last executing test programs: 9m31.039999972s ago: executing program 0 (id=2013): r0 = openat$comedi(0xffffff9c, &(0x7f0000000000)='/dev/comedi2\x00', 0x600, 0x0) ioctl$COMEDI_RANGEINFO(r0, 0x80086408, &(0x7f0000000180)={0xac4, 0x0}) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r1, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x1000)=nil], &(0x7f0000001180), &(0x7f0000000000)=[0x0], 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0300ffff0000", 0x6}]) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0xb) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r7, 0x7323, 0x0, 0x5, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1b, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000850000006d000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r11}, 0x10) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=@deltaction={0x174, 0x31, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x78, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5a2}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf088}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4af9}}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x48000}, 0x88) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r12, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) move_pages(0xffffffffffffffff, 0x1, &(0x7f0000000080)=[&(0x7f0000ff8000/0x2000)=nil], &(0x7f00000000c0)=[0x7], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 9m30.049892414s ago: executing program 0 (id=2017): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioprio_get$pid(0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x7, 0x0, 0x34324142, 0x2, 0x9, 0x1, 0x5, 0x8, 0x0, 0x2, 0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) rseq(&(0x7f0000001780)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x104) clock_settime(0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r1, &(0x7f00000003c0)=""/4096, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1a9d42, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000380)={0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="fd946c8a0940fd7f59203003000000030c7b"], &(0x7f00000013c0)={0x0, 0x3, 0xbf, @string={0xbf, 0x3, "f1c213c12843555d89e741c2f0338928bc87d80294e6b70ba08dbded1da994403415b35627d86c325e3651a69050d9a4342b2d51daf330b46c852d3ae3da6cf831ab2f11301783395f48fdc8cf5989d98ac189f837ec5e3bd7ffde6bdaa023c626ca6491ac1a953a5c2eb5573df536a62b3ae6d8804b2dbaaf338388f4bff5cb7dec12e60714f52a5919ce6deea4201d188aadef2267db9546013b1ed8d4220a0624429d314aa35f7c8387bf29fce183027428250cb3dfe721e5714a7a"}}, &(0x7f0000000280)={0x0, 0x22, 0x9, {[@global=@item_4={0x3, 0x1, 0x20fe8b7473fccccf}, @global=@item_012={0x0, 0x1, 0x3}, @global=@item_012={0x0, 0x1, 0x7}, @local=@item_012={0x1, 0x2, 0x2, "bc"}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x40, 0x1, {0x22, 0x103}}}}, &(0x7f0000001740)={0x18, &(0x7f00000014c0)={0x0, 0x1, 0xac, "e309f5632bb41ab2c2b1a777bf3dbc0a22e531941cbbdac734ef4b7d632debc20d853405f24bc140cd101aece17fc3970c024530143557ce3f46859aa7f46d159bfa6763bd7c011e8cc2ef4bd4b34fb15e50329546a684bc2661a5bede19cf3e5ccbd4bc11531ce9d21fc398ef122730de7087bc9d5e5381b89cc29841b3e99b1be2f40b2eba31de4886ecf544b585ededa455f2f829c354bec3b9b15d2acbc25bb2bc9625ea42121657230e"}, &(0x7f0000001580)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000015c0)={0x0, 0x8, 0x1, 0x8b}, &(0x7f0000001600), &(0x7f0000001700)={0x20, 0x3, 0x1, 0x40}}) 9m28.390837031s ago: executing program 0 (id=2020): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioprio_get$pid(0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x7, 0x0, 0x34324142, 0x2, 0x9, 0x1, 0x5, 0x8, 0x0, 0x2, 0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)=0x7) rseq(&(0x7f0000001780)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) clock_settime(0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r1, &(0x7f00000003c0)=""/4096, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1a9d42, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000380)={0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="fd946c8a0940fd7f59203003000000030c7b"], &(0x7f00000013c0)={0x0, 0x3, 0xbf, @string={0xbf, 0x3, "f1c213c12843555d89e741c2f0338928bc87d80294e6b70ba08dbded1da994403415b35627d86c325e3651a69050d9a4342b2d51daf330b46c852d3ae3da6cf831ab2f11301783395f48fdc8cf5989d98ac189f837ec5e3bd7ffde6bdaa023c626ca6491ac1a953a5c2eb5573df536a62b3ae6d8804b2dbaaf338388f4bff5cb7dec12e60714f52a5919ce6deea4201d188aadef2267db9546013b1ed8d4220a0624429d314aa35f7c8387bf29fce183027428250cb3dfe721e5714a7a"}}, &(0x7f0000000280)={0x0, 0x22, 0x9, {[@global=@item_4={0x3, 0x1, 0x20fe8b7473fccccf}, @global=@item_012={0x0, 0x1, 0x3}, @global=@item_012={0x0, 0x1, 0x7}, @local=@item_012={0x1, 0x2, 0x2, "bc"}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x40, 0x1, {0x22, 0x103}}}}, &(0x7f0000001740)={0x18, &(0x7f00000014c0)={0x0, 0x1, 0xac, "e309f5632bb41ab2c2b1a777bf3dbc0a22e531941cbbdac734ef4b7d632debc20d853405f24bc140cd101aece17fc3970c024530143557ce3f46859aa7f46d159bfa6763bd7c011e8cc2ef4bd4b34fb15e50329546a684bc2661a5bede19cf3e5ccbd4bc11531ce9d21fc398ef122730de7087bc9d5e5381b89cc29841b3e99b1be2f40b2eba31de4886ecf544b585ededa455f2f829c354bec3b9b15d2acbc25bb2bc9625ea42121657230e"}, &(0x7f0000001580)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000015c0)={0x0, 0x8, 0x1, 0x8b}, &(0x7f0000001600), &(0x7f0000001700)={0x20, 0x3, 0x1, 0x40}}) 9m26.230265561s ago: executing program 0 (id=2033): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) r3 = socket$netlink(0x10, 0x3, 0x15) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r5, 0x0, 0x1}, 0x18) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r7, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') lseek(r8, 0x289e0cb5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000340)='qgroup_update_reserve\x00', r3, 0x0, 0x1}, 0x18) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 9m24.852974712s ago: executing program 0 (id=2036): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x94) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 9m23.978828429s ago: executing program 0 (id=2039): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB="56c78e3c733d76697274676f2c6e6f65bc33dbde548d51f5638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000300)='./file0\x00') r0 = socket(0x2, 0x80805, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7a, 0x0, &(0x7f0000000000)) write$nbd(r1, 0x0, 0x1010) 9m12.899694702s ago: executing program 1 (id=2086): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x11) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x28, 0x0, 0xffffffffffff625f, {{0xfffffffffffffffd, 0x400, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r3, 0x5, &(0x7f0000000200)={0x1}) 9m9.757190703s ago: executing program 1 (id=2102): r0 = openat$comedi(0xffffff9c, &(0x7f0000000000)='/dev/comedi2\x00', 0x600, 0x0) ioctl$COMEDI_RANGEINFO(r0, 0x80086408, &(0x7f0000000180)={0xac4, 0x0}) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r1, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x1000)=nil], 0x0, &(0x7f0000000000)=[0x0], 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0300ffff0000", 0x6}]) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0xb) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r7, 0x7323, 0x0, 0x5, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1b, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000850000006d000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r11}, 0x10) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=@deltaction={0x174, 0x31, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x78, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5a2}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf088}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4af9}}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x48000}, 0x88) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r12, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) move_pages(0xffffffffffffffff, 0x1, &(0x7f0000000080)=[&(0x7f0000ff8000/0x2000)=nil], &(0x7f00000000c0)=[0x7], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 9m8.639727623s ago: executing program 32 (id=2039): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB="56c78e3c733d76697274676f2c6e6f65bc33dbde548d51f5638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000300)='./file0\x00') r0 = socket(0x2, 0x80805, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7a, 0x0, &(0x7f0000000000)) write$nbd(r1, 0x0, 0x1010) 9m8.588002989s ago: executing program 1 (id=2106): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000000)={{0xf000, 0x5000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x6, 0x1}, {0x5000, 0xffff1000, 0x3, 0x5, 0x2, 0x8, 0xd, 0x4, 0x0, 0x81, 0x8, 0x1}, {0x8000000, 0x0, 0xa, 0x7, 0x2, 0x1, 0x7, 0xf, 0x8, 0x6, 0x3}, {0xffff1000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0x88, 0x0, 0x1, 0x6, 0x4, 0x5}, {0x100002, 0x1, 0x9, 0x0, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0xe, 0x1, 0x15, 0x4, 0x0, 0x4, 0xa, 0x86, 0xb, 0x2}, {0xeeee8000, 0xd000, 0xa, 0x7, 0x7, 0x12, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0x4000, 0x8080000, 0xc, 0x44, 0xdd, 0x2a, 0x2, 0x4, 0x3, 0x8, 0x5, 0xce}, {0x4, 0x7}, {0x2, 0x5}, 0x80000035, 0x0, 0x2000, 0x40, 0x4000000004, 0x7000, 0x3000, [0x40000000000005, 0x8001, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m8.271358692s ago: executing program 1 (id=2108): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 9m8.2370156s ago: executing program 1 (id=2109): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x81, 0x0, 0x0, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) read$FUSE(r2, 0x0, 0x0) 9m8.018522978s ago: executing program 1 (id=2110): socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x193}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 9m7.908586647s ago: executing program 33 (id=2110): socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x193}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 14.129407054s ago: executing program 2 (id=4230): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x400000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x4, 0x3, 0x0, 0x0, 0x7, 0x6], 0x0, 0x2e1090}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x4}, 0xa}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x40020) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) fsopen(&(0x7f0000000200)='fusectl\x00', 0x0) dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 14.069383285s ago: executing program 2 (id=4231): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 12.706304853s ago: executing program 2 (id=4233): r0 = openat$comedi(0xffffff9c, &(0x7f0000000000)='/dev/comedi2\x00', 0x600, 0x0) ioctl$COMEDI_RANGEINFO(r0, 0x80086408, &(0x7f0000000180)={0xac4, 0x0}) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r1, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x1000)=nil], &(0x7f0000001180), &(0x7f0000000000)=[0x0], 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0300ffff0000", 0x6}]) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0xb) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r7, 0x7323, 0x0, 0x5, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1b, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000500000000000000020000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000850000006d000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r11}, 0x10) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=@deltaction={0x174, 0x31, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x78, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5a2}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf088}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4af9}}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x48000}, 0x88) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r12, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) move_pages(0xffffffffffffffff, 0x1, &(0x7f0000000080)=[&(0x7f0000ff8000/0x2000)=nil], &(0x7f00000000c0)=[0x7], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 9.685368711s ago: executing program 5 (id=4240): socket$nl_route(0x10, 0x3, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) getsockname$ax25(r1, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6(0xa, 0x80002, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) getsockopt$inet_mptcp_buf(r7, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) sendmsg$GTP_CMD_ECHOREQ(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r6, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @remote}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3e}}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4000805) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 9.115176117s ago: executing program 2 (id=4242): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioprio_get$pid(0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x7, 0x0, 0x34324142, 0x2, 0x9, 0x1, 0x5, 0x8, 0x0, 0x2, 0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)=0x7) rseq(&(0x7f0000001780)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x104) clock_settime(0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r1, &(0x7f00000003c0)=""/4096, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1a9d42, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000380)={0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="fd946c8a0940fd7f59203003000000030c7b"], &(0x7f00000013c0)={0x0, 0x3, 0xbf, @string={0xbf, 0x3, "f1c213c12843555d89e741c2f0338928bc87d80294e6b70ba08dbded1da994403415b35627d86c325e3651a69050d9a4342b2d51daf330b46c852d3ae3da6cf831ab2f11301783395f48fdc8cf5989d98ac189f837ec5e3bd7ffde6bdaa023c626ca6491ac1a953a5c2eb5573df536a62b3ae6d8804b2dbaaf338388f4bff5cb7dec12e60714f52a5919ce6deea4201d188aadef2267db9546013b1ed8d4220a0624429d314aa35f7c8387bf29fce183027428250cb3dfe721e5714a7a"}}, &(0x7f0000000280)={0x0, 0x22, 0x8, {[@global=@item_4={0x3, 0x1, 0x20fe8b7473fccccf}, @global=@item_012={0x0, 0x1, 0x3}, @global=@item_012={0x0, 0x1, 0x7}, @local=@item_012={0x0, 0x2, 0x2}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x40, 0x1, {0x22, 0x103}}}}, &(0x7f0000001740)={0x18, &(0x7f00000014c0)={0x0, 0x1, 0xac, "e309f5632bb41ab2c2b1a777bf3dbc0a22e531941cbbdac734ef4b7d632debc20d853405f24bc140cd101aece17fc3970c024530143557ce3f46859aa7f46d159bfa6763bd7c011e8cc2ef4bd4b34fb15e50329546a684bc2661a5bede19cf3e5ccbd4bc11531ce9d21fc398ef122730de7087bc9d5e5381b89cc29841b3e99b1be2f40b2eba31de4886ecf544b585ededa455f2f829c354bec3b9b15d2acbc25bb2bc9625ea42121657230e"}, &(0x7f0000001580)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000015c0)={0x0, 0x8, 0x1, 0x8b}, &(0x7f0000001600), &(0x7f0000001700)={0x20, 0x3, 0x1, 0x40}}) 8.790680626s ago: executing program 5 (id=4243): socket$inet_smc(0x2b, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x202) fanotify_init(0x200, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_create1(0x80000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x1}, 0x1c) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00') 8.563621717s ago: executing program 5 (id=4244): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=[@rights={{0x10}}], 0x10, 0x40}}], 0x1, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x39011, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000500)={0x28, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x2400c100}, 0x40) 7.400885077s ago: executing program 5 (id=4250): r0 = openat$comedi(0xffffff9c, &(0x7f0000000000)='/dev/comedi2\x00', 0x600, 0x0) ioctl$COMEDI_RANGEINFO(r0, 0x80086408, &(0x7f0000000180)={0xac4, 0x0}) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r1, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x1000)=nil], &(0x7f0000001180), &(0x7f0000000000)=[0x0], 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0300ffff0000", 0x6}]) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0xb) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r7, 0x7323, 0x0, 0x5, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1b, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000500000000000000020000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000850000006d000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r11}, 0x10) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=@deltaction={0x174, 0x31, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x78, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5a2}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf088}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4af9}}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x48000}, 0x88) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r12, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) move_pages(0xffffffffffffffff, 0x1, &(0x7f0000000080)=[&(0x7f0000ff8000/0x2000)=nil], &(0x7f00000000c0)=[0x7], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 5.707126868s ago: executing program 3 (id=4253): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) getsockname$ax25(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6(0xa, 0x80002, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) getsockopt$inet_mptcp_buf(r8, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) sendmsg$GTP_CMD_ECHOREQ(r6, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r7, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @remote}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3e}}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4000805) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5.576527177s ago: executing program 5 (id=4254): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x262f41, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffff7}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'geneve0\x00', @random="2b0100004ec6"}) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$sock(r10, &(0x7f0000001140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@txtime={{0x18, 0x1, 0x51, 0x5}}], 0x18}}], 0x1, 0x2a9b0a4a1e70e25c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x200000b, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000019100)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x5, &(0x7f0000019080)=ANY=[@ANYBLOB="1800000000000023000000000900000018180000959518226ba5ef65ca92fc5bda4466b15874b622e4478a2a71b23189ea972dc3497dcc3f76f85f3ae3eb1ec2196387ced3af6812020cbb", @ANYRES32=r11, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0x94) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r12, 0x0, 0x0, 0x200) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 5.367558696s ago: executing program 2 (id=4255): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioprio_get$pid(0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x7, 0x0, 0x34324142, 0x2, 0x9, 0x1, 0x5, 0x8, 0x0, 0x2, 0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)=0x7) rseq(&(0x7f0000001780)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x104) clock_settime(0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r1, &(0x7f00000003c0)=""/4096, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1a9d42, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000380)={0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="fd946c8a0940fd7f59203003000000030c7b"], &(0x7f00000013c0)={0x0, 0x3, 0xbf, @string={0xbf, 0x3, "f1c213c12843555d89e741c2f0338928bc87d80294e6b70ba08dbded1da994403415b35627d86c325e3651a69050d9a4342b2d51daf330b46c852d3ae3da6cf831ab2f11301783395f48fdc8cf5989d98ac189f837ec5e3bd7ffde6bdaa023c626ca6491ac1a953a5c2eb5573df536a62b3ae6d8804b2dbaaf338388f4bff5cb7dec12e60714f52a5919ce6deea4201d188aadef2267db9546013b1ed8d4220a0624429d314aa35f7c8387bf29fce183027428250cb3dfe721e5714a7a"}}, &(0x7f0000000280)={0x0, 0x22, 0x9, {[@global=@item_4={0x3, 0x1, 0x20fe8b7473fccccf}, @global=@item_012={0x0, 0x1, 0x3}, @global=@item_012={0x0, 0x1, 0x7}, @local=@item_012={0x1, 0x2, 