last executing test programs: 14.339728657s ago: executing program 0 (id=1154): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = timerfd_create(0x0, 0x80000) r2 = syz_open_dev$sndctrl(&(0x7f0000000b00), 0xe, 0x161000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc2c45512, &(0x7f0000000b40)={{0x6, 0x3, 0x9, 0xc2ee, 'syz0\x00', 0x601}, 0x0, [0x11, 0x40, 0x6, 0xb8, 0x4, 0x7f90, 0xef11, 0x0, 0x7, 0x7, 0x8, 0xba5, 0x8, 0x9, 0x7, 0x4, 0x2, 0x7, 0x2800000, 0x3, 0x3, 0x0, 0x1000, 0x5, 0x2, 0xfffffff5, 0x6e7, 0x10, 0x443a0b44, 0xff, 0xfff, 0x9, 0x0, 0x6, 0xa43, 0x8, 0x4, 0xfffffffc, 0x892, 0x8, 0x6, 0x7, 0x5, 0x3ac9, 0x0, 0x8, 0x4, 0x2, 0xffff3bc2, 0xfffffff4, 0x5, 0x7ff, 0x4, 0xfffffffc, 0xd, 0x354f, 0x878, 0x6, 0x3, 0xf, 0x2400, 0x5, 0x10, 0xd, 0x6, 0x8, 0xa54, 0x6, 0x8, 0x4, 0xe, 0xc, 0x7fffffff, 0xf, 0x0, 0x1, 0x5, 0x2, 0x9, 0x8, 0x6, 0x9, 0x6b, 0x5, 0x0, 0x5, 0x1200000, 0x81, 0x5, 0x7924, 0x10000, 0x0, 0x5, 0x6, 0x5, 0x5, 0x40, 0xa990, 0x8, 0x8, 0x0, 0x80000001, 0x200, 0xd, 0x400, 0x8, 0x1ff, 0xc, 0xf, 0x5, 0x0, 0x5, 0x8, 0x5, 0x1, 0x6, 0x10001, 0x5, 0x4, 0x0, 0x4c000000, 0x5, 0x9, 0x8001, 0x8, 0xd, 0x140, 0x3]}) read(r1, &(0x7f0000000080)=""/149, 0x95) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000a80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000004d00)='\x00', 0x1}], 0x1}}], 0x2, 0x200008a4) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) statfs(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000380)=""/75) 13.409579868s ago: executing program 0 (id=1159): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xfffffffd) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000003d80)=ANY=[@ANYRES8=r0, @ANYRES64=r1, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRESOCT, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0xf, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000001780)='/dev/comedi4\x00', 0x80000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x1254, &(0x7f0000000300)={0x0, 0x886f, 0x10000, 0x2, 0x3f, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) io_uring_enter(r5, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x6, 0x9, 0x0, 0x200000000000000, 0x7fffffff, 0xffffffffffffffff}, 0x0, 0x0) r8 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) ioctl$IOC_PR_PREEMPT(r8, 0x40046109, &(0x7f0000000200)={0xd0, 0xfffffffffffffffe, 0x0, 0xffffffff}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x4001, 0x3, 0x248, 0x100, 0x37f, 0x148, 0x0, 0x148, 0x1b4, 0x240, 0x240, 0x1b4, 0x240, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0xffffff00, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x6, 0x0, 0x4d}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@inet=@ecn={{0x24}, {0x21, 0x0, 0x0, 0xfe}}, @inet=@rpfilter={{0x24}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0xfffff8fd}}}}, {{@uncond, 0x0, 0x94, 0xb4, 0x0, {}, [@common=@icmp={{0x24}, {0x12, '\x00', 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2a4) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, 0x0) 13.049216012s ago: executing program 0 (id=1160): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r1, 0x4068aea3, &(0x7f0000000180)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88b81, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12.81678865s ago: executing program 0 (id=1164): syz_open_dev$evdev(&(0x7f0000000080), 0x200, 0xd0802) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}, 0x20}, 0x0) 12.759782169s ago: executing program 0 (id=1165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000206030000000000000000000d0000000c00030068e173683a697000050400000000000900020073797a31000000000500050002000000050001000600000000"], 0x44}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000206030000000000000000000d0000000c00030068e173683a697000050400000000000900020073797a31000000000500050002000000050001000600000000"], 0x44}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) socket$netlink(0x10, 0x3, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) io_setup(0x1, &(0x7f0000000b80)) (async) io_setup(0x1, &(0x7f0000000b80)=0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) io_submit(r3, 0x2, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x64e7, r2, 0x0, 0x0, 0x8}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x80, r4, &(0x7f0000000440), 0x0, 0x8}]) socket$rxrpc(0x21, 0x2, 0xa) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x40044160, 0x3) (async) ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x40044160, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000050) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) openat$bsg(0xffffff9c, 0x0, 0x200001, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r8, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x9967185db0d507b5}, 0x20000001) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x84080) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r10 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r10, 0x40049366, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}], [{@seclabel}, {@dont_appraise}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@subj_type={'subj_type', 0x3d, 'hash:ip\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'hash:ip\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x58, 0x34, 0x37, 0x64, 0x34, 0x38, 0x37, 0x32], 0x2d, [0x34, 0x33, 0x66], 0x2d, [0x32, 0x31, 0x30, 0x36], 0x2d, [0x63, 0x30, 0x39, 0x33], 0x2d, [0x65, 0x64, 0x39, 0x35, 0x35, 0x61, 0x38, 0x61]}}}, {@smackfsfloor}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@dont_measure}]}}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}], [{@seclabel}, {@dont_appraise}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@subj_type={'subj_type', 0x3d, 'hash:ip\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'hash:ip\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x58, 0x34, 0x37, 0x64, 0x34, 0x38, 0x37, 0x32], 0x2d, [0x34, 0x33, 0x66], 0x2d, [0x32, 0x31, 0x30, 0x36], 0x2d, [0x63, 0x30, 0x39, 0x33], 0x2d, [0x65, 0x64, 0x39, 0x35, 0x35, 0x61, 0x38, 0x61]}}}, {@smackfsfloor}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@dont_measure}]}}) 12.590487276s ago: executing program 0 (id=1166): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x65) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe2700000000000000000005000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 2.280509318s ago: executing program 3 (id=1245): r0 = syz_io_uring_setup(0x48be, &(0x7f0000001280)={0x0, 0x200000, 0x40, 0x3}, &(0x7f0000001200), &(0x7f0000001180)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) (async) r1 = syz_io_uring_setup(0x2a31, &(0x7f0000000000)={0x0, 0x2f33, 0x2, 0x0, 0x16d}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, 0x0, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x1, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000300)={r5}, 0x8) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (rerun: 64) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async, rerun: 64) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100001000000000000000000fe8000000000000000000000000000bbfe8000"/46, @ANYRES32, @ANYBLOB="6401010200000000000000000000000000000000320000000000000000000000000000000000000100000000000000000400000000000000000000000000000000000000000000000300000000000000000000000000000004000000000000000000000000000000000000000080000004000000000000000000004000000000000000000000000000000000000000000000000025bd7000013500000a00000100000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000450000000c", @ANYRES32=0x0, @ANYBLOB="02000000258b37ade3f425be39e51d35e95c2a53505bc8e2d754b401237900c6e9fce988596a352860f0bc515099acf3d7be6540977e5a501ff16a6616d390305f242075f3ff7e7332f2c40a0a7c0ddec4b43273042e4c5652f7e10d5ce4db554e234629a85b8ddabfcf00e2d9fd92a8b4"], 0x140}, 0x1, 0x0, 0x0, 0x4004000}, 0x4810) (async) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001140)) (async, rerun: 32) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) chdir(&(0x7f00000000c0)='./file0\x00') (async, rerun: 64) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) (async, rerun: 64) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 64) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) close(r3) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000840800034000000007080004400000000f080001400000000024000580090001006d65746100000000140002800800024000000010f0527623d664dcc70900010073797a30000000"], 0xb0}}, 0x0) (async, rerun: 32) write$UHID_INPUT(r8, &(0x7f0000002080)={0xfc, {"a2336848149e516d4b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383563030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3e31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9903f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928d28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f2730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b81305c038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849cd9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484539ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1f93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b2804563407308c58c89d9e99c81769177e6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463373b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e080000007ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e3933ed07c2b8081c128ad2706f48261ff07000000000000613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59500000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) (async, rerun: 32) pread64(r2, &(0x7f00000014c0)=""/247, 0xf7, 0x0) 2.2421627s ago: executing program 3 (id=1246): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)={0x2c, r1, 0xf03, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x15, 0x1, '\x00\x00\xff\xa6\x00'/17}]}, 0x2c}}, 0x0) 2.239568774s ago: executing program 2 (id=1247): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000040)={0x3, 0x4, 0x53, 0x1, 0x2, 0x4, 0x4}) 2.180480885s ago: executing program 3 (id=1248): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) 2.180181483s ago: executing program 2 (id=1249): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000300)={0xa, 0x4e24, 0xfffffefc, @remote, 0x2}, 0x1c, 0x0}, 0x88c0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x88800) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[], 0x15) r3 = dup(r2) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x4, @mcast2, 0x5}, 0x1c) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffb000/0x4000)=nil) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='numa_maps\x00') openat$fb0(0xffffffffffffff9c, 0x0, 0x402, 0x0) mmap(&(0x7f0000666000/0x1000)=nil, 0x1000, 0x7, 0x38011, r1, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) read$FUSE(r4, &(0x7f0000001480)={0x2020}, 0x2020) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2101, 0x0) write$binfmt_aout(r6, &(0x7f0000000240)=ANY=[], 0xff2e) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1, '\x00'}}}}}, 0x0) sendmsg(r9, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xb}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000020000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r10, 0x7, &(0x7f0000000140)={0x1, 0x2, 0x78, 0x10}) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) pread64(r11, &(0x7f0000000180)=""/73, 0x49, 0x0) 2.155848411s ago: executing program 3 (id=1250): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff7, @empty, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}, 0xff0f}], 0x1, 0x240c089d) syz_open_procfs(0x0, 0x0) 2.080451641s ago: executing program 3 (id=1251): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = timerfd_create(0x0, 0x80000) r2 = syz_open_dev$sndctrl(&(0x7f0000000b00), 0xe, 0x161000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc2c45512, &(0x7f0000000b40)={{0x6, 0x3, 0x9, 0xc2ee, 'syz0\x00', 0x601}, 0x0, [0x11, 0x40, 0x6, 0xb8, 0x4, 0x7f90, 0xef11, 0x0, 0x7, 0x7, 0x8, 0xba5, 0x8, 0x9, 0x7, 0x4, 0x2, 0x7, 0x2800000, 0x3, 0x3, 0x0, 0x1000, 0x5, 0x2, 0xfffffff5, 0x6e7, 0x10, 0x443a0b44, 0xff, 0xfff, 0x9, 0x0, 0x6, 0xa43, 0x8, 0x4, 0xfffffffc, 0x892, 0x8, 0x6, 0x7, 0x5, 0x3ac9, 0x0, 0x8, 0x4, 0x2, 0xffff3bc2, 0xfffffff4, 0x5, 0x7ff, 0x4, 0xfffffffc, 0xd, 0x354f, 0x878, 0x6, 0x3, 0xf, 0x2400, 0x5, 0x10, 0xd, 0x6, 0x8, 0xa54, 0x6, 0x8, 0x4, 0xe, 0xc, 0x7fffffff, 0xf, 0x0, 0x1, 0x5, 0x2, 0x9, 0x8, 0x6, 0x9, 0x6b, 0x5, 0x0, 0x5, 0x1200000, 0x81, 0x5, 0x7924, 0x10000, 0x0, 0x5, 0x6, 0x5, 0x5, 0x40, 0xa990, 0x8, 0x8, 0x0, 0x80000001, 0x200, 0xd, 0x400, 0x8, 0x1ff, 0xc, 0xf, 0x5, 0x0, 0x5, 0x8, 0x5, 0x1, 0x6, 0x10001, 0x5, 0x4, 0x0, 0x4c000000, 0x5, 0x9, 0x8001, 0x8, 0xd, 0x140, 0x3]}) read(r1, &(0x7f0000000080)=""/149, 0x95) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) socket(0x2, 0x80805, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) statfs(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000380)=""/75) 1.899067689s ago: executing program 1 (id=1255): r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001f40)={0x9, {{0xa, 0x0, 0x3, @mcast2}}, {{0xa, 0x2, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffff8}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="090000000a00004000000003ff020000000000000000000000000009"], 0x8c) 1.840324517s ago: executing program 1 (id=1256): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000003fffffff000000000000711808000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.84001181s ago: executing program 1 (id=1257): socket$inet(0x2, 0x1, 0x100) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=@newtaction={0x14dc, 0x30, 0x2, 0x0, 0x0, {}, [{0x14c8, 0x1, [@m_skbmod={0x1078, 0x18, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0xfff, 0x8000, 0x4, 0xb, 0x1}}}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x3a, 0x3, 0x5, 0x8, 0x6}, 0x2}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0x170, 0x1c, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5164db52, 0xf5f, 0x7, 0x5, 0x1}, 0x15}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffffb, 0x1, 0x3, 0x5, 0x101}, 0x7e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x5, 0x7, 0x2, 0xffff}, 0x43}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8b, 0x9, 0x1, 0xffffffff, 0x204}, 0x55}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x4, 0xffffffffffffffff, 0xf, 0x5b12}, 0x65}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x3, 0x5, 0x7, 0x9}, 0x1f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x106, 0x5, 0x2, 0x8, 0xc}, 0x21}}]}, {0x80, 0x6, "84208dd11f723a55049cbc0526216a2ed005cab932481ba8d149aa5fe9fcbc7f48c6e4be52d3c5b46d1538834d5f5d6e2594b25f2a054475a4fec9fe60ec8f8bc168f4784b4ba6faea3eb401199820c403fa1318852d20b9011aca522ac24a5e215642e531dcec129d685a2ea40315d5e51ea51f43c9fa89edeaf280"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_mirred={0x104, 0x10, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xd, 0x20000000, 0xb, 0x3ff}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xf9, 0x4, 0x20000000, 0xffffffff, 0x2}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x5, 0x5, 0x3, 0x7}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x8, 0x2, 0x200, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x3, 0x5, 0xea27, 0x145a7e2a}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x9db, 0x20000000, 0x6, 0x7ff}, 0x1}}]}, {0x18, 0x6, "f583f44500b4652fce64e8892afbd65dcfa6e968"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_skbmod={0x88, 0x1d, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x735}]}, {0x54, 0x6, "9c2fa6d80d8efcec04ed7d9455651db0ab1e76185accff7b41ce65a77ee24593e69b10fa0cbdf7f82e65f76c0b8a196bd61315dceb37a86ca050026217ac9cb323127291ec5b74d2cce2349cf7cf2a49"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x4}}}}, @m_skbmod={0x150, 0x12, 0x0, 0x0, {{0xb}, {0x70, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x20, 0x2, {{0x3, 0xfffffffe, 0x2, 0x9, 0x7}, 0x2}}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x7, 0xffff, 0x20000000, 0x10001, 0x20000003}, 0xf}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_ETYPE={0xfec9, 0x5, 0x3}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_SMAC={0xa}]}, {0xb8, 0x6, "703c68c61542de352c8ba53f0d37cdcf610118798a2dacd5620a8f4c5193a0ef3e5aa41a0cbe597821866b266d68d06060aad3b0b4cfb5dec71a224cfa1cc7cce6ca3ead38f9ecdcffae1f6628cf74bc78b95b2f77314b80ed786829f039b61040078a969c078e519cc2cd2e0465032a585c543ca42438074edbe22d1594d27ddda69853f77a84a8a667bdc4db811075c868a044dcdaa093878172d68e0dbec8d498074dac061be3bcc1778ccb47db2f6c6618d9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x14dc}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES32=r0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$vim2m(&(0x7f0000000280), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0xf0f043}) ppoll(&(0x7f0000000300)=[{r4, 