last executing test programs: 1m59.441628114s ago: executing program 3 (id=45): pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0xc00, 0x0) setxattr$trusted_overlay_nlink(0x0, &(0x7f0000000240), &(0x7f0000000280)={'U+', 0x6}, 0x16, 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x18, 0x3f9, 0x100, 0x70bd27, 0x25dfdbfb, {0x1001}}, 0x18}, 0x1, 0x0, 0x0, 0x20040094}, 0x80) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x3}, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha224-ssse3\x00'}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x1) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a32000000000500050000000000050004000000000014000780080008400000009008000640000600000d0003006c6973743a736574"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x3, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8010) 1m57.739066973s ago: executing program 3 (id=53): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x18024, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x1) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, 0x0) 1m57.737422518s ago: executing program 3 (id=54): pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0xc00, 0x0) setxattr$trusted_overlay_nlink(0x0, &(0x7f0000000240), &(0x7f0000000280)={'U+', 0x6}, 0x16, 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x18, 0x3f9, 0x100, 0x70bd27, 0x25dfdbfb, {0x1001}}, 0x18}, 0x1, 0x0, 0x0, 0x20040094}, 0x80) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x3}, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha224-ssse3\x00'}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x1) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a32000000000500050000000000050004000000000014000780080008400000009008000640000600000d0003006c6973743a736574"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x3, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8010) 1m56.490743696s ago: executing program 3 (id=60): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x8, [{}, {0x10}, {}, {0xfffffffc}, {}, {0x2000, 0x6}, {0x0, 0xd6}], 0x0, 0x7, 0x8}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x28200) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000040)={0x7fffffff, 0x0, 'client0\x00', 0xc, "97bb1c1b67dda3c1", "fb918b3c78e5e11c3586883b9d7aa028070de012a70c07003944ef5eedf58bdc", 0x31, 0x9c9e}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b032200e0ff25000200475400", 0xd, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r4, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000034c0), 0x0, 0x700, 0x0) sendfile(r5, r4, 0x0, 0x578410eb) sendmsg$nl_route(r2, 0x0, 0x0) eventfd2(0x3, 0x80001) 1m55.590294904s ago: executing program 3 (id=64): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m55.589204272s ago: executing program 3 (id=65): unshare(0x64000600) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd63"], 0xfdef) 1m40.567544817s ago: executing program 32 (id=65): unshare(0x64000600) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd63"], 0xfdef) 9.09850734s ago: executing program 1 (id=531): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffec5, 0x20004055, 0x0, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @null}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x20000000009) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mknod$loop(0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x80) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4138ae84, &(0x7f0000000c40)=@arm64={0x24, 0xf, 0x7, '\x00', 0x81}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10, 0x0, 0x6, 0x5, 0x0, 0x1, 0x0, 0xfe}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.057051299s ago: executing program 0 (id=537): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0xc048aec8, &(0x7f0000000740)={0x2, 0x0, @ioapic={0xeeef0000, 0xd1a, 0x9, 0xffff, 0x0, [{0x9, 0x4, 0x1, '\x00', 0x4}, {0x0, 0x6, 0x5, '\x00', 0xb}, {0x2, 0x2, 0xf, '\x00', 0x9}, {0x6, 0x0, 0xfc, '\x00', 0x81}, {0x9, 0x1, 0xf, '\x00', 0x80}, {0x23, 0x4, 0x7f}, {0x0, 0x8, 0x9, '\x00', 0x3}, {0xf, 0x6, 0x3}, {0x0, 0x2, 0xff, '\x00', 0x3}, {0x3, 0xb, 0x38}, {0x8, 0x7, 0x7, '\x00', 0xb}, {0xef, 0x0, 0x1, '\x00', 0x8}, {0x9, 0x1, 0x3, '\x00', 0x7}, {0x0, 0x3, 0xf, '\x00', 0x1}, {0x8, 0xe, 0x9, '\x00', 0x2}, {0x3}, {0x3, 0xc0, 0x6, '\x00', 0x2}, {0x8, 0x7, 0xd3, '\x00', 0x4}, {0x7, 0xd6, 0x5, '\x00', 0x9}, {0x94, 0x2, 0x2, '\x00', 0x5}, {0x1, 0x7f, 0x9, '\x00', 0x2}, {0x81, 0x8, 0x6, '\x00', 0x9}, {0x1, 0x5, 0xdd, '\x00', 0xab}, {0x1, 0x9, 0x9, '\x00', 0xc8}]}}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000040)=0xa45) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_io_uring_setup(0x34ef, &(0x7f0000000400)={0x0, 0x0, 0x1}, &(0x7f00000003c0), 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x1, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x3ff00000000) 6.996811271s ago: executing program 1 (id=538): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3}, 0xffff}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x4, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24008800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) r7 = syz_io_uring_setup(0x5b8, &(0x7f00000001c0)={0x0, 0x7b5f, 0x800, 0x6, 0xd4}, &(0x7f0000000240)=0x0, &(0x7f0000000b80)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000100)=0x8f19, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000280)=@IORING_OP_LINKAT={0x27, 0x40, 0x0, 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0xffffffffffffffff, 0x1400, 0x1}) io_uring_enter(r7, 0x775e, 0x0, 0x46, 0x0, 0xd8e418676acb4ab8) 6.750094146s ago: executing program 4 (id=539): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002d516009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[0x1], 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001180)=0x2000004) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r3, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chdir(&(0x7f00000001c0)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff6, 0x11, 0xffffffffffffffff, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = dup2(0xffffffffffffffff, r2) close_range(r5, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.990004405s ago: executing program 0 (id=540): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0xe, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xfffffeb4, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) read$FUSE(0xffffffffffffffff, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x29, 0x1, 0x10008000, 0x1ff, 0x2, 0x6, 0x8, 0x0, 0x0, 0x0, 0x3}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[0x1], 