last executing test programs: 2m17.289702323s ago: executing program 0 (id=198): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cgroups\x00', 0x0, 0x0) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000001800)=[{{&(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1c0000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="1400000001000000010000ff", @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="180000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100026f"], 0x78, 0x4}}], 0x1, 0x0) 2m17.220655137s ago: executing program 0 (id=199): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000780)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7ece1e40ad8871461ab0800", @ANYRES64=r2, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002800)="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", 0x2000, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x800448d4, &(0x7f0000000080)={0x0, 0x200, "408b7c"}) 2m17.218719242s ago: executing program 0 (id=201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000048000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000d00000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000074c0000000c0a01020000000000000000010000000900020073797a3200000000200003801c0000800400018008000340000000010c00054000000000000000020900010073797a30"], 0xf8}}, 0x0) 2m17.151112788s ago: executing program 0 (id=202): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x488}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x3af4701e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r4, 0xc008ae91, &(0x7f0000000240)) r5 = open(&(0x7f0000000040)='./file0\x00', 0x80400, 0x1b0) mlockall(0x1) io_uring_setup(0x3eaa, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xffffff7d, 0x13a, 0x0, r5}) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FICLONE(r1, 0x40049409, r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 2m16.611090943s ago: executing program 3 (id=204): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9eff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) 2m16.519748276s ago: executing program 0 (id=205): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x11, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000440)) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0xb, &(0x7f0000000040)=ANY=[], 0x0) ioctl$BTRFS_IOC_ADD_DEV(r7, 0x5509, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='\x00>\xe7\xad\xc26\x86.\xa5\xd7\xb6\xc5{\xad\xe6\n\x14\xb7\xf8\x92\xd6Q\xc8)\xd4\x96\xe1', &(0x7f0000000300)='{}p\xa53\x87\xe4\x93-k\x89D\xf8\xef\xc8l\x1c0k%@\x00\xb1\x03e\x16\xac\x8f9\x14\xf4h\x9e\xc9\xe4\xe70V\xb0t\x99+\xae\x18\xb0\xf0\"\xe1\xd1q\xf76\x9e\x02\xab\xea\x03\xc8E\xd2*MtX\xb2\x8e\x8d>\x13\x17I\xb7*\xce\xc4N[xW\xcc\xd6\x91)2Y\xea\xf1\x0f\xc2-\xf3\x87u\xe9\xa4t\xd0\x88\xfd\x8a\xd1\xc3\xbb\x04=\xf9Zo\xe7e+_\xe5\xd0\x8f>\x8c\xa4;\xba-\xf9\xb4I\x9c', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 2m16.516938979s ago: executing program 3 (id=206): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x2a, 0x2, 0xe2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x6, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x10}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0xd5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004180)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2m16.243382988s ago: executing program 0 (id=208): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x4e21, 0x0, @mcast2}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0xfffffc01}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347103e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3bfffff00"}, 0xd8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000003ff000000", 0x58}], 0x1) 2m16.230924879s ago: executing program 32 (id=208): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x4e21, 0x0, @mcast2}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0xfffffc01}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347103e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3bfffff00"}, 0xd8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000003ff000000", 0x58}], 0x1) 2m15.589543309s ago: executing program 3 (id=213): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x39}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b00}, {}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, @in=@multicast1}}, 0xe8) 2m15.589191292s ago: executing program 3 (id=214): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x488}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x3af4701e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r4, 0xc008ae91, &(0x7f0000000240)) r5 = open(&(0x7f0000000040)='./file0\x00', 0x80400, 0x1b0) mlockall(0x1) io_uring_setup(0x3eaa, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xffffff7d, 0x13a, 0x0, r5}) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FICLONE(r1, 0x40049409, r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 2m14.89554839s ago: executing program 3 (id=217): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xc0202, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="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", 0x200}, {0x0, 0x20000}], 0x2) r3 = socket$netlink(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4020}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xc0202, 0x0) (async) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="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", 0x200}, {0x0, 0x20000}], 0x2) (async) socket$netlink(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4020}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 2m14.419387969s ago: executing program 3 (id=219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x34, 0x3, "7dd86dc9b7ffffc7961e64e816e2fa144f7707e5f7f6cbd498a6b1affd1a3a7027bb2a1535664f6c1793c8ab258d7f10"}, @NFTA_MATCH_NAME={0xe, 0x1, 'multiport\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0xb8}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2m14.403346816s ago: executing program 33 (id=219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x34, 0x3, "7dd86dc9b7ffffc7961e64e816e2fa144f7707e5f7f6cbd498a6b1affd1a3a7027bb2a1535664f6c1793c8ab258d7f10"}, @NFTA_MATCH_NAME={0xe, 0x1, 'multiport\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0xb8}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2m14.221361276s ago: executing program 4 (id=223): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000780)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7ece1e40ad8871461ab0800", @ANYRES64=r2, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002800)="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", 0x2000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448d4, &(0x7f0000000080)={0x0, 0x200, "408b7c"}) 2m14.161464655s ago: executing program 4 (id=224): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"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", 0x4d5}}, 0x1006) 2m14.101806831s ago: executing program 4 (id=225): r0 = socket(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000080)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000040101"], 0x18}}, 0x0) connect$vsock_stream(r0, 0x0, 0x0) 2m14.10163307s ago: executing program 4 (id=226): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x488}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x3af4701e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r4, 0xc008ae91, &(0x7f0000000240)) r5 = open(&(0x7f0000000040)='./file0\x00', 0x80400, 0x1b0) mlockall(0x1) io_uring_setup(0x3eaa, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xffffff7d, 0x13a, 0x0, r5}) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FICLONE(r1, 0x40049409, r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 2m13.708790597s ago: executing program 4 (id=227): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180), &(0x7f00000001c0)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) getpeername(r2, &(0x7f0000001100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000001180)=0x80) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setitimer(0x0, 0x0, 0x0) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="05"], 0x9) sendto$inet6(r4, &(0x7f0000000100)="ea", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x5}, 0x8) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{}, {0x7c}, {0x6}]}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) write$binfmt_script(r3, &(0x7f00000004c0)={'#! ', './file0'}, 0x1f7000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x34}}, 0x40020) 2m11.401653407s ago: executing program 4 (id=247): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cgroups\x00', 0x0, 0x0) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000001800)=[{{&(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1c0000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="140000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="180000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100026f"], 0x78, 0x4}}], 0x1, 0x0) 2m11.378669996s ago: executing program 34 (id=247): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cgroups\x00', 0x0, 0x0) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000001800)=[{{&(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1c0000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="140000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="180000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100026f"], 0x78, 0x4}}], 0x1, 0x0) 1.718511489s ago: executing program 2 (id=1576): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000340)=ANY=[@ANYBLOB="5c0000000000000010000040"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x75, &(0x7f0000000100)=[@cstype3={0x5, 0xa}], 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) rt_sigaction(0x19, &(0x7f0000000400)={&(0x7f0000000000)="676466f087bc76ded361b62e26c07fff00c4a3a1cea37b07f38af90000d3a41039000000f344aa643e3ef08504dc8319b4fe00c4011d1da1956ce08f080895dd638f4818ee16e6c442e13ae4470f69a342cb0000", 0x1c000000, 0x0}, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$dri(&(0x7f0000001200), 0x3, 0x240) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc010643a, &(0x7f0000001240)={0x1, 0xdf9a, 0x735fdf89}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r7 = openat(r6, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) lseek(r7, 0x200000fe, 0x0) getdents64(r7, 0xfffffffffffffffe, 0x29) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000010c0)={0x2710, 0x2, 0x6800, 0x1000, &(0x7f0000ffa000/0x1000)=nil}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r8, 0x0, 0x80000000000008, &(0x7f0000000180)="0f", 0x1) getsockopt$inet_opts(r8, 0x0, 0x9, 0x0, &(0x7f0000000080)) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f00000001c0)={0x0, 0x1, &(0x7f0000000340)=[r10], &(0x7f0000000280)=[0x80001], &(0x7f0000000200), 0x0}) dup(r3) socket$kcm(0x29, 0x5, 0x0) 529.900581ms ago: executing program 5 (id=1580): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x4001}, 0x10) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x2, {0x60, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x44084) r5 = memfd_create(&(0x7f0000000280)='%\x00', 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000f, 0x4002012, r5, 0x0) r6 = io_uring_setup(0x3eae, &(0x7f0000000080)) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200002, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xaf) write$binfmt_misc(r0, &(0x7f0000000300)="ab58992135528e68c2191b58edf1ad01d04dea1ca85a169afb3f9b02bb7fc8bb7212cde351a15bb74b530a32d6bd1484525777cc0f9c7dd3e2ff37ce06da4ec3b78ddcfe83268aacac42447155e49b1dbe49291735f73af011c1bd69427d39f56b701a419844599fc55f30f9845df757d0017a9ebbe185ab2b6c73b6f45e7ff2feeed535aa335e6d9e702aecd64d23708c2cd8379055578dd3e965aef4e05181c485d629b292285bc7ce522454a868724474f0d791a89060144d1b3530f8e5e11ecd8838e6e3ca923bd638b9512824c28c514c02da4d7dff35396ab788fdb94c1a36388a4e1b6c", 0xe7) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r10}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r9}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x0) sendmsg$OSF_MSG_REMOVE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x14, 0x1, 0x5, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}}, 0x4000004) 429.498045ms ago: executing program 5 (id=1584): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x4dc, 0x0, 0x268, 0x268, 0x0, 0xc8, 0x414, 0x414, 0x414, 0x414, 0x414, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa4, 0xc8, 0x0, {0x7a00000000000000}}, @HL={0x24, 'HL\x00', 0x0, {0x0, 0x2}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [0x0, 0x0, 0xffffff00, 0xffffff00], [], 'syzkaller0\x00', 'team_slave_1\x00', {}, {}, 0x3c}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x4}, {0x0, 0xfe}, 0x1ff, 0x1c000000}}}, {{@ipv6={@mcast1, @remote, [0x0, 0x0, 0xffffff00], [], '\x00', 'dummy0\x00'}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xa4, 0xe4}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x538) 428.966012ms ago: executing program 2 (id=1585): syz_emit_ethernet(0x2ea, &(0x7f0000000780)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x2b4, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {}]}}}}}}, 0x0) 428.615111ms ago: executing program 5 (id=1587): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={0x0}) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000100003000000000080fe000000000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a8014000700fc"], 0x58}, 0x1, 0x2}, 0x0) 428.315275ms ago: executing program 2 (id=1588): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cgroups\x00', 0x0, 0x0) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000001800)=[{{&(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1c0000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="140000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="18803e000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100026f"], 0x78, 0x4}}], 0x1, 0x0) 426.673228ms ago: executing program 6 (id=1589): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x40000000015, 0x5, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioprio_set$uid(0x3, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x40a0ae49, &(0x7f0000000000)={0x4, 0x0, 0x0, 0xffffffffffffffff, 0x100000}) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x3) shutdown(r1, 0x2) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 370.384718ms ago: executing program 5 (id=1590): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x3, 0x40000000, 0x2, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="880000000000000000000000000100000000000f38bb23dd23f44100000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff010000001d00000000000000000065727370616e3000000000000000000062726964676530000000000000000000b43b24af61af8e2f000000000000000065716c00000000000000000000000000ffffffffffff000000000000aaaaaaaaaa000000000000000000a000000010010000380100006d61726b5f6d00000000000000000000000000000000000000000000000000000c0000000400000001000000000100006e666c6f670000000000000000000000000000000000000000000000000000004c0000006d8000000900090000000000b80eba8ec4468a0538ee0eed5dd9119d918668afa6c019b085be3837595dc113ccf27499f7202a2b59394b2619bcf57ec99b9abb99943198532b0b7bdd0f61e5726564697265637400000000000000000000000000000000000000000000000004000000fdffffff"]}, 0x218) 370.274573ms ago: executing program 2 (id=1591): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000010a0104000000000000000a070000000900010073797a30000000004c000000090a01040000000000000000070000ff07000040000000000900020073797a310000001e0900010073797a3000000000080005400000000c08000640ffffff258da43540000000084c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c00028008000180fffffffd14000000300001ab"], 0xe0}}, 0x0) 369.931518ms ago: executing program 5 (id=1592): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000100005041000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800200010065727370616e0000100002805af607e945bba60014000000000004001200"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x400a080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f00000191c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "3beebc9333f6d1afec1e269e3647e30c"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_PMKID={0x14, 0x55, "0600"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x7ee5e931d21cacdb}, 0xe010) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r4) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x58, r7, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_FAMILY={0x5, 0xd, 0x1f}, @GTPA_MS_ADDR6={0x14, 0xc, @remote}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_MS_ADDR6={0x14, 0xc, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008040}, 0x800) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES16=r5, @ANYBLOB="010024bd7000fcdbdf252100000008000300", @ANYRES32=r6, @ANYBLOB="08009e"], 0x30}, 0x1, 0x0, 0x0, 0x24014804}, 0x9590f6cc3aa711f2) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/sockcreate\x00') r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r10) sendmsg$IEEE802154_ADD_IFACE(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}}, 0x0) openat(r8, &(0x7f0000000100)='./file0\x00', 0x101101, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000100005041000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800200010065727370616e0000100002805af607e945bba60014000000000004001200"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x400a080) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f00000191c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "3beebc9333f6d1afec1e269e3647e30c"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_PMKID={0x14, 0x55, "0600"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x7ee5e931d21cacdb}, 0xe010) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r4) (async) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x58, r7, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_FAMILY={0x5, 0xd, 0x1f}, @GTPA_MS_ADDR6={0x14, 0xc, @remote}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_MS_ADDR6={0x14, 0xc, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008040}, 0x800) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES16=r5, @ANYBLOB="010024bd7000fcdbdf252100000008000300", @ANYRES32=r6, @ANYBLOB="08009e"], 0x30}, 0x1, 0x0, 0x0, 0x24014804}, 0x9590f6cc3aa711f2) (async) syz_open_procfs(0x0, &(0x7f0000000000)='attr/sockcreate\x00') (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r10) (async) sendmsg$IEEE802154_ADD_IFACE(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}}, 0x0) (async) openat(r8, &(0x7f0000000100)='./file0\x00', 0x101101, 0x80) (async) 369.857068ms ago: executing program 2 (id=1593): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001700)=@raw={'raw\x00', 0x8, 0x3, 0x2b8, 0x0, 0xa, 0x148, 0x16c, 0x10, 0x224, 0x2a8, 0x2a8, 0x224, 0x2a8, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x38}, @empty, 0xff, 0xffffffff, 'veth0_macvtap\x00', 'pim6reg1\x00', {}, {0xff}, 0x88, 0x3, 0x7b}, 0x0, 0x104, 0x16c, 0x0, {0x20000000}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0xa802, 0x0, 0x9, 0x0, 0x689, 0xfffffffd, 0x6}}}, @common=@unspec=@limit={{0x3c}, {0x55e5, 0x1, 0x6}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xc83fa171e3d30524, 