last executing test programs: 7.857500828s ago: executing program 1 (id=954): symlinkat(&(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3d0, 0xffffffff, 0x0, 0x0, 0x224, 0xfeffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'veth1\x00', 'vcan0\x00'}, 0x2f2, 0xd0, 0xf4, 0x0, {}, [@common=@srh={{0x2c}}]}, @REJECT={0x24}}, {{@ipv6={@remote, @empty, [], [], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xd4, 0x130, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x0, 0x4}}]}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@empty}}}, {{@uncond, 0x0, 0xa4, 0xe4}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "1655e7b191395139620734d46e52f71c1747c6110a6d555946752e989951"}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x42c) userfaultfd(0x80801) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x1a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c480000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="14006700"], 0x1c}, 0x1, 0x0, 0x0, 0xc0c1}, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000440), 0x0, 0x2) ioctl$VIDIOC_DQEVENT(r5, 0x80785659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) socket$xdp(0x2c, 0x3, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000000e140004269d7000fddbdf2508000300040000000800030004000000080003000400000008000300040000000800030002000000"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x800) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000004c0)={'batadv0\x00', &(0x7f0000000480)=@ethtool_gstrings={0x1b, 0x1}}) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$CDROM_SELECT_SPEED(r6, 0x5322, 0xc) openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) 7.303035791s ago: executing program 2 (id=956): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000002c0)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b7050000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x1006}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FITHAW(r2, 0xc0045878) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$CDROM_SEND_PACKET(r4, 0x5393, &(0x7f0000000100)={"4689d4c4841a41c9e4641d9d", &(0x7f0000000000)="bb", 0x20000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, 0x0, 0x0) bind$inet(r5, &(0x7f0000000380)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r6 = io_uring_setup(0x2e34, &(0x7f0000000300)={0x0, 0x1, 0x5851bdcbf4ad9d05, 0x3, 0x3}) r7 = socket$inet6(0xa, 0x6, 0x0) recvmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0), 0x0, &(0x7f0000000840)=""/81, 0x51}, 0x40) bind$inet6(r7, 0x0, 0x0) listen(r7, 0x20000001) connect$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 6.152195718s ago: executing program 2 (id=960): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r3, 0x80044dfd, &(0x7f0000000040)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x20, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000140)}, {&(0x7f0000000ac0)=""/254, 0xfe}, {&(0x7f0000000240)=""/74, 0x4a}, {&(0x7f0000000c00)=""/195, 0xc3}], 0x4, 0x6, 0x7) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_UNBLANKSCREEN(r5, 0x541c, &(0x7f00000000c0)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000340)="71e67a15", 0x4) r7 = accept4$alg(r6, 0x0, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) sendmsg$alg(r7, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmmsg$alg(r7, &(0x7f0000002dc0)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000580)="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", 0xfe}, {&(0x7f0000000680)="30386607f22645fd0b4102295249f832cb6c55d8360f18f0d4b8eaa6bb8a733c1eb3d50b08eabd6a49a890525248af4556e7c49088ac1af1992ee922596a0c54e07eef22f4f68c95", 0x48}, {&(0x7f0000000940)="6429f13c31a9e45ec025c4311dea618f44d47687fe0f48dfc6b70007ca86642ca34d7d96eb8bb5da6d2e7c3eb60f68b8462827502b3d47ee2b8b99a576e6b4a6577ec7d23fa71d7de763dd24515f673fa829bf", 0x53}, {&(0x7f0000001480)="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", 0xabf}], 0x4}], 0x1, 0x0) io_submit(r8, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r7, &(0x7f0000000340), 0xfdef}]) 5.756786765s ago: executing program 1 (id=961): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r3, 0x80044dfd, &(0x7f0000000040)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x20, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000140)}, {&(0x7f0000000ac0)=""/254, 0xfe}, {&(0x7f0000000240)=""/74, 0x4a}, {&(0x7f0000000c00)=""/195, 0xc3}], 0x4, 0x6, 0x7) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_UNBLANKSCREEN(r5, 0x541c, &(0x7f00000000c0)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000340)="71e67a15", 0x4) r7 = accept4$alg(r6, 0x0, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) sendmsg$alg(r7, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmmsg$alg(r7, &(0x7f0000002dc0)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)="4c2aa68e9f983c238da872e02b984b3b82b86b132c0f3eb54be93e20de414e98334b882babd05e7fdc42346581f291d7468652cd6d0bda672cbf00f3621b7a3f529e01ed2b3c07ca262b8753ddb1d8d94a098aef8f", 0x55}, {&(0x7f0000000580)="58750f688dc16a224a6d5986eff155d3ec074b015dcbc52cc97c07111a5efe96965e24476c1ef251eade7dcfe4bf39a6ec59fe90c3a452d1fdbdbfddcab97db52a29caf89a14605ba29a04ec924416dfe08b0767c5ec69b1837a2b603d1ce779cef0211f61f7d3a92c7583a897662f32a338f81612b43f9e8fd3814584bb3b670e21af0773112161bdcbb38bd89ad2795002039e6441a1e4ca8825229c55ef8b7c56ee78867b707d91ca53024f6bfafac372a3ecc2596e77f8325e04f311e928b5fc88a0b2e13ba2f0543d42183fbcce11daa582ba8424e30d69f52ac96f966824f734ead62074557501a2fa429c51cd6fa1d37b0af2934e64e9bd699791", 0xfe}, {&(0x7f0000000680)="30386607f22645fd0b4102295249f832cb6c55d8360f18f0d4b8eaa6bb8a733c1eb3d50b08eabd6a49a890525248af4556e7c49088ac1af1992ee922596a0c54e07eef22f4f68c95", 0x48}, {&(0x7f0000000940)="6429f13c31a9e45ec025c4311dea618f44d47687fe0f48dfc6b70007ca86642ca34d7d96eb8bb5da6d2e7c3eb60f68b8462827502b3d47ee2b8b99a576e6b4a6577ec7d23fa71d7de763dd24515f673fa829bf", 0x53}, {&(0x7f0000001480)="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", 0xabf}], 0x5}], 0x1, 0x0) io_submit(r8, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r7, &(0x7f0000000340), 0xfdef}]) 5.175212601s ago: executing program 0 (id=963): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') open(&(0x7f00000001c0)='./bus\x00', 0x141b42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000800000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) creat(&(0x7f0000000140)='./file0\x00', 0x50) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x2, 0x1}, 0x20) r5 = fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0) close(r5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x300}, 0x20) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) pipe2$9p(&(0x7f0000000cc0), 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000100)='\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000580)='./file0\x00', 0x0, 0x223216, 0x0) unshare(0x2a000400) 5.17226973s ago: executing program 3 (id=971): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000e00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000007010000f8ffffffb702000008000000b70300000000000085000000720f000095000000000000000000002d335febd1290ba0ac0609000000a1b054f307ebe66bcd703cc9685377dc2e8b225e3d405e09e4fa82090da4f32fad56efd4a3c0c2f723c952186b"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x7f, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff00230000000086dd60f2a40000492f00fe880000000000000000000000000001fe8000000000000000000000000000aa342088be0005000054812cbd3b00000800000086dd430588be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) times(&(0x7f00000001c0)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r5, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)=ANY=[@ANYBLOB="1400000027001333000000000000000004000080"], 0x14}], 0x1}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) mount$pvfs2(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r8 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r8, 0x0, 0x82, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x9, 0x3, 0x7]}, &(0x7f0000000080)=0x50) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r7, @ANYBLOB="0a0018000303030303030000080026006c090000"], 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 4.292435854s ago: executing program 1 (id=964): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000091f171f0be1e4a68ae8b6f61ad00611967"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf2501000000000000000741000000030018ff"], 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0x400c090) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1, 0x3}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r6, r5, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x18b801, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r9, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r9, &(0x7f0000000800)={'syz1\x00', {0x0, 0x0, 0x4, 0x1}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x1000, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x400, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000]}, 0x45c) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r9, 0x5501) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r7}, @flat=@weak_handle={0x77682a85, 0x1000, 0x40000}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r10 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r10, 0x0, 0x8, &(0x7f0000000100)=ANY=[], 0x1) 4.279228346s ago: executing program 0 (id=965): mq_open(0x0, 0x2, 0x110, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x80800, 0x0) ioctl$SNDCTL_TMR_SOURCE(r0, 0xc0045406) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x68}}, 0x0) ioctl$FICLONE(r1, 0x40049409, r2) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x6000000b) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x20, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004000}, 0x20040003) write$P9_RWRITE(r1, &(0x7f00000003c0)={0xb, 0x77, 0x2, 0xd6}, 0xb) r5 = socket(0x2, 0x2, 0x0) chmod(0x0, 0x10b) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0xa) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) 4.210929605s ago: executing program 3 (id=966): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x6e, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x38, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x10}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "6e7c98555e857f7174c52a2c43d2c855"}, @md5sig={0x1d, 0x12, "bb9b69de4386bf2ae6a3b321505c68cd"}]}}}}}}}}, 0x0) userfaultfd(0x80801) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$BLKPG(r4, 0x1269, &(0x7f00000000c0)={0xf7c8561671f7aa05, 0x0, 0x98, &(0x7f0000000000)={0x0, 0x200, 0x801000e}}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x14, 0x67}}, 0x1c}}, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_DQEVENT(r5, 0x80785659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) socket$xdp(0x2c, 0x3, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x9, 0x10001, 0xfffffffd, 0x61006, r2, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x140e, 0x400, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x800) 3.997354667s ago: executing program 0 (id=967): mq_open(0x0, 0x2, 0x110, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x80800, 0x0) ioctl$SNDCTL_TMR_SOURCE(r0, 0xc0045406) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x68}}, 0x0) ioctl$FICLONE(r1, 0x40049409, r2) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x6000000b) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x20, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004000}, 0x20040003) write$P9_RWRITE(r1, &(0x7f00000003c0)={0xb, 0x77, 0x2, 0xd6}, 0xb) chmod(0x0, 0x10b) r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r5, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r5, 0xab07, 0xa) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) 3.867136061s ago: executing program 1 (id=968): ioperm(0x0, 0x3ff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000005c0)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "80"}}, 0x119) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000440)={0xfffa, [0x0, 0xffffffff], 0x1000}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$packet(0x11, 0x2, 0x300) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x78, r6, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "1f8e95d7f78ff845e179fb98acb8ba6b"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "e07fa1ea59f2f058648cea45ae0dc496"}, @NL80211_ATTR_PMK={0x14, 0xfe, "595227c1a7d6425c19db22fe3c27e2ef"}, @NL80211_ATTR_PMK={0x14, 0xfe, "be8f14f3e73030a5630c7ca6ee487974"}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000840}, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x80000000001}) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000040)='tracefs\x00', 0x0) 3.77663298s ago: executing program 2 (id=969): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x8e, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000943000/0x2000)=nil, 0x2000, 0x13) preadv(0xffffffffffffffff, 0x0, 0x0, 0x80000000, 0x0) r1 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x8562, 0x40, 0x8, 0x2}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000010380)=""/47, 0x2f}], 0x4) r2 = socket$rds(0x15, 0x5, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000080)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x40) bind$rds(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {0x0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x37) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x0, 0x0) poll(&(0x7f00000000c0)=[{r4}], 0x1, 0xfffffffffffffff8) dup2(r4, r5) openat$dlm_monitor(0xffffff9c, &(0x7f0000000040), 0x400002, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.401037931s ago: executing program 0 (id=970): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/oops_count', 0x300, 0x135) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x40187014, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1}}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, 0x0, 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="639d8bf8c93a202a3a2a2072776d00"], 0xa) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RELDISP(r5, 0x5605) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000000)={0x2, 0x9, 0x2, 0x3, 0x2, [0x49bc90fb, 0x5, 0x0, 0x2]}) socket$inet(0x2, 0x1, 0xcb4) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000019400)=ANY=[@ANYRESDEC, @ANYRES32], 0x10) writev(r5, &(0x7f0000019580)=[{&(0x7f00000198c0)="fd65e69af21386501e98f8f9d59e2c7fde1d2c3e785626c8496e055499693730a6684f5157ec72c3b8c8d3abeb3851ea6f44cd4a43bcc461756a7c75315be80f6ef2b89ecdd7b1694153768995631f2f906aba1036d9a9c481653fd36793f0e1b888610affa300c26ebc4b8249627aa8801822045bf803405aaf0d568e4dfa", 0x7f}, {&(0x7f0000019480)="8452ec2756d2819952619a387bda8d92a946ec5191e91c0085518298b92a743fe2e19ab9b3004365ddc89cd55bc8e3759352caf627c2a0b428af8e7027ac8af1ef9eeb3b1c2b953576e496de968c37448a467223bfb2e00e874827f9b00e845cd7968db57193113dd71582245374dc2786ac39514cb1e9010190aa5d96b95bac7ff9fa71e3409274e6435d6a74d05515bad246a80cc19bc893f7d3e0d201d583dba3f7a50a71155cc01607d02b367167ec02ba903b2df2e788c4ad435233ed7e0bf98089703147358442f786357631158c87831308c0", 0xd6}, {&(0x7f0000019700)="b48ae69ac92f2483911f96a71e49c6c88d97b805519939e415495398ad10195ccb9b6e44585d1d679b4566aa2ba169fd0518d98f0560ff4b25416bfc63aae71ad6fc6d9de92e48d546ead366506779d98b6b3c40e2c5c5a91bb4291829c200cdb1074c00433782c45c1ca8a61098ff421eeae2159317931490c4fb393f08c95aa0ebea16b26b3c331149d36847967bfbc2e3080bfe7763e145122313ef870fd6fe2f9d0345dabe53be46f3068f1cd3842cc5b0577dfdee0b36a10cfec88796da88aa610000", 0xc5}, {&(0x7f00000193c0)="c343e4a91b1b99ef9dba7df8285d56e2281eb9cbb0a37529d0e31748fe97578f9031d9ed7497b4c45acb21004de0a616edd662b881a700000000b866ab1f7b0c", 0x40}], 0x4) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r6, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x1c, r7, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) 2.592880503s ago: executing program 3 (id=972): socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000180)=0x3, 0x12) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r4, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x1, 0x4}}, 0x10) r5 = socket$l2tp(0x2, 0x2, 0x73) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(chacha20-simd)\x00'}, 0x58) close_range(r5, 0xffffffffffffffff, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) r8 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x9c000000, @dev={0xfe, 0x80, '\x00', 0x30}, 0x1df}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x0, 0xfe}, 0x9c) bind$inet6(r7, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) sendto$inet6(r7, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.986767949s ago: executing program 0 (id=973): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r3, 0x80044dfd, &(0x7f0000000040)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x20, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000140)}, {&(0x7f0000000ac0)=""/254, 0xfe}, {&(0x7f0000000240)=""/74, 0x4a}, {&(0x7f0000000c00)=""/195, 0xc3}], 0x4, 0x6, 0x7) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_UNBLANKSCREEN(r5, 0x541c, &(0x7f00000000c0)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000340)="71e67a15", 0x4) r7 = accept4$alg(r6, 0x0, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) sendmsg$alg(r7, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmmsg$alg(r7, &(0x7f0000002dc0)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)="4c2aa68e9f983c238da872e02b984b3b82b86b132c0f3eb54be93e20de414e98334b882babd05e7fdc42346581f291d7468652cd6d0bda672cbf00f3621b7a3f529e01ed2b3c07ca262b8753ddb1d8d94a098aef8f", 0x55}, {&(0x7f0000000580)="58750f688dc16a224a6d5986eff155d3ec074b015dcbc52cc97c07111a5efe96965e24476c1ef251eade7dcfe4bf39a6ec59fe90c3a452d1fdbdbfddcab97db52a29caf89a14605ba29a04ec924416dfe08b0767c5ec69b1837a2b603d1ce779cef0211f61f7d3a92c7583a897662f32a338f81612b43f9e8fd3814584bb3b670e21af0773112161bdcbb38bd89ad2795002039e6441a1e4ca8825229c55ef8b7c56ee78867b707d91ca53024f6bfafac372a3ecc2596e77f8325e04f311e928b5fc88a0b2e13ba2f0543d42183fbcce11daa582ba8424e30d69f52ac96f966824f734ead62074557501a2fa429c51cd6fa1d37b0af2934e64e9bd699791", 0xfe}, {&(0x7f0000000680)="30386607f22645fd0b4102295249f832cb6c55d8360f18f0d4b8eaa6bb8a733c1eb3d50b08eabd6a49a890525248af4556e7c49088ac1af1992ee922596a0c54e07eef22f4f68c95", 0x48}, {&(0x7f0000000940)="6429f13c31a9e45ec025c4311dea618f44d47687fe0f48dfc6b70007ca86642ca34d7d96eb8bb5da6d2e7c3eb60f68b8462827502b3d47ee2b8b99a576e6b4a6577ec7d23fa71d7de763dd24515f673fa829bf", 