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000006c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000180)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000800)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x90) 5.814302551s ago: executing program 2 (id=541): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = io_uring_setup(0x79ae, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r2}) r4 = socket$inet6(0xa, 0x40000080806, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) listen(r4, 0x20000005) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001800), 0x80000, 0x0) read$FUSE(r7, &(0x7f0000003380)={0x2020}, 0x2020) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)=@deltaction={0xb0, 0x31, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe9}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe00}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) r8 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 5.80754825s ago: executing program 4 (id=542): r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0xa8) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) mount(&(0x7f0000000100)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='hfsplus\x00', 0x2, &(0x7f0000000300)='#\x03\x00') setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x2000, 0x2}, 0x14) listen(r3, 0x1ff) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r4, &(0x7f0000000500)="ab", 0x34000, 0x40, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x11012, r5, 0xffffd000) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x40084504, &(0x7f0000ffcffc)=0x4) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f00000002c0)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$sysctl(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000006a02"]) 5.080190166s ago: executing program 0 (id=543): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) r2 = socket$inet6(0xa, 0x805, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40008) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x800}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) getsockopt$bt_hci(r2, 0x84, 0x7b, 0x0, &(0x7f0000000040)=0x700) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f0000000000)='./file1/file3\x00', 0x1, 0x43) 4.638785042s ago: executing program 4 (id=544): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f000081c000/0x1000)=nil, 0x1000, 0x8, 0x1010, 0xffffffffffffffff, 0xab880000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x102, 0x0) sendfile(r4, r4, &(0x7f0000000000)=0x8, 0x4) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x7, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0205710, &(0x7f00000002c0)={0x1, 0xff, 0x1, 0x0, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xea99, 0x6f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000840}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write(r0, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) 4.637857424s ago: executing program 2 (id=545): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x801, 0x4000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) accept4$unix(r5, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x0) r6 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x800}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r9, 0xffffffffffffffff, 0x0) 4.176002249s ago: executing program 0 (id=546): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000000a1401002cbd7000ffdbdf25080001000003000008000300000000000800150001000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x24080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002380)={0xd8, 0x1403, 0x1, 0x70bd26, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gre0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'nr0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg1\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x84}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x58}}, 0x0) ptrace(0x10, 0x0) sched_setaffinity(0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x8, 0x0) waitid(0x1, 0x0, 0x0, 0x4, 0x0) 3.860797141s ago: executing program 1 (id=547): mkdir(&(0x7f0000000180)='./file1\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0xab3, 0x2d0142) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="0000001c151c439869e84ae70066d8ade0f5238dca6b"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pidfd_getfd(0xffffffffffffffff, r1, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x700, 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_require}]}) chdir(&(0x7f0000000140)='./bus\x00') 3.771250871s ago: executing program 4 (id=548): rt_sigprocmask(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0xcabc258ba52e7b, 0x48080) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000080), &(0x7f00000000c0)) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x20000000, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xf, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8341) ioctl$USBDEVFS_BULK(r5, 0x4008550d, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r6}, 0x10) 3.710422436s ago: executing program 0 (id=549): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=0xffffffffffffffff, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x1, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x40, 0x0) chdir(0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="24000000202001c859eb03acde575af0c38cac052b2a000000000085dbb01031fc5b4ffd59d74cff0be100000000180006755009000000a38dabb73d43db0b7c0000000000"], 0x24}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000020000103000000000000000002001400000000000000000008000200ac1414bb08000d00000000000800ed4162f5dc3b9d76129b77bce1bad70b00030000001400030070", @ANYRESOCT, @ANYRESOCT, @ANYRES64=r1, @ANYRES64=r4, @ANYRES16, @ANYRESDEC=r0], 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.831044772s ago: executing program 2 (id=550): mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK/file0\x00') r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount$9p_unix(&(0x7f0000000100)='\x00', &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001240)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x20040000) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) r2 = openat$vicodec0(0xffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0185648, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f909, 0x8002, '\x00', @p_u16=0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioperm(0x0, 0x7, 0x5) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/8, 0x8}], 