0x9, 0xcebf, 0x6, 'syz0\x00', 'syz0\x00', {0x8}}}}, {{@ip={@multicast1, @multicast1, 0xff, 0xffffffff, 'veth0_to_team\x00', 'team0\x00', {}, {}, 0x107, 0x0, 0xc}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x9, 0x7, 0x5, '\x00', {0xff}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x314) 310.036295ms ago: executing program 5 (id=1594): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000180)=0x67e, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x143001) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x231, 0x0, 0x0, &(0x7f00000001c0)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, 0x0, &(0x7f0000000040)) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018130000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0xc0, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0x0, 0x84}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS={0x8}]}}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0x5}}]}}, @filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x6}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x1}, @TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e22}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0x6}, @TCA_FLOWER_KEY_MPLS_OPTS={0x28, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x4}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0xffff9}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x3}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0xc0}}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 309.657089ms ago: executing program 2 (id=1595): bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r4, 0xab00, r3) ioctl$NBD_DO_IT(r2, 0xab03) close_range(r1, r1, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 309.495176ms ago: executing program 6 (id=1596): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000fff50000010000000900010073797a300000000048000000030a01010000000000000000010000040900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000002080002"], 0xa4}}, 0x0) 249.628063ms ago: executing program 6 (id=1599): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x8}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0xf2f1}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x8bd7}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5dc, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x22}}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0) 249.492832ms ago: executing program 6 (id=1600): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01030000000000000002010000000900010073797a3000000000080002400000000428000000000a010400000000000000000100000008000240000000060900010073797a30"], 0x78}}, 0x0) 249.43982ms ago: executing program 1 (id=1601): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001800010927bd70000000000002180000ff00f9080000000008000100ac1414"], 0x24}}, 0xa000000) 190.497309ms ago: executing program 6 (id=1602): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x100000004, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0xa00, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x5412, &(0x7f00000001c0)=0x11) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="d00571d810df3bbe9268221b3a1ec4d177f06f49cdee96a1715771b37e35d9471afe3bec8f1855eefd49589e711c285047826e99bbbd8592f3903520cd6af8274bf0a0b5c5767470e7dc504c32742027a4962883e33e81a71c4699b7a333ae5f7397e9046a81a493c3eea0e021f9673b66c949c4c0c8dc37301cdc74bcf80d08a6d00dc87913049526204010a9ae01a1c639ea62b0a32a74189cc82744c18be05c", @ANYRES16=r4, @ANYBLOB="090200000000000000000f000000050030000000000008000300", @ANYRES32, @ANYRES64=r1], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x54, 0x10, 0x401, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0xf0ff}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}}, 0x0) 190.079865ms ago: executing program 1 (id=1603): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x4048841) prlimit64(0x0, 0xe, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) bind$inet6(r0, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e22, r1, 0x41424344, 0x0, 0x2, 0xe, 0x2, 0x200, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x0, 0xf989, "4c9fee7913d8"}, @generic={0x0, 0x0, "656c5bad"}, @mptcp=@ack={0x1e, 0x0, 0x8, 0x4, "0bbc1049f384a5"}]}}}}}}}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) 138.870881ms ago: executing program 1 (id=1604): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a1180015000600140000000012080004004300001fa80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) vmsplice(r1, 0x0, 0x0, 0x6) 138.727375ms ago: executing program 1 (id=1605): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86ddfd0010000000400bb80060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0xffe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}}, 0x0) 334.815µs ago: executing program 6 (id=1606): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r1 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000001e40)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000001000)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000300)='\x006\"\x00\x00\x00Q') 181.554µs ago: executing program 1 (id=1607): syz_emit_ethernet(0x31c, &(0x7f0000000780)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x2e6, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0x6, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26"}]}}}}}}, 0x0) 0s ago: executing program 1 (id=1608): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000000)={0x14, r1, 0xcf71bbd0b26e1e43, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) kernel console output (not intermixed with test programs): nt [ 119.918919][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.920566][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.922460][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.924122][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.925767][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.927458][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.929083][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.930701][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.932353][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.933958][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.935541][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.937198][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.938974][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.940562][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.942157][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.943764][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.945350][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.946972][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.948587][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.950166][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.951742][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.953316][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.954957][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.956618][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.958323][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.959980][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.961618][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.963258][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.964900][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.966595][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.968164][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.969722][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.971342][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.972985][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.974622][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.976320][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.977987][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.979643][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.981288][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.982925][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.984575][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.986266][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.987930][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.989573][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.991323][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.992979][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.994580][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.996206][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 119.997390][ T5992] usb 6-1: Using ep0 maxpacket: 32 [ 120.000820][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 120.001338][ T5992] usb 6-1: config 0 has no interfaces? [ 120.002459][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 120.003715][ T5992] usb 6-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00 [ 120.005316][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 120.009130][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 120.009458][ T5992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.010769][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 120.014392][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 120.016059][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 120.016135][ T5992] usb 6-1: config 0 descriptor?? [ 120.017769][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 120.020702][ C2] cdc_wdm 11-1:1.0: Stall on int endpoint [ 120.022198][ C2] cdc_wdm 11-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 120.025224][ T1016] usb 11-1: USB disconnect, device number 10 [ 120.242225][ T56] usb 6-1: USB disconnect, device number 10 [ 120.462305][ T8190] 9pnet_fd: Insufficient options for proto=fd [ 121.056848][ C3] net_ratelimit: 6 callbacks suppressed [ 121.056883][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 121.217477][ T8213] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 121.218099][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 121.220757][ T8213] batman_adv: batadv0: Adding interface: gretap1 [ 121.223573][ T8213] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.230232][ T8213] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 121.397842][ T8215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.619'. [ 121.706821][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 121.769285][ T8217] netlink: 28 bytes leftover after parsing attributes in process `syz.5.620'. [ 122.071832][ T8238] FAULT_INJECTION: forcing a failure. [ 122.071832][ T8238] name failslab, interval 1, probability 0, space 0, times 0 [ 122.075212][ T8238] CPU: 3 UID: 0 PID: 8238 Comm: syz.2.631 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 122.077963][ T8238] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 122.080802][ T8238] Call Trace: [ 122.081654][ T8238] [ 122.082397][ T8238] dump_stack_lvl+0x16c/0x1f0 [ 122.083608][ T8238] should_fail_ex+0x497/0x5b0 [ 122.085089][ T8238] ? fs_reclaim_acquire+0xae/0x150 [ 122.086704][ T8238] should_failslab+0xc2/0x120 [ 122.088233][ T8238] __kmalloc_noprof+0xce/0x4f0 [ 122.089776][ T8238] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 122.091545][ T8238] ? tomoyo_realpath_from_path+0xbf/0x710 [ 122.093331][ T8238] tomoyo_realpath_from_path+0xbf/0x710 [ 122.095039][ T8238] ? tomoyo_path_number_perm+0x235/0x5b0 [ 122.096801][ T8238] tomoyo_path_number_perm+0x248/0x5b0 [ 122.098607][ T8238] ? tomoyo_path_number_perm+0x235/0x5b0 [ 122.100352][ T8238] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 122.102269][ T8238] ? __pfx_lock_release+0x10/0x10 [ 122.103893][ T8238] ? trace_lock_acquire+0x14e/0x1f0 [ 122.105595][ T8238] ? lock_acquire+0x2f/0xb0 [ 122.107040][ T8238] ? __fget_files+0x40/0x3a0 [ 122.108540][ T8238] ? __fget_files+0x206/0x3a0 [ 122.110051][ T8238] security_file_ioctl_compat+0x9b/0x240 [ 122.111829][ T8238] __do_compat_sys_ioctl+0x4e/0x2c0 [ 122.113483][ T8238] __do_fast_syscall_32+0x73/0x120 [ 122.115112][ T8238] do_fast_syscall_32+0x32/0x80 [ 122.116452][ T8238] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 122.118013][ T8238] RIP: 0023:0xf714e579 [ 122.119041][ T8238] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 122.124368][ T8238] RSP: 002b:00000000f514055c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 122.126796][ T8238] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000800448d4 [ 122.129281][ T8238] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 122.131726][ T8238] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 122.134421][ T8238] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 122.137212][ T8238] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 122.139648][ T8238] [ 122.140878][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 122.155757][ T8238] ERROR: Out of memory at tomoyo_realpath_from_path. [ 122.200874][ T8243] netlink: 12 bytes leftover after parsing attributes in process `syz.6.629'. [ 122.256853][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 122.265624][ T8247] netlink: 'syz.1.634': attribute type 1 has an invalid length. [ 122.339992][ T8254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.637'. [ 122.483315][ T8265] netlink: 288 bytes leftover after parsing attributes in process `syz.2.642'. [ 122.736802][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 122.955275][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.5.650'. [ 122.992755][ T8301] SET target dimension over the limit! [ 123.226872][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 123.297057][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 123.483295][ T8346] veth0_to_team: entered promiscuous mode [ 123.485542][ T8346] veth0_to_team: entered allmulticast mode [ 123.680780][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.668'. [ 123.777182][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 123.894119][ T8340] orangefs_mount: mount request failed with -4 [ 124.193574][ T8365] vlan3: entered promiscuous mode [ 124.195171][ T8365] bond0: entered promiscuous mode [ 124.197244][ T8365] bond_slave_0: entered promiscuous mode [ 124.199319][ T8365] bond_slave_1: entered promiscuous mode [ 124.202578][ T8365] bond0: left promiscuous mode [ 124.203837][ T8365] bond_slave_0: left promiscuous mode [ 124.205295][ T8365] bond_slave_1: left promiscuous mode [ 124.256856][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 124.301987][ T8366] netlink: 16 bytes leftover after parsing attributes in process `syz.2.671'. [ 124.670367][ T8375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.677'. [ 125.166040][ T8406] cgroup: No subsys list or none specified [ 125.227404][ T8398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.686'. [ 126.346837][ C3] net_ratelimit: 5 callbacks suppressed [ 126.346848][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 126.427146][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 126.870738][ T8467] gfs2: gfs2 mount does not exist [ 126.896807][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 126.971661][ T8471] input: syz0 as /devices/virtual/input/input12 [ 127.386394][ T8478] netlink: 220 bytes leftover after parsing attributes in process `syz.5.714'. [ 127.386914][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 127.457089][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 127.702715][ T8472] orangefs_mount: mount request failed with -4 [ 127.804986][ T8507] capability: warning: `syz.5.720' uses 32-bit capabilities (legacy support in use) [ 127.946815][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 127.995864][ T8510] netlink: 4 bytes leftover after parsing attributes in process `syz.6.724'. [ 128.040720][ T8512] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.247618][ T8517] FAULT_INJECTION: forcing a failure. [ 128.247618][ T8517] name failslab, interval 1, probability 0, space 0, times 0 [ 128.250778][ T8517] CPU: 0 UID: 0 PID: 8517 Comm: syz.2.727 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 128.253468][ T8517] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 128.256952][ T8517] Call Trace: [ 128.258106][ T8517] [ 128.258990][ T8517] dump_stack_lvl+0x16c/0x1f0 [ 128.260617][ T8517] should_fail_ex+0x497/0x5b0 [ 128.261994][ T8517] ? fs_reclaim_acquire+0xae/0x150 [ 128.263732][ T8517] should_failslab+0xc2/0x120 [ 128.264914][ T8517] __kmalloc_noprof+0xce/0x4f0 [ 128.266425][ T8517] ? tomoyo_encode2+0x100/0x3e0 [ 128.267967][ T8517] tomoyo_encode2+0x100/0x3e0 [ 128.269190][ T8517] tomoyo_realpath_from_path+0x1a7/0x710 [ 128.270640][ T8517] ? tomoyo_path_number_perm+0x235/0x5b0 [ 128.272116][ T8517] tomoyo_path_number_perm+0x248/0x5b0 [ 128.273529][ T8517] ? tomoyo_path_number_perm+0x235/0x5b0 [ 128.274998][ T8517] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 128.276644][ T8517] ? __pfx_lock_release+0x10/0x10 [ 128.277902][ T8517] ? trace_lock_acquire+0x14e/0x1f0 [ 128.279223][ T8517] ? lock_acquire+0x2f/0xb0 [ 128.280407][ T8517] ? __fget_files+0x40/0x3a0 [ 128.281580][ T8517] ? __fget_files+0x206/0x3a0 [ 128.282910][ T8517] security_file_ioctl_compat+0x9b/0x240 [ 128.284388][ T8517] __do_compat_sys_ioctl+0x4e/0x2c0 [ 128.285755][ T8517] __do_fast_syscall_32+0x73/0x120 [ 128.287077][ T8517] do_fast_syscall_32+0x32/0x80 [ 128.288321][ T8517] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 128.289928][ T8517] RIP: 0023:0xf714e579 [ 128.290985][ T8517] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 128.295799][ T8517] RSP: 002b:00000000f514055c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 128.297864][ T8517] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000800448d4 [ 128.299861][ T8517] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 128.301855][ T8517] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 128.303881][ T8517] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 128.305872][ T8517] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 128.307907][ T8517] [ 128.308807][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.316317][ T8517] ERROR: Out of memory at tomoyo_realpath_from_path. [ 128.416980][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 128.496893][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 128.976843][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 129.091519][ T8550] netlink: 'syz.6.737': attribute type 10 has an invalid length. [ 129.108156][ T8550] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 129.231226][ T8524] orangefs_mount: mount request failed with -4 [ 129.311996][ T8539] orangefs_mount: mount request failed with -4 [ 129.325988][ T8554] autofs: Bad value for 'uid' [ 129.327448][ T8554] autofs: Bad value for 'uid' [ 129.388068][ T39] kauditd_printk_skb: 77 callbacks suppressed [ 129.388078][ T39] audit: type=1326 audit(1734423514.899:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8559 comm="syz.2.741" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf714e579 code=0x0 [ 129.438075][ T39] audit: type=1326 audit(1734423514.949:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8559 comm="syz.2.741" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf714e579 code=0x0 [ 129.866457][ T8547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.730903][ T8578] orangefs_mount: mount request failed with -4 [ 131.511282][ T8607] net_ratelimit: 6 callbacks suppressed [ 131.511288][ T8607] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 131.536903][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 131.549589][ T8608] hub 2-0:1.0: USB hub found [ 131.551319][ T8608] hub 2-0:1.0: 2 ports detected [ 131.616820][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 132.097557][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 132.099704][ T1411] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.102016][ T1411] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.576884][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 132.657051][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 132.674472][ T8645] netlink: 8 bytes leftover after parsing attributes in process `syz.5.772'. [ 132.796825][ T5996] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 133.136824][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 133.168079][ T5996] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.170932][ T5996] usb 11-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 133.173315][ T5996] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.192745][ T5996] usb 11-1: config 0 descriptor?? [ 133.403625][ T8640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.407196][ T8640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.417231][ T5996] usbhid 11-1:0.0: can't add hid device: -71 [ 133.425548][ T5996] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 133.441174][ T5996] usb 11-1: USB disconnect, device number 11 [ 133.527212][ T1016] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 133.616937][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 133.629918][ T8649] orangefs_mount: mount request failed with -4 [ 133.689149][ T1016] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 133.691419][ T1016] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 133.694019][ T1016] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 133.696360][ T1016] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 133.700275][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 133.702703][ T1016] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 133.706656][ T1016] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 133.709473][ T1016] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 133.711560][ T1016] usb 6-1: Product: syz [ 133.713158][ T1016] usb 6-1: Manufacturer: syz [ 133.716272][ T1016] cdc_wdm 6-1:1.0: skipping garbage [ 133.718499][ T1016] cdc_wdm 6-1:1.0: skipping garbage [ 133.721173][ T1016] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 133.723086][ T1016] cdc_wdm 6-1:1.0: Unknown control protocol [ 133.928907][ T30] usb 6-1: USB disconnect, device number 11 [ 133.948891][ T8663] netlink: 36 bytes leftover after parsing attributes in process `syz.5.779'. [ 133.971425][ T5996] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 134.136993][ T5996] usb 11-1: Using ep0 maxpacket: 16 [ 134.142441][ T5996] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 134.144808][ T5996] usb 11-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 134.147470][ T5996] usb 11-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 134.149959][ T5996] usb 11-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 8 [ 134.152554][ T5996] usb 11-1: config 1 interface 0 has no altsetting 0 [ 134.154285][ T5996] usb 11-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 134.156673][ T5996] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.168366][ T5996] ums-sddr09 11-1:1.0: USB Mass Storage device detected [ 134.186904][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 134.370719][ T5996] scsi host6: usb-storage 11-1:1.0 [ 134.666872][ T5993] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 134.806709][ T8672] orangefs_mount: mount request failed with -4 [ 134.867331][ T5993] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 134.870432][ T5993] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 134.873999][ T5993] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 134.877416][ T5993] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 134.880820][ T5993] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 134.884126][ T8684] veth1_macvtap: left promiscuous mode [ 134.884962][ T5993] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 134.888057][ T5993] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 134.890125][ T5993] usb 6-1: Product: syz [ 134.891222][ T5993] usb 6-1: Manufacturer: syz [ 134.894758][ T5993] cdc_wdm 6-1:1.0: skipping garbage [ 134.896236][ T5993] cdc_wdm 6-1:1.0: skipping garbage [ 134.898556][ T5993] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 134.900137][ T5993] cdc_wdm 6-1:1.0: Unknown control protocol [ 134.930084][ T8688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.783'. [ 135.389352][ T1135] scsi 6:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 135.403066][ T1135] sd 6:0:0:0: Attached scsi generic sg2 type 0 [ 135.404531][ T8677] sddr09: could not read card info [ 135.538330][ T8677] usb 11-1: reset high-speed USB device number 12 using dummy_hcd [ 135.747290][ T8706] FAULT_INJECTION: forcing a failure. [ 135.747290][ T8706] name failslab, interval 1, probability 0, space 0, times 0 [ 135.750722][ T8706] CPU: 2 UID: 0 PID: 8706 Comm: syz.2.789 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 135.753429][ T8706] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 135.756224][ T8706] Call Trace: [ 135.757125][ T8706] [ 135.757916][ T8706] dump_stack_lvl+0x16c/0x1f0 [ 135.759173][ T8706] should_fail_ex+0x497/0x5b0 [ 135.760425][ T8706] should_failslab+0xc2/0x120 [ 135.761674][ T8706] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 135.763217][ T8706] ? __alloc_skb+0x2b3/0x380 [ 135.764445][ T8706] __alloc_skb+0x2b3/0x380 [ 135.765662][ T8706] ? __pfx___alloc_skb+0x10/0x10 [ 135.766966][ T8706] ? ida_alloc_range+0x5bb/0x820 [ 135.768318][ T8706] ? apparmor_sk_clone_security+0x370/0x3d0 [ 135.769890][ T8706] ? __pfx_ida_alloc_range+0x10/0x10 [ 135.771297][ T8706] create_monitor_ctrl_open+0x17a/0x7f0 [ 135.772755][ T8706] ? __pfx_create_monitor_ctrl_open+0x10/0x10 [ 135.774357][ T8706] ? kvm_vcpu_write_tsc_offset.cold+0x8/0x2a [ 135.775979][ T8706] ? security_capable+0x7e/0x260 [ 135.777297][ T8706] hci_sock_ioctl+0x42c/0x820 [ 135.778550][ T8706] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 135.779937][ T8706] hci_sock_compat_ioctl+0x68/0x80 [ 135.781289][ T8706] compat_sock_ioctl+0x17b/0x7e0 [ 135.782576][ T8706] ? __pfx_hci_sock_compat_ioctl+0x10/0x10 [ 135.784107][ T8706] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 135.785541][ T8706] ? __fget_files+0x206/0x3a0 [ 135.786780][ T8706] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 135.788213][ T8706] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 135.789604][ T8706] __do_fast_syscall_32+0x73/0x120 [ 135.790943][ T8706] do_fast_syscall_32+0x32/0x80 [ 135.792233][ T8706] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 135.793887][ T8706] RIP: 0023:0xf714e579 [ 135.794967][ T8706] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 135.799989][ T8706] RSP: 002b:00000000f514055c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 135.802159][ T8706] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000800448d4 [ 135.804242][ T8706] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 135.806333][ T8706] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 135.808403][ T8706] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 135.810463][ T8706] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 135.812542][ T8706] [ 136.131460][ T39] audit: type=1326 audit(1734423521.639:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8708 comm="syz.2.790" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf714e579 code=0x7ffc0000 [ 136.137160][ T39] audit: type=1326 audit(1734423521.639:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8708 comm="syz.2.790" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf714e579 code=0x7ffc0000 [ 136.142830][ T39] audit: type=1326 audit(1734423521.639:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8708 comm="syz.2.790" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf714e579 code=0x7ffc0000 [ 136.148275][ T39] audit: type=1326 audit(1734423521.639:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8708 comm="syz.2.790" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf714e579 code=0x7ffc0000 [ 136.153852][ T39] audit: type=1326 audit(1734423521.639:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8708 comm="syz.2.790" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf714e579 code=0x7ffc0000 [ 136.159611][ T39] audit: type=1326 audit(1734423521.639:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8708 comm="syz.2.790" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf714e579 code=0x7ffc0000 [ 136.165311][ T39] audit: type=1326 audit(1734423521.649:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8708 comm="syz.2.790" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf714e579 code=0x7ffc0000 [ 136.171274][ T39] audit: type=1326 audit(1734423521.649:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8708 comm="syz.2.790" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf714e579 code=0x7ffc0000 [ 136.176972][ T39] audit: type=1326 audit(1734423521.649:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8708 comm="syz.2.790" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf714e579 code=0x7ffc0000 [ 136.182574][ T39] audit: type=1326 audit(1734423521.649:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8708 comm="syz.2.790" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf714e579 code=0x7ffc0000 [ 136.367551][ T1016] usb 11-1: USB disconnect, device number 12 [ 136.407019][ T92] sd 6:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 136.408913][ T92] sd 6:0:0:0: [sdb] 0-byte physical blocks [ 136.410535][ T92] sd 6:0:0:0: [sdb] Write Protect is off [ 136.412118][ T92] sd 6:0:0:0: [sdb] Asking for cache data failed [ 136.413784][ T92] sd 6:0:0:0: [sdb] Assuming drive cache: write through [ 136.421966][ T92] sd 6:0:0:0: [sdb] Attached SCSI removable disk [ 136.479022][ T25] usb 6-1: USB disconnect, device number 12 [ 136.736865][ C3] net_ratelimit: 7 callbacks suppressed [ 136.736877][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 136.759371][ T8708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.816947][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 137.043485][ T7563] udevd[7563]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 137.073920][ T6198] udevd[6198]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 137.198509][ T8717] orangefs_mount: mount request failed with -4 [ 137.296846][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 137.473401][ T8749] tipc: Started in network mode [ 137.474732][ T8749] tipc: Node identity ac1414aa, cluster identity 4711 [ 137.476651][ T8749] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 137.480147][ T8749] tipc: Enabled bearer , priority 10 [ 137.537040][ T56] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 137.608511][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.6.810'. [ 137.616829][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 137.703613][ T56] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.709881][ T56] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 137.715401][ T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.720895][ T56] usb 7-1: config 0 descriptor?? [ 137.756797][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 137.776819][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 137.857125][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 137.906810][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 137.939785][ T8728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.942084][ T8728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.056818][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 138.073445][ T56] usbhid 7-1:0.0: can't add hid device: -71 [ 138.075763][ T56] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 138.078901][ T56] usb 7-1: USB disconnect, device number 12 [ 138.093107][ T8791] FAULT_INJECTION: forcing a failure. [ 138.093107][ T8791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.097785][ T8791] CPU: 0 UID: 0 PID: 8791 Comm: syz.6.816 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 138.100564][ T8791] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 138.103386][ T8791] Call Trace: [ 138.104283][ T8791] [ 138.105078][ T8791] dump_stack_lvl+0x16c/0x1f0 [ 138.106341][ T8791] should_fail_ex+0x497/0x5b0 [ 138.107604][ T8791] _copy_from_user+0x2e/0xd0 [ 138.108834][ T8791] get_compat_msghdr+0xa8/0x170 [ 138.110127][ T8791] ? __pfx_get_compat_msghdr+0x10/0x10 [ 138.111618][ T8791] ___sys_sendmsg+0x1b0/0x1e0 [ 138.112890][ T8791] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.114268][ T8791] ? __pfx_lock_release+0x10/0x10 [ 138.115620][ T8791] ? trace_lock_acquire+0x14e/0x1f0 [ 138.117010][ T8791] ? __fget_files+0x206/0x3a0 [ 138.118683][ T8791] __sys_sendmsg+0x16e/0x220 [ 138.119950][ T8791] ? __pfx___sys_sendmsg+0x10/0x10 [ 138.121794][ T8791] __do_fast_syscall_32+0x73/0x120 [ 138.123531][ T8791] do_fast_syscall_32+0x32/0x80 [ 138.125192][ T8791] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 138.127344][ T8791] RIP: 0023:0xf7f80579 [ 138.128736][ T8791] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 138.135212][ T8791] RSP: 002b:00000000f50d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 138.137414][ T8791] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000440 [ 138.139503][ T8791] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 138.141567][ T8791] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 138.143735][ T8791] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 138.145819][ T8791] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 138.147914][ T8791] [ 138.251811][ T8772] orangefs_mount: mount request failed with -4 [ 138.457376][ T56] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 138.476982][ T5996] tipc: Node number set to 2886997162 [ 138.606816][ T56] usb 7-1: Using ep0 maxpacket: 16 [ 138.609796][ T56] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 138.612857][ T56] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 138.616138][ T56] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 138.619183][ T56] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 8 [ 138.621694][ T56] usb 7-1: config 1 interface 0 has no altsetting 0 [ 138.623419][ T56] usb 7-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 138.625775][ T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.629948][ T56] ums-sddr09 7-1:1.0: USB Mass Storage device detected [ 138.834616][ T56] scsi host6: usb-storage 7-1:1.0 [ 139.338997][ T8820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.823'. [ 139.859882][ T1135] scsi 6:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 139.873452][ T1135] sd 6:0:0:0: Attached scsi generic sg2 type 0 [ 139.876126][ T8817] sddr09: could not read card info [ 140.006904][ T8817] usb 7-1: reset high-speed USB device number 13 using dummy_hcd [ 140.077798][ T8728] raw-gadget.0 gadget.2: fail, usb_ep_queue returned -108 [ 141.137112][ T8817] usb 7-1: device descriptor read/64, error -32 [ 141.387839][ T8817] usb 7-1: reset high-speed USB device number 13 using dummy_hcd [ 141.390899][ T8817] usb 7-1: device reset changed ep0 maxpacket size! [ 141.393479][ T5993] usb 7-1: USB disconnect, device number 13 [ 141.429958][ T1225] sd 6:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 141.431922][ T1225] sd 6:0:0:0: [sdb] 0-byte physical blocks [ 141.433556][ T1225] sd 6:0:0:0: [sdb] Write Protect is off [ 141.435377][ T1225] sd 6:0:0:0: [sdb] Asking for cache data failed [ 141.439020][ T1225] sd 6:0:0:0: [sdb] Assuming drive cache: write through [ 141.453078][ T1225] sd 6:0:0:0: [sdb] Attached SCSI removable disk [ 141.766893][ T5993] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 141.936810][ C3] net_ratelimit: 17 callbacks suppressed [ 141.936823][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 141.946808][ T5993] usb 7-1: Using ep0 maxpacket: 8 [ 141.949972][ T5993] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 141.952618][ T5993] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 141.955225][ T5993] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 141.958103][ T5993] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.961513][ T5993] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 141.963918][ T5993] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.017059][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 142.188467][ T5993] usb 7-1: GET_CAPABILITIES returned 0 [ 142.193130][ T5993] usbtmc 7-1:16.0: can't read capabilities [ 142.229690][ T6159] udevd[6159]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 142.267660][ T8852] orangefs_mount: mount request failed with -4 [ 142.271579][ T6198] udevd[6198]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 142.422612][ T8877] hub 6-0:1.0: USB hub found [ 142.423964][ T8877] hub 6-0:1.0: 1 port detected [ 142.506856][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 142.540142][ T8887] macvlan0: entered allmulticast mode [ 142.541630][ T8887] veth1_vlan: entered allmulticast mode [ 142.576833][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 142.816866][ T5996] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 142.986992][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 142.988048][ T5996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.992164][ T5996] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 142.994567][ T5996] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.997642][ T5996] usb 6-1: config 0 descriptor?? [ 143.058168][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 143.203589][ T8890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.206108][ T8890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.209939][ T5996] usbhid 6-1:0.0: can't add hid device: -71 [ 143.211542][ T5996] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 143.217236][ T5996] usb 6-1: USB disconnect, device number 13 [ 143.536811][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 143.616854][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 143.624129][ T5992] usb 7-1: USB disconnect, device number 14 [ 143.667867][ T5996] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 143.816897][ T5996] usb 6-1: Using ep0 maxpacket: 16 [ 143.820897][ T5996] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 143.823435][ T5996] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 143.825961][ T5996] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 143.829194][ T5996] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 8 [ 143.831807][ T5996] usb 6-1: config 1 interface 0 has no altsetting 0 [ 143.833642][ T5996] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 143.836065][ T5996] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.840920][ T5996] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 