0x53}, {&(0x7f0000001480)="e64c362564be2e7fed0812e95e1341b043beac0e9516e33763c01c3b1d31ed3250d864b93d96b7582d8c5ab6ccf2d066562004d9cc467bec6c16a25e6891431ff678f267deda96b51304038d08450f5b03298743021deb7bb664148102dc826a81fb6edf4920083b0c9adc2d7362a300dce02ced4e3a4981501faa05784bcf6af3ee2bb18d0ef75aaf089a2ec0e055a53135b16ac4d04657bcc4b4afc7612ff11f72d7eea9f4a801f4170015d0f5acf1b52d6cb5ab05e36fe88878fd274ab2401172202a470e9f767051819aa7638f4910a5ab8be3c983d1977f8ba2e414f410d221f9607f671c33df4d787fce13aa29ce0a937d5d976236c37f60d433f2fc0aa0b89247be7fbe554cfa84bf099fa37a82ac399fd7e73859df2b24fa632c0363d0a4b67fb8c18c67e0fa274c6ec16ae548638ca357cd69389db147961ddb13806dca32263a8a122e7744b175d8b89447be5bba944ba963bbd8b05af218849bfdd48aa4f8c093e73e7e06cf0f7cc64f26564455dc5741536740ffabc555295f2ba08ec1678f3e8f87c4685f67d3892675edad7250949b77ed8478783097e5d88a90085526c03ad2e851fe61057d3602026d29646a3d0dde656b8ba826c01925e558bc1f92faa810247211dbc1f559151f95e9a8304337e35760160c0c0de381421e1bad96494e132c62e9d1d3512a6adcd463aaa57a71004b1c01a7e38b23f42819f0fe890af2282d8a28a85111649be06960dd5679db6920e590cefb4607aeec5a49643aa6a16e9d868379a2904fb7b93d3dd233be6ed1f42026234e9c99ffb2d474ef2548ceb31edff52f0f685d8330fe542d0f4a8cea796e1f6e708d4bd47b94f5811e527a2951c3eb99b8055a35dfbc8098390fa4cb4bff9b41ec4069f89ffebafe93730e9a80f39bb577b7268fb54ca5678eae0a2bfb9d67c7c7f917a91ceddf14512b2a518bf288058075a741dcb3184b5843abb5894d658063e2ffa084fedb09ae8b4549eaff47b81b88631901c584aa6ecc442a61441d17530dc5c4090dc19a363e3b929260fa45cded6389b278d08672678fa6cff117999935801b8a4eac51539a2373f5621d1677d83814a95685a6aa8eed6211b60226cf9bc3a5ac52898a25651851da71662a765ed651bf9106d448032973051c11255db6845f8ada369d529bdba1b04298a6f26247c2cdbd67f14cbcab04779d3fc96301656723e8919ceb8f09e13674f3df771031c65727ce9458068bd4097ce8e5fde509bd0583720051fb9b0cab4627e7afadab4f40038a5e5560dd4738323b31d352cba7fc7f7ecca218c039a23f4fdc9f808d5f6778a8735ffb8ee5293b4c7b1e0511a5156658100cec2bea338f1c75fc293125f7c853b860efdeac89eaaa0d0d44e78eba9087ec39ad5bcbeec9a384eadd333ab1b67f112ed1b628170bd82bddb2c5ed19bacef647ac3978f7ce521d16d0378289b4b3168e607889df800a43d790fd1d6c667617a0529f12d52391c31b29b1e23a96fbb9ce5d4870b2f07e723859e0196fdb3f9c1e971756d6efeee57787206034ed84dc18c49c26beb1e97b3115576fdcbdbbf1fc3fe5d98ea04691dac89c45d083c6e816c7f829c7c742ee267fbf1d20a08c093bf974285a8cf58a754c9dc2fb4356a6bfc0cc902cd16a758449ac5d23b4f3b0a72414fc262d624a9a30d6fca551ac8d172e023aa7c2aebf6aeb5408f35cf9c7c5da24dfa914d50481793af16196ff921fb1b776eaced109b56522d124b2c6e62c6f895fa0259f22c533d39dda60f7169b44d8576956916a7d0186502790cbd13c5922421aa01159a184f3a2a03106263af262c2c55d4eb6ff1671bc8065bd61a2d4a96388263825cc3aaaffe3f110e4e4e57c0056f23ae5d0e0edbaeffb3131f809efdbd0ad364b609be392914062b203ae3de647ed88871af7a3abafe03fd7763c379189dbc86054692a01c661636580e9a1f69090c6162d9e6d49985a0eeb4d2e18d39b2df1b84cfcd07eaf2775d40c656c7a456bb25241f9ac279d32e1a9419a627cd2c5775cd8cb0b7a1a8ba63f6c53288b9a66f6c54cff98f9e537ee981c200f39ae9aa225cf9bb1ac30c2f151cd50ae2d5c92fad3e98a364074d496518dbbbe62bd11b681b761b462d4ae111c4709b6c192db56737590dacf1c592d9a2e5b7e7b97b83231eb0b60eec8d0042acccb3f4c7e661b305fb2290808f942131365dd9652e2d24be0313c6885d41d1e518181334d33344669b4c9658f6ade4a9240b16bcaf97724c3041a9f716f0c6003af3107e6a9d813fe2588fd4d6037a95f3d2635b5990b9f57527a2c5f62f7ce38efc51611931fa0f1518797683c7904b820fc761a2254e13fde80a8df9314dc48969fcac419a02a122c15405aefc4936b24bb4269345029da625ae015210efa6dddc1202ebb41a972303be837d67da27e512db62ce0f7d18ee844697cab1f045f154ad600f089c8a58eb9d24cbccb2d4b427908ba511c6f20864d3183cb7a56115a4beb3427873aca64bfd817c85eb8405b05ddeff426f0a44b8c8021c9e644c83196253e45789c1c4014544bc297ca05f0abe861536b9ca99aa38b9e088b62c4cadcc76524ec88b10202601b4bba498ddae02158ed56f9793d51a4c68780798f6b971ac25b64f526495442303c4049b925f14ba8f8027997f1c7292e5487719cc100ec92034f0bb6c80efa911cc39aa2e1534d3d4ab9ecda9c506a8878215ee935205269540725c22d9970a310c50ce538716f78fa6400c6f6bfa780bca1c841a80a0230f2bc6a217d0d0ac155f98536a46e4afcf71c95139c3101499b3cfd8c2048bd47f2f6256ffb31ddc38b976c3378e8e504f2a9d6c4750d68f9c291d892b7bdbf736ca45d69ccaeea636574bcf073d71eb1ac836005d6deda63be07cb0c69e7a043e6ba72f03c4472b70f620364d86b44c0e06b4738ceec44173d14641bb31e077b5b275527dfda18603559191d832c99d81ba5a3ea6664d70f2c680153449c72fdae61cb8a540c6efdf321afd40de62ed3f48c4f0086381d1234670d14f8726fb2c328622cc1fad02270679ad7795852cf654e2f3cf23193cfaf3b141b2415a181719023a0a401dfd466c3b39e9aa1ea4ce079ca29ddcc0be0b070c8bc16405818500d62264ef30d07b866000568ddc09c3b9113bd9baa6c6cb9233275fbbb80de1c970de79a33993dc39ff51e889762df9cd43603f0a31170d767df02d243acfea51cbc03d9b56757bd55fcfc4efa26f3c4967ec0c4adc30c725fe299b29306d9f255f69040be16b1e160861d392013803bb8485b35a5c11dd613c118afaf6b3549a810d6f1a03900e36a5fa794bbd95898ca47dc74115ee4da8b6a73696e60c060557008a93e7c9f6ee5a95d59218c67239f051717d52e37e437eae16b3325744b91a98f14da83dfa9ff6cfebfe1d4c31d60d1fcd04c98d8aed22c64b341bd76bbedff313e534cdf8af9c9effc456d8fd76a0a60f248c76755e0521e36b56346b1d59f147e20fc4721fa29eead62e8501bc9a454ee7821618f2902c2055570c3eb4648dccb963c883053c613c849f8ca980872a93805bc125e21882b3edb00b7e7c197639d61472135e44d187441bba663a6e2b2c2813624f98597a507512b19af2fb7fccdce6e1806f8958608fc90fdf6886993c24208b1eedfeda765f76705776028448d12694cb44347390194b45ddf1f6d85e35a99fb91bbfd1764542f46fdf633148a5e75c359977cdd4b871f0c44c05b46e683a23aa739f11244f96572219690415c898c3d99e79cc24caff306df93ca777c59f2c1f40e1a1f1cc75c2feb7288b1d7e9acce31c7f0af914c1ad91c5fd76596166278488c4d0d8c6f431cf0a3f45f6d6046", 0xabf}], 0x5}], 0x1, 0x0) io_submit(r8, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r7, &(0x7f0000000340), 0xfdef}]) 1.911803573s ago: executing program 2 (id=974): socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000180)=0x3, 0x12) syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x1, 0x4}}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x9c000000, @dev={0xfe, 0x80, '\x00', 0x30}, 0x1df}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x0, 0xfe}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.489565674s ago: executing program 3 (id=975): unshare(0x8000000) mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x0, 0x0}) socket$pppoe(0x18, 0x1, 0x0) r0 = syz_open_dev$sndctrl(0x0, 0x7, 0x24080) r1 = syz_open_dev$sndctrl(0x0, 0xfffffffd, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc1105511, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x2000, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99f]}}, 0x5c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) readv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100)=r4, 0x12) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000140)) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r8, r7, 0x0) 1.302612656s ago: executing program 1 (id=976): mq_open(0x0, 0x2, 0x110, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x80800, 0x0) ioctl$SNDCTL_TMR_SOURCE(r0, 0xc0045406) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x68}}, 0x0) ioctl$FICLONE(r1, 0x40049409, r2) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x6000000b) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x20, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004000}, 0x20040003) write$P9_RWRITE(r1, &(0x7f00000003c0)={0xb, 0x77, 0x2, 0xd6}, 0xb) r5 = socket(0x2, 0x2, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) ioctl$NBD_DO_IT(r6, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r6, 0xab07, 0xa) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) 927.32208ms ago: executing program 2 (id=977): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x10000000, 0x1, 0xa, 0xb}, {0x1, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r4, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) close(r4) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f0000000040)={0xa}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f00000023c0)=""/241, 0x1115000, 0x0, 0x0, 0x2}, 0x1c) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, &(0x7f0000000000)=0x6, 0x8, 0x0) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="7472616e733d76697274696f2c64656275673d3078163030303030303030303030303030372c0001da5280833471f915c7"]) read$FUSE(r7, &(0x7f0000000340)={0x2020}, 0x2020) r8 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 696.58439ms ago: executing program 1 (id=978): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r3, 0x80044dfd, &(0x7f0000000040)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x20, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000140)}, {&(0x7f0000000ac0)=""/254, 0xfe}, {&(0x7f0000000240)=""/74, 0x4a}, {&(0x7f0000000c00)=""/195, 0xc3}], 0x4, 0x6, 0x7) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_UNBLANKSCREEN(r5, 0x541c, &(0x7f00000000c0)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000340)="71e67a15", 0x4) r7 = accept4$alg(r6, 0x0, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) sendmsg$alg(r7, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmmsg$alg(r7, &(0x7f0000002dc0)=[{0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000580)="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", 0xfe}, {&(0x7f0000000680)="30386607f22645fd0b4102295249f832cb6c55d8360f18f0d4b8eaa6bb8a733c1eb3d50b08eabd6a49a890525248af4556e7c49088ac1af1992ee922596a0c54e07eef22f4f68c95", 0x48}, {&(0x7f0000000940)="6429f13c31a9e45ec025c4311dea618f44d47687fe0f48dfc6b70007ca86642ca34d7d96eb8bb5da6d2e7c3eb60f68b8462827502b3d47ee2b8b99a576e6b4a6577ec7d23fa71d7de763dd24515f673fa829bf", 0x53}, {&(0x7f0000001480)="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", 0xabf}], 0x5}], 0x1, 0x0) io_submit(r8, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r7, &(0x7f0000000340), 0xfdef}]) 395.295718ms ago: executing program 0 (id=979): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000091f171f0be1e4a68ae8b6f61ad00611967"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf2501000000000000000741000000030018ff"], 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0x400c090) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1, 0x3}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r6, r5, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x18b801, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r9, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r9, &(0x7f0000000800)={'syz1\x00', {0x0, 0x0, 0x4, 0x1}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x1000, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x400, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000]}, 0x45c) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r9, 0x5501) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r7}, @flat=@weak_handle={0x77682a85, 0x1000, 0x40000}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r10 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r10, 0x0, 0x8, &(0x7f0000000100)=ANY=[], 0x1) 394.851815ms ago: executing program 3 (id=980): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x2, 0x12) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x9, 0x3, 0x8, 0x2, 0x0, 0x70bd2a, 0x25dfdbfe}, 0x10}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000005100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r4}, 0x8) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@hyper}, @hyper, 0x0, 0x0, 0x2}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_tx_power}}, 0xa) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r5, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x100f}) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x10000, 0x80) r7 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc2c45512, &(0x7f0000000340)={{0x7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}) ioctl$VIDIOC_ENUMSTD(r6, 0xc0585604, &(0x7f0000000080)={0x2, 0x0, "3127608efb75b4c827912445aead8b49f0a87e73a02eec2f"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000050000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r8) socketpair(0x23, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r8, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="00c900"}) openat$kvm(0xffffff9c, &(0x7f0000000180), 0x280000, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r9, 0xc0286687, &(0x7f00000000c0)={0x3, 0x8, 0x5b, &(0x7f0000000000)=""/91}) 256.08657ms ago: executing program 3 (id=981): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x8, 0x70bd28, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xb}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x2, 0x9, 0x9}}}}]}, 0x48}}, 0x44080) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r6 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r6, 0xab0a, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r6, 0xab00, r1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001300)={0xc, {"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", 0xfffffffffffffebd}}, 0x1006) ioctl$PIO_UNIMAP(r8, 0x4b67, &(0x7f00000002c0)={0x3fffffffffffffb8, &(0x7f00000000c0)=[{0x11}, {0x4, 0x8}, {0x5cec, 0xc616}, {0xfffe, 0x929}]}) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r8) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x18, r9, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48040}, 0x1) r10 = eventfd(0x483c21cf) r11 = eventfd2(0x10000, 0x80000) r12 = eventfd2(0x4, 0xc00) r13 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r14 = fcntl$dupfd(r13, 0x0, r13) ioctl$SCSI_IOCTL_GET_PCI(r14, 0x5393, &(0x7f0000000000)) pipe(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(0x0, 0x7, &(0x7f0000000b00)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0xb, r2, &(0x7f0000000100), 0x0, 0x4, 0x0, 0x1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x5, 0xffffffffffffffff, &(0x7f0000000400)="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", 0xfe, 0x1, 0x0, 0x2, r8}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x40, r0, &(0x7f0000000540)="fbc0476ae4b87153423e749a10748ca2416e341067f48b9e0c9740146a38a3a405a1c89d92c849f5a9a503b9a528e527cfe63a7d543f485b980234940dafe4d2426dbf76431826d712a46b081a7ed1a11f253d3dfb277fcc0053c5780e43a227d8a492f8f39d8be9b7093b1715c4647ea124bdd85e73e87a3f7de0754a2b98fcfce0da11ea5358a6fd06f989ee46454c408246b17f53883880f18fcfe2518e642998ee02daa8b021849f9ca92d3cfedf0790a9281996eaaab3b24fdab686a9df065198528a8510b5", 0xc8, 0xa4, 0x0, 0x3, r10}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x5, 0x8c0f, r3, &(0x7f0000000680)="0a64bda18fe528ac9c8ac80799a2a996816d6c2e309bb37726c15f516851a346a7895746d8043f478fb1bdf326ec623d8c368e1585f7f359b05a2bc019024b1a0d74d8e8fcce5bdba59d14596f269347a079d14396d57b7147cbe87d", 0x5c, 0xffffffffffffffff, 0x0, 0x0, r11}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x6, 0x46b, r3, &(0x7f00000007c0)="daa087d1e23f71502b0c340e92a9d79f61ae56b6b44a8a414418749130a0865570369243bfed8652d225062ac2190f9d9830473f42433ede35ffaddb1fd1743b1890290293e5e4a04f0111c649de778c16ef39faf3d896376dc86c6d57d71d3f4ee92f630e140bff09a149e67dfc7565062dd2e5f24612b43cfa478fa600bace9d16414219c8844dce07ba0fffa2c088c9ed100abdd66bc3ae1d8309e59afd218371dc484387", 0xa6, 0xa000, 0x0, 0x3, r12}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x7, 0x1, r1, &(0x7f0000000880)="f1482ae547a8bc09caf806d3f0adb66b0ccd596d8725a8b88093ce330cb325a2cb3ced970dc0ef61a005a99616b5ee79e5c959b0d1c09f62d17d6a22020a9c2bfaf1f1d745463ccc2c247b4cee5d6582f48ea1c8a9f423b5c7f1de653a5f37e05135c710be998f81c4736ba773fe01ff37d63993e3165eeec285b3814f37164effeb17e30f5e4f27f90229fe46ece2e77294baf272d2cd7e1e70c401957a5a7db1b567056170b312d73773c5afed8267fe2a8b3ad6bbd23f45bc298d68aa99eef9c060dde2f1fae3451b2235cb0167491db362de4a503ab16ba9a8c5c39f", 0xde, 0x4, 0x0, 0x1, r14}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x7, 0x6, r3, &(0x7f00000009c0)="7a803d31b1a8ef5d489092f3d1723fa55faf93a3d9f54e74bbacac98313af68d6737cc178aad1025d6a3649a8b97e9ec4138cc70e286a47e96c231a6757b30d5cc2ac0f91a5b4424cd53b9c29b239adb26102e542c76e52aa4e3534da57d4282e095eb326959eab6e44ff7881fcd5300c4a5b1d07d2750b772ec32fef9d6c9b20159bc4883f14a696113e802d2d8681a1a5c8be7bc629cccabca3ece078fccaaeea3773d3aea0dba30dd455b0d4067281360859cecbeb8", 0xb7, 0x3, 0x0, 0x2, r15}]) r16 = socket$alg(0x26, 0x5, 0x0) bind$alg(r16, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r17 = accept4(r16, 0x0, 0x0, 0x0) read$alg(r17, &(0x7f0000000300)=""/253, 0xfd) ioctl$NBD_DO_IT(r0, 0xab03) 0s ago: executing program 2 (id=982): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2}, 0x10, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r3) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0xc50}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x22100, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, 0x0, 0x0) kernel console output (not intermixed with test programs): storage 5-1:1.0 [ 50.383831][ T6355] input: syz0 as /devices/virtual/input/input6 [ 50.434614][ T828] usb 5-1: USB disconnect, device number 4 [ 50.673180][ T40] audit: type=1326 audit(1732327575.584:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6361 comm="syz.2.114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 50.678869][ T40] audit: type=1326 audit(1732327575.584:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6361 comm="syz.2.114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 50.682925][ T6362] tipc: Started in network mode [ 50.685082][ T40] audit: type=1326 audit(1732327575.584:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6361 comm="syz.2.114" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 50.686217][ T6362] tipc: Node identity ac1414aa, cluster identity 4711 [ 50.691964][ T40] audit: type=1326 audit(1732327575.584:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6361 comm="syz.2.114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 50.691986][ T40] audit: type=1326 audit(1732327575.584:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6361 comm="syz.2.114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 50.692001][ T40] audit: type=1326 audit(1732327575.584:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6361 comm="syz.2.114" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 50.692016][ T40] audit: type=1326 audit(1732327575.584:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6361 comm="syz.2.114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 50.694402][ T6362] tipc: New replicast peer: 100.1.1.1 [ 50.699364][ T40] audit: type=1326 audit(1732327575.584:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6361 comm="syz.2.114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 50.707674][ T6362] tipc: Enabled bearer , priority 10 [ 50.893950][ T5964] Bluetooth: hci1: command 0x0c1a tx timeout [ 50.963813][ T5355] bcm5974 6-1:0.0: could not read from device [ 50.969944][ T5355] bcm5974 6-1:0.0: could not read from device [ 50.974055][ T64] usb 6-1: USB disconnect, device number 4 [ 50.999865][ T6375] vlan2: entered promiscuous mode [ 51.001501][ T6375] vlan2: entered allmulticast mode [ 51.002848][ T6375] hsr_slave_1: entered allmulticast mode [ 51.007657][ T6375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.120'. [ 51.082629][ T6375] hsr_slave_1 (unregistering): left allmulticast mode [ 51.100702][ T6375] hsr_slave_1 (unregistering): left promiscuous mode [ 51.175369][ T6384] ipvlan2: entered promiscuous mode [ 51.178896][ T6384] bridge0: port 3(ipvlan2) entered blocking state [ 51.180658][ T6384] bridge0: port 3(ipvlan2) entered disabled state [ 51.182436][ T6384] ipvlan2: entered allmulticast mode [ 51.183875][ T6384] bridge0: entered allmulticast mode [ 51.192549][ T6384] ipvlan2: left allmulticast mode [ 51.194489][ T6384] bridge0: left allmulticast mode [ 51.341083][ T6390] netlink: 'syz.2.126': attribute type 9 has an invalid length. [ 51.343281][ T6390] netlink: 'syz.2.126': attribute type 7 has an invalid length. [ 51.345628][ T6390] netlink: 'syz.2.126': attribute type 8 has an invalid length. [ 51.438560][ T6396] netlink: 'syz.2.127': attribute type 10 has an invalid length. [ 51.449577][ T6396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.463933][ T6396] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 51.693898][ T5964] Bluetooth: hci3: command 0x0c1a tx timeout [ 51.693996][ T5959] Bluetooth: hci2: command 0x0c1a tx timeout [ 51.834875][ T6014] tipc: Node number set to 2886997162 [ 52.053289][ T6407] capability: warning: `syz.3.129' uses 32-bit capabilities (legacy support in use) [ 52.563809][ T6013] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 52.713831][ T6013] usb 6-1: Using ep0 maxpacket: 8 [ 52.716557][ T6013] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 52.719126][ T6013] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 52.721641][ T6013] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 52.725555][ T6013] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 52.728904][ T6013] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 52.731279][ T6013] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.942461][ T6013] usb 6-1: GET_CAPABILITIES returned 0 [ 52.944261][ T6013] usbtmc 6-1:16.0: can't read capabilities [ 52.947942][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 53.164234][ T828] usb 6-1: USB disconnect, device number 5 [ 53.584295][ T6428] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 53.586136][ T6428] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 53.587785][ T6428] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 53.753248][ T6440] syzkaller0: entered promiscuous mode [ 53.754849][ T6440] syzkaller0: entered allmulticast mode [ 53.817170][ T6444] netlink: 36 bytes leftover after parsing attributes in process `syz.2.136'. [ 53.819835][ T6444] netlink: 16 bytes leftover after parsing attributes in process `syz.2.136'. [ 53.822247][ T6444] netlink: 36 bytes leftover after parsing attributes in process `syz.2.136'. [ 53.829809][ T6444] netlink: 36 bytes leftover after parsing attributes in process `syz.2.136'. [ 54.893963][ T5959] Bluetooth: hci1: command 0x0c1a tx timeout [ 55.054379][ T6449] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 55.215555][ T6449] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 55.219654][ T6449] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 55.327111][ T6477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.146'. [ 55.583431][ T6483] : renamed from bond0 (while UP) [ 56.004556][ T6489] veth1_vlan: left promiscuous mode [ 56.194786][ T6489] netlink: 'syz.0.149': attribute type 2 has an invalid length. [ 56.263965][ T6489] syz.0.149 (6489) used greatest stack depth: 20976 bytes left [ 56.304003][ T6502] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 56.461504][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.155'. [ 56.588397][ T6518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.156'. [ 56.887617][ T6529] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 56.950340][ T6534] netlink: 'syz.1.161': attribute type 1 has an invalid length. [ 56.977667][ T6534] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.000959][ T6534] bond1: (slave ip6gretap1): making interface the new active one [ 57.004430][ T6534] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 57.031684][ T6534] vlan2: entered promiscuous mode [ 57.033392][ T6534] bond1: entered promiscuous mode [ 57.036493][ T6534] ip6gretap1: entered promiscuous mode [ 57.038443][ T6534] vlan2: entered allmulticast mode [ 57.040270][ T6534] bond1: entered allmulticast mode [ 57.041983][ T6534] ip6gretap1: entered allmulticast mode [ 57.197191][ T6544] netlink: 40 bytes leftover after parsing attributes in process `syz.0.163'. [ 57.213003][ T6507] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 57.222890][ T6507] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 57.224649][ T6507] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 57.513848][ T64] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 57.662525][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.168'. [ 57.685257][ T64] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.689185][ T64] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.692648][ T64] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 57.697675][ T64] usb 7-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 57.700843][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.704848][ T64] usb 7-1: config 0 descriptor?? [ 58.116318][ T64] hid-udraw 0003:20D6:CB17.0002: unknown main item tag 0x0 [ 58.119653][ T64] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:20D6:CB17.0002/input/input7 [ 58.189976][ T64] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:20D6:CB17.0002/input/input8 [ 58.196677][ T64] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:20D6:CB17.0002/input/input9 [ 58.203664][ T64] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:20D6:CB17.0002/input/input10 [ 58.252236][ T64] hid-udraw 0003:20D6:CB17.0002: hidraw1: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.2-1/input0 [ 58.376655][ T829] usb 7-1: USB disconnect, device number 3 [ 58.504561][ T5959] Bluetooth: hci1: command 0x0c1a tx timeout [ 58.543880][ T828] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 58.705394][ T828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 58.708448][ T828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 58.711346][ T828] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 58.715150][ T828] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 58.718242][ T828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.722125][ T828] usb 5-1: config 0 descriptor?? [ 58.724902][ T6571] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 59.132789][ T828] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 59.135886][ T828] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 59.142415][ T828] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 59.303814][ T5959] Bluetooth: hci3: command 0x0c1a tx timeout [ 59.305514][ T5959] Bluetooth: hci2: command 0x0c1a tx timeout [ 59.408807][ T6571] input: syz1 as /devices/virtual/input/input11 [ 59.437728][ T71] usb 5-1: USB disconnect, device number 5 [ 59.463147][ T6578] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 59.468689][ T6578] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 59.472748][ T6578] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 59.957851][ T6614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.177'. [ 60.046724][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 60.050068][ T40] audit: type=1326 audit(1732327584.964:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.1.178" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 60.063584][ T40] audit: type=1326 audit(1732327584.964:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.1.178" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 60.073919][ T40] audit: type=1326 audit(1732327584.964:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.1.178" exe="/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 60.084002][ T40] audit: type=1326 audit(1732327584.964:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.1.178" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 60.089707][ T40] audit: type=1326 audit(1732327584.964:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.1.178" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 60.458159][ T6638] vcan0: entered promiscuous mode [ 60.459506][ T6637] netlink: 'syz.2.181': attribute type 1 has an invalid length. [ 60.460266][ T6638] vlan3: entered promiscuous mode [ 60.487321][ T6638] vcan0: left promiscuous mode [ 60.560989][ T6640] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 60.609883][ T1179] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 60.614306][ T6637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.675103][ T6647] warning: `syz.3.183' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 60.725659][ T68] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 60.733841][ T5964] Bluetooth: hci1: command 0x0c1a tx timeout [ 60.739720][ T828] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 60.741459][ T828] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 60.873844][ T40] audit: type=1800 audit(1732327585.784:49): pid=6653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.186" name="/" dev="9p" ino=2 res=0 errno=0 [ 61.127630][ T6660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.187'. [ 61.167516][ T6662] netlink: 'syz.2.188': attribute type 3 has an invalid length. [ 61.259279][ T6666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.189'. [ 61.585479][ T5964] Bluetooth: hci3: command 0x0c1a tx timeout [ 61.598817][ T5964] Bluetooth: hci2: command 0x0c1a tx timeout [ 61.608005][ T828] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 61.614097][ T828] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 62.116423][ T6689] : renamed from bond0 (while UP) [ 62.769047][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.196'. [ 62.786837][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.196'. [ 63.173787][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 63.295627][ T6715] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.323769][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 63.326588][ T9] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 63.328711][ T9] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 63.331052][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 63.333367][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 63.336279][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 63.339357][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 63.343415][ T9] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 63.346883][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.351171][ T9] usb 6-1: config 0 descriptor?? [ 63.558304][ T9] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 63.562057][ T9] usb 6-1: USB disconnect, device number 6 [ 63.565817][ T9] usblp0: removed [ 63.700264][ T5964] Bluetooth: hci3: command 0x0c1a tx timeout [ 63.887052][ T828] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 63.888661][ T828] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 64.003830][ T30] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 64.153815][ T30] usb 6-1: Using ep0 maxpacket: 32 [ 64.156587][ T30] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 64.158771][ T30] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 64.160838][ T30] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 64.163098][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 64.165762][ T30] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 64.168507][ T30] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 64.171861][ T30] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 64.177295][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.181328][ T30] usb 6-1: config 0 descriptor?? [ 64.391533][ T30] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 64.395322][ T6731] netlink: 'syz.3.205': attribute type 10 has an invalid length. [ 64.408927][ T6731] : (slave wlan1): Enslaving as an active interface with an up link [ 64.500869][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.206'. [ 64.604871][ C0] usblp0: nonzero read bulk status received: -71 [ 64.605155][ T6161] usb 6-1: USB disconnect, device number 7 [ 64.630451][ T6736] vlan2: entered promiscuous mode [ 64.631792][ T6736] : entered promiscuous mode [ 64.633026][ T6736] bond_slave_0: entered promiscuous mode [ 64.635798][ T6736] bond_slave_1: entered promiscuous mode [ 64.637252][ T6736] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 64.642410][ T6736] : left promiscuous mode [ 64.643613][ T6736] bond_slave_0: left promiscuous mode [ 64.645660][ T6736] bond_slave_1: left promiscuous mode [ 64.647138][ T6736] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 64.814373][ T6710] usblp0: removed [ 66.336592][ T6770] 9pnet: bogus RREAD count (69 > 41) [ 66.338743][ T40] audit: type=1800 audit(1732327591.254:50): pid=6770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.220" name="/" dev="9p" ino=2 res=0 errno=0 [ 67.410799][ T6793] netlink: 24 bytes leftover after parsing attributes in process `syz.3.226'. [ 67.596829][ T6796] netlink: 36 bytes leftover after parsing attributes in process `syz.3.227'. [ 67.599259][ T6796] netlink: 16 bytes leftover after parsing attributes in process `syz.3.227'. [ 67.601495][ T6796] netlink: 36 bytes leftover after parsing attributes in process `syz.3.227'. [ 67.604488][ T6796] netlink: 36 bytes leftover after parsing attributes in process `syz.3.227'. [ 67.649303][ T40] audit: type=1326 audit(1732327592.564:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.3.228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 67.654674][ T40] audit: type=1326 audit(1732327592.564:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.3.228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 67.660071][ T40] audit: type=1326 audit(1732327592.564:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.3.228" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 67.665294][ T40] audit: type=1326 audit(1732327592.564:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.3.228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 67.670529][ T40] audit: type=1326 audit(1732327592.564:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.3.228" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 67.675920][ T40] audit: type=1326 audit(1732327592.564:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.3.228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 67.681192][ T40] audit: type=1326 audit(1732327592.564:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.3.228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 67.686428][ T40] audit: type=1326 audit(1732327592.564:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.3.228" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 67.691648][ T40] audit: type=1326 audit(1732327592.574:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.3.228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 68.181548][ T6814] block device autoloading is deprecated and will be removed. [ 68.243963][ T6811] md2: using deprecated bitmap file support [ 68.249472][ T6811] md2: error: failed to get bitmap file [ 68.376578][ T6822] batadv0: entered promiscuous mode [ 68.401659][ T6821] netlink: 24 bytes leftover after parsing attributes in process `syz.2.236'. [ 70.058293][ T6858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.244'. [ 70.078384][ T6860] netlink: 24 bytes leftover after parsing attributes in process `syz.1.245'. [ 70.108559][ T6862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.657683][ T1408] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.659816][ T1408] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.944209][ T6882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.252'. [ 71.347898][ T6884] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.651090][ T6897] block device autoloading is deprecated and will be removed. [ 71.663339][ T6895] md: md2 stopped. [ 72.235847][ T6904] block device autoloading is deprecated and will be removed. [ 72.780118][ T6921] Cannot find del_set index 4 as target [ 72.797446][ T6921] ipvlan2: entered promiscuous mode [ 72.800096][ T6921] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 72.810040][ T6921] team0: Device ipvlan2 is already an upper device of the team interface [ 74.012651][ T6937] netlink: 28 bytes leftover after parsing attributes in process `syz.0.270'. [ 74.015117][ T6937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.270'. [ 74.133461][ T6937] infiniband syz0: set active [ 74.143959][ T6937] infiniband syz0: added syz_tun [ 74.194497][ T6937] RDS/IB: syz0: added [ 74.196648][ T6937] smc: adding ib device syz0 with port count 1 [ 74.198708][ T6937] smc: ib device syz0 port 1 has pnetid [ 74.370355][ T6943] cgroup: fork rejected by pids controller in /syz3 [ 74.433901][ T35] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 74.593903][ T35] usb 7-1: Using ep0 maxpacket: 8 [ 74.596462][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.599186][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.601551][ T35] usb 7-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 74.604037][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.607148][ T35] usb 7-1: config 0 descriptor?? [ 74.609980][ T35] usbhid 7-1:0.0: can't add hid device: -22 [ 74.611569][ T35] usbhid 7-1:0.0: probe with driver usbhid failed with error -22 [ 74.613508][ T6950] netlink: 100 bytes leftover after parsing attributes in process `syz.0.274'. [ 74.780866][ T1179] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.893757][ T1179] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.934799][ T6183] usb 7-1: USB disconnect, device number 4 [ 75.018998][ T1179] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.035371][ T5964] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.040792][ T5964] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.043452][ T5964] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.048178][ T5964] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.050686][ T5964] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.052524][ T5964] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.064807][ T5959] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.067238][ T5959] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.070004][ T5959] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.072941][ T5959] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.075363][ T5959] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.077974][ T5959] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.114069][ T1179] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.232633][ T1179] bridge_slave_1: left allmulticast mode [ 75.234433][ T1179] bridge_slave_1: left promiscuous mode [ 75.237084][ T1179] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.240423][ T1179] bridge_slave_0: left allmulticast mode [ 75.241856][ T1179] bridge_slave_0: left promiscuous mode [ 75.248426][ T1179] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.605677][ T1179]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.613899][ T1179]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.634294][ T1179]  (unregistering): (slave wlan1): Releasing backup interface [ 76.645408][ T1179]  (unregistering): Released all slaves [ 76.756040][ T6956] chnl_net:caif_netlink_parms(): no params data found [ 76.960395][ T6956] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.962358][ T6956] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.973922][ T6956] bridge_slave_0: entered allmulticast mode [ 76.986747][ T6956] bridge_slave_0: entered promiscuous mode [ 77.014433][ T6956] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.023620][ T6956] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.026980][ T6956] bridge_slave_1: entered allmulticast mode [ 77.030059][ T6956] bridge_slave_1: entered promiscuous mode [ 77.133898][ T5964] Bluetooth: hci0: command tx timeout [ 77.197594][ T6956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.201139][ T6956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.308831][ T6956] team0: Port device team_slave_0 added [ 77.343877][ T6956] team0: Port device team_slave_1 added [ 77.503389][ T1179] hsr_slave_0: left promiscuous mode [ 77.509527][ T1179] hsr_slave_1: left promiscuous mode [ 77.511998][ T1179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.515083][ T1179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.519867][ T1179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.522015][ T1179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.548724][ T1179] veth1_macvtap: left promiscuous mode [ 77.554100][ T1179] veth0_macvtap: left promiscuous mode [ 77.558624][ T1179] veth1_vlan: left promiscuous mode [ 77.563025][ T1179] veth0_vlan: left promiscuous mode [ 78.634114][ T1179] team0 (unregistering): Port device team_slave_1 removed [ 78.705230][ T1179] team0 (unregistering): Port device team_slave_0 removed [ 79.200385][ T6956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.202294][ T6956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.209008][ T6956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.222128][ T6956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.223870][ T5964] Bluetooth: hci0: command tx timeout [ 79.224648][ T6956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.234779][ T6956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.269891][ T6956] hsr_slave_0: entered promiscuous mode [ 79.279435][ T6956] hsr_slave_1: entered promiscuous mode [ 79.314747][ T7027] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 79.316544][ T7027] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 79.326054][ T7027] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 79.408490][ T7046] Bluetooth: MGMT ver 1.23 [ 80.044594][ T6956] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.055306][ T6956] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.060312][ T6956] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.065988][ T6956] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.145772][ T6956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.169200][ T6956] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.191086][ T1179] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.194246][ T1179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.210786][ T1179] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.212658][ T1179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.362412][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 80.362423][ T40] audit: type=1326 audit(1732327605.274:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 80.370684][ T40] audit: type=1326 audit(1732327605.274:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 80.376472][ T40] audit: type=1326 audit(1732327605.274:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=81 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 80.401475][ T40] audit: type=1326 audit(1732327605.274:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 80.409154][ T6956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.429657][ T40] audit: type=1326 audit(1732327605.274:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 80.437719][ T40] audit: type=1326 audit(1732327605.274:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=152 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 80.456400][ T6956] veth0_vlan: entered promiscuous mode [ 80.466757][ T6956] veth1_vlan: entered promiscuous mode [ 80.545063][ T6956] veth0_macvtap: entered promiscuous mode [ 80.566322][ T6956] veth1_macvtap: entered promiscuous mode [ 80.656868][ T6956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.659958][ T6956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.662520][ T6956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.679752][ T6956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.682472][ T6956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.685578][ T6956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.689879][ T6956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.695309][ T6956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.698051][ T6956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.700561][ T6956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.703301][ T6956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.706354][ T6956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.709091][ T6956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.712223][ T6956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.716474][ T6956] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.718758][ T6956] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.721717][ T6956] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.721854][ T40] audit: type=1326 audit(1732327605.634:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 80.724256][ T6956] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.731905][ T40] audit: type=1326 audit(1732327605.634:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 80.825740][ T40] audit: type=1326 audit(1732327605.744:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 80.833875][ T40] audit: type=1326 audit(1732327605.744:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 80.906036][ T25] cfg80211: failed to load regulatory.db [ 81.266159][ T7108] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 81.294284][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.296476][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.307656][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.310040][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.518533][ T30] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 81.684943][ T30] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 81.687841][ T30] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 81.690393][ T30] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 81.692738][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.697265][ T7102] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 81.702350][ T30] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 81.703884][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 81.857198][ T9] usb 6-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39 [ 81.859645][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.861760][ T9] usb 6-1: Product: syz [ 81.862879][ T9] usb 6-1: Manufacturer: syz [ 81.873843][ T9] usb 6-1: SerialNumber: syz [ 81.877890][ T9] usb 6-1: config 0 descriptor?? [ 81.880147][ T9] pn533_usb 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 81.966556][ T828] usb 5-1: USB disconnect, device number 6 [ 82.088196][ T9] usb 6-1: USB disconnect, device number 8 [ 82.178018][ T7135] kvm: pic: non byte read [ 82.583837][ T5964] Bluetooth: hci0: command 0x0419 tx timeout [ 83.320536][ T7165] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 83.331425][ T7165] kvm: pic: level sensitive irq not supported [ 83.331693][ T7165] kvm: pic: non byte read [ 83.336216][ T7165] kvm: pic: level sensitive irq not supported [ 83.336467][ T7165] kvm: pic: non byte read [ 83.862353][ T7183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.311'. [ 84.192110][ T7169] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 84.288996][ T7197] netlink: 16 bytes leftover after parsing attributes in process `syz.1.322'. [ 85.363882][ T6183] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 85.544145][ T5964] Bluetooth: hci0: command 0x0419 tx timeout [ 85.665246][ T6183] usb 7-1: Using ep0 maxpacket: 8 [ 85.777893][ T6183] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 85.780485][ T6183] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 85.783854][ T6183] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 85.786961][ T6183] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 85.789557][ T6183] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.792859][ T6183] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 85.795327][ T6183] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.030060][ T6183] usb 7-1: GET_CAPABILITIES returned 0 [ 86.033907][ T6183] usbtmc 7-1:16.0: can't read capabilities [ 86.231236][ T25] usb 7-1: USB disconnect, device number 5 [ 86.993864][ T6183] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 87.153853][ T6183] usb 6-1: Using ep0 maxpacket: 16 [ 87.156568][ T6183] usb 6-1: config 0 has no interfaces? [ 87.160103][ T6183] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 87.162886][ T6183] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.165079][ T6183] usb 6-1: Product: syz [ 87.166271][ T6183] usb 6-1: Manufacturer: syz [ 87.167550][ T6183] usb 6-1: SerialNumber: syz [ 87.171055][ T6183] usb 6-1: config 0 descriptor?? [ 87.486149][ T6183] usb 6-1: USB disconnect, device number 9 [ 87.770740][ T7238] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 87.908590][ T7254] : renamed from bond0 (while UP) [ 89.063845][ T5964] Bluetooth: hci0: command 0x0419 tx timeout [ 91.133908][ T5964] Bluetooth: hci0: command 0x0419 tx timeout [ 92.180404][ T7288] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 92.633910][ T828] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 92.795166][ T828] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.798154][ T828] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.800921][ T828] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 92.806926][ T828] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 92.809259][ T828] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.814248][ T828] usb 7-1: config 0 descriptor?? [ 93.063394][ T7326] tipc: Started in network mode [ 93.065580][ T7326] tipc: Node identity 7f000001, cluster identity 4711 [ 93.068592][ T7326] tipc: Enabled bearer , priority 10 [ 93.078110][ T7325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.345'. [ 93.666628][ T7317] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 93.786015][ T7314] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 94.194880][ T6006] tipc: Node number set to 2130706433 [ 94.245659][ T5964] Bluetooth: hci0: unexpected event for opcode 0x2042 [ 94.424601][ T828] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 94.426619][ T828] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 94.428559][ T828] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 94.430642][ T828] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 94.432704][ T828] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 94.435084][ T828] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 94.437008][ T828] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 94.438931][ T828] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 94.440891][ T828] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 94.442814][ T828] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 94.445483][ T828] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 94.447447][ T828] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 94.450444][ T828] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 94.452528][ T828] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 94.455130][ T828] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 94.457638][ T828] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 94.459638][ T828] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 94.461642][ T828] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 94.463614][ T828] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 94.466043][ T828] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 94.468181][ T828] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 94.470189][ T828] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 94.472175][ T828] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 94.474207][ T828] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 94.476116][ T828] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 94.478071][ T828] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 94.480586][ T828] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 94.482590][ T828] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 94.484628][ T828] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 94.486593][ T828] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 94.488517][ T828] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 94.490725][ T828] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 94.492669][ T828] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 94.494664][ T828] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 94.496584][ T828] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 94.498530][ T828] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 94.500433][ T828] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 94.502444][ T828] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 94.504688][ T828] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 94.508267][ T828] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 94.922877][ T6006] IPVS: starting estimator thread 0... [ 94.962680][ T7349] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 95.023987][ T7350] IPVS: using max 37 ests per chain, 88800 per kthread [ 95.366433][ T5965] usb 7-1: USB disconnect, device number 6 [ 96.003231][ T7362] netlink: 24 bytes leftover after parsing attributes in process `syz.1.355'. [ 96.771230][ T7373] loop9: detected capacity change from 0 to 6 [ 96.781382][ T7373] Dev loop9: unable to read RDB block 6 [ 96.783819][ T7373] loop9: unable to read partition table [ 96.786652][ T7373] loop9: partition table beyond EOD, truncated [ 96.789033][ T7373] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 96.789033][ T7373] ) failed (rc=-5) [ 97.068383][ T7364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.848161][ T7393] netlink: 24 bytes leftover after parsing attributes in process `syz.0.364'. [ 97.952692][ T7396] netlink: 16 bytes leftover after parsing attributes in process `syz.1.365'. [ 98.254092][ T5964] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 98.257217][ T5964] Bluetooth: hci0: Injecting HCI hardware error event [ 98.260122][ T5964] Bluetooth: hci0: hardware error 0x00 [ 98.278167][ T30] kernel write not supported for file bpf-prog (pid: 30 comm: kworker/1:0) [ 100.334074][ T5964] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 101.530886][ T7440] netlink: 16 bytes leftover after parsing attributes in process `syz.3.375'. [ 101.860435][ T7445] netlink: 830 bytes leftover after parsing attributes in process `syz.3.376'. [ 102.663518][ T7463] block nbd1: NBD_DISCONNECT [ 102.668010][ T7463] block nbd1: Disconnected due to user request. [ 102.670299][ T7463] block nbd1: shutting down sockets [ 104.647794][ T5964] block nbd3: Receive control failed (result -107) [ 104.873846][ T7491] nbd3: detected capacity change from 0 to 11778 [ 104.886598][ T5953] block nbd3: Dead connection, failed to find a fallback [ 104.892429][ T5953] block nbd3: shutting down sockets [ 104.898011][ T5953] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.905563][ T5953] Buffer I/O error on dev nbd3, logical block 0, async page read [ 104.908797][ T5953] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.912239][ T5953] Buffer I/O error on dev nbd3, logical block 0, async page read [ 104.924282][ T5953] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.926775][ T5953] Buffer I/O error on dev nbd3, logical block 0, async page read [ 104.929031][ T5953] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.931624][ T5953] Buffer I/O error on dev nbd3, logical block 0, async page read [ 104.936393][ T5953] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.940042][ T5953] Buffer I/O error on dev nbd3, logical block 0, async page read [ 104.949067][ T7493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.391'. [ 104.959270][ T5953] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.961651][ T5953] Buffer I/O error on dev nbd3, logical block 0, async page read [ 104.963864][ T5953] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.966248][ T5953] Buffer I/O error on dev nbd3, logical block 0, async page read [ 104.969297][ T5953] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.971657][ T5953] Buffer I/O error on dev nbd3, logical block 0, async page read [ 104.973787][ T5953] ldm_validate_partition_table(): Disk read failed. [ 104.975549][ T5953] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.979351][ T5953] Buffer I/O error on dev nbd3, logical block 0, async page read [ 104.981493][ T5953] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.983945][ T5953] Buffer I/O error on dev nbd3, logical block 0, async page read [ 104.986063][ T5953] Dev nbd3: unable to read RDB block 0 [ 104.988756][ T5953] nbd3: unable to read partition table [ 105.013489][ T7491] ldm_validate_partition_table(): Disk read failed. [ 105.016782][ T7491] Dev nbd3: unable to read RDB block 0 [ 105.020150][ T7491] nbd3: unable to read partition table [ 105.034943][ T5953] ldm_validate_partition_table(): Disk read failed. [ 105.037059][ T5953] Dev nbd3: unable to read RDB block 0 [ 105.039008][ T5953] nbd3: unable to read partition table [ 105.107314][ T7495] netlink: 'syz.3.392': attribute type 1 has an invalid length. [ 105.118967][ T7495] bond0: (slave ipip0): The slave device specified does not support setting the MAC address [ 105.121751][ T7495] bond0: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 105.126568][ T7495] bond0: (slave ipip0): making interface the new active one [ 105.128804][ T7495] bond0: (slave ipip0): Enslaving as an active interface with an up link [ 106.803861][ T25] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 106.953838][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 106.956939][ T25] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 106.959989][ T25] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 106.963119][ T25] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.967152][ T25] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 106.970193][ T25] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 106.973458][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.984026][ T25] usb 6-1: config 0 descriptor?? [ 107.440324][ T25] usb 6-1: USB disconnect, device number 10 [ 109.096493][ T7553] netlink: 16 bytes leftover after parsing attributes in process `syz.1.405'. [ 110.977218][ T7589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.414'. [ 111.144297][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 111.144308][ T40] audit: type=1326 audit(1732327636.064:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7584 comm="syz.1.412" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f50579 code=0x0 [ 111.226038][ T7597] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 111.383844][ T64] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 111.554147][ T64] usb 7-1: Using ep0 maxpacket: 32 [ 111.559064][ T64] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 111.562037][ T64] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 111.569078][ T64] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 111.572399][ T64] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 111.576154][ T64] usb 7-1: Product: syz [ 111.578896][ T64] usb 7-1: Manufacturer: syz [ 111.580486][ T64] usb 7-1: SerialNumber: syz [ 111.583291][ T64] usb 7-1: config 0 descriptor?? [ 111.586318][ T64] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 111.591582][ T64] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 111.806507][ T25] usb 7-1: USB disconnect, device number 7 [ 111.810837][ T25] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 112.142697][ T1135] Bluetooth: hci4: Frame reassembly failed (-84) [ 112.295009][ T7603] netlink: 24 bytes leftover after parsing attributes in process `syz.1.418'. [ 112.379000][ T25] kernel write not supported for file bpf-prog (pid: 25 comm: kworker/2:0) [ 112.546390][ T5951] block nbd0: Receive control failed (result -107) [ 112.582970][ T7613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.420'. [ 112.633870][ T7609] nbd0: detected capacity change from 0 to 11778 [ 112.637619][ T5953] block nbd0: Dead connection, failed to find a fallback [ 112.640036][ T5953] block nbd0: shutting down sockets [ 112.641724][ T5953] blk_print_req_error: 40 callbacks suppressed [ 112.641732][ T5953] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 112.646734][ T5953] buffer_io_error: 39 callbacks suppressed [ 112.646747][ T5953] Buffer I/O error on dev nbd0, logical block 0, async page read [ 112.651660][ T5953] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 112.655130][ T5953] Buffer I/O error on dev nbd0, logical block 0, async page read [ 112.657241][ T5953] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 112.659586][ T5953] Buffer I/O error on dev nbd0, logical block 0, async page read [ 112.661663][ T5953] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 112.664351][ T5953] Buffer I/O error on dev nbd0, logical block 0, async page read [ 112.666422][ T5953] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 112.668725][ T5953] Buffer I/O error on dev nbd0, logical block 0, async page read [ 112.670778][ T5953] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 112.673292][ T5953] Buffer I/O error on dev nbd0, logical block 0, async page read [ 112.676121][ T5953] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 112.678530][ T5953] Buffer I/O error on dev nbd0, logical block 0, async page read [ 112.680653][ T5953] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 112.683284][ T5953] Buffer I/O error on dev nbd0, logical block 0, async page read [ 112.685715][ T5953] ldm_validate_partition_table(): Disk read failed. [ 112.687481][ T5953] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 112.689840][ T5953] Buffer I/O error on dev nbd0, logical block 0, async page read [ 112.691903][ T5953] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 112.694631][ T5953] Buffer I/O error on dev nbd0, logical block 0, async page read [ 112.696756][ T5953] Dev nbd0: unable to read RDB block 0 [ 112.698363][ T5953] nbd0: unable to read partition table [ 112.705911][ T7620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.423'. [ 112.822443][ T5953] ldm_validate_partition_table(): Disk read failed. [ 112.824702][ T5953] Dev nbd0: unable to read RDB block 0 [ 112.826326][ T5953] nbd0: unable to read partition table [ 112.935803][ T7624] random: crng reseeded on system resumption [ 112.947782][ T7624] capability: warning: `syz.0.424' uses deprecated v2 capabilities in a way that may be insecure [ 113.213906][ T5964] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 113.244279][ T40] audit: type=1326 audit(1732327638.164:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.0.426" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7fc00000 [ 113.863641][ T40] audit: type=1326 audit(1732327638.774:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.0.426" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f37579 code=0x7fc00000 [ 114.025523][ T7643] netlink: 36 bytes leftover after parsing attributes in process `syz.0.429'. [ 114.028236][ T7643] netlink: 16 bytes leftover after parsing attributes in process `syz.0.429'. [ 114.030805][ T7643] netlink: 36 bytes leftover after parsing attributes in process `syz.0.429'. [ 114.033291][ T7643] netlink: 36 bytes leftover after parsing attributes in process `syz.0.429'. [ 114.173881][ T5964] Bluetooth: hci4: command 0x1003 tx timeout [ 114.174120][ T5959] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 114.399355][ T7653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.433'. [ 114.536587][ T7656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.434'. [ 114.582153][ T40] audit: type=1400 audit(1732327639.494:110): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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netlink: 4 bytes leftover after parsing attributes in process `syz.0.443'. [ 116.304128][ T7694] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 117.333915][ T828] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 117.499574][ T828] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 117.501959][ T828] usb 5-1: config 0 has no interface number 0 [ 117.503679][ T828] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 117.507508][ T828] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 117.510856][ T828] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 117.516678][ T828] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 632, setting to 64 [ 117.519926][ T828] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 117.524465][ T828] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 117.527978][ T828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.535721][ T828] usb 5-1: config 0 descriptor?? [ 117.540196][ T7717] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 117.545695][ T828] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 117.866172][ T5965] usb 5-1: USB disconnect, device number 7 [ 117.866221][ C2] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 117.871615][ T7717] ldusb 5-1:0.55: Couldn't submit interrupt_out_urb -19 [ 117.876202][ T5965] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 118.219853][ T7727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.453'. [ 118.769628][ T7713] delete_channel: no stack [ 118.771756][ T7713] delete_channel: no stack [ 119.063380][ T7737] md: md2 stopped. [ 119.125914][ T7741] Cannot find del_set index 4 as target [ 119.148857][ T7741] ipvlan2: entered promiscuous mode [ 119.150468][ T7741] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 119.152640][ T7741] team0: Device ipvlan2 is already an upper device of the team interface [ 119.327785][ T7745] random: crng reseeded on system resumption [ 120.930951][ T7782] netlink: 28 bytes leftover after parsing attributes in process `syz.0.465'. [ 121.622505][ T7790] block device autoloading is deprecated and will be removed. [ 121.638793][ T7788] md: md2 stopped. [ 121.693432][ T7794] netlink: 24 bytes leftover after parsing attributes in process `syz.3.468'. [ 121.998005][ T7807] xt_CT: No such helper "pptp" [ 122.784747][ T7827] batadv0: entered promiscuous mode [ 123.826649][ T7848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.868097][ T7848] batadv_slave_0: entered promiscuous mode [ 125.146486][ T7861] netlink: 36 bytes leftover after parsing attributes in process `syz.2.480'. [ 125.149099][ T7861] netlink: 16 bytes leftover after parsing attributes in process `syz.2.480'. [ 125.152267][ T7861] netlink: 36 bytes leftover after parsing attributes in process `syz.2.480'. [ 125.155185][ T7861] netlink: 36 bytes leftover after parsing attributes in process `syz.2.480'. [ 125.192512][ T7865] block device autoloading is deprecated and will be removed. [ 125.199762][ T7863] md: md2 stopped. [ 125.558767][ T7877] syz.2.483: attempt to access beyond end of device [ 125.558767][ T7877] loop2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 125.562311][ T7877] EXT4-fs (loop2): unable to read superblock [ 126.658914][ T7880] input: syz0 as /devices/virtual/input/input13 [ 126.927008][ T7886] Bluetooth: MGMT ver 1.23 [ 126.995555][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.487'. [ 127.584251][ T7900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.490'. [ 128.253452][ T40] audit: type=1326 audit(1732327653.164:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7901 comm="syz.2.491" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 128.261750][ T40] audit: type=1326 audit(1732327653.164:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7901 comm="syz.2.491" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 128.268992][ T40] audit: type=1326 audit(1732327653.174:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7901 comm="syz.2.491" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 128.276410][ T40] audit: type=1326 audit(1732327653.174:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7901 comm="syz.2.491" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 128.284261][ T40] audit: type=1326 audit(1732327653.174:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7901 comm="syz.2.491" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 128.291383][ T40] audit: type=1326 audit(1732327653.174:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7901 comm="syz.2.491" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 128.301455][ T40] audit: type=1326 audit(1732327653.214:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7901 comm="syz.2.491" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 128.308594][ T40] audit: type=1326 audit(1732327653.214:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7901 comm="syz.2.491" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 128.315957][ T40] audit: type=1326 audit(1732327653.224:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7901 comm="syz.2.491" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 128.332225][ T40] audit: type=1326 audit(1732327653.224:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7901 comm="syz.2.491" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 128.414437][ T7903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.486369][ T7905] netlink: 36 bytes leftover after parsing attributes in process `syz.0.492'. [ 128.489650][ T7905] netlink: 16 bytes leftover after parsing attributes in process `syz.0.492'. [ 128.493051][ T7905] netlink: 36 bytes leftover after parsing attributes in process `syz.0.492'. [ 128.496776][ T7905] netlink: 36 bytes leftover after parsing attributes in process `syz.0.492'. [ 128.714749][ T7911] netlink: 32 bytes leftover after parsing attributes in process `syz.1.494'. [ 128.746382][ T7911] netfs: Duplicate cookie detected [ 128.748351][ T7911] netfs: O-cookie c=00000003 [fl=4000 na=0 nA=0 s=-] [ 128.750244][ T7911] netfs: O-cookie V=00000003 [9p,syz,] [ 128.752054][ T7911] netfs: O-key=[8] '72003e0200000000' [ 128.754166][ T7911] netfs: N-cookie c=00000005 [fl=8 na=0 nA=0 s=-] [ 128.756366][ T7911] netfs: N-cookie V=00000003 [9p,syz,] [ 128.758268][ T7911] netfs: N-key=[8] '72003e0200000000' [ 130.594268][ T7939] fuse: Bad value for 'fd' [ 130.714767][ T7942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.502'. [ 130.893155][ T7948] netlink: 24 bytes leftover after parsing attributes in process `syz.1.503'. [ 131.563914][ T6013] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 131.725405][ T6013] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.729412][ T6013] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 131.732879][ T6013] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 131.737724][ T6013] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 131.740337][ T6013] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.758173][ T7958] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 131.768027][ T6013] hub 7-1:1.0: bad descriptor, ignoring hub [ 131.770285][ T6013] hub 7-1:1.0: probe with driver hub failed with error -5 [ 131.773232][ T6013] cdc_wdm 7-1:1.0: skipping garbage [ 131.775532][ T6013] cdc_wdm 7-1:1.0: skipping garbage [ 131.795171][ T6013] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 131.797315][ T6013] cdc_wdm 7-1:1.0: Unknown control protocol [ 131.948181][ T7962] binder: BINDER_SET_CONTEXT_MGR already set [ 131.952120][ T7962] binder: 7961:7962 ioctl 4018620d 20000040 returned -16 [ 131.955913][ T7962] binder: 7961:7962 ioctl c0306201 200003c0 returned -22 [ 132.105877][ T1408] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.108001][ T1408] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.626067][ T7957] usb 7-1: reset low-speed USB device number 8 using dummy_hcd [ 132.636032][ T7977] syzkaller0: entered promiscuous mode [ 132.637691][ T7977] syzkaller0: entered allmulticast mode [ 132.823831][ T7982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.511'. [ 132.961498][ T7957] usb 7-1: device firmware changed [ 132.978976][ T7957] cdc_wdm 7-1:1.0: Error autopm - -16 [ 132.979047][ T6006] usb 7-1: USB disconnect, device number 8 [ 133.143805][ T6006] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 133.305574][ T6006] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.307984][ T6006] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 133.310984][ T6006] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 133.316215][ T6006] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 133.319106][ T6006] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.329695][ T7958] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 133.333055][ T6006] hub 7-1:1.0: bad descriptor, ignoring hub [ 133.339871][ T6006] hub 7-1:1.0: probe with driver hub failed with error -5 [ 133.342547][ T6006] cdc_wdm 7-1:1.0: skipping garbage [ 133.344650][ T6006] cdc_wdm 7-1:1.0: skipping garbage [ 133.346393][ T6006] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 133.764092][ T6006] usb 7-1: USB disconnect, device number 9 [ 134.209784][ T7989] netlink: 24 bytes leftover after parsing attributes in process `syz.2.512'. [ 134.252901][ T7991] raw_sendmsg: syz.0.514 forgot to set AF_INET. Fix it! [ 134.283669][ T7991] xt_cgroup: invalid path, errno=-2 [ 134.600459][ T7999] ceph: No mds server is up or the cluster is laggy [ 135.185926][ T8014] ceph: No mds server is up or the cluster is laggy [ 137.166058][ T8072] netlink: 24 bytes leftover after parsing attributes in process `syz.3.525'. [ 137.533610][ T8083] fuse: Bad value for 'fd' [ 138.038577][ T8086] netlink: 24 bytes leftover after parsing attributes in process `syz.3.529'. [ 138.050033][ T8086] netlink: 48 bytes leftover after parsing attributes in process `syz.3.529'. [ 139.518070][ T8110] netlink: 24 bytes leftover after parsing attributes in process `syz.0.535'. [ 140.034548][ T30] libceph: connect (1)[c::]:6789 error -101 [ 140.037175][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 140.147533][ T8121] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 140.210201][ T8113] ceph: No mds server is up or the cluster is laggy [ 140.262348][ T30] libceph: connect (1)[c::]:6789 error -101 [ 140.266767][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 140.494238][ T8128] xt_CT: No such helper "pptp" [ 140.530599][ T30] libceph: connect (1)[c::]:6789 error -101 [ 140.544120][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 140.810894][ T8121] ceph: No mds server is up or the cluster is laggy [ 141.211136][ T8137] netlink: 'syz.0.542': attribute type 10 has an invalid length. [ 141.214113][ T8137] netlink: 55 bytes leftover after parsing attributes in process `syz.0.542'. [ 141.786402][ T8150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.544'. [ 143.810811][ T8183] random: crng reseeded on system resumption [ 144.846327][ T8216] sp0: Synchronizing with TNC [ 144.860580][ T8218] VFS: could not find a valid V7 on nullb0. [ 145.913921][ T64] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 145.975866][ T8240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.559'. [ 146.066833][ T64] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 146.069057][ T64] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.071809][ T64] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 146.083923][ T64] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.153928][ T64] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 146.158282][ T64] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 146.164981][ T64] usb 7-1: Product: syz [ 146.166053][ T64] usb 7-1: Manufacturer: syz [ 146.313620][ T64] cdc_wdm 7-1:1.0: skipping garbage [ 146.315509][ T64] cdc_wdm 7-1:1.0: skipping garbage [ 146.319896][ T64] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 146.321555][ T64] cdc_wdm 7-1:1.0: Unknown control protocol [ 146.715077][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 146.716205][ T828] usb 7-1: USB disconnect, device number 10 [ 146.717380][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 146.721630][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 146.880386][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 146.880398][ T40] audit: type=1326 audit(1732327671.794:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8234 comm="syz.2.560" exe="/syz-executor" sig=31 arch=40000003 syscall=20 compat=1 ip=0xf73fe579 code=0x0 [ 146.973853][ T5959] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 146.973923][ T5964] Bluetooth: hci4: command 0x1003 tx timeout [ 147.333821][ T5994] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 147.831032][ T8283] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 147.896096][ T8270] ceph: No mds server is up or the cluster is laggy [ 148.504653][ T8283] ceph: No mds server is up or the cluster is laggy [ 148.903676][ T8296] netlink: 'syz.2.566': attribute type 4 has an invalid length. [ 149.264302][ T8309] syz.2.567: attempt to access beyond end of device [ 149.264302][ T8309] nbd2: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 149.264427][ T8309] hfsplus: unable to find HFS+ superblock [ 149.279280][ T8307] netlink: 24 bytes leftover after parsing attributes in process `syz.0.569'. [ 149.288859][ T8307] netlink: 48 bytes leftover after parsing attributes in process `syz.0.569'. [ 151.328725][ T8344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.573'. [ 152.756251][ T40] audit: type=1326 audit(1732327677.674:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.1.579" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 152.762351][ T40] audit: type=1326 audit(1732327677.674:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.1.579" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 152.768096][ T40] audit: type=1326 audit(1732327677.674:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.1.579" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 152.782167][ T40] audit: type=1326 audit(1732327677.674:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.1.579" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 152.801783][ T40] audit: type=1326 audit(1732327677.674:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.1.579" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 152.809765][ T40] audit: type=1326 audit(1732327677.674:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.1.579" exe="/syz-executor" sig=0 arch=40000003 syscall=179 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 152.818512][ T40] audit: type=1326 audit(1732327677.674:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.1.579" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 152.828409][ T40] audit: type=1326 audit(1732327677.674:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.1.579" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 153.234790][ T8386] vxcan3: entered promiscuous mode [ 153.238065][ T8386] vxcan3: entered allmulticast mode [ 154.288842][ T8405] process 'syz.2.587' launched './file2' with NULL argv: empty string added [ 158.808896][ T8473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.601'. [ 159.405236][ T8485] netlink: 24 bytes leftover after parsing attributes in process `syz.2.604'. [ 160.866063][ T8509] netlink: 'syz.0.609': attribute type 4 has an invalid length. [ 161.290278][ T8512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.610'. [ 161.810612][ T8521] netlink: 24 bytes leftover after parsing attributes in process `syz.0.613'. [ 163.266277][ T8548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.619'. [ 164.487477][ T8563] netlink: 'syz.3.622': attribute type 4 has an invalid length. [ 167.322615][ T8597] netlink: 24 bytes leftover after parsing attributes in process `syz.2.631'. [ 167.474487][ T8602] infiniband syz0: set active [ 167.476994][ T8602] infiniband syz0: set active [ 167.492360][ T8602] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.502773][ T8602] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.545484][ T8602] infiniband syz0: set active [ 167.547603][ T8602] infiniband syz0: set active [ 167.558855][ T8602] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.561015][ T8602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.566018][ T8602] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.567917][ T8602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.955303][ T8613] netlink: 24 bytes leftover after parsing attributes in process `syz.0.634'. [ 169.927175][ T8644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.639'. [ 169.930007][ T8644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.933138][ T8644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.977607][ T8644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.989984][ T8644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.038286][ T8644] : (slave batadv0): Releasing backup interface [ 170.406480][ T8648] netlink: 24 bytes leftover after parsing attributes in process `syz.3.642'. [ 170.806688][ T8653] netlink: 'syz.0.644': attribute type 1 has an invalid length. [ 172.348197][ T8670] netlink: 'syz.3.647': attribute type 20 has an invalid length. [ 173.078391][ T8690] netlink: 'syz.0.657': attribute type 10 has an invalid length. [ 173.090899][ T8690] team0: Port device netdevsim0 added [ 173.580528][ T8691] xt_CT: No such helper "pptp" [ 179.037249][ T8765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.666'. [ 179.041287][ T8765] netlink: 32 bytes leftover after parsing attributes in process `syz.0.666'. [ 179.992550][ T6013] IPVS: starting estimator thread 0... [ 180.093999][ T8782] IPVS: using max 37 ests per chain, 88800 per kthread [ 180.101110][ T8784] syzkaller1: entered promiscuous mode [ 180.103906][ T8784] syzkaller1: entered allmulticast mode [ 180.339093][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.346577][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.349342][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.352060][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.358805][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.370608][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.373373][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.380902][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.388547][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.391236][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.398001][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.400645][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.403508][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.415604][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.429209][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.432806][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.443521][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.450572][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.461061][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.465370][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.470700][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.473554][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.484143][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.506919][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.522854][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.584154][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.595144][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.597316][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.604930][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.612462][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.614779][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.618628][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.620536][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.622539][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.627388][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.629707][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.631872][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.635790][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.637730][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.639952][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.642043][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.647398][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.649591][ T828] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 180.672757][ T828] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz0] on syz0 [ 181.110735][ T8801] tmpfs: Bad value for 'mpol' [ 181.463474][ T8813] netlink: 36 bytes leftover after parsing attributes in process `syz.2.676'. [ 182.370830][ T8826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.681'. [ 183.471054][ T8835] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 184.228650][ T8849] binder: 8845:8849 ioctl c0046209 0 returned -22 [ 185.596642][ T8882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.692'. [ 186.909745][ T8907] syzkaller1: entered promiscuous mode [ 186.917071][ T8907] syzkaller1: entered allmulticast mode [ 187.533692][ T8916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.701'. [ 191.043860][ T6161] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 191.203796][ T6161] usb 6-1: Using ep0 maxpacket: 8 [ 191.218536][ T6161] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 191.220644][ T6161] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 191.223517][ T6161] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 191.231383][ T6161] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 191.235523][ T6161] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 191.264222][ T6161] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 191.267099][ T6161] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 191.270507][ T6161] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 191.274797][ T6161] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 191.278821][ T6161] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 191.282734][ T6161] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 191.284765][ T6161] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 191.287748][ T6161] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 191.291078][ T6161] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 191.294215][ T6161] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 191.299631][ T6161] usb 6-1: string descriptor 0 read error: -22 [ 191.301409][ T6161] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 191.304075][ T6161] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.354911][ T6161] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 191.621987][ T8963] kvm: MONITOR instruction emulated as NOP! [ 192.828268][ T5953] udevd[5953]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 193.537902][ T1408] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.539680][ T1408] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.029659][ T9022] FAT-fs (sr0): bogus number of reserved sectors [ 194.031814][ T9022] FAT-fs (sr0): Can't find a valid FAT filesystem [ 196.427928][ T9063] mkiss: ax0: crc mode is auto. [ 196.550881][ T9065] overlayfs: unescaped trailing colons in lowerdir mount option. [ 196.645095][ T9064] mkiss: ax0: crc mode is auto. [ 198.061287][ T9085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.737'. [ 198.065641][ T9085] netlink: 32 bytes leftover after parsing attributes in process `syz.3.737'. [ 199.591776][ T5953] udevd[5953]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 199.865108][ T9136] netlink: 'syz.2.748': attribute type 21 has an invalid length. [ 202.821310][ T9188] netlink: 'syz.0.765': attribute type 4 has an invalid length. [ 204.264528][ T9207] ======================================================= [ 204.264528][ T9207] WARNING: The mand mount option has been deprecated and [ 204.264528][ T9207] and is ignored by this kernel. Remove the mand [ 204.264528][ T9207] option from the mount to silence this warning. [ 204.264528][ T9207] ======================================================= [ 204.468032][ T9213] netlink: 72 bytes leftover after parsing attributes in process `syz.1.763'. [ 204.680664][ T6183] hid-generic 0000:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 204.682853][ T6183] hid-generic 0000:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 204.685060][ T6183] hid-generic 0000:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 204.687138][ T6183] hid-generic 0000:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 204.689152][ T6183] hid-generic 0000:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 204.691222][ T6183] hid-generic 0000:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 204.693384][ T6183] hid-generic 0000:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 204.723852][ T6183] hid-generic 0000:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 204.727502][ T6183] hid-generic 0000:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 204.729575][ T6183] hid-generic 0000:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 204.731705][ T6183] hid-generic 0000:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 204.734769][ T6183] hid-generic 0000:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 204.736991][ T6183] hid-generic 0000:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 204.739088][ T6183] hid-generic 0000:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 204.741477][ T6183] hid-generic 0000:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 204.743530][ T6183] hid-generic 0000:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 204.745788][ T6183] hid-generic 0000:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 204.748017][ T6183] hid-generic 0000:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 204.750149][ T6183] hid-generic 0000:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 204.752249][ T6183] hid-generic 0000:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 204.754619][ T6183] hid-generic 0000:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 204.756972][ T6183] hid-generic 0000:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 204.759575][ T6183] hid-generic 0000:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 204.761939][ T6183] hid-generic 0000:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 204.764373][ T6183] hid-generic 0000:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 204.766524][ T6183] hid-generic 0000:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 204.768661][ T6183] hid-generic 0000:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 204.770935][ T6183] hid-generic 0000:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 204.773254][ T6183] hid-generic 0000:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 204.775511][ T6183] hid-generic 0000:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 204.777570][ T6183] hid-generic 0000:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 204.779926][ T6183] hid-generic 0000:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 204.782379][ T6183] hid-generic 0000:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 204.795497][ T6183] hid-generic 0000:FFFFFFFF:0000.0006: hidraw1: HID v0.00 Device [syz0] on syz0 [ 206.712996][ T9248] netlink: 24 bytes leftover after parsing attributes in process `syz.3.769'. [ 206.882219][ T9253] netlink: 36 bytes leftover after parsing attributes in process `syz.0.770'. [ 208.394164][ T9277] binder: Unknown parameter 'smackfsroot' [ 208.411248][ T9277] ubi0: attaching mtd0 [ 208.421015][ T9277] ubi0: scanning is finished [ 208.422699][ T9277] ubi0: empty MTD device detected [ 208.533310][ T9277] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 208.536857][ T9277] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 208.539683][ T9277] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 208.542583][ T9277] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 208.545425][ T9277] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 208.547954][ T9277] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 208.550891][ T9277] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1208748936 [ 208.554707][ T9277] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 208.560445][ T9282] ubi0: background thread "ubi_bgt0d" started, PID 9282 [ 210.119075][ T9295] binder: Unknown parameter 'smackfsroot' [ 210.724749][ T9308] Cannot find add_set index 0 as target [ 211.298465][ T9315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.786'. [ 211.302521][ T9315] netlink: 32 bytes leftover after parsing attributes in process `syz.3.786'. [ 211.489758][ T40] audit: type=1326 audit(1732327736.404:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.2.787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 211.498887][ T40] audit: type=1326 audit(1732327736.414:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.2.787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 211.512169][ T40] audit: type=1326 audit(1732327736.414:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.2.787" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 211.518787][ T40] audit: type=1326 audit(1732327736.414:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.2.787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 211.526636][ T40] audit: type=1326 audit(1732327736.414:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.2.787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 211.532752][ T40] audit: type=1326 audit(1732327736.424:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.2.787" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 211.538743][ T40] audit: type=1326 audit(1732327736.424:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.2.787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 211.545230][ T40] audit: type=1326 audit(1732327736.424:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.2.787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 211.551179][ T40] audit: type=1326 audit(1732327736.424:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.2.787" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 211.557469][ T40] audit: type=1326 audit(1732327736.424:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.2.787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 211.792077][ T9324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.796'. [ 212.377618][ T9316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.445653][ T9332] netlink: 'syz.1.789': attribute type 4 has an invalid length. [ 214.943935][ T9372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.800'. [ 217.389049][ T9416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.809'. [ 218.270278][ T9433] syz.1.813: attempt to access beyond end of device [ 218.270278][ T9433] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 218.276797][ T9433] syz.1.813: attempt to access beyond end of device [ 218.276797][ T9433] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 218.280691][ T9433] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 218.285887][ T9433] syz.1.813: attempt to access beyond end of device [ 218.285887][ T9433] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 218.290278][ T9433] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 218.297959][ T9433] syz.1.813: attempt to access beyond end of device [ 218.297959][ T9433] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 218.302158][ T9431] nbd1: detected capacity change from 0 to 20 [ 218.306076][ T9433] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 218.313280][ T9433] block nbd1: Send control failed (result -89) [ 218.315913][ T9433] block nbd1: Request send failed, requeueing [ 218.322610][ T5959] block nbd1: Receive control failed (result -32) [ 218.323125][ T53] block nbd1: Dead connection, failed to find a fallback [ 218.329975][ T53] block nbd1: shutting down sockets [ 218.332450][ T53] blk_print_req_error: 24 callbacks suppressed [ 218.332460][ T53] I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.339983][ T9433] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=4, location=4 [ 218.343650][ T9433] I/O error, dev nbd1, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.344490][ T5953] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.349788][ T5953] buffer_io_error: 23 callbacks suppressed [ 218.349796][ T5953] Buffer I/O error on dev nbd1, logical block 0, async page read [ 218.351079][ T9433] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=3, location=3 [ 218.351449][ T5953] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.353580][ T9433] I/O error, dev nbd1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.356082][ T5953] Buffer I/O error on dev nbd1, logical block 1, async page read [ 218.359355][ T9433] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=2, location=2 [ 218.360920][ T5953] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.360938][ T5953] Buffer I/O error on dev nbd1, logical block 0, async page read [ 218.360977][ T5953] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.365915][ T9433] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 218.367143][ T5953] Buffer I/O error on dev nbd1, logical block 1, async page read [ 218.381133][ T9433] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 218.381233][ T5953] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.384634][ T9433] I/O error, dev nbd1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.386998][ T5953] Buffer I/O error on dev nbd1, logical block 0, async page read [ 218.387089][ T5953] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.389934][ T9433] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1, location=1 [ 218.391470][ T5953] Buffer I/O error on dev nbd1, logical block 0, async page read [ 218.391542][ T5953] Buffer I/O error on dev nbd1, logical block 0, async page read [ 218.401861][ T5953] Buffer I/O error on dev nbd1, logical block 0, async page read [ 218.405691][ T9433] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=0, location=0 [ 218.405834][ T5953] Buffer I/O error on dev nbd1, logical block 0, async page read [ 218.408351][ T5953] Buffer I/O error on dev nbd1, logical block 0, async page read [ 218.411688][ T9433] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 218.412673][ T5953] ldm_validate_partition_table(): Disk read failed. [ 218.415341][ T9433] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 218.417126][ T5953] Dev nbd1: unable to read RDB block 0 [ 218.417266][ T5953] nbd1: unable to read partition table [ 218.422353][ T5953] nbd1: partition table beyond EOD, truncated [ 218.427641][ T5953] ldm_validate_partition_table(): Disk read failed. [ 218.429644][ T5953] Dev nbd1: unable to read RDB block 0 [ 218.431208][ T5953] nbd1: unable to read partition table [ 218.432734][ T5953] nbd1: partition table beyond EOD, truncated [ 219.551615][ T9458] 9pnet_fd: Insufficient options for proto=fd [ 220.122463][ T9464] binder: Unknown parameter 'smackfsroot' [ 220.346960][ T9474] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 220.404043][ T9467] ceph: No mds server is up or the cluster is laggy [ 220.693129][ T9484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.824'. [ 221.014092][ T9474] ceph: No mds server is up or the cluster is laggy [ 222.092301][ T9498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.827'. [ 222.096362][ T9498] netlink: 32 bytes leftover after parsing attributes in process `syz.3.827'. [ 222.963547][ T40] kauditd_printk_skb: 47 callbacks suppressed [ 222.963559][ T40] audit: type=1326 audit(1732327747.874:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.0.830" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 222.973597][ T40] audit: type=1326 audit(1732327747.874:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.0.830" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 223.011921][ T40] audit: type=1326 audit(1732327747.884:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.0.830" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 223.020222][ T40] audit: type=1326 