0x1, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) syz_io_uring_setup(0x55de, &(0x7f0000000000)={0x0, 0x80000000}, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_io_uring_setup(0x1ce1, &(0x7f00000004c0)={0x0, 0x4, 0x2, 0x80002000, 0x3ae}, &(0x7f0000000100), &(0x7f00000002c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) 2.570476051s ago: executing program 2 (id=551): r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0xa8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x1) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) mount(&(0x7f0000000100)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='hfsplus\x00', 0x2, &(0x7f0000000300)='#\x03\x00') setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x2000, 0x2}, 0x14) listen(r3, 0x1ff) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r4, &(0x7f0000000500)="ab", 0x34000, 0x40, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x11012, r5, 0xffffd000) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x40084504, &(0x7f0000ffcffc)=0x4) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f00000002c0)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$sysctl(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000006a02"]) 2.410573538s ago: executing program 1 (id=552): socket(0x15, 0x5, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 2.250544238s ago: executing program 1 (id=553): socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000300)='./bus\x00', 0x15d) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r7 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) ftruncate(r7, 0x2008002) sendfile(r6, r7, 0x0, 0x80000001) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x14, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) 1.960664291s ago: executing program 0 (id=554): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x54, 0x9, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_ADT={0x40, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40841}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000200000095000000000000000000000000000000000056e784466031bc42d4586856fea8a5422128758d88b5f43ee3b332a35c3b4f0f8ff47260ea62853d6c32da7ab47bd1882e8a755a611da46443841e0d79fe0330b57fbc5ac7d4ca19fff93c4d5651a0958d43b5782b0bac60"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4004, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) openat$drirender128(0xffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000019100), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_open_procfs(0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000180)=0x6) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0xc, 0x9, 0x0, 0x0, @u64=0x6}]}, 0x38}}, 0xc000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180) write$cgroup_int(r4, &(0x7f0000000140)=0xfffffffffffff1a2, 0x12) syz_emit_ethernet(0x46, &(0x7f0000000f00)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0200", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x15, 0xd}}}}}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='personality\x00') lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)) 1.247900457s ago: executing program 4 (id=555): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000780)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) chdir(0x0) io_uring_setup(0x6e74, &(0x7f0000000180)={0x0, 0xaebc, 0x20, 0x2, 0x180}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) r5 = dup(r2) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 1.243284936s ago: executing program 2 (id=556): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@o_path={&(0x7f0000000400)='./file1\x00', 0x0, 0x10}, 0x14) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0xffffffffffffffff, 0x5, 0x8}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0x0, 0x1, 0x10}, 0xc) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xb}}, './file0\x00'}) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) connect$llc(r0, &(0x7f00000004c0)={0x1a, 0x302, 0x4a, 0xe3, 0xb, 0x24, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0x1}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000740)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x8, 0x3) socket$caif_seqpacket(0x25, 0x5, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="09000000170000000800000040"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "a4cd91", 0x9, 0xfc}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) 362.334178ms ago: executing program 1 (id=557): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x2001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) write$uinput_user_dev(r2, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88b, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x180d, 0x2, 0xae4d, 0x8000, 0x0, 0x3, 0x0, 0x0, 0xfffffffe], [0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x400, 0x0, 0xed0, 0x4000000], [0x0, 0x1, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff]}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 300.760379ms ago: executing program 2 (id=558): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket(0x5, 0x5, 0x0) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) socket$inet6_sctp(0xa, 0x5, 0x84) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r3 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r3, 0x0) ftruncate(r3, 0x51a9497) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x414}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000050a000/0x13000)=nil, 0x13000}, 0x1}) readv(r4, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/224, 0xe0}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) 0s ago: executing program 4 (id=559): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xb, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x7, 0xfffffffd}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x117, 0x0, 0x0, &(0x7f0000000200)) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x102) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, 0x0, 0x9590f6cc3aa755b6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000600)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x1, [0x0], [], [0x0, 0x0, 0x0, 0x3]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000100)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r9}) kernel console output (not intermixed with test programs): 947] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.917188][ T5947] bridge_slave_1: entered allmulticast mode [ 45.920420][ T5947] bridge_slave_1: entered promiscuous mode [ 45.975689][ T5958] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.978507][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.981597][ T5958] bridge_slave_0: entered allmulticast mode [ 45.984747][ T5958] bridge_slave_0: entered promiscuous mode [ 46.027628][ T5958] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.030415][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.033695][ T5958] bridge_slave_1: entered allmulticast mode [ 46.036956][ T5958] bridge_slave_1: entered promiscuous mode [ 46.056533][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.104320][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.129110][ T5958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.156971][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.159720][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.162760][ T5951] bridge_slave_0: entered allmulticast mode [ 46.165702][ T5951] bridge_slave_0: entered promiscuous mode [ 46.170295][ T5958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.203516][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.205610][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.207791][ T5955] bridge_slave_0: entered allmulticast mode [ 46.211078][ T5955] bridge_slave_0: entered promiscuous mode [ 46.228571][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.231211][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.233969][ T5951] bridge_slave_1: entered allmulticast mode [ 46.236998][ T5951] bridge_slave_1: entered promiscuous mode [ 46.255701][ T5958] team0: Port device team_slave_0 added [ 46.258440][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.261068][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.263950][ T5955] bridge_slave_1: entered allmulticast mode [ 46.266959][ T5955] bridge_slave_1: entered promiscuous mode [ 46.274247][ T5947] team0: Port device team_slave_0 added [ 46.297916][ T5958] team0: Port device team_slave_1 added [ 46.309959][ T5947] team0: Port device team_slave_1 added [ 46.321010][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.325009][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.371176][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.373273][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.381933][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.415382][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.419334][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.421416][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.428467][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.445639][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.448320][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.457987][ T5958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.464213][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.482844][ T5951] team0: Port device team_slave_0 added [ 46.499768][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.504654][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.514009][ T5958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.534120][ T5951] team0: Port device team_slave_1 added [ 46.547709][ T5955] team0: Port device team_slave_0 added [ 46.567810][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.569997][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.577489][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.583489][ T5955] team0: Port device team_slave_1 added [ 46.622876][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.624854][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.632281][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.647836][ T5947] hsr_slave_0: entered promiscuous mode [ 46.649792][ T5947] hsr_slave_1: entered promiscuous mode [ 46.654806][ T5958] hsr_slave_0: entered promiscuous mode [ 46.657544][ T5958] hsr_slave_1: entered promiscuous mode [ 46.660057][ T5958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.663490][ T5958] Cannot create hsr debugfs directory [ 46.713603][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.715578][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.722937][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.762441][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.764414][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.771952][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.813574][ T5951] hsr_slave_0: entered promiscuous mode [ 46.815669][ T5951] hsr_slave_1: entered promiscuous mode [ 46.817685][ T5951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.819803][ T5951] Cannot create hsr debugfs directory [ 46.880422][ T5955] hsr_slave_0: entered promiscuous mode [ 46.882772][ T5955] hsr_slave_1: entered promiscuous mode [ 46.884649][ T5955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.886750][ T5955] Cannot create hsr debugfs directory [ 47.057530][ T5947] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.064879][ T5947] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.083616][ T5947] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.090057][ T5947] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.120446][ T5958] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.126579][ T5958] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.135300][ T5958] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.145061][ T5958] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.173860][ T5951] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.178790][ T5951] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.185444][ T5951] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.195846][ T5951] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.226126][ T5955] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.235304][ T5955] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.240834][ T5955] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.248063][ T5955] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.304321][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.329263][ T5958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.339570][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.356891][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.359150][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.365681][ T5958] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.378029][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.380167][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.387085][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.389170][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.406230][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.412420][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.416907][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.419117][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.434998][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.448212][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.450329][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.462884][ T5955] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.466037][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.468065][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.473169][ T5953] Bluetooth: hci0: command tx timeout [ 47.475136][ T5953] Bluetooth: hci1: command tx timeout [ 47.488828][ T222] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.490838][ T222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.499635][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.502513][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.542592][ T5960] Bluetooth: hci2: command tx timeout [ 47.544562][ T5960] Bluetooth: hci3: command tx timeout [ 47.564497][ T5955] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.567597][ T5955] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.586594][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.606459][ T5947] veth0_vlan: entered promiscuous mode [ 47.614606][ T5947] veth1_vlan: entered promiscuous mode [ 47.633994][ T5947] veth0_macvtap: entered promiscuous mode [ 47.640022][ T5958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.643715][ T5947] veth1_macvtap: entered promiscuous mode [ 47.651109][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.668040][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.681968][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.693615][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.697990][ T5947] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.700977][ T5947] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.705101][ T5947] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.708327][ T5947] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.746182][ T5951] veth0_vlan: entered promiscuous mode [ 47.756507][ T5951] veth1_vlan: entered promiscuous mode [ 47.765882][ T5955] veth0_vlan: entered promiscuous mode [ 47.780282][ T5958] veth0_vlan: entered promiscuous mode [ 47.785639][ T5955] veth1_vlan: entered promiscuous mode [ 47.799353][ T5958] veth1_vlan: entered promiscuous mode [ 47.803535][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.805886][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.817308][ T5951] veth0_macvtap: entered promiscuous mode [ 47.826874][ T5951] veth1_macvtap: entered promiscuous mode [ 47.847207][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.849222][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.849642][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.853381][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.858252][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.860677][ T5955] veth0_macvtap: entered promiscuous mode [ 47.865603][ T5958] veth0_macvtap: entered promiscuous mode [ 47.877759][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.882250][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.887851][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.892558][ T5958] veth1_macvtap: entered promiscuous mode [ 47.899211][ T5955] veth1_macvtap: entered promiscuous mode [ 47.904088][ T5951] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.906665][ T5951] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.909046][ T5951] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.912050][ T5951] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.923405][ T5947] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 47.924121][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.930606][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.933521][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.936451][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.940002][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.946010][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.948885][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.952117][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.955634][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.959174][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.967302][ T5958] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.969789][ T5958] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.974428][ T5958] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.977025][ T5958] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.985052][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.987945][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.990674][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.994438][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.997303][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.000160][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.004202][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.013256][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.016202][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.018910][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.022012][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.024686][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.027502][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.031871][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.044137][ T5955] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.046727][ T5955] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.050051][ T5955] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.054219][ T5955] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.083569][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.086078][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.117864][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.121564][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.139091][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.142630][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.145582][ T104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.148989][ T104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.165578][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.167854][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.182360][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.185192][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.311496][ T5987] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 