last executing test programs: 10.430389351s ago: executing program 1 (id=3503): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x4044}, 0x40800) ioperm(0x0, 0xfffc, 0x8005) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001280)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2720, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000340)={0x0, 0x23, "c922705a2c11fc000a4401e9efa8f4016e3c47bfb17cc8a390d9c0d491aadf71d97a14"}, &(0x7f0000000400)=0x2b) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000440)=@assoc_value={r5, 0x6}, &(0x7f0000000480)=0x8) rseq(&(0x7f0000000040), 0x20, 0x1, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) socket$kcm(0x29, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x28, r6, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x78}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x4c040) 10.317190525s ago: executing program 1 (id=3505): r0 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2}}}, 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000300008b"]) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f00000000c0)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat2$dir(0xffffff9c, 0x0, &(0x7f0000000480)={0x100}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa000, 0x0, 0x0, 0x0, 0x0, 0x0) 9.294744236s ago: executing program 1 (id=3510): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x9c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket$unix(0x1, 0x5, 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffd000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010004000000000000", @ANYRES32=r4, @ANYBLOB="1c005e8008000700d20000000800060001000080080005ac1d000000"], 0x38}, 0x1, 0x0, 0x0, 0x400}, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ptrace$poke(0x4, r5, &(0x7f0000000080), 0x7) setrlimit(0x3, &(0x7f0000000040)={0x2, 0x6}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000040000000400000000000000", @ANYRES32, @ANYBLOB="00000008000000000000000000000000000000002467223d2241fed79863e0679fdd493710f68ae6601cff23db700a1be5db169a3e839c532baafe401bc67a3d334c2c6161cb4fe80724d308fbfb3ff845d23356e18b07011324f265a06723d4a20c234592dc9a7a491d6b1f246bdcbf6da0439dd4c914b3296ffe25b6e6e95a2b219df334bc50949b34bd78f8188aa2bb5b2ecd855c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xb8}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0xb, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='vxfs\x00', 0x1000080, 0x0) fcntl$setlease(r7, 0x400, 0x0) mq_open(&(0x7f0000000780)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x136, 0x0) 8.126396727s ago: executing program 0 (id=3512): pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1828401, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x6458ef3cb5fc8f66}, 0x20020000) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="3e0f00d5260f01c80f01df66b90004000066b8fd00c0fe66ba000000000f30362ef001ac070026640fc75f5e0f005700ea41003001652e0fb315ea666bd400", 0x3f}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200)={0x0, 0xb2, "6b0ab1d3f9e812ce8389323e36b2b290d72318e648a352e02a230d03bbf969ee9201c7b86e84f7a74e9199ee7ab37cd39c8b2971cac18c182c26c3c51bbceebd2db927a23bee5b7f097fcf465454c21c1c41609ecfc1e223e3ed2167760c17512b8bdb5cbd8416e84624def957a4e4b3ca64492b6c1543eaba973d8d57cef6daeb6373e5dfc78976c014e68efdb8109e862c00092dab1f1ae98d7405f53d3bd76e55aa17fa475888cf226135471003c89b44"}, &(0x7f0000000080)=0xba) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.872388979s ago: executing program 1 (id=3514): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000002300)='./file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x800080, 0x0) lstat(&(0x7f0000000280)='./bus\x00', &(0x7f0000000200)) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60, 0x4000}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20010, 0x284a0}}}}}}]}, 0x50}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) r5 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="2b637075422290f8d2aa62c7be202ee30a8c0c244b936bf60d4c1a0e74429c28717c70c47d688d12432ffc6d242edc2cec81869ec72d86769ee62ac753bd2e09defb532907334756a86f64499c6bda6b11338343982554f6e834b93a7c910a1ddeb1720729ee7e6f6790a7991bf4f5e97e7049083a73fab2d78414"], 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) getuid() read$FUSE(r1, &(0x7f00000027c0)={0x2020}, 0x2020) r6 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000340)={{0x1, 0x1, 0x18, r6, {0x8}}, './file0\x00'}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000680)={0x8000, 0x81, {}, {}, 0x2, 0x6}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000700), &(0x7f0000004980)=0xc) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb), 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x24, @none={0x0, 0xffff}}, 0x14) 7.189343508s ago: executing program 0 (id=3517): r0 = syz_pidfd_open(0xffffffffffffffff, 0x0) process_madvise(r0, &(0x7f0000002540)=[{&(0x7f00000012c0)="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", 0x1000}, {&(0x7f0000000140)="f17e815c56a7b0b91583608c60dfc910", 0x10}, {&(0x7f00000022c0)="63a1ae672ba2b700", 0x8}, {&(0x7f0000002300)="f4be5e3648c9beaf5afe53176cd065acd98d7a0e39e1480048c8b56aa0a30f7624a4bc2b5a18b5b1cf088b3c83255c34ce67d8b412542885f37c4a247864e3594179df97c862a83656bb1846946496935deb16e0b3e2df29ef0394cff63b294b8e1388a7a3f5746d0e6392288211fd6f10804d201bb0b8f405d9", 0x7a}, {&(0x7f0000002380)="c616cce8b10f015e9eb5094b756f7c744080b709c0c7036bc5f0207de07add8c465ff01a2bd3ab4a35b32780df28057438e6e19f962c6122b4d749feda65291013d4933b55dba83886a82d1e9a808cdfa4a305572c2804d6095e255d6eec1d1e8b5a162e1e1d54da15a6", 0x6a}, {&(0x7f0000002400)="8491c93e99c0a6f1cca62d1b2abcfb30118394447628435832790984c4ef54131ef63cd82b28a9fb1087eb095e969699703309488dbc5fb1983d416d426df90bb830c0fbf3249df733fb55f29c6614a6ce9260397628d2020e65f84b1f9c8231f1e5c3660764cff03b711755bee249fd9c78e08d62f2ba28b799738032702915205bec481890bcb4bc5e79610f3db11b68d3dfa8bef5d04005b96df729aeb82693694a23efc998f8265988721654d0e6", 0xb0}, {&(0x7f00000024c0)="ae78853b09e51b6a284e5cefc35728dfd8934b21072634c52d6f510061b7a7b2ecd2386f16a2c54e49fa3526a256b2ce1b589ed82759ccb39c5b09beb96669e2acac375527ede8383f3a652e67e00c141042785124b10461a27d9f8ff0c8c39d942d0ec4189059b5dd3a0371bee4e18d542e2674b6adabd5726fbe", 0x7b}], 0x7, 0xa, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0x10) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xfffd}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x80) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e1e, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00', 0x6}], 0x2, &(0x7f0000000040)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010100}}}], 0x18}, 0x44) r5 = syz_io_uring_setup(0x23d, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x7, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) iopl(0x3) readv(r1, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/233, 0xe9}], 0x2) r8 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x1, 0x0) fchdir(r9) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_auto}]}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 6.331888703s ago: executing program 0 (id=3519): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000002300)='./file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x800080, 0x0) lstat(&(0x7f0000000280)='./bus\x00', &(0x7f0000000200)) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60, 0x4000}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20010, 0x284a0}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}]}, 0x5c}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) r5 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-c'], 0x5) write$cgroup_subtree(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="2b637075422290f8d2aa62c7be202ee30a8c0c244b936bf60d4c1a0e74429c28717c70c47d688d12432ffc6d242edc2cec81869ec72d86769ee62ac753bd2e09defb532907334756a86f64499c6bda6b11338343982554f6e834b93a7c910a1ddeb1720729ee7e6f6790a7991bf4f5e97e7049083a73fab2d78414"], 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) getuid() read$FUSE(r1, &(0x7f00000027c0)={0x2020}, 0x2020) r6 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000340)={{0x1, 0x1, 0x18, r6, {0x8}}, './file0\x00'}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000680)={0x8000, 0x81, {}, {}, 0x2, 0x6}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000700), &(0x7f0000004980)=0xc) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb), 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x24, @none={0x0, 0xffff}}, 0x14) 6.331357193s ago: executing program 1 (id=3520): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0x52}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r3, &(0x7f0000000180)={0x2, 0x0, @multicast2, 0x4}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x89, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x4, 0x2, @vifc_lcl_addr=@loopback, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) 5.12415198s ago: executing program 2 (id=3526): setfsgid(0xee00) r0 = syz_clone(0xb8086200, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f00000004c0)='net/nfsfs\x00') munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x800, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e77, 0x20000000, 0x94a, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x800452d2, &(0x7f0000000100)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="2a0000800600000000000000000000020000000000000001000000000000002a00"/42], 0x2a) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0xfff4, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="796104000000000000007e000000c94b2348dfcb03df17fc8e5c228cb3f25de83aff0ab1ebe501c8934a5c4261efc8762bb5d29ad0a1c0b52bff2eb47850b87291aa56752f12681ca03357"], 0x14}}, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x18}) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/diskstats\x00', 0x0, 0x0) pread64(r9, &(0x7f0000000180)=""/73, 0x49, 0xac8c) 4.997304077s ago: executing program 0 (id=3527): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) syz_usb_connect$uac1(0x5, 0xb7, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa5, 0x3, 0x1, 0xf7, 0x70, 0x75, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4080, 0x7}, [@extension_unit={0xa, 0x24, 0x8, 0x2, 0x401, 0x4, "054c2c"}, @processing_unit={0xa, 0x24, 0x7, 0x5, 0x6, 0x5, "852dd6"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x1, 0x6, 0x1, {0x7, 0x25, 0x1, 0x82, 0x8, 0x3bd}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3, 0x9, 0x1}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x9, 0x4, 0x3, 0x5}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x73, 0xb0, "d16a96ce8867"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x4, 0x6, 0x2, "", "4697ab"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x3, 0x4, 0x6, 0x8, "", "85"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x0, 0x2, 0x5, {0x7, 0x25, 0x1, 0x1, 0x10, 0x1628}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x9, 0x3, 0xf7, 0x8, 0x8}, 0x41, &(0x7f0000000180)={0x5, 0xf, 0x41, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1, 0x40, 0x1}, @generic={0xe, 0x10, 0x3, "437066d448024c6f24ef4c"}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x1, 0xff0f, 0x9, [0xffc0cf, 0x0, 0xff0030, 0xc030, 0x3f00, 0x3f30]}]}, 0x4, [{0x2c, &(0x7f0000000200)=@string={0x2c, 0x3, "aa95dc080878c1067cb95117ba882d72d6f87ab79a0472b37535b02226ce0bd1566e81d71228ae2743f4"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3409}}, {0x2d, &(0x7f00000002c0)=@string={0x2d, 0x3, "6db624724af6b69e6155ea127e83b718adc39a684700f755584c71ec9fc18ad8aa687f588ad4cb786aa619"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x41e}}]}) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x40, 0xac, [{{0x9, 0x4, 0x0, 0x42, 0x1, 0x3, 0x1, 0x0, 0xec, {0x9, 0x21, 0x3, 0x5, 0x1, {0x22, 0x4f4}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x66, 0x82, 0x5}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4000) 4.320312961s ago: executing program 3 (id=3528): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0x395, 0x5, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setparam(r0, &(0x7f0000000180)=0x8) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000001040), &(0x7f0000001080)=0x4) r3 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x21e, 0x800}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="3c673d000000001b", @ANYRESDEC=0x0]) syz_fuse_handle_req(r4, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000006e40)={&(0x7f0000000340)={0x50, 0x0, 0x1000000000, {0x7, 0x21, 0x0, 0x772d62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x15, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fcffffff000000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000171006f8500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="1f12", 0x2, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r7 = add_key$user(&(0x7f0000006400), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000680)="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", 0x161, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r7}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="0200000001000500000000000400040000000000100002000000000020"], 0x24, 0x2) syz_fuse_handle_req(r4, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 4.087790213s ago: executing program 2 (id=3529): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000002300)='./file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x800080, 0x0) lstat(&(0x7f0000000280)='./bus\x00', &(0x7f0000000200)) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60, 0x4000}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20010, 0x284a0}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}]}, 0x5c}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) r5 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r5, 0x0, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) getuid() read$FUSE(r1, &(0x7f00000027c0)={0x2020}, 0x2020) r6 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000340)={{0x1, 0x1, 0x18, r6, {0x8}}, './file0\x00'}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000680)={0x8000, 0x81, {}, {}, 0x2, 0x6}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000700), &(0x7f0000004980)=0xc) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb), 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x24, @none={0x0, 0xffff}}, 0x14) 3.393970938s ago: executing program 3 (id=3530): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4044}, 0x40800) ioperm(0x0, 0xfffc, 0x8005) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001280)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2720, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000340)={0x0, 0x23, "c922705a2c11fc000a4401e9efa8f4016e3c47bfb17cc8a390d9c0d491aadf71d97a14"}, &(0x7f0000000400)=0x2b) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000440)=@assoc_value={r5, 0x6}, &(0x7f0000000480)=0x8) rseq(&(0x7f0000000040), 0x20, 0x1, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) socket$kcm(0x29, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x28, r6, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x78}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x4c040) 3.170400858s ago: executing program 3 (id=3531): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r1, &(0x7f0000000000)={0x2020}, 0x96) read$FUSE(r1, &(0x7f0000004440)={0x2020}, 0x2020) 3.129365144s ago: executing program 2 (id=3532): mknod(0x0, 0x8000fa4, 0x0) r0 = openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x16b060dd969302ec) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x66, &(0x7f0000000600)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x2c67, &(0x7f0000000140)={0x0, 0xdb4c, 0x2000, 0x2, 0xa0}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)) syz_io_uring_setup(0x6faa, &(0x7f0000000240)={0x0, 0x8135, 0x100, 0x3, 0x3d9}, &(0x7f00000003c0), &(0x7f0000000400)=0x0) r5 = accept4$inet6(r1, &(0x7f0000000440)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000480)=0x1c, 0x80800) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000500)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x11, 0x4004, @fd=r5, 0xe1, 0x0, 0x0, 0x5, 0x1, {0x2, r6}}) recvmmsg(0xffffffffffffffff, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file1\x00', 0xffffffffffffffff, 0x4000, r0}, 0x14) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a000700", @ANYRES32=r10, @ANYBLOB="14000200fe8000"/17], 0x2c}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@rand_addr=' \x01\x00', @in6=@private1, 0x4e22, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0xfffffffffffffffa}, {0xfffffffffffffffe}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x2, 0x2, 0xfffffffe}}, 0xe4) sendmmsg(r7, 0x0, 0x0, 0x1c) getpid() 3.02954907s ago: executing program 3 (id=3533): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000002300)='./file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x800080, 0x0) lstat(&(0x7f0000000280)='./bus\x00', &(0x7f0000000200)) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xd, 0x0, 0x480c5}, 0x0) r5 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="2b637075422290f8d2aa62c7be202ee30a8c0c244b936bf60d4c1a0e74429c28717c70c47d688d12432ffc6d242edc2cec81869ec72d86769ee62ac753bd2e09defb532907334756a86f64499c6bda6b11338343982554f6e834b93a7c910a1ddeb1720729ee7e6f6790a7991bf4f5e97e7049083a73fab2d78414"], 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) getuid() read$FUSE(r1, &(0x7f00000027c0)={0x2020}, 0x2020) r6 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000340)={{0x1, 0x1, 0x18, r6, {0x8}}, './file0\x00'}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000680)={0x8000, 0x81, {}, {}, 0x2, 0x6}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000700), &(0x7f0000004980)=0xc) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb), 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x24, @none={0x0, 0xffff}}, 0x14) 1.706811964s ago: executing program 3 (id=3534): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000240)="dfd9", 0x2, r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000480)=@assoc_value, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) keyctl$assume_authority(0x10, r0) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000)) openat$rfkill(0xffffff9c, &(0x7f0000000100), 0x20703, 0x0) openat$nci(0xffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000001c0)={0x410000, 0x2, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000800000000000000b415000095000000000000006f7e6fc62417a4624fe579ba21b81e4ef7b3551ada5489f3e7d9f2caf069d96efc885dee0ee1f6ee0ff4d77e237f889700911417b664190ab2264dda35820e91c25f0665e587692dbbe5bad94ded88adbcb00ca4ef38c15275b5cecd18b7f134ecc81ba6629f48f06c7df1"], &(0x7f0000000400)='GPL\x00', 0x80000001, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x7, 0x7fff, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000580)=[r2, r2, r2, r2], &(0x7f00000005c0)=[{0x3, 0x5, 0xa}, {0x0, 0x3, 0x2, 0x7}, {0x2, 0x1, 0x9, 0x3}, {0x0, 0x4, 0x7, 0xc}], 0x10, 0x80000001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) socket$can_raw(0x1d, 0x3, 0x1) socket(0x40000000015, 