audit(1732327747.884:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.0.830" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 223.032737][ T40] audit: type=1326 audit(1732327747.884:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.0.830" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 223.050507][ T40] audit: type=1326 audit(1732327747.904:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.0.830" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 223.068496][ T40] audit: type=1326 audit(1732327747.904:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.0.830" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 223.084502][ T40] audit: type=1326 audit(1732327747.904:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.0.830" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 223.122002][ T40] audit: type=1326 audit(1732327747.904:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.0.830" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 223.176856][ T40] audit: type=1326 audit(1732327747.904:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.0.830" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 223.774908][ T9510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.164403][ T9525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.833'. [ 224.434893][ T9532] mkiss: ax0: crc mode is auto. [ 224.558178][ T9532] overlayfs: unescaped trailing colons in lowerdir mount option. [ 224.635182][ T9535] mkiss: ax0: crc mode is auto. [ 225.069529][ T9540] overlay: ./file0 is not a directory [ 225.162171][ T9540] efs: device does not support 512 byte blocks [ 225.164592][ T9540] device does not support 512 byte blocks [ 225.164592][ T9540] [ 226.354719][ T9548] syzkaller0: entered promiscuous mode [ 226.362175][ T9548] syzkaller0: entered allmulticast mode [ 226.367169][ T39] syzkaller0: tun_net_xmit 48 [ 226.464780][ T9548] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 226.466526][ T9548] syzkaller0: Linktype set failed because interface is up [ 226.481532][ T9550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.840'. [ 226.490704][ T9550] netlink: 32 bytes leftover after parsing attributes in process `syz.3.840'. [ 226.622023][ T9552] QAT: failed to copy from user cfg_data. [ 226.674599][ T9556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.842'. [ 227.252849][ T9570] syzkaller0: entered promiscuous mode [ 227.254793][ T9570] syzkaller0: entered allmulticast mode [ 227.266661][ T9570] netlink: 'syz.3.845': attribute type 10 has an invalid length. [ 227.269435][ T9570] netlink: 55 bytes leftover after parsing attributes in process `syz.3.845'. [ 227.848747][ T6013] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 231.812450][ T9601] fuse: Unknown parameter '0x000000000000000900000000000000000000 [ 231.812450][ T9601] RO]2H@v' [ 232.181388][ T9605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.852'. [ 232.677146][ T9615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.853'. [ 254.975915][ T1408] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.978207][ T1408] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.780021][ T9655] netlink: 'syz.3.858': attribute type 4 has an invalid length. [ 260.702889][ T9654] orangefs_mount: mount request failed with -4 [ 260.936384][ T9672] ALSA: mixer_oss: invalid OSS volume '' [ 261.927405][ T9681] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 262.313180][ T9685] ata1.00: invalid command format 189 [ 264.372967][ T9713] loop7: detected capacity change from 0 to 16384 [ 266.975625][ T9760] random: crng reseeded on system resumption [ 267.444853][ T9788] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 267.446750][ T9788] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 267.450655][ T9788] vhci_hcd vhci_hcd.0: Device attached [ 267.633849][ T6161] vhci_hcd: vhci_device speed not set [ 267.693820][ T6161] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 268.597462][ T9812] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 268.852228][ T9842] netlink: 32 bytes leftover after parsing attributes in process `syz.0.884'. [ 269.041666][ T9856] overlayfs: failed to resolve './file1': -2 [ 269.053853][ T9807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.077607][ T9852] syz.0.885 (9852): drop_caches: 2 [ 269.081456][ T9852] syz.0.885 (9852): drop_caches: 2 [ 269.108872][ T9856] syz.0.885 (9856): drop_caches: 2 [ 269.110513][ T9856] syz.0.885 (9856): drop_caches: 2 [ 269.344385][ T9789] vhci_hcd: connection reset by peer [ 269.349229][ T11] vhci_hcd: stop threads [ 269.358183][ T11] vhci_hcd: release socket [ 269.363411][ T11] vhci_hcd: disconnect device [ 270.322754][ T9871] loop9: detected capacity change from 0 to 6 [ 270.325773][ T9871] Dev loop9: unable to read RDB block 6 [ 270.327327][ T9871] loop9: unable to read partition table [ 270.333350][ T9871] loop9: partition table beyond EOD, truncated [ 270.335111][ T9871] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 270.335111][ T9871] ) failed (rc=-5) [ 270.561605][ T9879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.890'. [ 270.958463][ T30] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [syz1] on syz1 [ 271.040756][ T9884] input input17: cannot allocate more than FF_MAX_EFFECTS effects [ 272.059450][ T9893] netlink: 56 bytes leftover after parsing attributes in process `syz.3.893'. [ 272.302932][ T9901] 9pnet_fd: Insufficient options for proto=fd [ 272.803845][ T6161] vhci_hcd: vhci_device speed not set [ 274.410685][ T9927] overlayfs: failed to resolve './file1': -2 [ 275.795026][ T9941] random: crng reseeded on system resumption [ 276.581064][ T9951] netlink: 56 bytes leftover after parsing attributes in process `syz.2.906'. [ 278.692382][ T9980] 9pnet_fd: Insufficient options for proto=fd [ 279.087784][ T9987] ata1.00: invalid command format 189 [ 280.234291][ T79] tipc: Subscription rejected, illegal request [ 281.317908][T10022] netlink: 56 bytes leftover after parsing attributes in process `syz.0.918'. [ 281.521360][T10031] netlink: 24 bytes leftover after parsing attributes in process `syz.3.921'. [ 281.530850][T10031] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 281.533518][T10031] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 282.484457][T10042] netlink: 'syz.2.923': attribute type 10 has an invalid length. [ 282.532643][T10042] team0: Port device netdevsim0 added [ 282.539774][T10045] netlink: 'syz.2.923': attribute type 10 has an invalid length. [ 282.555247][T10045] team0: Port device netdevsim0 removed [ 282.558321][T10045] : (slave netdevsim0): Enslaving as an active interface with an up link [ 283.094423][T10044] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.097657][T10044] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.100024][T10044] bridge0: entered allmulticast mode [ 283.154819][T10046] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.156842][T10046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.159539][T10046] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.162123][T10046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.169230][T10046] bridge0: entered promiscuous mode [ 284.363771][ T6161] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 284.516795][ T6161] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 284.518788][ T6161] usb 5-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 284.521241][ T6161] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 284.523238][ T6161] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 284.525773][ T6161] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 284.529596][ T6161] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 284.531753][ T6161] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 284.533546][ T6161] usb 5-1: Product: syz [ 284.534600][ T6161] usb 5-1: Manufacturer: syz [ 284.539316][T10065] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 284.541575][ T6161] cdc_wdm 5-1:1.0: skipping garbage [ 284.543036][ T6161] cdc_wdm 5-1:1.0: skipping garbage [ 284.544999][ T6161] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 284.546300][ T6161] cdc_wdm 5-1:1.0: Unknown control protocol [ 284.745931][ T6161] usb 5-1: USB disconnect, device number 8 [ 285.150749][T10080] syz.1.932: attempt to access beyond end of device [ 285.150749][T10080] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 285.155550][T10080] syz.1.932: attempt to access beyond end of device [ 285.155550][T10080] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 285.160519][T10080] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 285.165757][T10080] syz.1.932: attempt to access beyond end of device [ 285.165757][T10080] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 285.170408][T10080] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 285.174183][T10080] syz.1.932: attempt to access beyond end of device [ 285.174183][T10080] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 285.177583][T10080] syz.1.932: attempt to access beyond end of device [ 285.177583][T10080] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 285.181084][T10080] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 285.183631][T10080] syz.1.932: attempt to access beyond end of device [ 285.183631][T10080] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 285.187699][T10080] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 285.191620][T10080] syz.1.932: attempt to access beyond end of device [ 285.191620][T10080] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 285.198249][T10080] syz.1.932: attempt to access beyond end of device [ 285.198249][T10080] nbd1: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 285.203006][T10080] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 285.206617][T10080] syz.1.932: attempt to access beyond end of device [ 285.206617][T10080] nbd1: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 285.211317][T10080] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 285.214913][T10080] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 285.231288][T10079] block nbd1: shutting down sockets [ 287.165207][T10105] bridge_slave_0: left allmulticast mode [ 287.167278][T10105] bridge_slave_0: left promiscuous mode [ 287.169366][T10105] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.176260][T10105] bridge_slave_1: left allmulticast mode [ 287.178251][T10105] bridge_slave_1: left promiscuous mode [ 287.180311][T10105] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.187670][T10105] : (slave bond_slave_0): Releasing backup interface [ 287.191600][T10105] : (slave bond_slave_1): Releasing backup interface [ 287.201350][T10105] team0: Port device team_slave_0 removed [ 287.207254][T10105] team0: Port device team_slave_1 removed [ 287.209232][T10105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.211963][T10105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.214154][T10105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.220919][T10105] bond1: (slave ip6gretap1): Releasing active interface [ 287.222759][T10105] ip6gretap1: left promiscuous mode [ 287.224377][T10105] ip6gretap1: left allmulticast mode [ 287.703810][T10120] nbd3: detected capacity change from 0 to 20 [ 287.712094][T10120] block nbd3: Send control failed (result -89) [ 287.713915][T10119] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 287.715552][T10120] block nbd3: Request send failed, requeueing [ 287.716322][T10119] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 287.721256][T10119] vhci_hcd vhci_hcd.0: Device attached [ 287.724081][ T5959] block nbd3: Receive control failed (result -32) [ 287.729685][ T1272] block nbd3: Dead connection, failed to find a fallback [ 287.732392][ T1272] block nbd3: shutting down sockets [ 287.735217][ T1272] blk_print_req_error: 32 callbacks suppressed [ 287.735232][ T1272] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 287.739592][ T1272] buffer_io_error: 27 callbacks suppressed [ 287.739601][ T1272] Buffer I/O error on dev nbd3, logical block 0, async page read [ 287.748544][T10120] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 287.754962][T10120] Buffer I/O error on dev nbd3, logical block 0, async page read [ 287.757467][T10120] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 287.759820][T10120] Buffer I/O error on dev nbd3, logical block 0, async page read [ 287.761903][T10120] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 287.765095][T10120] Buffer I/O error on dev nbd3, logical block 0, async page read [ 287.767426][T10120] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 287.770675][T10120] Buffer I/O error on dev nbd3, logical block 0, async page read [ 287.773621][T10120] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 287.778803][T10120] Buffer I/O error on dev nbd3, logical block 0, async page read [ 287.782505][T10120] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 287.786578][T10120] Buffer I/O error on dev nbd3, logical block 0, async page read [ 287.789335][T10120] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 287.791588][T10120] Buffer I/O error on dev nbd3, logical block 0, async page read [ 287.794263][T10120] ldm_validate_partition_table(): Disk read failed. [ 287.796816][T10120] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 287.799149][T10120] Buffer I/O error on dev nbd3, logical block 0, async page read [ 287.800954][T10120] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 287.803169][T10120] Buffer I/O error on dev nbd3, logical block 0, async page read [ 287.806453][T10120] Dev nbd3: unable to read RDB block 0 [ 287.810000][T10120] nbd3: unable to read partition table [ 287.812080][T10120] nbd3: partition table beyond EOD, truncated [ 287.817545][T10120] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 287.821089][T10120] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=9, location=9 [ 287.823056][T10067] ldm_validate_partition_table(): Disk read failed. [ 287.824471][T10120] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8, location=8 [ 287.829444][T10120] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=7, location=7 [ 287.830965][T10067] Dev nbd3: unable to read RDB block 0 [ 287.832795][T10120] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 287.835565][T10067] nbd3: unable to read partition table [ 287.838328][T10120] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 287.840122][T10067] nbd3: partition table beyond EOD, truncated [ 287.843159][T10120] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=4, location=4 [ 287.848802][T10120] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=3, location=3 [ 287.851834][T10120] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=2, location=2 [ 287.854992][T10120] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 287.856245][T10067] ldm_validate_partition_table(): Disk read failed. [ 287.858248][T10120] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 287.860717][T10067] Dev nbd3: unable to read RDB block 0 [ 287.863330][T10120] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=1, location=1 [ 287.865317][T10067] nbd3: unable to read partition table [ 287.868047][T10120] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=0, location=0 [ 287.869860][T10067] nbd3: partition table beyond EOD, [ 287.872680][T10120] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 287.874731][T10067] truncated [ 287.877508][T10120] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 287.914765][ T25] vhci_hcd: vhci_device speed not set [ 287.976779][ T25] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 288.002468][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 288.002483][ T40] audit: type=1326 audit(1732327812.914:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10104 comm="syz.1.938" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7fc00000 [ 288.609950][T10133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.943'. [ 288.613177][T10133] netlink: 56 bytes leftover after parsing attributes in process `syz.2.943'. [ 289.036780][T10142] netlink: 'syz.3.945': attribute type 10 has an invalid length. [ 289.091165][T10143] netlink: 'syz.3.945': attribute type 10 has an invalid length. [ 289.095214][T10143] netlink: 2 bytes leftover after parsing attributes in process `syz.3.945'. [ 289.100827][T10121] vhci_hcd: connection reset by peer [ 289.106263][ T1137] vhci_hcd: stop threads [ 289.112371][ T1137] vhci_hcd: release socket [ 289.115087][ T1137] vhci_hcd: disconnect device [ 289.124428][T10142] batman_adv: batadv0: Adding interface: team0 [ 289.134725][T10142] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.152435][T10142] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 289.169539][T10143] team0: entered promiscuous mode [ 289.171612][T10143] team_slave_0: entered promiscuous mode [ 289.174121][T10143] team_slave_1: entered promiscuous mode [ 289.177859][T10143] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.181154][T10143] batman_adv: batadv0: Interface activated: team0 [ 289.183598][T10143] batman_adv: batadv0: Interface deactivated: team0 [ 289.186017][T10143] batman_adv: batadv0: Removing interface: team0 [ 289.191761][T10143] bridge0: port 3(team0) entered blocking state [ 289.193645][T10143] bridge0: port 3(team0) entered disabled state [ 289.195633][T10143] team0: entered allmulticast mode [ 289.197274][T10143] team_slave_0: entered allmulticast mode [ 289.198856][T10143] team_slave_1: entered allmulticast mode [ 289.202523][T10143] bridge0: port 3(team0) entered blocking state [ 289.205035][T10143] bridge0: port 3(team0) entered forwarding state [ 290.064982][T10153] syz.2.949: attempt to access beyond end of device [ 290.064982][T10153] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 290.068575][T10153] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 290.071196][T10153] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 290.074539][T10153] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 290.077305][T10153] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 290.080170][T10153] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 290.082773][T10153] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 290.085763][T10153] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 290.088345][T10153] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 290.090876][T10153] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 290.728681][T10163] input: syz1 as /devices/virtual/input/input20 [ 291.041421][T10165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.952'. [ 291.052601][T10165] netlink: 44 bytes leftover after parsing attributes in process `syz.1.952'. [ 291.518960][T10175] xt_cluster: node mask cannot exceed total number of nodes [ 292.784520][T10189] bio_check_eod: 11 callbacks suppressed [ 292.784532][T10189] syz.3.958: attempt to access beyond end of device [ 292.784532][T10189] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 292.790839][T10189] syz.3.958: attempt to access beyond end of device [ 292.790839][T10189] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 292.794737][T10189] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 292.797631][T10189] syz.3.958: attempt to access beyond end of device [ 292.797631][T10189] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 292.801281][T10189] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 292.805581][T10189] syz.3.958: attempt to access beyond end of device [ 292.805581][T10189] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 292.810125][T10189] syz.3.958: attempt to access beyond end of device [ 292.810125][T10189] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 