [ 177.571122][ T8817] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 177.572847][ T8817] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 177.577587][ T8817] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 179.133309][ T8857] binder: 8855:8857 ioctl c0306201 0 returned -14 [ 179.172229][ T8857] sp0: Synchronizing with TNC [ 179.316749][ T8855] [U] [ 179.515697][ T8863] [U] [ 179.516592][ T8863] [U] [ 179.517255][ T8863] [U] [ 179.518188][ T8863] [U] [ 179.521482][ T8863] [U] [ 179.522517][ T8863] [U] [ 179.523398][ T8863] [U] [ 179.524151][ T8863] [U] [ 179.525028][ T8863] [U] [ 179.525796][ T8863] [U] [ 179.526556][ T8863] [U] [ 179.527299][ T8863] [U] [ 179.528938][ T8863] [U] [ 179.529963][ T8863] [U] [ 179.530962][ T8863] [U] [ 179.531992][ T8863] [U] [ 179.533087][ T8863] [U] [ 179.534094][ T8863] [U] [ 179.535081][ T8863] [U] [ 179.536075][ T8863] [U] [ 179.537110][ T8863] [U] [ 179.538151][ T8863] [U] [ 179.539133][ T8863] [U] [ 179.539975][ T8863] [U] [ 179.542771][ T8863] [U] [ 179.543866][ T8863] [U] [ 179.544806][ T8863] [U] [ 179.545567][ T8863] [U] [ 179.546375][ T8863] [U] [ 179.547123][ T8863] [U] [ 179.547869][ T8863] [U] [ 179.548601][ T8863] [U] [ 179.551441][ T8863] [U] [ 179.552215][ T8863] [U] [ 179.552977][ T8863] [U] [ 179.553717][ T8863] [U] [ 179.554528][ T8863] [U] [ 179.555278][ T8863] [U] [ 179.556025][ T8863] [U] [ 179.556781][ T8863] [U] [ 179.557709][ T8863] [U] [ 179.558488][ T8863] [U] [ 179.559223][ T8863] [U] [ 179.559974][ T8863] [U] [ 179.560720][ T8863] [U] [ 179.561468][ T8863] [U] [ 179.562203][ T8863] [U] [ 179.562938][ T8863] [U] [ 179.563812][ T8863] [U] [ 179.564546][ T8863] [U] [ 179.565325][ T8863] [U] [ 179.566086][ T8863] [U] [ 179.566841][ T8863] [U] [ 179.567655][ T8863] [U] [ 179.568386][ T8863] [U] [ 179.569139][ T8863] [U] [ 179.570387][ T8863] [U] [ 179.571289][ T8863] [U] [ 179.572226][ T8863] [U] [ 179.572989][ T8863] [U] [ 179.574891][ T8863] [U] [ 179.575480][ T8868] netlink: 'syz.3.686': attribute type 27 has an invalid length. [ 179.575924][ T8863] [U] [ 179.579574][ T8863] [U] [ 179.580602][ T8863] [U] [ 179.584900][ T8863] [U] [ 179.585954][ T8863] [U] [ 179.587005][ T8863] [U] [ 179.588026][ T8863] [U] [ 179.590107][ T8863] [U] [ 179.591158][ T8863] [U] [ 179.592198][ T8863] [U] [ 179.593240][ T8863] [U] [ 179.594252][ T8863] [U] [ 179.595006][ T8863] [U] [ 179.596045][ T8863] [U] [ 179.597086][ T8863] [U] [ 179.599404][ T8863] [U] [ 179.600455][ T8863] [U] [ 179.601504][ T8863] [U] [ 179.602537][ T8863] [U] [ 179.603642][ T8863] [U] [ 179.604681][ T8863] [U] [ 179.605781][ T8863] [U] [ 179.606802][ T8863] [U] [ 179.608952][ T8863] [U] [ 179.609984][ T8863] [U] [ 179.610983][ T8863] [U] [ 179.612009][ T8863] [U] [ 179.614374][ T8863] [U] [ 179.615349][ T8863] [U] [ 179.616162][ T8863] [U] [ 179.616958][ T8863] [U] [ 179.618117][ T8863] [U] [ 179.618914][ T8863] [U] [ 179.619701][ T8863] [U] [ 179.620581][ T8863] [U] [ 179.621422][ T8863] [U] [ 179.622203][ T8863] [U] [ 179.622968][ T8863] [U] [ 179.623733][ T8863] [U] [ 179.624569][ T8863] [U] [ 179.625362][ T8863] [U] [ 179.626363][ T8863] [U] [ 179.627411][ T8863] [U] [ 179.630983][ T8863] [U] [ 179.631762][ T8863] [U] [ 179.632542][ T8863] [U] [ 179.633338][ T8863] [U] [ 179.634664][ T8863] [U] [ 179.635466][ T8863] [U] [ 179.636223][ T8863] [U] [ 179.637013][ T8863] [U] [ 179.639001][ T8863] [U] [ 179.639779][ T8863] [U] [ 179.640511][ T8863] [U] [ 179.641261][ T8863] [U] [ 179.642096][ T8863] [U] [ 179.642839][ T8863] [U] [ 179.643582][ T8863] [U] [ 179.644320][ T8863] [U] [ 179.645172][ T8863] [U] [ 179.645951][ T8863] [U] [ 179.646685][ T8863] [U] [ 179.647462][ T8863] [U] [ 179.648420][ T8863] [U] [ 179.649201][ T8863] [U] [ 179.649960][ T8863] [U] [ 179.657970][ T5956] Bluetooth: hci2: command 0x0419 tx timeout [ 179.728466][ T8868] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.731110][ T8868] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.734287][ T8868] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.736695][ T8868] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.761856][ T8870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.764099][ T8870] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.768087][ T8870] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.819177][ T8862] [U] [ 181.312387][ T8890] syz.1.687 (8890) used greatest stack depth: 20480 bytes left [ 181.403705][ T8896] netlink: 28 bytes leftover after parsing attributes in process `syz.1.688'. [ 181.406186][ T8896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.688'. [ 181.727514][ T5956] Bluetooth: hci2: command 0x0419 tx timeout [ 183.386978][ T8945] kernel read not supported for file /rmdF (pid: 8945 comm: syz.5.701) [ 183.394445][ T39] kauditd_printk_skb: 20 callbacks suppressed [ 183.394456][ T39] audit: type=1800 audit(1734531752.000:190): pid=8945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.701" name=726D64461716BCEC dev="mqueue" ino=26900 res=0 errno=0 [ 183.867269][ T5956] Bluetooth: hci2: command 0x0419 tx timeout [ 184.958641][ T8980] input: syz0 as /devices/virtual/input/input11 [ 185.415321][ T8990] binder: 8987:8990 ioctl c0306201 0 returned -14 [ 185.516579][ T8990] sp0: Synchronizing with TNC [ 185.829972][ T8987] [U] [ 185.887404][ T5956] Bluetooth: hci2: command 0x0419 tx timeout [ 186.284560][ T39] audit: type=1326 audit(1734531754.890:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="syz.5.720" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 186.292578][ T39] audit: type=1326 audit(1734531754.890:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="syz.5.720" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 186.311946][ T39] audit: type=1326 audit(1734531754.890:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="syz.5.720" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 186.319823][ T39] audit: type=1326 audit(1734531754.900:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="syz.5.720" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 186.322036][ T9014] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 186.334682][ T39] audit: type=1326 audit(1734531754.900:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="syz.5.720" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 186.336702][ T9012] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 186.342633][ T39] audit: type=1326 audit(1734531754.900:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="syz.5.720" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 186.353921][ T39] audit: type=1326 audit(1734531754.900:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="syz.5.720" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 186.361322][ T39] audit: type=1326 audit(1734531754.900:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="syz.5.720" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 186.368927][ T39] audit: type=1326 audit(1734531754.900:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="syz.5.720" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 186.507341][ T30] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 186.615221][ T9024] vivid-003: disconnect [ 186.621287][ T9020] vivid-003: reconnect [ 186.668948][ T30] usb 8-1: Using ep0 maxpacket: 8 [ 186.671435][ T30] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 186.673706][ T30] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 186.676004][ T30] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 186.683715][ T30] usb 8-1: config 250 has no interface number 