0x2007}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x0, 0x4004) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001000010828bd70000000000000000000", @ANYRES32=0x0, @ANYRES8=r2], 0x20}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000440)=""/90, 0x0, 0x6000}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000002e40)={0x2, 0x0, [{0xe44909cf08938b43, 0xac, &(0x7f0000001540)=""/172}, {0x0, 0x53, &(0x7f00000003c0)=""/83}]}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r7, 0x4008af60, &(0x7f0000000040)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffb) 1.339626556s ago: executing program 2 (id=1258): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) 1.237606757s ago: executing program 2 (id=1259): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x101001) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xddff}) 1.237238823s ago: executing program 3 (id=1260): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r4, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2002, 0x0, 0x0, 0x0, 0x3cd}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000000)={0x18}) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='mm_page_free_batched\x00', r2}, 0x18) r6 = socket$kcm(0xa, 0x3, 0x73) sendmsg$kcm(r6, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000340)=[{0xc, 0x29, 0xb}], 0xc}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000640)="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", 0x2000, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 1.170536506s ago: executing program 2 (id=1261): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xf803, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000300f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1.170140965s ago: executing program 2 (id=1262): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xfe5d, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000280), 0x3, 0x389001) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) (async) ioctl$TCFLSH(r3, 0x400455c8, 0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)) (async) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000500)={0x40, 0xf, 0x5, 0x1ff, 0x0, 0x5, 0x0}) (async) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000000)=0x40000001) (async) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, 0x1c) (async) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000380)={0x320, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x1}, 0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/2, 0x7d, 0x2, 0x1, 0x47}, 0x28) 900.440897ms ago: executing program 1 (id=1263): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x0, 0x44}, 0x28) fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x48) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x2, 0x0, {0x8, 0x7}, {0x6, 0x802}, @rumble={0xffff, 0x6}}) r4 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x8ea341) write$char_usb(r4, &(0x7f0000000040)="e2", 0x12d8) mkdir(&(0x7f0000000400)='./file0\x00', 0x103) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002800400728008000900"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10000}, 0x28) sendmsg$NFT_BATCH(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000340)={@in={0x2, 0x4e21, @multicast1}, {&(0x7f0000000440)=""/248, 0xf8}, &(0x7f0000000040), 0x32}, 0xa0) 210.275µs ago: executing program 1 (id=1264): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) r0 = dup(0xffffffffffffffff) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x8, 0x4, 0x0, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c000000100005ff00000000007fffffff00004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476000004", @ANYRES32], 0x3c}}, 0x0) 0s ago: executing program 1 (id=1265): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x20000000000001e2, &(0x7f0000000100)=ANY=[@ANYRES32=r0], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async, rerun: 64) r1 = socket$l2tp6(0xa, 0x2, 0x73) (rerun: 64) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) (async) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TCFLSH(r3, 0x400455c8, 0x2) (async) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000140)=0xffffffc0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r5, 0x0, 0x0) (async) bind$bt_hci(r4, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r4, &(0x7f0000000000)="3f000000010000", 0x7) kernel console output (not intermixed with test programs): .259382][ T7224] vlan2: entered promiscuous mode [ 156.259430][ T7228] netlink: 28 bytes leftover after parsing attributes in process `syz.2.314'. [ 156.259497][ T7224] vlan2: entered allmulticast mode [ 156.259509][ T7224] hsr_slave_1: entered allmulticast mode [ 156.702739][ T7236] fuse: Unknown parameter 'fHÚ$' [ 157.059709][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 157.926000][ T7260] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 157.932414][ T7260] FAULT_INJECTION: forcing a failure. [ 157.932414][ T7260] name failslab, interval 1, probability 0, space 0, times 0 [ 157.936351][ T7260] CPU: 0 UID: 0 PID: 7260 Comm: syz.0.321 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 157.936366][ T7260] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 157.936373][ T7260] Call Trace: [ 157.936377][ T7260] [ 157.936381][ T7260] dump_stack_lvl+0x116/0x1f0 [ 157.936400][ T7260] should_fail_ex+0x512/0x640 [ 157.936413][ T7260] ? virtqueue_add_sgs+0x76c/0x1c70 [ 157.936424][ T7260] should_failslab+0xc2/0x120 [ 157.936438][ T7260] __kmalloc_noprof+0xd2/0x510 [ 157.936452][ T7260] virtqueue_add_sgs+0x76c/0x1c70 [ 157.936467][ T7260] ? __pfx_virtqueue_add_sgs+0x10/0x10 [ 157.936478][ T7260] ? __virt_addr_valid+0x81/0x610 [ 157.936490][ T7260] ? __phys_addr+0xe8/0x180 [ 157.936501][ T7260] ? pack_sg_list.constprop.0+0x2a8/0x320 [ 157.936522][ T7260] p9_virtio_request+0x26d/0x6c0 [ 157.936542][ T7260] ? __pfx_p9_virtio_request+0x10/0x10 [ 157.936558][ T7260] ? p9_client_prepare_req+0x112/0x4d0 [ 157.936570][ T7260] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 157.936581][ T7260] ? lookup_open.isra.0+0x4da/0x1580 [ 157.936599][ T7260] ? __lock_acquire+0xb8a/0x1c90 [ 157.936616][ T7260] p9_client_rpc+0x33e/0xc50 [ 157.936627][ T7260] ? node_tag_clear+0x105/0x290 [ 157.936642][ T7260] ? __pfx_p9_client_rpc+0x10/0x10 [ 157.936655][ T7260] ? idr_alloc_u32+0x20f/0x2f0 [ 157.936674][ T7260] ? idr_preload_end+0xc2/0x230 [ 157.936685][ T7260] ? rcu_is_watching+0x12/0xc0 [ 157.936699][ T7260] p9_client_walk+0x1ab/0x530 [ 157.936712][ T7260] ? v9fs_fid_lookup+0xb1e/0xeb0 [ 157.936725][ T7260] ? __pfx_p9_client_walk+0x10/0x10 [ 157.936737][ T7260] ? do_raw_spin_unlock+0x172/0x230 [ 157.936755][ T7260] ? v9fs_fid_lookup+0xe9/0xeb0 [ 157.936769][ T7260] v9fs_vfs_lookup+0x206/0x5b0 [ 157.936785][ T7260] ? __pfx_v9fs_vfs_lookup+0x10/0x10 [ 157.936801][ T7260] ? lockdep_init_map_type+0x5c/0x280 [ 157.936816][ T7260] ? lockdep_init_map_type+0x5c/0x280 [ 157.936834][ T7260] __lookup_slow+0x24e/0x460 [ 157.936848][ T7260] ? __pfx___lookup_slow+0x10/0x10 [ 157.936864][ T7260] ? compaction_alloc+0x2b10/0x4220 [ 157.936883][ T7260] ? compaction_alloc+0x2b10/0x4220 [ 157.936897][ T7260] ? d_lookup+0xe7/0x190 [ 157.936914][ T7260] lookup_one_unlocked+0xd4/0x120 [ 157.936948][ T7260] ovl_lookup_single+0x214/0xfc0 [ 157.936965][ T7260] ? __pfx_ovl_lookup_single+0x10/0x10 [ 157.936982][ T7260] ovl_lookup_layer+0x3d4/0x480 [ 157.936997][ T7260] ? __pfx_ovl_lookup_layer+0x10/0x10 [ 157.937009][ T7260] ? trace_kmalloc+0x2b/0xd0 [ 157.937026][ T7260] ovl_lookup+0x13f9/0x21a0 [ 157.937044][ T7260] ? __pfx_ovl_lookup+0x10/0x10 [ 157.937057][ T7260] ? generic_permission+0xad/0x7d0 [ 157.937071][ T7260] ? bpf_lsm_inode_permission+0x9/0x10 [ 157.937085][ T7260] ? inode_permission+0x156/0x630 [ 157.937099][ T7260] ? ovl_revert_creds+0x13/0x50 [ 157.937113][ T7260] ? ovl_permission+0xcd/0x290 [ 157.937125][ T7260] ? __pfx_ovl_permission+0x10/0x10 [ 157.937139][ T7260] ? bpf_lsm_inode_permission+0x9/0x10 [ 157.937151][ T7260] ? security_inode_permission+0xbf/0x260 [ 157.937167][ T7260] ? inode_permission+0x156/0x630 [ 157.937181][ T7260] ? __pfx_ovl_lookup+0x10/0x10 [ 157.937194][ T7260] lookup_open.isra.0+0x4da/0x1580 [ 157.937212][ T7260] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 157.937235][ T7260] ? __pfx_down_write+0x10/0x10 [ 157.937246][ T7260] ? mnt_get_write_access+0x20c/0x300 [ 157.937262][ T7260] path_openat+0x893/0x2cb0 [ 157.937276][ T7260] ? __pfx_path_openat+0x10/0x10 [ 157.937287][ T7260] ? __lock_acquire+0xb8a/0x1c90 [ 157.937303][ T7260] do_filp_open+0x20b/0x470 [ 157.937313][ T7260] ? __pfx_do_filp_open+0x10/0x10 [ 157.937333][ T7260] ? alloc_fd+0x471/0x7d0 [ 157.937353][ T7260] do_sys_openat2+0x11b/0x1d0 [ 157.937367][ T7260] ? __pfx_do_sys_openat2+0x10/0x10 [ 157.937383][ T7260] ? __fget_files+0x20e/0x3c0 [ 157.937404][ T7260] ? handle_mm_fault+0x230/0xd10 [ 157.937423][ T7260] __ia32_compat_sys_open+0x146/0x1e0 [ 157.937438][ T7260] ? __pfx___ia32_compat_sys_open+0x10/0x10 [ 157.937455][ T7260] ? rcu_is_watching+0x12/0xc0 [ 157.937466][ T7260] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 157.937479][ T7260] __do_fast_syscall_32+0x7c/0x3a0 [ 157.937492][ T7260] do_fast_syscall_32+0x32/0x80 [ 157.937503][ T7260] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 157.937517][ T7260] RIP: 0023:0xf7ff2579 [ 157.937528][ T7260] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 157.937542][ T7260] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 157.937556][ T7260] RAX: ffffffffffffffda RBX: 00000000809e1000 RCX: 0000000000060840 [ 157.937563][ T7260] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 157.937569][ T7260] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 157.937575][ T7260] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 157.937581][ T7260] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 157.937593][ T7260] [ 158.039190][ T7262] lo speed is unknown, defaulting to 1000 [ 158.044369][ T5955] Bluetooth: hci4: command 0x1003 tx timeout [ 158.099608][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 158.100372][ T5959] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 158.151316][ T7265] tipc: Enabling of bearer rejected, failed to enable media [ 158.519742][ T7279] netlink: 160 bytes leftover after parsing attributes in process `syz.3.326'. [ 158.596217][ T7285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.327'. [ 158.824599][ T7283] netlink: 48 bytes leftover after parsing attributes in process `syz.3.326'. [ 158.936700][ T7282] nvme_fabrics: missing parameter 'transport=%s' [ 158.939210][ T7282] nvme_fabrics: missing parameter 'nqn=%s' [ 159.149644][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 159.386557][ T7291] netlink: 'syz.3.328': attribute type 1 has an invalid length. [ 159.921218][ T7315] kernel profiling enabled (shift: 17) [ 160.179672][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 160.625919][ T7323] netlink: 128 bytes leftover after parsing attributes in process `syz.2.338'. [ 160.664046][ T7327] loop6: detected capacity change from 0 to 524287999 [ 161.100800][ T7334] netlink: 'syz.2.342': attribute type 4 has an invalid length. [ 161.229611][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 161.324284][ T7343] FAULT_INJECTION: forcing a failure. [ 161.324284][ T7343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.328332][ T7343] CPU: 1 UID: 0 PID: 7343 Comm: syz.2.343 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 161.328347][ T7343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 161.328354][ T7343] Call Trace: [ 161.328358][ T7343] [ 161.328363][ T7343] dump_stack_lvl+0x16c/0x1f0 [ 161.328377][ T7343] should_fail_ex+0x512/0x640 [ 161.328391][ T7343] _copy_from_user+0x2e/0xd0 [ 161.328404][ T7343] get_compat_msghdr+0xa7/0x170 [ 161.328416][ T7343] ? __pfx_get_compat_msghdr+0x10/0x10 [ 161.328435][ T7343] ___sys_sendmsg+0x1ae/0x1d0 [ 161.328448][ T7343] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.328465][ T7343] ? find_held_lock+0x2b/0x80 [ 161.328485][ T7343] __sys_sendmsg+0x16d/0x220 [ 161.328497][ T7343] ? __pfx___sys_sendmsg+0x10/0x10 [ 161.328514][ T7343] ? rcu_is_watching+0x12/0xc0 [ 161.328527][ T7343] __do_fast_syscall_32+0x7c/0x3a0 [ 161.328540][ T7343] do_fast_syscall_32+0x32/0x80 [ 161.328551][ T7343] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 161.328565][ T7343] RIP: 0023:0xf7ff8579 [ 161.328573][ T7343] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 161.328583][ T7343] RSP: 002b:00000000f50d455c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 161.328593][ T7343] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000240 [ 161.328600][ T7343] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 161.328606][ T7343] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 161.328611][ T7343] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 161.328617][ T7343] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 161.328629][ T7343] [ 161.700961][ T5959] Bluetooth: hci1: command 0x0c1a tx timeout [ 161.730624][ T7354] vivid-007: ================= START STATUS ================= [ 161.733372][ T7354] vivid-007: Enable Output Cropping: true [ 161.735316][ T7354] vivid-007: Enable Output Composing: true [ 161.737196][ T7354] vivid-007: Enable Output Scaler: true [ 161.738993][ T7354] vivid-007: Tx RGB Quantization Range: Automatic [ 161.741140][ T7354] vivid-007: Transmit Mode: HDMI [ 161.743095][ T7354] vivid-007: Hotplug Present: 0x00000000 [ 161.745142][ T7354] vivid-007: RxSense Present: 0x00000000 [ 161.747790][ T7354] vivid-007: EDID Present: 0x00000000 [ 161.749455][ T7354] vivid-007: ================== END STATUS ================== [ 161.757343][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.348'. [ 162.259629][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 162.505138][ T7366] netlink: 24 bytes leftover after parsing attributes in process `syz.3.352'. [ 162.538769][ T7368] batman_adv: batadv0: Adding interface: gretap1 [ 162.542258][ T7368] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.551090][ T7368] batman_adv: batadv0: Interface activated: gretap1 [ 162.562596][ T7368] tmpfs: Unknown parameter 'm¡3 `», priority 0 [ 170.628892][ T7588] syzkaller0: entered promiscuous mode [ 170.630747][ T7588] syzkaller0: entered allmulticast mode [ 170.636747][ T7587] vivid-002: reconnect [ 170.638975][ T7587] tipc: Resetting bearer [ 170.660318][ T7587] tipc: Disabling bearer [ 170.739682][ T34] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 170.922971][ T7591] tipc: Enabled bearer , priority 0 [ 170.929059][ T7591] syzkaller0: MTU too low for tipc bearer [ 170.931156][ T7591] tipc: Disabling bearer [ 171.619701][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 172.097382][ T7607] netlink: 16 bytes leftover after parsing attributes in process `syz.0.418'. [ 172.352587][ T5957] usb 7-1: USB disconnect, device number 5 [ 172.660383][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 173.709616][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 173.723887][ T7625] overlay: ./file0 is not a directory [ 173.802996][ T7627] netlink: 68 bytes leftover after parsing attributes in process `syz.2.425'. [ 173.848641][ T7633] netlink: 24 bytes leftover after parsing attributes in process `syz.0.427'. [ 174.389934][ T5954] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 174.499366][ T7657] Cannot find del_set index 0 as target [ 174.563226][ T7662] netlink: 14212 bytes leftover after parsing attributes in process `syz.3.434'. [ 174.614391][ T7658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.431'. [ 174.739651][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 174.751398][ T5954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.755699][ T5954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.759523][ T5954] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 174.765099][ T5954] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 174.768694][ T5954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.780379][ T5954] usb 6-1: config 0 descriptor?? [ 175.247976][ T5954] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 175.587100][ T7677] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(14) [ 175.589291][ T7677] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 175.592300][ T7677] vhci_hcd vhci_hcd.0: Device attached [ 175.779670][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 176.009707][ T5954] usb 37-1: new high-speed USB device number 6 using vhci_hcd [ 176.477099][ T7678] vhci_hcd: connection reset by peer [ 176.600100][ T1139] vhci_hcd: stop threads [ 176.601594][ T1139] vhci_hcd: release socket [ 176.603376][ T1139] vhci_hcd: disconnect device [ 176.819634][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 177.022715][ T7695] bridge_slave_0: left promiscuous mode [ 177.024656][ T7699] capability: warning: `syz.2.446' uses deprecated v2 capabilities in a way that may be insecure [ 177.027948][ T7695] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.028466][ T7699] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 177.035703][ T7695] bridge_slave_1: left promiscuous mode [ 177.037750][ T7695] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.037974][ T7699] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 177.049318][ T7695] bond0: (slave bond_slave_0): Releasing backup interface [ 177.054805][ T7695] bond0: (slave bond_slave_1): Releasing backup interface [ 177.058714][ T7695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.063798][ T7695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.072776][ T7695] batman_adv: batadv0: Removing interface: gretap1 [ 177.084948][ T7702] netlink: 'syz.2.447': attribute type 39 has an invalid length. [ 177.311830][ T6021] usb 6-1: USB disconnect, device number 2 [ 177.728293][ T7710] xt_CT: You must specify a L4 protocol and not use inversions on it [ 177.859643][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 178.224934][ T40] audit: type=1800 audit(2000000011.279:7): pid=7723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.452" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 178.899638][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 179.165151][ T7749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.461'. [ 179.168225][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.461'. [ 179.395724][ T7754] : entered promiscuous mode [ 179.405189][ T7754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.460'. [ 179.679624][ T7759] serio: Serial port ptm1 [ 179.730635][ T7761] fuse: Unknown parameter 'gr00000000000000000000' [ 179.940099][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 180.392487][ T7778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.470'. [ 180.394136][ T7777] input: syz1 as /devices/virtual/input/input8 [ 180.861949][ T7787] lo speed is unknown, defaulting to 1000 [ 180.979672][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 181.084735][ T7799] mmap: syz.0.477 (7799): VmData 37507072 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 181.129636][ T5954] vhci_hcd: vhci_device speed not set [ 181.343446][ T7794] netlink: 24 bytes leftover after parsing attributes in process `syz.1.475'. [ 181.893254][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.481'. [ 182.019643][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 183.059701][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 184.054196][ T7831] netlink: 'syz.2.485': attribute type 10 has an invalid length. [ 184.057624][ T7831] netlink: 40 bytes leftover after parsing attributes in process `syz.2.485'. [ 184.065515][ T7831] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 184.071159][ T7831] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.099802][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 185.128172][ T7856] netlink: 112 bytes leftover after parsing attributes in process `syz.2.493'. [ 185.139659][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 185.315152][ T7866] netlink: 128 bytes leftover after parsing attributes in process `syz.3.496'. [ 185.315648][ T7858] macvlan2: entered promiscuous mode [ 185.318905][ T7866] netlink: 16 bytes leftover after parsing attributes in process `syz.3.496'. [ 185.320750][ T7858] macvlan2: entered allmulticast mode [ 185.486329][ T7870] wireguard0: entered promiscuous mode [ 185.488210][ T7870] wireguard0: entered allmulticast mode [ 185.823102][ T7881] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 185.863056][ T7884] loop2: detected capacity change from 0 to 7 [ 185.872173][ T7884] loop2: [ 185.874517][ T7884] loop2: partition table partially beyond EOD, truncated [ 185.954172][ T7890] Bluetooth: hci4: Frame reassembly failed (-84) [ 185.957437][ T1136] Bluetooth: hci4: Frame reassembly failed (-84) [ 186.149788][ T6021] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 186.179638][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 186.301084][ T6021] usb 7-1: Using ep0 maxpacket: 8 [ 186.303927][ T6021] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 186.306499][ T6021] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 186.310273][ T6021] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 186.313748][ T7893] netlink: 28 bytes leftover after parsing attributes in process `syz.3.506'. [ 186.313884][ T6021] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 186.323851][ T6021] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.327888][ T6021] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 186.330843][ T6021] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.538064][ T6021] usb 7-1: usb_control_msg returned -32 [ 186.540078][ T6021] usbtmc 7-1:16.0: can't read capabilities [ 186.660693][ T55] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 186.809696][ T55] usb 8-1: Using ep0 maxpacket: 8 [ 186.814216][ T55] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 186.818536][ T55] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 186.822790][ T55] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 15816, setting to 1024 [ 186.827460][ T55] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 186.831952][ T55] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.837371][ T55] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 186.841293][ T55] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.155648][ T7888] program syz.2.504 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.179930][ T1017] usb 7-1: USB disconnect, device number 6 [ 187.219656][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 187.432434][ T55] usb 8-1: usb_control_msg returned -71 [ 187.435294][ T55] usbtmc 8-1:16.0: can't read capabilities [ 187.440938][ T55] usb 8-1: USB disconnect, device number 3 [ 187.982748][ T7927] comedi comedi1: adq12b: I/O port conflict (0x4f27,16) [ 188.019855][ T5959] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 188.269664][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 189.309731][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 189.605800][ T7972] new mount options do not match the existing superblock, will be ignored [ 189.639424][ T7975] netlink: 88 bytes leftover after parsing attributes in process `syz.3.535'. [ 189.714194][ T1017] Process accounting resumed [ 189.788697][ T7980] program syz.0.536 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.795461][ C2] sr 2:0:0:0: [sr0] tag#10 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 189.798702][ C2] sr 2:0:0:0: [sr0] tag#10 CDB: opcode=0x94 94 a2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 189.800515][ T7981] block device autoloading is deprecated and will be removed. [ 190.014261][ T7984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.537'. [ 190.069629][ T54] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 190.139629][ T1017] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 190.316009][ T40] audit: type=1804 audit(2000000023.369:8): pid=7991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.538" name="/newroot/139/file0" dev="tmpfs" ino=763 res=1 errno=0 [ 190.333600][ T1017] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 190.337428][ T1017] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 190.339641][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 190.340916][ T1017] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 190.345907][ T1017] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.391731][ T7982] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 190.413469][ T1017] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 191.379622][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 191.954611][ T8007] lo: entered allmulticast mode [ 191.956332][ T8007] tunl0: entered allmulticast mode [ 191.957997][ T8007] gre0: entered allmulticast mode [ 191.960876][ T8007] gretap0: entered allmulticast mode [ 191.962664][ T8007] erspan0: entered allmulticast mode [ 191.964452][ T8007] ip_vti0: entered allmulticast mode [ 191.966255][ T8007] ip6_vti0: entered allmulticast mode [ 191.968061][ T8007] sit0: entered allmulticast mode [ 191.970220][ T8007] ip6tnl0: entered allmulticast mode [ 191.972023][ T8007] ip6gre0: entered allmulticast mode [ 191.973842][ T8007] ip6gretap0: entered allmulticast mode [ 191.975941][ T8007] bridge0: entered allmulticast mode [ 191.977899][ T8007] vcan0: entered allmulticast mode [ 191.980448][ T8007] bond0: entered allmulticast mode [ 191.982226][ T8007] team0: entered allmulticast mode [ 191.984144][ T8007] dummy0: entered allmulticast mode [ 191.986017][ T8007] nlmon0: entered allmulticast mode [ 191.987786][ T8007] caif0: entered allmulticast mode [ 191.989606][ T8007] batadv0: entered allmulticast mode [ 191.991442][ T8007] vxcan0: entered allmulticast mode [ 191.993207][ T8007] vxcan1: entered allmulticast mode [ 191.994979][ T8007] veth0: entered allmulticast mode [ 191.996708][ T8007] veth1: entered allmulticast mode [ 191.998465][ T8007] wg0: entered allmulticast mode [ 192.000257][ T8007] wg1: entered allmulticast mode [ 192.001978][ T8007] wg2: entered allmulticast mode [ 192.003698][ T8007] veth0_to_bridge: entered allmulticast mode [ 192.005790][ T8007] bridge_slave_0: entered allmulticast mode [ 192.007731][ T8007] veth1_to_bridge: entered allmulticast mode [ 192.009820][ T8007] bridge_slave_1: entered allmulticast mode [ 192.011759][ T8007] veth0_to_bond: entered allmulticast mode [ 192.013839][ T8007] bond_slave_0: entered allmulticast mode [ 192.015746][ T8007] veth1_to_bond: entered allmulticast mode [ 192.017728][ T8007] bond_slave_1: entered allmulticast mode [ 192.019892][ T8007] veth0_to_team: entered allmulticast mode [ 192.023330][ T8007] team_slave_0: entered allmulticast mode [ 192.025281][ T8007] veth1_to_team: entered allmulticast mode [ 192.027344][ T8007] team_slave_1: entered allmulticast mode [ 192.029218][ T8007] veth0_to_batadv: entered allmulticast mode [ 192.031412][ T8007] batadv_slave_0: entered allmulticast mode [ 192.033405][ T8007] veth1_to_batadv: entered allmulticast mode [ 192.035377][ T8007] batadv_slave_1: entered allmulticast mode [ 192.037397][ T8007] xfrm0: entered allmulticast mode [ 192.039091][ T8007] veth0_to_hsr: entered allmulticast mode [ 192.041865][ T8007] hsr_slave_0: entered allmulticast mode [ 192.044391][ T8007] veth1_to_hsr: entered allmulticast mode [ 192.046328][ T8007] hsr_slave_1: entered allmulticast mode [ 192.048278][ T8007] hsr0: entered allmulticast mode [ 192.050061][ T8007] veth1_virt_wifi: entered allmulticast mode [ 192.052017][ T8007] veth0_virt_wifi: entered allmulticast mode [ 192.053993][ T8007] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 192.056437][ T8007] veth1_vlan: entered allmulticast mode [ 192.058337][ T8007] veth0_vlan: entered allmulticast mode [ 192.060870][ T8007] vlan0: entered allmulticast mode [ 192.063644][ T8007] vlan1: entered allmulticast mode [ 192.065344][ T8007] macvlan0: entered allmulticast mode [ 192.067182][ T8007] macvlan1: left promiscuous mode [ 192.068934][ T8007] ipvlan0: entered allmulticast mode [ 192.070769][ T8007] ipvlan1: entered allmulticast mode [ 192.072526][ T8007] geneve0: entered allmulticast mode [ 192.074294][ T8007] geneve1: entered allmulticast mode [ 192.076030][ T8007] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 192.079204][ T8007] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 192.085537][ T8007] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 192.088598][ T8007] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 192.091392][ T8007] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 192.093778][ T8007] mac80211_hwsim hwsim10 wlan2: entered allmulticast mode [ 192.096074][ T8007] bridge1: entered allmulticast mode [ 192.097860][ T8007] erspan0.1: entered allmulticast mode [ 192.101116][ T8007] vxcan2: entered allmulticast mode [ 192.103055][ T8007] vxcan3: entered allmulticast mode [ 192.104761][ T8007] bond1: entered allmulticast mode [ 192.106457][ T8007] veth2: entered allmulticast mode [ 192.108237][ T8007] veth3: entered allmulticast mode [ 192.110022][ T8007] bond2: entered allmulticast mode [ 192.112485][ T8007] mac80211_hwsim hwsim12 wlan3: entered allmulticast mode [ 192.115174][ T8007] : entered allmulticast mode [ 192.116815][ T8007] sit1: entered allmulticast mode [ 192.155506][ T8009] netlink: 132 bytes leftover after parsing attributes in process `syz.3.544'. [ 192.158907][ T8009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.544'. [ 192.419613][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 192.620541][ T1017] usb 7-1: USB disconnect, device number 7 [ 193.301958][ T8021] netlink: 2 bytes leftover after parsing attributes in process `syz.0.548'. [ 193.383205][ T8028] binder: 8023:8028 ioctl c00c620f 80000740 returned -22 [ 193.469608][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 193.562021][ T8030] input: syz0 as /devices/virtual/input/input9 [ 193.661496][ T8040] netlink: 532 bytes leftover after parsing attributes in process `syz.3.555'. [ 193.777974][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.780748][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.144667][ T8048] lo speed is unknown, defaulting to 1000 [ 194.204940][ T8049] program syz.3.555 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.509608][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 195.539717][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 196.190395][ T8071] netlink: 196 bytes leftover after parsing attributes in process `syz.0.564'. [ 196.224410][ T8075] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 196.515280][ T8079] netlink: 'syz.1.568': attribute type 39 has an invalid length. [ 196.579619][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 196.863396][ T8091] loop2: detected capacity change from 0 to 7 [ 196.867471][ T8091] loop2: [ 196.868450][ T8091] loop2: partition table partially beyond EOD, truncated [ 197.599815][ T54] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 197.619633][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 197.629619][ T1017] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 197.751975][ T54] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.755239][ T54] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 197.758648][ T54] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 197.762294][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.767882][ T54] usb 8-1: config 0 descriptor?? [ 197.790991][ T1017] usb 5-1: config 0 has an invalid interface number: 223 but max is 0 [ 197.793635][ T1017] usb 5-1: config 0 has no interface number 0 [ 197.798042][ T1017] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=55.7a [ 197.800960][ T1017] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.803455][ T1017] usb 5-1: Product: syz [ 197.804826][ T1017] usb 5-1: Manufacturer: syz [ 197.806611][ T1017] usb 5-1: SerialNumber: syz [ 197.810626][ T1017] usb 5-1: config 0 descriptor?? [ 197.816436][ T1017] usbserial_generic 5-1:0.223: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 197.820493][ T1017] usbserial_generic 5-1:0.223: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 197.823887][ T1017] usbserial_generic 5-1:0.223: device has no bulk endpoints [ 198.659700][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 198.874510][ T8124] Bluetooth: hci4: Frame reassembly failed (-84) [ 198.877412][ T1136] Bluetooth: hci4: Frame reassembly failed (-84) [ 199.699606][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 200.340402][ T6021] usb 8-1: USB disconnect, device number 4 [ 200.365591][ T8129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.584'. [ 200.406837][ T8131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.585'. [ 200.442365][ T1017] usb 5-1: USB disconnect, device number 5 [ 200.618892][ T8141] support for the xor transformation has been removed. [ 200.749633][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 