last executing test programs: 7.654056619s ago: executing program 2 (id=733): syz_open_dev$sndctrl(&(0x7f0000000380), 0x1ff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0x3, 0x0) r1 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r1], 0x2b) sendfile(r3, r1, 0x0, 0x4000000053d2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x15) writev(r6, &(0x7f0000000280)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025", 0x1d}, {&(0x7f0000000580)="fa21bd2b5c40cc420740358ffc7f9f4b6e68fc8d1aa2597e7b484f301f11e35f22", 0x21}], 0x2) r7 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r7, 0x110, 0x1, &(0x7f0000000300)='GPL\x00', 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="182000000000000000000000000000001801000020603bcba5b1b6b9e9e2fb1a7e702500000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe3e64c6be2492c0f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x4a01, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) 6.670856839s ago: executing program 1 (id=738): syz_emit_ethernet(0x482, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0) openat$rtc(0xffffff9c, 0x0, 0x8103, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @sliced={0x4, [0xa004, 0xfffb, 0x2, 0x20, 0x9, 0x1ff, 0x4, 0xcb79, 0x1000, 0x2, 0x2, 0xc6, 0x7fff, 0xf, 0x1, 0x0, 0x5, 0x0, 0x8, 0x7, 0x5, 0xfffc, 0xd, 0xc, 0x8000, 0x3ff, 0x100, 0x7, 0x2, 0xc, 0x325, 0x8001, 0xf801, 0x8000, 0x72, 0x0, 0xf, 0x1, 0xa, 0xfe01, 0xd6c, 0x3, 0x0, 0x3, 0x8, 0xffff, 0x2, 0xfff9], 0x9}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x81) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000180)=0x800081, 0x4) openat$uinput(0xffffff9c, &(0x7f0000000040), 0x802, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = openat$nmem0(0xffffff9c, &(0x7f0000000040), 0xc2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$RTC_UIE_OFF(r1, 0x7004) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000003080)={0x1, 0x34, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) mmap$KVM_VCPU(&(0x7f00007fd000/0x800000)=nil, 0x0, 0x3, 0x40010, 0xffffffffffffffff, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0186405, &(0x7f0000000000)={0x6, 0x2, {0xffffffffffffffff}, {}, 0x2, 0x8}) capget(&(0x7f00000000c0)={0x19980330, r4}, &(0x7f0000000100)={0xa, 0x8, 0xffff0000, 0x4, 0x7, 0x9}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) 6.591724202s ago: executing program 1 (id=739): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='sched\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39011, 0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r2) r4 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r3, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_I_TEI={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x5}, @GTPA_FAMILY={0x5, 0xd, 0xf}, @GTPA_PEER_ADDR6={0x14, 0xb, @private2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x4040005) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$lock(r5, 0x26, &(0x7f0000000200)={0x0, 0x1, 0x1fbb, 0x10000}) writev(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1) openat$kvm(0xffffff9c, &(0x7f0000000400), 0x4400, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000040), &(0x7f0000000100)=0x8) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="e000000013000100000000000000000063626328626c6f77666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dd00"/224], 0xe0}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r8, 0x0, 0x82, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0x8001, 0x0, 0xba2, 0x0, 0x0, 0x2]}, &(0x7f0000000080)=0x50) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc0405602, &(0x7f0000000500)=@multiplanar_userptr={0xffffffff, 0x1, 0x4, 0x10000, 0x0, {}, {}, 0x0, 0x100c, {0x0}}) prctl$PR_MCE_KILL(0x4e, 0x1, 0x40000000) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x5}, &(0x7f0000000100)=0x8) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$sock_buf(r10, 0x1, 0x1c, 0x0, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={r9, 0x9, 0x100, 0x0, 0xfffffffb, 0xffffffff}, &(0x7f0000000200)=0x14) 6.582837506s ago: executing program 2 (id=740): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r4, 0x239, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 4.083913098s ago: executing program 3 (id=745): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') pwritev(r0, 0x0, 0x0, 0xb, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000040)=0x6) syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0x22) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x14, 0x2c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) getpeername(r2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x3}, @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_PMK={0x14, 0xfe, "6730c485000000000000000600"}]}, 0x3c}}, 0x22044800) r5 = open(&(0x7f0000000000)='./file0\x00', 0x100, 0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r7}, 0x18) r8 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000100}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0x114, r9, 0x4, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x114}, 0x1, 0x0, 0x0, 0x4004}, 0x40040) close(r8) openat$uinput(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000100)) 3.942554135s ago: executing program 3 (id=746): socket$unix(0x1, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) socket(0x2, 0x5, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) epoll_create(0x1) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x100}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xfff3}}}, 0x24}}, 0x4008000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000040)="25a688a800a34400000000000000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x34c}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 3.365292109s ago: executing program 1 (id=748): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x8845}, 0x4000) r1 = openat$sr(0xffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffc, 0x0, 0x3, @buffer={0x0, 0x29, &(0x7f0000000040)=""/41}, &(0x7f0000000200), 0x0, 0x0, 0x1, 0x1, 0x0}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r2, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_MRU={0x6}]}, 0x24}}, 0x4080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r4}}, 0x30) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r6}, 0x94) r7 = getpid() r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0xc2ddb5edb7ba9069, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200004e2400000a00006000000000", @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="0000000000000010feffffffffffffff000000400000000000000000000000001a000000000000000100000000000000feffffffffffffffa2d5000000000000afb3f60156b150f500e03df0d4908acce9ba00000000000000ff7f040000000000080000000008000001"], 0xc4}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x59}}}}}}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x711, @remote, 0xbf}, {0xa, 0x4e20, 0xfffffffe, @mcast2, 0x10001}, r4, 0x403}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x100004, 0x10001d, 0x40000}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x1, 0x8, "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", 0x0, 0x4, 0x5, 0xf, 0xd, 0x0, 0x6, 0x1}, r4}}, 0x120) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r4, 0x4}}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002d00090027bd700000000000040000000800170004"], 0x1c}, 0x1, 0x0, 0x0, 0x24008080}, 0x200c0084) 3.293576337s ago: executing program 2 (id=750): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async, rerun: 64) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async, rerun: 32) sendmmsg$inet(r1, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1, 0x0, 0x0, 0xbffe}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}], 0x1}}], 0x2, 0xf000000) (async, rerun: 32) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth0_to_hsr\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r3, 0x3, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, 0x10) (async) r4 = getuid() setreuid(0xffffffffffffffff, r4) r5 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000080)={0x1, 0x3, [{0xffffffffffffffff, 0x0, 0x1000000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffff000, 0xfffffffff0000000}]}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x11d0, 0x2b, 0xb, 0x0, 0x0, {0x8}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}, @nested={0x118c, 0x16, 0x0, 0x1, [@nested={0x12b, 0x109, 0x0, 0x1, [@typed={0x32, 0x93, 0x0, 0x0, @binary="b6f5388b597b819f9601728ded4425d4064c57adbcbb5280ba1f52f1359ff65c62b610273bb7bf469cc8e83b31cb"}, @nested={0x4, 0x116}, @generic="b3fd072745276d405d818e67c458d7f0b80b175291e009eacf5535e3629a4b5f049ca9ab97ec8b4db867e772ab46459b29cfe496c04f96bb7ae5a4f1078bd737ac270e64872701d00d5bbd230bc6b1bd6a32dbfffc2d52be3e82867e4b6319", @typed={0xc, 0x12d, 0x0, 0x0, @u64=0xe77d}, @typed={0x8, 0xc3, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0x8, 0xa7, 0x0, 0x0, @uid=r4}, @typed={0x64, 0x51, 0x0, 0x0, @binary="835873f863fe20e27115c8a48618b503638ed1c085946cc6ab8f2706a9c68afa2e0f3ac10807fbe882472f598274f3977df2517025afc9945e4fa6d9a34a0a0b4edf17da2b8e8d1cebb5b948f61c8463dd6f552a6b5ed49bffa42652b4697124"}, @nested={0x4, 0xe9}, @typed={0x8, 0x63, 0x0, 0x0, @ipv4=@private=0xa010100}, @nested={0x4, 0x136}]}, @nested={0xc, 0xaf, 0x0, 0x1, [@nested={0x4, 0x117}, @nested={0x4, 0x23}]}, @nested={0x1025, 0x107, 0x0, 0x1, [@generic="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", @generic='3', @nested={0x4, 0x59}, @typed={0xc, 0xcb, 0x0, 0x0, @u64=0x1}, @typed={0x8, 0xc2, 0x0, 0x0, @u32=0x10000}, @typed={0x8, 0x67, 0x0, 0x0, @str='\x04[]\x00'}]}, @nested={0x18, 0x12c, 0x0, 0x1, [@typed={0x8, 0xa3, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x120, 0x0, 0x0, @u32=0x5}, @nested={0x4, 0x76}]}, @typed={0x8, 0x54, 0x0, 0x0, @fd=r5}, @typed={0x8, 0x10f, 0x0, 0x0, @ipv4=@broadcast}]}, @typed={0xc, 0xb7, 0x0, 0x0, @u64=0x4}, @typed={0x14, 0x9, 0x0, 0x0, @str='rcu_utilization\x00'}]}, 0x11d0}}, 0x40) 3.228721222s ago: executing program 2 (id=751): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x2c, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [{0x8, 0xb, 0x2}]}, 0x2c}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x8040, 0x2}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x1a, 0x3, 0x7) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x240800, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000240)="dfd9", 0x2, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) r3 = socket(0x2, 0x80805, 0x0) io_setup(0x80, &(0x7f0000000440)=0x0) r5 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_submit(r4, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r5, &(0x7f0000000340)='p', 0x300}]) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x40800400, 0x2b6a41) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff55) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x3, 0x14a}}) 2.755454273s ago: executing program 3 (id=752): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) r6 = syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r6, &(0x7f0000000540)={0x18, &(0x7f0000000400)={0x20, 0xb, 0xf, {0xf, 0xe, "b2121ab6f6992a150ba0ef1f62"}}, &(0x7f0000000440)={0x0, 0x3, 0x1a, @string={0x1a, 0x3, "6ccbdd6197d583d62645033949e561a4cb332b55901bff6d"}}, &(0x7f0000000480)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x3, 0x9, 0xc0}]}}, &(0x7f00000004c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x64, 0x18, 0x5, 0xff, "487efc48", "49455690"}}, &(0x7f0000000500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x1, 0x1, 0xf6, 0x8, 0x69, 0x6}}}, &(0x7f0000000a80)={0x44, &(0x7f0000000580)={0x0, 0x4fc3af8ec7bc437c, 0xba, "d4d3293cef64a822f181243b7e6df245182cefb70cd15acb7b0b72e06bd3b1c481c50fd74ab1510f9ca6338b0f69b542e257d375c028e32f81755683a51f1123aef868d17ef9bfce1e21451408bb1a90cf8c495283f5f4c21ad81ae2f8f79d1b1c21ffefcda3b3b784c9a0941cf023b8ec374de4271a2693fc7525e864c506a50b7ab7adc3f62fbb77a483a5664e6dedfe3a533355fd72a82457bd44574996c6af6e4f43302c9ecfb40a25c98e890ff237fc6b4480dfe0cbeb85"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x1c}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x1e0, 0x11}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0xfff}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000800)={0x40, 0xb, 0x2, 'Sv'}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000880)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x17, 0x6}, &(0x7f0000000940)={0x40, 0x19, 0x2, "a27e"}, &(0x7f0000000980)={0x40, 0x1a, 0x2}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0xe6}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x2}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x600, 0x2002000, {0x0, 0x0, 0x0, r7, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x12, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}, @sadb_x_nat_t_type={0x1, 0x14, 0x8}]}, 0x90}, 0x1, 0x7}, 0x0) 2.512986091s ago: executing program 0 (id=754): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x2940, 0x2, 0x9}, 0x18) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000200)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x102, 0xe7, 0x0, 0x1, [@typed={0xd, 0x1, 0x0, 0x0, @binary="72dcce07c1ab4805e8"}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29"]}]}, 0x114}], 0x1}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff034}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) 2.474676917s ago: executing program 1 (id=755): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffedf}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x68, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x230}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x4}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x68, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x230}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x4}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2.233914301s ago: executing program 1 (id=756): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ed1}, [@call={0x85, 0x0, 0x0, 0x97}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.561130358s ago: executing program 0 (id=757): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt(r0, 0x0, 0x80000001, &(0x7f0000000500)="4fe3324c792e84d4927f2f01324d9c2ab823309c96fa2e4aa7604bbc8ebb6fbe7ea3f8147619355b0ee4650416dadbaec21c526280f3fb53f8cba9011a58", 0x3e) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@ipv4_newrule={0x30, 0x21, 0x801, 0xfffffffc, 0xfffffffc, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r4 = openat$pfkey(0xffffff9c, &(0x7f0000000480), 0x50000, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x186) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xa, 0x5, 0x65, 0x2}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f00000034c0)={0x2020}, 0x2020) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000700)={r8, &(0x7f0000000540)="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", &(0x7f0000000640)=""/31}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f00000004c0), 0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000780)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x200, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000740)='vlan0\x00', 0x0, 0xa45, 0x9c74}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010001fff29bd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f00002c0012800b00010067726574617000001c00028006000e0003000000080014003a0f0000080007006401010108000a00", @ANYRES32=r9, @ANYBLOB="6d2543bc00a047594f0edf925a916f926891a9d4bb776ec9d77b0079f07c20e8701b746ff7cda8ce7bd1377bf1f5d7ed2ab2287f86bcd1b6172468eac5b57a89f60f9ef086a7ecd6773a4b306da7122916a268edfef5f9"], 0x54}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r11}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r2) sendmsg$IPVS_CMD_DEL_SERVICE(r10, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="6d0df219", @ANYRES16=r12, @ANYBLOB="080025bd7000ffdbdf25030000000c000180060001000a00000008000400018000003000038014000600fe8000000000000000000000000000270800010001000000060007004e23000008000500e00000022c00028005000d000000000006000f000200000006000f000004000006000f0005000000080008000600000008000500020000003000028006000e004e24000014000100e000000200000000000000000000000006000b000a00000008000900ef00000008000400080000001c0002800800030000000000060002004e2200000800080005000000"], 0xe0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 1.352695291s ago: executing program 1 (id=758): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r4, 0x239, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 1.341240802s ago: executing program 2 (id=759): mkdir(&(0x7f0000000300)='./bus\x00', 0x54) mount$bind(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x1870000, 0x0) r0 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000003c0), 0x2214000, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000000)="ab660252b6f1aead18a7b80952c898a4") r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) pwritev(r3, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000080)={0x1, r3}) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x1, 0x24008094) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r6 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_ADDR_RESOLV_ENABLE={{0x6}, 0x55}}}, 0x7) syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) 1.251465128s ago: executing program 0 (id=760): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') pwritev(r0, 0x0, 0x0, 0xb, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000040)=0x6) syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0x22) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x14, 0x2c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) getpeername(r2, 0x0, &(0x7f00000000c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x3}, @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_PMK={0x14, 0xfe, "6730c485000000000000000600"}]}, 0x3c}}, 0x22044800) r5 = open(&(0x7f0000000000)='./file0\x00', 0x100, 