0x5, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0x40000000, 0x0, 0x3}, 0x8}) 1.705028592s ago: executing program 0 (id=3542): pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x6458ef3cb5fc8f66}, 0x20020000) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="3e0f00d5260f01c80f01df66b90004000066b8fd00c0fe66ba000000000f30362ef001ac070026640fc75f5e0f005700ea41003001652e0fb315ea666bd400", 0x3f}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200)={0x0, 0xb2, "6b0ab1d3f9e812ce8389323e36b2b290d72318e648a352e02a230d03bbf969ee9201c7b86e84f7a74e9199ee7ab37cd39c8b2971cac18c182c26c3c51bbceebd2db927a23bee5b7f097fcf465454c21c1c41609ecfc1e223e3ed2167760c17512b8bdb5cbd8416e84624def957a4e4b3ca64492b6c1543eaba973d8d57cef6daeb6373e5dfc78976c014e68efdb8109e862c00092dab1f1ae98d7405f53d3bd76e55aa17fa475888cf226135471003c89b44"}, &(0x7f0000000080)=0xba) ioctl$KVM_RUN(r3, 0xae80, 0x0) 947.375172ms ago: executing program 2 (id=3535): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x80, 0xd, 0x5, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}, @dev={0xfe, 0x80, '\x00', 0x11}, 0x7800, 0x8020, 0x14853, 0x400000}}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3}, 0x10, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000100)={@rand_addr=0x64010100, @local, 0x1, 0x4, [@local, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, 0x20) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, r2, 0x0) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x80}) syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}]}, &(0x7f0000000180)=0x10) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) 760.835641ms ago: executing program 1 (id=3536): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r0, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) openat$full(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5111) 30.25998ms ago: executing program 0 (id=3537): prctl$PR_SCHED_CORE(0x3e, 0xfffffffd, 0x0, 0x1, 0x0) r0 = io_uring_setup(0x3eaf, &(0x7f0000000100)={0x0, 0x0, 0x1000, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x22, &(0x7f0000000340), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0x52}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) pipe(&(0x7f00000001c0)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0) shutdown(r5, 0x1) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) 16.252772ms ago: executing program 3 (id=3538): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x9c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket$unix(0x1, 0x5, 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffd000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010004000000000000003f00000008000300", @ANYRES32=r4], 0x38}, 0x1, 0x0, 0x0, 0x400}, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ptrace$poke(0x4, r5, &(0x7f0000000080), 0x7) setrlimit(0x3, &(0x7f0000000040)={0x2, 0x6}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000040000000400000000000000", @ANYRES32, @ANYBLOB="00000008000000000000000000000000000000002467223d2241fed79863e0679fdd493710f68ae6601cff23db700a1be5db169a3e839c532baafe401bc67a3d334c2c6161cb4fe80724d308fbfb3ff845d23356e18b07011324f265a06723d4a20c234592dc9a7a491d6b1f246bdcbf6da0439dd4c914b3296ffe25b6e6e95a2b219df334bc50949b34bd78f8188aa2bb5b2ecd855c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xb8}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0xb, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='vxfs\x00', 0x1000080, 0x0) fcntl$setlease(r7, 0x400, 0x0) mq_open(&(0x7f0000000780)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x136, 0x0) 3.113093ms ago: executing program 2 (id=3539): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="010000000000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040508000600"], 0x5c}, 0x1, 0x0, 0x0, 0x4044}, 0x40800) ioperm(0x0, 0xfffc, 0x8005) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001280)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2720, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000340)={0x0, 0x23, "c922705a2c11fc000a4401e9efa8f4016e3c47bfb17cc8a390d9c0d491aadf71d97a14"}, &(0x7f0000000400)=0x2b) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000440)=@assoc_value={r5, 0x6}, &(0x7f0000000480)=0x8) rseq(&(0x7f0000000040), 0x20, 0x1, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) socket$kcm(0x29, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x28, r6, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x78}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x4c040) 0s ago: executing program 2 (id=3540): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x91}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b\xa30\\o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b [ 564.037806][T15709] dump_stack_lvl+0x16c/0x1f0 [ 564.037828][T15709] should_fail_ex+0x512/0x640 [ 564.037848][T15709] _copy_to_user+0x32/0xd0 [ 564.037862][T15709] simple_read_from_buffer+0xcb/0x170 [ 564.037876][T15709] proc_fail_nth_read+0x197/0x240 [ 564.037889][T15709] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 564.037902][T15709] ? rw_verify_area+0xcf/0x6c0 [ 564.037914][T15709] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 564.037926][T15709] vfs_read+0x1e1/0xcf0 [ 564.037942][T15709] ? __pfx_vfs_read+0x10/0x10 [ 564.037953][T15709] ? find_held_lock+0x2b/0x80 [ 564.037971][T15709] ? __fget_files+0x20e/0x3c0 [ 564.037988][T15709] ksys_read+0x12a/0x250 [ 564.038000][T15709] ? __pfx_ksys_read+0x10/0x10 [ 564.038014][T15709] ? rcu_is_watching+0x12/0xc0 [ 564.038028][T15709] __do_fast_syscall_32+0x7c/0x300 [ 564.038041][T15709] do_fast_syscall_32+0x32/0x80 [ 564.038051][T15709] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 564.038066][T15709] RIP: 0023:0xf7f14579 [ 564.038075][T15709] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 564.038086][T15709] RSP: 002b:00000000f5406590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 564.038097][T15709] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5406620 [ 564.038104][T15709] RDX: 000000000000000f RSI: 00000000f73a5ff4 RDI: 0000000000000000 [ 564.038110][T15709] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 564.038116][T15709] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 564.038122][T15709] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 564.038136][T15709] [ 564.089270][ T5337] Bluetooth: hci2: command tx timeout [ 564.265397][T15715] NILFS (nbd1): device size too small [ 564.305421][T15711] netlink: 'syz.0.2539': attribute type 39 has an invalid length. [ 564.592956][ T5337] Bluetooth: hci2: Malformed Event: 0x13 [ 564.636361][ T5983] usb usb40-port1: unable to enumerate USB device [ 564.727693][T15725] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 564.730464][T15725] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 564.736128][T15725] vhci_hcd vhci_hcd.0: Device attached [ 565.253103][T15726] vhci_hcd: connection closed [ 565.255254][ T1231] vhci_hcd: stop threads [ 565.258618][ T1231] vhci_hcd: release socket [ 565.259251][ T5983] usb 40-1: SetAddress Request (22) to port 0 [ 565.262607][ T1231] vhci_hcd: disconnect device [ 565.262726][ T5983] usb 40-1: new SuperSpeed USB device number 22 using vhci_hcd [ 565.290432][ T5983] usb 40-1: enqueue for inactive port 0 [ 565.489558][T15735] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 565.492373][T15735] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 565.494879][T15735] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 565.497455][T15735] comedi comedi3: 8255: I/O port conflict (0xfff,4) [ 565.500744][T15735] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 565.503890][T15735] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 565.506830][T15735] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 565.510351][T15735] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 565.512948][T15735] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 565.515806][T15735] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 565.518836][T15735] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 565.524209][T15735] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 565.527334][T15735] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 565.530686][T15735] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 565.533892][T15735] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 565.641102][T15740] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2546'. [ 565.693446][ T5983] usb usb40-port1: attempt power cycle [ 565.801508][T15748] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 565.806589][T15748] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.811329][T15748] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.938569][T15750] NILFS (nbd0): device size too small [ 566.007314][T15750] binder: 15749:15750 ioctl c0306201 0 returned -14 [ 566.038833][T15756] kAFS: No cell specified [ 566.169384][ T5337] Bluetooth: hci2: command tx timeout [ 566.208221][ T5337] Bluetooth: hci1: Malformed Event: 0x13 [ 566.892336][ T5983] usb usb40-port1: unable to enumerate USB device [ 567.456457][T15775] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 567.463485][T15775] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.466609][T15775] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.505018][T15781] NILFS (nbd1): device size too small [ 567.542769][T15781] binder: 15780:15781 ioctl c0306201 0 returned -14 [ 567.544650][T15788] i2c i2c-1: Invalid block write size 34 [ 567.612872][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.802681][T15791] vxfs: unable to read disk superblock at 1 [ 567.804925][T15791] vxfs: unable to read disk superblock at 8 [ 567.806937][T15791] vxfs: can't find superblock. [ 568.819916][T15821] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 568.836003][ T8965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.841033][ T8965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.964394][T15826] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 568.966818][T15826] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 568.982304][T15826] vhci_hcd vhci_hcd.0: Device attached [ 569.133507][T15827] vhci_hcd: connection closed [ 569.148509][ T8934] vhci_hcd: stop threads [ 569.152429][ T8934] vhci_hcd: release socket [ 569.154676][ T8934] vhci_hcd: disconnect device [ 569.478939][T15838] NILFS (nbd2): device size too small [ 570.225135][T15854] loop2: detected capacity change from 0 to 7 [ 570.235111][ T60] syz1: Port: 1 Link DOWN [ 570.254614][T15148] Dev loop2: unable to read RDB block 7 [ 570.255431][T15858] lo speed is unknown, defaulting to 1000 [ 570.257422][T15148] loop2: unable to read partition table [ 570.265893][T15148] loop2: partition table beyond EOD, truncated [ 570.279943][T15854] Dev loop2: unable to read RDB block 7 [ 570.282311][T15854] loop2: unable to read partition table [ 570.299670][T15854] loop2: partition table beyond EOD, truncated [ 570.304015][T15854] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 570.870408][T15874] syz.2.2588: page allocation failure: order:10, mode:0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 570.876000][T15874] CPU: 2 UID: 0 PID: 15874 Comm: syz.2.2588 Not tainted syzkaller #0 PREEMPT(full) [ 570.876024][T15874] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 570.876035][T15874] Call Trace: [ 570.876041][T15874] [ 570.876047][T15874] dump_stack_lvl+0x16c/0x1f0 [ 570.876078][T15874] warn_alloc+0x248/0x3a0 [ 570.876100][T15874] ? __pfx_warn_alloc+0x10/0x10 [ 570.876118][T15874] ? psi_memstall_leave+0x1e6/0x2d0 [ 570.876142][T15874] ? __alloc_pages_direct_compact+0x466/0x580 [ 570.876164][T15874] ? __pfx___alloc_pages_direct_compact+0x10/0x10 [ 570.876184][T15874] ? psi_memstall_leave+0x1e1/0x2d0 [ 570.876203][T15874] ? psi_memstall_leave+0x1e6/0x2d0 [ 570.876226][T15874] __alloc_frozen_pages_noprof+0xea2/0x23f0 [ 570.876257][T15874] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 570.876279][T15874] ? find_held_lock+0x2b/0x80 [ 570.876300][T15874] ? find_held_lock+0x2b/0x80 [ 570.876316][T15874] ? aa_file_perm+0x28f/0x12e0 [ 570.876343][T15874] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 570.876370][T15874] ? policy_nodemask+0xea/0x4e0 [ 570.876394][T15874] alloc_pages_mpol+0x1fb/0x550 [ 570.876417][T15874] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 570.876439][T15874] ? stack_trace_save+0x8e/0xc0 [ 570.876458][T15874] ? __pfx_stack_trace_save+0x10/0x10 [ 570.876479][T15874] ? qrtr_tun_write_iter+0xc1/0x1b0 [ 570.876499][T15874] ___kmalloc_large_node+0xed/0x160 [ 570.876526][T15874] ? qrtr_tun_write_iter+0xc1/0x1b0 [ 570.876545][T15874] __kmalloc_large_node_noprof+0x1c/0x70 [ 570.876596][T15874] __kmalloc_noprof.cold+0xc/0x61 [ 570.876620][T15874] ? common_file_perm+0x1a9/0x340 [ 570.876642][T15874] ? bpf_lsm_file_permission+0x9/0x10 [ 570.876669][T15874] qrtr_tun_write_iter+0xc1/0x1b0 [ 570.876691][T15874] aio_write+0x3b6/0x910 [ 570.876711][T15874] ? __pfx_aio_write+0x10/0x10 [ 570.876728][T15874] ? __lock_acquire+0xb97/0x1ce0 [ 570.876762][T15874] ? __might_fault+0xe3/0x190 [ 570.876780][T15874] ? __might_fault+0x13b/0x190 [ 570.876803][T15874] ? io_submit_one+0x1243/0x1df0 [ 570.876821][T15874] io_submit_one+0x1243/0x1df0 [ 570.876847][T15874] ? __lock_acquire+0xb97/0x1ce0 [ 570.876872][T15874] ? __pfx_io_submit_one+0x10/0x10 [ 570.876898][T15874] ? __might_fault+0xe3/0x190 [ 570.876916][T15874] ? __might_fault+0x13b/0x190 [ 570.876939][T15874] ? __ia32_compat_sys_io_submit+0x1ad/0x3a0 [ 570.876959][T15874] __ia32_compat_sys_io_submit+0x1ad/0x3a0 [ 570.876982][T15874] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 570.877010][T15874] ? rcu_is_watching+0x12/0xc0 [ 570.877027][T15874] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 570.877056][T15874] __do_fast_syscall_32+0x7c/0x300 [ 570.877078][T15874] do_fast_syscall_32+0x32/0x80 [ 570.877093][T15874] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 570.877113][T15874] RIP: 0023:0xf7f78579 [ 570.877127][T15874] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 570.877144][T15874] RSP: 002b:00000000f546655c EFLAGS: 00000296 ORIG_RAX: 00000000000000f8 [ 570.877160][T15874] RAX: ffffffffffffffda RBX: 00000000f7f71000 RCX: 0000000000000001 [ 570.877171][T15874] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 570.877213][T15874] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 570.877224][T15874] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 570.877234][T15874] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 570.877254][T15874] [ 570.877260][T15874] Mem-Info: [ 571.006045][T15874] active_anon:974 inactive_anon:3484 isolated_anon:0 [ 571.006045][T15874] active_file:3181 inactive_file:13709 isolated_file:0 [ 571.006045][T15874] unevictable:1768 dirty:338 writeback:0 [ 571.006045][T15874] slab_reclaimable:10901 slab_unreclaimable:107609 [ 571.006045][T15874] mapped:24063 shmem:3801 pagetables:1193 [ 571.006045][T15874] sec_pagetables:335 bounce:0 [ 571.006045][T15874] kernel_misc_reclaimable:0 [ 571.006045][T15874] free:33588 free_pcp:192 free_cma:0 [ 571.026016][T15874] Node 0 active_anon:156kB inactive_anon:12kB active_file:8kB inactive_file:4kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:984kB dirty:4kB writeback:0kB shmem:4260kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7524kB pagetables:1260kB sec_pagetables:1232kB all_unreclaimable? yes Balloon:0kB [ 571.035588][T15874] Node 1 active_anon:3740kB inactive_anon:13924kB active_file:12716kB inactive_file:54832kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:95268kB dirty:1348kB writeback:0kB shmem:10944kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7276kB pagetables:3512kB sec_pagetables:108kB all_unreclaimable? no Balloon:0kB [ 571.047041][T15874] Node 0 DMA free:2508kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 571.059262][T15871] sp0: Synchronizing with TNC [ 571.071944][T15874] lowmem_reserve[]: 0 288 288 288 288 [ 571.073878][T15874] Node 0 DMA32 free:24404kB boost:0kB min:13220kB low:16524kB high:19828kB reserved_highatomic:2048KB free_highatomic:372KB active_anon:1600kB inactive_anon:8kB active_file:8kB inactive_file:4kB unevictable:3536kB writepending:4kB present:1032196kB managed:295072kB mlocked:0kB bounce:0kB free_pcp:588kB local_pcp:160kB free_cma:0kB [ 571.084736][T15874] lowmem_reserve[]: 0 0 0 0 0 [ 571.086287][T15874] Node 1 DMA32 free:105436kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:3740kB inactive_anon:13924kB active_file:12716kB inactive_file:54832kB unevictable:3536kB writepending:1348kB present:1048432kB managed:948220kB mlocked:0kB bounce:0kB free_pcp:1256kB local_pcp:324kB free_cma:0kB [ 571.099034][T15874] lowmem_reserve[]: 0 0 0 0 0 [ 571.100558][T15874] Node 0 DMA: 75*4kB (UM) 16*8kB (UM) 6*16kB (UM) 8*32kB (UM) 5*64kB (UM) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2508kB [ 571.105481][T15874] Node 0 DMA32: 380*4kB (UMEH) 274*8kB (UEH) 59*16kB (UMEH) 154*32kB (UMEH) 81*64kB (UME) 23*128kB (UME) 5*256kB (ME) 3*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 20528kB [ 571.128987][T15874] Node 1 DMA32: 1883*4kB (UME) 1041*8kB (UME) 379*16kB (UME) 224*32kB (UME) 143*64kB (UME) 109*128kB (UME) 50*256kB (UME) 27*512kB (UME) 21*1024kB (UM) 3*2048kB (UM) 0*4096kB = 106468kB [ 571.135559][T15874] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 571.149111][T15874] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 571.152500][T15874] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 571.156601][T15874] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 571.169090][T15874] 23044 total pagecache pages [ 571.171240][T15874] 395 pages in swap cache [ 571.173019][T15874] Free swap = 98888kB [ 571.174629][T15874] Total swap = 124996kB [ 571.176040][T15874] 524155 pages RAM [ 571.177422][T15874] 0 pages HighMem/MovableOnly [ 571.179089][T15874] 209492 pages reserved [ 571.180431][T15874] 0 pages cma reserved [ 571.328488][T15880] lo speed is unknown, defaulting to 1000 [ 571.813349][T15892] NILFS (nbd3): device size too small [ 572.102589][T15902] vxfs: unable to read disk superblock at 1 [ 572.107239][T15902] vxfs: unable to read disk superblock at 8 [ 572.110069][T15902] vxfs: can't find superblock. [ 572.121205][T15905] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2599'. [ 573.319660][T15919] fuse: Bad value for 'fd' [ 573.617259][T15930] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.2607'. [ 573.688710][T15932] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2607'. [ 573.754154][ T6026] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 573.963073][ T6026] usb 6-1: Using ep0 maxpacket: 16 [ 573.992687][ T6026] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.041538][ T6026] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.077244][ T6026] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 574.116007][ T6026] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.249392][ T6026] usb 6-1: config 0 descriptor?? [ 574.745207][ T6026] usbhid 6-1:0.0: can't add hid device: -32 [ 574.747437][ T6026] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 