200.860918][ T8147] netlink: 24 bytes leftover after parsing attributes in process `syz.0.591'. [ 200.899695][ T5955] Bluetooth: hci4: command 0x1003 tx timeout [ 200.904206][ T5959] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 201.408761][ T8158] Cannot find del_set index 0 as target [ 201.440342][ T8160] netlink: 'syz.1.596': attribute type 10 has an invalid length. [ 201.443508][ T8160] netlink: 40 bytes leftover after parsing attributes in process `syz.1.596'. [ 201.450330][ T8160] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 201.455029][ T8160] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 201.462034][ T5957] lo speed is unknown, defaulting to 1000 [ 201.464296][ T5957] sz1: Port: 1 Link ACTIVE [ 201.466620][ T5957] lo speed is unknown, defaulting to 1000 [ 201.589680][ T1017] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 201.685849][ T8175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.597'. [ 201.705775][ T8175] netlink: 'syz.2.597': attribute type 11 has an invalid length. [ 201.708841][ T8175] netlink: 224 bytes leftover after parsing attributes in process `syz.2.597'. [ 201.779602][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 201.783827][ T8178] netlink: 52 bytes leftover after parsing attributes in process `syz.1.603'. [ 201.891811][ T1017] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.896073][ T1017] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 201.899745][ T1017] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 201.906351][ T1017] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.912502][ T1017] usb 5-1: config 0 descriptor?? [ 202.012252][ T8191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.606'. [ 202.102372][ T8201] netlink: 272 bytes leftover after parsing attributes in process `syz.1.610'. [ 202.106371][ T8201] macvlan1: entered promiscuous mode [ 202.216273][ T8207] netlink: 128 bytes leftover after parsing attributes in process `syz.1.611'. [ 202.819763][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 203.759623][ T54] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 203.859599][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 203.998256][ T6742] usb 5-1: USB disconnect, device number 6 [ 204.221563][ T54] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 204.226407][ T54] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 204.233526][ T54] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 204.237582][ T54] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 204.242839][ T54] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 204.246267][ T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.260088][ T54] usb 7-1: config 0 descriptor?? [ 204.637258][ T54] usbhid 7-1:0.0: can't add hid device: -71 [ 204.659838][ T54] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 204.666082][ T54] usb 7-1: USB disconnect, device number 8 [ 204.806488][ T8291] netlink: 'syz.2.634': attribute type 10 has an invalid length. [ 204.899609][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 204.909652][ T6040] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 204.958320][ T8303] program syz.0.636 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.965784][ C0] sr 2:0:0:0: [sr0] tag#4 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 204.970173][ C0] sr 2:0:0:0: [sr0] tag#4 CDB: opcode=0x94 94 a2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 204.971428][ T40] audit: type=1326 audit(2000000038.029:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8301 comm="syz.3.638" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 205.014973][ T40] audit: type=1326 audit(2000000038.029:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8301 comm="syz.3.638" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 205.044561][ T40] audit: type=1326 audit(2000000038.039:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8301 comm="syz.3.638" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 205.061013][ T6040] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.064154][ T6040] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 205.066740][ T40] audit: type=1326 audit(2000000038.039:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8301 comm="syz.3.638" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 205.068105][ T6040] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 205.076873][ T6040] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.082416][ T6040] usb 6-1: config 0 descriptor?? [ 205.089634][ T40] audit: type=1326 audit(2000000038.039:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8301 comm="syz.3.638" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 205.096294][ T40] audit: type=1326 audit(2000000038.039:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8301 comm="syz.3.638" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 205.104843][ T40] audit: type=1326 audit(2000000038.039:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8301 comm="syz.3.638" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 205.111557][ T40] audit: type=1326 audit(2000000038.039:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8301 comm="syz.3.638" exe="/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 205.118211][ T40] audit: type=1326 audit(2000000038.039:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8301 comm="syz.3.638" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 205.125152][ T40] audit: type=1326 audit(2000000038.039:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8301 comm="syz.3.638" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 205.229624][ T1017] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 205.919256][ T8305] __nla_validate_parse: 3 callbacks suppressed [ 205.919267][ T8305] netlink: 72 bytes leftover after parsing attributes in process `syz.2.637'. [ 205.939611][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 206.288220][ T8317] batman_adv: batadv0: Adding interface: gretap1 [ 206.291888][ T8317] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.299907][ T8317] batman_adv: batadv0: Interface activated: gretap1 [ 206.979599][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 206.997768][ T8328] netlink: 76 bytes leftover after parsing attributes in process `syz.3.644'. [ 207.690258][ T6040] usb 6-1: USB disconnect, device number 3 [ 208.019598][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 208.469615][ C0] vkms_vblank_simulate: vblank timer overrun [ 208.569624][ C0] vkms_vblank_simulate: vblank timer overrun [ 209.053082][ T8360] lo speed is unknown, defaulting to 1000 [ 209.059653][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 209.087388][ T8366] netlink: 32 bytes leftover after parsing attributes in process `syz.1.650'. [ 209.096064][ T8366] netlink: 32 bytes leftover after parsing attributes in process `syz.1.650'. [ 209.431754][ T8381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.652'. [ 209.772375][ T8397] lo speed is unknown, defaulting to 1000 [ 209.912010][ T1017] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 210.099665][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 210.151706][ T1017] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.154922][ T1017] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 210.158940][ T1017] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 210.170527][ T1017] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.206492][ T1017] usb 5-1: config 0 descriptor?? [ 210.365667][ T1017] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 211.059287][ T8433] netlink: 196 bytes leftover after parsing attributes in process `syz.3.665'. [ 211.139614][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 212.179623][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 212.232541][ T8452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.670'. [ 212.576453][ T54] usb 5-1: USB disconnect, device number 8 [ 213.229592][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 213.601488][ T8469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.675'. [ 213.607578][ T8469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.675'. [ 213.819888][ T8476] program syz.0.677 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.823038][ C1] sr 2:0:0:0: [sr0] tag#5 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 213.826288][ C1] sr 2:0:0:0: [sr0] tag#5 CDB: opcode=0x94 94 a2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 213.869829][ T1017] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 214.061006][ T1017] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 214.064580][ T1017] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.068803][ T1017] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 214.072256][ T1017] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.149673][ T6351] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 214.259630][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 214.321467][ T8485] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 214.323572][ T8485] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 214.326076][ T8485] vhci_hcd vhci_hcd.0: Device attached [ 214.407714][ T1017] usb 6-1: GET_CAPABILITIES returned 0 [ 214.415526][ T1017] usbtmc 6-1:16.0: can't read capabilities [ 214.724590][ T60] usb 41-1: new high-speed USB device number 3 using vhci_hcd [ 214.840746][ T54] usb 6-1: USB disconnect, device number 4 [ 215.299610][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 215.531072][ T8487] vhci_hcd: connection reset by peer [ 215.533804][ T46] vhci_hcd: stop threads [ 215.535454][ T46] vhci_hcd: release socket [ 215.538901][ T46] vhci_hcd: disconnect device [ 215.796873][ T8502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.682'. [ 215.829574][ T8502] xt_CT: No such helper "snmp" [ 215.885486][ T8505] netlink: 14212 bytes leftover after parsing attributes in process `syz.3.683'. [ 215.940883][ T8507] netlink: 272 bytes leftover after parsing attributes in process `syz.3.684'. [ 215.943839][ T8507] macvlan1: entered promiscuous mode [ 216.339640][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 217.088379][ T8530] openvswitch: : Dropping previously announced user features [ 217.097808][ T8530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.690'. [ 217.379684][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 217.639079][ T8537] Cannot find del_set index 3 as target [ 218.089651][ T8545] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 218.196550][ T54] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 218.361356][ T54] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.364569][ T54] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 218.368608][ T54] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 218.371800][ T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.375582][ T54] usb 7-1: config 0 descriptor?? [ 218.383579][ T54] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 218.429606][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 219.195878][ T8570] random: crng reseeded on system resumption [ 219.206065][ T8570] Unrecognized hibernate image header format! [ 219.208121][ T8570] PM: hibernation: Image mismatch: architecture specific data [ 219.212592][ T8571] Unrecognized hibernate image header format! [ 219.214878][ T8571] PM: hibernation: Image mismatch: architecture specific data [ 219.233492][ T8572] lo speed is unknown, defaulting to 1000 [ 219.364926][ T8581] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 219.459602][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 219.494307][ T8592] netlink: 20 bytes leftover after parsing attributes in process `syz.3.709'. [ 219.528400][ T8595] macvlan1: left promiscuous mode [ 219.531574][ T8595] netdevsim netdevsim1 eth0: entered allmulticast mode [ 219.534586][ T8595] netdevsim netdevsim1 eth1: entered allmulticast mode [ 219.537551][ T8595] netdevsim netdevsim1 eth2: entered allmulticast mode [ 219.541182][ T8595] netdevsim netdevsim1 eth3: entered allmulticast mode [ 219.545982][ T8595] bond1: entered allmulticast mode [ 219.548309][ T8595] ip6erspan0: entered allmulticast mode [ 219.552674][ T8595] bridge1: left promiscuous mode [ 219.554865][ T8595] bridge1: entered allmulticast mode [ 219.558162][ T8597] netlink: 'syz.3.712': attribute type 10 has an invalid length. [ 219.559263][ T8595] bond2: entered allmulticast mode [ 219.560917][ T8597] netlink: 40 bytes leftover after parsing attributes in process `syz.3.712'. [ 219.566748][ T8595] macvlan2: entered allmulticast mode [ 219.572426][ T54] lo speed is unknown, defaulting to 1000 [ 219.573588][ T8597] geneve0: left allmulticast mode [ 219.574804][ T54] sz1: Port: 1 Link DOWN [ 219.578606][ T8597] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.583149][ T8597] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.587139][ T8597] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.599197][ T8597] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.606783][ T8597] geneve0: entered allmulticast mode [ 219.608832][ T8597] team0: Port device geneve0 added [ 219.622154][ T54] lo speed is unknown, defaulting to 1000 [ 219.929676][ T60] vhci_hcd: vhci_device speed not set [ 220.499653][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 220.974786][ T54] usb 7-1: USB disconnect, device number 9 [ 221.436052][ T8636] blktrace: Concurrent blktraces are not allowed on sg0 [ 221.524988][ T8647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.730'. [ 221.549602][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 222.589610][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 222.883713][ T8663] loop2: detected capacity change from 0 to 7 [ 222.886518][ T7124] loop2: [ 222.887475][ T7124] loop2: partition table partially beyond EOD, truncated [ 222.891205][ T8663] loop2: [ 222.892222][ T8663] loop2: partition table partially beyond EOD, truncated [ 222.941374][ T8672] IPv6: sit1: Disabled Multicast RS [ 222.943463][ T8672] sit1: entered allmulticast mode [ 223.232305][ T8684] : entered promiscuous mode [ 223.244611][ T8684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.736'. [ 223.409377][ T8682] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(14) [ 223.412508][ T8682] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 223.416092][ T8682] vhci_hcd vhci_hcd.0: Device attached [ 223.629646][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 223.809665][ T6021] usb 37-1: new high-speed USB device number 7 using vhci_hcd [ 224.395884][ T8685] vhci_hcd: connection reset by peer [ 224.401531][ T12] vhci_hcd: stop threads [ 224.402915][ T12] vhci_hcd: release socket [ 224.404386][ T12] vhci_hcd: disconnect device [ 224.659611][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 224.808005][ T8709] openvswitch: : Dropping previously announced user features [ 224.818385][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.745'. [ 225.374221][ T8720] netlink: 'syz.0.749': attribute type 11 has an invalid length. [ 225.376777][ T8720] netlink: 149476 bytes leftover after parsing attributes in process `syz.0.749'. [ 225.388262][ T8719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.661957][ T8727] : entered allmulticast mode [ 225.699650][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 225.788830][ T8731] syzkaller1: entered promiscuous mode [ 225.793122][ T8731] syzkaller1: entered allmulticast mode [ 225.841610][ T8730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.753'. [ 225.843843][ T8733] lo speed is unknown, defaulting to 1000 [ 226.083890][ T8739] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 226.739656][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 227.000723][ T8753] FAULT_INJECTION: forcing a failure. [ 227.000723][ T8753] name failslab, interval 1, probability 0, space 0, times 0 [ 227.006839][ T8753] CPU: 1 UID: 0 PID: 8753 Comm: syz.3.760 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 227.006868][ T8753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 227.006879][ T8753] Call Trace: [ 227.006885][ T8753] [ 227.006893][ T8753] dump_stack_lvl+0x16c/0x1f0 [ 227.006961][ T8753] should_fail_ex+0x512/0x640 [ 227.007003][ T8753] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 227.007026][ T8753] should_failslab+0xc2/0x120 [ 227.007046][ T8753] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 227.007064][ T8753] ? __alloc_skb+0x2b2/0x380 [ 227.007086][ T8753] __alloc_skb+0x2b2/0x380 [ 227.007103][ T8753] ? __pfx___alloc_skb+0x10/0x10 [ 