0 [ 186.689218][ T30] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 186.692472][ T30] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 186.695304][ T30] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 186.698652][ T30] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 186.701527][ T30] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 186.705643][ T30] usb 8-1: config 250 interface 228 has no altsetting 0 [ 186.711891][ T30] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 186.714379][ T30] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 186.716922][ T30] usb 8-1: Product: syz [ 186.718257][ T30] usb 8-1: SerialNumber: syz [ 186.729353][ T30] hub 8-1:250.228: bad descriptor, ignoring hub [ 186.731054][ T30] hub 8-1:250.228: probe with driver hub failed with error -5 [ 186.938162][ T30] usblp 8-1:250.228: usblp0: USB Bidirectional printer dev 9 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 187.556203][ T9005] usb 8-1: reset high-speed USB device number 9 using dummy_hcd [ 188.316581][ T1323] usb 8-1: USB disconnect, device number 9 [ 188.328663][ T1323] usblp0: removed [ 188.786860][ T9073] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 188.802463][ T9073] overlayfs: failed to set xattr on upper [ 188.804693][ T9073] overlayfs: ...falling back to redirect_dir=nofollow. [ 188.806706][ T9073] overlayfs: ...falling back to index=off. [ 188.812481][ T9073] overlayfs: ...falling back to uuid=null. [ 188.833077][ T9075] binder: 9068:9075 ioctl c0306201 0 returned -14 [ 188.921557][ T9075] sp0: Synchronizing with TNC [ 189.196319][ T9068] [U] [ 190.429839][ T9132] netlink: 'syz.5.739': attribute type 4 has an invalid length. [ 190.449150][ T9135] netlink: 'syz.3.740': attribute type 1 has an invalid length. [ 190.463556][ T9135] bond1: entered promiscuous mode [ 190.465634][ T9135] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.545891][ T39] kauditd_printk_skb: 30 callbacks suppressed [ 190.545970][ T9140] netlink: 3 bytes leftover after parsing attributes in process `syz.3.740'. [ 190.546154][ T39] audit: type=1804 audit(1734531759.150:230): pid=9138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.742" name="/newroot/20/file0/file0" dev="9p" ino=37617947 res=1 errno=0 [ 190.583237][ T9140] batadv1: entered promiscuous mode [ 190.585262][ T9140] batadv1: entered allmulticast mode [ 190.587835][ T9140] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 190.591122][ T9140] bond1: (slave batadv1): making interface the new active one [ 190.594625][ T9140] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 190.623652][ T39] audit: type=1800 audit(1734531759.230:231): pid=9138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.742" name="bus" dev="9p" ino=37618169 res=0 errno=0 [ 190.656322][ T39] audit: type=1800 audit(1734531759.260:232): pid=9138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.742" name="bus" dev="9p" ino=37618169 res=0 errno=0 [ 191.903840][ T9168] binder: 9165:9168 ioctl c0306201 0 returned -14 [ 191.986849][ T9168] sp0: Synchronizing with TNC [ 192.427401][ T9165] [U] [ 193.386974][ T9189] binder: 9186:9189 ioctl c0306201 0 returned -14 [ 193.426757][ T9189] sp0: Synchronizing with TNC [ 193.579700][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.581510][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.652816][ T9186] [U] [ 193.735303][ T9196] netfs: Couldn't get user pages (rc=-14) [ 194.205757][ T9206] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 194.209465][ T9206] overlayfs: failed to set xattr on upper [ 194.211445][ T9206] overlayfs: ...falling back to redirect_dir=nofollow. [ 194.213764][ T9206] overlayfs: ...falling back to index=off. [ 194.215759][ T9206] overlayfs: ...falling back to uuid=null. [ 196.016159][ T9234] netlink: 4 bytes leftover after parsing attributes in process `syz.5.769'. [ 196.248799][ T9234] netlink: 4 bytes leftover after parsing attributes in process `syz.5.769'. [ 196.425624][ T9240] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 196.427608][ T9240] overlayfs: failed to set xattr on upper [ 196.429102][ T9240] overlayfs: ...falling back to redirect_dir=nofollow. [ 196.430954][ T9240] overlayfs: ...falling back to index=off. [ 196.432390][ T9240] overlayfs: ...falling back to uuid=null. [ 196.462896][ T9242] netlink: 28 bytes leftover after parsing attributes in process `syz.3.771'. [ 196.465924][ T9242] netlink: 28 bytes leftover after parsing attributes in process `syz.3.771'. [ 196.481540][ T9242] bond0: entered promiscuous mode [ 196.484724][ T9242] batadv_slave_1: entered promiscuous mode [ 196.489282][ T9242] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 196.492464][ T9242] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.217522][ T9291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.780'. [ 198.243794][ T9291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.780'. [ 200.192997][ T9307] delete_channel: no stack [ 204.499233][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 215.328400][ T63] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 229.456651][ T9530] netlink: 4 bytes leftover after parsing attributes in process `syz.5.829'. [ 230.561357][ T9557] netlink: 'syz.1.828': attribute type 4 has an invalid length. [ 235.291270][ T9651] [U] [ 235.292037][ T9651] [U] [ 235.292724][ T9651] [U] [ 235.293387][ T9651] [U] [ 235.294077][ T9651] [U] [ 235.294960][ T9651] [U] [ 235.295811][ T9651] [U] [ 235.296658][ T9651] [U] [ 235.301051][ T9651] [U] [ 235.301758][ T9651] [U] [ 235.302416][ T9651] [U] [ 235.303073][ T9651] [U] [ 235.303728][ T9651] [U] [ 235.304402][ T9651] [U] [ 235.305205][ T9651] [U] [ 235.306127][ T9651] [U] [ 235.307077][ T9651] [U] [ 235.308070][ T9651] [U] [ 235.309044][ T9651] [U] [ 235.309986][ T9651] [U] [ 235.314194][ T9651] [U] [ 235.315167][ T9651] [U] [ 235.316069][ T9651] [U] [ 235.317000][ T9651] [U] [ 235.323272][ T9651] [U] [ 235.324228][ T9651] [U] [ 235.325154][ T9651] [U] [ 235.326072][ T9651] [U] [ 235.327000][ T9651] [U] [ 235.327930][ T9651] [U] [ 235.328849][ T9651] [U] [ 235.329801][ T9651] [U] [ 235.331952][ T9651] [U] [ 235.332767][ T9651] [U] [ 235.333427][ T9651] [U] [ 235.334084][ T9651] [U] [ 235.334753][ T9651] [U] [ 235.335523][ T9651] [U] [ 235.336452][ T9651] [U] [ 235.337375][ T9651] [U] [ 235.341941][ T9651] [U] [ 235.342852][ T9651] [U] [ 235.343723][ T9651] [U] [ 235.344610][ T9651] [U] [ 235.345500][ T9651] [U] [ 235.346366][ T9651] [U] [ 235.347373][ T9651] [U] [ 235.348274][ T9651] [U] [ 235.352634][ T9651] [U] [ 235.352743][ T9653] netlink: 'syz.1.852': attribute type 27 has an invalid length. [ 235.353307][ T9651] [U] [ 235.356045][ T9651] [U] [ 235.356720][ T9651] [U] [ 235.361213][ T9651] [U] [ 235.361952][ T9651] [U] [ 235.362606][ T9651] [U] [ 235.363291][ T9651] [U] [ 235.363996][ T9651] [U] [ 235.364671][ T9651] [U] [ 235.365389][ T9651] [U] [ 235.366069][ T9651] [U] [ 235.366742][ T9651] [U] [ 235.367442][ T9651] [U] [ 235.368101][ T9651] [U] [ 235.368826][ T9651] [U] [ 235.373744][ T9651] [U] [ 235.374437][ T9651] [U] [ 235.375174][ T9651] [U] [ 235.375860][ T9651] [U] [ 235.376539][ T9651] [U] [ 235.377270][ T9651] [U] [ 235.377953][ T9651] [U] [ 235.378627][ T9651] [U] [ 235.383148][ T9651] [U] [ 235.384133][ T9651] [U] [ 235.385131][ T9651] [U] [ 235.386076][ T9651] [U] [ 235.387070][ T9651] [U] [ 235.387911][ T9651] [U] [ 235.388616][ T9651] [U] [ 235.389304][ T9651] [U] [ 235.393519][ T9651] [U] [ 235.394402][ T9651] [U] [ 235.395070][ T9651] [U] [ 235.395720][ T9651] [U] [ 