0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r7}, 0x18) r8 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000100}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0x114, r9, 0x4, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x114}, 0x1, 0x0, 0x0, 0x4004}, 0x40040) close(r8) openat$uinput(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000100)) 1.17691583s ago: executing program 0 (id=761): r0 = creat(0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x80000021, 0x800000000004}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0) listen(0xffffffffffffffff, 0x1ad72f7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) recvfrom$l2tp(r1, 0x0, 0x0, 0x40010120, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x26) getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000180)=""/35, &(0x7f0000000240)=0x23) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, &(0x7f0000000000)=""/152, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, 0x0, 0x14) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) lseek(0xffffffffffffffff, 0x401, 0x3) bind$802154_raw(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601040000000700000000070000001400078008001140000000000800124000040c8f0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c706f7274"], 0x60}}, 0x20004000) 984.214287ms ago: executing program 3 (id=762): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0xb}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x80060, &(0x7f0000000080)={[{@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x32]}}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x18, 0x3c, 0x107, 0xfffffffc, 0x0, {0x2, 0x7c}, [@nested={0x4, 0x136}]}, 0x18}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0xb}, 0x18) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x80060, &(0x7f0000000080)={[{@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x32]}}]}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x18, 0x3c, 0x107, 0xfffffffc, 0x0, {0x2, 0x7c}, [@nested={0x4, 0x136}]}, 0x18}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async) 908.927561ms ago: executing program 3 (id=763): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x48041}, 0x8840) 908.30607ms ago: executing program 3 (id=764): setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='wg0\x00', 0x4) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0xfffffffffffffd87, 0x7, 0x3}]}}]}, 0x48}}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7, 0x6, 0x4d, 0x39cc191a, 0x5d, 0x9, 0x5, 0x6, 0x0, 0x86, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x9, 0x4c74, 0x80000000, 0x800242, 0xfffbffff, 0x9, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x8004, 0x1, 0x20000000, 0x82, 0x4, 0xffffffff, 0x6, 0x8, 0x543, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffa, 0x3, 0x0, 0x7, 0x4, 0x2f, 0xe, 0x310, 0x7b, 0x0, 0x0, 0x8, 0x4, 0x400, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xff, 0x5, 0x5, 0x5f31, 0x7, 0x0, 0x2, 0x80002, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0x8000, 0x1, 0x9, 0x9, 0x3fdf, 0x7f, 0x9, 0x5, 0x3, 0x9, 0xffffffff, 0x3, 0x1000003, 0x9, 0x8, 0x42, 0x400002], [0x6, 0x6, 0x80000001, 0x5, 0xff, 0x100, 0xffffff7f, 0x9, 0x5, 0x7fff, 0x0, 0x6, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f2, 0xfffffffd, 0x2, 0x82, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x81, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcf, 0x950bfad, 0x1000, 0xa2, 0x7, 0x9, 0xfffffff9, 0x6, 0x9, 0xbf, 0x10002, 0x3, 0x7ff, 0x800, 0x0, 0x3, 0x7ad, 0x0, 0x0, 0x1b, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x0, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0x3, 0x80ce7, 0x201ff, 0x3, 0x7, 0x5, 0x100b, 0x101, 0x10000, 0x6, 0x7ffd, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x3, 0x14c, 0x1, 0x80000006, 0x4, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xfdff, 0x3, 0x7f, 0x200, 0x9602, 0xb, 0x6, 0xffff, 0x6, 0x1, 0x10080, 0x5, 0x108, 0x30b1d693, 0x5a2b, 0xc, 0x9, 0x1, 0x6c1b, 0xfffffffc, 0x4, 0x5, 0xb1f, 0x3ff, 0x9, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {r4, 0x106a}], 0x3f, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000940)=""/124, 0x9a, 0x7c, 0x0, 0x7, 0x10000}, 0x28) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'rose0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1d, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000004000000180100002078b22afecbc106a8172b109a9d6f50c96c250000000000202020961af8ff0000e096bfa100000000000007010000f8ffffbfb702000008000000b703000005000020850000002d00faff85000000d00005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x2d, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000071400012bbd7000fbdbdf250900020073797a320000002b6ec6f70073797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x801) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setscheduler(0x0, 0x3, 0x0) r9 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r9, 0x0, &(0x7f00000002c0)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fsmount(r9, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 310.35783ms ago: executing program 2 (id=765): r0 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x300, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e77, 0x20000000, 0x94a, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) mknodat(r1, &(0x7f00000001c0)='./file0\x00', 0x1, 0x2) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="7eb8ad2e864f570bfeba3bc631102db8260669729ceb0e15f822869af02dd75876b130784e4d480c700bfbeefb82e316cb698b1920db2039668f9610182b43b8960e931762ee8bbf59e48b4b1ece282b5b0655eab1c498126d7f80cc0a44a178b8d98554129c39c062678d438b95ccfb7ae20807d3bd78115385326f508358632ef6bd8a9364ab904a6e352e82643d91d5a22a95c4975ac8e73c0f590c259149d67dc0aba0e01e8653663b584e6842cf8c7f7738d5179fdcdd9332151ab1f4bb728567ec0e3a5349b12f9d7ff92738a5f52753", @ANYRES16=r0, @ANYRES8=r0, @ANYRES16=r0, @ANYRESHEX=r5, @ANYRES8=r0, @ANYRES64=0x0, @ANYRES16=0x0], 0x2a) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="796104000000000000007e000000c94b2348dfcb03df17fc8e5c228cb3f25de83aff0ab1ebe501c8934a5c4261efc8762bb5d29ad0a1c0b52bff2eb47850b87291aa56752f12681ca03357"], 0x14}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000080), 0x3001, 0x0) ioctl$FBIOPUT_CON2FBMAP(r8, 0x4610, &(0x7f0000000180)={0x1}) ioctl$FBIOPUT_CON2FBMAP(r8, 0x4610, &(0x7f0000000040)={0x1f}) keyctl$set_timeout(0xf, 0x0, 0x1) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10b85}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10}) 96.690207ms ago: executing program 0 (id=766): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000540)=""/143, 0x8f}, {&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000200)=""/128, 0x80}, {&(0x7f0000000600)=""/200, 0xc8}, {&(0x7f0000001f00)=""/4078, 0xfee}], 0x5, 0x0, 0x0, 0xf000}, 0xc}], 0x1, 0x40010080, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) 0s ago: executing program 0 (id=767): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x700, 0x700, 0x8, 0xc, {{0x5, 0x4, 0x3, 0x4, 0x14, 0x66, 0x0, 0x8, 0x2b, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010102}}}}) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f, 0x3000}}, 0x50) mlockall(0x1) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = fsopen(&(0x7f0000000340)='pstore\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x8, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x2081c0, 0x1a3) ioctl$sock_inet_SIOCSARP(r4, 0x40806685, &(0x7f00000002c0)={{0x2, 0x4e21, @multicast2}, {0x0, @random="89a08d8ed953"}, 0x8, {0x2, 0x4e20, @private=0xa010101}, 'tunl0\x00'}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00005200060005000100000008000800", @ANYBLOB="ea"], 0x2c}}, 0x20008000) statx(r0, &(0x7f0000000180)='./file0/file0\x00', 0x1000, 0x10, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@mcast1, @in6=@mcast2, 0x4e24, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x0, 0x3b, r7, r8}, {0xb, 0x6e, 0x4, 0x0, 0x7, 0xa84, 0x4, 0x6}, {0x9, 0x0, 0x5, 0xbfc9}, 0x1000, 0x6e6bb6, 0x2, 0x1, 0x3, 0x2}, {{@in6=@remote, 0x4d5, 0x6c}, 0x2, @in=@private=0xa010100, 0x3503, 0x3, 0x3, 0x7, 0x2875d53f, 0xd, 0xde}}, 0xe4) socket$nl_generic(0x10, 0x3, 0x10) openat(r0, &(0x7f0000000000)='./file0\x00', 0x200, 0x20) membarrier(0x0, 0x0) kernel console output (not intermixed with test programs): .716517][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.750558][ T5985] Bluetooth: hci3: command tx timeout [ 47.758627][ T5976] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.826410][ T5984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.852790][ T5984] veth0_vlan: entered promiscuous mode [ 47.863386][ T5984] veth1_vlan: entered promiscuous mode [ 47.868600][ T5975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.885201][ T5976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.902712][ T5986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.906429][ T5984] veth0_macvtap: entered promiscuous mode [ 47.913357][ T5984] veth1_macvtap: entered promiscuous mode [ 47.923304][ T5975] veth0_vlan: entered promiscuous mode [ 47.938363][ T5984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.943084][ T5975] veth1_vlan: entered promiscuous mode [ 47.951315][ T5984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.965007][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.972186][ T5986] veth0_vlan: entered promiscuous mode [ 47.974141][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.976920][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.985034][ T5976] veth0_vlan: entered promiscuous mode [ 47.987019][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.002998][ T5976] veth1_vlan: entered promiscuous mode [ 48.006535][ T5975] veth0_macvtap: entered promiscuous mode [ 48.009634][ T5986] veth1_vlan: entered promiscuous mode [ 48.015428][ T5975] veth1_macvtap: entered promiscuous mode [ 48.031993][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.038484][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.058384][ T5986] veth0_macvtap: entered promiscuous mode [ 48.061490][ T1144] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.072918][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.075743][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.075751][ T1144] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.081676][ T1144] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.085407][ T5976] veth0_macvtap: entered promiscuous mode [ 48.098788][ T1144] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.104616][ T5986] veth1_macvtap: entered promiscuous mode [ 48.108220][ T5976] veth1_macvtap: entered promiscuous mode [ 48.114923][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.117818][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.126380][ T5986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.141408][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.147056][ T5986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.147573][ T5984] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.156968][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.160017][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.165468][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.180114][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.183521][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.194998][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.197792][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.206227][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.209995][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.213025][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.217507][ T1141] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.221466][ T1141] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.232176][ T1141] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.269447][ T6067] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 48.289358][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.290000][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.295902][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.297619][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.315637][ T6064] infiniband syz1: set active [ 48.319083][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.323748][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.326756][ T6064] infiniband syz1: added syz_tun [ 48.350033][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.353487][ T6064] RDS/IB: syz1: added [ 48.354967][ T6064] smc: adding ib device syz1 with port count 1 [ 48.357417][ T6064] smc: ib device syz1 port 1 has pnetid [ 48.362007][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.416856][ T6065] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.519348][ T6065] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.522768][ T6081] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5'. [ 48.575676][ T6083] Bluetooth: MGMT ver 1.23 [ 48.606533][ T6065] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.705214][ T6065] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.967738][ T6089] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 49.000480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.003808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.008639][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.011511][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 49.014992][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.018712][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.022564][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.026063][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.050455][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.073115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 49.767244][ T5985] Bluetooth: hci1: command tx timeout [ 49.769678][ T5985] Bluetooth: hci0: command tx timeout [ 49.772662][ T5985] Bluetooth: hci2: command tx timeout [ 49.830545][ T5985] Bluetooth: hci3: command tx timeout [ 50.490651][ T6141] rdma_rxe: rxe_newlink: failed to add syz_tun [ 50.633001][ T6141] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.673689][ T6142] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14'. [ 50.928184][ T6144] PID 6144 killed due to inadequate hugepage pool [ 51.045469][ T1144] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.065488][ T6150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'. [ 51.069150][ T6150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'. [ 51.074005][ T1144] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.083052][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.089099][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.200417][ T6029] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 51.371204][ T6029] usb 8-1: Using ep0 maxpacket: 32 [ 51.374867][ T6029] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 51.378246][ T6029] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 51.383436][ T6029] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 51.387982][ T6029] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 51.391899][ T6029] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 51.396232][ T6029] usb 8-1: config 0 interface 0 has no altsetting 0 [ 51.400995][ T6029] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 51.404103][ T6029] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 51.406859][ T6029] usb 8-1: Product: syz [ 51.408262][ T6029] usb 8-1: Manufacturer: syz [ 51.409766][ T6029] usb 8-1: SerialNumber: syz [ 51.413517][ T6029] usb 8-1: config 0 descriptor?? [ 51.421797][ T6029] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 51.428764][ T6029] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 51.830745][ T5985] Bluetooth: hci2: command tx timeout [ 51.830888][ T5991] Bluetooth: hci0: command tx timeout [ 51.830910][ T5339] Bluetooth: hci1: command tx timeout [ 51.910598][ T5991] Bluetooth: hci3: command tx timeout [ 52.134175][ T6158] ldusb 8-1:0.0: Couldn't submit interrupt_in_urb -90 [ 52.164392][ T6163] syz1: rxe_newlink: already configured on syz_tun [ 52.260204][ T6141] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.320793][ T6141] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.339873][ T6163] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.380826][ T6141] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.389655][ T6165] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20'. [ 52.444208][ T6163] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.516345][ T1144] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.526272][ T1144] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.533925][ T1144] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.541319][ T1144] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.565033][ T6163] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.633647][ T6163] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.911027][ T5991] Bluetooth: hci1: command tx timeout [ 53.920370][ T5991] Bluetooth: hci0: command tx timeout [ 53.920718][ T5985] Bluetooth: hci2: command tx timeout [ 53.990424][ T5985] Bluetooth: hci3: command tx timeout [ 54.028835][ T29] usb 8-1: USB disconnect, device number 2 [ 54.053904][ T29] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 54.109074][ T6185] rdma_rxe: rxe_newlink: failed to add syz_tun [ 54.288483][ T6188] netlink: 28 bytes leftover after parsing attributes in process `syz.3.23'. [ 54.303482][ T6185] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.439625][ T6185] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.528132][ T6185] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.628574][ T6185] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.707365][ T46] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.715552][ T46] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.723298][ T46] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.730201][ T46] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.957817][ T6192] rdma_rxe: rxe_newlink: failed to add syz_tun [ 55.070372][ T6061] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 55.105029][ T6192] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.143769][ T6193] netlink: 16 bytes leftover after parsing attributes in process `syz.3.26'. [ 55.173734][ T6192] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.230310][ T6061] usb 7-1: Using ep0 maxpacket: 32 [ 55.231576][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.233273][ T6061] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 55.237161][ T6061] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 55.240589][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.241231][ T6061] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 55.247134][ T6061] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 55.250404][ T6061] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 55.254449][ T6061] usb 7-1: config 0 interface 0 has no altsetting 0 [ 55.258942][ T6192] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.260512][ T6061] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 55.265288][ T6061] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 55.268124][ T6061] usb 7-1: Product: syz [ 55.269610][ T6061] usb 7-1: Manufacturer: syz [ 55.271218][ T6061] usb 7-1: SerialNumber: syz [ 55.272388][ T46] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.274474][ T6061] usb 7-1: config 0 descriptor?? [ 55.279857][ T6061] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 55.283112][ T46] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.286259][ T6061] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 55.332157][ T6192] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.397020][ T1144] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.404817][ T1144] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.412283][ T1144] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.417907][ T1144] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.590404][ T6061] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 55.960398][ T6061] usb 5-1: Using ep0 maxpacket: 32 [ 55.963280][ T6061] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 55.965806][ T6061] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 55.969155][ T6061] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 55.973127][ T6200] ldusb 7-1:0.0: Couldn't submit interrupt_in_urb -90 [ 55.975722][ T6061] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 55.979047][ T6061] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 55.983916][ T6061] usb 5-1: config 0 interface 0 has no altsetting 0 [ 55.987871][ T6061] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 55.990859][ T6061] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 55.993428][ T6061] usb 5-1: Product: syz [ 55.994725][ T6061] usb 5-1: Manufacturer: syz [ 55.996170][ T6061] usb 5-1: SerialNumber: syz [ 56.002480][ T6061] usb 5-1: config 0 descriptor?? [ 56.009148][ T6061] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 56.013410][ T6061] ldusb 5-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 56.704061][ T6207] ldusb 7-1:0.0: Couldn't submit interrupt_in_urb -90 [ 56.790363][ T6061] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 56.940396][ T6061] usb 8-1: Using ep0 maxpacket: 32 [ 56.944115][ T6061] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 56.946847][ T6061] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 56.950910][ T6061] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 56.954400][ T6061] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 56.957579][ T6061] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 56.961943][ T6061] usb 8-1: config 0 interface 0 has no altsetting 0 [ 56.965753][ T6061] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 56.968676][ T6061] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 56.971409][ T6061] usb 8-1: Product: syz [ 56.972762][ T6061] usb 8-1: Manufacturer: syz [ 56.974272][ T6061] usb 8-1: SerialNumber: syz [ 56.977027][ T6061] usb 8-1: config 0 descriptor?? [ 56.981454][ T6061] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 56.985016][ T6061] ldusb 8-1:0.0: LD USB Device #2 now attached to major 180 minor 2 [ 57.599241][ T6213] ldusb 7-1:0.0: Couldn't submit interrupt_in_urb -90 [ 57.704831][ C1] hrtimer: interrupt took 15071 ns [ 57.895021][ T60] usb 7-1: USB disconnect, device number 2 [ 57.899973][ T60] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 57.986445][ T6217] PID 6217 killed due to inadequate hugepage pool [ 58.023283][ T6223] rdma_rxe: rxe_newlink: failed to add syz_tun [ 58.199705][ T6223] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.253717][ T6223] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.313551][ T6223] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.368045][ T6223] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.401174][ T60] usb 5-1: USB disconnect, device number 2 [ 58.413557][ T60] ldusb 5-1:0.0: LD USB Device #1 now disconnected [ 58.488736][ T6229] PID 6229 killed due to inadequate hugepage pool [ 58.697472][ T46] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.703580][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.710008][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.717013][ T46] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.877275][ T6243] netlink: 52 bytes leftover after parsing attributes in process `syz.0.35'. [ 58.884404][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.022807][ T6246] netlink: 16 bytes leftover after parsing attributes in process `syz.1.37'. [ 59.025614][ T6246] netlink: 16 bytes leftover after parsing attributes in process `syz.1.37'. [ 59.487063][ T29] usb 8-1: USB disconnect, device number 3 [ 59.519973][ T29] ldusb 8-1:0.0: LD USB Device #2 now disconnected [ 59.880364][ T53] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 59.968963][ T6258] PID 6258 killed due to inadequate hugepage pool [ 60.044579][ T53] usb 5-1: Using ep0 maxpacket: 32 [ 60.052468][ T53] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 60.055188][ T53] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 60.059250][ T53] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 60.063351][ T53] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 60.066585][ T53] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 60.071707][ T53] usb 5-1: config 0 interface 0 has no altsetting 0 [ 60.075406][ T53] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 60.078227][ T53] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 60.082354][ T53] usb 5-1: Product: syz [ 60.083871][ T53] usb 5-1: Manufacturer: syz [ 60.085386][ T53] usb 5-1: SerialNumber: syz [ 60.089173][ T53] usb 5-1: config 0 descriptor?? [ 60.094261][ T53] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 60.098144][ T53] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 60.727100][ T6271] ldusb 5-1:0.0: Couldn't submit interrupt_in_urb -90 [ 61.386674][ T6277] Zero length message leads to an empty skb [ 61.680025][ T6281] ubi31: attaching mtd0 [ 61.684854][ T6281] ubi31: scanning is finished [ 61.686744][ T6281] ubi31: empty MTD device detected [ 61.782710][ T6281] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 61.789241][ T6281] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 61.797094][ T6281] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 61.804136][ T6281] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 61.810949][ T6281] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 61.817681][ T6281] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 61.823555][ T6281] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1926912258 [ 61.829764][ T6281] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 61.836676][ T6283] ubi31: background thread "ubi_bgt31d" started, PID 6283 [ 62.117186][ T10] cfg80211: failed to load regulatory.db [ 62.162925][ T6287] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 62.379768][ T6290] netlink: 'syz.2.47': attribute type 4 has an invalid length. [ 62.396231][ T6290] netlink: 'syz.2.47': attribute type 4 has an invalid length. [ 62.582502][ T6294] /dev/sr0: Can't open blockdev [ 62.701606][ T6251] usb 5-1: USB disconnect, device number 3 [ 62.707434][ T6251] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 62.718451][ T6300] netlink: 24 bytes leftover after parsing attributes in process `syz.0.50'. [ 63.040645][ T6251] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 63.106431][ T6304] tipc: Started in network mode [ 63.108066][ T6304] tipc: Node identity 1eb244f9c26b, cluster identity 4711 [ 63.110538][ T6304] tipc: Enabled bearer , priority 0 [ 63.113357][ T6304] syzkaller0: entered promiscuous mode [ 63.115086][ T6304] syzkaller0: entered allmulticast mode [ 63.125088][ T6304] tipc: Resetting bearer [ 63.130550][ T6302] tipc: Resetting bearer [ 63.138887][ T6302] tipc: Disabling bearer [ 63.195418][ T6251] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 63.199286][ T6251] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.202731][ T6251] usb 5-1: Product: syz [ 63.205321][ T6251] usb 5-1: Manufacturer: syz [ 63.207321][ T6251] usb 5-1: SerialNumber: syz [ 63.560399][ T29] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 63.710384][ T29] usb 8-1: Using ep0 maxpacket: 32 [ 63.713768][ T29] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 63.717105][ T29] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 63.721219][ T29] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 63.724816][ T29] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 63.728392][ T29] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 63.732887][ T29] usb 8-1: config 0 interface 0 has no altsetting 0 [ 63.737396][ T29] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 63.741224][ T29] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 63.744043][ T29] usb 8-1: Product: syz [ 63.746061][ T29] usb 8-1: Manufacturer: syz [ 63.748266][ T29] usb 8-1: SerialNumber: syz [ 63.757152][ T29] usb 8-1: config 0 descriptor?? [ 63.764927][ T29] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 63.773703][ T29] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 63.802185][ T6251] rtl8150 5-1:1.0: couldn't reset the device [ 63.804493][ T6251] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 63.813203][ T6251] usb 5-1: USB disconnect, device number 4 [ 63.971375][ T6306] ldusb 8-1:0.0: Couldn't submit interrupt_in_urb -90 [ 63.976270][ T29] usb 8-1: USB disconnect, device number 4 [ 63.980654][ T29] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 64.195266][ T6322] netlink: 36 bytes leftover after parsing attributes in process `syz.2.56'. [ 64.228668][ T6324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.57'. [ 64.234585][ T6325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.57'. [ 64.265301][ T40] audit: type=1326 audit(1756351383.887:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.2.58" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 64.267338][ T6330] netlink: 'syz.0.59': attribute type 1 has an invalid length. [ 64.274409][ T40] audit: type=1326 audit(1756351383.887:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.2.58" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 64.283227][ T40] audit: type=1326 audit(1756351383.887:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.2.58" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 64.290344][ T40] audit: type=1326 audit(1756351383.897:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.2.58" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 64.297344][ T40] audit: type=1326 audit(1756351383.897:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6331 comm="syz.2.58" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 64.305675][ T40] audit: type=1326 audit(1756351383.897:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.2.58" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 64.425106][ T40] audit: type=1326 audit(1756351384.047:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6331 comm="syz.2.58" exe="/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 64.441979][ T40] audit: type=1326 audit(1756351384.067:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.2.58" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70be598 code=0x7ffc0000 [ 64.448728][ T40] audit: type=1326 audit(1756351384.067:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.2.58" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 64.455408][ T40] audit: type=1326 audit(1756351384.067:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.2.58" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 64.508221][ T6347] netlink: 'syz.3.63': attribute type 1 has an invalid length. [ 64.510780][ T6347] netlink: 224 bytes leftover after parsing attributes in process `syz.3.63'. [ 64.551043][ T6350] netlink: 608 bytes leftover after parsing attributes in process `syz.0.64'. [ 65.298338][ T6361] netlink: 24 bytes leftover after parsing attributes in process `syz.1.68'. [ 65.439028][ T6365] PID 6365 killed due to inadequate hugepage pool [ 65.608965][ T6376] netlink: 32 bytes leftover after parsing attributes in process `syz.3.71'. [ 65.690464][ T6385] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.74'. [ 65.694173][ T6385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.74'. [ 65.712607][ T6371] random: crng reseeded on system resumption [ 65.724175][ T6371] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.280003][ T6432] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.397347][ T6440] netlink: 'syz.1.83': attribute type 26 has an invalid length. [ 66.575471][ T6453] PID 6453 killed due to inadequate hugepage pool [ 66.854928][ T6470] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 66.883983][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 67.065769][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 67.076928][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 67.080269][ T10] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 67.081433][ T6475] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.116085][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.122430][ T10] usb 7-1: config 0 descriptor?? [ 67.348054][ T10] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 67.396817][ T6485] PID 6485 killed due to inadequate hugepage pool [ 67.653969][ T29] usb 7-1: USB disconnect, device number 3 [ 67.737144][ T6501] netlink: 'syz.2.104': attribute type 1 has an invalid length. [ 68.126012][ T6506] __nla_validate_parse: 10 callbacks suppressed [ 68.126024][ T6506] netlink: 24 bytes leftover after parsing attributes in process `syz.3.105'. [ 68.412835][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 68.579418][ T6514] PID 6514 killed due to inadequate hugepage pool [ 68.590051][ T10] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 68.595188][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.603129][ T10] usb 8-1: Product: syz [ 68.607285][ T10] usb 8-1: Manufacturer: syz [ 68.611636][ T10] usb 8-1: SerialNumber: syz [ 68.712077][ T6525] rdma_rxe: rxe_newlink: failed to add syz_tun [ 68.882945][ T6531] netlink: 608 bytes leftover after parsing attributes in process `syz.0.114'. [ 68.966497][ T6529] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.020685][ T6525] netlink: 16 bytes leftover after parsing attributes in process `syz.2.112'. [ 69.040046][ T6529] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.082573][ T10] rtl8150 8-1:1.0: couldn't reset the device [ 69.084754][ T10] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 69.089713][ T10] usb 8-1: USB disconnect, device number 5 [ 69.112710][ T6529] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.196390][ T6529] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.254286][ T46] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.262203][ T46] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.270307][ T46] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.277707][ T46] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.654143][ T6543] PID 6543 killed due to inadequate hugepage pool [ 69.702257][ T6556] netlink: 'syz.3.121': attribute type 1 has an invalid length. [ 69.704646][ T6556] netlink: 224 bytes leftover after parsing attributes in process `syz.3.121'. [ 69.800426][ T6564] netlink: 28 bytes leftover after parsing attributes in process `syz.0.124'. [ 69.804157][ T6564] netlink: 'syz.0.124': attribute type 7 has an invalid length. [ 69.807222][ T6564] netlink: 'syz.0.124': attribute type 8 has an invalid length. [ 69.811130][ T6564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.124'. [ 69.821017][ T6564] erspan0: entered promiscuous mode [ 69.823300][ T6564] batadv_slave_1: entered promiscuous mode [ 69.825954][ T6564] erspan0: left promiscuous mode [ 69.827851][ T6564] batadv_slave_1: left promiscuous mode [ 69.919442][ T6567] bridge_slave_0: left allmulticast mode [ 69.921438][ T6567] bridge_slave_0: left promiscuous mode [ 69.923804][ T6567] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.928054][ T6567] bridge_slave_1: left allmulticast mode [ 69.929784][ T6567] bridge_slave_1: left promiscuous mode [ 69.931742][ T6567] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.936626][ T6567] bond0: (slave bond_slave_0): Releasing backup interface [ 69.940878][ T6567] bond0: (slave bond_slave_1): Releasing backup interface [ 69.945444][ T5887] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 69.951685][ T6567] team0: Port device team_slave_0 removed [ 69.956115][ T6567] team0: Port device team_slave_1 removed [ 69.958269][ T6567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.960581][ T6567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.964924][ T6567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.967283][ T6567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.984725][ T6568] vxcan1: entered promiscuous mode [ 69.988474][ T6568] team0: Port device vxcan1 added [ 70.025687][ T6570] syz1: rxe_newlink: already configured on syz_tun [ 70.101897][ T5887] usb 7-1: Using ep0 maxpacket: 32 [ 70.105198][ T5887] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 70.108425][ T5887] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 70.112147][ T5887] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 70.116804][ T5887] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 70.120610][ T5887] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 70.125394][ T5887] usb 7-1: config 0 interface 0 has no altsetting 0 [ 70.129594][ T5887] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 70.132554][ T5887] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 70.135595][ T5887] usb 7-1: Product: syz [ 70.136973][ T5887] usb 7-1: Manufacturer: syz [ 70.138501][ T5887] usb 7-1: SerialNumber: syz [ 70.141277][ T5887] usb 7-1: config 0 descriptor?? [ 70.146573][ T5887] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 70.150223][ T5887] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 70.168614][ T6570] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.221834][ T6571] netlink: 16 bytes leftover after parsing attributes in process `syz.0.126'. [ 70.244737][ T6570] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.279551][ T6575] rdma_rxe: rxe_newlink: failed to add syz_tun [ 70.298414][ T6570] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.362112][ T6570] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.440769][ T6575] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.470534][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.478064][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.485349][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.492650][ T46] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.493569][ T6576] netlink: 16 bytes leftover after parsing attributes in process `syz.1.127'. [ 70.523700][ T6575] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.577533][ T6582] netlink: 24 bytes leftover after parsing attributes in process `syz.0.128'. [ 70.613619][ T6580] ldusb 7-1:0.0: Couldn't submit interrupt_in_urb -90 [ 70.637122][ T6575] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.692777][ T6575] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.773118][ T1144] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.780338][ T1144] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.789698][ T1144] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.798506][ T6592] afs: Unknown parameter 'fowner' [ 70.798795][ T46] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.893000][ T5887] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 70.902319][ T6596] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.982611][ T6596] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.058256][ T6596] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.059788][ T5887] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 71.064769][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.067513][ T5887] usb 5-1: Product: syz [ 71.069137][ T5887] usb 5-1: Manufacturer: syz [ 71.070634][ T5887] usb 5-1: SerialNumber: syz [ 71.141771][ T6596] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.248820][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.251097][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.534242][ T5887] rtl8150 5-1:1.0: couldn't reset the device [ 71.536444][ T5887] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 71.541909][ T5887] usb 5-1: USB disconnect, device number 5 [ 72.338070][ T6611] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 72.344039][ T6611] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 72.370443][ T6611] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 72.374026][ T6611] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 72.375962][ T6611] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 72.381442][ T6611] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 72.385357][ T6611] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 72.387609][ T6611] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 72.394258][ T6611] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 72.398244][ T6611] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 72.401262][ T6611] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 72.406039][ T6611] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 72.915166][ T29] usb 7-1: USB disconnect, device number 4 [ 72.924437][ T29] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 72.997623][ T6626] ======================================================= [ 72.997623][ T6626] WARNING: The mand mount option has been deprecated and [ 72.997623][ T6626] and is ignored by this kernel. Remove the mand [ 72.997623][ T6626] option from the mount to silence this warning. [ 72.997623][ T6626] ======================================================= [ 73.058810][ T6630] netlink: 24 bytes leftover after parsing attributes in process `syz.2.143'. [ 73.085167][ T6634] netlink: 'syz.3.145': attribute type 1 has an invalid length. [ 73.110821][ T6614] syz.0.137 (6614) used greatest stack depth: 19560 bytes left [ 73.490795][ T29] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 73.665736][ T29] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 73.668657][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.671189][ T29] usb 7-1: Product: syz [ 73.672674][ T29] usb 7-1: Manufacturer: syz [ 73.674180][ T29] usb 7-1: SerialNumber: syz [ 74.139786][ T29] rtl8150 7-1:1.0: couldn't reset the device [ 74.141944][ T29] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 74.147140][ T29] usb 7-1: USB disconnect, device number 5 [ 74.266529][ T6650] blkio.reset_stats is deprecated [ 74.410190][ T5985] Bluetooth: hci1: command 0x0c1a tx timeout [ 74.411596][ T6658] __nla_validate_parse: 1 callbacks suppressed [ 74.411605][ T6658] netlink: 20 bytes leftover after parsing attributes in process `syz.0.152'. [ 74.442248][ T60] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 74.581290][ T5985] Bluetooth: hci3: command 0x0c1a tx timeout [ 74.581733][ T5339] Bluetooth: hci0: command 0x0c1a tx timeout [ 74.583283][ T5991] Bluetooth: hci2: command 0x0c1a tx timeout [ 74.623993][ T60] usb 8-1: Using ep0 maxpacket: 32 [ 74.628353][ T60] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 74.630953][ T60] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 74.634387][ T60] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 74.637867][ T60] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 74.641005][ T60] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 74.645110][ T60] usb 8-1: config 0 interface 0 has no altsetting 0 [ 74.649237][ T60] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 74.652098][ T60] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 74.654692][ T60] usb 8-1: Product: syz [ 74.656073][ T60] usb 8-1: Manufacturer: syz [ 74.657532][ T60] usb 8-1: SerialNumber: syz [ 74.660444][ T60] usb 8-1: config 0 descriptor?? [ 74.665389][ T60] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 74.669259][ T60] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 74.981952][ T46] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.991406][ T46] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.998333][ T46] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.005314][ T46] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.210995][ T6661] ldusb 8-1:0.0: Couldn't submit interrupt_in_urb -90 [ 75.530995][ T6677] syz.0.158 uses obsolete (PF_INET,SOCK_PACKET) [ 75.808875][ T6690] overlay: filesystem on ./bus not supported as upperdir [ 76.072413][ T6708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.168'. [ 76.103285][ T6718] process 'syz.1.171' launched './file0' with NULL argv: empty string added [ 76.105995][ T6721] netlink: 556 bytes leftover after parsing attributes in process `syz.0.173'. [ 76.188314][ T6722] syz.2.172 (6722): attempted to duplicate a private mapping with mremap. This is not supported. [ 76.192346][ T6722] binder: Unknown parameter 'ma000000000000000026' [ 76.633887][ T5991] Bluetooth: hci1: command 0x0c1a tx timeout [ 76.805099][ T5991] Bluetooth: hci2: command 0x0c1a tx timeout [ 76.805139][ T5339] Bluetooth: hci3: command 0x0c1a tx timeout [ 76.805164][ T5985] Bluetooth: hci0: command 0x0c1a tx timeout [ 77.019561][ T6729] bridge0: port 1(syz_tun) entered blocking state [ 77.022559][ T6729] bridge0: port 1(syz_tun) entered disabled state [ 77.024894][ T6729] syz_tun: entered allmulticast mode [ 77.029627][ T6729] syz_tun: entered promiscuous mode [ 77.034431][ T6729] bridge0: port 1(syz_tun) entered blocking state [ 77.036788][ T6729] bridge0: port 1(syz_tun) entered forwarding state [ 77.042028][ T6729] netlink: 'syz.0.175': attribute type 10 has an invalid length. [ 77.045114][ T6729] bridge0: port 1(syz_tun) entered disabled state [ 77.050311][ T6729] bridge0: port 1(syz_tun) entered blocking state [ 77.053092][ T6729] bridge0: port 1(syz_tun) entered forwarding state [ 77.058384][ T77] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa0c error=-28 [ 77.058804][ T6729] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 77.068422][ T6729] syz1: rxe_newlink: already configured on syz_tun [ 77.395975][ T29] usb 8-1: USB disconnect, device number 6 [ 77.400065][ T29] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 77.452233][ T6746] netlink: 'syz.3.181': attribute type 1 has an invalid length. [ 77.756882][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 77.918562][ T6753] rdma_rxe: rxe_newlink: failed to add syz_tun [ 77.958834][ T6755] netlink: 556 bytes leftover after parsing attributes in process `syz.2.184'. [ 78.101496][ T6756] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.163503][ T6756] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.242096][ T6756] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.317494][ T6756] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.415253][ T6760] netlink: 'syz.0.185': attribute type 1 has an invalid length. [ 78.418847][ T6760] netlink: 224 bytes leftover after parsing attributes in process `syz.0.185'. [ 78.857563][ T5339] Bluetooth: hci1: command 0x0c1a tx timeout [ 78.869652][ T6770] rdma_rxe: rxe_newlink: failed to add syz_tun [ 79.028916][ T5339] Bluetooth: hci0: command 0x0c1a tx timeout [ 79.030200][ T5991] Bluetooth: hci3: command 0x0c1a tx timeout [ 79.030263][ T5985] Bluetooth: hci2: command 0x0c1a tx timeout [ 79.036189][ T6770] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.098461][ T6770] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.171085][ T6770] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.214877][ T6770] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.269340][ T46] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.278793][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.286410][ T1141] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.292679][ T1141] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.403194][ T1141] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.411717][ T1141] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.419380][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.430959][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.616744][ T29] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 79.685872][ T6782] netlink: 24 bytes leftover after parsing attributes in process `syz.3.191'. [ 79.787586][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 79.791290][ T29] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 79.793982][ T29] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 79.797502][ T29] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 79.903495][ T29] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 79.909271][ T29] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 79.913914][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 79.918244][ T29] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 79.921267][ T29] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 79.924136][ T29] usb 5-1: Product: syz [ 79.925656][ T29] usb 5-1: Manufacturer: syz [ 79.927594][ T29] usb 5-1: SerialNumber: syz [ 79.939083][ T29] usb 5-1: config 0 descriptor?? [ 79.942851][ T29] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 79.951976][ T29] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 79.980414][ T10] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 80.154313][ T10] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 80.157417][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.159969][ T10] usb 8-1: Product: syz [ 80.161309][ T10] usb 8-1: Manufacturer: syz [ 80.163203][ T10] usb 8-1: SerialNumber: syz [ 80.392374][ T6790] ldusb 5-1:0.0: Couldn't submit interrupt_in_urb -90 [ 80.581001][ T6796] bridge_slave_0: left allmulticast mode [ 80.582808][ T6796] bridge_slave_0: left promiscuous mode [ 80.584650][ T6796] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.591587][ T6796] bridge_slave_1: left allmulticast mode [ 80.593376][ T6796] bridge_slave_1: left promiscuous mode [ 80.595196][ T6796] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.601676][ T6796] bond0: (slave bond_slave_0): Releasing backup interface [ 80.608115][ T6796] bond0: (slave bond_slave_1): Releasing backup interface [ 80.617540][ T6796] team0: Port device team_slave_0 removed [ 80.622131][ T6796] team0: Port device team_slave_1 removed [ 80.624344][ T6796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.626688][ T6796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.639456][ T6796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.643571][ T6796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.646294][ T10] rtl8150 8-1:1.0: couldn't reset the device [ 80.649257][ T10] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 80.659910][ T10] usb 8-1: USB disconnect, device number 7 [ 80.746501][ T6805] netlink: 556 bytes leftover after parsing attributes in process `syz.1.196'. [ 81.165612][ T6807] netlink: 'syz.3.197': attribute type 1 has an invalid length. [ 81.168339][ T6807] netlink: 224 bytes leftover after parsing attributes in process `syz.3.197'. [ 81.539114][ T6812] rdma_rxe: rxe_newlink: failed to add syz_tun [ 81.748529][ T6812] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.821929][ T6812] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.866078][ T6812] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.963477][ T6812] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.279257][ T6822] block nbd0: server does not support multiple connections per device. [ 82.283745][ T6822] block nbd0: shutting down sockets [ 82.492074][ T6829] fuse: Unknown parameter 'euid' [ 82.623119][ T29] usb 5-1: USB disconnect, device number 6 [ 82.633552][ T29] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 82.635361][ T6837] ubi: mtd0 is already attached to ubi31 [ 82.645256][ T6837] block nbd0: Attempted send on invalid socket [ 82.647378][ T6837] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.650317][ T6837] efs: cannot read volume header [ 82.665748][ T6837] netlink: 40 bytes leftover after parsing attributes in process `syz.0.207'. [ 82.707319][ T6843] netlink: 568 bytes leftover after parsing attributes in process `syz.0.209'. [ 83.630115][ T6854] input: syz1 as /devices/virtual/input/input5 [ 83.788754][ T6862] netlink: 72 bytes leftover after parsing attributes in process `syz.3.211'. [ 84.427285][ T6044] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 84.528601][ T1141] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.539090][ T1144] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.547373][ T1144] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.555021][ T1144] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.587694][ T6044] usb 8-1: Using ep0 maxpacket: 32 [ 84.600507][ T6044] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 84.603591][ T6044] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 84.607959][ T6044] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 84.615299][ T6876] netlink: 24 bytes leftover after parsing attributes in process `syz.1.217'. [ 84.624589][ T6044] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 84.628527][ T6044] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 84.636060][ T6044] usb 8-1: config 0 interface 0 has no altsetting 0 [ 84.642552][ T6044] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 84.645339][ T6044] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 84.647996][ T6044] usb 8-1: Product: syz [ 84.649325][ T6044] usb 8-1: Manufacturer: syz [ 84.650791][ T6044] usb 8-1: SerialNumber: syz [ 84.665770][ T6044] usb 8-1: config 0 descriptor?? [ 84.669978][ T6044] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 84.674649][ T6044] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 84.708539][ T6886] netlink: 568 bytes leftover after parsing attributes in process `syz.0.220'. [ 85.111307][ T6891] ldusb 8-1:0.0: Couldn't submit interrupt_in_urb -90 [ 86.263870][ T6901] Illegal XDP return value 14 on prog (id 43) dev N/A, expect packet loss! [ 86.526210][ T6913] netlink: 16 bytes leftover after parsing attributes in process `syz.1.227'. [ 86.529238][ T6913] netlink: 28 bytes leftover after parsing attributes in process `syz.1.227'. [ 86.678600][ T6921] netlink: 568 bytes leftover after parsing attributes in process `syz.1.230'. [ 86.771407][ T6923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.231'. [ 86.842120][ T6929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.233'. [ 87.054298][ T6935] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 87.059455][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.235'. [ 87.063097][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.235'. [ 