574.757422][T15924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2604'. [ 574.774871][T15939] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2609'. [ 574.817555][T15940] binder: 15922:15940 ioctl c0306201 80000180 returned -14 [ 574.991411][T15924] 8021q: adding VLAN 0 to HW filter on device bond1 [ 575.002521][ T60] usb 6-1: USB disconnect, device number 15 [ 575.146066][T15955] netlink: 4168 bytes leftover after parsing attributes in process `syz.1.2614'. [ 575.161228][T15955] binder: 15954:15955 ioctl c018620c 80000000 returned -1 [ 575.166977][T15955] netlink: 'syz.1.2614': attribute type 1 has an invalid length. [ 575.173172][T15955] netlink: 'syz.1.2614': attribute type 1 has an invalid length. [ 575.611732][T15967] NILFS (nbd1): device size too small [ 575.936216][T15971] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2616'. [ 575.961025][T15971] batadv1: entered allmulticast mode [ 576.029717][T15970] fuse: Bad value for 'user_id' [ 576.031867][T15970] fuse: Bad value for 'user_id' [ 576.138898][T15976] syz_tun: entered allmulticast mode [ 576.155164][T15975] syz_tun: left allmulticast mode [ 576.544980][T15994] kAFS: No cell specified [ 577.594552][T16018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2637'. [ 577.723962][T16023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2638'. [ 577.729392][T16023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2638'. [ 577.732926][T16023] netlink: 'syz.1.2638': attribute type 19 has an invalid length. [ 577.738128][T16023] netlink: 'syz.1.2638': attribute type 20 has an invalid length. [ 577.812005][T16026] fuse: Bad value for 'user_id' [ 577.813728][T16026] fuse: Bad value for 'user_id' [ 578.195334][T16018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.209453][T16018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.599951][T16032] vxfs: unable to read disk superblock at 1 [ 578.602392][T16032] vxfs: unable to read disk superblock at 8 [ 578.604938][T16032] vxfs: can't find superblock. [ 578.610976][ T8980] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.614558][ T8980] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.620002][ T8980] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.624338][ T8980] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.743166][T16041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2644'. [ 578.907894][T16045] netlink: 'syz.1.2646': attribute type 4 has an invalid length. [ 578.922619][T16045] netlink: 'syz.1.2646': attribute type 4 has an invalid length. [ 578.954423][T14581] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 579.107354][T14581] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 579.113931][T14581] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 579.119329][T14581] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 579.127308][T14581] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 579.132050][T14581] usb 7-1: config 0 interface 0 has no altsetting 0 [ 579.136612][T14581] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 579.140532][T14581] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 579.145230][T14581] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 579.148782][T14581] usb 7-1: config 0 interface 0 has no altsetting 0 [ 579.152425][T14581] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 579.156994][T14581] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 579.161067][T14581] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 579.166236][T14581] usb 7-1: config 0 interface 0 has no altsetting 0 [ 579.170741][T14581] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 579.176418][T14581] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 579.181781][T14581] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 579.186080][T14581] usb 7-1: config 0 interface 0 has no altsetting 0 [ 579.192226][T14581] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 579.195353][T14581] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 579.199407][T14581] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 579.203568][T14581] usb 7-1: config 0 interface 0 has no altsetting 0 [ 579.208578][T14581] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 579.212519][T14581] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 579.216397][T14581] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 579.219498][T14581] usb 7-1: config 0 interface 0 has no altsetting 0 [ 579.226047][T14581] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 579.229576][T14581] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 579.235131][T14581] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 579.240139][T14581] usb 7-1: config 0 interface 0 has no altsetting 0 [ 579.243921][T14581] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 579.249706][T14581] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 579.255071][T14581] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 579.261157][T14581] usb 7-1: config 0 interface 0 has no altsetting 0 [ 579.273597][T14581] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 579.283158][T14581] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 579.286003][T14581] usb 7-1: Product: syz [ 579.287836][T14581] usb 7-1: Manufacturer: syz [ 579.289989][T14581] usb 7-1: SerialNumber: syz [ 579.295420][T14581] usb 7-1: config 0 descriptor?? [ 579.318888][T14581] yurex 7-1:0.0: Could not submitting URB [ 579.324575][T14581] yurex 7-1:0.0: probe with driver yurex failed with error -5 [ 580.105697][T16059] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2649'. [ 580.109251][T16059] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2649'. [ 580.416920][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 580.416938][ T40] audit: type=1326 audit(1759072156.970:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16066 comm="syz.1.2653" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf700e579 code=0x0 [ 580.611623][T16078] NILFS (nbd0): device size too small [ 581.116187][T16084] netlink: 'syz.0.2657': attribute type 7 has an invalid length. [ 581.161244][T16084] dvmrp0: entered allmulticast mode [ 581.193083][T16086] binder: 16085:16086 ioctl c0306201 80000080 returned -14 [ 581.224898][T16088] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2660'. [ 581.288718][T16096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.293933][T16096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.297867][T16096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.300921][T16096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.301367][T16097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.312030][T16097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.494927][T16102] input: syz0 as /devices/virtual/input/input28 [ 581.564149][ T67] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 581.647948][T12303] usb 7-1: USB disconnect, device number 19 [ 581.785278][T16110] NILFS (nbd2): device size too small [ 581.933057][T16113] tmpfs: Unknown parameter 'fd' [ 581.970025][T16115] netlink: 'syz.2.2667': attribute type 23 has an invalid length. [ 582.079914][T16121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2668'. [ 582.166242][T16131] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 582.253655][ T40] audit: type=1326 audit(1759072158.902:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16128 comm="syz.0.2672" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 582.258591][ T6947] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 582.265411][ T40] audit: type=1326 audit(1759072158.902:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16128 comm="syz.0.2672" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 582.277215][ T40] audit: type=1326 audit(1759072158.902:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16128 comm="syz.0.2672" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 582.306765][ T40] audit: type=1326 audit(1759072158.902:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16128 comm="syz.0.2672" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 582.314347][ T40] audit: type=1326 audit(1759072158.902:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16128 comm="syz.0.2672" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 582.323347][ T40] audit: type=1326 audit(1759072158.902:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16128 comm="syz.0.2672" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 582.332841][ T40] audit: type=1326 audit(1759072158.902:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16128 comm="syz.0.2672" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 582.344075][ T40] audit: type=1326 audit(1759072158.902:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16128 comm="syz.0.2672" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 582.354568][ T40] audit: type=1326 audit(1759072158.902:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16128 comm="syz.0.2672" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 582.430029][ T6947] usb 8-1: Using ep0 maxpacket: 32 [ 582.436352][ T6947] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 582.443539][ T6947] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 582.450281][ T6947] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 582.459688][T16141] NILFS (nbd1): device size too small [ 582.468318][ T6947] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 582.477739][ T6947] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 582.485040][ T6947] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 582.496736][ T6947] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 582.503551][ T6947] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.541328][ T6947] usb 8-1: config 0 descriptor?? [ 582.752777][ T6947] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 582.767152][ T6947] usb 8-1: USB disconnect, device number 15 [ 582.784034][T16146] input: syz0 as /devices/virtual/input/input29 [ 582.784075][ T6947] usblp0: removed [ 583.010197][T16148] openvswitch: netlink: Key 32 has unexpected len 20 expected 2 [ 583.123430][T16153] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 583.297224][ T6947] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 583.335283][T16159] netlink: 'syz.1.2680': attribute type 1 has an invalid length. [ 583.338305][T16159] netlink: 'syz.1.2680': attribute type 4 has an invalid length. [ 583.567188][ T5337] Bluetooth: hci2: Malformed Event: 0x13 [ 583.630578][ T6947] usb 8-1: Using ep0 maxpacket: 32 [ 583.634070][ T6947] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 583.637282][ T6947] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 583.640532][ T6947] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 583.643669][ T6947] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 583.646713][ T6947] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 583.649779][ T6947] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 583.653822][ T6947] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 583.656640][ T6947] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.662510][ T6947] usb 8-1: config 0 descriptor?? [ 583.865178][ T6947] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 584.087076][ T5337] Bluetooth: hci4: Malformed Event: 0x13 [ 585.376967][T12303] usb 8-1: USB disconnect, device number 16 [ 585.393141][T12303] usblp0: removed [ 585.740263][T16189] netlink: 'syz.1.2690': attribute type 2 has an invalid length. [ 586.189919][T16201] vxfs: unable to read disk superblock at 1 [ 586.192924][T16201] vxfs: unable to read disk superblock at 8 [ 586.195376][T16201] vxfs: can't find superblock. [ 586.445847][T16193] fuse: Bad value for 'user_id' [ 586.447455][T16193] fuse: Bad value for 'user_id' [ 586.838061][T16210] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 587.336568][T16218] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2698'. [ 587.769579][T16226] lo speed is unknown, defaulting to 1000 [ 588.411793][T16226] binder: 16222:16226 ioctl c0306201 0 returned -14 [ 588.468582][T16226] binder: 16222:16226 ioctl c0306201 80000ac0 returned -14 [ 588.733088][T16234] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 588.735291][T16234] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 588.742881][T16234] vhci_hcd vhci_hcd.0: Device attached [ 588.745254][T16228] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 588.747339][T16228] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 588.750795][T16228] vhci_hcd vhci_hcd.0: Device attached [ 588.833691][T16237] vhci_hcd: connection closed [ 588.834466][ T1231] vhci_hcd: stop threads [ 588.837638][ T1231] vhci_hcd: release socket [ 588.839113][ T1231] vhci_hcd: disconnect device [ 589.061095][T12303] usb 42-1: SetAddress Request (11) to port 0 [ 589.064014][T12303] usb 42-1: new SuperSpeed USB device number 11 using vhci_hcd [ 589.106152][T16235] vhci_hcd: connection closed [ 589.106378][ T8958] vhci_hcd: stop threads [ 589.114848][ T8958] vhci_hcd: release socket [ 589.119728][ T8958] vhci_hcd: disconnect device [ 589.128088][T12303] usb 42-1: enqueue for inactive port 0 [ 589.535697][T12303] usb usb42-port1: attempt power cycle [ 589.665838][T16258] mkiss: ax0: crc mode is auto. [ 590.122662][T12303] usb usb42-port1: unable to enumerate USB device [ 590.613789][T16272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2712'. [ 590.618815][T16272] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2712'. [ 590.622684][T16272] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2712'. [ 590.682135][T16279] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2710'. [ 590.961768][T16290] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 590.964710][T16290] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 590.976081][T16290] vhci_hcd vhci_hcd.0: Device attached [ 591.284798][ T59] usb 38-1: SetAddress Request (30) to port 0 [ 591.287536][ T59] usb 38-1: new SuperSpeed USB device number 30 using vhci_hcd [ 591.456352][T16291] vhci_hcd: connection reset by peer [ 591.459045][ T8958] vhci_hcd: stop threads [ 591.460833][ T8958] vhci_hcd: release socket [ 591.462625][ T8958] vhci_hcd: disconnect device [ 593.140743][T16319] netlink: 'syz.2.2723': attribute type 1 has an invalid length. [ 593.144169][T16319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 593.437843][ T5337] Bluetooth: hci0: Malformed Event: 0x13 [ 593.577947][T16334] netlink: 'syz.0.2727': attribute type 1 has an invalid length. [ 593.605401][T16334] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 593.612511][T16334] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 593.835996][T16338] gretap1: entered promiscuous mode [ 593.840091][T16338] bond1: (slave gretap1): making interface the new active one [ 593.843690][T16338] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 594.133473][T16344] vxfs: unable to read disk superblock at 1 [ 594.138271][T16344] vxfs: unable to read disk superblock at 8 [ 594.140319][T16344] vxfs: can't find superblock. [ 594.862880][T16359] fuse: Bad value for 'user_id' [ 594.884946][T16359] fuse: Bad value for 'user_id' [ 595.173479][T16364] lo speed is unknown, defaulting to 1000 [ 595.211624][T16366] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2736'. [ 595.227849][T16366] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2736'. [ 595.228201][ T5337] Bluetooth: hci0: Malformed Event: 0x13 [ 595.430607][T16369] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2737'. [ 596.164526][ T59] usb 38-1: device descriptor read/8, error -110 [ 596.545406][ T5337] Bluetooth: hci2: Malformed Event: 0x13 [ 596.606239][ T59] usb usb38-port1: attempt power cycle [ 597.767726][T16404] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 597.770772][T16404] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 597.778838][T16404] vhci_hcd vhci_hcd.0: Device attached [ 597.912022][ T59] usb usb38-port1: unable to enumerate USB device [ 598.032080][ T6063] usb 42-1: SetAddress Request (15) to port 0 [ 598.034957][ T6063] usb 42-1: new SuperSpeed USB device number 15 using vhci_hcd [ 598.328682][T16405] vhci_hcd: connection reset by peer [ 598.343634][ T8959] vhci_hcd: stop threads [ 598.345076][ T8959] vhci_hcd: release socket [ 598.351311][ T8959] vhci_hcd: disconnect device [ 598.518949][T16417] netlink: 'syz.0.2750': attribute type 11 has an invalid length. [ 598.521586][T16417] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2750'. [ 598.524606][T16418] netlink: 'syz.0.2750': attribute type 11 has an invalid length. [ 598.527786][T16418] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2750'. [ 598.689361][T16424] vxfs: unable to read disk superblock at 1 [ 598.691721][T16424] vxfs: unable to read disk superblock at 8 [ 598.693710][T16424] vxfs: can't find superblock. [ 599.068184][T16432] NILFS (nbd2): device size too small [ 599.325622][T16436] vxfs: unable to read disk superblock at 1 [ 599.329434][T16436] vxfs: unable to read disk superblock at 8 [ 599.332132][T16436] vxfs: can't find superblock. [ 600.855809][T16454] NILFS (nbd3): device size too small [ 601.034556][ T6947] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 601.204552][ T6947] usb 5-1: Using ep0 maxpacket: 32 [ 601.205627][T16463] vxfs: unable to read disk superblock at 1 [ 601.209903][T16463] vxfs: unable to read disk superblock at 8 [ 601.212297][T16463] vxfs: can't find superblock. [ 601.220625][ T6947] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 601.224775][ T6947] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 601.227666][ T6947] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 601.230462][ T6947] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 601.237568][ T6947] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 601.242523][ T6947] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 601.247084][ T6947] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 601.255643][ T6947] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 601.261513][ T6947] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 601.264195][ T6947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.270989][ T6947] usb 5-1: config 0 descriptor?? [ 601.459670][T16468] fuse: Bad value for 'user_id' [ 601.467869][T16468] fuse: Bad value for 'user_id' [ 601.479525][ T6947] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 602.714411][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 602.714428][ T40] audit: type=1326 audit(1759072180.373:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16484 comm="syz.3.2771" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa3579 code=0x0 [ 602.870739][ T6063] usb 42-1: device descriptor read/8, error -110 [ 603.278891][ T6063] usb usb42-port1: attempt power cycle [ 603.495592][T16502] vxfs: unable to read disk superblock at 1 [ 603.495794][T16502] vxfs: unable to read disk superblock at 8 [ 603.495805][T16502] vxfs: can't find superblock. [ 603.736495][ T67] usb 5-1: USB disconnect, device number 16 [ 603.749199][ T67] usblp0: removed [ 603.798121][T16505] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2775'. [ 603.801900][T16505] xt_policy: neither incoming nor outgoing policy