227.007123][ T8753] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 227.007150][ T8753] netlink_alloc_large_skb+0x69/0x130 [ 227.007173][ T8753] netlink_sendmsg+0x6a1/0xdd0 [ 227.007199][ T8753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.007223][ T8753] ? __import_iovec+0x1dd/0x650 [ 227.007249][ T8753] ____sys_sendmsg+0xa95/0xc70 [ 227.007276][ T8753] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.007298][ T8753] ? get_compat_msghdr+0x11a/0x170 [ 227.007328][ T8753] ___sys_sendmsg+0x134/0x1d0 [ 227.007348][ T8753] ? __pfx____sys_sendmsg+0x10/0x10 [ 227.007379][ T8753] ? find_held_lock+0x2b/0x80 [ 227.007414][ T8753] __sys_sendmsg+0x16d/0x220 [ 227.007434][ T8753] ? __pfx___sys_sendmsg+0x10/0x10 [ 227.007463][ T8753] ? rcu_is_watching+0x12/0xc0 [ 227.007485][ T8753] __do_fast_syscall_32+0x7c/0x3a0 [ 227.007507][ T8753] do_fast_syscall_32+0x32/0x80 [ 227.007525][ T8753] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 227.007548][ T8753] RIP: 0023:0xf70ce579 [ 227.007563][ T8753] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 227.007580][ T8753] RSP: 002b:00000000f50be55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 227.007598][ T8753] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 227.007609][ T8753] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 227.007619][ T8753] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 227.007629][ T8753] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 227.007640][ T8753] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 227.007663][ T8753] [ 227.250129][ T8763] program syz.0.759 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 227.253298][ C3] sr 2:0:0:0: [sr0] tag#12 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 227.256569][ C3] sr 2:0:0:0: [sr0] tag#12 CDB: opcode=0x94 94 a2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 227.342030][ T8767] Cannot find del_set index 3 as target [ 227.509650][ T55] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 227.789608][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 228.092969][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.768'. [ 228.096570][ T8781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.768'. [ 228.398566][ T8797] dvmrp0: entered allmulticast mode [ 228.514641][ T8794] NILFS (nullb0): couldn't find nilfs on the device [ 228.593371][ T8800] binder: BINDER_SET_CONTEXT_MGR already set [ 228.597150][ T8800] binder: 8798:8800 ioctl 4018620d 800001c0 returned -16 [ 228.819618][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 228.899719][ T6021] vhci_hcd: vhci_device speed not set [ 229.535268][ T8809] lo speed is unknown, defaulting to 1000 [ 229.859635][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 229.977365][ T8811] netlink: 128 bytes leftover after parsing attributes in process `syz.1.779'. [ 230.029454][ T8819] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 230.044964][ T8825] batadv_slave_0: entered promiscuous mode [ 230.047307][ T8825] batadv_slave_0: left allmulticast mode [ 230.092342][ T8836] netlink: 24 bytes leftover after parsing attributes in process `syz.2.788'. [ 230.159876][ T8844] Set syz0 is full, maxelem 0 reached [ 230.499753][ T8851] input: syz1 as /devices/virtual/input/input10 [ 230.599260][ T8855] program syz.3.791 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.619961][ C3] sr 2:0:0:0: [sr0] tag#19 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 230.624086][ C3] sr 2:0:0:0: [sr0] tag#19 CDB: opcode=0x94 94 a2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 230.879704][ T6021] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 230.909642][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 231.166023][ T8874] tipc: Can't bind to reserved service type 1 [ 231.504525][ T8887] lo speed is unknown, defaulting to 1000 [ 231.525883][ T8889] tun0: tun_chr_ioctl cmd 1074025675 [ 231.527552][ T8889] tun0: persist enabled [ 231.529072][ T8889] tun0: tun_chr_ioctl cmd 1074025675 [ 231.530853][ T8889] tun0: persist enabled [ 231.939661][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 232.989603][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 233.528486][ T8898] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(14) [ 233.530355][ T8898] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 233.532752][ T8898] vhci_hcd vhci_hcd.0: Device attached [ 233.801714][ T55] usb 37-1: new high-speed USB device number 8 using vhci_hcd [ 234.019615][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 234.240308][ T8904] vhci_hcd: connection reset by peer [ 234.245364][ T1139] vhci_hcd: stop threads [ 234.249888][ T1139] vhci_hcd: release socket [ 234.251952][ T1139] vhci_hcd: disconnect device [ 235.059629][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 235.199904][ T8924] netlink: 72 bytes leftover after parsing attributes in process `syz.2.812'. [ 235.206538][ T8924] netlink: 'syz.2.812': attribute type 30 has an invalid length. [ 235.589745][ T8931] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.815'. [ 235.991376][ T8929] openvswitch: : Dropping previously announced user features [ 236.001148][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.814'. [ 236.099690][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 236.209734][ T8937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.817'. [ 236.363703][ T8944] capability: warning: `syz.3.819' uses 32-bit capabilities (legacy support in use) [ 236.428979][ T8946] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 237.139613][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 237.151818][ T8954] netlink: 'syz.0.823': attribute type 10 has an invalid length. [ 237.154263][ T8954] netlink: 40 bytes leftover after parsing attributes in process `syz.0.823'. [ 237.157074][ T8954] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.275921][ T8966] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 237.976658][ T8978] netlink: 72 bytes leftover after parsing attributes in process `syz.3.826'. [ 237.983172][ T8978] netlink: 'syz.3.826': attribute type 30 has an invalid length. [ 238.179612][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 238.216079][ T8990] netlink: 'syz.3.835': attribute type 1 has an invalid length. [ 238.259632][ T5955] Bluetooth: hci3: command 0x0405 tx timeout [ 238.281782][ T9000] vlan1: left allmulticast mode [ 238.284657][ T9000] Cannot find del_set index 0 as target [ 238.285859][ T8995] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 238.288448][ T8995] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 238.290981][ T8995] vhci_hcd vhci_hcd.0: Device attached [ 238.300547][ T8993] netlink: 20 bytes leftover after parsing attributes in process `syz.3.836'. [ 238.360293][ T8999] vhci_hcd: connection closed [ 238.360948][ T46] vhci_hcd: stop threads [ 238.363830][ T46] vhci_hcd: release socket [ 238.363840][ T46] vhci_hcd: disconnect device [ 238.546609][ T9014] lo speed is unknown, defaulting to 1000 [ 238.569252][ T9015] Cannot find del_set index 3 as target [ 238.899709][ T55] vhci_hcd: vhci_device speed not set [ 239.219717][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 239.486020][ T9035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.849'. [ 239.521456][ T9038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.850'. [ 239.524236][ T9038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.850'. [ 239.556960][ T9035] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 240.259696][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 240.300821][ T9060] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 240.981678][ T9065] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 241.001892][ T9072] bridge: RTM_NEWNEIGH with invalid ether address [ 241.081984][ T9083] bond3: entered allmulticast mode [ 241.309614][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 241.473705][ T9109] __nla_validate_parse: 1 callbacks suppressed [ 241.473716][ T9109] netlink: 24 bytes leftover after parsing attributes in process `syz.1.875'. [ 241.995699][ T9114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.876'. [ 241.999401][ T9114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.876'. [ 242.002705][ T9114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.876'. [ 242.210486][ T9127] netlink: 'syz.2.880': attribute type 10 has an invalid length. [ 242.293290][ T55] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 242.341583][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 242.362531][ T55] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 242.589399][ T9127] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.592544][ T9127] bond0: (slave team0): Enslaving as an active interface with an up link [ 242.598021][ T9129] vlan2: entered promiscuous mode [ 242.599852][ T9129] team0: entered promiscuous mode [ 242.601533][ T9129] team_slave_0: entered promiscuous mode [ 242.603628][ T9129] team_slave_1: entered promiscuous mode [ 242.605573][ T9129] vlan2: entered allmulticast mode [ 242.607186][ T9129] team0: entered allmulticast mode [ 242.608830][ T9129] team_slave_0: entered allmulticast mode [ 242.611613][ T9129] team_slave_1: entered allmulticast mode [ 242.614811][ T9129] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 243.379686][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 243.563968][ T9159] netlink: 'syz.1.887': attribute type 39 has an invalid length. [ 243.820086][ T9180] netlink: 44 bytes leftover after parsing attributes in process `syz.2.896'. [ 244.005038][ T9189] netlink: 96 bytes leftover after parsing attributes in process `syz.2.901'. [ 244.302731][ T9206] lo speed is unknown, defaulting to 1000 [ 244.419711][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 244.547046][ T9170] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 245.426028][ T9249] batadv_slave_0: left promiscuous mode [ 245.427936][ T9249] batadv_slave_0: entered allmulticast mode [ 245.441724][ T9249] veth2: entered allmulticast mode [ 245.443344][ T9249] veth3: entered allmulticast mode [ 245.459645][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 245.579770][ T9256] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(14) [ 245.582388][ T9256] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 245.585489][ T9256] vhci_hcd vhci_hcd.0: Device attached [ 245.780327][ T9264] netlink: 76 bytes leftover after parsing attributes in process `syz.2.918'. [ 246.162513][ T6021] usb 37-1: new high-speed USB device number 9 using vhci_hcd [ 246.297270][ T9258] vhci_hcd: connection reset by peer [ 246.308308][ T12] vhci_hcd: stop threads [ 246.313238][ T12] vhci_hcd: release socket [ 246.322859][ T12] vhci_hcd: disconnect device [ 246.499681][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 247.358816][ T34] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 247.524548][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.528247][ T34] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 247.533263][ T34] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 247.536649][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.539764][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 247.574588][ T34] usb 5-1: config 0 descriptor?? [ 247.578152][ T34] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 248.474357][ T9294] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 248.476402][ T9294] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 248.478910][ T9294] vhci_hcd vhci_hcd.0: Device attached [ 248.589605][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 248.591178][ T9299] openvswitch: : Dropping previously announced user features [ 248.603020][ T9299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.930'. [ 248.719754][ T54] usb 43-1: new high-speed USB device number 6 using vhci_hcd [ 248.756712][ T9302] netlink: 28 bytes leftover after parsing attributes in process `syz.3.931'. [ 249.051839][ T9306] : entered promiscuous mode [ 249.060840][ T9306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.933'. [ 249.284676][ T9296] vhci_hcd: connection reset by peer [ 249.291651][ T13] vhci_hcd: stop threads [ 249.293078][ T13] vhci_hcd: release socket [ 249.294574][ T13] vhci_hcd: disconnect device [ 249.619611][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 249.805144][ T9317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.898917][ T60] usb 5-1: USB disconnect, device number 11 [ 250.123430][ T9321] vivid-002: disconnect [ 250.126576][ T9320] vivid-002: reconnect [ 250.430963][ T5955] Bluetooth: hci0: unexpected cc 0x2039 length: 9 > 1 [ 250.433937][ T5955] Bluetooth: hci0: unexpected event for opcode 0x2039 [ 250.437595][ T9336] netlink: 60 bytes leftover after parsing attributes in process `syz.1.945'. [ 250.522419][ T9344] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 250.579643][ T34] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 250.611025][ T9347] Cannot find del_set index 3 as target [ 250.659738][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 250.751128][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.754200][ T34] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 250.758261][ T34] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 250.765048][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.769049][ T34] usb 8-1: config 0 descriptor?? [ 250.773491][ T34] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 250.863480][ T9358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.954'. [ 250.866173][ T9358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.954'. [ 251.291873][ T6021] vhci_hcd: vhci_device speed not set [ 251.699643][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 251.779936][ T40] kauditd_printk_skb: 258 callbacks suppressed [ 251.779948][ T40] audit: type=1326 audit(2000000084.839:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9371 comm="syz.0.958" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2579 code=0x7ffc0000 [ 251.790028][ T40] audit: type=1326 audit(2000000084.849:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9371 comm="syz.0.958" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff2598 code=0x7ffc0000 [ 251.798265][ T40] audit: type=1326 audit(2000000084.849:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9371 comm="syz.0.958" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2579 code=0x7ffc0000 [ 251.808590][ T40] audit: type=1326 audit(2000000084.849:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9371 comm="syz.0.958" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff2598 code=0x7ffc0000 [ 251.828828][ T40] audit: type=1326 audit(2000000084.849:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9371 comm="syz.0.958" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2579 code=0x7ffc0000 [ 251.836282][ T40] audit: type=1326 audit(2000000084.849:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9371 comm="syz.0.958" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff2598 code=0x7ffc0000 [ 251.842901][ T40] audit: type=1326 audit(2000000084.849:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9371 comm="syz.0.958" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff2598 code=0x7ffc0000 [ 251.850175][ T40] audit: type=1326 audit(2000000084.849:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9371 comm="syz.0.958" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2579 code=0x7ffc0000 [ 251.856649][ T40] audit: type=1326 audit(2000000084.849:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9371 comm="syz.0.958" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2579 code=0x7ffc0000 [ 251.863219][ T40] audit: type=1326 audit(2000000084.849:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9371 comm="syz.0.958" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff2598 code=0x7ffc0000 [ 251.874861][ T9373] wlan0 speed is unknown, defaulting to 1000 [ 251.877581][ T9373] wlan0 speed is unknown, defaulting to 1000 [ 251.882544][ T9373] wlan0 speed is unknown, defaulting to 1000 [ 251.892973][ T9372] netlink: 100 bytes leftover after parsing attributes in process `syz.0.958'. [ 251.899378][ T9373] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 251.913534][ T9373] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 251.943726][ T9373] wlan0 speed is unknown, defaulting to 1000 [ 251.946469][ T9373] wlan0 speed is unknown, defaulting to 1000 [ 251.947695][ T9378] netlink: 128 bytes leftover after parsing attributes in process `syz.0.959'. [ 251.949423][ T9373] wlan0 speed is unknown, defaulting