0x2, "bc"}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x40, 0x1, {0x22, 0x103}}}}, &(0x7f0000001740)={0x18, &(0x7f00000014c0)={0x0, 0x1, 0x56, "e309f5632bb41ab2c2b1a777bf3dbc0a22e531941cbbdac734ef4b7d632debc20d853405f24bc140cd101aece17fc3970c024530143557ce3f46859aa7f46d159bfa6763bd7c011e8cc2ef4bd4b34fb15e50329546a6"}, &(0x7f0000001580)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000015c0)={0x0, 0x8, 0x1, 0x8b}, &(0x7f0000001600), &(0x7f0000001700)={0x20, 0x3, 0x1, 0x40}}) 5.307323041s ago: executing program 4 (id=4256): socket$nl_route(0x10, 0x3, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) getsockname$ax25(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6(0xa, 0x80002, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) getsockopt$inet_mptcp_buf(r6, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r5, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @remote}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3e}}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4000805) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5.062530675s ago: executing program 4 (id=4257): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x400000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x4, 0x3, 0x0, 0x0, 0x7, 0x6], 0x0, 0x2e1090}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x4}, 0xa}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x40020) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fsopen(&(0x7f0000000200)='fusectl\x00', 0x0) dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.963862262s ago: executing program 4 (id=4258): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=[@rights={{0x10}}], 0x10, 0x40}}], 0x1, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x39011, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000500)={0x28, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x2400c100}, 0x40) 4.724542661s ago: executing program 3 (id=4259): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=[@rights={{0x10}}], 0x10, 0x40}}], 0x1, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x39011, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000500)={0x28, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x2400c100}, 0x40) 3.543997414s ago: executing program 4 (id=4260): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=[@rights={{0x10}}], 0x10, 0x40}}], 0x1, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x39011, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000500)={0x28, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x2400c100}, 0x40) 3.511969482s ago: executing program 3 (id=4261): openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x7) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6(0xa, 0x80002, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) getsockopt$inet_mptcp_buf(r7, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) sendmsg$GTP_CMD_ECHOREQ(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r6, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @remote}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3e}}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4000805) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.484809283s ago: executing program 4 (id=4262): r0 = openat$comedi(0xffffff9c, &(0x7f0000000000)='/dev/comedi2\x00', 0x600, 0x0) ioctl$COMEDI_RANGEINFO(r0, 0x80086408, &(0x7f0000000180)={0xac4, 0x0}) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r1, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x1000)=nil], &(0x7f0000001180), &(0x7f0000000000)=[0x0], 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0300ffff0000", 0x6}]) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0xb) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r7, 0x7323, 0x0, 0x5, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1b, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000500000000000000020000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000850000006d000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r11}, 0x10) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=@deltaction={0x174, 0x31, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x78, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5a2}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf088}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4af9}}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x48000}, 0x88) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r12, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) move_pages(0xffffffffffffffff, 0x1, &(0x7f0000000080)=[&(0x7f0000ff8000/0x2000)=nil], &(0x7f00000000c0)=[0x7], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 2.483006654s ago: executing program 5 (id=4263): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioprio_get$pid(0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x7, 0x0, 0x34324142, 0x2, 0x9, 0x1, 0x5, 0x8, 0x0, 0x2, 0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)=0x7) rseq(&(0x7f0000001780)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x104) clock_settime(0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r1, &(0x7f00000003c0)=""/4096, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1a9d42, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000380)={0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="fd946c8a0940fd7f59203003000000030c7b"], &(0x7f00000013c0)={0x0, 0x3, 0xbf, @string={0xbf, 0x3, "f1c213c12843555d89e741c2f0338928bc87d80294e6b70ba08dbded1da994403415b35627d86c325e3651a69050d9a4342b2d51daf330b46c852d3ae3da6cf831ab2f11301783395f48fdc8cf5989d98ac189f837ec5e3bd7ffde6bdaa023c626ca6491ac1a953a5c2eb5573df536a62b3ae6d8804b2dbaaf338388f4bff5cb7dec12e60714f52a5919ce6deea4201d188aadef2267db9546013b1ed8d4220a0624429d314aa35f7c8387bf29fce183027428250cb3dfe721e5714a7a"}}, &(0x7f0000000280)={0x0, 0x22, 0x8, {[@global=@item_4={0x3, 0x1, 0x20fe8b7473fccccf}, @global=@item_012={0x0, 0x1, 0x3}, @global=@item_012={0x0, 0x1, 0x7}, @local=@item_012={0x0, 0x2, 0x2}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x40, 0x1, {0x22, 0x103}}}}, &(0x7f0000001740)={0x18, &(0x7f00000014c0)={0x0, 0x1, 0xac, "e309f5632bb41ab2c2b1a777bf3dbc0a22e531941cbbdac734ef4b7d632debc20d853405f24bc140cd101aece17fc3970c024530143557ce3f46859aa7f46d159bfa6763bd7c011e8cc2ef4bd4b34fb15e50329546a684bc2661a5bede19cf3e5ccbd4bc11531ce9d21fc398ef122730de7087bc9d5e5381b89cc29841b3e99b1be2f40b2eba31de4886ecf544b585ededa455f2f829c354bec3b9b15d2acbc25bb2bc9625ea42121657230e"}, &(0x7f0000001580)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000015c0)={0x0, 0x8, 0x1, 0x8b}, &(0x7f0000001600), &(0x7f0000001700)={0x20, 0x3, 0x1, 0x40}}) 2.428226999s ago: executing program 3 (id=4264): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=[@rights={{0x10}}], 0x10, 0x40}}], 0x1, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x39011, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000500)={0x28, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x2400c100}, 0x40) 1.301262433s ago: executing program 3 (id=4265): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=[@rights={{0x10}}], 0x10, 0x40}}], 0x1, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x39011, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000500)={0x28, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x2400c100}, 0x40) 126.284485ms ago: executing program 2 (id=4266): socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x400000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x4, 0x3, 0x0, 0x0, 0x7, 0x6], 0x0, 0x2e1090}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x4}, 0xa}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fsopen(&(0x7f0000000200)='fusectl\x00', 0x0) dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 111.199358ms ago: executing program 3 (id=4267): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) getsockname$ax25(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6(0xa, 0x80002, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) getsockopt$inet_mptcp_buf(r8, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) sendmsg$GTP_CMD_ECHOREQ(r6, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r7, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @remote}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3e}}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4000805) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 0s ago: executing program 4 (id=4268): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=[@rights={{0x10}}], 0x10, 0x40}}], 0x1, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x39011, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) kernel console output (not intermixed with test programs): id(0) speed(6) speed_str(super-speed-plus) [ 853.455157][T19467] vhci_hcd vhci_hcd.0: Device attached [ 853.464259][T19471] overlayfs: failed to clone upperpath [ 853.470296][T19471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2714'. [ 853.477863][T19471] netlink: 292 bytes leftover after parsing attributes in process `syz.4.2714'. [ 853.481651][T19471] netlink: 292 bytes leftover after parsing attributes in process `syz.4.2714'. [ 853.490000][ T5989] Bluetooth: hci4: connection err: -111 [ 853.600273][T19473] gtp0: entered promiscuous mode [ 853.604226][T19473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2715'. [ 853.889028][T19479] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.025996][T19479] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.037099][T19468] vhci_hcd: connection closed [ 854.037349][ T1230] vhci_hcd: stop threads [ 854.041602][ T1230] vhci_hcd: release socket [ 854.043149][ T1230] vhci_hcd: disconnect device [ 854.120010][T19479] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.227424][T19479] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.348179][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.358240][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.371287][T16094] usb 48-1: device descriptor read/8, error -110 [ 854.398631][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.414394][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.440644][T16094] usb usb48-port1: attempt power cycle [ 856.002800][T16094] usb usb48-port1: unable to enumerate USB device [ 856.374938][T16094] IPVS: starting estimator thread 0... [ 856.470191][T19511] IPVS: using max 45 ests per chain, 108000 per kthread [ 856.596220][T19515] gtp0: entered promiscuous mode [ 856.600517][T19515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2724'. [ 856.793068][T19522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2726'. [ 856.803182][T19522] bridge0: port 1(macvlan0) entered blocking state [ 856.805566][T19522] bridge0: port 1(macvlan0) entered disabled state [ 856.807835][T19522] macvlan0: entered allmulticast mode [ 856.809653][T19522] bridge0: entered allmulticast mode [ 856.837010][T19522] macvlan0: left allmulticast mode [ 856.838809][T19522] bridge0: left allmulticast mode [ 856.932607][T19526] tipc: Enabling of bearer rejected, already enabled [ 856.940820][T19531] binder_alloc: 19530: binder_alloc_buf, no vma [ 857.259713][T19541] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 857.261807][T19541] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 857.265576][T19541] vhci_hcd vhci_hcd.0: Device attached [ 857.666950][T19544] sd 0:0:0:0: PR command failed: 1026 [ 857.668707][T19544] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 857.671312][T19544] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 857.709663][T16094] usb 44-1: SetAddress Request (8) to port 0 [ 857.712172][T16094] usb 44-1: new SuperSpeed USB device number 8 using vhci_hcd [ 857.743495][T19544] lo speed is unknown, defaulting to 1000 [ 857.755485][T19544] lo speed is unknown, defaulting to 1000 [ 857.854518][T19542] vhci_hcd: connection reset by peer [ 857.858796][T18316] vhci_hcd: stop threads [ 857.860811][T18316] vhci_hcd: release socket [ 857.862796][T18316] vhci_hcd: disconnect device [ 858.096534][T19550] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 858.106249][T19550] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 858.129206][T19550] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 858.134229][T19550] overlayfs: failed to look up (tracing) for ino (-66) [ 858.149589][T19550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2732'. [ 858.153336][T19550] netlink: 292 bytes leftover after parsing attributes in process `syz.2.2732'. [ 858.156269][T19550] netlink: 292 bytes leftover after parsing attributes in process `syz.2.2732'. [ 858.204157][T19555] lo speed is unknown, defaulting to 1000 [ 858.207269][T19555] lo speed is unknown, defaulting to 1000 [ 858.458663][T19563] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 858.460872][T19563] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 858.468358][T19563] vhci_hcd vhci_hcd.0: Device attached [ 858.729175][ T53] usb 42-1: SetAddress Request (11) to port 0 [ 858.731307][ T53] usb 42-1: new SuperSpeed USB device number 11 using vhci_hcd [ 859.158606][T19564] vhci_hcd: connection reset by peer [ 859.162094][ T1230] vhci_hcd: stop threads [ 859.163858][ T1230] vhci_hcd: release socket [ 859.167270][ T1230] vhci_hcd: disconnect device [ 860.305663][T19600] tipc: Enabling of bearer rejected, failed to enable media [ 861.301339][T19613] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 861.303391][T19613] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 861.306433][T19613] vhci_hcd vhci_hcd.0: Device attached [ 861.319195][T19613] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(13) [ 861.321575][T19613] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 861.329565][T19613] vhci_hcd vhci_hcd.0: Device attached [ 861.332001][T19613] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 861.339960][T19613] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(18) [ 861.342048][T19613] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 861.344870][T19613] vhci_hcd vhci_hcd.0: Device attached [ 861.347777][T19613] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(20) [ 861.349871][T19613] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 861.352295][T19613] vhci_hcd vhci_hcd.0: Device attached [ 861.380559][T19613] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(22) [ 861.383204][T19613] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 861.386327][T19613] vhci_hcd vhci_hcd.0: Device attached [ 861.389294][T19613] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 861.392591][T19613] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 861.403166][T19623] vhci_hcd: connection closed [ 861.403440][T19617] vhci_hcd: connection closed [ 861.405306][T19621] vhci_hcd: connection closed [ 861.406679][T19625] vhci_hcd: connection closed [ 861.406982][T19614] vhci_hcd: connection closed [ 861.412215][ T1230] vhci_hcd: stop threads [ 861.415038][ T1230] vhci_hcd: release socket [ 861.420129][ T1230] vhci_hcd: disconnect device [ 861.421745][ T1230] vhci_hcd: stop threads [ 861.423078][ T1230] vhci_hcd: release socket [ 861.424470][ T1230] vhci_hcd: disconnect device [ 861.426141][ T1230] vhci_hcd: stop threads [ 861.427588][ T1230] vhci_hcd: release socket [ 861.429068][ T1230] vhci_hcd: disconnect device [ 861.430696][ T1230] vhci_hcd: stop threads [ 861.432042][ T1230] vhci_hcd: release socket [ 861.433468][ T1230] vhci_hcd: disconnect device [ 861.435480][ T1230] vhci_hcd: stop threads [ 861.436931][ T1230] vhci_hcd: release socket [ 861.438477][ T1230] vhci_hcd: disconnect device [ 861.969972][T19631] tipc: Enabling of bearer rejected, failed to enable media [ 862.153275][T19611] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 862.157862][T19611] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 862.169143][T19611] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 862.376702][T19653] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2748'. [ 862.595297][T19658] lo speed is unknown, defaulting to 1000 [ 862.600601][T19658] lo speed is unknown, defaulting to 1000 [ 862.767240][T16094] usb 44-1: device descriptor read/8, error -110 [ 863.157497][T16094] usb usb44-port1: attempt power cycle [ 863.416741][ T5989] Bluetooth: hci3: command 0x0405 tx timeout [ 863.728627][T16094] usb usb44-port1: unable to enumerate USB device [ 863.806639][ T53] usb 42-1: device descriptor read/8, error -110 [ 863.934200][T19669] tipc: Enabling of bearer rejected, failed to enable media [ 864.120286][T19676] lo speed is unknown, defaulting to 1000 [ 864.123955][T19676] lo speed is unknown, defaulting to 1000 [ 864.196850][ T53] usb usb42-port1: attempt power cycle [ 864.206231][ T5989] Bluetooth: hci1: command 0x0c1a tx timeout [ 864.206295][ T5984] Bluetooth: hci4: command 0x0c1a tx timeout [ 864.756679][ T53] usb usb42-port1: unable to enumerate USB device [ 864.992564][T19690] sd 0:0:0:0: PR command failed: 1026 [ 864.994937][T19690] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 864.997861][T19690] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 865.899455][T19699] lo speed is unknown, defaulting to 1000 [ 865.936343][T19699] lo speed is unknown, defaulting to 1000 [ 866.127017][T19704] tipc: Enabling of bearer rejected, failed to enable media [ 866.154444][T19704] syzkaller0: entered promiscuous mode [ 866.156380][T19704] syzkaller0: entered allmulticast mode [ 866.285242][ T5984] Bluetooth: hci1: command 0x0c1a tx timeout [ 866.365852][T19707] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 866.368373][T19707] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 866.372575][T19707] vhci_hcd vhci_hcd.0: Device attached [ 866.564535][T19708] vhci_hcd: connection closed [ 866.636708][T19663] vhci_hcd: stop threads [ 866.642176][T19663] vhci_hcd: release socket [ 866.646163][T19663] vhci_hcd: disconnect device [ 866.779722][ T53] usb 44-1: enqueue for inactive port 0 [ 867.475345][ T53] usb usb44-port1: attempt power cycle [ 867.687837][T19724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2764'. [ 867.830959][T19732] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2765'. [ 867.912824][T19734] lo speed is unknown, defaulting to 1000 [ 867.917825][T19734] lo speed is unknown, defaulting to 1000 [ 868.044881][ T53] usb usb44-port1: unable to enumerate USB device [ 869.386500][T19741] input: syz0 as /devices/virtual/input/input98 [ 870.774101][ T5984] Bluetooth: hci3: unexpected event for opcode 0x0c05 [ 870.775445][T19776] veth0_to_hsr: entered allmulticast mode [ 870.781418][T19776] veth0_to_hsr: left allmulticast mode [ 870.814789][T19778] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2772'. [ 871.207386][T19774] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2774'. [ 871.452169][T19787] tipc: Enabling of bearer rejected, failed to enable media [ 872.522922][T19807] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 872.525124][T19807] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 872.528309][T19807] vhci_hcd vhci_hcd.0: Device attached [ 872.792758][ T53] usb 42-1: SetAddress Request (15) to port 0 [ 872.795365][ T53] usb 42-1: new SuperSpeed USB device number 15 using vhci_hcd [ 873.091586][T19808] vhci_hcd: connection reset by peer [ 873.093926][T19663] vhci_hcd: stop threads [ 873.095641][T19663] vhci_hcd: release socket [ 873.097518][T19663] vhci_hcd: disconnect device [ 874.684233][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 874.873682][T19844] tipc: Enabling of bearer rejected, already enabled [ 875.871462][T19858] lo speed is unknown, defaulting to 1000 [ 875.881433][T19858] lo speed is unknown, defaulting to 1000 [ 876.120149][ T5989] Bluetooth: hci1: command 0x0c1a tx timeout [ 876.333181][T19865] syz.5.2794 (19865): drop_caches: 2 [ 876.339050][T19865] syz.5.2794 (19865): drop_caches: 2 [ 876.461179][T19870] tipc: Enabling of bearer rejected, failed to enable media [ 877.553010][T19884] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 