235.396387][ T9651] [U] [ 235.397042][ T9651] [U] [ 235.397701][ T9651] [U] [ 235.398681][ T9651] [U] [ 235.406678][ T9651] [U] [ 235.407394][ T9651] [U] [ 235.408084][ T9651] [U] [ 235.408759][ T9651] [U] [ 235.411058][ T9651] [U] [ 235.411799][ T9651] [U] [ 235.412496][ T9651] [U] [ 235.413149][ T9651] [U] [ 235.413856][ T9651] [U] [ 235.414529][ T9651] [U] [ 235.415234][ T9651] [U] [ 235.415914][ T9651] [U] [ 235.416623][ T9651] [U] [ 235.417322][ T9651] [U] [ 235.417996][ T9651] [U] [ 235.418644][ T9651] [U] [ 235.422461][ T9651] [U] [ 235.423196][ T9651] [U] [ 235.423879][ T9651] [U] [ 235.424550][ T9651] [U] [ 235.425243][ T9651] [U] [ 235.425907][ T9651] [U] [ 235.426582][ T9651] [U] [ 235.427270][ T9651] [U] [ 235.430256][ T9651] [U] [ 235.431099][ T9651] [U] [ 235.431874][ T9651] [U] [ 235.432592][ T9651] [U] [ 235.433345][ T9651] [U] [ 235.434089][ T9651] [U] [ 235.434773][ T9651] [U] [ 235.435641][ T9651] [U] [ 235.436436][ T9651] [U] [ 235.437093][ T9651] [U] [ 235.437754][ T9651] [U] [ 235.438454][ T9651] [U] [ 235.438963][ T9653] bridge0: port 2(syz_tun) entered disabled state [ 235.445664][ T9651] [U] [ 235.446353][ T9651] [U] [ 235.447017][ T9651] [U] [ 235.457189][ T9653] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.610325][ T9653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.616092][ T9653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.713914][ T9653] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.716320][ T9653] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.721765][ T9653] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.726638][ T9653] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.754528][ T9654] bridge0: port 2(syz_tun) entered blocking state [ 235.756515][ T9654] bridge0: port 2(syz_tun) entered forwarding state [ 235.761185][ T9654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.773214][ T9654] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.784273][ T9654] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 235.830355][ T9650] [U] [ 237.309694][ T9696] netlink: 16 bytes leftover after parsing attributes in process `syz.3.860'. [ 237.393495][ T39] audit: type=1326 audit(1734531806.000:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9695 comm="syz.3.860" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff2579 code=0x0 [ 237.639464][ T9700] veth1_vlan: left promiscuous mode [ 239.180169][ T9740] cgroup: fork rejected by pids controller in /syz4 [ 240.171747][T10124] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 240.189035][T10124] kvm: pic: level sensitive irq not supported [ 240.190028][T10124] kvm: pic: non byte read [ 240.196836][T10124] kvm: pic: level sensitive irq not supported [ 240.197882][T10124] kvm: pic: non byte read [ 240.201849][T10124] kvm: pic: level sensitive irq not supported [ 240.202124][T10124] kvm: pic: non byte read [ 242.017240][ T834] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 242.167238][ T834] usb 10-1: Using ep0 maxpacket: 8 [ 242.171269][ T834] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 242.173246][ T834] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 242.176139][ T834] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 242.180894][ T834] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 242.183740][ T834] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 242.197461][ T834] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 242.199476][ T834] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 242.202386][ T834] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 242.206444][ T834] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 242.217722][ T834] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 242.227660][ T834] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 242.227861][T10166] [U] [ 242.229758][ T834] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 242.230511][T10166] [U] [ 242.233454][ T834] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 242.234187][T10166] [U] [ 242.238330][T10166] [U] [ 242.240017][T10166] [U] [ 242.240781][T10166] [U] [ 242.241533][T10166] [U] [ 242.241975][ T834] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 242.242255][T10166] [U] [ 242.245227][ T834] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 242.245966][T10166] [U] [ 242.249791][T10166] [U] [ 242.250518][T10166] [U] [ 242.251244][T10166] [U] [ 242.252547][T10166] [U] [ 242.253308][T10166] [U] [ 242.254044][T10166] [U] [ 242.254783][T10166] [U] [ 242.255568][T10166] [U] [ 242.256308][T10166] [U] [ 242.257034][T10166] [U] [ 242.257769][T10166] [U] [ 242.258660][T10166] [U] [ 242.259415][T10166] [U] [ 242.260141][T10166] [U] [ 242.260877][T10166] [U] [ 242.261706][T10166] [U] [ 242.262452][T10166] [U] [ 242.263182][T10166] [U] [ 242.263912][T10166] [U] [ 242.264833][T10166] [U] [ 242.265600][T10166] [U] [ 242.266329][T10166] [U] [ 242.267057][T10166] [U] [ 242.268010][ T834] usb 10-1: string descriptor 0 read error: -22 [ 242.268042][T10166] [U] [ 242.269753][ T834] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 242.270446][T10166] [U] [ 242.272864][ T834] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.273581][T10166] [U] [ 242.276523][T10166] [U] [ 242.277649][T10166] [U] [ 242.278396][T10166] [U] [ 242.279141][T10166] [U] [ 242.279826][ T834] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 242.279869][T10166] [U] [ 242.279897][T10166] [U] [ 242.283370][T10166] [U] [ 242.284180][T10166] [U] [ 242.285201][T10166] [U] [ 242.286108][T10166] [U] [ 242.286913][T10166] [U] [ 242.287650][T10166] [U] [ 242.288396][T10166] [U] [ 242.292958][T10167] netlink: 'syz.4.884': attribute type 27 has an invalid length. [ 242.293890][T10166] [U] [ 242.295854][T10166] [U] [ 242.296610][T10166] [U] [ 242.297348][T10166] [U] [ 242.303079][T10166] [U] [ 242.303850][T10166] [U] [ 242.304602][T10166] [U] [ 242.305352][T10166] [U] [ 242.306109][T10166] [U] [ 242.306843][T10166] [U] [ 242.307589][T10166] [U] [ 242.308332][T10166] [U] [ 242.309140][T10166] [U] [ 242.309884][T10166] [U] [ 242.310619][T10166] [U] [ 242.311353][T10166] [U] [ 242.312150][T10166] [U] [ 242.312893][T10166] [U] [ 242.313640][T10166] [U] [ 242.314385][T10166] [U] [ 242.315235][T10166] [U] [ 242.315973][T10166] [U] [ 242.316719][T10166] [U] [ 242.317466][T10166] [U] [ 242.318314][T10166] [U] [ 242.319078][T10166] [U] [ 242.319815][T10166] [U] [ 242.320561][T10166] [U] [ 242.321315][T10166] [U] [ 242.322053][T10166] [U] [ 242.322802][T10166] [U] [ 242.323538][T10166] [U] [ 242.324422][T10166] [U] [ 242.325190][T10166] [U] [ 242.325996][T10166] [U] [ 242.326917][T10166] [U] [ 242.327877][T10166] [U] [ 242.328647][T10166] [U] [ 242.329388][T10166] [U] [ 242.330124][T10166] [U] [ 242.330907][T10166] [U] [ 242.331642][T10166] [U] [ 242.332395][T10166] [U] [ 242.333134][T10166] [U] [ 242.333898][T10166] [U] [ 242.334649][T10166] [U] [ 242.335396][T10166] [U] [ 242.336128][T10166] [U] [ 242.336982][T10166] [U] [ 242.337725][T10166] [U] [ 242.338459][T10166] [U] [ 242.339213][T10166] [U] [ 242.340111][T10166] [U] [ 242.340866][T10166] [U] [ 242.341596][T10166] [U] [ 242.342328][T10166] [U] [ 242.343075][T10166] [U] [ 242.343803][T10166] [U] [ 242.344560][T10166] [U] [ 242.345326][T10166] [U] [ 242.346059][T10166] [U] [ 242.346908][T10166] [U] [ 242.347656][T10166] [U] [ 242.348396][T10166] [U] [ 242.349220][T10166] [U] [ 242.349952][T10166] [U] [ 242.350690][T10166] [U] [ 242.351422][T10166] [U] [ 242.352200][T10166] [U] [ 242.352949][T10166] [U] [ 242.353672][T10166] [U] [ 