143.999541][ T8898] orangefs_mount: mount request failed with -4 [ 144.016859][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 144.042364][ T5996] scsi host6: usb-storage 6-1:1.0 [ 144.096865][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 144.122191][ T5996] IPVS: starting estimator thread 0... [ 144.141499][ T8920] tipc: Started in network mode [ 144.143269][ T8920] tipc: Node identity ac1414aa, cluster identity 4711 [ 144.146041][ T8920] tipc: Enabled bearer , priority 10 [ 144.226871][ T8923] IPVS: using max 38 ests per chain, 91200 per kthread [ 144.336673][ T8936] netlink: 8 bytes leftover after parsing attributes in process `syz.5.860'. [ 144.916939][ T25] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 145.059491][ T1164] scsi 6:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 145.066922][ T25] usb 7-1: Using ep0 maxpacket: 16 [ 145.073719][ T25] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 145.073905][ T1164] sd 6:0:0:0: Attached scsi generic sg2 type 0 [ 145.075865][ T25] usb 7-1: config 0 has no interface number 0 [ 145.077016][ T8914] sddr09: could not read card info [ 145.082345][ T25] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 145.085264][ T25] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 145.090457][ T25] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 145.092921][ T25] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 145.095060][ T25] usb 7-1: Product: syz [ 145.096163][ T25] usb 7-1: SerialNumber: syz [ 145.098310][ T25] usb 7-1: config 0 descriptor?? [ 145.101346][ T25] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 145.103615][ T25] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.8/input/input13 [ 145.196930][ T8914] usb 6-1: reset high-speed USB device number 14 using dummy_hcd [ 145.256858][ T25] tipc: Node number set to 2886997162 [ 145.426896][ T8914] usb 6-1: device descriptor read/64, error -32 [ 145.524381][ T8969] netlink: 'syz.2.867': attribute type 5 has an invalid length. [ 145.928107][ T8966] orangefs_mount: mount request failed with -4 [ 146.335609][ T5996] usb 6-1: USB disconnect, device number 14 [ 146.366954][ T12] sd 6:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 146.368810][ T12] sd 6:0:0:0: [sdb] 0-byte physical blocks [ 146.371207][ T12] sd 6:0:0:0: [sdb] Write Protect is off [ 146.372749][ T12] sd 6:0:0:0: [sdb] Asking for cache data failed [ 146.374420][ T12] sd 6:0:0:0: [sdb] Assuming drive cache: write through [ 146.386573][ T12] sd 6:0:0:0: [sdb] Attached SCSI removable disk [ 146.409000][ T8973] orangefs_mount: mount request failed with -4 [ 146.722779][ T7563] udevd[7563]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 146.750409][ T6198] udevd[6198]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 146.961984][ T9068] bond_slave_0: entered promiscuous mode [ 146.963934][ T9068] bond_slave_1: entered promiscuous mode [ 146.965474][ T9068] batadv0: entered promiscuous mode [ 146.967025][ T9068] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 146.970500][ T9068] macvlan2: entered promiscuous mode [ 146.972028][ T9068] bond0: entered promiscuous mode [ 146.974291][ T9068] macvlan2: entered allmulticast mode [ 146.975723][ T9068] bond0: entered allmulticast mode [ 146.977319][ T9068] bond_slave_0: entered allmulticast mode [ 146.978949][ T9068] bond_slave_1: entered allmulticast mode [ 146.980477][ T9068] batadv0: entered allmulticast mode [ 146.982011][ T9068] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 146.985042][ T9068] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 146.987850][ T9068] bond0: left allmulticast mode [ 146.989149][ T9068] bond_slave_0: left allmulticast mode [ 146.990893][ T9068] bond_slave_1: left allmulticast mode [ 146.992806][ T9068] batadv0: left allmulticast mode [ 146.994567][ T9068] mac80211_hwsim hwsim17 wlan1: left allmulticast mode [ 146.997813][ T9068] bond0: left promiscuous mode [ 147.000453][ T9068] bond_slave_0: left promiscuous mode [ 147.002418][ T9068] bond_slave_1: left promiscuous mode [ 147.004125][ T9068] batadv0: left promiscuous mode [ 147.005558][ T9068] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 147.146809][ C3] net_ratelimit: 21 callbacks suppressed [ 147.146821][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 147.196860][ T5993] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 147.216928][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 147.296824][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 147.348762][ T5993] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.352249][ T5993] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 147.354781][ T5993] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.358288][ T5993] usb 6-1: config 0 descriptor?? [ 147.498364][ T9086] netlink: 72 bytes leftover after parsing attributes in process `syz.5.890'. [ 147.500856][ T9086] netlink: 24 bytes leftover after parsing attributes in process `syz.5.890'. [ 147.570532][ T9066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.572835][ T9066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.581176][ T5993] usbhid 6-1:0.0: can't add hid device: -71 [ 147.582843][ T5993] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 147.589820][ T5993] usb 6-1: USB disconnect, device number 15 [ 147.605072][ T9094] netlink: 'syz.5.894': attribute type 10 has an invalid length. [ 147.621582][ T9094] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 147.641273][ T9094] ptrace attach of "/syz-executor exec"[6768] was attempted by "/syz-executor exec"[9094] [ 147.664390][ C2] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 147.664574][ T57] usb 7-1: USB disconnect, device number 15 [ 147.666263][ C2] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 147.676033][ T57] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 147.696819][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 147.711290][ T9100] netlink: 52 bytes leftover after parsing attributes in process `syz.2.897'. [ 147.779008][ T39] kauditd_printk_skb: 4 callbacks suppressed [ 147.779019][ T39] audit: type=1326 audit(1734423533.289:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9105 comm="syz.2.899" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf714e579 code=0x0 [ 147.786833][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 148.176832][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 148.257058][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 148.317020][ T5993] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 148.336852][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 148.496891][ T5993] usb 6-1: Using ep0 maxpacket: 16 [ 148.499636][ T5993] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 148.502049][ T5993] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 148.504588][ T5993] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 148.507410][ T5993] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 8 [ 148.510247][ T5993] usb 6-1: config 1 interface 0 has no altsetting 0 [ 148.512043][ T5993] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 148.514442][ T5993] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.519222][ T5993] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 148.607681][ T9116] netlink: 8 bytes leftover after parsing attributes in process `syz.5.900'. [ 148.692576][ T9121] tipc: Enabling of bearer rejected, already enabled [ 148.745249][ T5993] scsi host6: usb-storage 6-1:1.0 [ 148.746826][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 148.816868][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 148.827569][ T9141] block nbd2: shutting down sockets [ 148.872700][ T9144] netlink: 'syz.5.902': attribute type 4 has an invalid length. [ 148.908875][ T9148] xt_hashlimit: Unknown mode mask 148, kernel too old? [ 149.595822][ T9158] lo speed is unknown, defaulting to 1000 [ 149.597816][ T9158] lo speed is unknown, defaulting to 1000 [ 149.600321][ T9158] lo speed is unknown, defaulting to 1000 [ 149.604221][ T9158] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 149.608449][ T9158] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 149.620150][ T9158] lo speed is unknown, defaulting to 1000 [ 149.623081][ T9158] lo speed is unknown, defaulting to 1000 [ 149.626279][ T9158] lo speed is unknown, defaulting to 1000 [ 149.628678][ T9158] lo speed is unknown, defaulting to 1000 [ 149.630652][ T9158] lo speed is unknown, defaulting to 1000 [ 149.632911][ T9158] lo speed is unknown, defaulting to 1000 [ 149.634930][ T9158] lo speed is unknown, defaulting to 1000 [ 149.806974][ T1135] scsi 6:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 149.863907][ T1135] sd 6:0:0:0: Attached scsi generic sg2 type 0 [ 149.873172][ T9136] sddr09: could not read card info [ 149.925786][ T9180] overlay: ./bus is not a directory [ 150.006979][ T9136] usb 6-1: reset high-speed USB device number 16 using dummy_hcd [ 150.465302][ T9200] netlink: 16 bytes leftover after parsing attributes in process `syz.6.926'. [ 150.527956][ T25] ip6_tnl_xmit_ctl: 8 callbacks suppressed [ 150.527973][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 150.586967][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 150.616945][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 150.686877][ T2286] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 150.756897][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 150.788749][ T63] usb 6-1: USB disconnect, device number 16 [ 150.807056][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 150.827159][ T12] sd 6:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 150.829037][ T12] sd 6:0:0:0: [sdb] 0-byte physical blocks [ 150.830628][ T12] sd 6:0:0:0: [sdb] Write Protect is off [ 150.832166][ T12] sd 6:0:0:0: [sdb] Asking for cache data failed [ 150.833831][ T12] sd 6:0:0:0: [sdb] Assuming drive cache: write through [ 150.841913][ T12] sd 6:0:0:0: [sdb] Attached SCSI removable disk [ 150.867584][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 150.936860][ T7611] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 150.987078][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 151.036864][ T5992] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 151.048632][ T39] audit: type=1326 audit(1734423536.549:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9204 comm="syz.2.927" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf714e579 code=0x7ffc0000 [ 151.049022][ T9205] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 151.054210][ T39] audit: type=1326 audit(1734423536.559:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9204 comm="syz.2.927" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf714e579 code=0x7ffc0000 [ 151.062538][ T39] audit: type=1326 audit(1734423536.559:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9204 comm="syz.2.927" exe="/syz-executor" sig=0 arch=40000003 syscall=13 compat=1 ip=0xf714e579 code=0x7ffc0000 [ 151.068731][ T39] audit: type=1326 audit(1734423536.559:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9204 comm="syz.2.927" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf714e579 code=0x7ffc0000 [ 151.074590][ T39] audit: type=1326 audit(1734423536.559:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9204 comm="syz.2.927" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf714e579 code=0x7ffc0000 [ 151.080869][ T39] audit: type=1326 audit(1734423536.559:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9204 comm="syz.2.927" exe="/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf714e579 code=0x7ffc0000 [ 151.086909][ T39] audit: type=1326 audit(1734423536.559:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9204 comm="syz.2.927" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf714e579 code=0x7ffc0000 [ 151.096828][ T39] audit: type=1326 audit(1734423536.559:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9204 comm="syz.2.927" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf714e579 code=0x7ffc0000 [ 151.102734][ T39] audit: type=1326 audit(1734423536.559:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9204 comm="syz.2.927" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf714e579 code=0x7ffc0000 [ 151.197789][ T7563] udevd[7563]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 151.208830][ T9219] bond_slave_0: entered promiscuous mode [ 151.210395][ T9219] bond_slave_1: entered promiscuous mode [ 151.222341][ T9219] macvlan2: entered promiscuous mode [ 151.223853][ T9219] bond0: entered promiscuous mode [ 151.225378][ T9219] macvlan2: entered allmulticast mode [ 151.232459][ T9219] bond0: entered allmulticast mode [ 151.233983][ T9219] bond_slave_0: entered allmulticast mode [ 151.235602][ T9219] bond_slave_1: entered allmulticast mode [ 151.247787][ T9219] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 151.252876][ T9219] bond0: left allmulticast mode [ 151.254194][ T9219] bond_slave_0: left allmulticast mode [ 151.255648][ T9219] bond_slave_1: left allmulticast mode [ 151.257332][ T9219] bond0: left promiscuous mode [ 151.258151][ T6198] udevd[6198]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 151.259705][ T9219] bond_slave_0: left promiscuous mode [ 151.263234][ T9219] bond_slave_1: left promiscuous mode [ 151.493485][ T9227] netlink: 'syz.2.933': attribute type 10 has an invalid length. [ 151.498704][ T9227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.502035][ T9227] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 151.507018][ T9227] netlink: 24 bytes leftover after parsing attributes in process `syz.2.933'. [ 151.556217][ T9230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.934'. [ 151.916951][ T63] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 152.066984][ T63] usb 7-1: Using ep0 maxpacket: 8 [ 152.070561][ T63] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 152.073519][ T63] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 152.077195][ T63] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 152.085351][ T63] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 152.088380][ T63] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.092006][ T63] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 152.094365][ T63] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.236294][ T9244] netlink: 220 bytes leftover after parsing attributes in process `syz.6.940'. [ 152.301495][ T63] usb 7-1: usb_control_msg returned -32 [ 152.303066][ T63] usbtmc 7-1:16.0: can't read capabilities [ 152.320512][ T9248] loop9: detected capacity change from 0 to 6 [ 152.322415][ T9248] Dev loop9: unable to read RDB block 6 [ 152.323922][ T9248] loop9: unable to read partition table [ 152.325489][ T9248] loop9: partition table beyond EOD, truncated [ 152.327755][ T9248] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 152.327755][ T9248] ) failed (rc=-5) [ 152.336860][ C3] net_ratelimit: 15 callbacks suppressed [ 152.336874][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 152.417068][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 152.496994][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 152.666326][ T9263] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 152.668989][ T5996] usb 7-1: USB disconnect, device number 16 [ 152.704565][ T9267] lo speed is unknown, defaulting to 1000 [ 152.874206][ T9279] Cannot find map_set index 28 as target [ 152.896829][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 152.902991][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.5.953'. [ 152.986838][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 153.163047][ T9255] orangefs_mount: mount request failed with -4 [ 153.348825][ T9293] siw: device registration error -23 [ 153.386809][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 153.441037][ T9300] tipc: Enabling of bearer rejected, already enabled [ 153.456858][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 153.536936][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 153.936848][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 153.958779][ T9334] netlink: 4 bytes leftover after parsing attributes in process `syz.5.969'. [ 154.026910][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 154.429193][ T9333] orangefs_mount: mount request failed with -4 [ 154.857880][ T9363] netlink: 48 bytes leftover after parsing attributes in process `syz.1.978'. [ 155.012293][ T9370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.980'. [ 155.455137][ T9379] FAULT_INJECTION: forcing a failure. [ 155.455137][ T9379] name failslab, interval 1, probability 0, space 0, times 0 [ 155.458918][ T9379] CPU: 3 UID: 0 PID: 9379 Comm: syz.2.984 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 155.462071][ T9379] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 155.465424][ T9379] Call Trace: [ 155.466500][ T9379] [ 155.467478][ T9379] dump_stack_lvl+0x16c/0x1f0 [ 155.468924][ T9379] should_fail_ex+0x497/0x5b0 [ 155.470209][ T9379] ? fs_reclaim_acquire+0xae/0x150 [ 155.471429][ T9379] should_failslab+0xc2/0x120 [ 155.472542][ T9379] __kmalloc_node_noprof+0xd1/0x520 [ 155.473735][ T9379] ? lock_acquire+0x2f/0xb0 [ 155.474819][ T9379] ? __might_fault+0xe3/0x190 [ 155.475922][ T9379] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 155.477014][ T9379] ? __might_fault+0xe3/0x190 [ 155.478259][ T9379] __kvmalloc_node_noprof+0xad/0x1a0 [ 155.479628][ T9379] xt_alloc_table_info+0x3e/0xa0 [ 155.480954][ T9379] compat_do_replace+0x20b/0x500 [ 155.482272][ T9379] ? __pfx_compat_do_replace+0x10/0x10 [ 155.483730][ T9379] ? aa_get_newest_label+0x376/0x680 [ 155.485587][ T9379] ? __pfx_aa_get_newest_label+0x10/0x10 [ 155.487655][ T9379] ? bpf_lsm_capable+0x9/0x10 [ 155.489345][ T9379] ? security_capable+0x7e/0x260 [ 155.491151][ T9379] do_ipt_set_ctl+0x686/0xc10 [ 155.492838][ T9379] ? __mutex_lock+0x1cc/0xa60 [ 155.494530][ T9379] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 155.496423][ T9379] ? __mutex_unlock_slowpath+0x164/0x690 [ 155.498372][ T9379] ? sockopt_release_sock+0x52/0x60 [ 155.500220][ T9379] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 155.502219][ T9379] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 155.503773][ T9379] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 155.505512][ T9379] nf_setsockopt+0x8a/0xf0 [ 155.507130][ T9379] ip_setsockopt+0xcb/0xf0 [ 155.508772][ T9379] udp_setsockopt+0x7d/0xd0 [ 155.510360][ T9379] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 155.512431][ T9379] do_sock_setsockopt+0x222/0x480 [ 155.514257][ T9379] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 155.516197][ T9379] ? lock_acquire+0x2f/0xb0 [ 155.517773][ T9379] __sys_setsockopt+0x1a0/0x230 [ 155.519498][ T9379] __ia32_sys_setsockopt+0xbc/0x160 [ 155.521334][ T9379] ? lockdep_hardirqs_on+0x7c/0x110 [ 155.523143][ T9379] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 155.525405][ T9379] __do_fast_syscall_32+0x73/0x120 [ 155.527215][ T9379] do_fast_syscall_32+0x32/0x80 [ 155.528938][ T9379] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 155.531147][ T9379] RIP: 0023:0xf714e579 [ 155.532533][ T9379] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 155.539126][ T9379] RSP: 002b:00000000f514055c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 