877.555825][T19884] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 877.561168][T19884] vhci_hcd vhci_hcd.0: Device attached [ 877.566716][T19884] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(13) [ 877.569570][T19884] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 877.573327][T19884] vhci_hcd vhci_hcd.0: Device attached [ 877.578128][T19884] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 877.584496][T19884] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(18) [ 877.587293][T19884] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 877.590668][T19884] vhci_hcd vhci_hcd.0: Device attached [ 877.596581][T19884] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(20) [ 877.599389][T19884] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 877.602915][T19884] vhci_hcd vhci_hcd.0: Device attached [ 877.609594][T19884] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(22) [ 877.612397][T19884] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 877.615873][T19884] vhci_hcd vhci_hcd.0: Device attached [ 877.621941][T19884] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 877.628174][T19884] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 877.666884][T19893] vhci_hcd: connection closed [ 877.667113][T19889] vhci_hcd: connection closed [ 877.667782][T19885] vhci_hcd: connection closed [ 877.668679][T11789] vhci_hcd: stop threads [ 877.672885][T19891] vhci_hcd: connection closed [ 877.673630][T19887] vhci_hcd: connection closed [ 877.674006][T11789] vhci_hcd: release socket [ 877.679814][T11789] vhci_hcd: disconnect device [ 877.681873][T11789] vhci_hcd: stop threads [ 877.683698][T11789] vhci_hcd: release socket [ 877.686239][T11789] vhci_hcd: disconnect device [ 877.688375][T11789] vhci_hcd: stop threads [ 877.691082][T11789] vhci_hcd: release socket [ 877.693069][T11789] vhci_hcd: disconnect device [ 877.695214][T11789] vhci_hcd: stop threads [ 877.697016][T11789] vhci_hcd: release socket [ 877.698990][T11789] vhci_hcd: disconnect device [ 877.701764][T11789] vhci_hcd: stop threads [ 877.703570][T11789] vhci_hcd: release socket [ 877.705533][T11789] vhci_hcd: disconnect device [ 877.879415][ T53] usb 42-1: device descriptor read/8, error -110 [ 878.107095][T19897] lo speed is unknown, defaulting to 1000 [ 878.130709][T19897] lo speed is unknown, defaulting to 1000 [ 878.270986][ T53] usb usb42-port1: attempt power cycle [ 878.348952][T12899] vhci_hcd: vhci_device speed not set [ 879.609074][ T53] usb usb42-port1: unable to enumerate USB device [ 880.308312][T19929] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 880.310752][T19929] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 880.313484][T19929] vhci_hcd vhci_hcd.0: Device attached [ 880.578469][ T53] usb 48-1: SetAddress Request (26) to port 0 [ 880.589828][ T53] usb 48-1: new SuperSpeed USB device number 26 using vhci_hcd [ 880.729732][T19930] vhci_hcd: connection reset by peer [ 880.732251][ T1138] vhci_hcd: stop threads [ 880.734197][ T1138] vhci_hcd: release socket [ 880.736164][ T1138] vhci_hcd: disconnect device [ 882.667218][T12899] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 883.012451][T12899] usb 7-1: Using ep0 maxpacket: 32 [ 883.025684][T12899] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 883.034968][T12899] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 883.210894][T19980] tmpfs: Unknown parameter 'grpquotaAð‹hÁR9÷×ÛÌ„®1&·l¼‹ €7——’È÷¾/ÞÄn'‚‰OÞö ý.°§óœ¸„U»Ûü©Å' [ 883.281057][T12899] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 883.284162][T12899] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.298767][T12899] usb 7-1: config 0 descriptor?? [ 883.325608][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 883.325619][ T40] audit: type=1804 audit(1757712313.986:1608): pid=19979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2815" name="/newroot/719/file0/file0" dev="9p" ino=35913990 res=1 errno=0 [ 884.304334][T12899] usbhid 7-1:0.0: can't add hid device: -71 [ 884.306387][T12899] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 884.313669][T12899] usb 7-1: USB disconnect, device number 29 [ 885.220673][T19996] infiniband syz1: set active [ 885.223996][T19996] infiniband syz1: added syz_tun [ 885.276811][T19996] RDS/IB: syz1: added [ 885.278722][T19996] smc: adding ib device syz1 with port count 1 [ 885.280651][T19996] smc: ib device syz1 port 1 has pnetid [ 885.339777][T20005] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 885.341888][T20005] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 885.347304][T20005] vhci_hcd vhci_hcd.0: Device attached [ 885.796162][T16094] usb 44-1: SetAddress Request (16) to port 0 [ 885.796197][T16094] usb 44-1: new SuperSpeed USB device number 16 using vhci_hcd [ 885.796270][ T53] usb 48-1: device descriptor read/8, error -110 [ 886.035029][T20006] vhci_hcd: connection reset by peer [ 886.055066][ T1138] vhci_hcd: stop threads [ 886.056472][ T1138] vhci_hcd: release socket [ 886.057976][ T1138] vhci_hcd: disconnect device [ 886.226816][ T53] usb usb48-port1: attempt power cycle [ 886.676320][T20030] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2824'. [ 886.827575][ T53] usb usb48-port1: unable to enumerate USB device [ 887.596201][T20046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2828'. [ 887.633561][T20046] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 887.751047][T20048] sd 0:0:0:0: PR command failed: 1026 [ 887.756582][T20048] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 887.761281][T20048] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 887.843535][T20052] lo speed is unknown, defaulting to 1000 [ 887.846303][T20052] lo speed is unknown, defaulting to 1000 [ 888.910900][T20064] syz.2.2830 (20064): drop_caches: 2 [ 888.937993][T20064] syz.2.2830 (20064): drop_caches: 2 [ 890.495051][T20079] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 890.497223][T20079] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 890.500324][T20079] vhci_hcd vhci_hcd.0: Device attached [ 890.834438][ T5989] Bluetooth: hci1: command 0x0c1a tx timeout [ 890.854082][ T6042] usb 48-1: SetAddress Request (30) to port 0 [ 890.856830][ T6042] usb 48-1: new SuperSpeed USB device number 30 using vhci_hcd [ 890.913143][T16094] usb 44-1: device descriptor read/8, error -110 [ 890.969517][T20080] vhci_hcd: connection reset by peer [ 890.971799][ T12] vhci_hcd: stop threads [ 890.974162][ T12] vhci_hcd: release socket [ 890.975691][ T12] vhci_hcd: disconnect device [ 891.313312][T16094] usb usb44-port1: attempt power cycle [ 891.525572][T20094] netlink: 'syz.4.2836': attribute type 13 has an invalid length. [ 891.954639][T16094] usb usb44-port1: unable to enumerate USB device [ 893.911942][T20125] syz.3.2843 (20125): drop_caches: 2 [ 893.914579][T20125] syz.3.2843 (20125): drop_caches: 2 [ 894.368899][T20133] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 894.370937][T20133] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 894.374679][T20133] vhci_hcd vhci_hcd.0: Device attached [ 894.958844][T20134] vhci_hcd: connection closed [ 894.959517][T18316] vhci_hcd: stop threads [ 894.970045][T18316] vhci_hcd: release socket [ 894.972229][T18316] vhci_hcd: disconnect device [ 895.484258][ T40] audit: type=1804 audit(1757712326.342:1609): pid=20153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2849" name="/newroot/750/file0/file0" dev="9p" ino=35913990 res=1 errno=0 [ 895.499781][T20153] tmpfs: Unknown parameter 'grpquotaAð‹hÁR9÷×ÛÌ„®1&·l¼‹ €7——’È÷¾/ÞÄn'‚‰OÞö ý.°§óœ¸„U»Ûü©Å' [ 895.950320][ T6042] usb 48-1: device descriptor read/8, error -110 [ 896.285981][ C1] vcan0: j1939_tp_rxtimer: 0xffff888013687400: rx timeout, send abort [ 896.300309][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888013687400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 896.371105][ T6042] usb usb48-port1: attempt power cycle [ 897.000479][ T6042] usb usb48-port1: unable to enumerate USB device [ 897.946469][T20174] ptrace attach of "/syz-executor exec"[5973] was attempted by ""[20174] [ 898.374057][T20187] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 898.376463][T20187] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 898.389286][T20187] vhci_hcd vhci_hcd.0: Device attached [ 898.729353][ T29] usb 44-1: SetAddress Request (20) to port 0 [ 898.732017][ T29] usb 44-1: new SuperSpeed USB device number 20 using vhci_hcd [ 898.743861][T20195] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2856'. [ 898.752543][T20195] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 898.769761][T20195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 899.071739][T20188] vhci_hcd: connection reset by peer [ 899.074959][T19663] vhci_hcd: stop threads [ 899.076390][T19663] vhci_hcd: release socket [ 899.080016][T19663] vhci_hcd: disconnect device [ 899.330978][T20205] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2859'. [ 899.401193][T20205] vxlan0: entered promiscuous mode [ 899.406263][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 899.409173][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 899.411798][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 899.415089][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 902.988815][T20255] lo speed is unknown, defaulting to 1000 [ 902.991455][T20255] lo speed is unknown, defaulting to 1000 [ 903.025471][T20256] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2868'. [ 903.216102][T20263] lo speed is unknown, defaulting to 1000 [ 903.224497][T20263] lo speed is unknown, defaulting to 1000 [ 903.230455][T20264] tipc: Enabling of bearer rejected, already enabled [ 903.596082][T20271] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 903.598223][T20271] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 903.603681][T20271] vhci_hcd vhci_hcd.0: Device attached [ 903.786511][ T29] usb 44-1: device descriptor read/8, error -110 [ 903.947627][T16094] usb 42-1: SetAddress Request (19) to port 0 [ 903.949633][T16094] usb 42-1: new SuperSpeed USB device number 19 using vhci_hcd [ 904.116412][T20272] vhci_hcd: connection reset by peer [ 904.134085][ T12] vhci_hcd: stop threads [ 904.135466][ T12] vhci_hcd: release socket [ 904.232268][ T29] usb usb44-port1: attempt power cycle [ 904.305969][ T12] vhci_hcd: disconnect device [ 904.944390][ T29] usb usb44-port1: unable to enumerate USB device [ 904.991367][ T40] audit: type=1326 audit(1757712335.857:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20290 comm="syz.2.2874" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 905.035677][T20292] tipc: Enabling of bearer rejected, already enabled [ 905.045573][ T40] audit: type=1326 audit(1757712335.857:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20290 comm="syz.2.2874" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 905.110037][ T40] audit: type=1326 audit(1757712335.857:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20290 comm="syz.2.2874" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 905.155598][ T40] audit: type=1326 audit(1757712335.857:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20290 comm="syz.2.2874" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 905.164091][ T40] audit: type=1326 audit(1757712335.857:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20290 comm="syz.2.2874" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 905.174165][ T40] audit: type=1326 audit(1757712335.857:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20290 comm="syz.2.2874" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 905.198455][ T40] audit: type=1326 audit(1757712335.857:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20290 comm="syz.2.2874" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70be598 code=0x7ffc0000 [ 905.214483][ T40] audit: type=1326 audit(1757712335.857:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20290 comm="syz.2.2874" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70be598 code=0x7ffc0000 [ 905.236145][ T40] audit: type=1326 audit(1757712335.857:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20290 comm="syz.2.2874" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70be598 code=0x7ffc0000 [ 905.254810][ T40] audit: type=1326 audit(1757712335.857:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20290 comm="syz.2.2874" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70be598 code=0x7ffc0000 [ 906.641331][T20291] lo speed is unknown, defaulting to 1000 [ 906.643876][T20291] lo speed is unknown, defaulting to 1000 [ 906.967980][T20315] siw: device registration error -23 [ 907.425056][T20318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2879'. [ 907.447893][T20318] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2879'. [ 907.485373][T20318] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2879'. [ 907.573188][T20319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2879'. [ 907.604892][T20322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2880'. [ 907.668079][T20321] lo speed is unknown, defaulting to 1000 [ 907.670691][T20321] lo speed is unknown, defaulting to 1000 [ 907.782570][T20329] lo speed is unknown, defaulting to 1000 [ 907.794801][T20329] lo speed is unknown, defaulting to 1000 [ 908.983679][T13012] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 908.983917][T16094] usb 42-1: device descriptor read/8, error -110 [ 909.018477][T20351] tipc: Enabling of bearer rejected, failed to enable media [ 909.143623][T13012] usb 10-1: Using ep0 maxpacket: 16 [ 909.151463][T13012] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 909.156560][T13012] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 909.159676][T13012] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.162319][T13012] usb 10-1: Product: syz [ 909.165845][T13012] usb 10-1: Manufacturer: syz [ 909.167423][T13012] usb 10-1: SerialNumber: syz [ 909.177979][T13012] usb 10-1: config 0 descriptor?? [ 909.183079][T13012] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 909.187627][T13012] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 909.384195][T16094] usb usb42-port1: attempt power cycle [ 909.795806][T13012] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 910.025836][T16094] usb usb42-port1: unable to enumerate USB device [ 910.205733][T20367] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 910.207805][T20367] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 910.302693][T20367] vhci_hcd vhci_hcd.0: Device attached [ 910.430895][T20371] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2890'. [ 910.753848][T20371] vxlan0: entered promiscuous mode [ 910.782856][T16094] usb 44-1: SetAddress Request (24) to port 0 [ 910.785575][T16094] usb 44-1: new SuperSpeed USB device number 24 using vhci_hcd [ 910.798558][T18316] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 910.801177][T18316] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 910.805950][T18316] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 910.808525][T18316] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 911.062080][T20377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2892'. [ 911.065091][T20377] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2892'. [ 911.067946][T20377] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2892'. [ 911.108380][T20368] vhci_hcd: connection reset by peer [ 911.113944][ T1230] vhci_hcd: stop threads [ 911.116028][ T1230] vhci_hcd: release socket [ 911.117973][ T1230] vhci_hcd: disconnect device [ 911.191180][ T6563] lo speed is unknown, defaulting to 1000 [ 911.193344][ T6563] syz0: Port: 1 Link DOWN [ 911.234724][T13012] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 911.239424][T20372] em28xx 10-1:0.0: writing to i2c device at 0x0 failed (error=-5) [ 911.239516][T13012] em28xx 10-1:0.0: board has no eeprom [ 911.266300][T20382] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2893'. [ 911.322467][T13012] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 911.325127][T13012] em28xx 10-1:0.0: dvb set to bulk mode. [ 911.327302][T16787] em28xx 10-1:0.0: Binding DVB extension [ 911.429464][T16787] em28xx 10-1:0.0: Registering input extension [ 911.736606][T20387] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 911.738698][T20387] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 911.741650][T20387] vhci_hcd vhci_hcd.0: Device attached [ 912.117342][ T29] usb 42-1: SetAddress Request (23) to port 0 [ 912.120473][ T29] usb 42-1: new SuperSpeed USB device number 23 using vhci_hcd [ 912.347300][T20388] vhci_hcd: connection reset by peer [ 912.348420][ T6042] usb 10-1: USB disconnect, device number 6 [ 912.351935][T18316] vhci_hcd: stop threads [ 912.353927][T18316] vhci_hcd: release socket [ 912.354319][ T6042] em28xx 10-1:0.0: Disconnecting em28xx [ 912.356852][T18316] vhci_hcd: disconnect device [ 912.361301][ T6042] em28xx 10-1:0.0: Closing input extension [ 912.508574][ T6042] em28xx 10-1:0.0: Freeing device [ 913.069397][T20406] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 913.071892][T20406] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 913.075120][T20406] vhci_hcd vhci_hcd.0: Device attached [ 913.421860][ T6042] usb 48-1: SetAddress Request (34) to port 0 [ 913.488131][ T6042] usb 48-1: new SuperSpeed USB device number 34 using vhci_hcd [ 913.712064][T20407] vhci_hcd: connection reset by peer [ 913.714805][T11789] vhci_hcd: stop threads [ 913.716658][T11789] vhci_hcd: release socket [ 913.718279][T11789] vhci_hcd: disconnect device [ 914.690449][T20424] lo speed is unknown, defaulting to 1000 [ 914.698463][T20424] lo speed is unknown, defaulting to 1000 [ 915.315164][T20428] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 915.317212][T20428] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 915.332763][T20428] vhci_hcd vhci_hcd.0: Device attached [ 915.733585][T20431] vhci_hcd: connection closed [ 915.734047][ T1138] vhci_hcd: stop threads [ 915.744498][ T1138] vhci_hcd: release socket [ 915.747318][ T1138] vhci_hcd: disconnect device [ 915.860515][T16094] usb 44-1: device descriptor read/8, error -110 [ 915.903991][T20439] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 915.968897][T20439] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 916.050694][T20439] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 916.184344][T20439] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 916.309628][T11789] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 916.322850][T11789] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 916.326588][T11789] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 916.336083][T11789] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 916.779698][T16094] usb usb44-port1: attempt power cycle [ 916.839998][T20451] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 916.842651][T20451] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 916.846211][T20451] vhci_hcd vhci_hcd.0: Device attached [ 916.910293][T16094] usb 44-1: SetAddress Request (26) to port 0 [ 916.912397][T16094] usb 44-1: new SuperSpeed USB device number 26 using vhci_hcd [ 917.219864][ T29] usb 42-1: device descriptor read/8, error -110 [ 917.249463][T20452] vhci_hcd: connection reset by peer [ 917.251321][T11789] vhci_hcd: stop threads [ 917.252665][T11789] vhci_hcd: release socket [ 917.254186][T11789] vhci_hcd: disconnect device [ 917.684285][ T29] usb usb42-port1: attempt power cycle [ 917.805991][T20464] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 917.808566][T20464] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 917.848284][T20464] vhci_hcd vhci_hcd.0: Device attached [ 918.132772][T20470] lo speed is unknown, defaulting to 1000 [ 918.136806][T20470] lo speed is unknown, defaulting to 1000 [ 918.429932][ T29] usb usb42-port1: unable to enumerate USB device [ 918.507013][T20465] vhci_hcd: connection closed [ 918.512552][T18316] vhci_hcd: stop threads [ 918.515171][T18316] vhci_hcd: release socket [ 918.522679][T18316] vhci_hcd: disconnect device [ 918.579955][ T6042] usb 48-1: device descriptor read/8, error -110 [ 918.721398][T20480] tipc: Enabling of bearer rejected, already enabled [ 919.003744][ T6042] usb usb48-port1: attempt power cycle [ 919.092332][T20484] ceph: No mds server is up or the cluster is laggy [ 919.239574][ T53] libceph: connect (1)[c::]:6789 error -101 [ 919.243782][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 920.912479][ T6042] usb usb48-port1: unable to enumerate USB device [ 920.924638][T20503] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 920.926709][T20503] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 920.999864][T20503] vhci_hcd vhci_hcd.0: Device attached [ 921.297156][T20508] vhci_hcd: connection closed [ 921.297657][ T1138] vhci_hcd: stop threads [ 921.301703][ T1138] vhci_hcd: release socket [ 921.303905][ T1138] vhci_hcd: disconnect device [ 921.338092][ T53] usb 42-1: enqueue for inactive port 0 [ 921.400844][T20519] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 921.402945][T20519] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 921.405813][T20519] vhci_hcd vhci_hcd.0: Device attached [ 921.522097][ T40] kauditd_printk_skb: 6106 callbacks suppressed [ 921.522108][ T40] audit: type=1326 audit(1757712352.395:7726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20525 comm="syz.4.2921" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707e598 code=0x7ffc0000 [ 921.545484][ T40] audit: type=1326 audit(1757712352.405:7727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20525 comm="syz.4.2921" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 921.575068][ T40] audit: type=1326 audit(1757712352.405:7728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20525 comm="syz.4.2921" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707e598 code=0x7ffc0000 [ 921.586307][ T40] audit: type=1326 audit(1757712352.405:7729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20525 comm="syz.4.2921" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 921.601118][ T40] audit: type=1326 audit(1757712352.405:7730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20525 comm="syz.4.2921" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 921.611889][ T40] audit: type=1326 audit(1757712352.405:7731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20525 comm="syz.4.2921" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 921.623626][ T40] audit: type=1326 audit(1757712352.405:7732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20525 comm="syz.4.2921" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707e598 code=0x7ffc0000 [ 921.632963][ T40] audit: type=1326 audit(1757712352.405:7733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20525 comm="syz.4.2921" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 921.643949][ T40] audit: type=1326 audit(1757712352.405:7734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20525 comm="syz.4.2921" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 921.651035][ T40] audit: type=1326 audit(1757712352.405:7735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20525 comm="syz.4.2921" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 921.712553][T20520] vhci_hcd: connection closed [ 921.713209][ T1138] vhci_hcd: stop threads [ 921.714746][T20532] input: syz1 as /devices/virtual/input/input100 [ 921.716070][ T1138] vhci_hcd: release socket [ 921.716130][ T1138] vhci_hcd: disconnect device [ 921.717615][ T29] usb 48-1: enqueue for inactive port 0 [ 921.838639][ T53] usb usb42-port1: attempt power cycle [ 922.017943][T16094] usb 44-1: device descriptor read/8, error -110 [ 922.238544][T20539] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 922.240690][T20539] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 922.243419][T20539] vhci_hcd vhci_hcd.0: Device attached [ 922.317398][ T53] usb 42-1: SetAddress Request (30) to port 0 [ 922.319455][ T53] usb 42-1: new SuperSpeed USB device number 30 using vhci_hcd [ 922.388197][ T29] usb usb48-port1: attempt power cycle [ 922.458337][T16094] usb usb44-port1: unable to enumerate USB device [ 922.611179][T20545] __nla_validate_parse: 1 callbacks suppressed [ 922.611191][T20545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2925'. [ 922.741233][T20540] vhci_hcd: connection reset by peer [ 922.745812][ T1138] vhci_hcd: stop threads [ 922.748320][ T1138] vhci_hcd: release socket [ 922.750464][ T1138] vhci_hcd: disconnect device [ 923.060062][T20553] syzkaller0: entered promiscuous mode [ 923.062096][T20553] syzkaller0: entered allmulticast mode [ 923.108089][ T29] usb usb48-port1: unable to enumerate USB device [ 924.569357][T20572] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 924.571941][T20572] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 924.575295][T20572] vhci_hcd vhci_hcd.0: Device attached [ 924.970652][T20573] vhci_hcd: connection closed [ 924.970872][ T12] vhci_hcd: stop threads [ 924.973934][ T12] vhci_hcd: release socket [ 924.975400][ T12] vhci_hcd: disconnect device [ 925.956561][T20590] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 925.959369][T20590] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 925.965635][T20590] vhci_hcd vhci_hcd.0: Device attached [ 926.123366][T20589] Process accounting resumed [ 926.201146][T20591] vhci_hcd: connection closed [ 926.201376][ T1138] vhci_hcd: stop threads [ 926.214224][ T1138] vhci_hcd: release socket [ 926.216983][ T1138] vhci_hcd: disconnect device [ 926.240717][T20594] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2936'. [ 926.297455][T20594] tipc: Enabling of bearer rejected, already enabled [ 926.565214][ T10] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 926.591649][T20605] tipc: Enabling of bearer rejected, already enabled [ 926.756021][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 926.760959][ T10] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 926.766990][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.769461][ T10] usb 7-1: Product: syz [ 926.770769][ T10] usb 7-1: Manufacturer: syz [ 926.772216][ T10] usb 7-1: SerialNumber: syz [ 926.776003][ T10] usb 7-1: config 0 descriptor?? [ 927.111719][T20617] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 927.114336][T20617] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 927.118501][T20617] vhci_hcd vhci_hcd.0: Device attached [ 927.302828][T20596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.305945][T20596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.391938][ T53] usb 42-1: device descriptor read/8, error -110 [ 927.516121][ T53] usb usb42-port1: unable to enumerate USB device [ 927.578767][ T29] usb 48-1: SetAddress Request (43) to port 0 [ 927.581242][ T29] usb 48-1: new SuperSpeed USB device number 43 using vhci_hcd [ 927.766348][T20618] vhci_hcd: connection reset by peer [ 927.769040][ T1230] vhci_hcd: stop threads [ 927.770859][ T1230] vhci_hcd: release socket [ 927.772881][ T1230] vhci_hcd: disconnect device [ 928.422516][T20676] lo speed is unknown, defaulting to 1000 [ 928.425667][T20676] lo speed is unknown, defaulting to 1000 [ 928.915112][T20687] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 928.917217][T20687] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 928.919885][T20687] vhci_hcd vhci_hcd.0: Device attached [ 929.263729][T20691] netlink: 'syz.2.2948': attribute type 4 has an invalid length. [ 929.436566][T20699] tipc: Enabling of bearer rejected, already enabled [ 929.543672][T20688] vhci_hcd: connection closed [ 929.544852][ T13] vhci_hcd: stop threads [ 929.549796][ T13] vhci_hcd: release socket [ 929.551333][ T13] vhci_hcd: disconnect device [ 930.787178][T20713] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 930.791282][T20713] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.884350][T20713] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 930.887465][T20713] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.956530][T20713] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 930.959621][T20713] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.053609][T20713] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 931.057457][T20713] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.241230][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 931.245759][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.248908][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 931.252410][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.264043][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 931.266695][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.275997][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 931.279397][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.334382][T20725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.340886][T20725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.923263][T20738] blktrace: Concurrent blktraces are not allowed on nbd3 [ 932.689125][ T29] usb 48-1: device descriptor read/8, error -110 [ 932.990830][ C1] vcan0: j1939_tp_rxtimer: 0xffff888000e7b000: rx timeout, send abort [ 932.994119][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888000e7b000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 933.218538][ T29] usb usb48-port1: attempt power cycle [ 933.628387][T20751] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 933.630558][T20751] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 933.762081][T20751] vhci_hcd vhci_hcd.0: Device attached [ 933.851907][ T29] usb usb48-port1: unable to enumerate USB device [ 934.041079][ T53] usb 44-1: SetAddress Request (28) to port 0 [ 934.043097][ T53] usb 44-1: new SuperSpeed USB device number 28 using vhci_hcd [ 934.184631][T20752] vhci_hcd: connection reset by peer [ 934.186741][ T12] vhci_hcd: stop threads [ 934.188125][ T12] vhci_hcd: release socket [ 934.189671][ T12] vhci_hcd: disconnect device [ 935.160842][T20763] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 935.162931][T20763] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 935.181686][T20763] vhci_hcd vhci_hcd.0: Device attached [ 935.484994][T20771] tipc: Enabling of bearer rejected, failed to enable media [ 935.699109][T20764] vhci_hcd: connection closed [ 935.700835][T11789] vhci_hcd: stop threads [ 935.718081][T11789] vhci_hcd: release socket [ 935.722386][T11789] vhci_hcd: disconnect device [ 936.092833][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.818148][T20790] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 936.820225][T20790] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 936.831374][T20790] vhci_hcd vhci_hcd.0: Device attached [ 937.674294][T20791] vhci_hcd: connection closed [ 937.674595][ T1230] vhci_hcd: stop threads [ 937.678499][ T1230] vhci_hcd: release socket [ 937.680330][ T1230] vhci_hcd: disconnect device [ 938.322032][T20805] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 938.324121][T20805] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 938.330492][T20805] vhci_hcd vhci_hcd.0: Device attached [ 938.685376][T20806] vhci_hcd: connection closed [ 938.685592][ T1230] vhci_hcd: stop threads [ 938.688436][ T1230] vhci_hcd: release socket [ 938.689267][T16094] usb 42-1: SetAddress Request (31) to port 0 [ 938.692239][T16094] usb 42-1: new SuperSpeed USB device number 31 using vhci_hcd [ 938.692333][ T1230] vhci_hcd: disconnect device [ 938.709072][T16094] usb 42-1: enqueue for inactive port 0 [ 939.128917][ T53] usb 44-1: device descriptor read/8, error -110 [ 939.162279][T16094] usb usb42-port1: attempt power cycle [ 939.410682][T20818] ceph: No mds server is up or the cluster is laggy [ 939.606336][ T53] usb usb44-port1: attempt power cycle [ 939.829353][T16094] usb usb42-port1: unable to enumerate USB device [ 940.022227][T20835] netlink: 'syz.2.2976': attribute type 27 has an invalid length. [ 940.258203][T20835] bridge2: left promiscuous mode [ 940.272596][T20835] bridge3: left promiscuous mode [ 940.297069][T20835] bridge4: left allmulticast mode [ 940.326025][T20836] tipc: Enabling of bearer rejected, already enabled [ 940.334331][ T10] syz1: Port: 1 Link DOWN [ 940.388823][ T53] usb usb44-port1: unable to enumerate USB device [ 941.179219][T20848] lo speed is unknown, defaulting to 1000 [ 941.188338][T20848] lo speed is unknown, defaulting to 1000 [ 945.211641][T20906] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 945.213702][T20906] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 945.227373][T20906] vhci_hcd vhci_hcd.0: Device attached [ 945.238494][T20905] tipc: Enabling of bearer rejected, already enabled [ 945.506150][T16094] usb 44-1: SetAddress Request (32) to port 0 [ 945.508128][T16094] usb 44-1: new SuperSpeed USB device number 32 using vhci_hcd [ 945.597139][T20907] vhci_hcd: connection reset by peer [ 945.599992][ T1138] vhci_hcd: stop threads [ 945.601898][ T1138] vhci_hcd: release socket [ 945.603886][ T1138] vhci_hcd: disconnect device [ 945.774554][T20916] bridge6: entered promiscuous mode [ 946.043095][T20918] overlayfs: failed to clone upperpath [ 946.326778][ T5984] Bluetooth: hci1: command 0x0c1a tx timeout [ 946.472424][T20938] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2992'. [ 946.627214][T20939] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 946.629393][T20939] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 946.631719][T20939] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 946.633983][T20939] comedi comedi3: 8255: I/O port conflict (0xfff,4) [ 946.638104][T20939] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 946.640584][T20939] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 946.642824][T20939] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 946.645548][T20939] comedi comedi3: 8255: I/O port conflict (0x802,4) [ 946.650360][T20939] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 946.653297][T20939] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 946.656286][T20939] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 946.659154][T20939] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 946.661841][T20939] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 946.664274][T20939] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 946.666797][T20939] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 946.669540][T20939] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 948.258308][T20943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2993'. [ 949.752889][T20965] tipc: Enabling of bearer rejected, already enabled [ 950.564380][T16094] usb 44-1: device descriptor read/8, error -110 [ 950.825020][T20977] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 950.827090][T20977] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 950.829981][T20977] vhci_hcd vhci_hcd.0: Device attached [ 950.841406][ T40] kauditd_printk_skb: 388 callbacks suppressed [ 950.841416][ T40] audit: type=1326 audit(1757712381.730:8124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20973 comm="syz.4.3000" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 950.861246][ T40] audit: type=1326 audit(1757712381.740:8125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20973 comm="syz.4.3000" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 950.870607][ T40] audit: type=1326 audit(1757712381.750:8126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20973 comm="syz.4.3000" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 950.871032][T20976] ªªªªªª: renamed from wg2 [ 950.881467][ T40] audit: type=1326 audit(1757712381.750:8127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20973 comm="syz.4.3000" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 950.891177][ T40] audit: type=1326 audit(1757712381.750:8128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20973 comm="syz.4.3000" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 950.900332][ T40] audit: type=1326 audit(1757712381.750:8129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20973 comm="syz.4.3000" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 950.907337][ T40] audit: type=1326 audit(1757712381.750:8130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20973 comm="syz.4.3000" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 950.915334][ T40] audit: type=1326 audit(1757712381.750:8131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20973 comm="syz.4.3000" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 950.922849][ T40] audit: type=1326 audit(1757712381.750:8132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20973 comm="syz.4.3000" exe="/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 950.930331][ T40] audit: type=1326 audit(1757712381.750:8133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20973 comm="syz.4.3000" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 950.963439][T16094] usb usb44-port1: attempt power cycle [ 951.092949][ T29] usb 48-1: SetAddress Request (47) to port 0 [ 951.094926][ T29] usb 48-1: new SuperSpeed USB device number 47 using vhci_hcd [ 951.520763][T20978] vhci_hcd: connection reset by peer [ 951.523366][T16094] usb usb44-port1: unable to enumerate USB device [ 951.530566][ T13] vhci_hcd: stop threads [ 951.531994][ T13] vhci_hcd: release socket [ 951.542311][ T13] vhci_hcd: disconnect device [ 952.673827][T21007] netlink: 188 bytes leftover after parsing attributes in process `syz.5.3005'. [ 954.381115][T21026] tipc: Enabling of bearer rejected, already enabled [ 954.514457][T21027] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 954.516558][T21027] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 954.520433][T21027] vhci_hcd vhci_hcd.0: Device attached [ 954.792039][ T53] usb 42-1: SetAddress Request (35) to port 0 [ 954.794530][ T53] usb 42-1: new SuperSpeed USB device number 35 using vhci_hcd [ 955.107291][T21028] vhci_hcd: connection reset by peer [ 955.110691][ T13] vhci_hcd: stop threads [ 955.112290][ T13] vhci_hcd: release socket [ 955.114354][ T13] vhci_hcd: disconnect device [ 955.787958][T21041] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3011'. [ 956.479968][ T29] usb 48-1: device descriptor read/8, error -110 [ 956.880431][ T29] usb usb48-port1: attempt power cycle [ 957.140659][T21071] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 957.142768][T21071] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 957.145792][T21071] vhci_hcd vhci_hcd.0: Device attached [ 957.285915][T21077] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3017'. [ 957.440954][ T29] usb usb48-port1: unable to enumerate USB device [ 957.485789][ T5989] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 957.509413][ T5989] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 958.272428][T21073] vhci_hcd: connection closed [ 958.277434][ T12] vhci_hcd: stop threads [ 958.282793][ T12] vhci_hcd: release socket [ 958.285007][ T12] vhci_hcd: disconnect device [ 958.313007][T21087] tipc: Enabling of bearer rejected, failed to enable media [ 958.429649][T21090] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3020'. [ 958.844197][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 958.844218][ T40] audit: type=1326 audit(1757712389.424:8161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21092 comm="syz.4.3021" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x50000 [ 958.856390][ T40] audit: type=1326 audit(1757712389.424:8162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21092 comm="syz.4.3021" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x50000 [ 958.865795][ T40] audit: type=1326 audit(1757712389.424:8163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21092 comm="syz.4.3021" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x50000 [ 958.866593][T21090] hsr_slave_1 (unregistering): left promiscuous mode [ 958.876974][ T40] audit: type=1326 audit(1757712389.424:8164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21092 comm="syz.4.3021" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x50000 [ 958.889373][ T40] audit: type=1326 audit(1757712389.424:8165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21092 comm="syz.4.3021" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x50000 [ 958.898284][ T40] audit: type=1326 audit(1757712389.424:8166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21092 comm="syz.4.3021" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf707e579 code=0x50000 [ 958.907720][ T40] audit: type=1326 audit(1757712389.424:8167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21092 comm="syz.4.3021" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf707e579 code=0x50000 [ 958.914635][ T40] audit: type=1326 audit(1757712389.424:8168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21092 comm="syz.4.3021" exe="/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf707e579 code=0x50000 [ 958.924238][ T40] audit: type=1326 audit(1757712389.474:8169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21092 comm="syz.4.3021" exe="/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf707e579 code=0x50000 [ 959.191789][T21099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.195354][T21099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.621586][ T29] libceph: connect (1)[c::]:6789 error -101 [ 959.623563][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 959.668399][T21110] ceph: No mds server is up or the cluster is laggy [ 959.839017][ T53] usb 42-1: device descriptor read/8, error -110 [ 960.284642][ T53] usb usb42-port1: attempt power cycle [ 960.455663][T21130] vivid-004: disconnect [ 960.564695][T21131] tipc: Enabling of bearer rejected, already enabled [ 960.970527][T21127] vivid-004: reconnect [ 961.148818][ T53] usb usb42-port1: unable to enumerate USB device [ 961.210666][T21142] 9pnet_virtio: no channels available for device € [ 961.989759][T21167] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3033'. [ 962.595346][T21176] tipc: Cannot configure node identity twice [ 964.165933][T21201] tipc: Enabling of bearer rejected, failed to enable media [ 964.916073][ T5989] Bluetooth: hci3: unexpected event for opcode 0x200a [ 965.140710][ T5989] Bluetooth: hci3: unexpected cc 0x042d length: 1 < 7 [ 965.321165][T21232] netlink: 'syz.5.3049': attribute type 27 has an invalid length. [ 965.446353][T16761] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 965.605287][T16761] usb 8-1: Using ep0 maxpacket: 32 [ 965.608334][T16761] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 965.613737][T16761] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 965.616861][T16761] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 965.619461][T16761] usb 8-1: Product: syz [ 965.620772][T16761] usb 8-1: Manufacturer: syz [ 965.622273][T16761] usb 8-1: SerialNumber: syz [ 965.627959][T16761] usb 8-1: config 0 descriptor?? [ 965.630471][T21223] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 965.633446][T16761] hub 8-1:0.0: bad descriptor, ignoring hub [ 965.635946][T16761] hub 8-1:0.0: probe with driver hub failed with error -5 [ 966.103911][T21237] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 966.114000][T21237] ubi: mtd0 is already attached to ubi31 [ 966.299608][T21241] tipc: Enabling of bearer rejected, already enabled [ 966.730340][T21246] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 966.732443][T21246] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 966.735835][T21246] vhci_hcd vhci_hcd.0: Device attached [ 967.004917][ T29] usb 42-1: SetAddress Request (39) to port 0 [ 967.006990][ T29] usb 42-1: new SuperSpeed USB device number 39 using vhci_hcd [ 967.226940][T21247] vhci_hcd: connection reset by peer [ 967.229392][ T1230] vhci_hcd: stop threads [ 967.231069][ T1230] vhci_hcd: release socket [ 967.232948][ T1230] vhci_hcd: disconnect device [ 967.775100][T21267] vivid-000: disconnect [ 968.127199][T21266] vivid-000: reconnect [ 968.484548][ T53] usb 8-1: USB disconnect, device number 22 [ 970.731571][T21308] random: crng reseeded on system resumption [ 970.933479][T21310] lo: Caught tx_queue_len zero misconfig [ 971.244943][ T5989] Bluetooth: hci1: Malformed Event: 0x13 [ 972.157062][ T29] usb 42-1: device descriptor read/8, error -110 [ 972.438939][T21338] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3077'. [ 972.603257][ T29] usb usb42-port1: attempt power cycle [ 972.804104][ T5989] Bluetooth: hci3: Malformed LE Event: 0x0b [ 973.155996][T21357] random: crng reseeded on system resumption [ 973.228119][ T29] usb usb42-port1: unable to enumerate USB device [ 974.096538][T21373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3090'. [ 974.779151][T21384] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3092'. [ 976.588708][ T40] audit: type=1326 audit(1757712407.493:8170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21411 comm="syz.3.3101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 976.621455][ T40] audit: type=1326 audit(1757712407.493:8171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21411 comm="syz.3.3101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 976.628036][ T40] audit: type=1326 audit(1757712407.493:8172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21411 comm="syz.3.3101" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 976.635369][ T40] audit: type=1326 audit(1757712407.493:8173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21411 comm="syz.3.3101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 976.647147][ T40] audit: type=1326 audit(1757712407.503:8174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21411 comm="syz.3.3101" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 976.664351][ T40] audit: type=1326 audit(1757712407.503:8175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21411 comm="syz.3.3101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 976.675249][ T40] audit: type=1326 audit(1757712407.503:8176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21411 comm="syz.3.3101" exe="/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 976.692334][ T40] audit: type=1326 audit(1757712407.513:8177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21411 comm="syz.3.3101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 976.698932][ T40] audit: type=1326 audit(1757712407.513:8178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21411 comm="syz.3.3101" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 976.716729][ T40] audit: type=1326 audit(1757712407.513:8179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21411 comm="syz.3.3101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 977.463841][T21430] ªªªªªª: renamed from wg2 [ 977.666138][T21437] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3107'. [ 977.709501][T21439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3108'. [ 978.708837][ T5989] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 979.493852][T21467] tipc: Enabling of bearer rejected, already enabled [ 980.421830][T21486] tipc: Enabling of bearer rejected, already enabled [ 980.496221][ T5989] Bluetooth: hci4: Malformed LE Event: 0x0b [ 981.450802][T21508] tipc: Enabling of bearer rejected, already enabled [ 982.534169][ T5989] Bluetooth: hci1: Malformed LE Event: 0x0b [ 982.817890][T21545] tipc: Enabling of bearer rejected, already enabled [ 983.833787][T21559] tipc: Enabling of bearer rejected, failed to enable media [ 984.949445][T21584] tipc: Enabling of bearer rejected, already enabled [ 985.395207][T21597] tipc: Enabling of bearer rejected, failed to enable media [ 986.354587][T21624] netlink: 'syz.5.3171': attribute type 2 has an invalid length. [ 986.357319][T21624] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3171'. [ 986.507314][T21635] tipc: Enabling of bearer rejected, failed to enable media [ 987.028126][T21654] lo speed is unknown, defaulting to 1000 [ 987.031570][T21654] lo speed is unknown, defaulting to 1000 [ 989.350868][T21710] tipc: Enabling of bearer rejected, already enabled [ 989.544649][T21712] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 989.547155][T21712] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 989.550810][T21712] vhci_hcd vhci_hcd.0: Device attached [ 989.873518][ T53] usb 42-1: SetAddress Request (43) to port 0 [ 989.875461][ T53] usb 42-1: new SuperSpeed USB device number 43 using vhci_hcd [ 989.964562][T21722] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3203'. [ 990.119711][T21713] vhci_hcd: connection reset by peer [ 990.121573][ T1230] vhci_hcd: stop threads [ 990.126631][ T1230] vhci_hcd: release socket [ 990.203612][ T1230] vhci_hcd: disconnect device [ 990.610999][T21748] infiniband syz!: set active [ 990.613853][T21748] infiniband syz!: added team_slave_0 [ 990.637164][T21748] RDS/IB: syz!: added [ 990.638523][T21748] smc: adding ib device syz! with port count 1 [ 990.640483][T21748] smc: ib device syz! port 1 has pnetid [ 990.796843][T21752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3215'. [ 990.888826][T21758] IPVS: Error connecting to the multicast addr [ 991.418587][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 991.418600][ T40] audit: type=1800 audit(1757712422.330:8203): pid=21782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3223" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 993.134396][T21811] macsec1: entered allmulticast mode [ 993.136296][T21811] dummy0: entered allmulticast mode [ 993.145204][T21811] dummy0: left allmulticast mode [ 993.358844][T21824] tipc: Enabling of bearer rejected, already enabled [ 993.652973][T21836] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3238'. [ 993.653073][T21834] tipc: Enabled bearer , priority 0 [ 993.663998][T21834] syzkaller0: entered promiscuous mode [ 993.666135][T21834] syzkaller0: entered allmulticast mode [ 993.843482][T21842] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 993.845700][T21842] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 993.852149][T21842] vhci_hcd vhci_hcd.0: Device attached [ 994.326740][T21829] tipc: Resetting bearer [ 994.337782][T21829] tipc: Disabling bearer [ 994.434081][T21843] vhci_hcd: connection closed [ 994.434486][ T1230] vhci_hcd: stop threads [ 994.435107][T21852] tap0: tun_chr_ioctl cmd 1074025694 [ 994.436451][ T1230] vhci_hcd: release socket [ 994.445092][ T1230] vhci_hcd: disconnect device [ 994.940975][ T53] usb 42-1: device descriptor read/8, error -110 [ 995.402115][ T53] usb usb42-port1: attempt power cycle [ 995.497169][T21869] tipc: Enabling of bearer rejected, failed to enable media [ 995.539830][T21877] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 995.880127][ T34] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 995.991095][ T53] usb usb42-port1: unable to enumerate USB device [ 996.039313][T21895] netlink: 'syz.5.3258': attribute type 1 has an invalid length. [ 996.042264][T21895] netlink: 176 bytes leftover after parsing attributes in process `syz.5.3258'. [ 996.045670][T21895] netlink: 'syz.5.3258': attribute type 1 has an invalid length. [ 996.051626][ T34] usb 8-1: config 0 has an invalid interface number: 168 but max is 0 [ 996.054804][ T34] usb 8-1: config 0 has no interface number 0 [ 996.056761][ T34] usb 8-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 996.059748][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.075533][ T34] usb 8-1: config 0 descriptor?? [ 996.303610][ T5989] Bluetooth: hci3: Malformed LE Event: 0x0d [ 996.310618][ T34] usb 8-1: string descriptor 0 read error: -71 [ 996.321643][ T34] usb-storage 8-1:0.168: USB Mass Storage device detected [ 996.338516][ T34] usb-storage 8-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 996.418973][ T34] usb 8-1: USB disconnect, device number 23 [ 997.505013][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 997.509383][ T5989] Bluetooth: hci3: command 0x0405 tx timeout [ 998.059049][ T5984] Bluetooth: hci1: command 0x0c1a tx timeout [ 998.070794][T21935] tipc: Enabling of bearer rejected, failed to enable media [ 999.013389][T21969] tipc: Enabling of bearer rejected, already enabled [ 999.901310][T21995] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3291'. [ 1000.001302][ T5984] Bluetooth: hci1: unexpected event for opcode 0x200a [ 1000.101813][T22010] tipc: Enabling of bearer rejected, already enabled [ 1000.287878][T16761] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1000.290524][ T10] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1000.457793][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 1000.461928][T16761] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1000.465703][T16761] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1000.469754][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1000.473339][T16761] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1000.476649][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1000.479843][T16761] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1000.484065][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1000.488637][T16761] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1000.491491][T16761] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.494765][ T10] usb 8-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1000.497751][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.501043][T16761] usb 10-1: config 0 descriptor?? [ 1000.509886][ T10] usb 8-1: config 0 descriptor?? [ 1001.041283][ T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0458:5011.0019/input/input101 [ 1001.187770][T16761] usbhid 10-1:0.0: can't add hid device: -71 [ 1001.189741][T16761] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1001.203322][T16761] usb 10-1: USB disconnect, device number 7 [ 1001.210794][ T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0458:5011.0019/input/input102 [ 1001.236818][ T10] kye 0003:0458:5011.0019: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 1001.280516][ T10] usb 8-1: USB disconnect, device number 24 [ 1001.347117][T22036] fido_id[22036]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb8/8-1/report_descriptor': No such file or directory [ 1002.059140][T22045] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1002.061195][T22045] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1002.067515][T22045] vhci_hcd vhci_hcd.0: Device attached [ 1002.417170][ T53] usb 44-1: SetAddress Request (36) to port 0 [ 1002.419217][ T53] usb 44-1: new SuperSpeed USB device number 36 using vhci_hcd [ 1002.629887][T22046] vhci_hcd: connection reset by peer [ 1002.631794][T11789] vhci_hcd: stop threads [ 1002.633155][T11789] vhci_hcd: release socket [ 1002.634663][T11789] vhci_hcd: disconnect device [ 1003.455151][T22083] tipc: Enabling of bearer rejected, failed to enable media [ 1004.289851][T22103] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3327'. [ 1004.451286][T22114] tipc: Enabling of bearer rejected, already enabled [ 1005.429444][ T40] audit: type=1326 audit(1757712436.347:8204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22144 comm="syz.3.3340" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7fc00000 [ 1006.088368][ T40] audit: type=1326 audit(1757712437.008:8205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22144 comm="syz.3.3340" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f81579 code=0x7fc00000 [ 1006.535906][T22170] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1006.538725][T22170] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1006.542618][T22170] vhci_hcd vhci_hcd.0: Device attached [ 1007.098294][T22172] vhci_hcd: connection closed [ 1007.098636][T19663] vhci_hcd: stop threads [ 1007.102170][T19663] vhci_hcd: release socket [ 1007.104106][T19663] vhci_hcd: disconnect device [ 1007.343692][T22180] tipc: Enabling of bearer rejected, already enabled [ 1007.495143][ T53] usb 44-1: device descriptor read/8, error -110 [ 1007.757356][T22188] input: syz1 as /devices/virtual/input/input103 [ 1007.978695][ T53] usb usb44-port1: attempt power cycle [ 1008.885081][ T53] usb usb44-port1: unable to enumerate USB device [ 1012.699612][ T5989] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1014.955597][T22336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1014.960208][T22336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1015.156906][T22338] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3402'. [ 1016.540040][ T5984] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1017.383199][T22377] netlink: 'syz.4.3410': attribute type 4 has an invalid length. [ 1017.636654][T22397] overlayfs: failed to clone upperpath [ 1017.778010][T22403] tipc: Enabling of bearer rejected, failed to enable media [ 1018.460275][T22423] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3428'. [ 1018.651543][ T40] audit: type=1326 audit(1757712449.584:8206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22429 comm="syz.4.3431" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707e579 code=0x0 [ 1019.714248][T22462] tipc: Enabling of bearer rejected, already enabled [ 1021.192463][T22484] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1021.195174][T22484] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1021.199731][T22484] vhci_hcd vhci_hcd.0: Device attached [ 1021.567753][ T53] usb 42-1: SetAddress Request (47) to port 0 [ 1021.569827][ T53] usb 42-1: new SuperSpeed USB device number 47 using vhci_hcd [ 1021.720794][ T40] audit: type=1800 audit(1757712452.645:8207): pid=22501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3448" name="nullb0" dev="tmpfs" ino=1911 res=0 errno=0 [ 1021.914379][T22485] vhci_hcd: connection reset by peer [ 1021.916582][T11789] vhci_hcd: stop threads [ 1021.919527][T11789] vhci_hcd: release socket [ 1021.922587][T11789] vhci_hcd: disconnect device [ 1022.675456][T22519] loop6: detected capacity change from 0 to 524287999 [ 1023.110419][T22541] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1023.113145][T22541] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1023.117940][T22541] vhci_hcd vhci_hcd.0: Device attached [ 1023.361964][T22542] vhci_hcd: connection closed [ 1023.362198][T11789] vhci_hcd: stop threads [ 1023.365334][T11789] vhci_hcd: release socket [ 1023.366948][T11789] vhci_hcd: disconnect device [ 1023.968597][T22555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3468'. [ 1023.976403][T22555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3468'. [ 1024.964234][T22569] tipc: Enabling of bearer rejected, failed to enable media [ 1026.070205][T22582] tipc: Enabling of bearer rejected, failed to enable media [ 1026.604922][ T53] usb 42-1: device descriptor read/8, error -110 [ 1026.773238][T22589] tipc: Enabling of bearer rejected, failed to enable media [ 1026.989064][T22595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3478'. [ 1026.995455][ T53] usb usb42-port1: attempt power cycle [ 1027.555238][ T53] usb usb42-port1: unable to enumerate USB device [ 1027.683462][T22619] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1027.685606][T22619] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1027.689145][T22619] vhci_hcd vhci_hcd.0: Device attached [ 1027.949499][T22629] tipc: Enabled bearer , priority 0 [ 1027.961984][T22629] syzkaller0: entered promiscuous mode [ 1027.963729][T22629] syzkaller0: entered allmulticast mode [ 1028.004916][ T53] usb 42-1: SetAddress Request (51) to port 0 [ 1028.007192][ T53] usb 42-1: new SuperSpeed USB device number 51 using vhci_hcd [ 1028.240633][T22620] vhci_hcd: connection reset by peer [ 1028.244910][ T13] vhci_hcd: stop threads [ 1028.246315][ T13] vhci_hcd: release socket [ 1028.250396][ T13] vhci_hcd: disconnect device [ 1028.619265][T22623] tipc: Resetting bearer [ 1028.631467][T22623] tipc: Disabling bearer [ 