87.066688][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.235'. [ 87.399689][ T6307] usb 8-1: USB disconnect, device number 8 [ 87.403385][ T6307] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 87.414531][ T6937] netlink: 'syz.3.236': attribute type 2 has an invalid length. [ 87.417485][ T6937] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 88.032325][ T6957] rdma_rxe: rxe_newlink: failed to add syz_tun [ 88.196056][ T6957] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.249553][ T6958] netlink: 16 bytes leftover after parsing attributes in process `syz.2.241'. [ 88.260233][ T6957] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.333747][ T6957] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.375286][ T6957] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.656785][ T6969] binder: 6954:6969 ioctl c0306201 0 returned -14 [ 89.075924][ T6975] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 89.484600][ T6982] netlink: 620 bytes leftover after parsing attributes in process `syz.3.248'. [ 90.284433][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.294906][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.305364][ T1141] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.312471][ T1141] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.348071][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 90.515775][ T6993] fuse: Bad value for 'fd' [ 90.536087][ T24] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 90.539186][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.542077][ T24] usb 5-1: Product: syz [ 90.544319][ T24] usb 5-1: Manufacturer: syz [ 90.546043][ T24] usb 5-1: SerialNumber: syz [ 90.946833][ T6998] binder: 6990:6998 ioctl c0306201 0 returned -14 [ 91.009011][ T24] rtl8150 5-1:1.0: couldn't reset the device [ 91.011219][ T24] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 91.019090][ T24] usb 5-1: USB disconnect, device number 7 [ 91.553908][ T7011] tipc: Started in network mode [ 91.555495][ T7011] tipc: Node identity , cluster identity 4711 [ 91.557426][ T7011] tipc: Failed to obtain node identity [ 91.559625][ T7011] tipc: Enabling of bearer rejected, failed to enable media [ 91.564219][ T7011] syzkaller0: entered promiscuous mode [ 91.565993][ T7011] syzkaller0: entered allmulticast mode [ 92.045722][ T7027] 9p: Unknown Cache mode or invalid value fscach [ 92.887138][ T7053] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 93.038445][ T5991] Bluetooth: hci1: unexpected event for opcode 0x2043 [ 93.048402][ T7060] binder: 7059:7060 ioctl c0306201 0 returned -14 [ 93.051039][ T7060] binder: 7059:7060 ioctl 4018620d 0 returned -22 [ 93.341673][ T7072] __nla_validate_parse: 2 callbacks suppressed [ 93.341684][ T7072] netlink: 620 bytes leftover after parsing attributes in process `syz.1.273'. [ 93.549603][ T7061] netlink: 'syz.2.268': attribute type 1 has an invalid length. [ 93.552022][ T7061] netlink: 224 bytes leftover after parsing attributes in process `syz.2.268'. [ 93.850040][ T7083] netlink: 24 bytes leftover after parsing attributes in process `syz.2.276'. [ 94.123731][ T53] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 94.287586][ T53] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 94.290677][ T53] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.293717][ T53] usb 7-1: Product: syz [ 94.296996][ T53] usb 7-1: Manufacturer: syz [ 94.298803][ T53] usb 7-1: SerialNumber: syz [ 94.765564][ T53] rtl8150 7-1:1.0: couldn't reset the device [ 94.767614][ T53] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 94.772398][ T53] usb 7-1: USB disconnect, device number 6 [ 95.207766][ T7105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.283'. [ 95.965114][ T7128] syzkaller0: entered promiscuous mode [ 95.966965][ T7128] syzkaller0: entered allmulticast mode [ 96.821604][ T7139] netlink: 24 bytes leftover after parsing attributes in process `syz.0.292'. [ 97.106427][ T1471] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 97.269809][ T1471] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 97.272766][ T1471] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.275183][ T1471] usb 5-1: Product: syz [ 97.276624][ T1471] usb 5-1: Manufacturer: syz [ 97.278237][ T1471] usb 5-1: SerialNumber: syz [ 97.738765][ T1471] rtl8150 5-1:1.0: couldn't reset the device [ 97.740924][ T1471] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 97.745849][ T1471] usb 5-1: USB disconnect, device number 8 [ 98.312128][ T7166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.300'. [ 100.359590][ T7218] ubi: mtd0 is already attached to ubi31 [ 100.377744][ T6029] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 100.450345][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.318'. [ 100.472425][ T7221] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.537449][ T7223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.319'. [ 100.559499][ T6029] usb 7-1: Using ep0 maxpacket: 32 [ 100.564910][ T6029] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 100.567568][ T6029] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 100.574187][ T6029] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 100.577885][ T6029] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 100.582771][ T6029] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 100.587859][ T6029] usb 7-1: config 0 interface 0 has no altsetting 0 [ 100.591540][ T6029] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 100.594451][ T6029] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 100.597031][ T6029] usb 7-1: Product: syz [ 100.598370][ T6029] usb 7-1: Manufacturer: syz [ 100.599762][ T6029] usb 7-1: SerialNumber: syz [ 100.605878][ T6029] usb 7-1: config 0 descriptor?? [ 100.609368][ T6029] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 100.613787][ T6029] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 101.058572][ T7232] ldusb 7-1:0.0: Couldn't submit interrupt_in_urb -90 [ 101.265161][ T5339] Bluetooth: hci3: command 0x0c1a tx timeout [ 101.707048][ T7240] netlink: 16 bytes leftover after parsing attributes in process `syz.0.322'. [ 103.333610][ T7257] serio: Serial port ptm1 [ 103.339835][ T67] usb 7-1: USB disconnect, device number 7 [ 103.343375][ T67] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 104.839059][ T7240] delete_channel: no stack [ 104.933448][ T7299] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 105.976902][ T7326] netlink: 24 bytes leftover after parsing attributes in process `syz.1.347'. [ 106.444239][ T5339] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 106.597473][ T7344] binder: 7343:7344 ioctl c0306201 80000040 returned -22 [ 106.940093][ T7352] overlayfs: failed to clone upperpath [ 106.950712][ T7355] usb usb8: usbfs: process 7355 (syz.0.356) did not claim interface 3 before use [ 107.134910][ T9] IPVS: starting estimator thread 0... [ 107.241740][ T7373] IPVS: using max 46 ests per chain, 110400 per kthread [ 107.251609][ T7385] netlink: 24 bytes leftover after parsing attributes in process `syz.0.368'. [ 107.529937][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 107.694449][ T9] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 107.697770][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.702744][ T9] usb 5-1: Product: syz [ 107.704256][ T9] usb 5-1: Manufacturer: syz [ 107.705722][ T9] usb 5-1: SerialNumber: syz [ 108.136215][ T7412] mmap: syz.2.375 (7412) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 108.178461][ T9] rtl8150 5-1:1.0: couldn't reset the device [ 108.180649][ T9] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 108.187741][ T9] usb 5-1: USB disconnect, device number 9 [ 109.003899][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.386'. [ 109.288142][ T7458] netlink: 24 bytes leftover after parsing attributes in process `syz.0.392'. [ 109.582314][ T6029] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 109.766065][ T7465] capability: warning: `syz.3.394' uses 32-bit capabilities (legacy support in use) [ 109.785400][ T6029] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 109.788319][ T6029] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.790759][ T6029] usb 5-1: Product: syz [ 109.792134][ T6029] usb 5-1: Manufacturer: syz [ 109.793568][ T6029] usb 5-1: SerialNumber: syz [ 110.307044][ T6029] rtl8150 5-1:1.0: couldn't reset the device [ 110.309103][ T6029] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 110.314955][ T6029] usb 5-1: USB disconnect, device number 10 [ 110.790008][ T7484] No control pipe specified [ 110.867753][ T7491] rdma_rxe: rxe_newlink: failed to add syz_tun [ 111.059152][ T7491] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.111667][ T7495] netlink: 16 bytes leftover after parsing attributes in process `syz.1.402'. [ 111.137273][ T7491] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.211466][ T7491] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.285436][ T7491] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.371770][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.421133][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.424884][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.428617][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.543516][ T7505] PID 7505 killed due to inadequate hugepage pool [ 111.815958][ T7518] netlink: 24 bytes leftover after parsing attributes in process `syz.2.409'. [ 112.097395][ T7526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.411'. [ 112.180143][ T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 112.388195][ T24] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 112.391632][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.404717][ T24] usb 7-1: Product: syz [ 112.406633][ T24] usb 7-1: Manufacturer: syz [ 112.408191][ T24] usb 7-1: SerialNumber: syz [ 112.880923][ T24] rtl8150 7-1:1.0: couldn't reset the device [ 112.882916][ T24] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 112.889412][ T24] usb 7-1: USB disconnect, device number 8 [ 113.466193][ T9] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 113.487633][ T7542] PID 7542 killed due to inadequate hugepage pool [ 113.585065][ T7550] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 113.588617][ T7550] block device autoloading is deprecated and will be removed. [ 113.630878][ T7552] overlayfs: conflicting options: nfs_export=on,index=off [ 113.645958][ T9] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 113.648396][ T9] usb 8-1: config 0 has no interface number 0 [ 113.650433][ T9] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 113.653686][ T9] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 113.657226][ T9] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 113.660290][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.664097][ T9] usb 8-1: config 0 descriptor?? [ 113.666437][ T7536] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 113.671081][ T9] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 113.778390][ T7561] input: syz0 as /devices/virtual/input/input8 [ 113.971224][ T6044] usb 8-1: USB disconnect, device number 9 [ 113.971270][ C2] iowarrior 8-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 113.981904][ T7563] syz1: rxe_newlink: already configured on syz_tun [ 114.149551][ T7563] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.203186][ T7564] netlink: 16 bytes leftover after parsing attributes in process `syz.0.421'. [ 114.216369][ T7563] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.311010][ T7563] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.376330][ T7563] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.453755][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.461079][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.468708][ T1141] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.475571][ T1141] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.915664][ T7585] PID 7585 killed due to inadequate hugepage pool [ 115.540851][ T7597] PID 7597 killed due to inadequate hugepage pool [ 116.043746][ T7607] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 116.190711][ T7612] netlink: 20 bytes leftover after parsing attributes in process `syz.1.431'. [ 116.249689][ T7618] netlink: 24 bytes leftover after parsing attributes in process `syz.0.434'. [ 116.301648][ T7620] vxcan1: MTU too low for tipc bearer [ 116.303405][ T7620] tipc: Enabling of bearer rejected, failed to enable media [ 116.311108][ T7620] tipc: Enabled bearer , priority 0 [ 116.563319][ T1471] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 116.748135][ T1471] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 116.750930][ T1471] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.753416][ T1471] usb 5-1: Product: syz [ 116.754725][ T1471] usb 5-1: Manufacturer: syz [ 116.762948][ T1471] usb 5-1: SerialNumber: syz [ 117.244903][ T1471] rtl8150 5-1:1.0: couldn't reset the device [ 117.247764][ T1471] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 117.253834][ T1471] usb 5-1: USB disconnect, device number 11 [ 117.314790][ T7639] rdma_rxe: rxe_newlink: failed to add syz_tun [ 117.399303][ T6062] tipc: Node number set to 3705226489 [ 117.633131][ T7639] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.633773][ T7644] netlink: 'syz.3.441': attribute type 10 has an invalid length. [ 117.667695][ T7639] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.686595][ T7640] netlink: 16 bytes leftover after parsing attributes in process `syz.2.440'. [ 117.767366][ T7647] warning: `syz.0.442' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 117.779629][ T7639] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.799186][ T7647] syz_tun: left allmulticast mode [ 117.802123][ T7647] syz_tun: left promiscuous mode [ 117.804840][ T7647] bridge0: port 1(syz_tun) entered disabled state [ 117.813309][ T7647] bond0: (slave bridge0): Releasing backup interface [ 117.823085][ T7647] team0: Port device vxcan1 removed [ 117.839782][ T7647] netlink: 'syz.0.442': attribute type 10 has an invalid length. [ 117.862910][ T7639] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.883546][ T7656] block device autoloading is deprecated and will be removed. [ 117.998065][ T59] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.004574][ T59] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.014546][ T46] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.022914][ T46] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.110840][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.457'. [ 119.253856][ T7696] block nbd3: shutting down sockets [ 119.407057][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 119.579673][ T10] usb 5-1: config 0 has no interfaces? [ 119.583251][ T10] usb 5-1: New USB device found, idVendor=14aa, idProduct=2101, bcdDevice= f.79 [ 119.586248][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.589182][ T10] usb 5-1: Product: syz [ 119.590563][ T10] usb 5-1: Manufacturer: syz [ 119.592041][ T10] usb 5-1: SerialNumber: syz [ 119.595217][ T10] usb 5-1: config 0 descriptor?? [ 119.692552][ T6196] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 119.812788][ T10] usb 5-1: USB disconnect, device number 12 [ 119.855947][ T6196] usb 7-1: Using ep0 maxpacket: 32 [ 119.859253][ T6196] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 119.862496][ T6196] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 119.866721][ T6196] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 119.870217][ T6196] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 119.873992][ T6196] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 119.878449][ T6196] usb 7-1: config 0 interface 0 has no altsetting 0 [ 119.882210][ T6196] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 119.885043][ T6196] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 119.887685][ T6196] usb 7-1: Product: syz [ 119.889076][ T6196] usb 7-1: Manufacturer: syz [ 119.890863][ T6196] usb 7-1: SerialNumber: syz [ 119.893535][ T6196] usb 7-1: config 0 descriptor?? [ 119.896833][ T6196] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 119.900857][ T6196] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 120.586190][ T7708] ldusb 7-1:0.0: Couldn't submit interrupt_in_urb -90 [ 121.657171][ T7726] 9pnet_virtio: no channels available for device syz [ 121.973919][ T7728] netlink: 52 bytes leftover after parsing attributes in process `syz.1.466'. [ 122.622853][ T67] usb 7-1: USB disconnect, device number 9 [ 122.633080][ T67] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 122.951931][ T7743] netlink: 36 bytes leftover after parsing attributes in process `syz.2.469'. [ 123.437353][ T7746] netlink: 24 bytes leftover after parsing attributes in process `syz.0.472'. [ 123.726052][ T6044] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 123.890243][ T6044] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 123.894266][ T6044] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.900008][ T6044] usb 5-1: Product: syz [ 123.901547][ T6044] usb 5-1: Manufacturer: syz [ 123.903121][ T6044] usb 5-1: SerialNumber: syz [ 124.170299][ T7763] rdma_rxe: rxe_newlink: failed to add syz_tun [ 124.385404][ T7763] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.387200][ T6044] rtl8150 5-1:1.0: couldn't reset the device [ 124.391682][ T6044] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 124.404248][ T6044] usb 5-1: USB disconnect, device number 13 [ 124.434708][ T7763] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.438824][ T7765] netlink: 16 bytes leftover after parsing attributes in process `syz.3.476'. [ 124.502808][ T7763] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.566832][ T7763] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.655688][ T46] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.661918][ T46] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.668882][ T46] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.678246][ T46] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.759385][ T6061] IPVS: starting estimator thread 0... [ 124.789172][ T7775] tmpfs: Unknown parameter 'hash' [ 124.792101][ T7775] program syz.3.479 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.796650][ T7775] netlink: 'syz.3.479': attribute type 10 has an invalid length. [ 124.799569][ T7775] syz_tun: entered promiscuous mode [ 124.806215][ T7775] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 124.843243][ T7777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.480'. [ 124.859308][ T7773] IPVS: using max 46 ests per chain, 110400 per kthread [ 125.115999][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 125.308359][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 125.311272][ T9] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 125.313787][ T9] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 125.317131][ T9] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 125.380217][ T9] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 125.385796][ T9] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 125.389829][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 125.393747][ T9] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 125.396558][ T9] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 125.399158][ T9] usb 7-1: Product: syz [ 125.400501][ T9] usb 7-1: Manufacturer: syz [ 125.401955][ T9] usb 7-1: SerialNumber: syz [ 125.406346][ T9] usb 7-1: config 0 descriptor?? [ 125.409525][ T9] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 125.412991][ T9] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 125.499716][ T7787] netlink: 36 bytes leftover after parsing attributes in process `syz.1.482'. [ 126.046912][ T7794] ldusb 7-1:0.0: Couldn't submit interrupt_in_urb -90 [ 126.624753][ T7808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.488'. [ 126.688481][ T7811] netlink: 56 bytes leftover after parsing attributes in process `syz.1.488'. [ 126.694101][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 126.694112][ T40] audit: type=1800 audit(1756351442.440:22): pid=7811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.488" name="nullb0" dev="tmpfs" ino=660 res=0 errno=0 [ 127.992388][ T67] usb 7-1: USB disconnect, device number 10 [ 128.000454][ T67] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 128.526117][ T67] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 128.707810][ T67] usb 7-1: Using ep0 maxpacket: 32 [ 128.711476][ T67] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 128.714491][ T67] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 128.718086][ T67] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 128.721788][ T67] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 128.724742][ T67] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 128.729341][ T67] usb 7-1: config 0 interface 0 has no altsetting 0 [ 128.733205][ T67] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 128.735982][ T67] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 128.738830][ T67] usb 7-1: Product: syz [ 128.740381][ T67] usb 7-1: Manufacturer: syz [ 128.741820][ T67] usb 7-1: SerialNumber: syz [ 128.744467][ T67] usb 7-1: config 0 descriptor?? [ 128.747695][ T67] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 128.752662][ T67] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 129.368556][ T7850] ldusb 7-1:0.0: Couldn't submit interrupt_in_urb -90 [ 130.419872][ T7872] input: syz1 as /devices/virtual/input/input9 [ 130.803149][ T67] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 131.059137][ T67] usb 5-1: Using ep0 maxpacket: 16 [ 131.063116][ T67] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 131.065730][ T67] usb 5-1: config 0 has no interface number 0 [ 131.069267][ T67] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 131.072379][ T67] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.074972][ T67] usb 5-1: Product: syz [ 131.076543][ T67] usb 5-1: Manufacturer: syz [ 131.078071][ T67] usb 5-1: SerialNumber: syz [ 131.080929][ T67] usb 5-1: config 0 descriptor?? [ 131.083865][ T67] hub 5-1:0.132: bad descriptor, ignoring hub [ 131.085832][ T67] hub 5-1:0.132: probe with driver hub failed with error -5 [ 131.091042][ T67] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.132/input/input10 [ 131.321391][ T6044] usb 5-1: USB disconnect, device number 14 [ 131.366645][ T67] usb 7-1: USB disconnect, device number 11 [ 131.382594][ T67] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 131.512680][ T7893] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 131.515983][ T7893] overlayfs: missing 'lowerdir' [ 131.691483][ T7898] 8021q: VLANs not supported on ip_vti0 [ 131.703200][ T7898] tipc: Resetting bearer [ 131.729240][ T7898] netlink: 'syz.2.513': attribute type 10 has an invalid length. [ 131.799231][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.515'. [ 132.204225][ T40] audit: type=1800 audit(1756351447.584:23): pid=7917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.521" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 132.341731][ T7922] PID 7922 killed due to inadequate hugepage pool [ 132.370860][ T7926] netlink: 'syz.3.523': attribute type 2 has an invalid length. [ 132.535133][ T6044] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 132.560493][ T5339] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 132.684510][ T7948] rdma_rxe: rxe_newlink: failed to add syz_tun [ 132.716816][ T6044] usb 5-1: Using ep0 maxpacket: 32 [ 132.720022][ T6044] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 132.771664][ T6044] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 132.775606][ T6044] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 132.779448][ T6044] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 132.783055][ T6044] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 132.787141][ T6044] usb 5-1: config 0 interface 0 has no altsetting 0 [ 132.797723][ T6044] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 132.800531][ T6044] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 132.803252][ T6044] usb 5-1: Product: syz [ 132.804568][ T6044] usb 5-1: Manufacturer: syz [ 132.806021][ T6044] usb 5-1: SerialNumber: syz [ 132.808864][ T6044] usb 5-1: config 0 descriptor?? [ 132.812035][ T6044] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 132.817134][ T6044] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 132.839369][ T7948] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.891804][ T7949] netlink: 16 bytes leftover after parsing attributes in process `syz.1.531'. [ 132.905863][ T7948] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.967448][ T7948] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.049384][ T10] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 133.064557][ T7948] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.210090][ T10] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 133.212701][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.216572][ T10] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 133.219567][ T10] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 133.222049][ T10] usb 7-1: Manufacturer: syz [ 133.224706][ T10] usb 7-1: config 0 descriptor?? [ 133.248276][ T46] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.250896][ T46] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.254353][ T46] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.261231][ T46] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.283604][ T10] rc_core: IR keymap rc-hauppauge not found [ 133.285479][ T10] Registered IR keymap rc-empty [ 133.288520][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 133.292487][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input11 [ 133.302258][ T7956] ldusb 5-1:0.0: Couldn't submit interrupt_in_urb -90 [ 133.787647][ T7979] netlink: 16 bytes leftover after parsing attributes in process `syz.1.539'. [ 134.864830][ T7990] rdma_rxe: rxe_newlink: failed to add syz_tun [ 135.048153][ T7990] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.100043][ T7991] netlink: 16 bytes leftover after parsing attributes in process `syz.1.542'. [ 135.107375][ T7990] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.167398][ T6044] usb 5-1: USB disconnect, device number 15 [ 135.171456][ T6044] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 135.191486][ T7990] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.244881][ T7990] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.148332][ T67] usb 7-1: USB disconnect, device number 12 [ 136.462138][ T8009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.546'. [ 136.465327][ T8009] netlink: 'syz.2.546': attribute type 5 has an invalid length. [ 136.467764][ T8009] netlink: 20 bytes leftover after parsing attributes in process `syz.2.546'. [ 136.493506][ T8009] geneve2: entered promiscuous mode [ 136.495426][ T8009] geneve2: entered allmulticast mode [ 136.505196][ T77] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 136.507880][ T77] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 136.510360][ T77] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 136.523087][ T77] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 136.543608][ T8014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.549'. [ 136.708053][ T6196] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 136.713510][ T6196] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 136.804654][ T8023] fido_id[8023]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 136.899065][ T8033] netlink: 24 bytes leftover after parsing attributes in process `syz.3.555'. [ 136.941954][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.174897][ T6196] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 137.183136][ T77] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.195093][ T77] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.210835][ T77] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.221439][ T77] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.223202][ T8035] netlink: 32 bytes leftover after parsing attributes in process `syz.2.556'. [ 137.227786][ T8036] netlink: 32 bytes leftover after parsing attributes in process `syz.2.556'. [ 137.288883][ T8038] PID 8038 killed due to inadequate hugepage pool [ 137.340783][ T6196] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 137.344659][ T6196] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.348253][ T6196] usb 8-1: Product: syz [ 137.350243][ T6196] usb 8-1: Manufacturer: syz [ 137.352228][ T6196] usb 8-1: SerialNumber: syz [ 137.365560][ T8047] 8021q: VLANs not supported on sit0 [ 137.373614][ T40] audit: type=1400 audit(1756351452.430:24): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=8034 comm="syz.2.556" [ 137.524956][ T8064] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 137.526408][ T5903] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 137.529112][ T8066] rdma_rxe: rxe_newlink: failed to add syz_tun [ 137.562040][ T8068] trusted_key: syz.1.566 sent an empty control message without MSG_MORE. [ 137.673720][ T8066] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.676835][ T8066] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 137.702488][ T8079] tipc: Started in network mode [ 137.704113][ T8079] tipc: Node identity 7f000001, cluster identity 4711 [ 137.706989][ T8079] tipc: Enabled bearer , priority 10 [ 137.714027][ T8079] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 137.717999][ T8079] tipc: Enabled bearer , priority 10 [ 137.726778][ T8074] netlink: 16 bytes leftover after parsing attributes in process `syz.2.565'. [ 137.768371][ T8066] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.771387][ T8066] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 137.855388][ T6196] rtl8150 8-1:1.0: couldn't reset the device [ 137.860261][ T6196] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 137.874310][ T6196] usb 8-1: USB disconnect, device number 10 [ 137.886368][ T8066] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.889651][ T8066] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 137.963021][ T5339] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 137.990407][ T8066] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.996334][ T8066] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 138.006588][ T8094] binder: BINDER_SET_CONTEXT_MGR already set [ 138.010554][ T8094] binder: 8082:8094 ioctl 4018620d 80004a80 returned -16 [ 138.019134][ T8093] PID 8093 killed due to inadequate hugepage pool [ 138.080286][ T77] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 138.082932][ T77] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 138.093155][ T77] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 138.098896][ T77] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 138.107022][ T77] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 138.110289][ T77] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 138.119166][ T77] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 138.122280][ T77] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 138.648148][ T8104] overlay: Unknown parameter 'pcr' [ 138.789209][ T6062] tipc: Node number set to 2130706433 [ 139.261595][ T8119] vlan0: entered promiscuous mode [ 139.263209][ T8119] bridge0: entered promiscuous mode [ 139.310777][ T8129] netlink: 24 bytes leftover after parsing attributes in process `syz.0.586'. [ 139.331582][ T8131] netlink: 24 bytes leftover after parsing attributes in process `syz.1.587'. [ 139.338030][ T8131] netlink: 16 bytes leftover after parsing attributes in process `syz.1.587'. [ 139.601661][ T60] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 139.809502][ T60] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 139.812534][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.816064][ T60] usb 5-1: Product: syz [ 139.817383][ T60] usb 5-1: Manufacturer: syz [ 139.818951][ T60] usb 5-1: SerialNumber: syz [ 139.955040][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.592'. [ 139.957986][ T8149] netlink: 'syz.3.592': attribute type 5 has an invalid length. [ 139.963752][ T8149] netlink: 20 bytes leftover after parsing attributes in process `syz.3.592'. [ 139.987457][ T8149] geneve0: entered promiscuous mode [ 139.989333][ T8149] geneve0: entered allmulticast mode [ 139.997804][ T1141] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 140.003918][ T1141] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 140.007485][ T1141] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 140.012662][ T1141] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 140.314142][ T60] rtl8150 5-1:1.0: couldn't reset the device [ 140.316176][ T60] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 140.321532][ T60] usb 5-1: USB disconnect, device number 17 [ 140.382558][ T8153] 9pnet_fd: Insufficient options for proto=fd [ 140.385858][ T8153] overlayfs: failed to clone upperpath [ 140.856393][ T40] audit: type=1326 audit(1756351455.685:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8163 comm="syz.0.598" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 140.864456][ T40] audit: type=1326 audit(1756351455.685:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8163 comm="syz.0.598" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 140.871350][ T40] audit: type=1326 audit(1756351455.685:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8163 comm="syz.0.598" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 140.879681][ T40] audit: type=1326 audit(1756351455.685:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8163 comm="syz.0.598" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 140.887150][ T40] audit: type=1326 audit(1756351455.685:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8163 comm="syz.0.598" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e598 code=0x7ffc0000 [ 140.896046][ T40] audit: type=1326 audit(1756351455.685:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8163 comm="syz.0.598" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e598 code=0x7ffc0000 [ 140.902659][ T40] audit: type=1326 audit(1756351455.685:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8163 comm="syz.0.598" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e598 code=0x7ffc0000 [ 140.909650][ T40] audit: type=1326 audit(1756351455.685:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8163 comm="syz.0.598" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e598 code=0x7ffc0000 [ 140.916223][ T40] audit: type=1326 audit(1756351455.685:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8163 comm="syz.0.598" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e598 code=0x7ffc0000 [ 140.922859][ T40] audit: type=1326 audit(1756351455.685:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8163 comm="syz.0.598" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e598 code=0x7ffc0000 [ 141.115642][ T8168] PID 8168 killed due to inadequate hugepage pool [ 141.334844][ T8178] bond0: entered promiscuous mode [ 141.337294][ T8178] batadv0: entered promiscuous mode [ 141.339436][ T8178] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 141.342547][ T8178] hsr1: entered allmulticast mode [ 141.344329][ T8178] bond0: entered allmulticast mode [ 141.345937][ T8178] batadv0: entered allmulticast mode [ 141.348031][ T8178] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 141.351854][ T8178] bond0: left promiscuous mode [ 141.353849][ T8178] batadv0: left promiscuous mode [ 141.502986][ T8186] netlink: 24 bytes leftover after parsing attributes in process `syz.0.606'. [ 141.633312][ T8188] FAULT_INJECTION: forcing a failure. [ 141.633312][ T8188] name failslab, interval 1, probability 0, space 0, times 1 [ 141.637232][ T8188] CPU: 1 UID: 0 PID: 8188 Comm: syz.3.607 Not tainted syzkaller #0 PREEMPT(full) [ 141.637249][ T8188] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 141.637256][ T8188] Call Trace: [ 141.637260][ T8188] [ 141.637265][ T8188] dump_stack_lvl+0x16c/0x1f0 [ 141.637285][ T8188] should_fail_ex+0x512/0x640 [ 141.637300][ T8188] ? __kmalloc_noprof+0xbf/0x510 [ 141.637314][ T8188] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 141.637333][ T8188] should_failslab+0xc2/0x120 [ 141.637347][ T8188] __kmalloc_noprof+0xd2/0x510 [ 141.637359][ T8188] ? kmem_cache_free+0x2d1/0x4d0 [ 141.637372][ T8188] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 141.637392][ T8188] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 141.637410][ T8188] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 141.637431][ T8188] ? bpf_lsm_capable+0x9/0x10 [ 141.637442][ T8188] ? security_capable+0x7e/0x260 [ 141.637458][ T8188] ? ns_capable+0xd7/0x110 [ 141.637470][ T8188] genl_rcv_msg+0x55c/0x800 [ 141.637488][ T8188] ? __pfx_genl_rcv_msg+0x10/0x10 [ 141.637505][ T8188] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 141.637516][ T8188] ? __pfx_nl80211_set_key+0x10/0x10 [ 141.637531][ T8188] ? __pfx_nl80211_post_doit+0x10/0x10 [ 141.637551][ T8188] netlink_rcv_skb+0x155/0x420 [ 141.637566][ T8188] ? __pfx_genl_rcv_msg+0x10/0x10 [ 141.637583][ T8188] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 141.637603][ T8188] ? netlink_deliver_tap+0x1ae/0xd30 [ 141.637619][ T8188] genl_rcv+0x28/0x40 [ 141.637634][ T8188] netlink_unicast+0x5aa/0x870 [ 141.637651][ T8188] ? __pfx_netlink_unicast+0x10/0x10 [ 141.637665][ T8188] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 141.637684][ T8188] netlink_sendmsg+0x8d1/0xdd0 [ 141.637701][ T8188] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.637717][ T8188] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 141.637731][ T8188] ____sys_sendmsg+0xa95/0xc70 [ 141.637743][ T8188] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.637752][ T8188] ? get_compat_msghdr+0x11a/0x170 [ 141.637772][ T8188] ___sys_sendmsg+0x134/0x1d0 [ 141.637787][ T8188] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.637807][ T8188] ? find_held_lock+0x2b/0x80 [ 141.637827][ T8188] __sys_sendmsg+0x16d/0x220 [ 141.637840][ T8188] ? __pfx___sys_sendmsg+0x10/0x10 [ 141.637860][ T8188] ? rcu_is_watching+0x12/0xc0 [ 141.637873][ T8188] __do_fast_syscall_32+0x7c/0x3a0 [ 141.637889][ T8188] do_fast_syscall_32+0x32/0x80 [ 141.637903][ T8188] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 141.637917][ T8188] RIP: 0023:0xf70ee579 [ 141.637925][ T8188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 141.637935][ T8188] RSP: 002b:00000000f54de55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 141.637946][ T8188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 141.637952][ T8188] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.637958][ T8188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 141.637963][ T8188] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 141.637969][ T8188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 141.637982][ T8188] [ 141.782426][ T1471] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 141.799930][ T8190] netlink: 132 bytes leftover after parsing attributes in process `syz.3.608'. [ 141.865940][ T8192] PID 8192 killed due to inadequate hugepage pool [ 141.957776][ T1471] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 141.961613][ T1471] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.964537][ T1471] usb 5-1: Product: syz [ 141.965978][ T1471] usb 5-1: Manufacturer: syz [ 141.967471][ T1471] usb 5-1: SerialNumber: syz [ 141.968301][ T8200] trusted_key: encrypted_key: insufficient parameters specified [ 142.437576][ T1471] rtl8150 5-1:1.0: couldn't reset the device [ 142.439638][ T1471] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 142.448885][ T1471] usb 5-1: USB disconnect, device number 18 [ 142.978594][ T8215] vxcan0: tx drop: invalid sa for name 0x0000000000000002 [ 142.983240][ T8215] __nla_validate_parse: 2 callbacks suppressed [ 142.983250][ T8215] netlink: 20 bytes leftover after parsing attributes in process `syz.0.616'. [ 143.151376][ T8219] PID 8219 killed due to inadequate hugepage pool [ 143.320880][ T8230] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3897524436 (7795048872 ns) > initial count (2759807172 ns). Using initial count to start timer. [ 143.330155][ T8230] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3996681224 (15986724896 ns) > initial count (3709615788 ns). Using initial count to start timer. [ 143.361745][ T8238] netlink: 24 bytes leftover after parsing attributes in process `syz.3.624'. [ 143.365711][ T8232] netlink: 'syz.1.622': attribute type 21 has an invalid length. [ 143.368970][ T8232] netlink: 128 bytes leftover after parsing attributes in process `syz.1.622'. [ 143.390659][ T8232] netlink: 'syz.1.622': attribute type 5 has an invalid length. [ 143.393882][ T8232] netlink: 'syz.1.622': attribute type 6 has an invalid length. [ 143.400777][ T8232] netlink: 3 bytes leftover after parsing attributes in process `syz.1.622'. [ 143.410088][ T8232] lo speed is unknown, defaulting to 1000 [ 143.411966][ T8232] lo speed is unknown, defaulting to 1000 [ 143.414378][ T8232] lo speed is unknown, defaulting to 1000 [ 143.419323][ T8232] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 143.425229][ T8232] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 143.437860][ T8232] lo speed is unknown, defaulting to 1000 [ 143.441253][ T8232] lo speed is unknown, defaulting to 1000 [ 143.444113][ T8232] lo speed is unknown, defaulting to 1000 [ 143.447124][ T8232] lo speed is unknown, defaulting to 1000 [ 143.453897][ T8232] smc: removing ib device syz1 [ 143.651767][ T8247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.627'. [ 143.674743][ T6062] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 143.848938][ T6062] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 143.851929][ T6062] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.854415][ T6062] usb 8-1: Product: syz [ 143.855761][ T6062] usb 8-1: Manufacturer: syz [ 143.857316][ T6062] usb 8-1: SerialNumber: syz [ 143.992625][ T8251] bridge_slave_0: left allmulticast mode [ 143.994592][ T8251] bridge_slave_0: left promiscuous mode [ 143.997678][ T8251] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.029057][ T8251] bridge_slave_1: left allmulticast mode [ 144.030964][ T8251] bridge_slave_1: left promiscuous mode [ 144.033281][ T8251] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.045887][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.629'. [ 144.072716][ T8251] bond0: (slave bond_slave_0): Releasing backup interface [ 144.134910][ T8251] bond0: (slave bond_slave_1): Releasing backup interface [ 144.156837][ T8251] team0: Port device team_slave_0 removed [ 144.173919][ T8251] team0: Port device team_slave_1 removed [ 144.176332][ T8251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.180918][ T8251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.195334][ T8251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.197839][ T8251] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.208371][ T6044] lo speed is unknown, defaulting to 1000 [ 144.314074][ T8253] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.336541][ T8256] lo speed is unknown, defaulting to 1000 [ 144.339145][ T6062] rtl8150 8-1:1.0: couldn't reset the device [ 144.341324][ T6062] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 144.353902][ T6062] usb 8-1: USB disconnect, device number 11 [ 144.367877][ T8258] ubi: mtd0 is already attached to ubi31 [ 144.457596][ T8253] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.545577][ T8253] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.656579][ T8253] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.774970][ T77] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.782156][ T77] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.791128][ T77] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.800565][ T77] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.944045][ T8272] tmpfs: Bad value for 'mpol' [ 146.028325][ T8299] netlink: 20 bytes leftover after parsing attributes in process `syz.3.641'. [ 146.096168][ T8301] PID 8301 killed due to inadequate hugepage pool [ 146.452538][ T8324] PID 8324 killed due to inadequate hugepage pool [ 146.490518][ T8318] infiniband syz1: set active [ 146.492346][ T8318] infiniband syz1: added syz_tun [ 146.515895][ T8318] RDS/IB: syz1: added [ 146.524809][ T8318] smc: adding ib device syz1 with port count 1 [ 146.529927][ T8318] smc: ib device syz1 port 1 has pnetid [ 146.605174][ T8333] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.608243][ T8333] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 146.660380][ T8321] netlink: 16 bytes leftover after parsing attributes in process `syz.3.649'. [ 146.688621][ T8333] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.693123][ T8333] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 146.768034][ T8333] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.771286][ T8333] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 146.854377][ T8333] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.857523][ T8333] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 146.911395][ T8353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.657'. [ 146.948103][ T77] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 146.950945][ T77] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 146.958273][ T77] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 146.960846][ T77] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 146.969909][ T77] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 146.972587][ T77] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 146.980588][ T1141] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 146.983292][ T1141] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 147.145985][ T40] kauditd_printk_skb: 321 callbacks suppressed [ 147.145997][ T40] audit: type=1326 audit(1756351461.569:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.2.659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 147.156737][ T40] audit: type=1326 audit(1756351461.569:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.2.659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 147.163867][ T40] audit: type=1326 audit(1756351461.578:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.2.659" exe="/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 147.170923][ T40] audit: type=1326 audit(1756351461.578:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.2.659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 147.177724][ T40] audit: type=1326 audit(1756351461.578:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.2.659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 147.184453][ T40] audit: type=1326 audit(1756351461.587:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.2.659" exe="/syz-executor" sig=0 arch=40000003 syscall=52 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 147.196315][ T40] audit: type=1326 audit(1756351461.587:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.2.659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 147.204046][ T40] audit: type=1326 audit(1756351461.587:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.2.659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 147.211930][ T40] audit: type=1326 audit(1756351461.597:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.2.659" exe="/syz-executor" sig=0 arch=40000003 syscall=10 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 147.220343][ T40] audit: type=1326 audit(1756351461.597:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.2.659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 147.298076][ T8366] netlink: 28 bytes leftover after parsing attributes in process `syz.0.660'. [ 147.304621][ T8366] input: syz0 as /devices/virtual/input/input12 [ 147.386983][ T8370] PID 8370 killed due to inadequate hugepage pool [ 147.524609][ T6196] IPVS: starting estimator thread 0... [ 147.630415][ T8382] IPVS: using max 46 ests per chain, 110400 per kthread [ 148.186335][ T8399] PID 8399 killed due to inadequate hugepage pool [ 148.495106][ T8410] __nla_validate_parse: 2 callbacks suppressed [ 148.495120][ T8410] netlink: 24 bytes leftover after parsing attributes in process `syz.2.672'. [ 148.795475][ T6044] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 148.959149][ T6044] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 148.962417][ T6044] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.965235][ T6044] usb 7-1: Product: syz [ 148.966775][ T6044] usb 7-1: Manufacturer: syz [ 148.968524][ T6044] usb 7-1: SerialNumber: syz [ 149.432833][ T6044] rtl8150 7-1:1.0: couldn't reset the device [ 149.435144][ T6044] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 149.441139][ T6044] usb 7-1: USB disconnect, device number 13 [ 149.534539][ T8418] netlink: 'syz.1.675': attribute type 1 has an invalid length. [ 149.802238][ T8427] netlink: 16 bytes leftover after parsing attributes in process `syz.1.676'. [ 149.806552][ T8427] netlink: 'syz.1.676': attribute type 23 has an invalid length. [ 150.417913][ T8446] fuse: Unknown parameter 'group_Id' [ 150.535788][ T8449] netlink: 'syz.1.685': attribute type 6 has an invalid length. [ 150.615403][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.687'. [ 150.661951][ T8456] netlink: 24 bytes leftover after parsing attributes in process `syz.1.688'. [ 151.540368][ T8470] PID 8470 killed due to inadequate hugepage pool [ 153.316839][ T8503] netlink: 24 bytes leftover after parsing attributes in process `syz.0.698'. [ 153.346321][ T8504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.697'. [ 153.354212][ T8504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.697'. [ 153.358918][ T8504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.697'. [ 153.596161][ T6196] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 153.603916][ T8506] PID 8506 killed due to inadequate hugepage pool [ 153.825965][ T6196] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 153.829203][ T6196] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.831984][ T6196] usb 5-1: Product: syz [ 153.834527][ T6196] usb 5-1: Manufacturer: syz [ 153.836108][ T6196] usb 5-1: SerialNumber: syz [ 153.973413][ T24] IPVS: starting estimator thread 0... [ 154.076640][ T8521] IPVS: using max 46 ests per chain, 110400 per kthread [ 154.324373][ T8525] rdma_rxe: rxe_newlink: failed to add syz_tun [ 154.361193][ T6196] rtl8150 5-1:1.0: couldn't reset the device [ 154.363995][ T6196] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 154.377492][ T6196] usb 5-1: USB disconnect, device number 19 [ 154.488222][ T8525] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.539970][ T8525] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.543613][ T8526] netlink: 16 bytes leftover after parsing attributes in process `syz.1.705'. [ 154.630554][ T8525] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.710982][ T8525] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.788567][ T1141] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.797402][ T1141] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.807882][ T1141] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.819721][ T77] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.950950][ T8538] netlink: 24 bytes leftover after parsing attributes in process `syz.1.715'. [ 155.651592][ T8542] ubi31: detaching mtd0 [ 155.655727][ T8542] ubi31: mtd0 is detached [ 155.712041][ T8545] netlink: 24 bytes leftover after parsing attributes in process `syz.2.709'. [ 155.807160][ T40] kauditd_printk_skb: 73 callbacks suppressed [ 155.807174][ T40] audit: type=1800 audit(1756351469.669:439): pid=8552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.711" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 156.033159][ T6044] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 156.098426][ T8561] fuse: Bad value for 'fd' [ 156.228486][ T6044] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 156.232021][ T6044] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.235410][ T6044] usb 7-1: Product: syz [ 156.237113][ T6044] usb 7-1: Manufacturer: syz [ 156.238941][ T6044] usb 7-1: SerialNumber: syz [ 156.662999][ T8568] overlayfs: failed to clone upperpath [ 156.713894][ T6044] rtl8150 7-1:1.0: couldn't reset the device [ 156.716543][ T6044] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 156.722851][ T6044] usb 7-1: USB disconnect, device number 14 [ 156.843790][ T8571] syz1: rxe_newlink: already configured on syz_tun [ 157.008800][ T8571] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 157.011878][ T8571] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 157.062379][ T8573] netlink: 16 bytes leftover after parsing attributes in process `syz.3.716'. [ 157.105949][ T8571] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 157.109507][ T8571] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 157.191567][ T8571] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 157.194759][ T8571] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 157.286984][ T8571] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 157.290163][ T8571] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 157.362305][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 157.364953][ T12] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 157.372807][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 157.376604][ T12] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 157.383249][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 157.386043][ T12] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 157.393263][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 157.396019][ T12] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 