242.354464][T10166] [U] [ 242.355201][T10166] [U] [ 242.355933][T10166] [U] [ 242.356661][T10166] [U] [ 242.357401][T10166] [U] [ 242.359673][T10166] [U] [ 242.360425][T10166] [U] [ 242.361154][T10166] [U] [ 242.399805][T10167] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.401969][T10167] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.410066][T10170] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 242.476951][T10167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.483631][T10167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.532660][T10167] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.535940][T10167] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.538470][T10167] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.540888][T10167] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.551614][T10167] bond2: left promiscuous mode [ 242.554240][T10167] batadv1: left promiscuous mode [ 242.555559][T10167] batadv1: left allmulticast mode [ 242.577541][T10168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.579549][T10168] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.595195][T10168] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.628884][T10165] [U] [ 242.642559][ T63] usb 10-1: USB disconnect, device number 2 [ 244.329386][T10194] input: syz0 as /devices/virtual/input/input12 [ 245.082277][T10196] binder: BINDER_SET_CONTEXT_MGR already set [ 245.084730][T10196] binder: 10195:10196 ioctl 4018620d 20000540 returned -16 [ 245.127066][T10198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.891'. [ 245.134766][T10198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.891'. [ 246.438397][T10208] netlink: 12 bytes leftover after parsing attributes in process `syz.3.895'. [ 246.451137][T10208] bond2: entered promiscuous mode [ 246.453455][T10208] 8021q: adding VLAN 0 to HW filter on device bond2 [ 246.546131][T10217] netlink: 3 bytes leftover after parsing attributes in process `syz.3.895'. [ 246.550449][T10217] batadv2: entered promiscuous mode [ 246.551935][T10217] batadv2: entered allmulticast mode [ 246.554444][T10217] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 246.557612][T10217] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 247.472087][ T65] block nbd4: Receive control failed (result -107) [ 247.573262][T10227] syz.4.906: attempt to access beyond end of device [ 247.573262][T10227] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 247.577947][T10227] syz.4.906: attempt to access beyond end of device [ 247.577947][T10227] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 247.581506][T10227] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 247.584222][T10227] syz.4.906: attempt to access beyond end of device [ 247.584222][T10227] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 247.587851][T10227] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 247.591427][T10227] syz.4.906: attempt to access beyond end of device [ 247.591427][T10227] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 247.595913][T10227] syz.4.906: attempt to access beyond end of device [ 247.595913][T10227] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 247.599591][T10227] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 247.602173][T10227] syz.4.906: attempt to access beyond end of device [ 247.602173][T10227] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 247.605662][T10227] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 247.609291][T10227] syz.4.906: attempt to access beyond end of device [ 247.609291][T10227] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 247.613529][T10227] syz.4.906: attempt to access beyond end of device [ 247.613529][T10227] nbd4: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 247.618043][T10224] nbd4: detected capacity change from 0 to 20 [ 247.620053][T10227] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 247.624504][T10227] block nbd4: Dead connection, failed to find a fallback [ 247.627050][T10227] block nbd4: shutting down sockets [ 247.630226][T10227] blk_print_req_error: 75 callbacks suppressed [ 247.630239][T10227] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 247.668937][ T9525] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 247.671598][ T9525] buffer_io_error: 75 callbacks suppressed [ 247.671607][ T9525] Buffer I/O error on dev nbd4, logical block 0, async page read [ 247.676128][ T9525] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 247.679451][ T9525] Buffer I/O error on dev nbd4, logical block 0, async page read [ 247.681580][T10227] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=0, location=0 [ 247.684117][ T9525] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 247.686544][ T9525] Buffer I/O error on dev nbd4, logical block 0, async page read [ 247.687877][T10227] I/O error, dev nbd4, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 247.689352][ T9525] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 247.691631][T10227] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=1, location=1 [ 247.691716][T10227] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 247.694394][ T9525] Buffer I/O error on dev nbd4, logical block 0, async page read [ 247.697481][T10227] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 247.704608][ T9525] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 247.708956][ T9525] Buffer I/O error on dev nbd4, logical block 0, async page read [ 247.711273][ T9525] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 247.713953][ T9525] Buffer I/O error on dev nbd4, logical block 0, async page read [ 247.716693][ T9525] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 247.719859][ T9525] Buffer I/O error on dev nbd4, logical block 0, async page read [ 247.722609][ T9525] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 247.725775][ T9525] Buffer I/O error on dev nbd4, logical block 0, async page read [ 247.875295][ T9525] ldm_validate_partition_table(): Disk read failed. [ 247.881171][ T9525] Buffer I/O error on dev nbd4, logical block 0, async page read [ 247.886314][ T9525] Buffer I/O error on dev nbd4, logical block 0, async page read [ 247.889599][ T9525] Dev nbd4: unable to read RDB block 0 [ 247.891752][ T9525] nbd4: unable to read partition table [ 247.893773][ T9525] nbd4: partition table beyond EOD, truncated [ 247.982158][ T9525] ldm_validate_partition_table(): Disk read failed. [ 247.984072][ T9525] Dev nbd4: unable to read RDB block 0 [ 247.985657][ T9525] nbd4: unable to read partition table [ 248.063578][ T9525] nbd4: partition table beyond EOD, truncated [ 248.108847][T10243] netlink: 16 bytes leftover after parsing attributes in process `syz.4.900'. [ 248.138900][ T39] audit: type=1326 audit(1734531816.750:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10242 comm="syz.4.900" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x0 [ 248.553440][T10255] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 248.573545][T10255] kvm: pic: level sensitive irq not supported [ 248.574530][T10255] kvm: pic: non byte read [ 248.738979][T10266] [U] [ 248.766859][T10266] [U] [ 248.779034][T10266] [U] B-LRJ[Ćќ6}%4̾ H@K-YLEU@F%PEZE,9F* [ 248.784478][T10266] [U] CW* 9JQ#ESWCV1! GPX [ 248.791190][T10266] [U] N%9C_NʅBC$4( [ 248.809094][T10266] [U] H Q؛TORI#ıTNBS_RЬƫ:؀ɦTȯ 0ÏWڙ_[HN% [ 248.809143][T10268] input: syz1 as /devices/virtual/input/input13 [ 248.814250][T10266] [U] Ϡ4RЛ<)6JG؃K^R\ [ 248.816908][T10266] [U] 7R:J37 [ 248.823952][T10266] [U] YP<ԅUH3 ư-̤\PQBX!Q6SO'}[P5O>D֎YJ>|H0=ԷTXZY֦ʢĚ4IǢ5AZ~ZA~K^TGSJI:OD!M2KWR>ƈΗKC?X8H*@QEۻU .J9ȓ~{`'R)-Ǭ=5֝JLY CB;+LP,FNY%3P&)][ȋ4Lö!J> [ 248.846341][T10266] [U] .”C֯EJJ@KJ605RXUTTO&XO֕\&N%Y176`IW [ 248.869576][T10266] [U] M<@NKJ(6))VLR [ 248.873571][T10266] [U] >YG Z?