1029.624593][T22657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1029.628933][T22657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1029.993425][T22661] overlayfs: failed to clone upperpath [ 1030.291326][T22676] netlink: 'syz.3.3502': attribute type 10 has an invalid length. [ 1030.296828][T22676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3502'. [ 1030.559101][T22683] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1030.561189][T22683] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1030.691085][T22683] vhci_hcd vhci_hcd.0: Device attached [ 1031.123300][ T29] usb 44-1: SetAddress Request (41) to port 0 [ 1031.126134][ T29] usb 44-1: new SuperSpeed USB device number 41 using vhci_hcd [ 1031.166680][T22684] vhci_hcd: connection reset by peer [ 1031.169846][T18316] vhci_hcd: stop threads [ 1031.171674][T18316] vhci_hcd: release socket [ 1031.173927][T18316] vhci_hcd: disconnect device [ 1031.545431][T22694] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1031.547498][T22694] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1031.554192][T22694] vhci_hcd vhci_hcd.0: Device attached [ 1031.789223][T22695] vhci_hcd: connection closed [ 1031.794040][T19663] vhci_hcd: stop threads [ 1031.799010][T19663] vhci_hcd: release socket [ 1031.801045][T19663] vhci_hcd: disconnect device [ 1031.891224][T16094] usb 48-1: enqueue for inactive port 0 [ 1032.211979][T12899] usb 8-1: new low-speed USB device number 25 using dummy_hcd [ 1032.373493][T12899] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1032.376773][T12899] usb 8-1: config 0 has no interface number 0 [ 1032.378787][T12899] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1032.382570][T12899] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1032.385898][T12899] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1032.389442][T12899] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.392753][T16094] usb usb48-port1: attempt power cycle [ 1032.394394][T12899] usb 8-1: config 0 descriptor?? [ 1032.397556][T22705] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1032.410448][T12899] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1032.619876][ T34] usb 8-1: USB disconnect, device number 25 [ 1032.899642][T22716] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1032.902176][T22716] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1032.906049][T22716] vhci_hcd vhci_hcd.0: Device attached [ 1033.032459][T16094] usb 48-1: SetAddress Request (54) to port 0 [ 1033.077355][T16094] usb 48-1: new SuperSpeed USB device number 54 using vhci_hcd [ 1033.082247][ T53] usb 42-1: device descriptor read/8, error -110 [ 1033.099345][T22717] vhci_hcd: connection reset by peer [ 1033.102433][ T13] vhci_hcd: stop threads [ 1033.103828][ T13] vhci_hcd: release socket [ 1033.105345][ T13] vhci_hcd: disconnect device [ 1033.596848][ T53] usb usb42-port1: attempt power cycle [ 1033.929287][T22739] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1033.932024][T22739] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1033.936041][T22739] vhci_hcd vhci_hcd.0: Device attached [ 1034.032142][ T53] usb 42-1: SetAddress Request (54) to port 0 [ 1034.035173][ T53] usb 42-1: new SuperSpeed USB device number 54 using vhci_hcd [ 1034.698149][T22740] vhci_hcd: connection reset by peer [ 1034.709481][T19663] vhci_hcd: stop threads [ 1034.712829][T19663] vhci_hcd: release socket [ 1034.714597][T19663] vhci_hcd: disconnect device [ 1035.085696][T22777] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3530'. [ 1035.508738][T22791] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1036.165562][T22801] orangefs_devreq_write_iter: total:0: must be at least:8240: [ 1036.200218][ T29] usb 44-1: device descriptor read/8, error -110 [ 1036.298943][T22808] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3540'. [ 1036.601570][ T29] usb usb44-port1: attempt power cycle [ 1037.172311][ T29] usb usb44-port1: unable to enumerate USB device [ 1037.644225][T22842] netlink: 'syz.4.3552': attribute type 10 has an invalid length. [ 1037.647326][T22842] bond0: (slave wlan1): Opening slave failed [ 1038.119793][T16094] usb 48-1: device descriptor read/8, error -110 [ 1038.229055][T16094] usb usb48-port1: unable to enumerate USB device [ 1039.079323][ T53] usb 42-1: device descriptor read/8, error -110 [ 1039.188850][ T53] usb usb42-port1: unable to enumerate USB device [ 1040.187404][T22900] tipc: Enabled bearer , priority 0 [ 1040.193607][T22900] syzkaller0: entered promiscuous mode [ 1040.195760][T22900] syzkaller0: entered allmulticast mode [ 1040.852621][T22893] tipc: Resetting bearer [ 1040.870174][T22893] tipc: Disabling bearer [ 1040.898809][T22907] dummy0: entered promiscuous mode [ 1040.901240][T22907] dummy0: entered allmulticast mode [ 1041.043459][T22915] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4217380366 (8434760732 ns) > initial count (8183498262 ns). Using initial count to start timer. [ 1041.056845][T22915] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1042.280294][T22938] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1042.282372][T22938] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1042.285261][T22938] vhci_hcd vhci_hcd.0: Device attached [ 1042.547424][ T53] usb 44-1: SetAddress Request (45) to port 0 [ 1042.549796][ T53] usb 44-1: new SuperSpeed USB device number 45 using vhci_hcd [ 1042.912273][T22939] vhci_hcd: connection reset by peer [ 1042.914248][ T13] vhci_hcd: stop threads [ 1042.915693][ T13] vhci_hcd: release socket [ 1042.917461][ T13] vhci_hcd: disconnect device [ 1043.666757][ T40] audit: type=1326 audit(1757712474.606:8208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22945 comm="syz.3.3585" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x0 [ 1045.076124][T22976] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3593'. [ 1045.079586][T22976] team0: Unable to change to the same mode the team is in [ 1047.151441][T23002] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1047.153564][T23002] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1047.157175][T23002] vhci_hcd vhci_hcd.0: Device attached [ 1047.444667][T16094] usb 42-1: SetAddress Request (55) to port 0 [ 1047.446727][T16094] usb 42-1: new SuperSpeed USB device number 55 using vhci_hcd [ 1047.634612][ T53] usb 44-1: device descriptor read/8, error -110 [ 1047.786564][T23003] vhci_hcd: connection reset by peer [ 1047.788881][ T1138] vhci_hcd: stop threads [ 1047.790398][ T1138] vhci_hcd: release socket [ 1047.792034][ T1138] vhci_hcd: disconnect device [ 1048.024940][ T53] usb usb44-port1: attempt power cycle [ 1048.585436][ T53] usb usb44-port1: unable to enumerate USB device [ 1049.969530][T23054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1049.973615][T23054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1050.646331][T23070] delete_channel: no stack [ 1050.745523][T23077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3624'. [ 1051.413199][ T5989] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1051.696000][T23114] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3634'. [ 1051.984887][T23119] tipc: Enabling of bearer rejected, failed to enable media [ 1052.145740][T23126] tipc: Enabled bearer , priority 0 [ 1052.148378][T23126] syzkaller0: entered promiscuous mode [ 1052.150123][T23126] syzkaller0: entered allmulticast mode [ 1052.157861][T23128] tipc: Enabled bearer , priority 0 [ 1052.160888][T23128] syzkaller0: entered promiscuous mode [ 1052.163190][T23128] syzkaller0: entered allmulticast mode [ 1052.187182][T23128] tipc: Resetting bearer [ 1052.190452][T23126] tipc: Resetting bearer [ 1052.194289][T23127] tipc: Resetting bearer [ 1052.208192][T23127] tipc: Disabling bearer [ 1052.216736][T23125] tipc: Resetting bearer [ 1052.231652][T23125] tipc: Disabling bearer [ 1052.508862][T23142] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1052.511167][T23142] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1052.515525][T16094] usb 42-1: device descriptor read/8, error -110 [ 1052.519775][T23142] vhci_hcd vhci_hcd.0: Device attached [ 1052.737477][T23149] tipc: Enabling of bearer rejected, already enabled [ 1052.769535][T23143] vhci_hcd: connection closed [ 1052.770503][ T1230] vhci_hcd: stop threads [ 1052.773616][ T1230] vhci_hcd: release socket [ 1052.775089][ T1230] vhci_hcd: disconnect device [ 1052.782096][ T53] usb 44-1: enqueue for inactive port 0 [ 1052.902424][T16094] usb usb42-port1: attempt power cycle [ 1053.272764][ T53] usb usb44-port1: attempt power cycle [ 1053.462916][T16094] usb usb42-port1: unable to enumerate USB device [ 1053.872383][ T53] usb usb44-port1: unable to enumerate USB device [ 1053.988769][T23169] tipc: Enabling of bearer rejected, failed to enable media [ 1054.248566][T23180] tipc: Enabling of bearer rejected, already enabled [ 1055.592842][T23197] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1055.595562][T23197] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1055.602214][T23197] vhci_hcd vhci_hcd.0: Device attached [ 1055.880612][ T53] usb 42-1: SetAddress Request (59) to port 0 [ 1055.882596][ T53] usb 42-1: new SuperSpeed USB device number 59 using vhci_hcd [ 1055.952388][T23203] tipc: Enabling of bearer rejected, already enabled [ 1056.409867][T23198] vhci_hcd: connection reset by peer [ 1056.411993][ T1230] vhci_hcd: stop threads [ 1056.413417][ T1230] vhci_hcd: release socket [ 1056.415015][ T1230] vhci_hcd: disconnect device [ 1057.100421][T23220] tipc: Enabled bearer , priority 0 [ 1057.106437][T23220] syzkaller0: entered promiscuous mode [ 1057.108638][T23220] syzkaller0: entered allmulticast mode [ 1057.127694][T23220] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 1057.138854][T23220] tipc: Resetting bearer [ 1057.145878][T23219] tipc: Resetting bearer [ 1057.160440][T23219] tipc: Disabling bearer [ 1057.193843][ T5989] block nbd2: Receive control failed (result -107) [ 1057.265462][T23223] block nbd2: shutting down sockets [ 1057.485123][T23231] tipc: Enabling of bearer rejected, already enabled [ 1057.635039][T23237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3666'. [ 1057.733711][T23239] vxcan1: entered allmulticast mode [ 1058.191435][T23245] tipc: Enabling of bearer rejected, already enabled [ 1058.573254][ T40] audit: type=1804 audit(1757712489.524:8209): pid=23254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3672" name="/newroot/377/bus/bus" dev="tmpfs" ino=1993 res=1 errno=0 [ 1058.923397][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.457480][T23267] tipc: Enabled bearer , priority 0 [ 1059.461528][T23267] syzkaller0: entered promiscuous mode [ 1059.463367][T23267] syzkaller0: entered allmulticast mode [ 1059.509360][T23267] tipc: Resetting bearer [ 1059.515782][T23266] tipc: Resetting bearer [ 1059.560727][T23266] tipc: Disabling bearer [ 1059.665607][ T5989] Bluetooth: hci1: unexpected event for opcode 0x0804 [ 1060.505899][T23285] tipc: Enabled bearer , priority 0 [ 1060.510743][T23285] syzkaller0: entered promiscuous mode [ 1060.512611][T23285] syzkaller0: entered allmulticast mode [ 1060.540238][T23285] tipc: Resetting bearer [ 1060.544333][T23284] tipc: Resetting bearer [ 1060.580541][T23284] tipc: Disabling bearer [ 1060.795670][ T40] audit: type=1326 audit(1757712491.735:8210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23288 comm="syz.4.3682" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 1060.817901][ T40] audit: type=1326 audit(1757712491.735:8211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23288 comm="syz.4.3682" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 1060.821803][T23297] lo speed is unknown, defaulting to 1000 [ 1060.824737][ T40] audit: type=1326 audit(1757712491.735:8212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23288 comm="syz.4.3682" exe="/syz-executor" sig=0 arch=40000003 syscall=352 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 1060.833487][ T40] audit: type=1326 audit(1757712491.735:8213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23288 comm="syz.4.3682" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 1060.833941][T23297] lo speed is unknown, defaulting to 1000 [ 1060.840403][ T40] audit: type=1326 audit(1757712491.735:8214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23288 comm="syz.4.3682" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 1060.840429][ T40] audit: type=1326 audit(1757712491.735:8215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23288 comm="syz.4.3682" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 1060.840450][ T40] audit: type=1326 audit(1757712491.735:8216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23288 comm="syz.4.3682" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 1060.840472][ T40] audit: type=1326 audit(1757712491.735:8217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23288 comm="syz.4.3682" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 1060.840494][ T40] audit: type=1326 audit(1757712491.735:8218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23288 comm="syz.4.3682" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 1060.919936][ T53] usb 42-1: device descriptor read/8, error -110 [ 1061.140783][T23299] tipc: Enabled bearer , priority 0 [ 1061.143671][T23299] syzkaller0: entered promiscuous mode [ 1061.145412][T23299] syzkaller0: entered allmulticast mode [ 1061.245055][T23299] tipc: Resetting bearer [ 1061.259122][T23298] tipc: Resetting bearer [ 1061.270898][T23298] tipc: Disabling bearer [ 1061.329383][ T53] usb usb42-port1: attempt power cycle [ 1061.605201][T23308] tipc: Enabled bearer , priority 0 [ 1061.608594][T23308] syzkaller0: entered promiscuous mode [ 1061.610398][T23308] syzkaller0: entered allmulticast mode [ 1061.909339][ T53] usb usb42-port1: unable to enumerate USB device [ 1062.232152][T23302] tipc: Resetting bearer [ 1062.271813][T23302] tipc: Disabling bearer [ 1063.494745][T23342] tipc: Enabling of bearer rejected, already enabled [ 1063.716424][ T5989] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1063.722607][ T5989] Bluetooth: hci1: Injecting HCI hardware error event [ 1063.725773][ T5989] Bluetooth: hci1: hardware error 0x00 [ 1065.352265][T23352] fuse: Unknown parameter 'groupuCG00000000000000000000' [ 1065.675225][T12899] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1065.785470][ T5989] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1065.845150][T12899] usb 8-1: Using ep0 maxpacket: 16 [ 1065.849885][T12899] usb 8-1: config 33 has 0 interfaces, different from the descriptor's value: 9 [ 1065.862046][T12899] usb 8-1: New USB device found, idVendor=1fd2, idProduct=6006, bcdDevice= 0.00 [ 1065.866273][T12899] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.919421][T23367] tipc: Enabled bearer , priority 0 [ 1065.924931][T23367] syzkaller0: entered promiscuous mode [ 1065.927666][T23367] syzkaller0: entered allmulticast mode [ 1066.079920][ T34] usb 8-1: USB disconnect, device number 26 [ 1066.537120][T23362] tipc: Resetting bearer [ 1066.549150][T23362] tipc: Disabling bearer [ 1066.877217][T23381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3704'. [ 1066.880052][T23381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3704'. [ 1067.818484][T23401] tipc: Enabling of bearer rejected, already enabled [ 1068.265787][T23408] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3711'. [ 1068.626319][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 1068.626335][ T40] audit: type=1326 audit(1757712499.579:8225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23416 comm="syz.5.3714" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1068.652960][ T40] audit: type=1326 audit(1757712499.579:8226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23416 comm="syz.5.3714" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1068.714778][ T40] audit: type=1326 audit(1757712499.579:8227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23416 comm="syz.5.3714" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1068.723440][ T40] audit: type=1326 audit(1757712499.579:8228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23416 comm="syz.5.3714" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1068.761456][ T40] audit: type=1326 audit(1757712499.579:8229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23416 comm="syz.5.3714" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1068.773658][ T40] audit: type=1326 audit(1757712499.579:8230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23416 comm="syz.5.3714" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1068.788124][ T40] audit: type=1326 audit(1757712499.579:8231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23416 comm="syz.5.3714" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1068.797307][ T40] audit: type=1326 audit(1757712499.579:8232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23416 comm="syz.5.3714" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1068.807383][ T40] audit: type=1326 audit(1757712499.579:8233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23416 comm="syz.5.3714" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1068.815949][ T40] audit: type=1326 audit(1757712499.579:8234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23416 comm="syz.5.3714" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1069.148478][T23429] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1073.938190][T23476] lo speed is unknown, defaulting to 1000 [ 1073.940681][T23476] lo speed is unknown, defaulting to 1000 [ 1074.244217][T23483] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 1074.246967][T23483] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1074.251038][T23483] vhci_hcd vhci_hcd.0: Device attached [ 1074.316464][T23484] vhci_hcd: connection closed [ 1074.391723][ T13] vhci_hcd: stop threads [ 1074.394679][ T13] vhci_hcd: release socket [ 1074.396569][ T13] vhci_hcd: disconnect device [ 1077.494880][T23518] lo speed is unknown, defaulting to 1000 [ 1077.497964][T23518] lo speed is unknown, defaulting to 1000 [ 1078.993090][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 1079.004094][ T40] audit: type=1804 audit(1757712509.954:8252): pid=23546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3741" name="/newroot/931/bus/bus" dev="tmpfs" ino=4958 res=1 errno=0 [ 1081.857125][ T10] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1082.017114][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 1082.029536][ T10] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 1082.032645][ T10] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1082.035480][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1082.038528][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1082.041799][ T10] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1082.045098][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1082.049247][ T10] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1082.052067][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.055837][ T10] usb 8-1: config 0 descriptor?? [ 1082.263813][ T10] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1082.269118][ T10] usb 8-1: USB disconnect, device number 27 [ 1082.273593][ T10] usblp0: removed [ 1082.485937][T23589] tipc: Enabling of bearer rejected, failed to enable media [ 1082.716722][T12899] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1082.876596][T12899] usb 8-1: Using ep0 maxpacket: 32 [ 1082.879995][T12899] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 1082.883124][T12899] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1082.887301][T12899] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1082.890781][T12899] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1082.894643][T12899] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1082.898636][T12899] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1082.903924][T12899] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1082.907582][T12899] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.914032][T12899] usb 