selected [ 603.836375][ T6063] usb usb42-port1: unable to enumerate USB device [ 603.887269][T16510] NILFS (nbd2): device size too small [ 604.214208][T16523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2781'. [ 604.848291][T16527] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 605.475206][T16547] NILFS (nbd3): device size too small [ 605.528627][T16549] IPv6: NLM_F_CREATE should be specified when creating new route [ 605.658474][T16557] vxfs: unable to read disk superblock at 1 [ 605.663007][T16557] vxfs: unable to read disk superblock at 8 [ 605.665764][T16557] vxfs: can't find superblock. [ 606.520697][T16578] NILFS (nbd0): device size too small [ 607.392943][T16590] fuseblk: Bad value for 'group_id' [ 607.410171][T16590] fuseblk: Bad value for 'group_id' [ 608.070536][T16594] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 608.435350][T16606] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2806'. [ 608.489804][T16601] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2804'. [ 608.544132][T16610] NILFS (nbd0): device size too small [ 608.672006][T16612] vxfs: unable to read disk superblock at 1 [ 608.674367][T16612] vxfs: unable to read disk superblock at 8 [ 608.676338][T16612] vxfs: can't find superblock. [ 608.955987][ T5337] Bluetooth: hci4: command 0x0406 tx timeout [ 609.457291][T16623] overlayfs: failed to resolve './file1': -2 [ 609.964446][T16638] NILFS (nbd3): device size too small [ 610.038903][ T40] audit: type=1804 audit(1759072188.068:1091): pid=16641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2817" name="/newroot/80/bus" dev="tmpfs" ino=441 res=1 errno=0 [ 610.582425][T16644] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input30 [ 611.108458][T16655] vxfs: unable to read disk superblock at 1 [ 611.110950][T16655] vxfs: unable to read disk superblock at 8 [ 611.112801][T16655] vxfs: can't find superblock. [ 612.202404][T16668] fuse: Bad value for 'user_id' [ 612.217591][T16668] fuse: Bad value for 'user_id' [ 612.276010][T16672] NILFS (nbd0): device size too small [ 612.773197][T16680] binder: 16679:16680 unknown command 0 [ 612.780958][T16680] binder: 16679:16680 ioctl c0306201 80000080 returned -22 [ 613.366079][ T60] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 613.511166][T16688] vxfs: unable to read disk superblock at 1 [ 613.514075][T16688] vxfs: unable to read disk superblock at 8 [ 613.516855][T16688] vxfs: can't find superblock. [ 613.527749][ T60] usb 8-1: Using ep0 maxpacket: 32 [ 613.536028][ T60] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 613.541894][ T60] usb 8-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 613.545658][ T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.551322][ T60] usb 8-1: config 0 descriptor?? [ 613.579943][ T5386] udevd[5386]: worker [15147] terminated by signal 33 (Unknown signal 33) [ 613.583541][ T5386] udevd[5386]: worker [15147] failed while handling '/devices/platform/dummy_hcd.3/usb8/8-1' [ 613.763642][T16698] NILFS (nbd2): device size too small [ 614.187923][ T60] usbhid 8-1:0.0: can't add hid device: -71 [ 614.263576][T16704] fuse: Bad value for 'user_id' [ 614.265237][T16704] fuse: Bad value for 'user_id' [ 614.312773][T16706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2838'. [ 614.435843][ T60] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 614.454482][ T60] usb 8-1: USB disconnect, device number 17 [ 615.166260][ T67] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 615.338575][ T67] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 615.344533][ T67] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.349650][ T67] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.354023][ T67] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 615.359136][ T67] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 615.361945][ T67] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 615.364485][ T67] usb 7-1: Manufacturer: syz [ 615.369076][ T67] usb 7-1: config 0 descriptor?? [ 615.473416][T16725] NILFS (nbd0): device size too small [ 615.914325][ T67] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 616.020131][ T67] appleir 0003:05AC:8243.0003: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 616.529978][ T60] usb 7-1: USB disconnect, device number 20 [ 616.640173][T16737] fido_id[16737]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb7/report_descriptor': No such file or directory [ 616.993498][T16748] fuse: Bad value for 'user_id' [ 616.995261][T16748] fuse: Bad value for 'user_id' [ 617.881640][T16760] NILFS (nbd1): device size too small [ 619.410851][T16791] fuse: Bad value for 'user_id' [ 619.413170][T16791] fuse: Bad value for 'user_id' [ 619.995301][T16799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2868'. [ 620.194496][T16807] NILFS (nbd3): device size too small [ 620.386315][T16796] orangefs_mount: mount request failed with -4 [ 620.907168][T16832] NILFS (nbd0): device size too small [ 621.281625][T16843] fuse: Bad value for 'user_id' [ 621.284165][T16843] fuse: Bad value for 'user_id' [ 621.665773][T16850] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2883'. [ 621.906075][T16864] NILFS (nbd1): device size too small [ 621.928259][ T6947] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 622.282936][T16873] vxfs: unable to read disk superblock at 1 [ 622.285183][T16873] vxfs: unable to read disk superblock at 8 [ 622.287093][T16873] vxfs: can't find superblock. [ 622.421317][ T6947] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 622.425238][ T6947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.428905][ T6947] usb 5-1: Product: syz [ 622.431111][ T6947] usb 5-1: Manufacturer: syz [ 622.433718][ T6947] usb 5-1: SerialNumber: syz [ 622.446278][ T6947] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 622.482555][T14923] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 622.683683][T14581] usb 5-1: USB disconnect, device number 17 [ 623.118760][ T6018] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 623.144760][T16881] loop9: detected capacity change from 0 to 7 [ 623.149321][T15148] buffer_io_error: 7 callbacks suppressed [ 623.149341][T15148] Buffer I/O error on dev loop9, logical block 0, async page read [ 623.155874][T15148] Buffer I/O error on dev loop9, logical block 0, async page read [ 623.159207][T15148] Buffer I/O error on dev loop9, logical block 0, async page read [ 623.162532][T15148] Buffer I/O error on dev loop9, logical block 0, async page read [ 623.166447][T15148] Buffer I/O error on dev loop9, logical block 0, async page read [ 623.169697][T15148] Buffer I/O error on dev loop9, logical block 0, async page read [ 623.173009][T15148] Buffer I/O error on dev loop9, logical block 0, async page read [ 623.185937][T15148] ldm_validate_partition_table(): Disk read failed. [ 623.189537][T15148] Buffer I/O error on dev loop9, logical block 0, async page read [ 623.201638][T15148] Buffer I/O error on dev loop9, logical block 0, async page read [ 623.204309][T15148] Buffer I/O error on dev loop9, logical block 0, async page read [ 623.209302][T15148] Dev loop9: unable to read RDB block 0 [ 623.212531][T15148] loop9: unable to read partition table [ 623.215322][T15148] loop9: partition table beyond EOD, truncated [ 623.301577][ T6018] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 623.306051][ T6018] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 623.311546][ T6018] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 623.328492][ T6018] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 623.332871][ T6018] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 623.336409][ T6018] usb 6-1: Product: syz [ 623.338382][ T6018] usb 6-1: Manufacturer: syz [ 623.340476][ T6018] usb 6-1: SerialNumber: syz [ 623.518768][T14923] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 623.522321][T14923] ath9k_htc: Failed to initialize the device [ 623.526893][T14581] usb 5-1: ath9k_htc: USB layer deinitialized [ 623.533741][T16881] ldm_validate_partition_table(): Disk read failed. [ 623.537468][T16881] Dev loop9: unable to read RDB block 0 [ 623.540264][T16881] loop9: unable to read partition table [ 623.542365][T16881] loop9: partition table beyond EOD, truncated [ 623.544599][T16881] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 623.544599][T16881] ) failed (rc=-5) [ 623.601841][ T6018] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 623.836297][T14581] usb 6-1: USB disconnect, device number 17 [ 623.854390][T16869] usblp0: removed [ 624.037494][T16899] fuse: Bad value for 'user_id' [ 624.039455][T16899] fuse: Bad value for 'user_id' [ 624.412522][T16910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2899'. [ 625.207862][T16918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2901'. [ 625.213690][T16918] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2901'. [ 625.403333][T16926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2904'. [ 626.387610][T16944] NILFS (nbd2): device size too small [ 626.502219][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.124247][T16974] NILFS (nbd3): device size too small [ 628.157957][ T59] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 628.464795][ T5337] Bluetooth: hci1: command 0x0406 tx timeout [ 628.630998][ T59] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 629.095127][ T59] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 629.110425][ T59] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 629.122699][ T59] usb 5-1: config 0 interface 0 has no altsetting 0 [ 629.148477][ T59] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 629.151694][ T59] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 629.155169][ T59] usb 5-1: config 0 interface 0 has no altsetting 0 [ 629.167158][ T59] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 629.171959][ T59] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 629.176501][ T59] usb 5-1: config 0 interface 0 has no altsetting 0 [ 629.225242][T16995] fuse: Bad value for 'user_id' [ 629.227605][T16995] fuse: Bad value for 'user_id' [ 629.277774][ T59] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 629.281576][ T59] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 629.311859][ T59] usb 5-1: config 0 interface 0 has no altsetting 0 [ 629.316749][ T59] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 629.338772][ T59] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 629.342970][ T59] usb 5-1: config 0 interface 0 has no altsetting 0 [ 629.346352][ T59] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 629.356336][ T59] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 629.382443][ T59] usb 5-1: config 0 interface 0 has no altsetting 0 [ 629.387519][ T59] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 629.390385][ T59] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 629.394686][ T59] usb 5-1: config 0 interface 0 has no altsetting 0 [ 629.407895][ T59] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 629.411773][ T59] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 629.429302][ T59] usb 5-1: config 0 interface 0 has no altsetting 0 [ 629.442397][ T59] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 629.452239][ T59] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 629.457318][ T59] usb 5-1: Product: syz [ 629.465813][ T59] usb 5-1: Manufacturer: syz [ 629.473639][ T59] usb 5-1: SerialNumber: syz [ 629.496034][ T59] usb 5-1: config 0 descriptor?? [ 629.548196][ T59] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 629.832736][ C1] usb 5-1: yurex_control_callback - control failed: -71 [ 629.834381][ T6064] usb 5-1: USB disconnect, device number 18 [ 629.845425][ T6064] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 630.218564][T17011] CUSE: info not properly terminated [ 630.465332][T17019] NILFS (nbd1): device size too small [ 631.129819][T17029] gtp1: entered promiscuous mode [ 631.138113][T17029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2934'. [ 632.377862][T17049] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 632.380692][T17049] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 632.385094][T17049] vhci_hcd vhci_hcd.0: Device attached [ 632.703916][ T6063] usb 42-1: SetAddress Request (19) to port 0 [ 632.706391][ T6063] usb 42-1: new SuperSpeed USB device number 19 using vhci_hcd [ 632.769624][T17057] vxfs: unable to read disk superblock at 1 [ 632.772145][T17057] vxfs: unable to read disk superblock at 8 [ 632.774738][T17057] vxfs: can't find superblock. [ 632.957978][T17050] vhci_hcd: connection reset by peer [ 632.960149][ T8965] vhci_hcd: stop threads [ 632.962221][ T8965] vhci_hcd: release socket [ 632.964948][ T8965] vhci_hcd: disconnect device [ 633.583232][T17035] fuse: Bad value for 'user_id' [ 633.584883][T17035] fuse: Bad value for 'user_id' [ 634.801366][T17088] netlink: zone id is out of range [ 634.804182][T17088] netlink: zone id is out of range [ 634.808694][T17088] netlink: zone id is out of range [ 634.811096][T17088] netlink: zone id is out of range [ 634.813341][T17088] netlink: zone id is out of range [ 634.816643][T17088] netlink: zone id is out of range [ 634.819575][T17088] netlink: zone id is out of range [ 634.821899][T17088] netlink: zone id is out of range [ 634.823687][T17088] netlink: zone id is out of range [ 634.825552][T17088] netlink: zone id is out of range [ 634.945913][T17099] Invalid logical block size (-285212673) [ 635.071816][T17107] vxfs: unable to read disk superblock at 1 [ 635.075918][T17107] vxfs: unable to read disk superblock at 8 [ 635.078471][T17107] vxfs: can't find superblock. [ 636.609242][T17092] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.810492][T17129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2962'. [ 636.933792][T17092] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.183317][T17092] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.374103][T17136] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.587168][ T6063] usb 42-1: device descriptor read/8, error -110 [ 637.727262][T17092] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.949301][T17148] block device autoloading is deprecated and will be removed. [ 637.963466][T17152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2968'. [ 637.966836][T17152] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2968'. [ 637.970902][ T6063] usb usb42-port1: attempt power cycle [ 638.036148][T17136] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.154427][T17152] batadv1: entered allmulticast mode [ 638.341572][T17136] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.547720][ T6063] usb usb42-port1: unable to enumerate USB device [ 638.655774][T17136] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.692470][ T8971] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.720950][T17161] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 638.920167][ T8971] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.923971][ T8971] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.954722][ T1174] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.120241][ T1174] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.133870][ T5990] Bluetooth: hci1: Malformed Event: 0x13 [ 639.141784][ T1174] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.161936][ T8971] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.179286][ T8934] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.249240][T17171] usb usb8: usbfs: process 17171 (syz.1.2973) did not claim interface 0 before use [ 639.741369][T17184] vxfs: unable to read disk superblock at 1 [ 639.744615][T17184] vxfs: unable to read disk superblock at 8 [ 639.746820][T17184] vxfs: can't find superblock. [ 640.898475][T17202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2980'. [ 641.520301][T17205] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 641.853029][T17221] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2988'. [ 642.588628][T17240] netlink: 'syz.0.2991': attribute type 39 has an invalid length. [ 642.663828][T17240] veth0_macvtap: left promiscuous mode [ 642.806677][T17242] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 644.008839][T17264] vxfs: unable to read disk superblock at 1 [ 644.013487][T17264] vxfs: unable to read disk superblock at 8 [ 644.015415][T17264] vxfs: can't find superblock. [ 644.028263][T17263] vxfs: unable to read disk superblock at 1 [ 644.036681][T17263] vxfs: unable to read disk superblock at 8 [ 644.038906][T17263] vxfs: can't find superblock. [ 645.209624][T17286] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 645.318550][ T40] audit: type=1326 audit(1759072225.110:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17287 comm="syz.0.3006" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 645.349188][ T40] audit: type=1326 audit(1759072225.120:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17287 comm="syz.0.3006" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 645.378413][ T40] audit: type=1326 audit(1759072225.131:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17287 comm="syz.0.3006" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 645.416201][ T40] audit: type=1326 audit(1759072225.131:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17287 comm="syz.0.3006" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 645.424097][ T40] audit: type=1326 audit(1759072225.131:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17287 comm="syz.0.3006" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 645.433449][ T40] audit: type=1326 audit(1759072225.131:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17287 comm="syz.0.3006" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 645.441983][ T40] audit: type=1326 audit(1759072225.131:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17287 comm="syz.0.3006" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 645.451743][ T40] audit: type=1326 audit(1759072225.131:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17287 comm="syz.0.3006" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 645.460138][ T40] audit: type=1326 audit(1759072225.131:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17287 comm="syz.0.3006" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 645.509787][T17292] usb usb8: usbfs: process 17292 (syz.3.3003) did not claim interface 0 before use [ 645.879355][ T40] audit: type=1326 audit(1759072225.698:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17287 comm="syz.0.3006" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 645.992202][T17300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3008'. [ 647.697777][T17308] vxfs: unable to read disk superblock at 1 [ 647.700527][T17308] vxfs: unable to read disk superblock at 8 [ 647.702853][T17308] vxfs: can't find superblock. [ 648.486210][T17318] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 648.490551][T17318] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.493157][T17318] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.023723][T17330] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3017'. [ 649.037575][T17331] netlink: 