`OMX؍Ӈ"9+DE{Ō$~BYDUME!XݛAAU}J£2N%MBQ [ 248.877431][T10266] [U] WVW@HZ=(EJ~OS@BH:"!JIUJ=)ΎU GԖ=Y=KADR:=SAX X [ 248.884349][T10266] [U] BIޙE}ET@3( V{κ~UK+{3T$ƻ.N[8Sʇ""ʔ̺]RG5 [ 248.887920][T10266] [U] V{ըVNB>DMTQT [ 248.892441][T10266] [U] G*|9ٺņ [ 248.894082][T10266] [U] GMIUE! Tό*ߐ8A7I5-|6LK [ 248.898670][T10266] [U] NūD  S}RBYWIOQ&O,P],7͛UI [ 248.906271][T10266] [U] $LU2F_3+|NWµZEǗP1W~N(O͝8D SCDʮF65ZGRް{TK"@ :5}GBDѸ\K [ 248.913887][T10266] [U] Yҟ844N<; [ 248.919683][T10266] [U] UI7X#E4VMLȋG͔A)-(N̗NL#)׌SU6 [ 248.923985][T10266] [U] )<E?AUܤ9 %]DCCE+L<'T1Kȅ3.ɻ WSZYϼ9I>]Ȝ}{/`ܿ5'E 41 TNAX߿ʯϭQëI T%G7L~BS [ 248.928493][T10266] [U] ͢ [ 248.931867][T10266] [U] ZUĪ4&˙E~8Eσ1L{ȨGVY$PNO4M*F`ATM0?*I#;Ѥ+4VGAݬ%H[AYX)LG]F H|ZVE/ϧ17Ǭ-ǽHO+^)8&E@A8G˅-WRS-V-ұO>ŝQ#9UAH)FSA֙INZ@C>KLVD^1)M$/Є78..QA|Ȧ)9">D>E#I`\|{UFH.. EMW}]5 -,ŢRK}FQCO*PNF [ 248.940688][T10266] [U]  [ 248.943468][T10266] [U] T0ԝ*հXAɣA4WKC]X]L= [ 248.948822][T10266] [U] $CUGSEԲ6TτPP˒Z3T2ȍ9W-֑̙ARݻNBڎ:^XϧB̲~{J [ 248.955461][T10266] [U] T̷E' 2L*A -;P;BT.N`_Ӯ;*U;5C#R/QK*MSA#)AB>YؐO\;^'O5_YHLCE&A`;œԸЕSSƇ{H TM0BI^L>8٢VV8<-{$>D ý]WU0?K ˼ڹ[UIRB_IL/ESI*WS*ZS͎ђ [ 248.962847][T10266] [U] [ 249.287377][ T62] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 249.447300][ T62] usb 9-1: Using ep0 maxpacket: 8 [ 249.454336][ T62] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 249.457897][ T62] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 249.462060][ T62] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.466939][ T62] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 249.470088][ T62] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 249.476005][ T62] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 249.479357][ T62] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 249.482928][ T62] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.486829][ T62] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 249.491789][ T62] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 249.496952][ T62] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 249.500047][ T62] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 249.504084][ T62] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.505432][T10263] [U] [ 249.511610][ T62] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 249.515987][ T62] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 249.523195][ T62] usb 9-1: string descriptor 0 read error: -22 [ 249.525308][ T62] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 249.528702][ T62] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.538466][ T62] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 249.911116][ T62] usb 9-1: USB disconnect, device number 7 [ 251.695897][T10347] 9pnet: Found fid 0 not clunked [ 251.916277][T10352] vim2m vim2m.0: vidioc_s_fmt queue busy [ 252.129299][ T39] audit: type=1800 audit(1734531820.740:235): pid=10358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.927" name="file0" dev="9p" ino=37617947 res=0 errno=0 [ 252.140862][T10358] netfs: Couldn't get user pages (rc=-14) [ 252.189106][T10362] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 252.385959][T10366] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 252.388288][T10366] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 252.813757][T10381] netlink: 'syz.5.931': attribute type 4 has an invalid length. [ 252.816156][T10381] netlink: 152 bytes leftover after parsing attributes in process `syz.5.931'. [ 253.150100][ T6009] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 253.233819][T10390] netlink: 70 bytes leftover after parsing attributes in process `syz.4.934'. [ 253.236246][T10390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.934'. [ 253.248724][ T39] audit: type=1326 audit(1734531821.860:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10389 comm="syz.4.934" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x0 [ 253.548620][ T6009] usb 6-1: config 0 has no interfaces? [ 253.550252][ T6009] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 253.553477][ T6009] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.557896][ T6009] usb 6-1: config 0 descriptor?? [ 253.783864][ T6009] usb 6-1: USB disconnect, device number 6 [ 255.022970][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.025174][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.855584][T10444] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 256.014159][T10452] syz.4.947: attempt to access beyond end of device [ 256.014159][T10452] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 256.029973][T10452] FAT-fs (nbd4): unable to read boot sector [ 256.125914][T10460] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 256.222305][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 256.294402][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.951'. [ 256.308898][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.951'. [ 256.487067][T10469] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 256.528265][T10469] kvm: pic: level sensitive irq not supported [ 256.528562][T10469] kvm: pic: non byte read [ 257.307700][ T63] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 257.939879][T10511] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 258.747018][T10526] netlink: 8 bytes leftover after parsing attributes in process `syz.5.961'. [ 258.750642][T10526] netlink: 8 bytes leftover after parsing attributes in process `syz.5.961'. [ 269.995600][T10599] vim2m vim2m.0: vidioc_s_fmt queue busy [ 272.890991][T10657] netlink: 'syz.5.991': attribute type 1 has an invalid length. [ 272.893065][T10657] netlink: 224 bytes leftover after parsing attributes in process `syz.5.991'. [ 273.975757][T10714] syz.5.995[10714] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.975811][T10714] syz.5.995[10714] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.981697][T10714] syz.5.995[10714] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 276.444863][T10753] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1003'. [ 276.801098][T10758] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1004'. [ 277.020539][T10762] loop7: detected capacity change from 0 to 16384 [ 277.067260][T10762] loop7: detected capacity change from 16384 to 16383 [ 279.053204][T10798] 9pnet_fd: Insufficient options for proto=fd [ 280.283107][T10811] wg1 speed is unknown, defaulting to 1000 [ 280.291100][T10811] wg1 speed is unknown, defaulting to 1000 [ 280.296180][T10811] wg1 speed is unknown, defaulting to 1000 [ 280.434731][T10811] infiniband syz2: set down [ 280.438143][T10811] infiniband syz2: added wg1 [ 280.438494][ T25] wg1 speed is unknown, defaulting to 1000 [ 280.469068][T10811] RDS/IB: syz2: added [ 280.470605][T10811] smc: adding ib device syz2 with port count 1 [ 280.475122][T10811] smc: ib device syz2 port 1 has pnetid [ 280.479746][ T25] wg1 speed is unknown, defaulting to 1000 [ 280.484621][T10811] wg1 speed is unknown, defaulting to 1000 [ 280.565350][T10811] wg1 speed is unknown, defaulting to 1000 [ 280.649526][T10811] wg1 speed is unknown, defaulting to 1000 [ 280.704171][T10811] wg1 speed is unknown, defaulting to 1000 [ 280.749245][T10811] wg1 speed is unknown, defaulting to 1000 [ 283.404045][T10867] 9pnet: Found fid 0 not clunked [ 283.651355][ T25] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 283.809010][ T25] usb 