to 1000 [ 251.959373][ T9373] wlan0 speed is unknown, defaulting to 1000 [ 252.562160][ T9389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.962'. [ 252.739627][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 253.339168][ T6742] usb 8-1: USB disconnect, device number 6 [ 253.363785][ T9399] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 253.443110][ T9404] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 253.779693][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 253.854161][ T54] vhci_hcd: vhci_device speed not set [ 254.819622][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 254.829672][ T34] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 254.981125][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.984679][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.988135][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 254.992350][ T34] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 254.995461][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.999059][ T34] usb 7-1: config 0 descriptor?? [ 255.149856][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.159785][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.414887][ T34] usbhid 7-1:0.0: can't add hid device: -71 [ 255.416835][ T34] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 255.421726][ T34] usb 7-1: USB disconnect, device number 10 [ 255.869626][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 256.015161][ T9473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.978'. [ 256.018979][ T9473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.978'. [ 256.027653][ T9473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.978'. [ 256.063140][ T9476] blktrace: Concurrent blktraces are not allowed on sg0 [ 256.096119][ T9476] lo speed is unknown, defaulting to 1000 [ 256.108653][ T9479] netlink: 112 bytes leftover after parsing attributes in process `syz.2.980'. [ 256.358184][ T9476] wlan0 speed is unknown, defaulting to 1000 [ 256.435869][ T9487] netlink: 3 bytes leftover after parsing attributes in process `syz.0.982'. [ 256.444241][ T9487] batadv2: entered allmulticast mode [ 256.733792][ T9496] netlink: 'syz.3.983': attribute type 4 has an invalid length. [ 256.736472][ T9496] lo: left allmulticast mode [ 256.810180][ T9500] netlink: 24 bytes leftover after parsing attributes in process `syz.0.985'. [ 256.889494][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.986'. [ 256.899693][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 257.219844][ T34] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 257.392189][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.395337][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.398052][ T34] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 257.401737][ T34] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 257.405441][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.413557][ T34] usb 5-1: config 0 descriptor?? [ 257.821750][ T34] usbhid 5-1:0.0: can't add hid device: -71 [ 257.824204][ T34] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 257.827650][ T34] usb 5-1: USB disconnect, device number 12 [ 257.937000][ T9524] lo speed is unknown, defaulting to 1000 [ 257.959728][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 258.014842][ T9524] wlan0 speed is unknown, defaulting to 1000 [ 258.941408][ T9549] vlan1: entered allmulticast mode [ 258.943339][ T9549] bond1: entered allmulticast mode [ 258.947413][ T9549] ip6gretap1: entered allmulticast mode [ 258.962146][ T9549] vxcan0: entered allmulticast mode [ 258.964147][ T9549] vxcan1: entered allmulticast mode [ 258.966051][ T9549] veth2: entered allmulticast mode [ 258.967811][ T9549] veth3: entered allmulticast mode [ 258.975189][ T9549] tun0: entered allmulticast mode [ 258.977598][ T9549] batadv1: entered allmulticast mode [ 258.979676][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 258.984496][ T9549] geneve2: entered allmulticast mode [ 258.986877][ T9549] bond2: entered allmulticast mode [ 260.019602][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 260.419619][ T54] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 260.495401][ T9573] FAULT_INJECTION: forcing a failure. [ 260.495401][ T9573] name failslab, interval 1, probability 0, space 0, times 0 [ 260.499426][ T9573] CPU: 3 UID: 0 PID: 9573 Comm: syz.1.1007 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 260.499441][ T9573] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 260.499448][ T9573] Call Trace: [ 260.499452][ T9573] [ 260.499457][ T9573] dump_stack_lvl+0x16c/0x1f0 [ 260.499472][ T9573] should_fail_ex+0x512/0x640 [ 260.499487][ T9573] ? fs_reclaim_acquire+0xae/0x150 [ 260.499504][ T9573] ? tomoyo_encode2+0x100/0x3e0 [ 260.499513][ T9573] should_failslab+0xc2/0x120 [ 260.499540][ T9573] __kmalloc_noprof+0xd2/0x510 [ 260.499552][ T9573] ? d_absolute_path+0x136/0x1a0 [ 260.499567][ T9573] tomoyo_encode2+0x100/0x3e0 [ 260.499579][ T9573] tomoyo_encode+0x29/0x50 [ 260.499588][ T9573] tomoyo_realpath_from_path+0x18f/0x6e0 [ 260.499603][ T9573] tomoyo_path_number_perm+0x245/0x580 [ 260.499618][ T9573] ? tomoyo_path_number_perm+0x237/0x580 [ 260.499635][ T9573] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 260.499664][ T9573] ? find_held_lock+0x2b/0x80 [ 260.499676][ T9573] ? hook_file_ioctl_common+0x145/0x410 [ 260.499694][ T9573] ? __fget_files+0x20e/0x3c0 [ 260.499710][ T9573] ? __fput_deferred+0x480/0x480 [ 260.499726][ T9573] security_file_ioctl_compat+0x9b/0x240 [ 260.499743][ T9573] __ia32_compat_sys_ioctl+0xc3/0x370 [ 260.499761][ T9573] __do_fast_syscall_32+0x7c/0x3a0 [ 260.499774][ T9573] do_fast_syscall_32+0x32/0x80 [ 260.499785][ T9573] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 260.499799][ T9573] RIP: 0023:0xf7ff2579 [ 260.499808][ T9573] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 260.499819][ T9573] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 260.499829][ T9573] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0405665 [ 260.499836][ T9573] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 260.499842][ T9573] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 260.499848][ T9573] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 260.499854][ T9573] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 260.499867][ T9573] [ 260.568549][ T9573] ERROR: Out of memory at tomoyo_realpath_from_path. [ 260.582500][ T54] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.585845][ T54] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.588822][ T54] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 260.592976][ T54] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 260.595816][ T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.604083][ T54] usb 7-1: config 0 descriptor?? [ 260.609211][ T9580] FAULT_INJECTION: forcing a failure. [ 260.609211][ T9580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.613872][ T9580] CPU: 1 UID: 0 PID: 9580 Comm: syz.3.1009 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 260.613888][ T9580] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 260.613895][ T9580] Call Trace: [ 260.613899][ T9580] [ 260.613903][ T9580] dump_stack_lvl+0x16c/0x1f0 [ 260.613918][ T9580] should_fail_ex+0x512/0x640 [ 260.613932][ T9580] _copy_to_user+0x32/0xd0 [ 260.613945][ T9580] simple_read_from_buffer+0xcb/0x170 [ 260.613963][ T9580] proc_fail_nth_read+0x197/0x270 [ 260.613978][ T9580] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 260.613994][ T9580] ? rw_verify_area+0xcf/0x680 [ 260.614010][ T9580] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 260.614025][ T9580] vfs_read+0x1e4/0xc60 [ 260.614035][ T9580] ? fdget_pos+0x2a2/0x370 [ 260.614047][ T9580] ? __pfx_vfs_read+0x10/0x10 [ 260.614055][ T9580] ? find_held_lock+0x2b/0x80 [ 260.614070][ T9580] ? __fget_files+0x20e/0x3c0 [ 260.614091][ T9580] ksys_read+0x12a/0x250 [ 260.614100][ T9580] ? __pfx_ksys_read+0x10/0x10 [ 260.614111][ T9580] ? rcu_is_watching+0x12/0xc0 [ 260.614124][ T9580] __do_fast_syscall_32+0x7c/0x3a0 [ 260.614137][ T9580] do_fast_syscall_32+0x32/0x80 [ 260.614149][ T9580] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 260.614163][ T9580] RIP: 0023:0xf70ce579 [ 260.614171][ T9580] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 260.614181][ T9580] RSP: 002b:00000000f50be590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 260.614192][ T9580] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50be620 [ 260.614198][ T9580] RDX: 000000000000000f RSI: 00000000f7434ff4 RDI: 0000000000000000 [ 260.614204][ T9580] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 260.614210][ T9580] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 260.614216][ T9580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 260.614229][ T9580] [ 260.775640][ T9585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1011'. [ 260.865318][ T9592] netlink: 'syz.3.1014': attribute type 10 has an invalid length. [ 260.867802][ T9592] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1014'. [ 260.870693][ T9592] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 260.873896][ T9592] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.919445][ T9597] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 260.921531][ T9597] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 260.924839][ T9597] vhci_hcd vhci_hcd.0: Device attached [ 260.945193][ T9601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1017'. [ 261.030636][ T54] usbhid 7-1:0.0: can't add hid device: -71 [ 261.032630][ T54] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 261.035028][ T9608] fuse: Bad value for 'fd' [ 261.059654][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 261.161007][ T54] usb 7-1: USB disconnect, device number 11 [ 261.179649][ T60] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 261.337389][ T9621] FAULT_INJECTION: forcing a failure. [ 261.337389][ T9621] name failslab, interval 1, probability 0, space 0, times 0 [ 261.342142][ T9621] CPU: 3 UID: 0 PID: 9621 Comm: syz.0.1022 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 261.342158][ T9621] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 261.342165][ T9621] Call Trace: [ 261.342169][ T9621] [ 261.342173][ T9621] dump_stack_lvl+0x16c/0x1f0 [ 261.342187][ T9621] should_fail_ex+0x512/0x640 [ 261.342199][ T9621] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 261.342217][ T9621] should_failslab+0xc2/0x120 [ 261.342230][ T9621] __kmalloc_cache_noprof+0x6a/0x3e0 [ 261.342246][ T9621] ? rtnl_newlink+0x11b/0x2000 [ 261.342274][ T9621] ? __pfx_rtnl_newlink+0x10/0x10 [ 261.342285][ T9621] rtnl_newlink+0x11b/0x2000 [ 261.342296][ T9621] ? is_bpf_text_address+0x8a/0x1a0 [ 261.342313][ T9621] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 261.342327][ T9621] ? is_bpf_text_address+0x94/0x1a0 [ 261.342342][ T9621] ? __pfx_rtnl_newlink+0x10/0x10 [ 261.342353][ T9621] ? __kernel_text_address+0xd/0x40 [ 261.342370][ T9621] ? unwind_get_return_address+0x59/0xa0 [ 261.342387][ T9621] ? arch_stack_walk+0xa6/0x100 [ 261.342404][ T9621] ? __lock_acquire+0x622/0x1c90 [ 261.342421][ T9621] ? rcu_is_watching+0x12/0xc0 [ 261.342432][ T9621] ? trace_cap_capable+0x18d/0x200 [ 261.342450][ T9621] ? find_held_lock+0x2b/0x80 [ 261.342460][ T9621] ? __pfx_rtnl_newlink+0x10/0x10 [ 261.342476][ T9621] ? __pfx_rtnl_newlink+0x10/0x10 [ 261.342487][ T9621] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 261.342499][ T9621] ? __pfx_rtnl_newlink+0x10/0x10 [ 261.342512][ T9621] rtnetlink_rcv_msg+0x95b/0xe90 [ 261.342525][ T9621] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 261.342540][ T9621] ? __lock_acquire+0x622/0x1c90 [ 261.342557][ T9621] netlink_rcv_skb+0x158/0x420 [ 261.342571][ T9621] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 261.342585][ T9621] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 261.342602][ T9621] ? netlink_deliver_tap+0x1ae/0xd30 [ 261.342614][ T9621] ? is_vmalloc_addr+0x86/0xa0 [ 261.342627][ T9621] netlink_unicast+0x58a/0x850 [ 261.342642][ T9621] ? __pfx_netlink_unicast+0x10/0x10 [ 261.342659][ T9621] netlink_sendmsg+0x8d1/0xdd0 [ 261.342674][ T9621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.342688][ T9621] ? __import_iovec+0x1dd/0x650 [ 261.342704][ T9621] ____sys_sendmsg+0xa95/0xc70 [ 261.342720][ T9621] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.342734][ T9621] ? get_compat_msghdr+0x11a/0x170 [ 261.342752][ T9621] ___sys_sendmsg+0x134/0x1d0 [ 261.342765][ T9621] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.342782][ T9621] ? find_held_lock+0x2b/0x80 [ 261.342802][ T9621] __sys_sendmsg+0x16d/0x220 [ 261.342813][ T9621] ? __pfx___sys_sendmsg+0x10/0x10 [ 261.342830][ T9621] ? rcu_is_watching+0x12/0xc0 [ 261.342843][ T9621] __do_fast_syscall_32+0x7c/0x3a0 [ 261.342856][ T9621] do_fast_syscall_32+0x32/0x80 [ 261.342867][ T9621] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 261.342881][ T9621] RIP: 0023:0xf7ff2579 [ 261.342889][ T9621] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 261.342899][ T9621] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 261.342910][ T9621] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 261.342916][ T9621] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 261.342922][ T9621] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 261.342928][ T9621] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 261.342934][ T9621] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 261.342947][ T9621] [ 261.490428][ T9598] vhci_hcd: connection reset by peer [ 261.492336][ T13] vhci_hcd: stop threads [ 261.493697][ T13] vhci_hcd: release socket [ 261.495153][ T13] vhci_hcd: disconnect device [ 261.587837][ T9627] netlink: 'syz.2.1025': attribute type 1 has an invalid length. [ 261.873563][ T9630] : entered promiscuous mode [ 261.890436][ T9630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1024'. [ 262.109594][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 262.583860][ T9644] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1029'. [ 262.748567][ T9658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1035'. [ 262.751502][ T9658] lo: left allmulticast mode [ 262.754026][ T9658] tunl0: left allmulticast mode [ 262.756276][ T9658] gre0: left allmulticast mode [ 262.759324][ T9658] gretap0: left allmulticast mode [ 262.761981][ T9658] erspan0: left allmulticast mode [ 262.764563][ T9658] ip_vti0: left allmulticast mode [ 262.766748][ T9658] ip6_vti0: left allmulticast mode [ 262.769195][ T9658] sit0: left allmulticast mode [ 262.773140][ T9658] ip6tnl0: left allmulticast mode [ 262.775505][ T9658] ip6gre0: left allmulticast mode [ 262.777810][ T9658] ip6gretap0: left allmulticast mode [ 262.781388][ T9658] vcan0: left allmulticast mode [ 262.783338][ T9658] bond0: left allmulticast mode [ 262.785326][ T9658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.787792][ T9658] dummy0: left allmulticast mode [ 262.791359][ T9658] nlmon0: left allmulticast mode [ 262.820439][ T9658] caif0: left allmulticast mode [ 262.822023][ T9658] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 263.002150][ T9669] binder: BINDER_SET_CONTEXT_MGR already set [ 263.004128][ T9669] binder: 9660:9669 ioctl 4018620d 800001c0 returned -16 [ 263.139590][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 263.618449][ T9689] lo speed is unknown, defaulting to 1000 [ 263.695736][ T9689] wlan0 speed is unknown, defaulting to 1000 [ 263.801434][ T9695] batadv_slave_0: entered promiscuous mode [ 263.803599][ T9695] batadv_slave_0: left allmulticast mode [ 263.927944][ T9697] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1048'. [ 264.179667][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 264.557781][ T9713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1054'. [ 264.568497][ T9713] kvm: apic: phys broadcast and lowest prio [ 264.570874][ T9718] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 264.627435][ T9719] Bluetooth: hci4: Frame reassembly failed (-84) [ 264.629811][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 264.809706][ T54] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 264.858554][ T9724] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1057'. [ 264.924999][ T9728] syz.3.1060: attempt to access beyond end of device [ 264.924999][ T9728] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 264.962201][ T54] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.966726][ T54] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.971130][ T54] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 264.976491][ T54] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 264.982066][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.985818][ T54] usb 5-1: config 0 descriptor?? [ 265.219615][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 265.487541][ T54] usbhid 5-1:0.0: can't add hid device: -71 [ 265.487573][ T9740] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 265.491531][ T9740] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 265.491856][ T54] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 265.494634][ T9740] vhci_hcd vhci_hcd.0: Device attached [ 265.499885][ T54] usb 5-1: USB disconnect, device number 13 [ 265.920064][ T9742] vhci_hcd: connection closed [ 265.921462][ T1136] vhci_hcd: stop threads [ 265.925196][ T1136] vhci_hcd: release socket [ 265.927442][ T1136] vhci_hcd: disconnect device [ 266.086012][ T9751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1066'. [ 266.089618][ T9751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1066'. [ 266.269593][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 266.409627][ T60] vhci_hcd: vhci_device speed not set [ 266.520423][ T9763] vlan2: entered allmulticast mode [ 266.669640][ T5959] Bluetooth: hci4: command 0x1003 tx timeout [ 266.669664][ T5955] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 266.880884][ T9774] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 266.950287][ T6351] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 267.041549][ T9781] netlink: 'syz.0.1076': attribute type 39 has an invalid length. [ 267.074932][ T9786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1078'. [ 267.079396][ T9786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1078'. [ 267.081130][ T9759] orangefs_mount: mount request failed with -4 [ 267.084950][ T9786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1078'. [ 267.161398][ T6351] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.169842][ T6351] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.173791][ T6351] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 267.177786][ T6351] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 267.189610][ T6351] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.194449][ T6351] usb 7-1: config 0 descriptor?? [ 267.299656][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 267.433878][ T9812] netlink: 'syz.3.1082': attribute type 30 has an invalid length. [ 267.603712][ T6351] usbhid 7-1:0.0: can't add hid device: -71 [ 267.605766][ T6351] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 267.609995][ T6351] usb 7-1: USB disconnect, device number 12 [ 267.984434][ T9829] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1092'. [ 267.987371][ T9829] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1092'. [ 268.070144][ T9832] fuse: Unknown parameter 'ÿ0x0000000000000003' [ 268.137335][ T9829] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 268.155497][ T9843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1095'. [ 268.158246][ T9839] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1093'. [ 268.197395][ T9843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1095'. [ 268.205442][ T9843] macvlan3: entered promiscuous mode [ 268.208130][ T9843] macvlan3: entered allmulticast mode [ 268.210317][ T9843] bond2: (slave macvlan3): Opening slave failed [ 268.332844][ T9861] lo: entered allmulticast mode [ 268.334526][ T9861] tunl0: entered allmulticast mode [ 268.337352][ T9861] gre0: entered allmulticast mode [ 268.339060][ T9861] gretap0: entered allmulticast mode [ 268.339608][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 268.343008][ T9861] erspan0: entered allmulticast mode [ 268.344819][ T9861] ip_vti0: entered allmulticast mode [ 268.346672][ T9861] ip6_vti0: entered allmulticast mode [ 268.348514][ T9861] sit0: entered allmulticast mode [ 268.351553][ T9861] ip6tnl0: entered allmulticast mode [ 268.353317][ T9861] ip6gre0: entered allmulticast mode [ 268.355043][ T9861] ip6gretap0: entered allmulticast mode [ 268.356918][ T9861] vcan0: entered allmulticast mode [ 268.358642][ T9861] bond0: entered allmulticast mode [ 268.360708][ T9861] dummy0: entered allmulticast mode [ 268.362425][ T9861] nlmon0: entered allmulticast mode [ 268.364127][ T9861] caif0: entered allmulticast mode [ 268.366893][ T9861] batadv_slave_0: left promiscuous mode [ 268.368765][ T9861] batadv_slave_0: entered allmulticast mode [ 268.376535][ T9861] : entered allmulticast mode [ 268.385801][ T9863] lo speed is unknown, defaulting to 1000 [ 268.533346][ T9863] wlan0 speed is unknown, defaulting to 1000 [ 268.624074][ T9879] lo speed is unknown, defaulting to 1000 [ 268.733615][ T9879] wlan0 speed is unknown, defaulting to 1000 [ 269.379606][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 269.559991][ T5957] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 269.636921][ T9902] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1105'. [ 269.710930][ T5957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.717899][ T5957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.722324][ T5957] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 269.729797][ T5957] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 269.732696][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.810040][ T5957] usb 5-1: config 0 descriptor?? [ 269.916607][ T9911] FAULT_INJECTION: forcing a failure. [ 269.916607][ T9911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.920910][ T9911] CPU: 0 UID: 0 PID: 9911 Comm: syz.3.1107 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 269.920926][ T9911] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 269.920933][ T9911] Call Trace: [ 269.920938][ T9911] [ 269.920942][ T9911] dump_stack_lvl+0x16c/0x1f0 [ 269.920958][ T9911] should_fail_ex+0x512/0x640 [ 269.920972][ T9911] _copy_from_user+0x2e/0xd0 [ 269.920985][ T9911] video_usercopy+0x723/0x1440 [ 269.920998][ T9911] ? __pfx___video_do_ioctl+0x10/0x10 [ 269.921028][ T9911] ? __pfx_video_usercopy+0x10/0x10 [ 269.921045][ T9911] ? hook_file_ioctl_common+0x145/0x410 [ 269.921063][ T9911] v4l2_ioctl+0x1bd/0x250 [ 269.921073][ T9911] ? __pfx_fput+0x1/0x10 [ 269.921096][ T9911] v4l2_compat_ioctl32+0x214/0x2c0 [ 269.921113][ T9911] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 269.921129][ T9911] __ia32_compat_sys_ioctl+0x23f/0x370 [ 269.921147][ T9911] __do_fast_syscall_32+0x7c/0x3a0 [ 269.921160][ T9911] do_fast_syscall_32+0x32/0x80 [ 269.921171][ T9911] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 269.921185][ T9911] RIP: 0023:0xf70ce579 [ 269.921194][ T9911] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 269.921205][ T9911] RSP: 002b:00000000f50be55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 269.921216][ T9911] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0405665 [ 269.921222][ T9911] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 269.921229][ T9911] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 269.921235][ T9911] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 269.921241][ T9911] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 269.921253][ T9911] [ 270.419632][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 270.506450][ T9920] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1111'. [ 270.569232][ T5957] usbhid 5-1:0.0: can't add hid device: -71 [ 270.571388][ T5957] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 270.576184][ T5957] usb 5-1: USB disconnect, device number 14 [ 270.585010][ T9926] Bluetooth: MGMT ver 1.23 [ 270.642026][ T9932] input: syz1 as /devices/virtual/input/input11 [ 270.684509][ T9934] netlink: 'syz.2.1117': attribute type 10 has an invalid length. [ 270.686739][ T9934] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 270.690221][ T9934] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 270.729634][ T34] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 270.879614][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 270.882801][ T34] usb 8-1: config 0 interface 0 has no altsetting 0 [ 270.884773][ T34] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 270.887286][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.893296][ T34] usb 8-1: config 0 descriptor?? [ 271.113808][ T34] mcp2221 0003:04D8:00DD.0009: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 271.206681][ T34] usb 8-1: USB disconnect, device number 7 [ 271.459626][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 271.512378][ T9973] netlink: 'syz.1.1132': attribute type 1 has an invalid length. [ 271.669861][ T34] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 271.857944][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.867903][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.878903][ T34] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 271.892511][ T34] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 271.901227][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.914532][ T34] usb 8-1: config 0 descriptor?? [ 272.200715][ T9964] uprobe: syz.2.1128:9964 failed to unregister, leaking uprobe [ 272.222224][ T9992] __nla_validate_parse: 5 callbacks suppressed [ 272.222237][ T9992] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1138'. [ 272.509701][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 272.529931][ T34] usbhid 8-1:0.0: can't add hid device: -71 [ 272.532077][ T34] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 272.543704][ T34] usb 8-1: USB disconnect, device number 8 [ 272.577661][T10000] openvswitch: : Dropping previously announced user features [ 272.586982][T10000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1140'. [ 273.549632][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 273.804274][T10022] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1148'. [ 274.248736][T10025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1147'. [ 274.579601][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 274.662286][T10037] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1153'. [ 274.789835][ T5957] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 274.950940][ T5957] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.954364][ T5957] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.957379][ T5957] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 274.961575][ T5957] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 274.964364][ T5957] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.968307][ T5957] usb 6-1: config 0 descriptor?? [ 275.179691][T10045] usb usb8: usbfs: process 10045 (syz.3.1156) did not claim interface 0 before use [ 275.285146][T10047] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1157'. [ 275.593538][ T5957] usbhid 6-1:0.0: can't add hid device: -71 [ 275.596233][ T5957] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 275.617133][ T5957] usb 6-1: USB disconnect, device number 5 [ 275.619613][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 276.185549][T10065] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 276.187655][T10065] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 276.190854][T10065] vhci_hcd vhci_hcd.0: Device attached [ 276.194673][T10065] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(15) [ 276.196773][T10065] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 276.199644][T10065] vhci_hcd vhci_hcd.0: Device attached [ 276.203411][T10065] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(17) [ 276.205540][T10065] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 276.209344][T10065] vhci_hcd vhci_hcd.0: Device attached [ 276.212905][T10065] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(19) [ 276.215072][T10065] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 276.221695][T10065] vhci_hcd vhci_hcd.0: Device attached [ 276.227676][T10065] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(22) [ 276.229802][T10065] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 276.234815][T10065] vhci_hcd vhci_hcd.0: Device attached [ 276.237912][T10065] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(24) [ 276.240024][T10065] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 276.242345][T10081] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1165'. [ 276.242649][T10065] vhci_hcd vhci_hcd.0: Device attached [ 276.245232][T10081] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1165'. [ 276.248616][T10065] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 276.290588][T10078] vhci_hcd: connection closed [ 276.290619][T10076] vhci_hcd: connection closed [ 276.290839][ T13] vhci_hcd: stop threads [ 276.292479][T10070] vhci_hcd: connection closed [ 276.293250][T10074] vhci_hcd: connection closed [ 276.293777][ T13] vhci_hcd: release socket [ 276.293909][T10066] vhci_hcd: connection closed [ 276.294326][T10072] vhci_hcd: connection closed [ 276.301724][ T13] vhci_hcd: disconnect device [ 276.304879][ T13] vhci_hcd: stop threads [ 276.306228][ T13] vhci_hcd: release socket [ 276.307664][ T13] vhci_hcd: disconnect device [ 276.309187][ T13] vhci_hcd: stop threads [ 276.310832][ T13] vhci_hcd: release socket [ 276.312321][ T13] vhci_hcd: disconnect device [ 276.314031][ T13] vhci_hcd: stop threads [ 276.315396][ T13] vhci_hcd: release socket [ 276.316841][ T13] vhci_hcd: disconnect device [ 276.318671][ T13] vhci_hcd: stop threads [ 276.320596][ T13] vhci_hcd: release socket [ 276.322060][ T13] vhci_hcd: disconnect device [ 276.323673][ T13] vhci_hcd: stop threads [ 276.325033][ T13] vhci_hcd: release socket [ 276.326473][ T13] vhci_hcd: disconnect device [ 276.379651][ T5957] vhci_hcd: vhci_device speed not set [ 276.659602][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 277.380771][T10097] netlink: 'syz.1.1169': attribute type 30 has an invalid length. [ 277.699603][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 278.116156][T10107] sp0: Synchronizing with TNC [ 278.126860][T10107] sp0: Found TNC [ 278.739632][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 279.185301][T10118] loop2: detected capacity change from 0 to 7 [ 279.188420][T10118] loop2: [ 279.189501][T10118] loop2: partition table partially beyond EOD, truncated [ 279.552211][T10128] uprobe: syz.3.1178:10128 failed to unregister, leaking uprobe [ 279.779695][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 280.264341][T10134] netlink: 'syz.3.1181': attribute type 39 has an invalid length. [ 280.615481][T10156] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1190'. [ 280.697202][T10160] loop2: detected capacity change from 0 to 7 [ 280.700810][ T7124] Dev loop2: unable to read RDB block 7 [ 280.702590][ T7124] loop2: unable to read partition table [ 280.704436][ T7124] loop2: partition table beyond EOD, truncated [ 280.707204][T10160] Dev loop2: unable to read RDB block 7 [ 280.708929][T10160] loop2: unable to read partition table [ 280.710808][T10160] loop2: partition table beyond EOD, truncated [ 280.712740][T10160] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 280.819598][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 281.016940][T10167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1194'. [ 281.062120][T10169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1195'. [ 281.076488][T10169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1195'. [ 281.081938][T10169] macvlan3: entered promiscuous mode [ 281.083881][T10169] macvlan3: entered allmulticast mode [ 281.086046][T10169] bond3: (slave macvlan3): Opening slave failed [ 281.206851][T10173] lo: entered allmulticast mode [ 281.208835][T10173] tunl0: entered allmulticast mode [ 281.210811][T10173] gre0: entered allmulticast mode [ 281.212573][T10173] gretap0: entered allmulticast mode [ 281.214373][T10173] erspan0: entered allmulticast mode [ 281.216168][T10173] ip_vti0: entered allmulticast mode [ 281.218017][T10173] ip6_vti0: entered allmulticast mode [ 281.221786][T10173] sit0: entered allmulticast mode [ 281.224897][T10173] ip6tnl0: entered allmulticast mode [ 281.226681][T10173] ip6gre0: entered allmulticast mode [ 281.228499][T10173] ip6gretap0: entered allmulticast mode [ 281.230665][T10173] bridge0: entered allmulticast mode [ 281.232608][T10173] bond0: entered allmulticast mode [ 281.234317][T10173] bond_slave_0: entered allmulticast mode [ 281.236170][T10173] bond_slave_1: entered allmulticast mode [ 281.240652][T10173] dummy0: entered allmulticast mode [ 281.242501][T10173] nlmon0: entered allmulticast mode [ 281.244266][T10173] caif0: entered