158.017368][ T8589] binder: 8580:8589 ioctl c0306201 0 returned -14 [ 158.064243][ T5991] Bluetooth: hci3: command 0x0c1a tx timeout [ 158.197974][ T8604] netlink: 24 bytes leftover after parsing attributes in process `syz.1.726'. [ 158.393353][ T40] audit: type=1800 audit(1756351472.083:440): pid=8610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.728" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 158.566786][ T1471] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 158.727234][ T1471] usb 8-1: Using ep0 maxpacket: 32 [ 158.731238][ T1471] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 158.734798][ T1471] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 158.739349][ T1471] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 158.743710][ T1471] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 158.746827][ T1471] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 158.750886][ T1471] usb 8-1: config 0 interface 0 has no altsetting 0 [ 158.754688][ T1471] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 158.757424][ T1471] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 158.760042][ T1471] usb 8-1: Product: syz [ 158.761327][ T1471] usb 8-1: Manufacturer: syz [ 158.762739][ T1471] usb 8-1: SerialNumber: syz [ 158.765843][ T1471] usb 8-1: config 0 descriptor?? [ 158.768918][ T1471] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 158.772693][ T1471] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 159.708819][ T8623] ldusb 8-1:0.0: Couldn't submit interrupt_in_urb -90 [ 159.977837][ T1471] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 160.152706][ T1471] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 160.155925][ T1471] usb 5-1: config 0 has no interface number 0 [ 160.158282][ T1471] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 160.162897][ T1471] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 160.167400][ T1471] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 160.171085][ T1471] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.176945][ T1471] usb 5-1: config 0 descriptor?? [ 160.179762][ T8632] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 160.186959][ T1471] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 160.415464][ T8632] ldusb 8-1:0.0: Couldn't submit interrupt_in_urb -90 [ 160.455271][ T8642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.733'. [ 160.458153][ T8642] netlink: 'syz.2.733': attribute type 5 has an invalid length. [ 160.461310][ T8642] netlink: 20 bytes leftover after parsing attributes in process `syz.2.733'. [ 160.461358][ T8644] rdma_rxe: rxe_newlink: failed to add syz_tun [ 160.497308][ T24] usb 5-1: USB disconnect, device number 20 [ 160.629432][ T8644] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.682827][ T8645] netlink: 16 bytes leftover after parsing attributes in process `syz.1.736'. [ 160.733753][ T8644] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.805285][ T8644] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.869078][ T8644] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.944138][ T1141] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.952989][ T59] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.961755][ T59] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.970282][ T59] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.405836][ T8663] ldusb 8-1:0.0: Couldn't submit interrupt_in_urb -90 [ 161.533750][ T67] usb 8-1: USB disconnect, device number 12 [ 161.549587][ T67] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 161.651758][ T8668] netlink: 24 bytes leftover after parsing attributes in process `syz.0.749'. [ 161.944934][ T61] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 162.119583][ T61] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 162.122827][ T61] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.126367][ T61] usb 5-1: Product: syz [ 162.128415][ T61] usb 5-1: Manufacturer: syz [ 162.130429][ T61] usb 5-1: SerialNumber: syz [ 162.596645][ T61] rtl8150 5-1:1.0: couldn't reset the device [ 162.598820][ T61] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 162.603970][ T61] usb 5-1: USB disconnect, device number 21 [ 163.722825][ T8687] PID 8687 killed due to inadequate hugepage pool [ 164.233680][ T8695] rdma_rxe: rxe_newlink: failed to add syz_tun [ 164.417089][ T8695] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.422542][ T8700] rdma_rxe: rxe_newlink: failed to add syz_tun [ 164.470794][ T8696] netlink: 16 bytes leftover after parsing attributes in process `syz.0.747'. [ 164.484851][ T8695] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.506033][ T8707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.751'. [ 164.625348][ T8695] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.648977][ T8708] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.704233][ T8713] netlink: 16 bytes leftover after parsing attributes in process `syz.1.748'. [ 164.796577][ T8695] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.815108][ T8708] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.902594][ T1141] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.910102][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.918147][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.924928][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.966052][ T8708] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.012772][ T8715] netlink: 24 bytes leftover after parsing attributes in process `syz.3.752'. [ 165.036782][ T8708] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.146005][ T1141] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.162179][ T1144] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.168884][ T1144] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.175596][ T1144] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.221245][ T8721] netlink: 'syz.0.754': attribute type 1 has an invalid length. [ 165.223656][ T8721] netlink: 220 bytes leftover after parsing attributes in process `syz.0.754'. [ 165.303802][ T8724] vlan1: entered allmulticast mode [ 165.305795][ T8724] bond0: entered allmulticast mode [ 165.347400][ T6307] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 165.360269][ T8725] vlan1: entered allmulticast mode [ 165.518838][ T6307] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 165.521800][ T6307] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.524242][ T6307] usb 8-1: Product: syz [ 165.525560][ T6307] usb 8-1: Manufacturer: syz [ 165.528234][ T6307] usb 8-1: SerialNumber: syz [ 165.996745][ T6307] rtl8150 8-1:1.0: couldn't reset the device [ 165.998786][ T6307] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 166.003649][ T6307] usb 8-1: USB disconnect, device number 13 [ 166.169812][ T8730] netlink: 28 bytes leftover after parsing attributes in process `syz.0.757'. [ 166.462929][ T8736] 9pnet_fd: Insufficient options for proto=fd [ 166.524877][ T8738] PID 8738 killed due to inadequate hugepage pool [ 166.757061][ T8750] devtmpfs: Cannot change global quota limit on remount [ 167.129879][ T61] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 167.313259][ T61] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 167.317776][ T61] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.321895][ T61] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 167.327450][ T61] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.334982][ T61] usb 8-1: config 0 descriptor?? [ 167.792170][ T61] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 167.961426][ T8767] ================================================================== [ 167.961438][ T8767] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 167.961477][ T8767] Write of size 8 at addr ffffc90004c99000 by task syz.2.765/8767 [ 167.961491][ T8767] [ 167.961498][ T8767] CPU: 1 UID: 0 PID: 8767 Comm: syz.2.765 Not tainted syzkaller #0 PREEMPT(full) [ 167.961517][ T8767] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 167.961529][ T8767] Call Trace: [ 167.961536][ T8767] [ 167.961544][ T8767] dump_stack_lvl+0x116/0x1f0 [ 167.961573][ T8767] print_report+0xcd/0x630 [ 167.961596][ T8767] ? __virt_addr_valid+0x81/0x610 [ 167.961614][ T8767] ? sys_imageblit+0x1a6f/0x1e60 [ 167.961624][ T8767] kasan_report+0xe0/0x110 [ 167.961637][ T8767] ? sys_imageblit+0x1a6f/0x1e60 [ 167.961649][ T8767] sys_imageblit+0x1a6f/0x1e60 [ 167.961661][ T8767] ? __pfx_sys_imageblit+0x10/0x10 [ 167.961671][ T8767] ? do_raw_spin_lock+0x12c/0x2b0 [ 167.961688][ T8767] ? find_held_lock+0x2b/0x80 [ 167.961699][ T8767] ? queue_work_on+0x12a/0x1f0 [ 167.961709][ T8767] ? fb_pad_unaligned_buffer+0x38d/0x440 [ 167.961723][ T8767] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 167.961739][ T8767] bit_putcs+0x90f/0xde0 [ 167.961754][ T8767] ? __pfx___schedule+0x10/0x10 [ 167.961768][ T8767] ? __pfx_bit_putcs+0x10/0x10 [ 167.961783][ T8767] ? fb_get_color_depth+0x120/0x250 [ 167.961796][ T8767] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 167.961813][ T8767] ? __pfx_bit_putcs+0x10/0x10 [ 167.961826][ T8767] fbcon_putcs+0x384/0x4a0 [ 167.961840][ T8767] do_update_region+0x2e6/0x3f0 [ 167.961851][ T8767] invert_screen+0x1e4/0x590 [ 167.961865][ T8767] ? __pfx_invert_screen+0x10/0x10 [ 167.961878][ T8767] ? __pfx_complement_pos+0x10/0x10 [ 167.961891][ T8767] ? vc_do_resize+0x24d/0x10e0 [ 167.961903][ T8767] ? __vmalloc_node_noprof+0xad/0xf0 [ 167.961914][ T8767] clear_selection+0x59/0x70 [ 167.961926][ T8767] vc_do_resize+0xd9b/0x10e0 [ 167.961941][ T8767] ? __pfx_vc_do_resize+0x10/0x10 [ 167.961956][ T8767] fbcon_set_disp+0x7ad/0xe50 [ 167.961968][ T8767] set_con2fb_map+0x703/0x1080 [ 167.961982][ T8767] fbcon_set_con2fb_map_ioctl+0x16c/0x220 [ 167.961997][ T8767] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 167.962012][ T8767] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 167.962028][ T8767] do_fb_ioctl+0x328/0x7e0 [ 167.962044][ T8767] ? __pfx_do_fb_ioctl+0x10/0x10 [ 167.962059][ T8767] ? lockdep_hardirqs_on+0x7c/0x110 [ 167.962072][ T8767] ? find_held_lock+0x2b/0x80 [ 167.962089][ T8767] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 167.962107][ T8767] fb_compat_ioctl+0x55e/0x670 [ 167.962122][ T8767] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 167.962138][ T8767] ? hook_file_ioctl_common+0x145/0x410 [ 167.962153][ T8767] ? __fget_files+0x20e/0x3c0 [ 167.962164][ T8767] ? __ia32_compat_sys_openat+0x160/0x210 [ 167.962176][ T8767] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 167.962191][ T8767] __ia32_compat_sys_ioctl+0x242/0x370 [ 167.962208][ T8767] __do_fast_syscall_32+0x7c/0x3a0 [ 167.962223][ T8767] do_fast_syscall_32+0x32/0x80 [ 167.962238][ T8767] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 167.962251][ T8767] RIP: 0023:0xf70be579 [ 167.962259][ T8767] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 167.962270][ T8767] RSP: 002b:00000000f546c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 167.962280][ T8767] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000004610 [ 167.962287][ T8767] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 167.962294][ T8767] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 167.962304][ T8767] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 167.962310][ T8767] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 167.962319][ T8767] [ 167.962323][ T8767] [ 167.962326][ T8767] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90004999000 allocated at drm_gem_shmem_vmap_locked+0x561/0x7e0 [ 167.962348][ T8767] Memory state around the buggy address: [ 167.962354][ T8767] ffffc90004c98f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 167.962361][ T8767] ffffc90004c98f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 167.962370][ T8767] >ffffc90004c99000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 167.962375][ T8767] ^ [ 167.962381][ T8767] ffffc90004c99080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 167.962388][ T8767] ffffc90004c99100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 167.962393][ T8767] ================================================================== [ 167.962399][ T8767] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 167.962406][ T8767] CPU: 1 UID: 0 PID: 8767 Comm: syz.2.765 Not tainted syzkaller #0 PREEMPT(full) [ 167.962418][ T8767] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 167.962424][ T8767] Call Trace: [ 167.962428][ T8767] [ 167.962432][ T8767] dump_stack_lvl+0x3d/0x1f0 [ 167.962445][ T8767] vpanic+0x6e8/0x7a0 [ 167.962461][ T8767] ? __pfx_vpanic+0x10/0x10 [ 167.962475][ T8767] ? __pfx_vprintk_emit+0x10/0x10 [ 167.962487][ T8767] ? sys_imageblit+0x1a6f/0x1e60 [ 167.962497][ T8767] panic+0xca/0xd0 [ 167.962511][ T8767] ? __pfx_panic+0x10/0x10 [ 167.962528][ T8767] check_panic_on_warn+0xab/0xb0 [ 167.962543][ T8767] end_report+0x107/0x170 [ 167.962558][ T8767] kasan_report+0xee/0x110 [ 167.962571][ T8767] ? sys_imageblit+0x1a6f/0x1e60 [ 167.962582][ T8767] sys_imageblit+0x1a6f/0x1e60 [ 167.962594][ T8767] ? __pfx_sys_imageblit+0x10/0x10 [ 167.962605][ T8767] ? do_raw_spin_lock+0x12c/0x2b0 [ 167.962620][ T8767] ? find_held_lock+0x2b/0x80 [ 167.962632][ T8767] ? queue_work_on+0x12a/0x1f0 [ 167.962641][ T8767] ? fb_pad_unaligned_buffer+0x38d/0x440 [ 167.962655][ T8767] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 167.962669][ T8767] bit_putcs+0x90f/0xde0 [ 167.962684][ T8767] ? __pfx___schedule+0x10/0x10 [ 167.962697][ T8767] ? __pfx_bit_putcs+0x10/0x10 [ 167.962712][ T8767] ? fb_get_color_depth+0x120/0x250 [ 167.962725][ T8767] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 167.962741][ T8767] ? __pfx_bit_putcs+0x10/0x10 [ 167.962755][ T8767] fbcon_putcs+0x384/0x4a0 [ 167.962768][ T8767] do_update_region+0x2e6/0x3f0 [ 167.962779][ T8767] invert_screen+0x1e4/0x590 [ 167.962792][ T8767] ? __pfx_invert_screen+0x10/0x10 [ 167.962805][ T8767] ? __pfx_complement_pos+0x10/0x10 [ 167.962818][ T8767] ? vc_do_resize+0x24d/0x10e0 [ 167.962830][ T8767] ? __vmalloc_node_noprof+0xad/0xf0 [ 167.962840][ T8767] clear_selection+0x59/0x70 [ 167.962851][ T8767] vc_do_resize+0xd9b/0x10e0 [ 167.962867][ T8767] ? __pfx_vc_do_resize+0x10/0x10 [ 167.962882][ T8767] fbcon_set_disp+0x7ad/0xe50 [ 167.962894][ T8767] set_con2fb_map+0x703/0x1080 [ 167.962908][ T8767] fbcon_set_con2fb_map_ioctl+0x16c/0x220 [ 167.962923][ T8767] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 167.962939][ T8767] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 167.962971][ T8767] do_fb_ioctl+0x328/0x7e0 [ 167.962987][ T8767] ? __pfx_do_fb_ioctl+0x10/0x10 [ 167.963002][ T8767] ? lockdep_hardirqs_on+0x7c/0x110 [ 167.963016][ T8767] ? find_held_lock+0x2b/0x80 [ 167.963056][ T8767] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 167.963075][ T8767] fb_compat_ioctl+0x55e/0x670 [ 167.963091][ T8767] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 167.963106][ T8767] ? hook_file_ioctl_common+0x145/0x410 [ 167.963121][ T8767] ? __fget_files+0x20e/0x3c0 [ 167.963137][ T8767] ? __ia32_compat_sys_openat+0x160/0x210 [ 167.963149][ T8767] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 167.963168][ T8767] __ia32_compat_sys_ioctl+0x242/0x370 [ 167.963185][ T8767] __do_fast_syscall_32+0x7c/0x3a0 [ 167.963200][ T8767] do_fast_syscall_32+0x32/0x80 [ 167.963215][ T8767] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 167.963227][ T8767] RIP: 0023:0xf70be579 [ 167.963235][ T8767] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 167.963246][ T8767] RSP: 002b:00000000f546c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 167.963256][ T8767] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000004610 [ 167.963262][ T8767] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 167.963269][ T8767] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 167.963275][ T8767] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 167.963281][ T8767] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 167.963291][ T8767] [ 167.964245][ T8767] Kernel Offset: disabled VM DIAGNOSIS: 03:24:47 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff816057c0 RDX=ffffffff8e2977c0 RSI=ffffffff81605808 RDI=ffffffff93daefe0 RBP=0000000000000000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff27b5dfc R10=ffffffff93daefe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81605809 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974c3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000032711ffc CR3=000000002399f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000073 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85617075 RDI=ffffffff9b0f9700 RBP=ffffffff9b0f96c0 RSP=ffffc90004f66e30 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257 R12=0000000000000000 R13=0000000000000073 R14=ffffffff9b0f96c0 R15=ffffffff85617010 RIP=ffffffff8561709f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880975c3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000326eeffc CR3=000000002399f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000010001 RBX=0000000000000000 RCX=ffffffff816057c0 RDX=ffff888022fda440 RSI=ffffffff81605808 RDI=ffffffff93daefe0 RBP=0000000000000002 RSP=ffffc90000538fd0 R8 =0000000000000001 R9 =fffffbfff27b5dfc R10=ffffffff93daefe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81605809 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880976c3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007efdbcb212c0 CR3=000000004b47f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff816057c0 RDX=ffff88801c338000 RSI=ffffffff81605808 RDI=ffffffff93daefe0 RBP=0000000000000003 RSP=ffffc900005e8fd0 R8 =0000000000000001 R9 =fffffbfff27b5dfc R10=ffffffff93daefe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81605809 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977c3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f540dda4 CR3=000000004b651000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000