10-1: config 0 has no interfaces? [ 283.811576][ T25] usb 10-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 283.813961][ T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.835296][ T25] usb 10-1: config 0 descriptor?? [ 284.058046][ T62] usb 10-1: USB disconnect, device number 3 [ 284.191623][T10880] syz.1.1040[10880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 284.191673][T10880] syz.1.1040[10880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 284.194689][T10880] syz.1.1040[10880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 285.573646][T10907] 9pnet: Found fid 0 not clunked [ 285.795303][T10919] netlink: 'syz.4.1049': attribute type 1 has an invalid length. [ 285.798241][T10919] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1049'. [ 286.215546][T10928] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 286.245182][T10928] kvm: pic: level sensitive irq not supported [ 286.245488][T10928] kvm: pic: non byte read [ 286.251226][T10928] kvm: pic: level sensitive irq not supported [ 286.251681][T10928] kvm: pic: non byte read [ 286.256497][T10928] kvm: pic: level sensitive irq not supported [ 286.256807][T10928] kvm: pic: non byte read [ 287.210609][T10953] syz.3.1058[10953] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 287.210662][T10953] syz.3.1058[10953] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 287.213684][T10953] syz.3.1058[10953] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 289.107102][T10990] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 289.118373][T10990] kvm: pic: level sensitive irq not supported [ 289.118753][T10990] kvm: pic: non byte read [ 289.124187][T10990] kvm: pic: level sensitive irq not supported [ 289.124612][T10990] kvm: pic: non byte read [ 289.130245][T10990] kvm: pic: level sensitive irq not supported [ 289.130560][T10990] kvm: pic: non byte read [ 289.351980][ T39] audit: type=1800 audit(1734531857.960:237): pid=10995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1064" name="file0" dev="9p" ino=37617947 res=0 errno=0 [ 289.358490][T10995] netfs: Couldn't get user pages (rc=-14) [ 289.978212][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 298.492777][T11028] netfs: Couldn't get user pages (rc=-14) [ 298.746756][T11035] wg1 speed is unknown, defaulting to 1000 [ 299.972515][ T39] audit: type=1800 audit(1734531868.580:238): pid=11060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1075" name="file0" dev="9p" ino=37617947 res=0 errno=0 [ 299.987269][T11060] netfs: Couldn't get user pages (rc=-14) [ 301.869667][T11091] block device autoloading is deprecated and will be removed. [ 301.873965][T11091] syz.1.1082: attempt to access beyond end of device [ 301.873965][T11091] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 301.952491][T11100] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1085'. [ 303.357363][ T35] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 303.512780][ T35] usb 9-1: config index 0 descriptor too short (expected 25183, got 18) [ 303.515222][ T35] usb 9-1: config 116 has too many interfaces: 121, using maximum allowed: 32 [ 303.518513][ T35] usb 9-1: config 116 has an invalid descriptor of length 0, skipping remainder of the config [ 303.521309][ T35] usb 9-1: config 116 has 0 interfaces, different from the descriptor's value: 121 [ 303.525907][ T35] usb 9-1: New USB device found, idVendor=0fe9, idProduct=db59, bcdDevice=e9.9b [ 303.528518][ T35] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.530678][ T35] usb 9-1: Product: syz [ 303.532361][ T35] usb 9-1: Manufacturer: syz [ 303.533935][ T35] usb 9-1: SerialNumber: syz [ 303.967668][ T63] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 304.810207][ T35] usb 9-1: USB disconnect, device number 8 [ 305.009648][T11164] pimreg: entered allmulticast mode [ 305.445471][ T39] audit: type=1326 audit(1734531874.050:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11172 comm="syz.4.1107" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 305.472337][ T39] audit: type=1326 audit(1734531874.060:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11172 comm="syz.4.1107" exe="/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 305.481111][ T39] audit: type=1326 audit(1734531874.060:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11172 comm="syz.4.1107" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 305.491625][ T39] audit: type=1326 audit(1734531874.060:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11172 comm="syz.4.1107" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 305.498163][ T39] audit: type=1326 audit(1734531874.060:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11172 comm="syz.4.1107" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 305.506458][ T39] audit: type=1326 audit(1734531874.060:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11172 comm="syz.4.1107" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 305.512208][ T39] audit: type=1326 audit(1734531874.060:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11172 comm="syz.4.1107" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 305.518732][ T39] audit: type=1326 audit(1734531874.060:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11172 comm="syz.4.1107" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 305.524889][ T39] audit: type=1326 audit(1734531874.060:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11172 comm="syz.4.1107" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 305.536847][ T39] audit: type=1326 audit(1734531874.060:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11172 comm="syz.4.1107" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 305.753375][T11182] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 305.997686][ T63] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 306.451456][T11204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1112'. [ 308.144435][T11225] netfs: Couldn't get user pages (rc=-14) [ 314.547810][ T63] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 316.459050][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.029975][T11350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1139'. [ 325.056686][T11350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1139'. [ 325.187404][ T35] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 325.251087][ T39] kauditd_printk_skb: 9 callbacks suppressed [ 325.251097][ T39] audit: type=1326 audit(1734531893.860:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11353 comm="syz.1.1140" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x0 [ 325.338514][ T35] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 325.340812][ T35] usb 8-1: config 0 has no interface number 0 [ 325.342457][ T35] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 325.345277][ T35] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 325.348742][ T35] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 325.351826][ T35] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 325.354755][ T35] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 325.358333][ T35] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 325.360669][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.364585][ T35] usb 8-1: config 0 descriptor?? [ 325.366760][T11345] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 325.373098][ T35] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 325.641245][ T6009] usb 8-1: USB disconnect, device number 10 [ 325.643601][ C3] ldusb 8-1:0.55: usb_submit_urb failed (-19) [ 325.646204][T11345] ldusb 