'syz.0.3017': attribute type 12 has an invalid length. [ 649.040376][T17331] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3017'. [ 649.044077][T17332] netlink: 'syz.0.3017': attribute type 12 has an invalid length. [ 649.047334][T17332] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3017'. [ 649.054902][T17330] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3017'. [ 649.296580][T17344] team0: Port device team_slave_0 removed [ 649.299218][T17344] net_ratelimit: 12 callbacks suppressed [ 649.299231][T17344] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 649.424279][T17352] vxfs: unable to read disk superblock at 1 [ 649.426899][T17352] vxfs: unable to read disk superblock at 8 [ 649.429155][T17352] vxfs: can't find superblock. [ 649.618181][T17355] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 649.758093][T17359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3026'. [ 650.412857][T17370] binder: Bad value for 'stats' [ 650.502477][ T5983] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 650.675059][ T5983] usb 8-1: Using ep0 maxpacket: 16 [ 650.693298][ T5983] usb 8-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config [ 650.698512][T17377] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 650.703197][ T5983] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 650.713790][ T5983] usb 8-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 650.716734][ T5983] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.719191][ T5983] usb 8-1: Product: syz [ 650.720733][ T5983] usb 8-1: Manufacturer: syz [ 650.733013][ T5983] usb 8-1: SerialNumber: syz [ 650.740144][ T5983] usb 8-1: config 0 descriptor?? [ 650.995035][T17366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3031'. [ 651.150029][ T5983] usb 8-1: USB disconnect, device number 18 [ 651.282512][T17387] netlink: 'syz.0.3036': attribute type 4 has an invalid length. [ 651.297180][T17387] netlink: 'syz.0.3036': attribute type 4 has an invalid length. [ 651.490144][T17399] vxfs: unable to read disk superblock at 1 [ 651.492151][T17399] vxfs: unable to read disk superblock at 8 [ 651.494695][T17399] vxfs: can't find superblock. [ 651.938818][T17406] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 652.626402][ T6026] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 652.783884][T17429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3050'. [ 652.787503][T17429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3050'. [ 652.824730][T17432] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 652.931988][T17442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3054'. [ 653.105243][T17452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3054'. [ 653.115600][T17452] netlink: 'syz.0.3054': attribute type 13 has an invalid length. [ 653.123717][T17452] netlink: 'syz.0.3054': attribute type 11 has an invalid length. [ 653.443833][T17457] vxfs: unable to read disk superblock at 1 [ 653.461184][T17457] vxfs: unable to read disk superblock at 8 [ 653.464748][T17457] vxfs: can't find superblock. [ 654.090859][T17461] lo speed is unknown, defaulting to 1000 [ 654.541036][T17483] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 654.571337][T17481] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 654.573577][T17481] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 654.576986][T17481] vhci_hcd vhci_hcd.0: Device attached [ 654.864097][T14923] usb 44-1: SetAddress Request (14) to port 0 [ 654.866584][T14923] usb 44-1: new SuperSpeed USB device number 14 using vhci_hcd [ 655.155326][T17485] vhci_hcd: connection closed [ 655.160493][ T8971] vhci_hcd: stop threads [ 655.177145][ T8971] vhci_hcd: release socket [ 655.183572][ T8971] vhci_hcd: disconnect device [ 655.507290][T14923] usb 44-1: enqueue for inactive port 0 [ 655.559777][T17506] vxfs: unable to read disk superblock at 1 [ 655.562680][T17506] vxfs: unable to read disk superblock at 8 [ 655.565036][T17506] vxfs: can't find superblock. [ 656.063121][T14923] usb usb44-port1: attempt power cycle [ 656.229443][T17530] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 656.703758][T17548] lo speed is unknown, defaulting to 1000 [ 657.132153][T14923] usb usb44-port1: unable to enumerate USB device [ 657.583761][T17569] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 657.692785][T17570] vxfs: unable to read disk superblock at 1 [ 657.696112][T17570] vxfs: unable to read disk superblock at 8 [ 657.698362][T17570] vxfs: can't find superblock. [ 657.944861][T17574] random: crng reseeded on system resumption [ 658.235200][T17578] qnx6: unable to read the first superblock [ 658.239191][T17578] qnx6: unable to read the first superblock [ 658.241544][T17578] qnx6: unable to read the first superblock [ 658.738588][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 658.738604][ T40] audit: type=1326 audit(1759072239.200:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17588 comm="syz.2.3087" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78579 code=0x7ffc0000 [ 658.788815][ T40] audit: type=1326 audit(1759072239.200:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17588 comm="syz.2.3087" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78579 code=0x7ffc0000 [ 658.809585][ T40] audit: type=1326 audit(1759072239.231:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17588 comm="syz.2.3087" exe="/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf7f78579 code=0x7ffc0000 [ 658.817018][ T40] audit: type=1326 audit(1759072239.252:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17588 comm="syz.2.3087" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78579 code=0x7ffc0000 [ 658.828453][ T40] audit: type=1326 audit(1759072239.252:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17588 comm="syz.2.3087" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78579 code=0x7ffc0000 [ 658.845256][ T40] audit: type=1326 audit(1759072239.252:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17588 comm="syz.2.3087" exe="/syz-executor" sig=0 arch=40000003 syscall=246 compat=1 ip=0xf7f78579 code=0x7ffc0000 [ 658.855853][ T40] audit: type=1326 audit(1759072239.326:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17588 comm="syz.2.3087" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78579 code=0x7ffc0000 [ 658.863669][ T40] audit: type=1326 audit(1759072239.326:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17588 comm="syz.2.3087" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78579 code=0x7ffc0000 [ 658.956030][ T40] audit: type=1326 audit(1759072239.357:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17588 comm="syz.2.3087" exe="/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf7f78579 code=0x7ffc0000 [ 659.000747][T17591] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.004090][T17591] bridge0: port 2(bridge_slave_1) entered listening state [ 659.007422][T17591] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.010371][T17591] bridge0: port 1(bridge_slave_0) entered listening state [ 659.161655][T17591] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 659.387172][T17620] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 659.687449][ T40] audit: type=1326 audit(1759072240.197:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17588 comm="syz.2.3087" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78579 code=0x7ffc0000 [ 659.730389][T17628] vxfs: unable to read disk superblock at 1 [ 659.733069][T17628] vxfs: unable to read disk superblock at 8 [ 659.735161][T17628] vxfs: can't find superblock. [ 660.933598][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 660.937516][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 661.118093][T17646] __nla_validate_parse: 1 callbacks suppressed [ 661.118105][T17646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3100'. [ 661.307600][T17652] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 662.720208][T17676] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3109'. [ 662.730470][T17676] vxfs: unable to read disk superblock at 1 [ 662.733582][T17676] vxfs: unable to read disk superblock at 8 [ 662.735494][T17676] vxfs: can't find superblock. [ 662.903131][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.906601][ C1] bridge0: topology change detected, propagating [ 662.909600][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.912620][ C1] bridge0: topology change detected, propagating [ 662.972183][T17684] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 664.306211][T17711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3119'. [ 664.505301][T17717] Invalid logical block size (2066) [ 664.775428][T17711] "syz.3.3119" (17711) uses obsolete ecb(arc4) skcipher [ 665.847545][ T5990] Bluetooth: hci2: Malformed Event: 0x13 [ 666.479941][T17739] fuse: Bad value for 'user_id' [ 666.481507][T17739] fuse: Bad value for 'user_id' [ 666.549081][T17742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3128'. [ 666.557632][T17742] vxfs: unable to read disk superblock at 1 [ 666.560283][T17742] vxfs: unable to read disk superblock at 8 [ 666.563116][T17742] vxfs: can't find superblock. [ 667.367466][T17752] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 668.476487][T17778] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 668.602210][T17781] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3139'. [ 668.631938][T17783] Bluetooth: MGMT ver 1.23 [ 668.656888][T17783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3141'. [ 668.712516][T17781] vxfs: unable to read disk superblock at 1 [ 668.731534][T17781] vxfs: unable to read disk superblock at 8 [ 668.734584][T17781] vxfs: can't find superblock. [ 669.588933][T17798] lo speed is unknown, defaulting to 1000 [ 669.671624][T17803] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3147'. [ 669.828425][T17807] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 669.946110][ T5337] Bluetooth: hci0: Malformed Event: 0x13 [ 670.598715][ T5990] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 670.851493][T17825] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3154'. [ 670.934558][T17825] vxfs: unable to read disk superblock at 1 [ 670.941364][T17825] vxfs: unable to read disk superblock at 8 [ 670.944034][T17825] vxfs: can't find superblock. [ 671.397986][T17830] vxfs: unable to read disk superblock at 1 [ 671.400813][T17830] vxfs: unable to read disk superblock at 8 [ 671.404154][T17830] vxfs: can't find superblock. [ 671.830085][T17847] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 673.219959][T17869] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3165'. [ 673.239181][T17869] vxfs: unable to read disk superblock at 1 [ 673.241760][T17869] vxfs: unable to read disk superblock at 8 [ 673.243939][T17869] vxfs: can't find superblock. [ 673.482339][T17880] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 674.663049][T17908] comedi: valid board names for 8255 driver are: [ 674.665888][T17908] 8255 [ 674.666956][T17908] comedi: valid board names for vmk80xx driver are: [ 674.671448][T17908] vmk80xx [ 674.672849][T17908] comedi: valid board names for usbduxsigma driver are: [ 674.676723][T17908] usbduxsigma [ 674.678316][T17908] comedi: valid board names for usbduxfast driver are: [ 674.680982][T17908] usbduxfast [ 674.682092][T17908] comedi: valid board names for usbdux driver are: [ 674.684954][T17908] usbdux [ 674.686443][T17908] comedi: valid board names for ni6501 driver are: [ 674.689347][T17908] ni6501 [ 674.690706][T17908] comedi: valid board names for dt9812 driver are: [ 674.693320][T17908] dt9812 [ 674.695343][T17908] comedi: valid board names for ni_labpc_cs driver are: [ 674.698403][T17908] ni_labpc_cs [ 674.699919][T17908] comedi: valid board names for ni_daq_700 driver are: [ 674.702908][T17908] ni_daq_700 [ 674.704619][T17908] comedi: valid board names for labpc_pci driver are: [ 674.707468][T17908] labpc_pci [ 674.709370][T17908] comedi: valid board names for adl_pci9118 driver are: [ 674.712612][T17908] pci9118dg [ 674.719590][T17908] pci9118hg [ 674.721213][T17908] pci9118hr [ 674.722527][T17908] comedi: valid board names for 8255_pci driver are: [ 674.725622][T17908] 8255_pci [ 674.727040][T17908] comedi: valid board names for s526 driver are: [ 674.729831][T17908] s526 [ 674.731082][T17908] comedi: valid board names for multiq3 driver are: [ 674.736380][T17908] multiq3 [ 674.737774][T17908] comedi: valid board names for pcmuio driver are: [ 674.740537][T17908] pcmuio48 [ 674.741771][T17908] pcmuio96 [ 674.743229][T17908] comedi: valid board names for pcmmio driver are: [ 674.745711][T17908] pcmmio [ 674.747103][T17908] comedi: valid board names for pcmda12 driver are: [ 674.749715][T17908] pcmda12 [ 674.750930][T17908] comedi: valid board names for pcmad driver are: [ 674.755183][T17908] pcmad12 [ 674.756720][T17908] pcmad16 [ 674.758153][T17908] comedi: valid board names for ni_labpc driver are: [ 674.761285][T17908] lab-pc-1200 [ 674.762938][T17908] lab-pc-1200ai [ 674.764468][T17908] lab-pc+ [ 674.765774][T17908] comedi: valid board names for atmio16 driver are: [ 674.768450][T17908] atmio16 [ 674.769706][T17908] atmio16d [ 674.771764][T17908] comedi: valid board names for ni_at_ao driver are: [ 674.780085][T17908] at-ao-6 [ 674.781503][T17908] at-ao-10 [ 674.782820][T17908] comedi: valid board names for ni_at_a2150 driver are: [ 674.785646][T17908] ni_at_a2150 [ 674.787106][T17908] comedi: valid board names for adq12b driver are: [ 674.803706][T17908] adq12b [ 674.805011][T17908] comedi: valid board names for mpc624 driver are: [ 674.807580][T17908] mpc624 [ 674.809374][T17908] comedi: valid board names for c6xdigio driver are: [ 674.811982][T17908] c6xdigio [ 674.813298][T17908] comedi: valid board names for aio_iiro_16 driver are: [ 674.815926][T17908] aio_iiro_16 [ 674.817376][T17908] comedi: valid board names for aio_aio12_8 driver are: [ 674.824210][T17908] aio_aio12_8 [ 674.825746][T17908] aio_ai12_8 [ 674.827391][T17908] aio_ao12_4 [ 674.830759][T17908] comedi: valid board names for fl512 driver are: [ 674.833544][T17908] fl512 [ 674.834806][T17908] comedi: valid board names for dmm32at driver are: [ 674.838005][T17908] dmm32at [ 674.840555][T17908] comedi: valid board names for dt282x driver are: [ 674.844193][T17908] dt2821 [ 674.846545][T17908] dt2821-f [ 674.848705][T17908] dt2821-g [ 674.851622][T17908] dt2823 [ 674.854145][T17908] dt2824-pgh [ 674.856484][T17908] dt2824-pgl [ 674.859105][T17908] dt2825 [ 674.862070][T17908] dt2827 [ 674.865572][T17908] dt2828 [ 674.868250][T17908] dt2829 [ 674.870727][T17908] dt21-ez [ 674.873454][T17908] dt23-ez [ 674.875472][T17908] dt24-ez [ 674.878105][T17908] dt24-ez-pgl [ 674.880701][T17908] comedi: valid board names for dt2817 driver are: [ 674.885216][T17908] dt2817 [ 674.887377][T17908] comedi: valid board names for dt2815 driver are: [ 674.891978][T17908] dt2815 [ 674.894619][T17908] comedi: valid board names for dt2814 driver are: [ 674.904391][T17908] dt2814 [ 674.907563][T17908] comedi: valid board names for dt2811 driver are: [ 674.911168][T17908] dt2811-pgh [ 674.914646][T17908] dt2811-pgl [ 674.918034][T17908] comedi: valid board names for dt2801 driver are: [ 674.923192][T17908] dt2801 [ 674.925727][T17908] comedi: valid board names for das6402 driver are: [ 674.929750][T17908] das6402-12 [ 674.932411][T17908] das6402-16 [ 674.934768][T17908] comedi: valid board names for das1800 driver are: [ 674.938354][T17908] das-1701st [ 674.941192][T17908] das-1701st-da [ 674.943723][T17908] das-1702st [ 674.946643][T17908] das-1702st-da [ 674.949132][T17908] das-1702hr [ 674.952588][T17908] das-1702hr-da [ 674.955404][T17908] das-1701ao [ 674.957267][T17908] das-1702ao [ 674.959924][T17908] das-1801st [ 674.963047][T17908] das-1801st-da [ 674.965476][T17908] das-1802st [ 674.967766][T17908] das-1802st-da [ 674.970550][T17908] das-1802hr [ 674.973447][T17908] das-1802hr-da [ 674.975427][T17908] das-1801hc [ 674.978018][T17908] das-1802hc [ 674.980281][T17908] das-1801ao [ 674.982784][T17908] das-1802ao [ 674.985213][T17908] comedi: valid board names for das800 driver are: [ 674.989458][T17908] das-800 [ 674.990931][T17908] cio-das800 [ 674.993500][T17908] das-801 [ 674.995920][T17908] cio-das801 [ 674.998216][T17908] das-802 [ 674.999897][T17908] cio-das802 [ 675.002974][T17908] cio-das802/16 [ 675.005186][T17908] comedi: valid board names for isa-das08 driver are: [ 675.008746][T17908] isa-das08 [ 675.011134][T17908] das08-pgm [ 675.013344][T17908] das08-pgh [ 675.015590][T17908] das08-pgl [ 675.023218][T17908] das08-aoh [ 675.028271][T17908] das08-aol [ 675.029640][T17908] das08-aom [ 675.033096][T17908] das08/jr-ao [ 675.036004][T17908] das08jr-16-ao [ 675.040938][T17908] pc104-das08 [ 675.042574][T17908] das08jr/16 [ 675.043941][T17908] comedi: valid board names for das16m1 driver are: [ 675.046331][T17908] das16m1 [ 675.047445][T17908] comedi: valid board names for dac02 driver are: [ 675.050040][T17908] dac02 [ 675.050955][T17908] comedi: valid board names for rti802 driver are: [ 675.053062][T17908] rti802 [ 675.054008][T17908] comedi: valid board names for rti800 driver are: [ 675.056480][T17908] rti800 [ 675.057862][T17908] rti815 [ 675.058816][T17908] comedi: valid board names for pcm3724 driver are: [ 675.060961][T17908] pcm3724 [ 675.061970][T17908] comedi: valid board names for pcl818 driver are: [ 675.065304][T17908] pcl818l [ 675.067029][T17908] pcl818h [ 675.068107][T17908] pcl818hd [ 675.069204][T17908] pcl818hg [ 675.070339][T17908] pcl818 [ 675.071436][T17908] pcl718 [ 675.072444][T17908] pcm3718 [ 675.073523][T17908] comedi: valid board names for pcl816 driver are: [ 675.076804][T17908] pcl816 [ 675.078674][T17908] pcl814b [ 675.079777][T17908] comedi: valid board names for pcl812 driver are: [ 675.082528][T17908] pcl812 [ 675.083435][T17908] pcl812pg [ 675.087436][T17908] acl8112pg [ 675.089037][T17908] acl8112dg [ 675.090027][T17908] acl8112hg [ 675.091024][T17908] a821pgl [ 675.093766][T17908] a821pglnda [ 675.095318][T17908] a821pgh [ 675.097230][T17908] a822pgl [ 675.098396][T17908] a822pgh [ 675.099444][T17908] a823pgl [ 675.100609][T17908] a823pgh [ 675.101681][T17908] pcl813 [ 675.102744][T17908] pcl813b [ 675.103848][T17908] acl8113 [ 675.106281][T17908] iso813 [ 675.107385][T17908] acl8216 [ 675.109385][T17908] a826pg [ 675.110517][T17908] comedi: valid board names for pcl730 driver are: [ 675.112849][T17908] pcl730 [ 675.119791][T17908] iso730 [ 675.120881][T17908] acl7130 [ 675.122031][T17908] pcm3730 [ 675.124798][T17908] pcl725 [ 675.125827][T17908] p8r8dio [ 675.126960][T17908] acl7225b [ 675.131410][T17908] p16r16dio [ 675.133063][T17908] pcl733 [ 675.135812][T17908] pcl734 [ 675.138073][T17908] opmm-1616-xt [ 675.139467][T17908] pearl-mm-p [ 675.140715][T17908] ir104-pbf [ 675.142534][T17908] comedi: valid board names for pcl726 driver are: [ 675.144952][T17908] pcl726 [ 675.145939][T17908] pcl727 [ 675.151737][T17908] pcl728 [ 675.152919][T17908] acl6126 [ 675.154252][T17908] acl6128 [ 675.155307][T17908] comedi: valid board names for pcl724 driver are: [ 675.159761][T17908] pcl724 [ 