155.541814][ T9379] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 155.544518][ T9379] RDX: 0000000000000040 RSI: 0000000020001700 RDI: 0000000000000314 [ 155.547154][ T9379] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 155.549280][ T9379] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 155.551489][ T9379] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 155.554242][ T9379] [ 155.803855][ T9393] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 155.807350][ T9393] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 155.809889][ T9393] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 155.866407][ T9402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.991'. [ 156.136939][ T7611] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 156.227362][ T9385] orangefs_mount: mount request failed with -4 [ 156.288159][ T7611] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 156.290750][ T7611] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 156.293474][ T7611] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 156.295885][ T7611] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 156.298987][ T7611] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 156.303102][ T7611] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 156.305617][ T7611] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 156.309333][ T7611] usb 6-1: Product: syz [ 156.310569][ T7611] usb 6-1: Manufacturer: syz [ 156.314522][ T7611] cdc_wdm 6-1:1.0: skipping garbage [ 156.316021][ T7611] cdc_wdm 6-1:1.0: skipping garbage [ 156.319068][ T7611] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 156.320794][ T7611] cdc_wdm 6-1:1.0: Unknown control protocol [ 156.516923][ T56] usb 6-1: USB disconnect, device number 17 [ 156.526490][ T39] kauditd_printk_skb: 55 callbacks suppressed [ 156.526501][ T39] audit: type=1326 audit(1734423542.029:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9412 comm="syz.6.995" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 156.531587][ T9413] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 156.542045][ T39] audit: type=1326 audit(1734423542.029:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9412 comm="syz.6.995" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 156.548423][ T39] audit: type=1326 audit(1734423542.039:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9412 comm="syz.6.995" exe="/syz-executor" sig=0 arch=40000003 syscall=13 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 156.554043][ T39] audit: type=1326 audit(1734423542.039:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9412 comm="syz.6.995" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 156.560500][ T39] audit: type=1326 audit(1734423542.039:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9412 comm="syz.6.995" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 156.566152][ T39] audit: type=1326 audit(1734423542.039:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9412 comm="syz.6.995" exe="/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 156.572567][ T39] audit: type=1326 audit(1734423542.039:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9412 comm="syz.6.995" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 156.578550][ T39] audit: type=1326 audit(1734423542.039:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9412 comm="syz.6.995" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 156.584696][ T39] audit: type=1326 audit(1734423542.039:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9412 comm="syz.6.995" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 156.591027][ T39] audit: type=1326 audit(1734423542.039:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9412 comm="syz.6.995" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 156.699929][ T9416] netlink: 'syz.2.996': attribute type 2 has an invalid length. [ 156.701943][ T9416] netlink: 'syz.2.996': attribute type 8 has an invalid length. [ 156.704062][ T9416] netlink: 132 bytes leftover after parsing attributes in process `syz.2.996'. [ 156.755698][ T9424] overlay: ./bus is not a directory [ 156.979727][ T9434] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1002'. [ 157.012150][ T9436] syz.5.1003[9436] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.012201][ T9436] syz.5.1003[9436] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.015179][ T9436] syz.5.1003[9436] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.022462][ T9436] tipc: Enabling of bearer rejected, failed to enable media [ 157.028532][ T9436] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1003'. [ 157.031017][ T9436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.033192][ T9436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.035660][ T9436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.038375][ T9436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.040679][ T9436] batman_adv: batadv0: Removing interface: gretap2 [ 157.536896][ C3] net_ratelimit: 15 callbacks suppressed [ 157.536913][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 157.549896][ T9449] 9pnet_fd: Insufficient options for proto=fd [ 157.616900][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 157.626069][ T9451] overlay: ./bus is not a directory [ 157.631916][ T9453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1009'. [ 157.656629][ T9455] Cannot find map_set index 1792 as target [ 157.697415][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 157.960026][ T9478] xt_hashlimit: Unknown mode mask 224, kernel too old? [ 158.096838][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 158.176839][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 158.577000][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 158.656797][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 158.736856][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 159.136817][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 159.216832][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 159.603492][ T5945] block nbd2: Receive control failed (result -104) [ 159.605241][ T9518] block nbd2: shutting down sockets [ 159.786028][ T9542] fuse: Unknown parameter 'up_id' [ 159.918604][ T9561] overlay: ./bus is not a directory [ 160.256127][ T9582] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1054'. [ 160.318362][ T8] ip6_tnl_xmit_ctl: 8 callbacks suppressed [ 160.318377][ T8] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 160.387151][ T8] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 160.427567][ T8] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 160.468260][ T8] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 160.496997][ T2286] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 160.567023][ T57] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 160.599678][ T9589] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1057'. [ 160.626903][ T57] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 160.696938][ T8] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 160.747265][ T63] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 160.759160][ T9598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1061'. [ 160.939982][ T9601] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1062'. [ 160.946951][ T8] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 161.253698][ T9618] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1067'. [ 161.303188][ T9620] Cannot find map_set index 2560 as target [ 161.649609][ T63] IPVS: starting estimator thread 0... [ 161.677148][ T9645] tipc: Started in network mode [ 161.678592][ T9645] tipc: Node identity ac1414aa, cluster identity 4711 [ 161.682524][ T9645] tipc: Enabled bearer , priority 10 [ 161.747696][ T9650] IPVS: using max 38 ests per chain, 91200 per kthread [ 161.782119][ T9659] overlay: ./bus is not a directory [ 162.162925][ T9682] overlay: ./bus is not a directory [ 162.424444][ T9690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1085'. [ 162.542588][ T9702] lo speed is unknown, defaulting to 1000 [ 162.666896][ C1] net_ratelimit: 22 callbacks suppressed [ 162.666910][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 162.688992][ T9702] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 162.736875][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 162.818259][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 162.896811][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 162.952532][ T57] tipc: Node number set to 2886997162 [ 162.956814][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 162.964582][ T9687] orangefs_mount: mount request failed with -4 [ 163.236823][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 163.296846][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 163.376836][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 163.524159][ T9737] lo speed is unknown, defaulting to 1000 [ 163.622948][ T9744] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1098'. [ 163.767176][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 163.776829][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 163.788869][ T9749] netlink: 'syz.1.1107': attribute type 1 has an invalid length. [ 163.840470][ T9754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1109'. [ 163.856872][ T56] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 163.897652][ T9758] xt_hashlimit: Unknown mode mask 2A8, kernel too old? [ 164.008028][ T56] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.010899][ T56] usb 11-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 164.013175][ T56] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.016433][ T56] usb 11-1: config 0 descriptor?? [ 164.132979][ T9763] Cannot find map_set index 7168 as target [ 164.158254][ T9765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1114'. [ 164.224606][ T9746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.228330][ T9746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.232697][ T56] usbhid 11-1:0.0: can't add hid device: -71 [ 164.234357][ T56] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 164.238485][ T56] usb 11-1: USB disconnect, device number 13 [ 164.356873][ T9775] lo speed is unknown, defaulting to 1000 [ 164.513527][ T9795] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 164.563027][ T9797] lo speed is unknown, defaulting to 1000 [ 164.666881][ T63] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 164.849286][ T63] usb 11-1: Using ep0 maxpacket: 16 [ 164.851746][ T63] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 164.854025][ T63] usb 11-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 164.856454][ T63] usb 11-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 164.861161][ T63] usb 11-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 8 [ 164.863617][ T63] usb 11-1: config 1 interface 0 has no altsetting 0 [ 164.865324][ T63] usb 11-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 164.875736][ T63] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.882913][ T63] ums-sddr09 11-1:1.0: USB Mass Storage device detected [ 164.938899][ T9812] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1128'. [ 165.084754][ T63] scsi host6: usb-storage 11-1:1.0 [ 165.323576][ T9816] netlink: 1264 bytes leftover after parsing attributes in process `syz.2.1129'. [ 165.797457][ T9838] overlay: ./bus is not a directory [ 165.813700][ T9840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1138'. [ 166.097811][ T1135] scsi 6:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 166.115329][ T1135] sd 6:0:0:0: Attached scsi generic sg2 type 0 [ 166.616398][ T9882] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1154'. [ 166.645938][ T9884] fuse: Bad value for 'rootmode' [ 166.650240][ T9884] fuse: Bad value for 'fd' [ 166.732692][ T9891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1158'. [ 166.789621][ T9896] xt_hashlimit: Unknown mode mask 300, kernel too old? [ 166.829078][ T9898] SET target dimension over the limit! [ 166.864128][ T9903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1163'. [ 167.032716][ T9913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1166'. [ 167.040321][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 167.040330][ T39] audit: type=1326 audit(1734423552.549:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9867 comm="syz.5.1149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7fc00000 [ 167.085923][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1167'. [ 167.401452][ T9929] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1170'. [ 167.936888][ C1] net_ratelimit: 22 callbacks suppressed [ 167.936900][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 167.937449][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 168.016832][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 168.106810][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 168.121366][ T9945] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.155071][ T9947] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1176'. [ 168.277878][ T9933] netlink: 'syz.2.1171': attribute type 10 has an invalid length. [ 168.292290][ T9933] team0: Port device geneve1 added [ 168.319152][ T8] usb 11-1: USB disconnect, device number 14 [ 168.319206][ T9814] sddr09: could not read card info [ 168.324663][ T1164] sd 6:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 168.326587][ T1164] sd 6:0:0:0: [sdb] 0-byte physical blocks [ 168.331986][ T1164] sd 6:0:0:0: [sdb] Write Protect is off [ 168.333856][ T1164] sd 6:0:0:0: [sdb] Asking for cache data failed [ 168.335601][ T1164] sd 6:0:0:0: [sdb] Assuming drive cache: write through [ 168.352876][ T1164] sd 6:0:0:0: [sdb] Attached SCSI removable disk [ 168.496947][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 168.532486][ T9975] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 168.576878][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 168.702367][ T7563] udevd[7563]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 168.738396][ T6198] udevd[6198]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 168.883397][T10003] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 168.976861][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 168.986832][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 169.056829][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 169.099796][T10019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1205'. [ 169.193142][T10027] netlink: 'syz.1.1209': attribute type 7 has an invalid length. [ 169.195178][T10027] netlink: 'syz.1.1209': attribute type 8 has an invalid length. [ 169.199288][T10027] erspan0: entered promiscuous mode [ 169.201392][T10027] batadv_slave_1: entered promiscuous mode [ 169.203416][T10027] gretap0: entered promiscuous mode [ 169.769638][T10051] overlayfs: failed to clone upperpath [ 169.775699][ T5945] block nbd1: Receive control failed (result -32) [ 169.782472][T10051] pim6reg: entered allmulticast mode [ 169.789757][T10045] block nbd1: shutting down sockets [ 169.789814][T10051] pim6reg: left allmulticast mode [ 170.379886][T10084] __nla_validate_parse: 4 callbacks suppressed [ 170.380109][T10084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1225'. [ 171.056921][T10105] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1231'. [ 171.202647][T10107] bridge0: port 3(vlan3) entered blocking state [ 171.204883][T10107] bridge0: port 3(vlan3) entered disabled state [ 171.207105][T10107] vlan3: entered allmulticast mode [ 171.209918][T10107] vlan3: entered promiscuous mode [ 171.242151][T10114] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 172.008472][T10136] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1241'. [ 172.031399][T10138] overlay: ./bus is not a directory [ 172.356707][T10181] overlay: ./bus is not a directory [ 172.674512][ T25] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 172.794088][T10213] overlayfs: failed to clone upperpath [ 173.078009][ T25] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 173.080875][ T25] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 173.084202][ T25] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 173.087514][ T25] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 173.091064][ T25] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 173.097436][ T25] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 173.100389][ T25] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 173.103050][ T25] usb 7-1: Product: syz [ 173.104455][ T25] usb 7-1: Manufacturer: syz [ 173.108692][ T25] cdc_wdm 7-1:1.0: skipping garbage [ 173.110442][ T25] cdc_wdm 7-1:1.0: skipping garbage [ 173.112648][ T25] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 173.114590][ T25] cdc_wdm 7-1:1.0: Unknown control protocol [ 173.136878][ C3] net_ratelimit: 20 callbacks suppressed [ 173.136895][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 173.146848][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 173.216805][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 173.296818][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 173.313569][ T25] usb 7-1: USB disconnect, device number 17 [ 173.341487][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1268'. [ 173.608521][T10229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1274'. [ 173.610906][T10229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1274'. [ 173.615806][T10229] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 173.696926][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 173.699102][T10230] program syz.1.1274 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.755886][T10238] ubi0: attaching mtd0 [ 173.763169][T10238] ubi0: scanning is finished [ 173.764515][T10238] ubi0: empty MTD device detected [ 173.776865][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 173.868867][T10238] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 173.870898][T10238] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 173.872895][T10238] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 173.874728][T10238] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 173.876688][T10238] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 173.878793][T10238] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 173.882474][T10238] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4061419359 [ 173.885093][T10238] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 173.888755][T10241] ubi0: background thread "ubi_bgt0d" started, PID 10241 [ 173.966858][ T832] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 174.138536][ T832] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 174.141712][ T832] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 174.144940][ T832] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 174.148319][ T832] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 174.151562][ T832] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 174.155599][ T832] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 174.159226][ T832] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 174.162445][ T832] usb 7-1: Product: syz [ 174.163664][ T832] usb 7-1: Manufacturer: syz [ 174.171552][ T832] cdc_wdm 7-1:1.0: skipping