48.472049][ T25] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 48.486475][ T5987] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 48.489503][ T5987] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.492896][ T5987] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.495564][ T5987] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 48.500803][ T5987] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 48.505558][ T5987] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 48.507864][ T5987] usb 8-1: Manufacturer: syz [ 48.514285][ T5987] usb 8-1: config 0 descriptor?? [ 48.641592][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 48.649462][ T25] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 48.651810][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 48.655339][ T25] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 48.659224][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 48.664200][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 48.669128][ T25] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 48.672153][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 48.677292][ T25] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 48.680662][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 48.684987][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 48.692059][ T25] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 48.694633][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 48.696854][ T6044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.698418][ T25] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 48.701834][ T6044] batadv_slave_0: entered promiscuous mode [ 48.705128][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 48.710312][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 48.717041][ T25] usb 7-1: string descriptor 0 read error: -22 [ 48.719241][ T25] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 48.723672][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.733228][ T25] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 48.755215][ T6046] syz_tun: entered allmulticast mode [ 48.763112][ T6045] syz_tun: left allmulticast mode [ 48.848865][ T6050] /dev/nullb0: Can't open blockdev [ 48.926473][ T5987] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 48.928952][ T5987] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 48.936342][ T5987] appleir 0003:05AC:8243.0002: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 48.942347][ T25] usb 7-1: USB disconnect, device number 2 [ 49.461912][ T6014] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 49.541523][ T5953] Bluetooth: hci1: command tx timeout [ 49.543378][ T5953] Bluetooth: hci0: command tx timeout [ 49.618920][ T6014] usb 5-1: config 1 has no interfaces? [ 49.621581][ T5960] Bluetooth: hci3: command tx timeout [ 49.621725][ T6014] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 49.623272][ T5960] Bluetooth: hci2: command tx timeout [ 49.626682][ T6014] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.841122][ T6072] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 49.848241][ T6014] usb 5-1: USB disconnect, device number 2 [ 50.033302][ T6077] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 50.591473][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 50.601547][ T25] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 50.751637][ T25] usb 7-1: Using ep0 maxpacket: 16 [ 50.755292][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.758395][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.761296][ T25] usb 7-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 50.763894][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.768962][ T25] usb 7-1: config 0 descriptor?? [ 51.079878][ T5987] usb 8-1: USB disconnect, device number 2 [ 51.190281][ T25] usbhid 7-1:0.0: can't add hid device: -71 [ 51.192678][ T25] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 51.199670][ T25] usb 7-1: USB disconnect, device number 3 [ 51.247207][ T6096] netlink: 'syz.3.33': attribute type 3 has an invalid length. [ 51.251128][ T6096] netlink: 92 bytes leftover after parsing attributes in process `syz.3.33'. [ 51.622300][ T5960] Bluetooth: hci0: command tx timeout [ 51.622464][ T5953] Bluetooth: hci1: command tx timeout [ 51.701602][ T5953] Bluetooth: hci2: command tx timeout [ 51.703745][ T5953] Bluetooth: hci3: command tx timeout [ 51.724022][ T39] audit: type=1326 audit(1739135931.650:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.0.36" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 51.730365][ T39] audit: type=1326 audit(1739135931.650:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.0.36" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 51.736970][ T39] audit: type=1326 audit(1739135931.650:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.0.36" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 51.744363][ T39] audit: type=1326 audit(1739135931.650:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.0.36" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 51.750757][ T39] audit: type=1326 audit(1739135931.650:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.0.36" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 51.760224][ T39] audit: type=1326 audit(1739135931.650:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.0.36" exe="/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 51.767649][ T39] audit: type=1326 audit(1739135931.650:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.0.36" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 51.774319][ T39] audit: type=1326 audit(1739135931.650:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.0.36" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 51.780516][ T39] audit: type=1326 audit(1739135931.650:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.0.36" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 51.788893][ T39] audit: type=1326 audit(1739135931.650:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.0.36" exe="/syz-executor" sig=0 arch=40000003 syscall=230 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 52.248381][ T6120] input: syz0 as /devices/virtual/input/input5 [ 52.408286][ T6125] block device autoloading is deprecated and will be removed. [ 52.954794][ T6136] lo: entered promiscuous mode [ 52.957429][ T6136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.47'. [ 53.044000][ T6136] bond0: (slave bond_slave_0): Releasing backup interface [ 53.118159][ T6134] lo: left promiscuous mode [ 