675.160766][T17908] pcl722 [ 675.165358][T17908] pcl731 [ 675.166623][T17908] acl7122 [ 675.169060][T17908] acl7124 [ 675.170844][T17908] pet48dio [ 675.173171][T17908] pcmio48 [ 675.175587][T17908] onyx-mm-dio [ 675.178057][T17908] comedi: valid board names for pcl711 driver are: [ 675.181466][T17908] pcl711 [ 675.182621][T17908] pcl711b [ 675.183857][T17908] acl8112hg [ 675.185079][T17908] acl8112dg [ 675.188459][T17908] comedi: valid board names for amplc_pc263 driver are: [ 675.287962][T17908] pc263 [ 675.290965][T17908] comedi: valid board names for amplc_pc236 driver are: [ 675.293453][T17908] pc36at [ 675.296894][T17908] comedi: valid board names for amplc_dio200 driver are: [ 675.299499][T17908] pc212e [ 675.300612][T17908] pc214e [ 675.301844][T17908] pc215e [ 675.303049][T17908] pc218e [ 675.310188][T17908] pc272e [ 675.311783][T17908] comedi: valid board names for comedi_parport driver are: [ 675.315017][T17908] comedi_parport [ 675.316490][T17908] comedi: valid board names for comedi_test driver are: [ 675.319015][T17908] comedi_test [ 675.320688][T17908] comedi: valid board names for comedi_bond driver are: [ 675.326322][T17908] comedi_bond [ 675.523350][T17919] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 675.536862][T17919] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.539480][T17919] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.685363][T17926] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3180'. [ 675.701455][T17926] vxfs: unable to read disk superblock at 1 [ 675.705177][T17926] vxfs: unable to read disk superblock at 8 [ 675.707826][T17926] vxfs: can't find superblock. [ 676.765373][T17942] fuse: Bad value for 'fd' [ 676.913930][ T5990] Bluetooth: hci4: Malformed Event: 0x13 [ 677.809386][T17962] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 677.920454][T17973] vxfs: unable to read disk superblock at 1 [ 677.922820][T17973] vxfs: unable to read disk superblock at 8 [ 677.925659][T17973] vxfs: can't find superblock. [ 677.985522][T17966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3191'. [ 678.674086][T17987] lo speed is unknown, defaulting to 1000 [ 679.126533][T17999] fuse: Bad value for 'fd' [ 679.265089][T18001] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 679.428613][T18003] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3204'. [ 679.859271][T18020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3208'. [ 679.931001][T18020] vxfs: unable to read disk superblock at 1 [ 679.937958][T18020] vxfs: unable to read disk superblock at 8 [ 679.940863][T18020] vxfs: can't find superblock. [ 680.112761][ T5990] Bluetooth: hci1: Malformed Event: 0x13 [ 680.868477][T17994] syz.2.3200 (17994) used greatest stack depth: 18776 bytes left [ 680.872233][T18030] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 680.919291][T18034] fuse: Bad value for 'fd' [ 682.151902][T18060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3220'. [ 682.189308][T18060] vxfs: unable to read disk superblock at 1 [ 682.193582][T18060] vxfs: unable to read disk superblock at 8 [ 682.195674][T18060] vxfs: can't find superblock. [ 682.799350][T18051] fuse: Bad value for 'fd' [ 682.906791][T18068] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 682.969800][ T5990] Bluetooth: hci2: Malformed Event: 0x13 [ 683.029409][ T5990] Bluetooth: hci4: Malformed Event: 0x13 [ 683.405619][T18080] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 683.408617][T18080] overlayfs: failed to set xattr on upper [ 683.410768][T18080] overlayfs: ...falling back to redirect_dir=nofollow. [ 683.413064][T18080] overlayfs: ...falling back to index=off. [ 683.415144][T18080] overlayfs: ...falling back to uuid=null. [ 683.417100][T18080] overlayfs: ...falling back to xino=off. [ 684.065548][T18089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3230'. [ 684.105313][T18094] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 684.224723][T18097] vxfs: unable to read disk superblock at 1 [ 684.227763][T18097] vxfs: unable to read disk superblock at 8 [ 684.230062][T18097] vxfs: can't find superblock. [ 684.246878][ T5990] Bluetooth: hci4: Malformed Event: 0x13 [ 685.008279][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.699821][T18122] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 685.726353][ T5990] Bluetooth: hci4: Malformed Event: 0x13 [ 686.692405][T18153] NILFS (nbd1): device size too small [ 686.852633][T18157] vxfs: unable to read disk superblock at 1 [ 686.856801][T18157] vxfs: unable to read disk superblock at 8 [ 686.859349][T18157] vxfs: can't find superblock. [ 687.685105][T18167] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 687.826955][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 687.826973][ T40] audit: type=1326 audit(1759072269.742:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18159 comm="syz.0.3251" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f14579 code=0x0 [ 688.378619][T18187] vxfs: unable to read disk superblock at 1 [ 688.378716][T18187] vxfs: unable to read disk superblock at 8 [ 688.378728][T18187] vxfs: can't find superblock. [ 689.734547][T18206] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 689.966511][ T5990] Bluetooth: hci2: Malformed Event: 0x13 [ 690.046627][T18203] vxfs: unable to read disk superblock at 1 [ 690.049454][T18203] vxfs: unable to read disk superblock at 8 [ 690.051417][T18203] vxfs: can't find superblock. [ 691.793725][T18231] fuse: Bad value for 'user_id' [ 691.795337][T18231] fuse: Bad value for 'user_id' [ 692.143065][T18237] vxfs: unable to read disk superblock at 1 [ 692.145869][T18237] vxfs: unable to read disk superblock at 8 [ 692.147909][T18237] vxfs: can't find superblock. [ 692.277285][T18245] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 692.409218][ T40] audit: type=1326 audit(1759072274.550:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18239 comm="syz.1.3273" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700e579 code=0x0 [ 692.467889][ T5990] Bluetooth: hci2: Malformed Event: 0x13 [ 693.228630][T18258] vxfs: unable to read disk superblock at 1 [ 693.229199][T18258] vxfs: unable to read disk superblock at 8 [ 693.229209][T18258] vxfs: can't find superblock. [ 693.686575][ T6947] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 693.849878][ T6947] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 693.849907][ T6947] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.849924][ T6947] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.849937][ T6947] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 693.851157][ T6947] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 693.851175][ T6947] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 693.851187][ T6947] usb 5-1: Manufacturer: syz [ 693.855067][ T6947] usb 5-1: config 0 descriptor?? [ 694.245770][ T6947] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 694.253336][ T6947] appleir 0003:05AC:8243.0004: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 694.284536][T18274] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 694.462829][T18277] vxfs: unable to read disk superblock at 1 [ 694.465864][T18277] vxfs: unable to read disk superblock at 8 [ 694.469992][T18277] vxfs: can't find superblock. [ 694.591122][T18287] fuse: Bad value for 'user_id' [ 694.592956][T18287] fuse: Bad value for 'user_id' [ 694.760312][ T6947] usb 5-1: USB disconnect, device number 19 [ 695.327863][T18289] NILFS (nbd3): device size too small [ 695.678699][T18304] vxfs: unable to read disk superblock at 1 [ 695.681105][T18304] vxfs: unable to read disk superblock at 8 [ 695.683151][T18304] vxfs: can't find superblock. [ 696.454636][T18305] fuse: Bad value for 'user_id' [ 696.456374][T18305] fuse: Bad value for 'user_id' [ 696.795330][T18317] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 696.879902][T18316] gtp0: entered promiscuous mode [ 696.892978][T18316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3292'. [ 697.144271][T18323] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3305'. [ 697.505108][T18331] vxfs: unable to read disk superblock at 1 [ 697.508046][T18331] vxfs: unable to read disk superblock at 8 [ 697.510134][T18331] vxfs: can't find superblock. [ 698.488131][T18338] vxfs: unable to read disk superblock at 1 [ 698.490851][T18338] vxfs: unable to read disk superblock at 8 [ 698.493086][T18338] vxfs: can't find superblock. [ 698.608877][T18344] FAULT_INJECTION: forcing a failure. [ 698.608877][T18344] name failslab, interval 1, probability 0, space 0, times 0 [ 698.613253][T18344] CPU: 2 UID: 0 PID: 18344 Comm: syz.2.3304 Not tainted syzkaller #0 PREEMPT(full) [ 698.613271][T18344] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 698.613278][T18344] Call Trace: [ 698.613283][T18344] [ 698.613287][T18344] dump_stack_lvl+0x16c/0x1f0 [ 698.613309][T18344] should_fail_ex+0x512/0x640 [ 698.613342][T18344] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 698.613358][T18344] should_failslab+0xc2/0x120 [ 698.613373][T18344] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 698.613387][T18344] ? __alloc_skb+0x2b2/0x380 [ 698.613413][T18344] __alloc_skb+0x2b2/0x380 [ 698.613428][T18344] ? __pfx___alloc_skb+0x10/0x10 [ 698.613445][T18344] ? __pfx___might_resched+0x10/0x10 [ 698.613461][T18344] netlink_alloc_large_skb+0x69/0x130 [ 698.613481][T18344] netlink_sendmsg+0x6a1/0xdd0 [ 698.613501][T18344] ? __pfx_netlink_sendmsg+0x10/0x10 [ 698.613520][T18344] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 698.613535][T18344] ____sys_sendmsg+0xa95/0xc70 [ 698.613548][T18344] ? drop_verity_items+0x3a0/0x420 [ 698.613567][T18344] ? __pfx_____sys_sendmsg+0x10/0x10 [ 698.613579][T18344] ? get_compat_msghdr+0x11a/0x170 [ 698.613602][T18344] ___sys_sendmsg+0x134/0x1d0 [ 698.613620][T18344] ? __pfx____sys_sendmsg+0x10/0x10 [ 698.613643][T18344] ? find_held_lock+0x2b/0x80 [ 698.613664][T18344] __sys_sendmsg+0x16d/0x220 [ 698.613681][T18344] ? __pfx___sys_sendmsg+0x10/0x10 [ 698.613704][T18344] ? rcu_is_watching+0x12/0xc0 [ 698.613718][T18344] __do_fast_syscall_32+0x7c/0x300 [ 698.613730][T18344] do_fast_syscall_32+0x32/0x80 [ 698.613740][T18344] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 698.613755][T18344] RIP: 0023:0xf7f78579 [ 698.613765][T18344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 698.613776][T18344] RSP: 002b:00000000f546655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 698.613787][T18344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 698.613794][T18344] RDX: 000000000404c850 RSI: 0000000000000000 RDI: 0000000000000000 [ 698.613801][T18344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 698.613807][T18344] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 698.613814][T18344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 698.613828][T18344] [ 698.721850][T18348] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 699.369232][T18354] fuse: Bad value for 'user_id' [ 699.370923][T18354] fuse: Bad value for 'user_id' [ 699.810008][T18366] gtp0: entered promiscuous mode [ 699.819127][T18366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3311'. [ 699.841637][T18369] netlink: zone id is out of range [ 699.843628][T18369] netlink: zone id is out of range [ 699.845515][T18369] netlink: zone id is out of range [ 699.847607][T18369] netlink: zone id is out of range [ 699.852674][T18369] netlink: zone id is out of range [ 699.854358][T18369] netlink: zone id is out of range [ 699.856190][T18369] netlink: zone id is out of range [ 699.858013][T18369] netlink: zone id is out of range [ 699.860290][T18369] netlink: zone id is out of range [ 699.862055][T18369] netlink: zone id is out of range [ 700.122854][T18378] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 700.312602][T18384] vxfs: unable to read disk superblock at 1 [ 700.314852][T18384] vxfs: unable to read disk superblock at 8 [ 700.316914][T18384] vxfs: can't find superblock. [ 700.781819][T18396] vxfs: unable to read disk superblock at 1 [ 700.791724][T18396] vxfs: unable to read disk superblock at 8 [ 700.798793][T18396] vxfs: can't find superblock. [ 700.879439][T18399] vxfs: unable to read disk superblock at 1 [ 700.881625][T18399] vxfs: unable to read disk superblock at 8 [ 700.883763][T18399] vxfs: can't find superblock. [ 701.818089][T18412] fuse: Bad value for 'user_id' [ 701.820172][T18412] fuse: Bad value for 'user_id' [ 702.142447][T18421] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 702.578067][T18433] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 702.580501][T18433] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 702.583756][T18433] vhci_hcd vhci_hcd.0: Device attached [ 702.699294][T18436] 9pnet_fd: Insufficient options for proto=fd [ 702.868042][ T29] usb 38-1: SetAddress Request (34) to port 0 [ 702.871645][ T29] usb 38-1: new SuperSpeed USB device number 34 using vhci_hcd [ 703.076661][T18434] vhci_hcd: connection reset by peer [ 703.079613][ T1231] vhci_hcd: stop threads [ 703.081097][ T1231] vhci_hcd: release socket [ 703.082707][ T1231] vhci_hcd: disconnect device [ 703.301509][T18438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3330'. [ 703.582651][ T67] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 703.716394][ T67] usb 6-1: device descriptor read/64, error -71 [ 703.954105][ T67] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 704.027834][T18459] fuse: Bad value for 'user_id' [ 704.029540][T18459] fuse: Bad value for 'user_id' [ 704.077793][ T67] usb 6-1: device descriptor read/64, error -71 [ 704.182476][ T67] usb usb6-port1: attempt power cycle [ 704.506699][ T67] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 704.518373][T18462] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 704.526162][ T67] usb 6-1: device descriptor read/8, error -71 [ 704.581788][T18464] fuse: Bad value for 'fd' [ 704.782467][ T67] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 704.821755][ T67] usb 6-1: device descriptor read/8, error -71 [ 704.927681][ T67] usb usb6-port1: unable to enumerate USB device [ 705.979775][T18494] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 706.466281][T18503] loop2: detected capacity change from 0 to 7 [ 706.474362][T18503] loop2: [POWERTEC] p1 p2 [ 706.476365][T18503] loop2: p1 size 1680801792 extends beyond EOD, truncated [ 706.481679][T18503] loop2: p2 start 2490368 is beyond EOD, truncated [ 706.523841][T15148] udevd[15148]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 706.611780][T18516] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 706.649225][T18517] fuse: Bad value for 'user_id' [ 706.652033][T18517] fuse: Bad value for 'user_id' [ 706.683018][ T67] kernel read not supported for file /admmidi2 (pid: 67 comm: kworker/0:2) [ 706.689662][T18520] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 706.701341][T18514] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3353'. [ 707.024673][T18534] veth0_to_bridge: entered promiscuous mode [ 707.028571][T18533] veth0_to_bridge: left promiscuous mode [ 707.138245][T18538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3361'. [ 707.278600][T18542] FAULT_INJECTION: forcing a failure. [ 707.278600][T18542] name failslab, interval 1, probability 0, space 0, times 0 [ 707.282641][T18542] CPU: 1 UID: 0 PID: 18542 Comm: syz.1.3363 Not tainted syzkaller #0 PREEMPT(full) [ 707.282657][T18542] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 707.282665][T18542] Call Trace: [ 707.282670][T18542] [ 707.282675][T18542] dump_stack_lvl+0x16c/0x1f0 [ 707.282719][T18542] should_fail_ex+0x512/0x640 [ 707.282744][T18542] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 707.282758][T18542] should_failslab+0xc2/0x120 [ 707.282773][T18542] __kmalloc_cache_noprof+0x6a/0x3e0 [ 707.282786][T18542] ? request_threaded_irq+0x1ae/0x3e0 [ 707.282802][T18542] ? __pfx_pcl818_interrupt+0x10/0x10 [ 707.282816][T18542] request_threaded_irq+0x1ae/0x3e0 [ 707.282833][T18542] pcl818_attach+0xe25/0x1660 [ 707.282848][T18542] comedi_device_attach+0x3b0/0x900 [ 707.282870][T18542] do_devconfig_ioctl+0x1b1/0x710 [ 707.282882][T18542] ? __mutex_lock+0x1c5/0x1060 [ 707.282899][T18542] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 707.282919][T18542] ? kasan_save_stack+0x42/0x60 [ 707.282932][T18542] ? kasan_save_stack+0x33/0x60 [ 707.282944][T18542] ? kasan_save_track+0x14/0x30 [ 707.282956][T18542] ? kasan_save_free_info+0x3b/0x60 [ 707.282966][T18542] ? __kasan_slab_free+0x60/0x70 [ 707.282979][T18542] ? kfree+0x2b4/0x4d0 [ 707.282988][T18542] ? tomoyo_path_number_perm+0x470/0x580 [ 707.283006][T18542] comedi_unlocked_ioctl+0x165d/0x2f00 [ 707.283026][T18542] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 707.283050][T18542] ? kasan_quarantine_put+0x10a/0x240 [ 707.283062][T18542] ? lockdep_hardirqs_on+0x7c/0x110 [ 707.283081][T18542] ? find_held_lock+0x2b/0x80 [ 707.283093][T18542] ? tomoyo_path_number_perm+0x295/0x580 [ 707.283109][T18542] ? tomoyo_path_number_perm+0x18d/0x580 [ 707.283124][T18542] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 707.283141][T18542] comedi_compat_ioctl+0x1d0/0x990 [ 707.283156][T18542] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 707.283172][T18542] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 707.283190][T18542] ? do_vfs_ioctl+0x128/0x14f0 [ 707.283208][T18542] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 707.283229][T18542] ? find_held_lock+0x2b/0x80 [ 707.283240][T18542] ? hook_file_ioctl_common+0x145/0x410 [ 707.283259][T18542] ? __fget_files+0x20e/0x3c0 [ 707.283274][T18542] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 707.283290][T18542] __ia32_compat_sys_ioctl+0x242/0x370 [ 707.283309][T18542] __do_fast_syscall_32+0x7c/0x300 [ 707.283322][T18542] do_fast_syscall_32+0x32/0x80 [ 707.283332][T18542] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 707.283347][T18542] RIP: 0023:0xf700e579 [ 707.283356][T18542] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 707.283367][T18542] RSP: 002b:00000000f53fe55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 707.283379][T18542] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040946400 [ 707.283386][T18542] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 707.283393][T18542] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 707.283400][T18542] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 707.283406][T18542] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 707.283420][T18542] [ 707.433552][T18540] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvy*[Dw [ 707.731138][T18551] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 708.368315][ T29] usb 38-1: device descriptor read/8, error -110 [ 708.745503][ T29] usb usb38-port1: attempt power cycle [ 709.288279][ T29] usb usb38-port1: unable to enumerate USB device [ 709.422965][T18573] syz_tun: entered allmulticast mode [ 709.464252][T18566] syz_tun: left allmulticast mode [ 709.632929][T18597] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 709.641152][ T5990] Bluetooth: hci2: Malformed Event: 0x13 [ 709.725450][T18605] lo speed is unknown, defaulting to 1000 [ 709.940624][T18609] vxfs: unable to read disk superblock at 1 [ 709.949755][T18609] vxfs: unable to read disk superblock at 8 [ 709.952056][T18609] vxfs: can't find superblock. [ 710.064524][T18607] fuse: Bad value for 'fd' [ 711.073213][T18637] fuse: Bad value for 'user_id' [ 711.075104][T18637] fuse: Bad value for 'user_id' [ 711.111245][ T5990] Bluetooth: hci1: Malformed Event: 0x13 [ 711.857984][T18649] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3391'. [ 711.862973][T18649] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3391'. [ 712.454931][T18668] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3395'. [ 712.507299][T18665] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 712.532233][T18669] input: syz1 as /devices/virtual/input/input33 [ 712.569711][T18671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3398'. [ 712.571809][T18668] batadv1: entered allmulticast mode [ 712.747809][T18678] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3399'. [ 712.767701][T18678] vxfs: unable to read disk superblock at 1 [ 712.770565][T18678] vxfs: unable to read disk superblock at 8 [ 712.772992][T18678] vxfs: can't find superblock. [ 713.285497][ T5990] Bluetooth: hci4: Malformed Event: 0x13 [ 713.575450][T18692] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 713.584229][T18694] fuse: Bad value for 'user_id' [ 713.586540][T18694] fuse: Bad value for 'user_id' [ 713.602488][T18695] binder: 18693:18695 ioctl c0306201 80000080 returned -14 [ 713.632945][T18697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3408'. [ 713.635899][T18697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3408'. [ 713.643694][ T1174] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 713.647364][ T8971] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 713.674366][ T8971] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 713.677003][ T8971] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 714.014285][ T5990] Bluetooth: hci2: Malformed Event: 0x13 [ 714.069560][T18707] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 714.071703][T18707] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 714.074470][T18707] vhci_hcd vhci_hcd.0: Device attached [ 714.093457][ T40] audit: type=1800 audit(1759072297.313:1122): pid=18707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3404" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0 [ 714.334122][T18708] vhci_hcd: connection closed [ 714.336089][ T8971] vhci_hcd: stop threads [ 714.339359][ T8971] vhci_hcd: release socket [ 714.340922][ T8971] vhci_hcd: disconnect device [ 714.354407][ T29] usb 42-1: enqueue for inactive port 0 [ 714.625940][T18720] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3414'. [ 714.652802][T18720] vxfs: unable to read disk superblock at 1 [ 714.655781][T18720] vxfs: unable to read disk superblock at 8 [ 714.658422][T18720] vxfs: can't find superblock. [ 714.764328][T18725] input: syz0 as /devices/virtual/input/input34 [ 714.929355][ T29] usb usb42-port1: attempt power cycle [ 715.020887][T18727] netlink: 'syz.1.3417': attribute type 23 has an invalid length. [ 715.055708][T18729] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 715.101740][ T5990] Bluetooth: hci4: Malformed Event: 0x13 [ 715.563027][ T29] usb usb42-port1: unable to enumerate USB device [ 715.604439][T18739] input: syz0 as /devices/virtual/input/input35 [ 715.677119][T18741] net_ratelimit: 13 callbacks suppressed [ 715.677133][T18741] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 716.211745][ T5990] Bluetooth: hci4: Malformed Event: 0x13 [ 716.221760][T18763] dlm: no local IP address has been set [ 716.223941][T18763] dlm: cannot start dlm midcomms -107 [ 716.336872][T18767] netlink: 'syz.2.3428': attribute type 1 has an invalid length. [ 716.339865][T18767] netlink: 'syz.2.3428': attribute type 4 has an invalid length. [ 716.526075][T14923] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 716.669737][T14923] usb 6-1: Using ep0 maxpacket: 8 [ 716.676380][T14923] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 716.680955][T14923] usb 6-1: config 0 has no interfaces? [ 716.683287][T14923] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 716.687476][T14923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.693732][T14923] usb 6-1: config 0 descriptor?? [ 716.723974][T18770] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3432'. [ 716.736742][T18770] vxfs: unable to read disk superblock at 1 [ 716.741560][T18770] vxfs: unable to read disk superblock at 8 [ 716.744650][T18770] vxfs: can't find superblock. [ 716.898647][ T6026] usb 6-1: USB disconnect, device number 22 [ 717.078953][T14923] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 717.242542][T14923] usb 5-1: Using ep0 maxpacket: 32 [ 717.249120][T14923] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 717.253388][T14923] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 717.257241][T14923] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 717.260851][T14923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 717.264932][T14923] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 717.269040][T14923] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 717.274740][T14923] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 717.278593][T14923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.285143][T14923] usb 5-1: config 0 descriptor?? [ 717.515158][T14923] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 717.525946][T14923] usb 5-1: USB disconnect, device number 20 [ 717.534378][T14923] usblp0: removed [ 717.571403][ T5990] Bluetooth: hci4: Malformed Event: 0x13 [ 717.935705][ T67] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 718.043609][T18809] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 718.107583][ T67] usb 5-1: Using ep0 maxpacket: 32 [ 718.121998][ T67] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 718.125849][ T67] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 718.128860][ T67] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 718.131979][ T67] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 718.137054][ T67] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 718.144524][ T67] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 718.149334][ T67] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 718.154944][ T67] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.173266][ T67] usb 5-1: config 0 descriptor?? [ 718.375150][ T67] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 718.566905][ T67] usb 5-1: USB disconnect, device number 21 [ 718.571123][ T67] usblp0: removed [ 719.032458][ T5990] Bluetooth: hci1: Malformed Event: 0x13 [ 719.146763][T18828] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3449'. [ 719.173765][T18836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3455'. [ 719.179363][T18836] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3455'. [ 719.183128][T18836] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3455'. [ 719.241594][T18828] vxfs: unable to read disk superblock at 1 [ 719.244660][T18828] vxfs: unable to read disk superblock at 8 [ 719.293681][T18828] vxfs: can't find superblock. [ 719.345321][ T6026] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 719.489661][ T6026] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 719.498554][ T6026] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 719.502535][ T6026] usb 8-1: config 0 interface 0 has no altsetting 0 [ 719.508867][ T6026] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 719.512730][ T6026] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 719.515641][ T6026] usb 8-1: Product: syz [ 719.518028][ T6026] usb 8-1: Manufacturer: syz [ 719.520191][ T6026] usb 8-1: SerialNumber: syz [ 719.526918][ T6026] usb 8-1: config 0 descriptor?? [ 719.536879][ T6026] hub 8-1:0.0: bad descriptor, ignoring hub [ 719.539428][ T6026] hub 8-1:0.0: probe with driver hub failed with error -5 [ 719.547283][ T6026] usb 8-1: selecting invalid altsetting 0 [ 719.629126][T18847] blktrace: Concurrent blktraces are not allowed on sg0 [ 719.712603][T18848] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 719.714693][T18848] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 719.717907][T18848] vhci_hcd vhci_hcd.0: Device attached [ 719.796329][T18854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.800210][T18854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.946651][T18849] vhci_hcd: connection closed [ 719.947026][ T1174] vhci_hcd: stop threads [ 719.954180][ T1174] vhci_hcd: release socket [ 719.961131][ T1174] vhci_hcd: disconnect device [ 720.469400][T18832] usb 8-1: reset high-speed USB device number 19 using dummy_hcd [ 720.651510][T18832] usb 8-1: device firmware changed [ 720.657760][ T6947] usb 8-1: USB disconnect, device number 19 [ 721.066033][ T5990] Bluetooth: hci4: Malformed Event: 0x13 [ 721.107839][ T6947] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 721.261479][ T6947] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 721.264223][ T6947] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 721.267247][ T6947] usb 8-1: config 0 interface 0 has no altsetting 0 [ 721.274733][ T6947] usb 8-1: string descriptor 0 read error: -22 [ 721.277222][ T6947] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 721.282701][ T6947] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 721.288923][ T6947] usb 8-1: config 0 descriptor?? [ 721.292743][ T6947] hub 8-1:0.0: bad descriptor, ignoring hub [ 721.295107][ T6947] hub 8-1:0.0: probe with driver hub failed with error -5 [ 721.299184][ T6947] usb 8-1: selecting invalid altsetting 0 [ 721.509257][T18903] infiniband syz2: set down [ 721.510908][T18903] infiniband syz2: added ipvlan0 [ 721.544351][T18903] RDS/IB: syz2: added [ 721.545924][T18903] smc: adding ib device syz2 with port count 1 [ 721.548285][T18903] smc: ib device syz2 port 1 has pnetid [ 721.569169][T18907] QAT: Stopping all acceleration devices. [ 721.584111][ T6026] usb 8-1: USB disconnect, device number 20 [ 722.326944][ T5990] Bluetooth: hci4: Malformed Event: 0x13 [ 723.977624][T18952] syz_tun: entered allmulticast mode [ 723.985039][T18947] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 723.987667][T18947] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 724.015287][T18947] vhci_hcd vhci_hcd.0: Device attached [ 724.031782][T18952] dvmrp1: entered allmulticast mode [ 724.261320][T18960] blktrace: Concurrent blktraces are not allowed on sg0 [ 724.279881][ T5983] usb 44-1: SetAddress Request (18) to port 0 [ 724.282786][ T5983] usb 44-1: new SuperSpeed USB device number 18 using vhci_hcd [ 724.433470][T18926] syz_tun: left allmulticast mode [ 724.435413][T18948] vhci_hcd: connection reset by peer [ 724.437597][ T1174] vhci_hcd: stop threads [ 724.439040][ T1174] vhci_hcd: release socket [ 724.442321][ T1174] vhci_hcd: disconnect device [ 725.346477][T18976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3483'. [ 725.350564][T18976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3483'. [ 726.061387][ T8965] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 726.065131][ T8965] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 726.279137][ T5990] Bluetooth: hci1: Malformed Event: 0x13 [ 726.711497][ T6026] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 726.860609][ T6026] usb 8-1: Using ep0 maxpacket: 8 [ 726.865496][ T6026] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 726.871036][ T6026] usb 8-1: config 0 has no interfaces? [ 726.873673][ T6026] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 726.876796][ T6026] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.881854][ T6026] usb 8-1: config 0 descriptor?? [ 726.931799][T19011] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 726.934275][T19011] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 727.019979][T19011] vhci_hcd vhci_hcd.0: Device attached [ 727.085122][ T6026] usb 8-1: USB disconnect, device number 21 [ 727.352042][ T8965] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 727.356636][ T8965] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 727.413959][T12303] usb 42-1: SetAddress Request (28) to port 0 [ 727.422442][T12303] usb 42-1: new SuperSpeed USB device number 28 using vhci_hcd [ 727.837818][T19041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3498'. [ 727.842093][T19041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3498'. [ 728.072417][T19016] vhci_hcd: connection reset by peer [ 728.074922][ T8934] vhci_hcd: stop threads [ 728.076641][ T8934] vhci_hcd: release socket [ 728.079523][ T8934] vhci_hcd: disconnect device [ 729.088555][T19060] vxfs: unable to read disk superblock at 1 [ 729.091498][T19060] vxfs: unable to read disk superblock at 8 [ 729.093556][T19060] vxfs: can't find superblock. [ 729.127508][ T5983] usb 44-1: device descriptor read/8, error -110 [ 729.511352][ T5983] usb usb44-port1: attempt power cycle [ 730.214855][T19086] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 730.717427][T19089] vxfs: unable to read disk superblock at 1 [ 730.720895][T19089] vxfs: unable to read disk superblock at 8 [ 730.722895][T19089] vxfs: can't find superblock. [ 730.775443][ T5983] usb usb44-port1: unable to enumerate USB device [ 730.790135][T19095] vxfs: unable to read disk superblock at 1 [ 730.792162][T19095] vxfs: unable to read disk superblock at 8 [ 730.794009][T19095] vxfs: can't find superblock. [ 730.801771][T19094] vxfs: unable to read disk superblock at 1 [ 730.804379][T19094] vxfs: unable to read disk superblock at 8 [ 730.806290][T19094] vxfs: can't find superblock. [ 732.251148][T12303] usb 42-1: device descriptor read/8, error -110 [ 732.266269][T19114] 9pnet_fd: Insufficient options for proto=fd [ 732.633148][T12303] usb usb42-port1: attempt power cycle [ 732.790061][T19123] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 732.792942][T19123] overlayfs: failed to set xattr on upper [ 732.795510][T19123] overlayfs: ...falling back to redirect_dir=nofollow. [ 732.798464][T19123] overlayfs: ...falling back to index=off. [ 732.800423][T19123] overlayfs: ...falling back to uuid=null. [ 732.803118][T19123] overlayfs: ...falling back to xino=off. [ 733.195920][T12303] usb usb42-port1: unable to enumerate USB device [ 733.832189][T19140] vxfs: unable to read disk superblock at 1 [ 733.835974][T19140] vxfs: unable to read disk superblock at 8 [ 733.838014][T19140] vxfs: can't find superblock. [ 734.244261][T19138] qnx6: unable to read the first superblock [ 734.248032][T19138] qnx6: unable to read the first superblock [ 734.250189][T19138] qnx6: unable to read the first superblock [ 734.751168][T19158] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 734.754395][T19158] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 734.759552][T19158] vhci_hcd vhci_hcd.0: Device attached [ 734.988811][T19168] syz_tun: entered allmulticast mode [ 735.416188][T19168] dvmrp1: entered allmulticast mode [ 735.460858][ T6026] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 735.606429][ T6026] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 735.609441][ T6026] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 735.613882][ T6026] usb 5-1: config 0 interface 0 has no altsetting 0 [ 735.617930][ T6026] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 735.620868][ T6026] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 735.623784][ T6026] usb 5-1: Product: syz [ 735.625341][ T6026] usb 5-1: Manufacturer: syz [ 735.626866][ T6026] usb 5-1: SerialNumber: syz [ 735.630182][ T6026] usb 5-1: config 0 descriptor?? [ 735.634332][ T6026] hub 5-1:0.0: bad descriptor, ignoring hub [ 735.636569][ T6026] hub 5-1:0.0: probe with driver hub failed with error -5 [ 735.640311][ T6026] usb 5-1: selecting invalid altsetting 0 [ 735.747205][ T5990] Bluetooth: hci2: command 0x0405 tx timeout [ 735.832664][T12303] usb 40-1: SetAddress Request (27) to port 0 [ 735.835114][T12303] usb 40-1: new SuperSpeed USB device number 27 using vhci_hcd [ 735.907812][T19178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.911171][T19178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.974877][ T6947] usb 5-1: USB disconnect, device number 22 [ 736.036411][T19174] fuse: Bad value for 'user_id' [ 736.038008][T19174] fuse: Bad value for 'user_id' [ 736.461576][ T29] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 736.617181][ T29] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 736.620420][ T29] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 736.627257][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 736.630816][T19126] syz_tun: left allmulticast mode [ 736.634382][T19163] vhci_hcd: connection reset by peer [ 736.640962][ T1174] vhci_hcd: stop threads [ 736.642166][ T29] usb 5-1: string descriptor 0 read error: -22 [ 736.643170][ T1174] vhci_hcd: release socket [ 736.645648][ T29] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 736.647509][ T1174] vhci_hcd: disconnect device [ 736.651423][ T29] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 736.661366][ T29] usb 5-1: config 0 descriptor?? [ 736.666567][ T29] hub 5-1:0.0: bad descriptor, ignoring hub [ 736.669131][ T29] hub 5-1:0.0: probe with driver hub failed with error -5 [ 736.675461][ T29] usb 5-1: selecting invalid altsetting 0 [ 737.021565][ T6026] usb 5-1: USB disconnect, device number 23 [ 739.935987][T19217] [ 739.937054][T19217] ====================================================== [ 739.939925][T19217] WARNING: possible circular locking dependency detected [ 739.942334][T19217] syzkaller #0 Not tainted [ 739.943953][T19217] ------------------------------------------------------ [ 739.948343][T19217] syz.2.3540/19217 is trying to acquire lock: [ 739.950229][T19217] ffff88806bcca9e0 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: walk_component+0x345/0x5b0 [ 739.953594][T19217] [ 739.953594][T19217] but task is already holding lock: [ 739.956309][T19217] ffffffff90657088 (rpcb_create_local_mutex){+.+.}-{4:4}, at: rpcb_create_local+0x100/0x270 [ 739.960157][T19217] [ 739.960157][T19217] which lock already depends on the new lock. [ 739.960157][T19217] [ 739.963567][T19217] [ 739.963567][T19217] the existing dependency chain (in reverse order) is: [ 739.966209][T19217] [ 739.966209][T19217] -> #5 (rpcb_create_local_mutex){+.+.}-{4:4}: [ 739.968807][T19217] __mutex_lock+0x193/0x1060 [ 739.970442][T19217] rpcb_create_local+0x100/0x270 [ 739.972619][T19217] svc_bind+0x1e8/0x260 [ 739.974256][T19217] nfsd_create_serv+0x2d2/0x480 [ 739.976205][T19217] nfsd_nl_listener_set_doit+0xdd/0x1b10 [ 739.978330][T19217] genl_family_rcv_msg_doit+0x206/0x2f0 [ 739.980439][T19217] genl_rcv_msg+0x55c/0x800 [ 739.982089][T19217] netlink_rcv_skb+0x155/0x420 [ 739.983768][T19217] genl_rcv+0x28/0x40 [ 739.985202][T19217] netlink_unicast+0x5aa/0x870 [ 739.986998][T19217] netlink_sendmsg+0x8d1/0xdd0 [ 739.988727][T19217] ____sys_sendmsg+0xa95/0xc70 [ 739.990487][T19217] ___sys_sendmsg+0x134/0x1d0 [ 739.992206][T19217] __sys_sendmsg+0x16d/0x220 [ 739.994039][T19217] __do_fast_syscall_32+0x7c/0x300 [ 739.996167][T19217] do_fast_syscall_32+0x32/0x80 [ 739.998197][T19217] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 740.000618][T19217] [ 740.000618][T19217] -> #4 (nfsd_mutex){+.