garbage [ 174.172996][ T832] cdc_wdm 7-1:1.0: skipping garbage [ 174.176839][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 174.178816][ T832] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 174.180835][ T832] cdc_wdm 7-1:1.0: Unknown control protocol [ 174.186817][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 174.256833][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 174.298083][T10246] syz.6.1278 (10246) used greatest stack depth: 20672 bytes left [ 174.346840][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 174.603166][T10242] orangefs_mount: mount request failed with -4 [ 174.906952][ T1016] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 174.958922][T10283] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1285'. [ 175.055606][T10286] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1286'. [ 175.065534][ T1016] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.069766][ T1016] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 175.073016][ T1016] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.083840][ T1016] usb 6-1: config 0 descriptor?? [ 175.291255][T10266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.293758][T10266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.299149][ T1016] usbhid 6-1:0.0: can't add hid device: -71 [ 175.300947][ T1016] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 175.303998][ T1016] usb 6-1: USB disconnect, device number 18 [ 175.736816][ T1016] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 175.745775][ T57] usb 7-1: USB disconnect, device number 18 [ 175.886922][ T1016] usb 6-1: Using ep0 maxpacket: 16 [ 175.890965][ T1016] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 175.893939][ T1016] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 175.896552][ T1016] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 175.899973][ T1016] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 8 [ 175.903262][ T1016] usb 6-1: config 1 interface 0 has no altsetting 0 [ 175.905085][ T1016] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 175.907699][ T1016] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.920892][ T1016] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 176.130028][ T1016] scsi host6: usb-storage 6-1:1.0 [ 176.195397][T10315] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1296'. [ 176.476905][ T5996] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 176.629273][ T5996] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 176.631724][ T5996] usb 11-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 176.634467][ T5996] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 176.637050][ T5996] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 176.639925][ T5996] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 176.645686][ T5996] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 176.648398][ T5996] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 176.650494][ T5996] usb 11-1: Product: syz [ 176.651653][ T5996] usb 11-1: Manufacturer: syz [ 176.656935][ T5996] cdc_wdm 11-1:1.0: skipping garbage [ 176.658535][ T5996] cdc_wdm 11-1:1.0: skipping garbage [ 176.661423][ T5996] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 176.663117][ T5996] cdc_wdm 11-1:1.0: Unknown control protocol [ 176.860393][ T25] usb 11-1: USB disconnect, device number 15 [ 177.090776][T10334] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1303'. [ 177.139229][ T92] scsi 6:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 177.153479][ T92] sd 6:0:0:0: Attached scsi generic sg2 type 0 [ 177.159018][T10312] sddr09: could not read card info [ 177.287815][T10312] usb 6-1: reset high-speed USB device number 19 using dummy_hcd [ 177.496879][ T57] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 177.640970][T10358] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 177.645157][T10358] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 177.652798][ T57] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 177.655982][ T57] usb 11-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 177.659951][ T57] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 177.663050][ T57] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 177.667007][ T57] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 177.672002][ T57] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 177.675141][ T57] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 177.678476][ T57] usb 11-1: Product: syz [ 177.680101][ T57] usb 11-1: Manufacturer: syz [ 177.689468][ T57] cdc_wdm 11-1:1.0: skipping garbage [ 177.691313][ T57] cdc_wdm 11-1:1.0: skipping garbage [ 177.693681][ T57] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 177.695745][ T57] cdc_wdm 11-1:1.0: Unknown control protocol [ 178.111209][T10372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1317'. [ 178.223224][T10376] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1319'. [ 178.279829][T10382] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1321'. [ 178.336676][T10385] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1318'. [ 178.336821][ C3] net_ratelimit: 20 callbacks suppressed [ 178.336831][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 178.339154][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 178.347289][ T1016] usb 6-1: USB disconnect, device number 19 [ 178.397088][ T1135] sd 6:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 178.399665][ T1135] sd 6:0:0:0: [sdb] 0-byte physical blocks [ 178.404725][ T1135] sd 6:0:0:0: [sdb] Write Protect is off [ 178.410247][ T1135] sd 6:0:0:0: [sdb] Asking for cache data failed [ 178.413202][ T1135] sd 6:0:0:0: [sdb] Assuming drive cache: write through [ 178.416805][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 178.465881][ T1135] sd 6:0:0:0: [sdb] Attached SCSI removable disk [ 178.496872][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 178.517733][T10390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1323'. [ 178.521944][T10390] ipvlan2: entered promiscuous mode [ 178.800586][ T7563] udevd[7563]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 178.806548][T10398] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 178.837475][ T6198] udevd[6198]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 178.896858][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 178.976843][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 179.268666][ T5975] usb 11-1: USB disconnect, device number 16 [ 179.332327][T10391] orangefs_mount: mount request failed with -4 [ 179.376866][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 179.386854][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 179.456973][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 179.546851][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 179.683487][T10409] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1328'. [ 180.007953][T10425] overlay: ./file0 is not a directory [ 180.024478][T10422] tmpfs: Unknown parameter 'usrquota€' [ 180.030000][T10422] overlayfs: failed to clone upperpath [ 180.032891][T10428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1334'. [ 180.063002][T10430] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1335'. [ 180.129723][T10436] SET target dimension over the limit! [ 180.131005][ T39] audit: type=1326 audit(1734423565.639:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10406 comm="syz.6.1327" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7fc00000 [ 180.539590][T10441] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 180.977019][T10451] orangefs_mount: mount request failed with -4 [ 181.966830][ T57] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 181.978568][T10496] __nla_validate_parse: 2 callbacks suppressed [ 181.978579][T10496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1356'. [ 182.138153][ T57] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 182.140525][ T57] usb 11-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 182.143312][ T57] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 182.145754][ T57] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 182.149017][ T57] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 182.153211][ T57] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 182.155650][ T57] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 182.158024][ T57] usb 11-1: Product: syz [ 182.159228][ T57] usb 11-1: Manufacturer: syz [ 182.165369][ T57] cdc_wdm 11-1:1.0: skipping garbage [ 182.167232][ T57] cdc_wdm 11-1:1.0: skipping garbage [ 182.200080][ T57] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 182.202123][ T57] cdc_wdm 11-1:1.0: Unknown control protocol [ 182.570671][T10490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.574696][T10490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.584536][ T39] audit: type=1326 audit(1734423568.089:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10504 comm="syz.1.1358" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x0 [ 182.663967][T10500] orangefs_mount: mount request failed with -4 [ 183.124835][T10532] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1362'. [ 183.264874][T10534] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 183.272141][T10534] batman_adv: batadv0: Adding interface: gretap2 [ 183.274611][T10534] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.283589][T10534] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 183.536816][ C3] net_ratelimit: 20 callbacks suppressed [ 183.536830][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 183.536868][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 183.616794][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 183.696800][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 183.863311][T10550] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1370'. [ 183.894505][T10553] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1371'. [ 183.998099][T10561] SET target dimension over the limit! [ 184.040298][ T39] audit: type=1326 audit(1734423569.549:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10565 comm="syz.1.1377" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 184.047082][ T39] audit: type=1326 audit(1734423569.549:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10565 comm="syz.1.1377" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 184.054014][ T39] audit: type=1326 audit(1734423569.549:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10565 comm="syz.1.1377" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 184.054051][ T39] audit: type=1326 audit(1734423569.549:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10565 comm="syz.1.1377" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 184.054087][ T39] audit: type=1326 audit(1734423569.549:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10565 comm="syz.1.1377" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 184.054118][ T39] audit: type=1326 audit(1734423569.549:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10565 comm="syz.1.1377" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 184.054150][ T39] audit: type=1326 audit(1734423569.549:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10565 comm="syz.1.1377" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 184.054181][ T39] audit: type=1326 audit(1734423569.549:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10565 comm="syz.1.1377" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 184.096804][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 184.176807][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 184.531036][T10575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1378'. [ 184.576846][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 184.586836][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 184.656792][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 184.672565][T10581] lo speed is unknown, defaulting to 1000 [ 184.733677][ T1016] usb 11-1: USB disconnect, device number 17 [ 184.736810][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 185.075019][T10605] lo speed is unknown, defaulting to 1000 [ 185.247088][T10610] lo speed is unknown, defaulting to 1000 [ 185.398280][T10616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1395'. [ 185.624538][T10625] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1396'. [ 185.646206][T10600] orangefs_mount: mount request failed with -4 [ 185.699835][T10629] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1398'. [ 185.777606][T10637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1401'. [ 185.858902][T10638] block nbd1: shutting down sockets [ 186.124406][T10661] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1408'. [ 186.846942][ T56] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 186.977014][ T56] usb 7-1: device descriptor read/64, error -71 [ 187.036867][ T5996] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 187.180505][T10691] xt_hashlimit: Unknown mode mask 7801, kernel too old? [ 187.200570][ T5996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.203417][ T5996] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 187.205785][ T5996] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.209686][ T5996] usb 6-1: config 0 descriptor?? [ 187.217060][ T56] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 187.346984][ T56] usb 7-1: device descriptor read/64, error -71 [ 187.430250][T10674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.432609][T10674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.436066][ T5996] usbhid 6-1:0.0: can't add hid device: -71 [ 187.437844][ T5996] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 187.441930][ T5996] usb 6-1: USB disconnect, device number 20 [ 187.467295][ T56] usb usb7-port1: attempt power cycle [ 187.806897][ T56] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 187.827341][ T56] usb 7-1: device descriptor read/8, error -71 [ 187.877036][ T832] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 188.026877][ T832] usb 6-1: Using ep0 maxpacket: 16 [ 188.030408][ T832] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 188.033724][ T832] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 188.037328][ T832] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 188.040581][ T832] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 8 [ 188.044088][ T832] usb 6-1: config 1 interface 0 has no altsetting 0 [ 188.046318][ T832] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 188.049740][ T832] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.054824][ T832] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 188.076900][ T56] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 188.098750][ T56] usb 7-1: device descriptor read/8, error -71 [ 188.107308][T10706] overlayfs: failed to clone upperpath [ 188.208130][ T56] usb usb7-port1: unable to enumerate USB device [ 188.270141][T10718] __nla_validate_parse: 1 callbacks suppressed [ 188.270177][T10718] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1425'. [ 188.379922][T10725] veth1_to_hsr: entered promiscuous mode [ 188.381948][T10725] veth1_to_hsr: entered allmulticast mode [ 188.522787][ T832] scsi host6: usb-storage 6-1:1.0 [ 188.746828][ C3] net_ratelimit: 22 callbacks suppressed [ 188.746845][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 188.816889][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 188.896888][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 189.296813][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 189.386847][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 189.515448][T10751] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 189.539390][ T1133] scsi 6:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 189.553324][ T1133] sd 6:0:0:0: Attached scsi generic sg2 type 0 [ 189.559536][T10727] sddr09: could not read card info [ 189.676383][T10754] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1441'. [ 189.687081][T10727] usb 6-1: reset high-speed USB device number 21 using dummy_hcd [ 189.776817][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 189.776838][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 189.866850][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 189.936906][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 190.120867][T10762] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1444'. [ 190.346893][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 190.472910][T10781] xt_hashlimit: Unknown mode mask 7F00, kernel too old? [ 190.522002][T10786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1455'. [ 190.599374][ T5996] usb 6-1: USB disconnect, device number 21 [ 190.607328][T10794] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1459'. [ 190.633786][T10796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1460'. [ 190.647231][ T92] sd 6:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 190.649774][ T92] sd 6:0:0:0: [sdb] 0-byte physical blocks [ 190.651945][ T92] sd 6:0:0:0: [sdb] Write Protect is off [ 190.653602][ T92] sd 6:0:0:0: [sdb] Asking for cache data failed [ 190.655271][ T92] sd 6:0:0:0: [sdb] Assuming drive cache: write through [ 190.663731][ T92] sd 6:0:0:0: [sdb] Attached SCSI removable disk [ 190.807149][T10801] No source specified [ 190.880972][T10807] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1464'. [ 190.934446][T10816] SET target dimension over the limit! [ 190.977328][ T56] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 190.990864][ T6198] udevd[6198]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 191.111186][ T56] usb 7-1: device descriptor read/64, error -71 [ 191.346939][ T56] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 191.474611][T10844] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1477'. [ 191.477026][ T56] usb 7-1: device descriptor read/64, error -71 [ 191.518992][T10847] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1478'. [ 191.521382][T10847] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1478'. [ 191.587014][ T56] usb usb7-port1: attempt power cycle [ 191.925843][T10850] orangefs_mount: mount request failed with -4 [ 191.926981][ T56] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 191.950368][ T56] usb 7-1: device descriptor read/8, error -71 [ 191.990411][T10872] fuse: Bad value for 'fd' [ 192.186993][ T56] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 192.187124][T10882] nbd1: detected capacity change from 0 to 22 [ 192.195421][T10872] block nbd1: shutting down sockets [ 192.196248][ T6198] blk_print_req_error: 32 callbacks suppressed [ 192.196260][ T6198] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.198267][ T6198] buffer_io_error: 28 callbacks suppressed [ 192.198275][ T6198] Buffer I/O error on dev nbd1, logical block 0, async page read [ 192.206536][ T6297] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.207651][ T56] usb 7-1: device descriptor read/8, error -71 [ 192.209406][ T6297] Buffer I/O error on dev nbd1, logical block 0, async page read [ 192.212822][ T6198] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.216025][ T6198] Buffer I/O error on dev nbd1, logical block 0, async page read [ 192.219848][ T6198] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.223023][ T6198] Buffer I/O error on dev nbd1, logical block 0, async page read [ 192.225936][ T6198] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.229494][ T6198] Buffer I/O error on dev nbd1, logical block 0, async page read [ 192.231656][ T6198] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.234002][ T6198] Buffer I/O error on dev nbd1, logical block 0, async page read [ 192.236043][ T6198] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.238496][ T6198] Buffer I/O error on dev nbd1, logical block 0, async page read [ 192.240766][ T6198] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.243724][ T6198] Buffer I/O error on dev nbd1, logical block 0, async page read [ 192.246356][ T6198] ldm_validate_partition_table(): Disk read failed. [ 192.248846][ T6198] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.251614][ T6198] Buffer I/O error on dev nbd1, logical block 0, async page read [ 192.253688][ T6198] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.256032][ T6198] Buffer I/O error on dev nbd1, logical block 0, async page read [ 192.258971][ T6198] Dev nbd1: unable to read RDB block 0 [ 192.260502][ T6198] nbd1: unable to read partition table [ 192.262249][ T6198] nbd1: partition table beyond EOD, truncated [ 192.266410][T10888] ldm_validate_partition_table(): Disk read failed. [ 192.270492][T10888] Dev nbd1: unable to read RDB block 0 [ 192.274018][T10888] nbd1: unable to read partition table [ 192.275760][T10888] nbd1: partition table beyond EOD, truncated [ 192.279808][ T6198] ldm_validate_partition_table(): Disk read failed. [ 192.282424][ T6198] Dev nbd1: unable to read RDB block 0 [ 192.284472][ T6198] nbd1: unable to read partition table [ 192.286443][ T6198] nbd1: partition table beyond EOD, truncated [ 192.317387][ T56] usb usb7-port1: unable to enumerate USB device [ 192.410652][T10893] tipc: Enabling of bearer rejected, already enabled [ 192.438671][ T2286] ip6_tnl_xmit_ctl: 8 callbacks suppressed [ 192.438688][ T2286] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 192.563409][T10899] sctp: [Deprecated]: syz.6.1495 (pid 10899) Use of struct sctp_assoc_value in delayed_ack socket option. [ 192.563409][T10899] Use struct sctp_sack_info instead [ 192.747124][ T5993] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 193.312319][T10903] orangefs_mount: mount request failed with -4 [ 193.324803][T10917] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1499'. [ 193.539120][ T1411] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.540829][ T1411] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.796862][ T2286] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 193.936809][ C1] net_ratelimit: 20 callbacks suppressed [ 193.936822][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 193.936857][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 193.986857][ T2286] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.989580][ T2286] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 193.991846][ T2286] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.994741][ T2286] usb 7-1: config 0 descriptor?? [ 194.016829][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 194.096827][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 194.199996][T10923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.202504][T10923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.206178][ T2286] usbhid 7-1:0.0: can't add hid device: -71 [ 194.210187][ T2286] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 194.217642][ T2286] usb 7-1: USB disconnect, device number 27 [ 194.457534][T10946] overlay: ./bus is not a directory [ 194.496814][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 194.576965][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 194.666825][ T5996] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 194.757544][T10950] xt_hashlimit: Unknown mode mask 8800, kernel too old? [ 194.826885][ T5996] usb 7-1: Using ep0 maxpacket: 16 [ 194.829621][ T5996] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 194.831979][ T5996] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 194.834495][ T5996] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 194.837455][ T5996] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 8 [ 194.839914][ T5996] usb 7-1: config 1 interface 0 has no altsetting 0 [ 194.842480][ T5996] usb 7-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 194.842497][ T5996] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.846628][ T5996] ums-sddr09 7-1:1.0: USB Mass Storage device detected [ 194.959427][T10943] orangefs_mount: mount request failed with -4 [ 194.976947][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 194.986798][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 195.048212][ T5996] scsi host6: usb-storage 7-1:1.0 [ 195.051463][T10960] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1515'. [ 195.057983][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 195.127528][T10963] binder: 10962:10963 ioctl c0306201 20000140 returned -14 [ 195.136990][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 196.110986][ T1135] scsi 6:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 196.148578][ T1135] sd 6:0:0:0: Attached scsi generic sg2 type 0 [ 196.153658][T10961] sddr09: could not read card info [ 196.286934][T10961] usb 7-1: reset high-speed USB device number 28 using dummy_hcd [ 196.422168][T10977] syz.5.1521[10977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.422258][T10977] syz.5.1521[10977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.425568][T10977] syz.5.1521[10977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.618569][T10982] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1522'. [ 196.624239][T10982] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1522'. [ 196.625094][T10986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1524'. [ 196.626576][T10982] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1522'. [ 197.323449][ T57] usb 7-1: USB disconnect, device number 28 [ 197.477767][ T1133] sd 6:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 197.480466][ T1133] sd 6:0:0:0: [sdb] 0-byte physical blocks [ 197.482747][ T1133] sd 6:0:0:0: [sdb] Write Protect is off [ 197.486462][ T1133] sd 6:0:0:0: [sdb] Asking for cache data failed [ 197.489226][ T1133] sd 6:0:0:0: [sdb] Assuming drive cache: write through [ 197.502491][ T1133] sd 6:0:0:0: [sdb] Attached SCSI removable disk [ 197.950484][ T39] kauditd_printk_skb: 40 callbacks suppressed [ 197.950495][ T39] audit: type=1326 audit(1734423583.459:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11000 comm="syz.1.1529" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 197.953347][T11001] binder: 11000:11001 ioctl 4018620d 0 returned -22 [ 197.962527][ T39] audit: type=1326 audit(1734423583.459:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11000 comm="syz.1.1529" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 197.965915][T11001] binder: 11000:11001 ioctl c0306201 20000280 returned -11 [ 197.969124][ T39] audit: type=1326 audit(1734423583.459:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11000 comm="syz.1.1529" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 197.977772][ T39] audit: type=1326 audit(1734423583.459:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11000 comm="syz.1.1529" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 197.984636][ T39] audit: type=1326 audit(1734423583.459:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11000 comm="syz.1.1529" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 197.991612][ T39] audit: type=1326 audit(1734423583.459:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11000 comm="syz.1.1529" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 197.998111][ T39] audit: type=1326 audit(1734423583.459:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11000 comm="syz.1.1529" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 198.004985][ T39] audit: type=1326 audit(1734423583.459:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11000 comm="syz.1.1529" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 198.012200][ T39] audit: type=1326 audit(1734423583.459:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11000 comm="syz.1.1529" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 198.022502][ T39] audit: type=1326 audit(1734423583.459:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11000 comm="syz.1.1529" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 198.025217][T10998] tipc: Enabling of bearer rejected, already enabled [ 198.037920][ T2286] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 198.079003][ T7563] udevd[7563]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 198.132641][ T6198] udevd[6198]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 198.235543][T11013] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1532'. [ 198.240665][T11013] netlink: 'syz.6.1532': attribute type 1 has an invalid length. [ 198.297189][ T2286] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 198.486874][ T57] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 198.638125][ T57] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 198.642671][ T57] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 198.645088][ T57] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.647535][ T57] usb 7-1: Product: syz [ 198.648785][ T57] usb 7-1: Manufacturer: syz [ 198.650079][ T57] usb 7-1: SerialNumber: syz [ 198.652788][T11015] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 198.686864][ T25] usb 11-1: new high-speed USB device number 18 using dummy_hcd [ 198.692551][ T92] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.760474][ T92] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.830310][ T92] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.838870][ T25] usb 11-1: Using ep0 maxpacket: 32 [ 198.841818][ T25] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 58604, setting to 1024 [ 198.845354][ T25] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 198.852298][ T25] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 198.860969][ T25] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.862506][ T57] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 198.863163][ T25] usb 11-1: Product: syz [ 198.867735][ T25] usb 11-1: Manufacturer: syz [ 198.869391][ T25] usb 11-1: SerialNumber: syz [ 198.877884][T11019] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 198.910795][ T92] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.016618][ T92] bridge_slave_1: left allmulticast mode [ 199.018170][ T92] bridge_slave_1: left promiscuous mode [ 199.020071][ T92] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.023381][ T92] bridge_slave_0: left allmulticast mode [ 199.024932][ T92] bridge_slave_0: left promiscuous mode [ 199.026492][ T92] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.088783][ T25] usblp 11-1:1.0: usblp1: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 199.136854][ C1] net_ratelimit: 19 callbacks suppressed [ 199.136871][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 199.140649][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 199.217012][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 199.296865][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 199.395206][T11022] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1533'. [ 199.397593][T11022] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1533'. [ 199.399925][T11022] netlink: 'syz.6.1533': attribute type 12 has an invalid length. [ 199.458380][ T92] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.466319][ T92] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.470764][ T92] bond0 (unregistering): Released all slaves [ 199.483685][ T8] usb 11-1: USB disconnect, device number 18 [ 199.487506][ T8] usblp1: removed [ 199.525709][ T92] tipc: Disabling bearer [ 199.530143][ T92] tipc: Left network mode [ 199.696831][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 199.720694][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1539'. [ 199.776859][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 199.808122][ T92] hsr_slave_0: left promiscuous mode [ 199.810313][ T92] hsr_slave_1: left promiscuous mode [ 199.825776][ T92] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.827845][ T92] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.830835][ T92] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.832805][ T92] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.853704][ T92] veth1_macvtap: left promiscuous mode [ 199.855450][ T92] veth0_macvtap: left promiscuous mode [ 199.861947][ T92] veth1_vlan: left promiscuous mode [ 199.863660][ T92] veth0_vlan: left promiscuous mode [ 200.177840][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 200.186865][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 200.212470][T11078] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1547'. [ 200.336834][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 200.512106][T11082] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1549'. [ 200.617416][ T92] team0 (unregistering): Port device team_slave_1 removed [ 200.697413][ T92] team0 (unregistering): Port device team_slave_0 removed [ 200.736836][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 201.076829][ T57] usb 7-1: USB disconnect, device number 29 [ 201.086937][ T57] usblp0: removed [ 201.331974][T11100] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1555'. [ 201.405744][T11117] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1556'. [ 201.586960][ T5975] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 201.636642][ T92] IPVS: stop unused estimator thread 0... [ 201.666219][T11136] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1560'. [ 201.746473][ T5975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.751073][ T5975] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 201.753451][ T5975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.756392][ T5975] usb 6-1: config 0 descriptor?? [ 201.963445][T11106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.965868][T11106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.969720][ T5975] usbhid 6-1:0.0: can't add hid device: -71 [ 201.974035][ T5975] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 201.979365][ T5975] usb 6-1: USB disconnect, device number 22 [ 202.402302][T11175] overlay: Unknown parameter 'appraise_type' [ 202.406854][ T5975] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 202.558744][ T5975] usb 6-1: Using ep0 maxpacket: 16 [ 202.561680][ T5975] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 202.564066][ T5975] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 202.566574][ T5975] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 202.569433][ T5975] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 8 [ 202.571949][ T5975] usb 6-1: config 1 interface 0 has no altsetting 0 [ 202.573789][ T5975] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 202.576132][ T5975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.582567][ T5975] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 202.786218][ T5975] scsi host6: usb-storage 6-1:1.0 [ 203.115539][T11191] binder: 11190:11191 ioctl c0306201 20000680 returned -14 [ 203.650084][ T25] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 203.796840][ T25] usb 7-1: Using ep0 maxpacket: 16 [ 203.800283][ T25] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 203.802532][ T25] usb 7-1: config 0 has no interface number 0 [ 203.804265][ T25] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 240, changing to 11 [ 203.807337][ T25] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 9790, setting to 1024 [ 203.811552][ T25] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 203.814025][ T25] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 203.816259][ T25] usb 7-1: Product: syz [ 203.817611][ T25] usb 7-1: SerialNumber: syz [ 203.819917][ T25] usb 7-1: config 0 descriptor?? [ 203.823021][T11207] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 203.825915][ T25] cm109 7-1:0.8: invalid payload size 1024, expected 4 [ 203.828511][ T25] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.8/input/input15 [ 203.864298][ T11] scsi 6:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 203.888490][ T11] scsi 6:0:0:0: Attached scsi generic sg2 type 0 [ 203.895449][T11187] sddr09: could not read card info [ 204.026843][T11187] usb 6-1: reset high-speed USB device number 23 using dummy_hcd [ 204.052825][ C2] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 204.056201][ C2] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 204.058375][ C2] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 204.060407][ C2] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 204.062496][ C2] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 204.064619][ C2] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 204.067724][ C2] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 204.069664][ T25] usb 7-1: USB disconnect, device number 30 [ 204.071288][ C2] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 204.071299][ C2] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 204.081709][ T25] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 204.336822][ C1] net_ratelimit: 16 callbacks suppressed [ 204.336834][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 204.346799][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 204.506807][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 204.535731][T11219] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1578'. [ 204.629578][T11233] SET target dimension over the limit! [ 204.693531][T11249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1591'. [ 204.720878][T11256] xt_hashlimit: Unknown mode mask A802, kernel too old? [ 204.807657][T11266] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1598'. [ 204.810217][T11268] bridge5: entered allmulticast mode [ 204.840119][T11272] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1594'. [ 204.854599][ T39] kauditd_printk_skb: 21 callbacks suppressed [ 204.854607][ T39] audit: type=1326 audit(1734423590.359:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11275 comm="syz.6.1602" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 204.866015][ T39] audit: type=1326 audit(1734423590.359:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11275 comm="syz.6.1602" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 204.871766][ T39] audit: type=1326 audit(1734423590.369:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11275 comm="syz.6.1602" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 204.877447][ T39] audit: type=1326 audit(1734423590.369:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11275 comm="syz.6.1602" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 204.883238][ T39] audit: type=1326 audit(1734423590.369:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11275 comm="syz.6.1602" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 204.887753][T11279] sctp: [Deprecated]: syz.1.1603 (pid 11279) Use of int in max_burst socket option. [ 