8-1: config 0 descriptor?? [ 1083.122970][T12899] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1083.377900][ C0] usblp0: nonzero read bulk status received: -71 [ 1083.378629][ T34] usb 8-1: USB disconnect, device number 28 [ 1083.384359][T23579] usblp0: error -71 reading from printer [ 1083.394536][T23579] usblp0: removed [ 1083.412345][T23605] input: syz1 as /devices/virtual/input/input104 [ 1083.445258][ T40] audit: type=1326 audit(1757712514.396:8253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23604 comm="syz.5.3760" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1083.460290][ T40] audit: type=1326 audit(1757712514.396:8254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23604 comm="syz.5.3760" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1083.468205][ T40] audit: type=1326 audit(1757712514.396:8255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23604 comm="syz.5.3760" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1083.475732][ T40] audit: type=1326 audit(1757712514.396:8256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23604 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1083.486723][ T40] audit: type=1326 audit(1757712514.396:8257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23604 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1083.496083][ T40] audit: type=1326 audit(1757712514.396:8258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23604 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1083.505423][ T40] audit: type=1326 audit(1757712514.396:8259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23604 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1083.513873][ T40] audit: type=1326 audit(1757712514.396:8260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23604 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1083.521515][ T40] audit: type=1326 audit(1757712514.396:8261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23604 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1083.528192][T23610] tipc: Enabling of bearer rejected, failed to enable media [ 1084.696480][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 1084.696902][ T40] audit: type=1326 audit(1757712515.657:8271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23619 comm="syz.5.3764" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1084.706571][ T40] audit: type=1326 audit(1757712515.657:8272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23619 comm="syz.5.3764" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1084.715680][ T40] audit: type=1326 audit(1757712515.657:8273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23619 comm="syz.5.3764" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1084.723105][ T40] audit: type=1326 audit(1757712515.657:8274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23619 comm="syz.5.3764" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1084.733549][ T40] audit: type=1326 audit(1757712515.657:8275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23619 comm="syz.5.3764" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1084.758862][T23631] openvswitch: netlink: Flow key attr not present in new flow. [ 1084.813263][ T40] audit: type=1326 audit(1757712515.767:8276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23619 comm="syz.5.3764" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1084.823162][ T40] audit: type=1326 audit(1757712515.767:8277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23619 comm="syz.5.3764" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1084.832172][T23631] IPVS: Error connecting to the multicast addr [ 1085.232248][T23637] tipc: Enabling of bearer rejected, failed to enable media [ 1085.455511][ T5989] Bluetooth: hci3: command 0x0c1a tx timeout [ 1085.455551][T12899] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1085.460761][T12899] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 1086.214449][ T29] Process accounting resumed [ 1086.473936][T23660] tipc: Enabling of bearer rejected, already enabled [ 1087.534394][T12899] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1087.541191][T12899] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 1087.545551][ T5989] Bluetooth: hci4: command 0x0c1a tx timeout [ 1088.167407][T23689] tipc: Enabling of bearer rejected, failed to enable media [ 1088.898028][T23698] overlayfs: failed to resolve './file1': -2 [ 1089.451457][ T40] audit: type=1326 audit(1757712520.409:8278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23699 comm="syz.2.3782" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 1089.460817][ T40] audit: type=1326 audit(1757712520.419:8279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23699 comm="syz.2.3782" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70be598 code=0x7ffc0000 [ 1089.469693][ T40] audit: type=1326 audit(1757712520.419:8280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23699 comm="syz.2.3782" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70be598 code=0x7ffc0000 [ 1089.825611][T23713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3785'. [ 1090.837901][T23717] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3786'. [ 1091.215406][T23734] tipc: Enabling of bearer rejected, already enabled [ 1091.309189][T23732] cgroup: fork rejected by pids controller in /syz3 [ 1093.935643][T24210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3799'. [ 1094.210675][T24215] tipc: Enabling of bearer rejected, already enabled [ 1095.168596][ T40] kauditd_printk_skb: 271 callbacks suppressed [ 1095.168608][ T40] audit: type=1326 audit(1757712526.132:8552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24230 comm="syz.5.3806" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1095.179795][ T40] audit: type=1326 audit(1757712526.132:8553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24230 comm="syz.5.3806" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1095.199154][T24232] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3804'. [ 1095.221065][ T40] audit: type=1326 audit(1757712526.132:8554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24230 comm="syz.5.3806" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1095.270058][ T40] audit: type=1326 audit(1757712526.132:8555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24230 comm="syz.5.3806" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1095.278880][ T40] audit: type=1326 audit(1757712526.132:8556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24230 comm="syz.5.3806" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1095.290930][ T40] audit: type=1326 audit(1757712526.132:8557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24230 comm="syz.5.3806" exe="/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1095.297694][ T40] audit: type=1326 audit(1757712526.132:8558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24230 comm="syz.5.3806" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1095.304602][ T40] audit: type=1326 audit(1757712526.132:8559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24230 comm="syz.5.3806" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1095.311899][ T40] audit: type=1326 audit(1757712526.132:8560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24230 comm="syz.5.3806" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1095.319131][ T40] audit: type=1326 audit(1757712526.142:8561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24230 comm="syz.5.3806" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1095.797623][T24243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3807'. [ 1096.461928][T24252] veth0_to_hsr: entered promiscuous mode [ 1096.464591][T24252] veth0_to_hsr: entered allmulticast mode [ 1096.483474][T24251] veth0_to_hsr: left allmulticast mode [ 1096.485887][T24251] veth0_to_hsr: left promiscuous mode [ 1096.545284][T24255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3811'. [ 1097.678307][T24266] orangefs_mount: mount request failed with -4 [ 1099.009933][T24281] lo speed is unknown, defaulting to 1000 [ 1099.014283][T24281] lo speed is unknown, defaulting to 1000 [ 1099.288698][T24293] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1099.290719][T24293] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1099.293449][T24293] vhci_hcd vhci_hcd.0: Device attached [ 1099.749182][T16094] usb 48-1: SetAddress Request (55) to port 0 [ 1099.751300][T16094] usb 48-1: new SuperSpeed USB device number 55 using vhci_hcd [ 1099.916448][T24294] vhci_hcd: connection reset by peer [ 1099.919510][ T13] vhci_hcd: stop threads [ 1099.921160][ T13] vhci_hcd: release socket [ 1099.922955][ T13] vhci_hcd: disconnect device [ 1101.755665][T24329] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20001 [ 1101.801251][T24323] tipc: Enabling of bearer rejected, failed to enable media [ 1104.806141][T16094] usb 48-1: device descriptor read/8, error -110 [ 1105.055044][T24364] lo speed is unknown, defaulting to 1000 [ 1105.058653][T24364] lo speed is unknown, defaulting to 1000 [ 1105.196353][T16094] usb usb48-port1: attempt power cycle [ 1105.605792][T24384] tipc: Enabled bearer , priority 0 [ 1105.608939][T24384] syzkaller0: entered promiscuous mode [ 1105.610681][T24384] syzkaller0: entered allmulticast mode [ 1105.766748][T16094] usb usb48-port1: unable to enumerate USB device [ 1106.105010][T24390] lo speed is unknown, defaulting to 1000 [ 1106.109207][T24390] lo speed is unknown, defaulting to 1000 [ 1106.233567][T24376] tipc: Resetting bearer [ 1106.265202][T24376] tipc: Disabling bearer [ 1106.719876][T24406] tipc: Enabled bearer , priority 0 [ 1106.724765][T24406] syzkaller0: entered promiscuous mode [ 1106.726591][T24406] syzkaller0: entered allmulticast mode [ 1107.453161][T24395] tipc: Resetting bearer [ 1107.899881][ T34] tipc: Node number set to 1 [ 1107.921299][T24395] tipc: Disabling bearer [ 1108.316851][T24423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1108.321616][T24423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1108.541472][T24423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1108.546202][T24423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1109.246216][T24434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3848'. [ 1109.850342][T24443] team0: Caught tx_queue_len zero misconfig [ 1111.563096][T24462] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1111.565157][T24462] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1111.571069][T24462] vhci_hcd vhci_hcd.0: Device attached [ 1111.702774][T24472] tipc: Enabled bearer , priority 0 [ 1111.707911][T24472] syzkaller0: entered promiscuous mode [ 1111.710356][T24472] syzkaller0: entered allmulticast mode [ 1111.802530][T16094] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 1111.994094][T24478] tipc: Enabling of bearer rejected, failed to enable media [ 1112.423751][T24463] tipc: Resetting bearer [ 1112.483049][T24463] tipc: Disabling bearer [ 1112.728137][T24465] vhci_hcd: connection reset by peer [ 1112.730625][ T13] vhci_hcd: stop threads [ 1112.732247][ T13] vhci_hcd: release socket [ 1112.733837][ T13] vhci_hcd: disconnect device [ 1112.948924][T24486] lo speed is unknown, defaulting to 1000 [ 1112.954477][T24486] lo speed is unknown, defaulting to 1000 [ 1113.394060][T24492] 9pnet_fd: Insufficient options for proto=fd [ 1114.288047][T24505] tipc: Enabling of bearer rejected, already enabled [ 1115.402068][T24526] tipc: Enabling of bearer rejected, failed to enable media [ 1115.622051][T24529] tipc: Enabling of bearer rejected, failed to enable media [ 1116.652239][T24541] lo speed is unknown, defaulting to 1000 [ 1116.656937][T24541] lo speed is unknown, defaulting to 1000 [ 1117.185681][T24545] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3870'. [ 1117.384639][T24549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3871'. [ 1117.389724][T16094] vhci_hcd: vhci_device speed not set [ 1118.318526][T24564] lo speed is unknown, defaulting to 1000 [ 1118.321508][T24564] lo speed is unknown, defaulting to 1000 [ 1118.355000][T24560] tipc: Enabling of bearer rejected, failed to enable media [ 1119.346652][T24578] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1119.348814][T24578] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1119.353291][T24578] vhci_hcd vhci_hcd.0: Device attached [ 1119.426879][T24579] tipc: Enabling of bearer rejected, failed to enable media [ 1119.598690][T16094] usb 43-1: new high-speed USB device number 3 using vhci_hcd [ 1119.883105][T24580] vhci_hcd: connection reset by peer [ 1119.886120][T11789] vhci_hcd: stop threads [ 1119.888200][T11789] vhci_hcd: release socket [ 1119.889968][T11789] vhci_hcd: disconnect device [ 1120.340283][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1120.608373][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 1120.608390][ T40] audit: type=1326 audit(1757712551.555:8570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24593 comm="syz.3.3881" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f81598 code=0x7ffc0000 [ 1120.633184][ T40] audit: type=1326 audit(1757712551.555:8571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24593 comm="syz.3.3881" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f81598 code=0x7ffc0000 [ 1120.647731][ T40] audit: type=1326 audit(1757712551.555:8572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24593 comm="syz.3.3881" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 1120.654456][ T40] audit: type=1326 audit(1757712551.555:8573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24593 comm="syz.3.3881" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 1120.662177][ T40] audit: type=1326 audit(1757712551.555:8574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24593 comm="syz.3.3881" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f81598 code=0x7ffc0000 [ 1120.672383][ T40] audit: type=1326 audit(1757712551.555:8575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24593 comm="syz.3.3881" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 1120.700541][ T40] audit: type=1326 audit(1757712551.555:8576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24593 comm="syz.3.3881" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 1120.757709][ T40] audit: type=1326 audit(1757712551.555:8577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24593 comm="syz.3.3881" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f81598 code=0x7ffc0000 [ 1120.764856][ T40] audit: type=1326 audit(1757712551.555:8578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24593 comm="syz.3.3881" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f81598 code=0x7ffc0000 [ 1120.771872][ T40] audit: type=1326 audit(1757712551.555:8579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24593 comm="syz.3.3881" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f81598 code=0x7ffc0000 [ 1123.207629][T24629] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1123.305989][T24635] tipc: Enabling of bearer rejected, already enabled [ 1124.718237][T16094] vhci_hcd: vhci_device speed not set [ 1125.919876][T24664] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3896'. [ 1126.937756][T24680] tipc: Enabling of bearer rejected, already enabled [ 1127.471107][T24689] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1127.473173][T24689] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1127.476696][T24689] vhci_hcd vhci_hcd.0: Device attached [ 1127.754665][ T29] usb 44-1: SetAddress Request (53) to port 0 [ 1127.756711][ T29] usb 44-1: new SuperSpeed USB device number 53 using vhci_hcd [ 1128.367235][T24690] vhci_hcd: connection reset by peer [ 1128.370972][ T13] vhci_hcd: stop threads [ 1128.372478][ T13] vhci_hcd: release socket [ 1128.376066][ T13] vhci_hcd: disconnect device [ 1129.433564][T24712] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3906'. [ 1130.590118][T24733] tipc: Enabling of bearer rejected, already enabled [ 1131.279353][T24747] tipc: Enabling of bearer rejected, failed to enable media [ 1131.626751][T24754] tipc: Enabled bearer , priority 0 [ 1131.631522][T24754] syzkaller0: entered promiscuous mode [ 1131.635011][T24754] syzkaller0: entered allmulticast mode [ 1132.268515][T24762] input: syz1 as /devices/virtual/input/input107 [ 1132.323735][T24750] tipc: Resetting bearer [ 1132.344318][T24750] tipc: Disabling bearer [ 1132.640849][T24768] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3918'. [ 1132.792012][ T29] usb 44-1: device descriptor read/8, error -110 [ 1133.137550][T24781] bridge2: entered promiscuous mode [ 1133.591109][ T29] usb usb44-port1: attempt power cycle [ 1134.151707][ T29] usb usb44-port1: unable to enumerate USB device [ 1134.505662][T24798] tipc: Enabling of bearer rejected, already enabled [ 1134.598945][T24803] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1134.601713][T24803] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1134.606641][T24803] vhci_hcd vhci_hcd.0: Device attached [ 1134.911407][ T29] usb 48-1: SetAddress Request (59) to port 0 [ 1134.913430][ T29] usb 48-1: new SuperSpeed USB device number 59 using vhci_hcd [ 1134.933794][ T40] kauditd_printk_skb: 272 callbacks suppressed [ 1134.933805][ T40] audit: type=1326 audit(1757712565.922:8852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24794 comm="syz.2.3924" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x0 [ 1134.972052][T24804] vhci_hcd: connection reset by peer [ 1134.974065][ T12] vhci_hcd: stop threads [ 1134.975479][ T12] vhci_hcd: release socket [ 1134.977298][ T12] vhci_hcd: disconnect device [ 1135.055305][T24812] tipc: Enabled bearer , priority 0 [ 1135.058121][T24812] syzkaller0: entered promiscuous mode [ 1135.060120][T24812] syzkaller0: entered allmulticast mode [ 1135.555533][T24819] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3929'. [ 1135.772178][T24808] tipc: Resetting bearer [ 1135.809459][T24808] tipc: Disabling bearer [ 1139.383881][T24859] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1139.386529][T24859] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1139.399167][T24859] vhci_hcd vhci_hcd.0: Device attached [ 1139.451253][T24864] netlink: 'syz.2.3939': attribute type 13 has an invalid length. [ 1139.454478][T24864] netlink: 'syz.2.3939': attribute type 17 has an invalid length. [ 1139.890194][T24862] vhci_hcd: connection closed [ 1139.890479][ T1230] vhci_hcd: stop threads [ 1139.894379][ T1230] vhci_hcd: release socket [ 1139.896450][ T1230] vhci_hcd: disconnect device [ 1139.964735][T24864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1139.973195][T24864] dummy0: left promiscuous mode [ 1139.985093][T24864] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1140.000885][T14900] syz1: Port: 1 Link ACTIVE [ 1140.002904][ T29] usb 48-1: device descriptor read/8, error -110 [ 1140.011085][ T1019] lo speed is unknown, defaulting to 1000 [ 1140.018572][ T1019] syz0: Port: 1 Link ACTIVE [ 1140.126163][ T40] audit: type=1804 audit(1757712571.105:8853): pid=24873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3941" name="bus" dev="tmpfs" ino=2722 res=1 errno=0 [ 1140.399463][ T29] usb usb48-port1: attempt power cycle [ 1140.728539][T24878] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3950'. [ 1140.850880][T24880] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3942'. [ 1140.969418][ T29] usb usb48-port1: unable to enumerate USB device [ 1141.368704][T24888] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3945'. [ 1142.411486][T24905] bridge1: entered promiscuous mode [ 1143.755404][T24930] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3958'. [ 1144.897769][T24948] tipc: Enabling of bearer