+.}-{4:4}: [ 740.003288][T19217] __mutex_lock+0x193/0x1060 [ 740.005369][T19217] nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 740.007299][T19217] genl_family_rcv_msg_doit+0x206/0x2f0 [ 740.009507][T19217] genl_rcv_msg+0x55c/0x800 [ 740.011176][T19217] netlink_rcv_skb+0x155/0x420 [ 740.013014][T19217] genl_rcv+0x28/0x40 [ 740.014511][T19217] netlink_unicast+0x5aa/0x870 [ 740.016565][T19217] netlink_sendmsg+0x8d1/0xdd0 [ 740.018311][T19217] ____sys_sendmsg+0xa95/0xc70 [ 740.020003][T19217] ___sys_sendmsg+0x134/0x1d0 [ 740.021700][T19217] __sys_sendmsg+0x16d/0x220 [ 740.023362][T19217] __do_fast_syscall_32+0x7c/0x300 [ 740.025183][T19217] do_fast_syscall_32+0x32/0x80 [ 740.026893][T19217] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 740.029100][T19217] [ 740.029100][T19217] -> #3 (cb_lock){++++}-{4:4}: [ 740.031385][T19217] down_read+0x9b/0x480 [ 740.032976][T19217] genl_rcv+0x19/0x40 [ 740.034427][T19217] netlink_unicast+0x5aa/0x870 [ 740.036123][T19217] netlink_sendmsg+0x8d1/0xdd0 [ 740.037747][T19217] sock_sendmsg+0x3cc/0x470 [ 740.039296][T19217] splice_to_socket+0xaf6/0x1110 [ 740.040990][T19217] do_splice+0x1475/0x1fc0 [ 740.042540][T19217] __do_splice+0x32a/0x360 [ 740.044124][T19217] __ia32_sys_splice+0x189/0x250 [ 740.045798][T19217] __do_fast_syscall_32+0x7c/0x300 [ 740.047510][T19217] do_fast_syscall_32+0x32/0x80 [ 740.049175][T19217] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 740.051361][T19217] [ 740.051361][T19217] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 740.053710][T19217] __mutex_lock+0x193/0x1060 [ 740.055348][T19217] pipe_lock+0x64/0x80 [ 740.056915][T19217] iter_file_splice_write+0x1ea/0x12e0 [ 740.058994][T19217] backing_file_splice_write+0x27f/0x890 [ 740.061197][T19217] ovl_splice_write+0x38d/0x6c0 [ 740.063333][T19217] do_splice+0x1475/0x1fc0 [ 740.065006][T19217] __do_splice+0x32a/0x360 [ 740.066656][T19217] __ia32_sys_splice+0x189/0x250 [ 740.068574][T19217] __do_fast_syscall_32+0x7c/0x300 [ 740.070306][T19217] do_fast_syscall_32+0x32/0x80 [ 740.072240][T19217] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 740.074337][T19217] [ 740.074337][T19217] -> #1 (sb_writers#5){.+.+}-{0:0}: [ 740.076664][T19217] mnt_want_write+0x6f/0x450 [ 740.078298][T19217] ovl_create_object+0x12c/0x300 [ 740.079886][T19217] lookup_open.isra.0+0x11d0/0x1580 [ 740.081668][T19217] path_openat+0x893/0x2cb0 [ 740.083662][T19217] do_filp_open+0x20b/0x470 [ 740.085377][T19217] do_sys_openat2+0x11b/0x1d0 [ 740.087066][T19217] __ia32_compat_sys_open+0x146/0x1e0 [ 740.088931][T19217] __do_fast_syscall_32+0x7c/0x300 [ 740.090888][T19217] do_fast_syscall_32+0x32/0x80 [ 740.092848][T19217] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 740.095152][T19217] [ 740.095152][T19217] -> #0 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}: [ 740.098249][T19217] __lock_acquire+0x12a6/0x1ce0 [ 740.100275][T19217] lock_acquire+0x179/0x350 [ 740.101863][T19217] down_read+0x9b/0x480 [ 740.103412][T19217] walk_component+0x345/0x5b0 [ 740.105104][T19217] link_path_walk+0x627/0xe20 [ 740.106790][T19217] path_lookupat+0x15a/0x6d0 [ 740.108509][T19217] filename_lookup+0x224/0x5f0 [ 740.110294][T19217] kern_path+0x35/0x50 [ 740.111861][T19217] unix_find_other+0x3d5/0xb50 [ 740.113739][T19217] unix_stream_connect+0x4cb/0x1a20 [ 740.115745][T19217] kernel_connect+0x104/0x180 [ 740.117669][T19217] xs_local_connect+0x5f5/0xd60 [ 740.119548][T19217] xprt_connect+0x7e4/0x9c0 [ 740.121271][T19217] call_connect+0x1d9/0x300 [ 740.122843][T19217] __rpc_execute+0x382/0x1220 [ 740.124485][T19217] rpc_execute+0x2e8/0x420 [ 740.126039][T19217] rpc_run_task+0x4a4/0x660 [ 740.127758][T19217] rpc_call_null_helper+0x136/0x180 [ 740.129620][T19217] rpc_ping+0xb4/0x150 [ 740.131076][T19217] rpc_create_xprt+0x387/0x440 [ 740.132793][T19217] rpc_create+0x469/0x7f0 [ 740.134402][T19217] rpcb_create_af_local+0x11b/0x310 [ 740.136366][T19217] rpcb_create_local+0x211/0x270 [ 740.138205][T19217] svc_bind+0x1e8/0x260 [ 740.139817][T19217] nfsd_create_serv+0x2d2/0x480 [ 740.141539][T19217] nfsd_nl_listener_set_doit+0xdd/0x1b10 [ 740.143630][T19217] genl_family_rcv_msg_doit+0x206/0x2f0 [ 740.145499][T19217] genl_rcv_msg+0x55c/0x800 [ 740.147043][T19217] netlink_rcv_skb+0x155/0x420 [ 740.148715][T19217] genl_rcv+0x28/0x40 [ 740.150113][T19217] netlink_unicast+0x5aa/0x870 [ 740.151753][T19217] netlink_sendmsg+0x8d1/0xdd0 [ 740.153397][T19217] ____sys_sendmsg+0xa95/0xc70 [ 740.155166][T19217] ___sys_sendmsg+0x134/0x1d0 [ 740.156962][T19217] __sys_sendmsg+0x16d/0x220 [ 740.158870][T19217] __do_fast_syscall_32+0x7c/0x300 [ 740.161015][T19217] do_fast_syscall_32+0x32/0x80 [ 740.162912][T19217] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 740.165312][T19217] [ 740.165312][T19217] other info that might help us debug this: [ 740.165312][T19217] [ 740.168590][T19217] Chain exists of: [ 740.168590][T19217] &ovl_i_mutex_dir_key[depth] --> nfsd_mutex --> rpcb_create_local_mutex [ 740.168590][T19217] [ 740.173412][T19217] Possible unsafe locking scenario: [ 740.173412][T19217] [ 740.175863][T19217] CPU0 CPU1 [ 740.177476][T19217] ---- ---- [ 740.179119][T19217] lock(rpcb_create_local_mutex); [ 740.180720][T19217] lock(nfsd_mutex); [ 740.182731][T19217] lock(rpcb_create_local_mutex); [ 740.185107][T19217] rlock(&ovl_i_mutex_dir_key[depth]); [ 740.186933][T19217] [ 740.186933][T19217] *** DEADLOCK *** [ 740.186933][T19217] [ 740.189553][T19217] 3 locks held by syz.2.3540/19217: [ 740.191263][T19217] #0: ffffffff9042c210 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 740.194017][T19217] #1: ffffffff8e9da048 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 740.197225][T19217] #2: ffffffff90657088 (rpcb_create_local_mutex){+.+.}-{4:4}, at: rpcb_create_local+0x100/0x270 [ 740.200492][T19217] [ 740.200492][T19217] stack backtrace: [ 740.202358][T19217] CPU: 2 UID: 0 PID: 19217 Comm: syz.2.3540 Not tainted syzkaller #0 PREEMPT(full) [ 740.202374][T19217] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 740.202382][T19217] Call Trace: [ 740.202387][T19217] [ 740.202393][T19217] dump_stack_lvl+0x116/0x1f0 [ 740.202413][T19217] print_circular_bug+0x275/0x350 [ 740.202430][T19217] check_noncircular+0x14c/0x170 [ 740.202448][T19217] __lock_acquire+0x12a6/0x1ce0 [ 740.202466][T19217] lock_acquire+0x179/0x350 [ 740.202481][T19217] ? walk_component+0x345/0x5b0 [ 740.202494][T19217] ? __pfx___might_resched+0x10/0x10 [ 740.202506][T19217] ? try_to_unlazy+0x24e/0x660 [ 740.202518][T19217] down_read+0x9b/0x480 [ 740.202530][T19217] ? walk_component+0x345/0x5b0 [ 740.202541][T19217] ? __pfx_down_read+0x10/0x10 [ 740.202553][T19217] ? lookup_fast+0x156/0x610 [ 740.202564][T19217] walk_component+0x345/0x5b0 [ 740.202576][T19217] link_path_walk+0x627/0xe20 [ 740.202590][T19217] path_lookupat+0x15a/0x6d0 [ 740.202601][T19217] ? netlink_rcv_skb+0x155/0x420 [ 740.202620][T19217] filename_lookup+0x224/0x5f0 [ 740.202632][T19217] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 740.202648][T19217] ? __pfx_filename_lookup+0x10/0x10 [ 740.202664][T19217] ? kmalloc_reserve+0x18b/0x2c0 [ 740.202677][T19217] ? getname_kernel+0x52/0x370 [ 740.202692][T19217] ? __asan_memcpy+0x3c/0x60 [ 740.202705][T19217] kern_path+0x35/0x50 [ 740.202717][T19217] unix_find_other+0x3d5/0xb50 [ 740.202736][T19217] ? __pfx_unix_find_other+0x10/0x10 [ 740.202755][T19217] unix_stream_connect+0x4cb/0x1a20 [ 740.202766][T19217] ? register_lock_class+0x41/0x4c0 [ 740.202781][T19217] ? __pfx_unix_stream_connect+0x10/0x10 [ 740.202798][T19217] ? __lock_acquire+0xb97/0x1ce0 [ 740.202814][T19217] kernel_connect+0x104/0x180 [ 740.202826][T19217] ? __pfx_kernel_connect+0x10/0x10 [ 740.202835][T19217] ? reacquire_held_locks+0xcd/0x1f0 [ 740.202853][T19217] ? __local_bh_enable_ip+0xa4/0x120 [ 740.202868][T19217] xs_local_connect+0x5f5/0xd60 [ 740.202886][T19217] ? __pfx_xs_local_connect+0x10/0x10 [ 740.202901][T19217] ? do_raw_spin_unlock+0x172/0x230 [ 740.202919][T19217] ? _raw_spin_unlock+0x28/0x50 [ 740.202935][T19217] xprt_connect+0x7e4/0x9c0 [ 740.202953][T19217] ? __pfx_call_connect+0x10/0x10 [ 740.202964][T19217] call_connect+0x1d9/0x300 [ 740.202975][T19217] __rpc_execute+0x382/0x1220 [ 740.202988][T19217] ? __pfx___rpc_execute+0x10/0x10 [ 740.203000][T19217] ? rpc_task_get_xprt+0xef/0x2c0 [ 740.203019][T19217] rpc_execute+0x2e8/0x420 [ 740.203031][T19217] rpc_run_task+0x4a4/0x660 [ 740.203044][T19217] rpc_call_null_helper+0x136/0x180 [ 740.203057][T19217] ? __pfx_rpc_call_null_helper+0x10/0x10 [ 740.203070][T19217] ? rpc_client_register+0x3e0/0x680 [ 740.203081][T19217] ? __pfx_rpc_client_register+0x10/0x10 [ 740.203093][T19217] ? rcu_is_watching+0x12/0xc0 [ 740.203104][T19217] ? rpc_new_client+0xb60/0x1320 [ 740.203116][T19217] rpc_ping+0xb4/0x150 [ 740.203128][T19217] rpc_create_xprt+0x387/0x440 [ 740.203141][T19217] rpc_create+0x469/0x7f0 [ 740.203154][T19217] ? __pfx_rpc_create+0x10/0x10 [ 740.203166][T19217] ? __mutex_trylock_common+0xe9/0x250 [ 740.203182][T19217] ? __lock_acquire+0xb97/0x1ce0 [ 740.203202][T19217] ? __pfx___might_resched+0x10/0x10 [ 740.203213][T19217] ? rcu_is_watching+0x12/0xc0 [ 740.203225][T19217] rpcb_create_af_local+0x11b/0x310 [ 740.203243][T19217] ? __pfx_rpcb_create_af_local+0x10/0x10 [ 740.203264][T19217] ? find_held_lock+0x2b/0x80 [ 740.203275][T19217] ? rpcb_create_local+0x1da/0x270 [ 740.203293][T19217] rpcb_create_local+0x211/0x270 [ 740.203311][T19217] svc_bind+0x1e8/0x260 [ 740.203321][T19217] nfsd_create_serv+0x2d2/0x480 [ 740.203334][T19217] ? __pfx_nfsd_create_serv+0x10/0x10 [ 740.203346][T19217] ? __nla_validate_parse+0x600/0x2880 [ 740.203361][T19217] nfsd_nl_listener_set_doit+0xdd/0x1b10 [ 740.203379][T19217] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 740.203395][T19217] ? __nla_parse+0x40/0x60 [ 740.203408][T19217] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 740.203422][T19217] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 740.203437][T19217] genl_family_rcv_msg_doit+0x206/0x2f0 [ 740.203449][T19217] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 740.203461][T19217] ? rcu_is_watching+0x12/0xc0 [ 740.203474][T19217] ? bpf_lsm_capable+0x9/0x10 [ 740.203485][T19217] ? security_capable+0x7e/0x260 [ 740.203498][T19217] genl_rcv_msg+0x55c/0x800 [ 740.203511][T19217] ? __pfx_genl_rcv_msg+0x10/0x10 [ 740.203523][T19217] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 740.203539][T19217] ? __lock_acquire+0x62e/0x1ce0 [ 740.203555][T19217] netlink_rcv_skb+0x155/0x420 [ 740.203572][T19217] ? __pfx_genl_rcv_msg+0x10/0x10 [ 740.203584][T19217] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 740.203631][T19217] ? netlink_deliver_tap+0x1ae/0xd30 [ 740.203654][T19217] ? is_vmalloc_addr+0x86/0xa0 [ 740.203674][T19217] genl_rcv+0x28/0x40 [ 740.203683][T19217] netlink_unicast+0x5aa/0x870 [ 740.203702][T19217] ? __pfx_netlink_unicast+0x10/0x10 [ 740.203719][T19217] ? __pfx___might_resched+0x10/0x10 [ 740.203732][T19217] netlink_sendmsg+0x8d1/0xdd0 [ 740.203751][T19217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 740.203770][T19217] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 740.203783][T19217] ____sys_sendmsg+0xa95/0xc70 [ 740.203796][T19217] ? __pfx_____sys_sendmsg+0x10/0x10 [ 740.203809][T19217] ? get_compat_msghdr+0x11a/0x170 [ 740.203827][T19217] ___sys_sendmsg+0x134/0x1d0 [ 740.203845][T19217] ? __pfx____sys_sendmsg+0x10/0x10 [ 740.203865][T19217] ? find_held_lock+0x2b/0x80 [ 740.203879][T19217] __sys_sendmsg+0x16d/0x220 [ 740.203896][T19217] ? __pfx___sys_sendmsg+0x10/0x10 [ 740.203913][T19217] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 740.203933][T19217] ? rcu_is_watching+0x12/0xc0 [ 740.203945][T19217] __do_fast_syscall_32+0x7c/0x300 [ 740.203958][T19217] do_fast_syscall_32+0x32/0x80 [ 740.203968][T19217] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 740.203982][T19217] RIP: 0023:0xf7f78579 [ 740.203992][T19217] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 740.204004][T19217] RSP: 002b:00000000f546655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 740.204020][T19217] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 740.204027][T19217] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 740.204034][T19217] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 740.204041][T19217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 740.204048][T19217] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 740.204058][T19217] Connection to localhost closed by remote host. [ 740.954763][T12303] usb 40-1: device descriptor read/8, error -110 [ 741.328786][T12303] usb usb40-port1: attempt power cycle [ 741.929587][T12303] usb usb40-port1: unable to enumerate USB device [ 742.292065][ T8980] smc: removing ib device syz1 [ 742.796225][ T8959] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.799502][ T8959] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.044532][ T8959] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 743.048105][ T8959] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.176999][ T8959] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 743.180075][ T8959] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.310732][ T8959] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 743.314404][ T8959] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.490944][ T8959] bridge_slave_1: left allmulticast mode [ 743.492739][ T8959] bridge_slave_1: left promiscuous mode [ 743.494584][ T8959] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.521260][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 743.595543][ T8959] bridge_slave_0: left allmulticast mode [ 743.597463][ T8959] bridge_slave_0: left promiscuous mode [ 743.599732][ T8959] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.481859][ T8959] dvmrp1 (unregistering): left allmulticast mode [ 745.472651][ T8959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 745.548305][ T8959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 745.577235][ T8959] bond0 (unregistering): Released all slaves [ 746.528951][ T8959] hsr_slave_0: left promiscuous mode [ 746.547961][ T8959] hsr_slave_1: left promiscuous mode [ 746.551287][ T8959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 746.554368][ T8959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 746.605738][ T8959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 746.608057][ T8959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 746.672176][ T8959] veth1_macvtap: left promiscuous mode [ 746.674593][ T8959] veth0_macvtap: left promiscuous mode [ 746.677199][ T8959] veth1_vlan: left promiscuous mode [ 746.679403][ T8959] veth0_vlan: left promiscuous mode VM DIAGNOSIS: 14:59:05 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000003 RBX=0000000000010000 RCX=1ffffffff35cbc10 RDX=0000000000000004 RSI=ffffffff8c163700 RDI=0000000000010000 RBP=0000000000000001 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8187aeb5 RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f53e4d40 CR3=0000000051fbf000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000001000008fd RBX=ffffffff8e2977c0 RCX=0000000000000830 RDX=0000000000000001 RSI=00000000000000fd RDI=0000000000000001 RBP=0000000000000008 RSP=ffffc900068ff688 R8 =0000000000000000 R9 =fffffbfff21575b2 R10=ffffffff90abad97 R11=ffff88802b33a740 R12=1ffff92000d1fed2 R13=0000000000000003 R14=0000000000000000 R15=ffffc900068ff6b0 RIP=ffffffff81695748 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880975b9000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c413861 CR3=0000000051f1d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8561ed25 RDI=ffffffff9b103780 RBP=ffffffff9b103740 RSP=ffffc9000699ddb8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff9b103740 R15=ffffffff8561ecc0 RIP=ffffffff8561ed4f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880976b9000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff6b19406a8 CR3=0000000051efe000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fec0ffe0 Opmask01=0000000000004211 Opmask02=000000007ffeffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000006c00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0f0e ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff6b1b16b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f5c4f5f05040405 19694645585e4445 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4905194e584b4905 4e445f4559051a04 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 305f305f315f302d 6273752d305f6463 685f796d6d75642d 6d726f6674616c70 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 33436c6f72746e6f 632f33647261632f 646e756f732f302e 303a312d352f312d ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 352f356273752f30 2e6463685f796d6d 75642f6d726f6674 616c702f73656369 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005595d1c54d50 00005595d1c4e190 00005595d1c348e0 00005595d1c2c600 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005595d1c53cd0 00005595d1c4bcd0 00005595d1c41190 00005595d1c3c8e0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005595d1c2bd20 00005595d1c45af0 00005595d1c47680 00005595d1c36670 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005595d1c46760 00005595d1c4dc40 00005595d1c4c530 00005595d1c40b40 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffff88802b441d40 RCX=ffffffff81af1051 RDX=ffff8880128a2440 RSI=ffffffff81af102b RDI=0000000000000000 RBP=0000000000000003 RSP=ffffc90003acf2a8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=ffffed10056883a9 R14=0000000000000001 R15=0000000000000002 RIP=ffffffff81af104a RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005595950b202c CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000000820 Opmask02=000000007ffeffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005595d1c4cdd0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005595d1c4f5e0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff6b1b16b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8eac8a44e42b79ec 737373762a2e6f4a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737342 737326e6a2b1c573 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 696b66722f313779 68702f3131323038 656565692f30376d 697377682f6d6973 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 38376c6c696b6672 2f31377968702f31 3132303865656569 2f30376d69737768 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f6d697377685f31 3132303863616d2f 6c6175747269762f 736563697665642f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7766736c6d61722c 4142312c4339312c 3739312c3539312c 3339312c3239312c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3139312c3039312c 4638312c4538312c 4238312c3938312c 3838312c3538312c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3438312c3138312c 3937312c3737312c 3437312c4436312c 4336312c3636312c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3336312c3136312c 3036312c30462c46 442c30442c46432c 38412c37412c4639 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000