204.887753][T11279] Use struct sctp_assoc_value instead [ 204.889212][ T39] audit: type=1326 audit(1734423590.369:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11275 comm="syz.6.1602" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 204.896800][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 204.920345][T11281] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.950195][ T39] audit: type=1326 audit(1734423590.459:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11275 comm="syz.6.1602" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 204.955824][ T39] audit: type=1326 audit(1734423590.459:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11275 comm="syz.6.1602" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 204.976391][ T39] audit: type=1326 audit(1734423590.479:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11275 comm="syz.6.1602" exe="/syz-executor" sig=0 arch=40000003 syscall=257 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 204.982177][ T39] audit: type=1326 audit(1734423590.479:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11275 comm="syz.6.1602" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 204.982970][T11277] batman_adv: batadv0: Adding interface: ip6gretap1 [ 204.989316][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 204.994026][T11277] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 204.999234][T11277] batman_adv: batadv0: Interface activated: ip6gretap1 [ 205.030409][ T5975] usb 6-1: USB disconnect, device number 23 [ 205.087497][ T1135] sd 6:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 205.089457][ T1135] sd 6:0:0:0: [sdb] 0-byte physical blocks [ 205.091066][ T1135] sd 6:0:0:0: [sdb] Write Protect is off [ 205.092652][ T1135] sd 6:0:0:0: [sdb] Asking for cache data failed [ 205.094319][ T1135] sd 6:0:0:0: [sdb] Assuming drive cache: write through [ 205.101802][ T1135] sd 6:0:0:0: [sdb] Attached SCSI removable disk [ 205.116892][ T5975] [ 205.117582][ T5975] ====================================================== [ 205.119410][ T5975] WARNING: possible circular locking dependency detected [ 205.121220][ T5975] 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 Not tainted [ 205.123751][ T5975] ------------------------------------------------------ [ 205.126330][ T5975] kworker/3:4/5975 is trying to acquire lock: [ 205.127962][ T5975] ffff888021634a50 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_unregister_queue+0xbc/0x2e0 [ 205.130421][ T5975] [ 205.130421][ T5975] but task is already holding lock: [ 205.132329][ T5975] ffff888021634558 (&q->q_usage_counter(queue)#53){++++}-{0:0}, at: sd_remove+0x8f/0x150 [ 205.134877][ T5975] [ 205.134877][ T5975] which lock already depends on the new lock. [ 205.134877][ T5975] [ 205.137557][ T5975] [ 205.137557][ T5975] the existing dependency chain (in reverse order) is: [ 205.139883][ T5975] [ 205.139883][ T5975] -> #2 (&q->q_usage_counter(queue)#53){++++}-{0:0}: [ 205.142180][ T5975] blk_queue_enter+0x50f/0x640 [ 205.143574][ T5975] blk_mq_alloc_request+0x59b/0x950 [ 205.145075][ T5975] scsi_execute_cmd+0x1f1/0xff0 [ 205.146484][ T5975] read_capacity_10+0x1d4/0x6d0 [ 205.147896][ T5975] sd_revalidate_disk.isra.0+0x3145/0xa8d0 [ 205.149544][ T5975] sd_probe+0x8ee/0xfa0 [ 205.150787][ T5975] really_probe+0x23e/0xa90 [ 205.152106][ T5975] __driver_probe_device+0x1de/0x440 [ 205.153627][ T5975] driver_probe_device+0x4c/0x1b0 [ 205.155082][ T5975] __device_attach_driver+0x1df/0x310 [ 205.156624][ T5975] bus_for_each_drv+0x157/0x1e0 [ 205.158033][ T5975] __device_attach_async_helper+0x1d3/0x290 [ 205.159701][ T5975] async_run_entry_fn+0x9c/0x530 [ 205.161513][ T5975] process_one_work+0x958/0x1b30 [ 205.162958][ T5975] worker_thread+0x6c8/0xf00 [ 205.164299][ T5975] kthread+0x2c1/0x3a0 [ 205.165527][ T5975] ret_from_fork+0x45/0x80 [ 205.166835][ T5975] ret_from_fork_asm+0x1a/0x30 [ 205.168238][ T5975] [ 205.168238][ T5975] -> #1 (&q->limits_lock){+.+.}-{4:4}: [ 205.170226][ T5975] __mutex_lock+0x19b/0xa60 [ 205.171557][ T5975] __blk_mq_update_nr_hw_queues+0x8b6/0x1500 [ 205.173257][ T5975] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 205.174882][ T5975] nbd_start_device+0x15b/0xd70 [ 205.176294][ T5975] nbd_ioctl+0x21a/0xfd0 [ 205.177566][ T5975] compat_blkdev_ioctl+0x2f7/0x750 [ 205.179045][ T5975] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 205.180577][ T5975] __do_fast_syscall_32+0x73/0x120 [ 205.182073][ T5975] do_fast_syscall_32+0x32/0x80 [ 205.183480][ T5975] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 205.185295][ T5975] [ 205.185295][ T5975] -> #0 (&q->sysfs_lock){+.+.}-{4:4}: [ 205.187269][ T5975] __lock_acquire+0x249e/0x3c40 [ 205.188686][ T5975] lock_acquire.part.0+0x11b/0x380 [ 205.190144][ T5975] __mutex_lock+0x19b/0xa60 [ 205.191471][ T5975] blk_unregister_queue+0xbc/0x2e0 [ 205.192953][ T5975] del_gendisk+0x2df/0xad0 [ 205.194254][ T5975] sd_remove+0x8f/0x150 [ 205.195511][ T5975] device_remove+0x122/0x170 [ 205.196852][ T5975] device_release_driver_internal+0x44a/0x610 [ 205.198588][ T5975] bus_remove_device+0x22f/0x420 [ 205.200011][ T5975] device_del+0x396/0x9f0 [ 205.201283][ T5975] __scsi_remove_device+0x307/0x3d0 [ 205.202771][ T5975] scsi_forget_host+0x138/0x190 [ 205.204166][ T5975] scsi_remove_host+0xf8/0x320 [ 205.205566][ T5975] usb_stor_disconnect+0x121/0x270 [ 205.207040][ T5975] usb_unbind_interface+0x1e2/0x960 [ 205.208540][ T5975] device_remove+0x122/0x170 [ 205.209881][ T5975] device_release_driver_internal+0x44a/0x610 [ 205.211612][ T5975] bus_remove_device+0x22f/0x420 [ 205.213035][ T5975] device_del+0x396/0x9f0 [ 205.214314][ T5975] usb_disable_device+0x36c/0x7f0 [ 205.215780][ T5975] usb_disconnect+0x2e1/0x920 [ 205.217148][ T5975] hub_event+0x1da5/0x4e10 [ 205.218467][ T5975] process_one_work+0x958/0x1b30 [ 205.219895][ T5975] worker_thread+0x6c8/0xf00 [ 205.221229][ T5975] kthread+0x2c1/0x3a0 [ 205.222449][ T5975] ret_from_fork+0x45/0x80 [ 205.223744][ T5975] ret_from_fork_asm+0x1a/0x30 [ 205.225147][ T5975] [ 205.225147][ T5975] other info that might help us debug this: [ 205.225147][ T5975] [ 205.228243][ T5975] Chain exists of: [ 205.228243][ T5975] &q->sysfs_lock --> &q->limits_lock --> &q->q_usage_counter(queue)#53 [ 205.228243][ T5975] [ 205.231877][ T5975] Possible unsafe locking scenario: [ 205.231877][ T5975] [ 205.233803][ T5975] CPU0 CPU1 [ 205.235235][ T5975] ---- ---- [ 205.236632][ T5975] lock(&q->q_usage_counter(queue)#53); [ 205.238113][ T5975] lock(&q->limits_lock); [ 205.239919][ T5975] lock(&q->q_usage_counter(queue)#53); [ 205.242020][ T5975] lock(&q->sysfs_lock); [ 205.243159][ T5975] [ 205.243159][ T5975] *** DEADLOCK *** [ 205.243159][ T5975] [ 205.245265][ T5975] 8 locks held by kworker/3:4/5975: [ 205.246626][ T5975] #0: ffff888043edb548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12cd/0x1b30 [ 205.249430][ T5975] #1: ffffc90003677d80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 205.252333][ T5975] #2: ffff8880466f7190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c1/0x4e10 [ 205.254657][ T5975] #3: ffff8880728b2190 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x920 [ 205.257060][ T5975] #4: ffff888067d83160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x610 [ 205.259797][ T5975] #5: ffff88804c15c0e0 (&shost->scan_mutex){+.+.}-{4:4}, at: scsi_remove_host+0x26/0x320 [ 205.262359][ T5975] #6: ffff888025e68378 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x610 [ 205.265125][ T5975] #7: ffff888021634558 (&q->q_usage_counter(queue)#53){++++}-{0:0}, at: sd_remove+0x8f/0x150 [ 205.267805][ T5975] [ 205.267805][ T5975] stack backtrace: [ 205.269347][ T5975] CPU: 3 UID: 0 PID: 5975 Comm: kworker/3:4 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 205.272108][ T5975] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 205.274921][ T5975] Workqueue: usb_hub_wq hub_event [ 205.276244][ T5975] Call Trace: [ 205.277124][ T5975] [ 205.277913][ T5975] dump_stack_lvl+0x116/0x1f0 [ 205.279165][ T5975] print_circular_bug+0x41c/0x610 [ 205.280485][ T5975] check_noncircular+0x31a/0x400 [ 205.281783][ T5975] ? __pfx_check_noncircular+0x10/0x10 [ 205.283223][ T5975] ? lockdep_lock+0xc6/0x200 [ 205.284437][ T5975] ? __pfx_lockdep_lock+0x10/0x10 [ 205.285768][ T5975] __lock_acquire+0x249e/0x3c40 [ 205.287062][ T5975] ? __pfx___lock_acquire+0x10/0x10 [ 205.288437][ T5975] ? __pfx_mark_lock+0x10/0x10 [ 205.289699][ T5975] ? process_one_work+0x958/0x1b30 [ 205.291454][ T5975] ? worker_thread+0x6c8/0xf00 [ 205.292726][ T5975] ? kthread+0x2c1/0x3a0 [ 205.293849][ T5975] ? ret_from_fork+0x45/0x80 [ 205.295093][ T5975] ? ret_from_fork_asm+0x1a/0x30 [ 205.296397][ T5975] lock_acquire.part.0+0x11b/0x380 [ 205.297748][ T5975] ? blk_unregister_queue+0xbc/0x2e0 [ 205.299141][ T5975] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 205.300602][ T5975] ? rcu_is_watching+0x12/0xc0 [ 205.301867][ T5975] ? trace_lock_acquire+0x14e/0x1f0 [ 205.303246][ T5975] ? blk_unregister_queue+0xbc/0x2e0 [ 205.304639][ T5975] ? lock_acquire+0x2f/0xb0 [ 205.305852][ T5975] ? blk_unregister_queue+0xbc/0x2e0 [ 205.307245][ T5975] __mutex_lock+0x19b/0xa60 [ 205.308458][ T5975] ? blk_unregister_queue+0xbc/0x2e0 [ 205.309842][ T5975] ? kfree_const+0x55/0x60 [ 205.311034][ T5975] ? blk_unregister_queue+0xbc/0x2e0 [ 205.312428][ T5975] ? __pfx___mutex_lock+0x10/0x10 [ 205.313754][ T5975] ? bdi_unregister+0x4e3/0x640 [ 205.315071][ T5975] ? __pfx_bdi_unregister+0x10/0x10 [ 205.316435][ T5975] ? blk_unregister_queue+0xbc/0x2e0 [ 205.317830][ T5975] blk_unregister_queue+0xbc/0x2e0 [ 205.319186][ T5975] del_gendisk+0x2df/0xad0 [ 205.320369][ T5975] ? __pfx_del_gendisk+0x10/0x10 [ 205.321675][ T5975] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 205.323210][ T5975] ? __pm_runtime_resume+0xc3/0x170 [ 205.324580][ T5975] sd_remove+0x8f/0x150 [ 205.325684][ T5975] ? __pfx_sd_remove+0x10/0x10 [ 205.326948][ T5975] device_remove+0x122/0x170 [ 205.328179][ T5975] device_release_driver_internal+0x44a/0x610 [ 205.329779][ T5975] bus_remove_device+0x22f/0x420 [ 205.331097][ T5975] device_del+0x396/0x9f0 [ 205.332239][ T5975] ? attribute_container_device_trigger+0x1d9/0x240 [ 205.333955][ T5975] ? __pfx_device_del+0x10/0x10 [ 205.335243][ T5975] ? kfree_const+0x55/0x60 [ 205.336423][ T5975] ? kobject_put+0x210/0x5a0 [ 205.337663][ T5975] __scsi_remove_device+0x307/0x3d0 [ 205.339043][ T5975] scsi_forget_host+0x138/0x190 [ 205.340324][ T5975] scsi_remove_host+0xf8/0x320 [ 205.341588][ T5975] usb_stor_disconnect+0x121/0x270 [ 205.342939][ T5975] usb_unbind_interface+0x1e2/0x960 [ 205.344307][ T5975] ? kernfs_find_ns+0x2e0/0x3f0 [ 205.345615][ T5975] ? __pfx_usb_unbind_interface+0x10/0x10 [ 205.347120][ T5975] device_remove+0x122/0x170 [ 205.348354][ T5975] device_release_driver_internal+0x44a/0x610 [ 205.349954][ T5975] bus_remove_device+0x22f/0x420 [ 205.351263][ T5975] device_del+0x396/0x9f0 [ 205.352411][ T5975] ? __pfx_device_del+0x10/0x10 [ 205.353692][ T5975] ? kobject_put+0x210/0x5a0 [ 205.354940][ T5975] usb_disable_device+0x36c/0x7f0 [ 205.357015][ T5975] usb_disconnect+0x2e1/0x920 [ 205.358269][ T5975] hub_event+0x1da5/0x4e10 [ 205.359454][ T5975] ? lock_acquire+0x2f/0xb0 [ 205.360651][ T5975] ? debug_object_deactivate+0x13b/0x370 [ 205.362127][ T5975] ? __pfx_hub_event+0x10/0x10 [ 205.363398][ T5975] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 205.364898][ T5975] ? rcu_is_watching+0x12/0xc0 [ 205.366163][ T5975] ? trace_lock_acquire+0x14e/0x1f0 [ 205.367544][ T5975] ? process_one_work+0x8bb/0x1b30 [ 205.368889][ T5975] ? lock_acquire+0x2f/0xb0 [ 205.370085][ T5975] ? process_one_work+0x8bb/0x1b30 [ 205.371452][ T5975] process_one_work+0x958/0x1b30 [ 205.372758][ T5975] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 205.374223][ T5975] ? __pfx_process_one_work+0x10/0x10 [ 205.375657][ T5975] ? rcu_is_watching+0x12/0xc0 [ 205.376803][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 205.376917][ T5975] ? assign_work+0x1a0/0x250 [ 205.379912][ T5975] worker_thread+0x6c8/0xf00 [ 205.381135][ T5975] ? __pfx_worker_thread+0x10/0x10 [ 205.382480][ T5975] kthread+0x2c1/0x3a0 [ 205.383557][ T5975] ? _raw_spin_unlock_irq+0x23/0x50 [ 205.384941][ T5975] ? __pfx_kthread+0x10/0x10 [ 205.386157][ T5975] ret_from_fork+0x45/0x80 [ 205.387341][ T5975] ? __pfx_kthread+0x10/0x10 [ 205.388573][ T5975] ret_from_fork_asm+0x1a/0x30 [ 205.389838][ T5975] [ 205.390882][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 205.516794][ T7611] usb 11-1: new high-speed USB device number 19 using dummy_hcd [ 205.536872][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 205.594891][ T5945] block nbd2: Receive control failed (result -32) [ 205.596702][ T5294] block nbd2: Receive control failed (result -32) [ 205.597017][T11260] block nbd2: shutting down sockets [ 205.668977][ T7611] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.671889][ T7611] usb 11-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 205.674284][ T7611] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.677008][ T7611] usb 11-1: config 0 descriptor?? [ 205.697300][ T7563] udevd[7563]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 205.718649][ T6159] udevd[6159]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 205.881337][T11286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.883675][T11286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.888400][ T7611] usbhid 11-1:0.0: can't add hid device: -71 [ 205.890011][ T7611] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 205.892582][ T7611] usb 11-1: USB disconnect, device number 19 [ 205.936845][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 209.536868][ C1] net_ratelimit: 16 callbacks suppressed [ 209.536882][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 209.696815][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 210.096810][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 210.176942][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 210.576863][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 210.576873][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 210.736812][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 211.136806][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 211.216861][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 211.616858][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 214.736839][ C3] net_ratelimit: 14 callbacks suppressed [ 214.736858][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 214.736899][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 214.896858][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available VM DIAGNOSIS: 08:19:50 Registers: info registers vcpu 0 CPU#0 RAX=0000000000570254 RBX=0000000000000000 RCX=ffffffff8b1a17a9 RDX=ffffed1005686fee RSI=ffffffff8bb16bc0 RDI=ffffffff81702e19 RBP=fffffbfff1b52ef8 RSP=ffffffff8da07e20 R8 =0000000000000000 R9 =ffffed1005686fed R10=ffff88802b437f6b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8da977c0 R14=ffffffff901cd9d0 R15=0000000000000000 RIP=ffffffff8b1a2b8f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffc8a9bdd48 CR3=000000007373c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002000002 Opmask01=0000000000000007 Opmask02=00000000efff3f37 Opmask03=2080800820108200 Opmask04=00000000dfffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a2a2a 2a2a2a2a2a2a2a2a ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff0000ff00 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffffffffffffffff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a41592a41 59434e754f464542 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5d05484e59054149 454648051a101a10 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e69646165520073 25203a656c696620 7974706d6520676e 697070696b530065 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4245484d4952005f 090c164940454a0c 55585c41490c4b42 455c5c4547530049 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 eb8e44728b9a0237 000055eebebb3b49 00000000000000a1 0000000000000031 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7c00626473006b63 6f6c6200303a303a 303a3600303a303a 3674656772617400 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ebe004a910 00000000000001d1 00006264732f6b63 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 333b263b333b263a 333b264c323b264f 323b2648323b2633 323b2632323b263f ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000002 RBX=0000000000000262 RCX=ffffffff81d9f781 RDX=ffff888076f48000 RSI=00000000fffffffe RDI=0000000000000005 RBP=0000000000000000 RSP=ffffc900077075e0 R8 =0000000000000005 R9 =00000000fffffffe R10=0000000000000000 R11=000000000000e158 R12=0000000000000000 R13=0000000000000000 R14=ffff88806957c2d0 R15=0000000000000000 RIP=ffffffff81994efc RFL=00000213 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c326cbe CR3=0000000068408000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000002f5aa4 RBX=0000000000000002 RCX=ffffffff8b1a17a9 RDX=ffffed10056c6fee RSI=ffffffff8bb16bc0 RDI=ffffffff81702e19 RBP=ffffed10039df000 RSP=ffffc9000048fe08 R8 =0000000000000000 R9 =ffffed10056c6fed R10=ffff88802b637f6b R11=0000000000000001 R12=0000000000000002 R13=ffff88801cef8000 R14=ffffffff901cd9d0 R15=0000000000000000 RIP=ffffffff8b1a2b8f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000561d3c8da538 CR3=00000000211ae000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73f3ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85142075 RDI=ffffffff9a665300 RBP=ffffffff9a6652c0 RSP=ffffc90003676a30 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff85142010 R15=0000000000000000 RIP=ffffffff8514209f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000057fc44c0 CR3=0000000022d22000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=0000000001fbee00 Opmask02=0000000001ffffff Opmask03=0100101001040442 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc8a9c7dc0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000ff0000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 98fd3701f8e97144 7373269dcdc8208a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737373e2 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 000055ebe0069b00 44455a494c414954 494e495f43455355 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f742079617236 313a382f6964622f 6c6175747269762f 736563697665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 367465677261742f 3674736f682f302e 313a312d362f312d 362f366273752f31 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000303a303a303a 362f6b7369645f69 7363732f303a303a 303a362f303a303a ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000031 0000000000000000 0000303a303a303a 362f6b7369645f69 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7f777f7f7b7d7f7f 7f7d7f7f777b773d 7f7f7d7f777f7b7e 7f7f7f777f796f79 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 333b263d333b263f 333b2639333b2638 333b263b333b263a 333b260a007d6c79 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302c30302c302c30 302c302c30302c30 2c30302c002c3732 30302c354630302c ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c2c302c2c2c2c30 2c2c2c2c302c2c2c 2c302c2c002c302c 302c2c302c302c2c ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000