allmulticast mode [ 281.245952][T10173] batadv0: entered allmulticast mode [ 281.247699][T10173] vxcan0: entered allmulticast mode [ 281.249601][T10173] vxcan1: entered allmulticast mode [ 281.251296][T10173] veth0: entered allmulticast mode [ 281.253056][T10173] veth1: entered allmulticast mode [ 281.254763][T10173] wg0: entered allmulticast mode [ 281.256428][T10173] wg1: entered allmulticast mode [ 281.258074][T10173] wg2: entered allmulticast mode [ 281.259913][T10173] veth0_to_bridge: entered allmulticast mode [ 281.262011][T10173] veth1_to_bridge: entered allmulticast mode [ 281.264055][T10173] veth0_to_bond: entered allmulticast mode [ 281.266044][T10173] veth1_to_bond: entered allmulticast mode [ 281.268060][T10173] veth0_to_team: entered allmulticast mode [ 281.270161][T10173] veth1_to_team: entered allmulticast mode [ 281.272185][T10173] veth0_to_batadv: entered allmulticast mode [ 281.274173][T10173] batadv_slave_0: left promiscuous mode [ 281.275950][T10173] batadv_slave_0: entered allmulticast mode [ 281.277899][T10173] veth1_to_batadv: entered allmulticast mode [ 281.280076][T10173] batadv_slave_1: entered allmulticast mode [ 281.282036][T10173] xfrm0: entered allmulticast mode [ 281.283731][T10173] veth0_to_hsr: entered allmulticast mode [ 281.285624][T10173] hsr_slave_0: entered allmulticast mode [ 281.287598][T10173] veth1_to_hsr: entered allmulticast mode [ 281.289892][T10173] hsr_slave_1: entered allmulticast mode [ 281.291950][T10173] hsr0: entered allmulticast mode [ 281.293691][T10173] veth1_virt_wifi: entered allmulticast mode [ 281.295677][T10173] veth0_virt_wifi: entered allmulticast mode [ 281.297689][T10173] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 281.300448][T10173] veth1_vlan: entered allmulticast mode [ 281.302287][T10173] veth0_vlan: entered allmulticast mode [ 281.304141][T10173] vlan0: entered allmulticast mode [ 281.305847][T10173] vlan1: entered allmulticast mode [ 281.307553][T10173] macvlan0: entered allmulticast mode [ 281.309366][T10173] macvlan1: entered allmulticast mode [ 281.311226][T10173] ipvlan0: entered allmulticast mode [ 281.313022][T10173] ipvlan1: entered allmulticast mode [ 281.314771][T10173] veth1_macvtap: entered allmulticast mode [ 281.316703][T10173] veth0_macvtap: entered allmulticast mode [ 281.318626][T10173] macvtap0: entered allmulticast mode [ 281.320502][T10173] macsec0: entered allmulticast mode [ 281.322261][T10173] geneve0: entered allmulticast mode [ 281.324037][T10173] geneve1: entered allmulticast mode [ 281.325793][T10173] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 281.328211][T10173] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 281.330680][T10173] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 281.333095][T10173] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 281.335501][T10173] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 281.337795][T10173] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 281.340564][T10173] vxcan2: entered allmulticast mode [ 281.342495][T10173] vxcan3: entered allmulticast mode [ 281.344438][T10173] mac80211_hwsim hwsim11 wlan2: entered allmulticast mode [ 281.347009][T10173] batadv2: entered allmulticast mode [ 281.348745][T10173] macvlan2: left promiscuous mode [ 281.350853][T10173] batman_adv: batadv0: Interface deactivated: gretap1 [ 281.353376][T10173] gretap1: entered allmulticast mode [ 281.356503][T10173] erspan0.1: entered allmulticast mode [ 281.358331][T10173] bond1: entered allmulticast mode [ 281.360264][T10173] batadv3: entered allmulticast mode [ 281.362051][T10173] vlan2: left promiscuous mode [ 281.363526][T10173] team0: left promiscuous mode [ 281.365205][T10173] team_slave_0: left promiscuous mode [ 281.367055][T10173] team_slave_1: left promiscuous mode [ 281.368993][T10173] : entered allmulticast mode [ 281.370693][T10173] bond2: entered allmulticast mode [ 281.372436][T10173] bond3: entered allmulticast mode [ 281.529191][T10189] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1200'. [ 281.859640][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 282.302012][T10211] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1209'. [ 282.899842][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 283.059891][ T5957] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 283.211400][ T5957] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.214482][ T5957] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 283.217180][ T5957] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 283.220451][ T5957] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.224340][ T5957] usb 6-1: config 0 descriptor?? [ 283.230672][ T5957] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 283.232972][ T5957] dvb-usb: bulk message failed: -22 (3/0) [ 283.238902][ T5957] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 283.242682][ T5957] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 283.245094][ T5957] usb 6-1: media controller created [ 283.248331][ T5957] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 283.260004][ T5957] dvb-usb: bulk message failed: -22 (6/0) [ 283.261978][ T5957] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 283.266390][ T5957] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input12 [ 283.277416][ T5957] dvb-usb: schedule remote query interval to 150 msecs. [ 283.279824][ T5957] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 283.354202][T10230] FAULT_INJECTION: forcing a failure. [ 283.354202][T10230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.359201][T10230] CPU: 3 UID: 0 PID: 10230 Comm: syz.3.1215 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 283.359220][T10230] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 283.359235][T10230] Call Trace: [ 283.359242][T10230] [ 283.359249][T10230] dump_stack_lvl+0x16c/0x1f0 [ 283.359268][T10230] should_fail_ex+0x512/0x640 [ 283.359289][T10230] _copy_to_user+0x32/0xd0 [ 283.359309][T10230] simple_read_from_buffer+0xcb/0x170 [ 283.359335][T10230] proc_fail_nth_read+0x197/0x270 [ 283.359355][T10230] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 283.359379][T10230] ? rw_verify_area+0xcf/0x680 [ 283.359401][T10230] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 283.359423][T10230] vfs_read+0x1e4/0xc60 [ 283.359437][T10230] ? fdget_pos+0x2a2/0x370 [ 283.359452][T10230] ? __pfx_vfs_read+0x10/0x10 [ 283.359463][T10230] ? find_held_lock+0x2b/0x80 [ 283.359487][T10230] ? __fget_files+0x20e/0x3c0 [ 283.359518][T10230] ksys_read+0x12a/0x250 [ 283.359555][T10230] ? __pfx_ksys_read+0x10/0x10 [ 283.359572][T10230] ? rcu_is_watching+0x12/0xc0 [ 283.359588][T10230] __do_fast_syscall_32+0x7c/0x3a0 [ 283.359608][T10230] do_fast_syscall_32+0x32/0x80 [ 283.359625][T10230] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 283.359645][T10230] RIP: 0023:0xf70ce579 [ 283.359657][T10230] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 283.359672][T10230] RSP: 002b:00000000f50be590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 283.359682][T10230] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50be620 [ 283.359693][T10230] RDX: 000000000000000f RSI: 00000000f7434ff4 RDI: 0000000000000000 [ 283.359702][T10230] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 283.359711][T10230] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 283.359720][T10230] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 283.359742][T10230] [ 283.441736][ T5957] dvb-usb: bulk message failed: -22 (1/0) [ 283.443654][ T5957] dvb-usb: error while querying for an remote control event. [ 283.592227][ T34] usb 6-1: USB disconnect, device number 6 [ 283.601590][T10236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1217'. [ 283.623167][ T34] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 283.634664][T10241] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1218'. [ 283.686787][T10243] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1219'. [ 283.939619][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 284.088492][T10249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1221'. [ 284.214734][T10252] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 284.216769][T10252] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 284.219316][T10252] vhci_hcd vhci_hcd.0: Device attached [ 284.469833][ T6351] usb 41-1: new high-speed USB device number 5 using vhci_hcd [ 284.979630][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 285.062631][T10253] vhci_hcd: connection reset by peer [ 285.066628][ T1139] vhci_hcd: stop threads [ 285.068060][ T1139] vhci_hcd: release socket [ 285.070187][ T1139] vhci_hcd: disconnect device [ 285.643300][T10265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1226'. [ 285.684349][T10269] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1227'. [ 285.866799][T10294] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1237'. [ 285.870744][T10294] macvlan1: entered promiscuous mode [ 285.910553][T10299] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1239'. [ 286.019587][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 286.665866][T10317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1243'. [ 286.739908][T10322] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1245'. [ 286.793965][T10327] netlink: 'syz.3.1246': attribute type 1 has an invalid length. [ 286.826381][T10331] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1248'. [ 287.069614][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 287.705395][T10356] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1258'. [ 287.987613][T10366] Bluetooth: hci4: Frame reassembly failed (-84) [ 287.990305][ T47] Bluetooth: hci4: Frame reassembly failed (-84) [ 288.109593][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 288.368073][T10373] openvswitch: : Dropping previously announced user features [ 288.379852][T10373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1263'. [ 289.000464][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1264'. [ 289.043329][T10379] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN NOPTI [ 289.047044][T10379] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff] [ 289.050159][T10379] CPU: 2 UID: 0 PID: 10379 Comm: syz.1.1265 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 289.054841][T10379] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 289.058023][T10379] RIP: 0010:h5_recv+0x104/0x910 [ 289.059553][T10379] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 a1 ce 51 f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 289.066155][T10379] RSP: 0018:ffffc900328b7ba8 EFLAGS: 00010293 [ 289.068101][T10379] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff8869860a [ 289.070480][T10379] RDX: ffff88804a460000 RSI: ffffffff8869864f RDI: 0000000000000005 [ 289.072898][T10379] RBP: ffffc900328b7d30 R08: 0000000000000005 R09: 0000000000000000 [ 289.075293][T10379] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 289.077733][T10379] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb33d20 [ 289.080740][T10379] FS: 0000000000000000(0000) GS:ffff88809772d000(0063) knlGS:00000000f50d4b40 [ 289.083791][T10379] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 289.085790][T10379] CR2: 0000000000000000 CR3: 000000006d16e000 CR4: 0000000000352ef0 [ 289.088186][T10379] DR0: 0000000000000049 DR1: 0000000000000000 DR2: 0000000000000000 [ 289.090596][T10379] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 289.093049][T10379] Call Trace: [ 289.094089][T10379] [ 289.094997][T10379] ? __pfx_h5_recv+0x10/0x10 [ 289.096405][T10379] hci_uart_tty_receive+0x254/0x7e0 [ 289.097976][T10379] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 289.099678][T10379] tty_ioctl+0x580/0x1640 [ 289.101024][T10379] ? __pfx_tty_ioctl+0x10/0x10 [ 289.102492][T10379] ? find_held_lock+0x2b/0x80 [ 289.103986][T10379] ? hook_file_ioctl_common+0x145/0x410 [ 289.105718][T10379] ? __fget_files+0x20e/0x3c0 [ 289.107168][T10379] ? __ia32_compat_sys_openat+0x130/0x210 [ 289.108936][T10379] tty_compat_ioctl+0x24a/0x4d0 [ 289.110443][T10379] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 289.112132][T10379] __ia32_compat_sys_ioctl+0x23f/0x370 [ 289.113828][T10379] __do_fast_syscall_32+0x7c/0x3a0 [ 289.115431][T10379] do_fast_syscall_32+0x32/0x80 [ 289.116952][T10379] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 289.118893][T10379] RIP: 0023:0xf7ff2579 [ 289.120163][T10379] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 289.125980][T10379] RSP: 002b:00000000f50d455c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 289.128529][T10379] RAX: ffffffffffffffda RBX: 0000000000000045 RCX: 0000000000005412 [ 289.130900][T10379] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 289.133305][T10379] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 289.135695][T10379] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 289.138121][T10379] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 289.139599][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 289.140552][T10379] [ 289.140558][T10379] Modules linked in: [ 289.140640][ C2] vkms_vblank_simulate: vblank timer overrun [ 289.147556][T10379] ---[ end trace 0000000000000000 ]--- [ 289.150186][T10379] RIP: 0010:h5_recv+0x104/0x910 [ 289.151879][T10379] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 a1 ce 51 f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 289.158203][T10379] RSP: 0018:ffffc900328b7ba8 EFLAGS: 00010293 [ 289.160600][T10379] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff8869860a [ 289.163014][T10379] RDX: ffff88804a460000 RSI: ffffffff8869864f RDI: 0000000000000005 [ 289.165508][T10379] RBP: ffffc900328b7d30 R08: 0000000000000005 R09: 0000000000000000 [ 289.167950][T10379] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 289.170446][T10379] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb33d20 [ 289.172912][T10379] FS: 0000000000000000(0000) GS:ffff88809772d000(0063) knlGS:00000000f50d4b40 [ 289.175652][T10379] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 289.177731][T10379] CR2: 0000000000000000 CR3: 000000006d16e000 CR4: 0000000000352ef0 [ 289.180216][T10379] DR0: 0000000000000049 DR1: 0000000000000000 DR2: 0000000000000000 [ 289.182670][T10379] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 289.185168][T10379] Kernel panic - not syncing: Fatal exception [ 289.187759][T10379] Kernel Offset: disabled [ 289.189076][T10379] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:54:44 Registers: info registers vcpu 0 CPU#0 RAX=00000000006e1994 RBX=0000000000000000 RCX=ffffffff8b82bc69 RDX=ffffed1005646646 RSI=ffffffff8c155e60 RDI=ffffffff819197c1 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed1005646645 R10=ffff88802b23322b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a95d50 R15=0000000000000000 RIP=ffffffff8b82a7cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809752d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73c4220 CR3=000000006d16e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000008d5ccc RBX=0000000000000001 RCX=ffffffff8b82bc69 RDX=ffffed1005666646 RSI=ffffffff8c155e60 RDI=ffffffff819197c1 RBP=ffffed1003bd8488 RSP=ffffc9000046fdf8 R8 =0000000000000000 R9 =ffffed1005666645 R10=ffff88802b33322b R11=0000000000000001 R12=0000000000000001 R13=ffff88801dec2440 R14=ffffffff90a95d50 R15=0000000000000000 RIP=ffffffff8b82a7cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809762d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73f6a54 CR3=000000006d16e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff8556d240 RDI=ffffffff9b09f540 RBP=ffffffff9b09f500 RSP=ffffc900328b74b8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552032203a555043 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff3613efa R15=dffffc0000000000 RIP=ffffffff8556d267 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809772d000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000006d16e000 CR4=00352ef0 DR0=0000000000000049 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000034283c RBX=0000000000000003 RCX=ffffffff8b82bc69 RDX=ffffed10056a6646 RSI=ffffffff8c155e60 RDI=ffffffff819197c1 RBP=ffffed1003860000 RSP=ffffc9000048fdf8 R8 =0000000000000000 R9 =ffffed10056a6645 R10=ffff88802b53322b R11=0000000000000001 R12=0000000000000003 R13=ffff88801c300000 R14=ffffffff90a95d50 R15=0000000000000000 RIP=ffffffff8b82a7cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809782d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000073d5d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000