8-1:0.55: Couldn't submit interrupt_out_urb -19 [ 325.649543][ T6009] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 325.656595][T11344] delete_channel: no stack [ 326.089034][T11365] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 326.785271][T11371] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 326.785271][T11371] program syz.1.1144 not setting count and/or reply_len properly [ 326.985277][ T39] audit: type=1800 audit(1734531895.590:259): pid=11380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1147" name="file0" dev="9p" ino=37617947 res=0 errno=0 [ 326.997707][T11380] netfs: Couldn't get user pages (rc=-14) [ 327.662006][T11394] random: crng reseeded on system resumption [ 328.682327][T11414] can0: slcan on ttyS3. [ 328.784432][T11421] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 328.786778][T11421] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 329.157396][T11404] can0 (unregistered): slcan off ttyS3. [ 329.220011][T11443] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1159'. [ 329.269550][T11443] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1159'. [ 329.529167][ T39] audit: type=1800 audit(1734531898.140:260): pid=11459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1161" name="file0" dev="9p" ino=37617947 res=0 errno=0 [ 329.543778][T11459] netfs: Couldn't get user pages (rc=-14) [ 330.376056][T11478] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 330.378024][T11478] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 330.383354][T11478] vhci_hcd vhci_hcd.0: Device attached [ 330.627263][ T6009] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 331.302406][T11479] vhci_hcd: connection reset by peer [ 331.306336][ T69] vhci_hcd: stop threads [ 331.308404][ T69] vhci_hcd: release socket [ 331.311944][ T69] vhci_hcd: disconnect device [ 331.413483][T11504] [ 331.414164][T11504] ====================================================== [ 331.416011][T11504] WARNING: possible circular locking dependency detected [ 331.417802][T11504] 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 Not tainted [ 331.420884][T11504] ------------------------------------------------------ [ 331.423767][T11504] syz.1.1173/11504 is trying to acquire lock: [ 331.425810][T11504] ffff8880245aa8b8 (&eq->sysfs_lock){+.+.}-{4:4}, at: elevator_disable+0xb5/0x490 [ 331.428989][T11504] [ 331.428989][T11504] but task is already holding lock: [ 331.431449][T11504] ffff8880243ae278 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x21c/0x1500 [ 331.435288][T11504] [ 331.435288][T11504] which lock already depends on the new lock. [ 331.435288][T11504] [ 331.438759][T11504] [ 331.438759][T11504] the existing dependency chain (in reverse order) is: [ 331.441751][T11504] [ 331.441751][T11504] -> #4 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 331.444643][T11504] blk_mq_submit_bio+0x1fb6/0x24c0 [ 331.446539][T11504] __submit_bio+0x384/0x540 [ 331.448267][T11504] submit_bio_noacct_nocheck+0x698/0xd70 [ 331.450344][T11504] submit_bio_noacct+0x93a/0x1e20 [ 331.452233][T11504] block_read_full_folio+0x812/0xa50 [ 331.454197][T11504] filemap_read_folio+0xc6/0x2a0 [ 331.456054][T11504] filemap_get_pages+0x155f/0x1be0 [ 331.457958][T11504] filemap_read+0x3ca/0xd70 [ 331.459670][T11504] blkdev_read_iter+0x187/0x480 [ 331.461476][T11504] vfs_read+0x87f/0xbe0 [ 331.463077][T11504] ksys_read+0x12b/0x250 [ 331.464696][T11504] do_syscall_64+0xcd/0x250 [ 331.466449][T11504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.468614][T11504] [ 331.468614][T11504] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}: [ 331.470988][T11504] down_read+0x9a/0x330 [ 331.472244][T11504] page_cache_ra_unbounded+0x173/0x750 [ 331.473814][T11504] page_cache_ra_order+0x8f2/0xc80 [ 331.475285][T11504] filemap_fault+0x14a5/0x2820 [ 331.476708][T11504] __do_fault+0x10a/0x490 [ 331.478040][T11504] do_pte_missing+0x99f/0x3e00 [ 331.479578][T11504] __handle_mm_fault+0x103c/0x2a40 [ 331.481412][T11504] handle_mm_fault+0x3fa/0xaa0 [ 331.482976][T11504] __get_user_pages+0x8d9/0x3b50 [ 331.484456][T11504] __gup_longterm_locked+0x5ff/0x1870 [ 331.485995][T11504] pin_user_pages+0x13f/0x160 [ 331.487356][T11504] xdp_umem_create+0x73c/0x1270 [ 331.488788][T11504] xsk_setsockopt+0x7e7/0xac0 [ 331.490157][T11504] do_sock_setsockopt+0x222/0x480 [ 331.491611][T11504] __sys_setsockopt+0x1a0/0x230 [ 331.493100][T11504] __ia32_sys_setsockopt+0xbc/0x160 [ 331.494991][T11504] __do_fast_syscall_32+0x73/0x120 [ 331.496495][T11504] do_fast_syscall_32+0x32/0x80 [ 331.497909][T11504] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 331.499693][T11504] [ 331.499693][T11504] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 331.501691][T11504] __might_fault+0x11b/0x190 [ 331.503028][T11504] _copy_from_user+0x29/0xd0 [ 331.504391][T11504] compat_blk_trace_setup+0xc9/0x200 [ 331.505900][T11504] blk_trace_ioctl+0x24a/0x290 [ 331.507282][T11504] compat_blkdev_ioctl+0x13c/0x750 [ 331.508763][T11504] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 331.510287][T11504] __do_fast_syscall_32+0x73/0x120 [ 331.511763][T11504] do_fast_syscall_32+0x32/0x80 [ 331.513161][T11504] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 331.514951][T11504] [ 331.514951][T11504] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 331.516988][T11504] __mutex_lock+0x19b/0xa60 [ 331.518322][T11504] blk_mq_exit_sched+0xd1/0x310 [ 331.519737][T11504] elevator_exit+0x58/0x80 [ 331.521041][T11504] del_gendisk+0x568/0xad0 [ 331.522338][T11504] nbd_dev_remove+0x3b/0xe0 [ 331.523671][T11504] process_one_work+0x958/0x1b30 [ 331.525113][T11504] worker_thread+0x6c8/0xf00 [ 331.526454][T11504] kthread+0x2c1/0x3a0 [ 331.527679][T11504] ret_from_fork+0x45/0x80 [ 331.528983][T11504] ret_from_fork_asm+0x1a/0x30 [ 331.530374][T11504] [ 331.530374][T11504] -> #0 (&eq->sysfs_lock){+.+.}-{4:4}: [ 331.532369][T11504] __lock_acquire+0x249e/0x3c40 [ 331.533771][T11504] lock_acquire.part.0+0x11b/0x380 [ 331.535231][T11504] __mutex_lock+0x19b/0xa60 [ 331.536559][T11504] elevator_disable+0xb5/0x490 [ 331.537955][T11504] __blk_mq_update_nr_hw_queues+0x41e/0x1500 [ 331.539700][T11504] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 331.541285][T11504] nbd_start_device+0x15b/0xd70 [ 331.542692][T11504] nbd_ioctl+0x21a/0xfd0 [ 331.543952][T11504] compat_blkdev_ioctl+0x2f7/0x750 [ 331.545436][T11504] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 331.546964][T11504] __do_fast_syscall_32+0x73/0x120 [ 331.548440][T11504] do_fast_syscall_32+0x32/0x80 [ 331.549847][T11504] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 331.551633][T11504] [ 331.551633][T11504] other info that might help us debug this: [ 331.551633][T11504] [ 331.554272][T11504] Chain exists of: [ 331.554272][T11504] &eq->sysfs_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#50 [ 331.554272][T11504] [ 331.558122][T11504] Possible unsafe locking scenario: [ 331.558122][T11504] [ 331.560059][T11504] CPU0 CPU1 [ 331.561449][T11504] ---- ---- [ 331.562861][T11504] lock(&q->q_usage_counter(io)#50); [ 331.564271][T11504] lock(mapping.invalidate_lock#2); [ 331.566286][T11504] lock(&q->q_usage_counter(io)#50); [ 331.568319][T11504] lock(&eq->sysfs_lock); [ 331.569485][T11504] [ 331.569485][T11504] *** DEADLOCK *** [ 331.569485][T11504] [ 331.571588][T11504] 6 locks held by syz.1.1173/11504: [ 331.572945][T11504] #0: ffff8880244b4998 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x151/0xfd0 [ 331.575376][T11504] #1: ffff8880244b48d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x20/0x40 [ 331.578180][T11504] #2: ffff8880243ae838 (&q->sysfs_dir_lock){+.