292.813942][T10189] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 292.816908][T10189] syz.3.958: attempt to access beyond end of device [ 292.816908][T10189] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 292.820952][T10189] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 292.827922][T10189] syz.3.958: attempt to access beyond end of device [ 292.827922][T10189] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 292.836938][T10189] syz.3.958: attempt to access beyond end of device [ 292.836938][T10189] nbd3: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 292.841750][T10189] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 292.849692][T10189] syz.3.958: attempt to access beyond end of device [ 292.849692][T10189] nbd3: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 292.854249][T10189] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 292.857236][T10189] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 293.123940][ T25] vhci_hcd: vhci_device speed not set [ 293.613864][T10203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.962'. [ 293.620189][T10203] netlink: 44 bytes leftover after parsing attributes in process `syz.3.962'. [ 294.265489][T10212] unsupported nlmsg_type 40 [ 294.805270][T10212] orangefs_mount: mount request failed with -4 [ 294.883397][T10219] syz.0.965: attempt to access beyond end of device [ 294.883397][T10219] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 294.890130][T10219] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 294.895168][T10219] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 294.899753][T10219] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 294.908261][T10219] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 294.912041][T10219] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 294.919672][T10219] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 294.923189][T10219] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 294.940153][T10217] block nbd0: shutting down sockets [ 295.043869][T10223] input: syz1 as /devices/virtual/input/input21 [ 295.197480][T10226] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 295.201038][T10226] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 295.206011][T10226] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 295.209774][T10226] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 295.213537][T10226] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 295.219065][T10226] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 295.222560][T10226] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 295.692106][ T79] Bluetooth: hci4: Frame reassembly failed (-84) [ 297.613861][ T5959] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 298.013457][T10269] bio_check_eod: 17 callbacks suppressed [ 298.013469][T10269] syz.1.976: attempt to access beyond end of device [ 298.013469][T10269] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 298.019938][T10265] nbd1: detected capacity change from 0 to 20 [ 298.022460][T10269] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 298.026350][T10269] block nbd1: Send control failed (result -89) [ 298.029236][T10269] block nbd1: Request send failed, requeueing [ 298.033390][ T5959] block nbd1: Receive control failed (result -32) [ 298.040390][ T1272] block nbd1: Dead connection, failed to find a fallback [ 298.043681][ T1272] block nbd1: shutting down sockets [ 298.045933][ T1272] blk_print_req_error: 101 callbacks suppressed [ 298.045945][ T1272] I/O error, dev nbd1, sector 18 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 298.053358][T10269] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=9, location=9 [ 298.057130][T10269] I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 298.060909][T10269] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8, location=8 [ 298.064777][T10269] I/O error, dev nbd1, sector 14 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 298.068254][T10269] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=7, location=7 [ 298.071782][T10269] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 298.076357][T10269] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 298.080291][T10269] I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 298.084027][T10269] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=4, location=4 [ 298.087575][T10269] I/O error, dev nbd1, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 298.091052][T10269] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=3, location=3 [ 298.105128][T10269] I/O error, dev nbd1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 298.108662][T10269] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=2, location=2 [ 298.113486][T10269] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 298.120201][T10269] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 298.124784][T10269] I/O error, dev nbd1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 298.129409][T10269] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1, location=1 [ 298.134347][T10269] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 298.140360][T10269] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=0, location=0 [ 298.143015][T10269] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 298.146691][T10269] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 298.242558][T10067] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 298.245393][T10067] buffer_io_error: 93 callbacks suppressed [ 298.245400][T10067] Buffer I/O error on dev nbd1, logical block 0, async page read [ 298.249588][T10067] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 298.252434][T10067] Buffer I/O error on dev nbd1, logical block 0, async page read [ 298.255481][T10067] Buffer I/O error on dev nbd1, logical block 0, async page read [ 298.258076][T10067] Buffer I/O error on dev nbd1, logical block 0, async page read [ 298.260704][T10067] Buffer I/O error on dev nbd1, logical block 0, async page read [ 298.263319][T10067] Buffer I/O error on dev nbd1, logical block 0, async page read [ 298.266194][T10067] Buffer I/O error on dev nbd1, logical block 0, async page read [ 298.268926][T10067] Buffer I/O error on dev nbd1, logical block 0, async page read [ 298.271567][T10067] ldm_validate_partition_table(): Disk read failed. [ 298.274206][T10067] Buffer I/O error on dev nbd1, logical block 0, async page read [ 298.277025][T10067] Buffer I/O error on dev nbd1, logical block 0, async page read [ 298.279777][T10067] Dev nbd1: unable to read RDB block 0 [ 298.281805][T10067] nbd1: unable to read partition table [ 298.283869][T10067] nbd1: partition table beyond EOD, truncated [ 298.309281][T10067] ldm_validate_partition_table(): Disk read failed. [ 298.311242][T10067] Dev nbd1: unable to read RDB block 0 [ 298.319868][T10067] nbd1: unable to read partition table [ 298.321438][T10067] nbd1: partition table beyond EOD, truncated [ 298.850045][T10281] input: syz1 as /devices/virtual/input/input22 [ 299.114642][T10283] [ 299.115265][T10283] ====================================================== [ 299.117021][T10283] WARNING: possible circular locking dependency detected [ 299.118845][T10283] 6.12.0-syzkaller-07834-g06afb0f36106 #0 Not tainted [ 299.121677][T10283] ------------------------------------------------------ [ 299.125301][T10283] syz.3.981/10283 is trying to acquire lock: [ 299.126873][T10283] ffff888024098fa0 (&q->sysfs_lock){+.+.}-{4:4}, at: __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 299.129586][T10283] [ 299.129586][T10283] but task is already holding lock: [ 299.131578][T10283] ffff888024098a70 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x1460 [ 299.134525][T10283] [ 299.134525][T10283] which lock already depends on the new lock. [ 299.134525][T10283] [ 299.137189][T10283] [ 299.137189][T10283] the existing dependency chain (in reverse order) is: [ 299.139498][T10283] [ 299.139498][T10283] -> #4 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 299.141726][T10283] blk_mq_submit_bio+0x1fb6/0x24c0 [ 299.143184][T10283] __submit_bio+0x384/0x540 [ 299.144503][T10283] submit_bio_noacct_nocheck+0x698/0xd70 [ 299.146092][T10283] submit_bio_noacct+0x93a/0x1e20 [ 299.147527][T10283] mpage_readahead+0x41d/0x590 [ 299.148912][T10283] read_pages+0x1a8/0xdc0 [ 299.150206][T10283] page_cache_ra_unbounded+0x3c0/0x6c0 [ 299.151748][T10283] force_page_cache_ra+0x24b/0x340 [ 299.153291][T10283] page_cache_sync_ra+0x110/0x9c0 [ 299.154744][T10283] filemap_get_pages+0xd7b/0x1be0 [ 299.156206][T10283] filemap_read+0x3ca/0xd70 [ 299.157544][T10283] blkdev_read_iter+0x187/0x480 [ 299.158963][T10283] vfs_read+0x87f/0xbe0 [ 299.160210][T10283] ksys_read+0x12b/0x250 [ 299.161480][T10283] do_syscall_64+0xcd/0x250 [ 299.162835][T10283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.164605][T10283] [ 299.164605][T10283] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}: [ 299.166954][T10283] down_read+0x9a/0x330 [ 299.168256][T10283] page_cache_ra_unbounded+0x173/0x6c0 [ 299.169837][T10283] page_cache_ra_order+0x7d9/0xc90 [ 299.171315][T10283] filemap_fault+0x1497/0x2820 [ 299.172719][T10283] __do_fault+0x10a/0x490 [ 299.174002][T10283] do_pte_missing+0x9a7/0x3e70 [ 299.175380][T10283] __handle_mm_fault+0x100a/0x2a10 [ 299.176874][T10283] handle_mm_fault+0x3fa/0xaa0 [ 299.178236][T10283] __get_user_pages+0x8d9/0x3b50 [ 299.179663][T10283] __gup_longterm_locked+0x5ff/0x1870 [ 299.181250][T10283] pin_user_pages+0x13f/0x160 [ 299.182636][T10283] xdp_umem_create+0x73c/0x1270 [ 299.184048][T10283] xsk_setsockopt+0x7e7/0xac0 [ 299.185423][T10283] do_sock_setsockopt+0x222/0x480 [ 299.186875][T10283] __sys_setsockopt+0x1a0/0x230 [ 299.188291][T10283] __ia32_sys_setsockopt+0xbc/0x160 [ 299.189790][T10283] __do_fast_syscall_32+0x73/0x120 [ 299.191331][T10283] do_fast_syscall_32+0x32/0x80 [ 299.192759][T10283] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 299.194534][T10283] [ 299.194534][T10283] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 299.196516][T10283] __might_fault+0x11b/0x190 [ 299.197851][T10283] _copy_from_user+0x29/0xd0 [ 299.199185][T10283] __blk_trace_setup+0xa8/0x180 [ 299.200599][T10283] blk_trace_setup+0x47/0x70 [ 299.201938][T10283] sg_ioctl+0x7a3/0x26b0 [ 299.203198][T10283] compat_ptr_ioctl+0x6b/0xa0 [ 299.204567][T10283] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 299.206085][T10283] __do_fast_syscall_32+0x73/0x120 [ 299.207561][T10283] do_fast_syscall_32+0x32/0x80 [ 299.208962][T10283] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 299.210744][T10283] [ 299.210744][T10283] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 299.212771][T10283] __mutex_lock+0x19b/0xa60 [ 299.214090][T10283] blk_register_queue+0x13c/0x550 [ 299.215545][T10283] add_disk_fwnode+0x785/0x1300 [ 299.216961][T10283] brd_alloc.isra.0+0x50a/0x7c0 [ 299.218372][T10283] brd_init+0x12b/0x1d0 [ 299.219607][T10283] do_one_initcall+0x128/0x630 [ 299.221010][T10283] kernel_init_freeable+0x58f/0x8b0 [ 299.222753][T10283] kernel_init+0x1c/0x2b0 [ 299.224161][T10283] ret_from_fork+0x45/0x80 [ 299.225504][T10283] ret_from_fork_asm+0x1a/0x30 [ 299.226924][T10283] [ 299.226924][T10283] -> #0 (&q->sysfs_lock){+.+.}-{4:4}: [ 299.228964][T10283] __lock_acquire+0x249e/0x3c40 [ 299.230395][T10283] lock_acquire.part.0+0x11b/0x380 [ 299.231871][T10283] __mutex_lock+0x19b/0xa60 [ 299.233188][T10283] __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 299.234880][T10283] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 299.236479][T10283] nbd_start_device+0x15b/0xd70 [ 299.237898][T10283] nbd_ioctl+0x21a/0xfd0 [ 299.239163][T10283] compat_blkdev_ioctl+0x2f7/0x750 [ 299.240674][T10283] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 299.242203][T10283] __do_fast_syscall_32+0x73/0x120 [ 299.243672][T10283] do_fast_syscall_32+0x32/0x80 [ 299.245094][T10283] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 299.246879][T10283] [ 299.246879][T10283] other info that might help us debug this: [ 299.246879][T10283] [ 299.249534][T10283] Chain exists of: [ 299.249534][T10283] &q->sysfs_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#52 [ 299.249534][T10283] [ 299.253576][T10283] Possible unsafe locking scenario: [ 299.253576][T10283] [ 299.255518][T10283] CPU0 CPU1 [ 299.256923][T10283] ---- ---- [ 299.258314][T10283] lock(&q->q_usage_counter(io)#52); [ 299.259739][T10283] lock(mapping.invalidate_lock#2); [ 299.261815][T10283] lock(&q->q_usage_counter(io)#52); [ 299.263887][T10283] lock(&q->sysfs_lock); [ 299.265027][T10283] [ 299.265027][T10283] *** DEADLOCK *** [ 299.265027][T10283] [ 299.267128][T10283] 4 locks held by syz.3.981/10283: [ 299.268480][T10283] #0: ffff8880240b2198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x151/0xfd0 [ 299.271033][T10283] #1: ffff8880240b20d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x20/0x40 [ 299.273875][T10283] #2: ffff888024098a70 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x1460 [ 299.277068][T10283] #3: ffff888024098aa8 (&q->q_usage_counter(queue)#36){+.+.}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x1460 [ 299.280224][T10283] [ 299.280224][T10283] stack backtrace: [ 299.281799][T10283] CPU: 2 UID: 0 PID: 10283 Comm: syz.3.981 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 299.284461][T10283] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 299.287245][T10283] Call Trace: [ 299.288146][T10283] [ 299.288940][T10283] dump_stack_lvl+0x116/0x1f0 [ 299.290214][T10283] print_circular_bug+0x41c/0x610 [ 299.291558][T10283] check_noncircular+0x31a/0x400 [ 299.293404][T10283] ? __pfx_check_noncircular+0x10/0x10 [ 299.294910][T10283] ? save_trace+0x42/0xa10 [ 299.296163][T10283] ? add_lock_to_list+0x17d/0x390 [ 299.297530][T10283] __lock_acquire+0x249e/0x3c40 [ 299.298843][T10283] ? __pfx___lock_acquire+0x10/0x10 [ 299.300375][T10283] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 299.301999][T10283] ? stack_depot_save_flags+0x31b/0x900 [ 299.303656][T10283] lock_acquire.part.0+0x11b/0x380 [ 299.305200][T10283] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 299.306921][T10283] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 299.308451][T10283] ? rcu_is_watching+0x12/0xc0 [ 299.309750][T10283] ? trace_lock_acquire+0x146/0x1e0 [ 299.311135][T10283] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 299.312805][T10283] ? lock_acquire+0x2f/0xb0 [ 299.314037][T10283] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 299.315675][T10283] __mutex_lock+0x19b/0xa60 [ 299.316948][T10283] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 299.318663][T10283] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 299.320483][T10283] ? __pfx___mutex_lock+0x10/0x10 [ 299.321967][T10283] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 299.323695][T10283] __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 299.325372][T10283] ? lock_acquire.part.0+0x11b/0x380 [ 299.326782][T10283] ? __mutex_trylock_common+0xea/0x250 [ 299.328267][T10283] ? __pfx___mutex_trylock_common+0x10/0x10 [ 299.329805][T10283] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 299.331345][T10283] ? rcu_is_watching+0x12/0xc0 [ 299.332661][T10283] ? __pfx___blk_mq_update_nr_hw_queues+0x10/0x10 [ 299.334602][T10283] ? __pfx___mutex_trylock_common+0x10/0x10 [ 299.336215][T10283] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 299.337748][T10283] ? __pfx___mutex_lock+0x10/0x10 [ 299.339103][T10283] ? trace_contention_end+0xea/0x140 [ 299.340526][T10283] ? __mutex_lock+0x1cc/0xa60 [ 299.341919][T10283] ? nbd_ioctl+0x151/0xfd0 [ 299.343135][T10283] ? __pfx___mutex_lock+0x10/0x10 [ 299.344535][T10283] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 299.346060][T10283] nbd_start_device+0x15b/0xd70 [ 299.348095][T10283] ? bpf_lsm_capable+0x9/0x10 [ 299.349691][T10283] nbd_ioctl+0x21a/0xfd0 [ 299.351057][T10283] ? __pfx_nbd_ioctl+0x10/0x10 [ 299.352449][T10283] ? __pfx_lock_release+0x10/0x10 [ 299.353854][T10283] ? trace_lock_acquire+0x146/0x1e0 [ 299.355275][T10283] ? __pfx_nbd_ioctl+0x10/0x10 [ 299.356603][T10283] compat_blkdev_ioctl+0x2f7/0x750 [ 299.358011][T10283] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 299.359550][T10283] ? __fget_files+0x206/0x3a0 [ 299.360849][T10283] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 299.362356][T10283] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 299.363852][T10283] __do_fast_syscall_32+0x73/0x120 [ 299.365243][T10283] do_fast_syscall_32+0x32/0x80 [ 299.366576][T10283] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 299.368337][T10283] RIP: 0023:0xf7fb4579 [ 299.369449][T10283] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 299.374618][T10283] RSP: 002b:00000000f513655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 299.376875][T10283] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ab03 [ 299.379018][T10283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 299.381205][T10283] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 299.383418][T10283] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 299.386225][T10283] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 299.388497][T10283] [ 299.395593][T10285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.983'. [ 299.399369][T10285] netlink: 44 bytes leftover after parsing attributes in process `syz.0.983'. [ 299.722291][ T5964] block nbd3: Receive control failed (result -32) [ 299.722301][ T5959] block nbd3: Receive control failed (result -32) [ 299.722384][ T5951] block nbd3: Receive control failed (result -32) [ 299.729205][T10283] block nbd3: shutting down sockets VM DIAGNOSIS: 02:10:24 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000007 RBX=ffff888022f58000 RCX=1ffff110044bd939 RDX=0000000000000124 RSI=ffff888022f58000 RDI=ffff888022f58080 RBP=000000000000020e RSP=ffffc9000072fb18 R8 =ffff888022f5809c R9 =0000000000000124 R10=0000000000000000 R11=0000000000000000 R12=0000000000000009 R13=0000000000000000 R14=0000000000000009 R15=0000000000000001 RIP=ffffffff816505dd RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020ac2000 CR3=000000002839e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000018800000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000010bb70b RBX=0000000000000001 RCX=ffffffff8b159f99 RDX=0000000000000000 RSI=ffffffff8b4cd3c0 RDI=ffffffff8bb05d60 RBP=ffffed1003772910 RSP=ffffc90000477e08 R8 =0000000000000001 R9 =ffffed10056a6fed R10=ffff88802b537f6b R11=0000000000000000 R12=0000000000000001 R13=ffff88801bb94880 R14=ffffffff901cda10 R15=0000000000000000 RIP=ffffffff8b15b37f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020871000 CR3=000000002839e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000c400000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fee6f5 RDI=ffffffff9a656460 RBP=ffffffff9a656420 RSP=ffffc900046f7000 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000030 R14=ffffffff84fee690 R15=0000000000000000 RIP=ffffffff84fee71f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000056bb699c CR3=0000000068284000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000018800000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000071763c RBX=0000000000000003 RCX=ffffffff8b159f99 RDX=ffffed10056e6fee RSI=ffffffff8bb05ce0 RDI=ffffffff81646059 RBP=ffffed1003775488 RSP=ffffc90000497dd8 R8 =0000000000000000 R9 =ffffed10056e6fed R10=ffff88802b737f6b R11=0000000000000001 R12=0000000000000003 R13=ffff88801bbaa440 R14=ffffffff901cda10 R15=0000000000000000 RIP=ffffffff8b2014b0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002ed01ff8 CR3=00000000516ac000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000