rejected, already enabled [ 1149.220566][T25017] netlink: 'syz.3.3984': attribute type 13 has an invalid length. [ 1149.223209][T25017] netlink: 'syz.3.3984': attribute type 17 has an invalid length. [ 1149.826355][T25017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1149.845498][T25017] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1150.065078][ T53] lo speed is unknown, defaulting to 1000 [ 1150.067124][ T53] syz2: Port: 1 Link ACTIVE [ 1151.322944][T25044] tipc: Enabled bearer , priority 0 [ 1151.329035][T25044] syzkaller0: entered promiscuous mode [ 1151.330959][T25044] syzkaller0: entered allmulticast mode [ 1152.129398][T25040] tipc: Resetting bearer [ 1152.162652][T25040] tipc: Disabling bearer [ 1152.869860][T25069] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3996'. [ 1154.564893][T25090] tipc: Enabling of bearer rejected, already enabled [ 1157.691106][T25130] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1157.693728][T25130] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1157.697513][T25130] vhci_hcd vhci_hcd.0: Device attached [ 1157.989866][ T29] usb 42-1: SetAddress Request (63) to port 0 [ 1157.999746][ T29] usb 42-1: new SuperSpeed USB device number 63 using vhci_hcd [ 1159.104229][T25150] tipc: Enabling of bearer rejected, already enabled [ 1160.129513][T25131] vhci_hcd: connection reset by peer [ 1160.131668][T19663] vhci_hcd: stop threads [ 1160.133040][T19663] vhci_hcd: release socket [ 1160.134667][T19663] vhci_hcd: disconnect device [ 1160.235800][T25164] tipc: Enabling of bearer rejected, already enabled [ 1162.642413][T25199] tipc: Enabling of bearer rejected, already enabled [ 1163.097114][ T29] usb 42-1: device descriptor read/8, error -110 [ 1163.497813][ T29] usb usb42-port1: attempt power cycle [ 1163.687264][T25212] tipc: Enabling of bearer rejected, failed to enable media [ 1164.056949][ T29] usb usb42-port1: unable to enumerate USB device [ 1167.074688][ C2] hpet: Lost 1 RTC interrupts [ 1171.161114][T25316] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4052'. [ 1173.847070][T25354] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4062'. [ 1179.642218][T25429] tipc: Enabling of bearer rejected, failed to enable media [ 1181.732390][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1192.882912][T25629] tipc: Enabling of bearer rejected, already enabled [ 1196.540695][T25691] tipc: Enabling of bearer rejected, failed to enable media [ 1198.116366][T25709] debugfs: 'ttyS3' already exists in 'caif_serial' [ 1199.410709][T25759] tipc: Enabling of bearer rejected, failed to enable media [ 1200.522396][T25778] tipc: Enabling of bearer rejected, already enabled [ 1205.514535][T25936] tipc: Enabling of bearer rejected, already enabled [ 1208.849247][T26006] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4176'. [ 1209.965311][T26027] tipc: Enabling of bearer rejected, already enabled [ 1216.782909][T26082] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4195'. [ 1225.989410][T26217] tipc: Enabling of bearer rejected, failed to enable media [ 1231.192166][T26259] tipc: Enabling of bearer rejected, failed to enable media [ 1232.021326][T26282] tipc: Enabling of bearer rejected, failed to enable media [ 1235.359511][T26332] tipc: Enabling of bearer rejected, already enabled [ 1235.404057][T26331] tipc: Enabling of bearer rejected, already enabled [ 1237.071287][T26345] tipc: Enabled bearer , priority 0 [ 1237.074384][T26345] syzkaller0: entered promiscuous mode [ 1237.076488][T26345] syzkaller0: entered allmulticast mode [ 1238.868746][T26341] tipc: Resetting bearer [ 1238.917058][T26341] tipc: Disabling bearer [ 1240.257346][T26377] tipc: Enabling of bearer rejected, already enabled [ 1243.147385][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.257211][T26412] tipc: Enabled bearer , priority 0 [ 1244.263655][T26412] syzkaller0: entered promiscuous mode [ 1244.267789][T26412] syzkaller0: entered allmulticast mode [ 1257.538160][ T29] usb 7-1: USB disconnect, device number 30 [ 1257.556608][ T1420] ================================================================== [ 1257.560033][ T1420] BUG: KASAN: slab-use-after-free in handle_tx+0x5dc/0x630 [ 1257.563209][ T1420] Read of size 1 at addr ffff888050424490 by task aoe_tx0/1420 [ 1257.567958][ T1420] [ 1257.568999][ T1420] CPU: 2 UID: 0 PID: 1420 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 1257.569022][ T1420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1257.569034][ T1420] Call Trace: [ 1257.569041][ T1420] [ 1257.569049][ T1420] dump_stack_lvl+0x116/0x1f0 [ 1257.569078][ T1420] print_report+0xcd/0x630 [ 1257.569101][ T1420] ? __virt_addr_valid+0x81/0x610 [ 1257.569128][ T1420] ? __phys_addr+0xe8/0x180 [ 1257.569150][ T1420] ? handle_tx+0x5dc/0x630 [ 1257.569170][ T1420] kasan_report+0xe0/0x110 [ 1257.569193][ T1420] ? handle_tx+0x5dc/0x630 [ 1257.569216][ T1420] handle_tx+0x5dc/0x630 [ 1257.569239][ T1420] dev_hard_start_xmit+0x97/0x740 [ 1257.569265][ T1420] __dev_queue_xmit+0xa46/0x4490 [ 1257.569289][ T1420] ? lockdep_hardirqs_on+0x7c/0x110 [ 1257.569322][ T1420] ? finish_task_switch.isra.0+0x221/0xc10 [ 1257.569342][ T1420] ? rcu_is_watching+0x12/0xc0 [ 1257.569360][ T1420] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1257.569382][ T1420] ? __schedule+0x11a3/0x5de0 [ 1257.569406][ T1420] ? __lock_acquire+0xb97/0x1ce0 [ 1257.569435][ T1420] ? do_raw_spin_lock+0x12c/0x2b0 [ 1257.569466][ T1420] ? rcu_is_watching+0x12/0xc0 [ 1257.569490][ T1420] tx+0xcc/0x190 [ 1257.569516][ T1420] ? __pfx_tx+0x10/0x10 [ 1257.569539][ T1420] kthread+0x1e1/0x3e0 [ 1257.569565][ T1420] ? find_held_lock+0x2b/0x80 [ 1257.569582][ T1420] ? __pfx_kthread+0x10/0x10 [ 1257.569608][ T1420] ? __pfx_default_wake_function+0x10/0x10 [ 1257.569627][ T1420] ? lockdep_hardirqs_on+0x7c/0x110 [ 1257.569675][ T1420] ? __kthread_parkme+0x19e/0x250 [ 1257.569700][ T1420] ? __pfx_kthread+0x10/0x10 [ 1257.569722][ T1420] kthread+0x3c5/0x780 [ 1257.569746][ T1420] ? __pfx_kthread+0x10/0x10 [ 1257.569772][ T1420] ? rcu_is_watching+0x12/0xc0 [ 1257.569790][ T1420] ? __pfx_kthread+0x10/0x10 [ 1257.569816][ T1420] ret_from_fork+0x56d/0x730 [ 1257.569842][ T1420] ? __pfx_kthread+0x10/0x10 [ 1257.569866][ T1420] ret_from_fork_asm+0x1a/0x30 [ 1257.569893][ T1420] [ 1257.569900][ T1420] [ 1257.648387][ T1420] Allocated by task 20596: [ 1257.650123][ T1420] kasan_save_stack+0x33/0x60 [ 1257.651844][ T1420] kasan_save_track+0x14/0x30 [ 1257.653566][ T1420] __kasan_kmalloc+0xaa/0xb0 [ 1257.655252][ T1420] alloc_tty_struct+0x96/0x8c0 [ 1257.657129][ T1420] tty_init_dev.part.0+0x1e/0x500 [ 1257.659263][ T1420] tty_open+0xa50/0xf90 [ 1257.661071][ T1420] chrdev_open+0x234/0x6a0 [ 1257.662985][ T1420] do_dentry_open+0x982/0x1530 [ 1257.664990][ T1420] vfs_open+0x82/0x3f0 [ 1257.666775][ T1420] path_openat+0x1de4/0x2cb0 [ 1257.668789][ T1420] do_filp_open+0x20b/0x470 [ 1257.670685][ T1420] do_sys_openat2+0x11b/0x1d0 [ 1257.672647][ T1420] __ia32_compat_sys_openat+0x16d/0x210 [ 1257.675063][ T1420] __do_fast_syscall_32+0x7c/0x300 [ 1257.677366][ T1420] do_fast_syscall_32+0x32/0x80 [ 1257.679481][ T1420] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1257.682151][ T1420] [ 1257.683169][ T1420] Freed by task 16761: [ 1257.684867][ T1420] kasan_save_stack+0x33/0x60 [ 1257.686906][ T1420] kasan_save_track+0x14/0x30 [ 1257.688920][ T1420] kasan_save_free_info+0x3b/0x60 [ 1257.691053][ T1420] __kasan_slab_free+0x60/0x70 [ 1257.693003][ T1420] kfree+0x2b4/0x4d0 [ 1257.694668][ T1420] process_one_work+0x9cf/0x1b70 [ 1257.696719][ T1420] worker_thread+0x6c8/0xf10 [ 1257.698719][ T1420] kthread+0x3c5/0x780 [ 1257.700495][ T1420] ret_from_fork+0x56d/0x730 [ 1257.702467][ T1420] ret_from_fork_asm+0x1a/0x30 [ 1257.704532][ T1420] [ 1257.705580][ T1420] Last potentially related work creation: [ 1257.707976][ T1420] kasan_save_stack+0x33/0x60 [ 1257.710006][ T1420] kasan_record_aux_stack+0xa7/0xc0 [ 1257.712311][ T1420] insert_work+0x36/0x230 [ 1257.714272][ T1420] __queue_work+0x97e/0x1160 [ 1257.716200][ T1420] queue_work_on+0x1a4/0x1f0 [ 1257.718165][ T1420] release_tty+0x4de/0x5d0 [ 1257.720068][ T1420] tty_release_struct+0xb7/0xe0 [ 1257.722157][ T1420] tty_release+0xe2d/0x1430 [ 1257.724230][ T1420] __fput+0x402/0xb70 [ 1257.726169][ T1420] task_work_run+0x14d/0x240 [ 1257.728278][ T1420] do_exit+0x86f/0x2bf0 [ 1257.730108][ T1420] do_group_exit+0xd3/0x2a0 [ 1257.732032][ T1420] get_signal+0x2673/0x26d0 [ 1257.733987][ T1420] arch_do_signal_or_restart+0x8f/0x790 [ 1257.736293][ T1420] exit_to_user_mode_loop+0x84/0x110 [ 1257.738508][ T1420] __do_fast_syscall_32+0x240/0x300 [ 1257.740682][ T1420] do_fast_syscall_32+0x32/0x80 [ 1257.742790][ T1420] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1257.745430][ T1420] [ 1257.746476][ T1420] The buggy address belongs to the object at ffff888050424000 [ 1257.746476][ T1420] which belongs to the cache kmalloc-cg-2k of size 2048 [ 1257.752480][ T1420] The buggy address is located 1168 bytes inside of [ 1257.752480][ T1420] freed 2048-byte region [ffff888050424000, ffff888050424800) [ 1257.758328][ T1420] [ 1257.759375][ T1420] The buggy address belongs to the physical page: [ 1257.762056][ T1420] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x50420 [ 1257.765837][ T1420] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1257.769645][ T1420] memcg:ffff88804a770d01 [ 1257.771480][ T1420] anon flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 1257.774844][ T1420] page_type: f5(slab) [ 1257.776529][ T1420] raw: 04fff00000000040 ffff88801b84c140 0000000000000000 dead000000000001 [ 1257.780133][ T1420] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff88804a770d01 [ 1257.783883][ T1420] head: 04fff00000000040 ffff88801b84c140 0000000000000000 dead000000000001 [ 1257.787554][ T1420] head: 0000000000000000 0000000000080008 00000000f5000000 ffff88804a770d01 [ 1257.791092][ T1420] head: 04fff00000000003 ffffea0001410801 00000000ffffffff 00000000ffffffff [ 1257.794717][ T1420] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1257.798684][ T1420] page dumped because: kasan: bad access detected [ 1257.801326][ T1420] page_owner tracks the page as allocated [ 1257.803801][ T1420] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5982, tgid 5982 (syz-executor), ts 53828606140, free_ts 53822324502 [ 1257.812977][ T1420] post_alloc_hook+0x1c0/0x230 [ 1257.815119][ T1420] get_page_from_freelist+0x132b/0x38e0 [ 1257.817446][ T1420] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1257.819924][ T1420] alloc_pages_mpol+0x1fb/0x550 [ 1257.821590][ T1420] new_slab+0x247/0x330 [ 1257.823023][ T1420] ___slab_alloc+0xcf2/0x1750 [ 1257.824573][ T1420] __slab_alloc.constprop.0+0x56/0xb0 [ 1257.826514][ T1420] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 1257.828849][ T1420] kmemdup_noprof+0x29/0x60 [ 1257.830374][ T1420] neigh_sysctl_register+0xb2/0x670 [ 1257.831998][ T1420] devinet_sysctl_register+0xb6/0x200 [ 1257.833704][ T1420] inetdev_init+0x2b8/0x5a0 [ 1257.835135][ T1420] inetdev_event+0xc5f/0x18a0 [ 1257.836810][ T1420] notifier_call_chain+0xb9/0x410 [ 1257.838430][ T1420] call_netdevice_notifiers_info+0xbe/0x140 [ 1257.840257][ T1420] register_netdevice+0x182e/0x2270 [ 1257.841838][ T1420] page last free pid 5982 tgid 5982 stack trace: [ 1257.844013][ T1420] __free_frozen_pages+0x7d5/0x10f0 [ 1257.845793][ T1420] __put_partials+0x165/0x1c0 [ 1257.847342][ T1420] qlist_free_all+0x4d/0x120 [ 1257.849169][ T1420] kasan_quarantine_reduce+0x195/0x1e0 [ 1257.851497][ T1420] __kasan_slab_alloc+0x69/0x90 [ 1257.853573][ T1420] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 1257.856145][ T1420] kmalloc_reserve+0x18b/0x2c0 [ 1257.858417][ T1420] __alloc_skb+0x166/0x380 [ 1257.860387][ T1420] mpls_netconf_notify_devconf+0x4a/0x110 [ 1257.862746][ T1420] mpls_dev_sysctl_register+0x1c9/0x2a0 [ 1257.865019][ T1420] mpls_dev_notify+0x4ab/0xa20 [ 1257.867011][ T1420] notifier_call_chain+0xb9/0x410 [ 1257.869085][ T1420] call_netdevice_notifiers_info+0xbe/0x140 [ 1257.871634][ T1420] register_netdevice+0x182e/0x2270 [ 1257.873970][ T1420] veth_newlink+0x30f/0xa00 [ 1257.875994][ T1420] rtnl_newlink+0xc45/0x2000 [ 1257.877984][ T1420] [ 1257.879008][ T1420] Memory state around the buggy address: [ 1257.881087][ T1420] ffff888050424380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1257.884070][ T1420] ffff888050424400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1257.887645][ T1420] >ffff888050424480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1257.891198][ T1420] ^ [ 1257.893162][ T1420] ffff888050424500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1257.896496][ T1420] ffff888050424580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1257.899846][ T1420] ================================================================== [ 1257.904780][ C2] hpet: Lost 21 RTC interrupts [ 1257.907295][ T1420] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1257.910323][ T1420] CPU: 2 UID: 0 PID: 1420 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 1257.914073][ T1420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1257.918587][ T1420] Call Trace: [ 1257.920223][ T1420] [ 1257.921716][ T1420] dump_stack_lvl+0x3d/0x1f0 [ 1257.923948][ T1420] vpanic+0x6e8/0x7a0 [ 1257.925621][ T1420] ? __pfx_vpanic+0x10/0x10 [ 1257.927596][ T1420] ? handle_tx+0x5dc/0x630 [ 1257.929449][ T1420] panic+0xca/0xd0 [ 1257.931053][ T1420] ? __pfx_panic+0x10/0x10 [ 1257.932949][ T1420] ? check_panic_on_warn+0x1f/0xb0 [ 1257.935131][ T1420] check_panic_on_warn+0xab/0xb0 [ 1257.937293][ T1420] end_report+0x107/0x170 [ 1257.939277][ T1420] kasan_report+0xee/0x110 [ 1257.941211][ T1420] ? handle_tx+0x5dc/0x630 [ 1257.943147][ T1420] handle_tx+0x5dc/0x630 [ 1257.944913][ T1420] dev_hard_start_xmit+0x97/0x740 [ 1257.947041][ T1420] __dev_queue_xmit+0xa46/0x4490 [ 1257.948921][ T1420] ? lockdep_hardirqs_on+0x7c/0x110 [ 1257.951038][ T1420] ? finish_task_switch.isra.0+0x221/0xc10 [ 1257.953139][ T1420] ? rcu_is_watching+0x12/0xc0 [ 1257.954746][ T1420] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1257.956541][ T1420] ? __schedule+0x11a3/0x5de0 [ 1257.958210][ T1420] ? __lock_acquire+0xb97/0x1ce0 [ 1257.960243][ T1420] ? do_raw_spin_lock+0x12c/0x2b0 [ 1257.962288][ T1420] ? rcu_is_watching+0x12/0xc0 [ 1257.964266][ T1420] tx+0xcc/0x190 [ 1257.965502][ T1420] ? __pfx_tx+0x10/0x10 [ 1257.966863][ T1420] kthread+0x1e1/0x3e0 [ 1257.968370][ T1420] ? find_held_lock+0x2b/0x80 [ 1257.970488][ T1420] ? __pfx_kthread+0x10/0x10 [ 1257.972454][ T1420] ? __pfx_default_wake_function+0x10/0x10 [ 1257.974867][ T1420] ? lockdep_hardirqs_on+0x7c/0x110 [ 1257.977017][ T1420] ? __kthread_parkme+0x19e/0x250 [ 1257.978769][ T1420] ? __pfx_kthread+0x10/0x10 [ 1257.980318][ T1420] kthread+0x3c5/0x780 [ 1257.981723][ T1420] ? __pfx_kthread+0x10/0x10 [ 1257.983299][ T1420] ? rcu_is_watching+0x12/0xc0 [ 1257.985229][ T1420] ? __pfx_kthread+0x10/0x10 [ 1257.986945][ T1420] ret_from_fork+0x56d/0x730 [ 1257.988529][ T1420] ? __pfx_kthread+0x10/0x10 [ 1257.990283][ T1420] ret_from_fork_asm+0x1a/0x30 [ 1257.992220][ T1420] [ 1257.994267][ T1420] Kernel Offset: disabled [ 1257.996145][ T1420] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:23:23 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88801b842780 RCX=ffff88801b842780 RDX=ffffea0001b21e40 RSI=ffffffff816c8668 RDI=0000000000000007 RBP=ffff88806c879780 RSP=ffffc9000410fa40 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffff88806dcb0108 R13=0000000000000000 R14=ffffc9000410fa78 R15=ffff88806dcb0248 RIP=ffffffff82208628 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f62d99b9880 ffffffff 00c00000 GS =0000 ffff8880974ba000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000056009dc18000 CR3=0000000024a08000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000031b000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcf80000 Opmask01=0000000087000000 Opmask02=00000000ffff7fdf Opmask03=0000000010400004 Opmask04=00000000fffff7ff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056009dc108b0 000056009dc108b0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056009dc2aa00 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056009dc183e0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056009dc14ad0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f62d9bf1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f62d9b52c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73752f322e646368 5f796d6d75642f6d 726f6674616c702f 736563697665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000002c1 0000000000337073 642f33647261632f 646e756f732f302e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80e8c6644aee903c 00005605fdc90aa5 0000000000000171 0000003230317475 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3432322c3332322c 3232322c3132322c 3032322c4533312c 4433312c4333312c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4233312c4133312c 3933312c3833312c 3733312c3633312c 3433312c3333312c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3133312c3033312c 3232312c3132316b 2c332c312c30652d 3130303065323031 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=1ffff1100d43b073 RBX=ffff88806a1d8380 RCX=ffffffff8197acbc RDX=ffffffff8baeb760 RSI=0000000000000004 RDI=ffff88806a1d8398 RBP=ffffc90006c3f598 RSP=ffffc90006c3f4b0 R8 =0000000000000001 R9 =fffff52000d87e84 R10=0000000000000206 R11=ffffffff9afdcc58 R12=0000000000000012 R13=ffff888072381be0 R14=dffffc0000000000 R15=1ffff92000d87e9a RIP=ffffffff84e8876a RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f62d99b9880 ffffffff 00c00000 GS =0000 ffff8880975ba000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f62d9b909c0 CR3=0000000059cdb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000000000 Opmask02=000000000101001f Opmask03=0000000010400004 Opmask04=00000000fffff7ff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000073656c75 722d76656475002f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff0f0e0d0c 0b0a090807060504 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f62d9b52c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 632f33647261632f 646e756f732f302e 303a312d372f312d 372f376273752f32 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 33436c6f72746e6f 632f33647261632f 646e756f732f302e 303a312d372f312d ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 372f376273752f32 2e6463685f796d6d 75642f6d726f6674 616c702f73656369 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056009dc116f0 000056009dc15740 000056009dc0d060 000056009dc09510 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056009dc1eba0 000056009dc15970 000056009dbfb5e0 000056009dc1aa10 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056009dc0da20 000056009dbface0 000056009dc0aa50 000056009dc1b530 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056009dc1ac90 000056009dc1d1e0 000056009dc05630 000056009dc1cf70 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8561cab5 RDI=ffffffff9b102740 RBP=ffffffff9b102700 RSP=ffffc900077bf458 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000074 R14=ffffffff9b102700 R15=ffffffff8561ca50 RIP=ffffffff8561cadf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c01300 GS =0000 ffff8880976ba000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000027 RBX=ffff888069cc0af0 RCX=00000000fffffffe RDX=0000000000000000 RSI=ffff888069cc0af0 RDI=ffff888069cc0af0 RBP=0000000000000000 RSP=ffffc90006c7f6f8 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000000 R12=ffff888069cc0af0 R13=ffff888069cc0000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8196efd3 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977ba000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7425000 CR3=0000000057335000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000020210058 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000