+.}-{4:4}, at: __blk_mq_update_nr_hw_queues+0x205/0x1500 [ 331.581026][T11504] #3: ffff8880243ae7a8 (&q->sysfs_lock){+.+.}-{4:4}, at: __blk_mq_update_nr_hw_queues+0x214/0x1500 [ 331.583810][T11504] #4: ffff8880243ae278 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x21c/0x1500 [ 331.586876][T11504] #5: ffff8880243ae2b0 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x21c/0x1500 [ 331.590096][T11504] [ 331.590096][T11504] stack backtrace: [ 331.591668][T11504] CPU: 2 UID: 0 PID: 11504 Comm: syz.1.1173 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 331.594453][T11504] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 331.597254][T11504] Call Trace: [ 331.598186][T11504] [ 331.598972][T11504] dump_stack_lvl+0x116/0x1f0 [ 331.600223][T11504] print_circular_bug+0x41c/0x610 [ 331.601553][T11504] check_noncircular+0x31a/0x400 [ 331.602853][T11504] ? __pfx_check_noncircular+0x10/0x10 [ 331.604310][T11504] ? save_trace+0x42/0xa10 [ 331.605491][T11504] ? add_lock_to_list+0x17d/0x390 [ 331.606818][T11504] __lock_acquire+0x249e/0x3c40 [ 331.608140][T11504] ? __pfx___lock_acquire+0x10/0x10 [ 331.609511][T11504] ? find_held_lock+0x2d/0x110 [ 331.610775][T11504] lock_acquire.part.0+0x11b/0x380 [ 331.612121][T11504] ? elevator_disable+0xb5/0x490 [ 331.613425][T11504] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 331.614998][T11504] ? rcu_is_watching+0x12/0xc0 [ 331.616294][T11504] ? trace_lock_acquire+0x14e/0x1f0 [ 331.617664][T11504] ? elevator_disable+0xb5/0x490 [ 331.618993][T11504] ? lock_acquire+0x2f/0xb0 [ 331.620204][T11504] ? elevator_disable+0xb5/0x490 [ 331.621482][T11504] __mutex_lock+0x19b/0xa60 [ 331.622642][T11504] ? elevator_disable+0xb5/0x490 [ 331.623961][T11504] ? elevator_disable+0xb5/0x490 [ 331.625287][T11504] ? __pfx___mutex_lock+0x10/0x10 [ 331.626622][T11504] ? __pfx_blk_mq_sched_free_rqs+0x10/0x10 [ 331.628162][T11504] ? mark_held_locks+0x9f/0xe0 [ 331.629425][T11504] ? elevator_disable+0xb5/0x490 [ 331.630729][T11504] elevator_disable+0xb5/0x490 [ 331.632023][T11504] __blk_mq_update_nr_hw_queues+0x41e/0x1500 [ 331.633607][T11504] ? __mutex_trylock_common+0xea/0x250 [ 331.635068][T11504] ? __pfx___mutex_trylock_common+0x10/0x10 [ 331.636626][T11504] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 331.638120][T11504] ? rcu_is_watching+0x12/0xc0 [ 331.639388][T11504] ? __pfx___blk_mq_update_nr_hw_queues+0x10/0x10 [ 331.641062][T11504] ? __pfx___mutex_trylock_common+0x10/0x10 [ 331.642606][T11504] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 331.644100][T11504] ? __pfx___mutex_lock+0x10/0x10 [ 331.645439][T11504] ? trace_contention_end+0xee/0x140 [ 331.646819][T11504] ? __mutex_lock+0x1cc/0xa60 [ 331.648067][T11504] ? nbd_ioctl+0x151/0xfd0 [ 331.649252][T11504] ? __pfx___mutex_lock+0x10/0x10 [ 331.650581][T11504] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 331.652064][T11504] nbd_start_device+0x15b/0xd70 [ 331.653346][T11504] ? bpf_lsm_capable+0x9/0x10 [ 331.654612][T11504] nbd_ioctl+0x21a/0xfd0 [ 331.655740][T11504] ? __pfx_nbd_ioctl+0x10/0x10 [ 331.657000][T11504] ? __pfx_lock_release+0x10/0x10 [ 331.658304][T11504] ? trace_lock_acquire+0x14e/0x1f0 [ 331.659657][T11504] ? __pfx_nbd_ioctl+0x10/0x10 [ 331.660891][T11504] compat_blkdev_ioctl+0x2f7/0x750 [ 331.662236][T11504] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 331.663716][T11504] ? __fget_files+0x206/0x3a0 [ 331.664983][T11504] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 331.666454][T11504] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 331.667843][T11504] __do_fast_syscall_32+0x73/0x120 [ 331.669190][T11504] do_fast_syscall_32+0x32/0x80 [ 331.670468][T11504] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 331.672072][T11504] RIP: 0023:0xf7f52579 [ 331.673111][T11504] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 331.678112][T11504] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 331.680330][T11504] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ab03 [ 331.682391][T11504] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 331.684454][T11504] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 331.686458][T11504] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 331.688536][T11504] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 331.690602][T11504] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 331.697986][ T65] block nbd1: Receive control failed (result -32) [ 331.700266][ T65] block nbd1: Receive control failed (result -32) [ 331.762627][T11343] block nbd1: shutting down sockets [ 331.802506][ T6188] bridge0: port 2(syz_tun) entered disabled state [ 331.827742][ T6188] syz_tun (unregistering): left allmulticast mode [ 331.829575][ T6188] syz_tun (unregistering): left promiscuous mode [ 331.831955][ T6188] bridge0: port 2(syz_tun) entered disabled state [ 332.794878][ T11] bond0 (unregistering): left promiscuous mode [ 332.796783][ T11] bond0 (unregistering): Released all slaves [ 332.902112][ T11] bond1 (unregistering): (slave batadv1): Releasing active interface [ 332.905986][ T11] bond1 (unregistering): Released all slaves [ 333.004512][ T11] bond2 (unregistering): (slave batadv2): Releasing backup interface [ 333.007279][ T11] bond2 (unregistering): Released all slaves [ 333.380520][ T11] batadv_slave_1: left promiscuous mode [ 333.383596][ T11] hsr_slave_0: left promiscuous mode [ 333.385355][ T11] hsr_slave_1: left promiscuous mode [ 334.519925][ T11] team0 (unregistering): Port device wg2 removed [ 335.717307][ T6009] vhci_hcd: vhci_device speed not set VM DIAGNOSIS: 14:25:00 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff8880682ccb40 RCX=ffffffff88fa5ce9 RDX=00000000ffffffff RSI=ffffffff8bb16c80 RDI=ffff8880682ccb44 RBP=1ffff920041cfecc RSP=ffffc90020e7f658 R8 =0000000000000000 R9 =fffffbfff2039bd2 R10=ffffffff901cde97 R11=0000000000000000 R12=ffff8880682ccb48 R13=ffff8880682ccb50 R14=ffff8880682ccb28 R15=ffffc90020e7f898 RIP=ffffffff8176c2d9 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c390645 CR3=0000000053e9a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffff88802b646720 RCX=ffffffff818d526c RDX=ffff888000ae4880 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000003 RSP=ffffc9000d6077c0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=00000000000a201e R12=ffffed10056c8ce5 R13=0000000000000001 R14=ffff88802b646728 R15=ffff88802b53ff80 RIP=ffffffff81995130 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f324cf00 CR3=0000000025e26000 CR4=00352ef0 DR0=0000000000000000 DR1=000000000000000a DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851420b5 RDI=ffffffff9a667300 RBP=ffffffff9a6672c0 RSP=ffffc9000d5eefd0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000005b R14=ffffffff85142050 R15=0000000000000000 RIP=ffffffff851420df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f71b0360 CR3=0000000025e26000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000003e5fcc RBX=0000000000000003 RCX=ffffffff8b1a1819 RDX=ffffed10056e6fee RSI=ffffffff8bb16c80 RDI=ffffffff81702e19 RBP=ffffed10039df488 RSP=ffffc9000049fe08 R8 =0000000000000000 R9 =ffffed10056e6fed R10=ffff88802b737f6b R11=0000000000000000 R12=0000000000000003 R13=ffff88801cefa440 R14=ffffffff901cde90 R15=0000000000000000 RIP=ffffffff8b1a2bff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c390645 CR3=0000000053e9a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000400 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000