53.296496][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 53.381913][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 53.391515][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 53.501425][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 53.551554][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 53.701621][ T5960] Bluetooth: hci0: command tx timeout [ 53.711520][ T5960] Bluetooth: hci1: command tx timeout [ 53.781976][ T5960] Bluetooth: hci3: command tx timeout [ 53.784114][ T5960] Bluetooth: hci2: command tx timeout [ 53.862341][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 54.051534][ T25] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 54.115658][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 54.201515][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 54.204646][ T25] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 54.207773][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 54.215226][ T25] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 54.219716][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 54.222833][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 54.226671][ T25] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 54.228790][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 54.234865][ T25] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 54.239178][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 54.243546][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 54.250319][ T25] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 54.258507][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 54.262928][ T25] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 54.266721][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 54.270791][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 54.280118][ T25] usb 7-1: string descriptor 0 read error: -22 [ 54.282133][ T25] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 54.285170][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.293170][ T25] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 54.498877][ T25] usb 7-1: USB disconnect, device number 4 [ 54.525223][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 54.832359][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 56.816242][ T6205] random: crng reseeded on system resumption [ 57.306249][ T6219] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.824538][ T39] kauditd_printk_skb: 217 callbacks suppressed [ 57.824556][ T39] audit: type=1326 audit(1739135937.750:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.0.74" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 57.835535][ T39] audit: type=1326 audit(1739135937.760:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.0.74" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 57.841702][ T39] audit: type=1326 audit(1739135937.760:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.0.74" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f255a7 code=0x7ffc0000 [ 57.847620][ T39] audit: type=1326 audit(1739135937.760:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.0.74" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 57.854566][ T39] audit: type=1326 audit(1739135937.760:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.0.74" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 57.862489][ T39] audit: type=1326 audit(1739135937.760:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.0.74" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 57.872329][ T39] audit: type=1326 audit(1739135937.760:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.0.74" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 57.878847][ T39] audit: type=1326 audit(1739135937.770:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.0.74" exe="/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 57.885435][ T39] audit: type=1326 audit(1739135937.770:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.0.74" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 57.891818][ T39] audit: type=1326 audit(1739135937.770:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.0.74" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 59.851542][ T56] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 60.041647][ T56] usb 5-1: Using ep0 maxpacket: 16 [ 60.045155][ T56] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.049247][ T56] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.052870][ T56] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 60.055482][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.059484][ T56] usb 5-1: config 0 descriptor?? [ 60.478341][ T56] usbhid 5-1:0.0: can't add hid device: -71 [ 60.480848][ T56] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 60.489865][ T56] usb 5-1: USB disconnect, device number 3 [ 61.541197][ T6276] input: syz0 as /devices/virtual/input/input6 [ 61.938354][ T6280] syz.2.92 uses obsolete (PF_INET,SOCK_PACKET) [ 62.217892][ T6283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.93'. [ 64.297368][ T6322] input: syz0 as /devices/virtual/input/input7 [ 65.009519][ T6330] Zero length message leads to an empty skb [ 65.937344][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.114'. [ 66.004885][ T6353] syz.2.116: attempt to access beyond end of device [ 66.004885][ T6353] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 66.026709][ T6353] FAT-fs (loop5): unable to read boot sector [ 66.326077][ T6366] input: syz0 as /devices/virtual/input/input8 [ 66.984210][ T6374] Driver unsupported XDP return value 0 on prog (id 22) dev N/A, expect packet loss! [ 67.040932][ T6377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.125'. [ 67.151255][ T5953] Bluetooth: Wrong link type (-71) [ 67.578686][ T6395] input: syz0 as /devices/virtual/input/input9 [ 68.082150][ T6399] netlink: 88 bytes leftover after parsing attributes in process `syz.1.132'. [ 68.084975][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.132'. [ 68.093268][ T56] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 68.206841][ T6404] netlink: 'syz.0.134': attribute type 1 has an invalid length. [ 68.220002][ T6404] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.252722][ T6404] bond1: (slave veth3): Enslaving as an active interface with a down link [ 68.255127][ T56] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 68.259260][ T56] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 68.262437][ T56] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 68.265175][ T56] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 68.267087][ T6404] bond1: (slave ip6erspan0): making interface the new active one [ 68.268792][ T56] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 68.268805][ T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.272537][ T56] usb 7-1: config 0 descriptor?? [ 68.274915][ T6404] ip6erspan0: entered promiscuous mode [ 68.279562][ T6404] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 68.691271][ T56] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 68.696749][ T56] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 69.558019][ T39] kauditd_printk_skb: 475 callbacks suppressed [ 69.558275][ T39] audit: type=1326 audit(1739135949.480:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.0.140" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 69.578621][ T39] audit: type=1326 audit(1739135949.480:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.0.140" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 69.584693][ T62] usb 7-1: USB disconnect, device number 5 [ 69.584848][ T39] audit: type=1326 audit(1739135949.490:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.0.140" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 69.594740][ T39] audit: type=1326 audit(1739135949.490:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.0.140" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f255a7 code=0x7ffc0000 [ 69.600575][ T39] audit: type=1326 audit(1739135949.490:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.0.140" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 69.606777][ T39] audit: type=1326 audit(1739135949.500:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.0.140" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 69.615163][ T39] audit: type=1326 audit(1739135949.500:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.0.140" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f255a7 code=0x7ffc0000 [ 69.620880][ T39] audit: type=1326 audit(1739135949.500:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.0.140" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 69.626885][ T39] audit: type=1326 audit(1739135949.500:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.0.140" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 69.634458][ T39] audit: type=1326 audit(1739135949.500:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.0.140" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 70.696715][ T6440] netlink: 24 bytes leftover after parsing attributes in process `syz.0.145'. [ 71.162969][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.164919][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.697974][ T5960] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.713358][ T5960] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.717891][ T5960] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.721422][ T5960] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.726043][ T5960] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.730290][ T5960] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.879838][ T6469] chnl_net:caif_netlink_parms(): no params data found [ 72.010907][ T6469] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.014589][ T6469] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.017497][ T6469] bridge_slave_0: entered allmulticast mode [ 72.022476][ T6469] bridge_slave_0: entered promiscuous mode [ 72.026344][ T6469] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.029138][ T6469] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.033128][ T6469] bridge_slave_1: entered allmulticast mode [ 72.035998][ T6469] bridge_slave_1: entered promiscuous mode [ 72.074736][ T6469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.081552][ T6469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.143847][ T6469] team0: Port device team_slave_0 added [ 72.146701][ T6469] team0: Port device team_slave_1 added [ 72.218233][ T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.228041][ T6469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.230114][ T6469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.238207][ T6469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.244119][ T6469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.247637][ T6469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.256193][ T6469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.301496][ T6469] hsr_slave_0: entered promiscuous mode [ 72.326116][ T6469] hsr_slave_1: entered promiscuous mode [ 72.328133][ T6469] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.333492][ T6469] Cannot create hsr debugfs directory [ 72.353524][ T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.425474][ T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.499498][ T63] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.535428][ T6469] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.542370][ T6469] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.550296][ T6469] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.559962][ T6469] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.665608][ T63] bridge_slave_1: left allmulticast mode [ 72.668317][ T63] bridge_slave_1: left promiscuous mode [ 72.672268][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.684196][ T63] bridge_slave_0: left allmulticast mode [ 72.686736][ T63] bridge_slave_0: left promiscuous mode [ 72.688919][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.031692][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.035903][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.039819][ T63] bond0 (unregistering): Released all slaves [ 73.062374][ T6469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.076824][ T6469] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.104420][ T222] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.107325][ T222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.127992][ T104] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.130222][ T104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.160960][ T5960] Bluetooth: Wrong link type (-71) [ 73.387491][ T6469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.407392][ T63] hsr_slave_0: left promiscuous mode [ 73.412166][ T63] hsr_slave_1: left promiscuous mode [ 73.415190][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.417969][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.424247][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.426397][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.445905][ T63] veth1_macvtap: left promiscuous mode [ 73.447733][ T63] veth0_macvtap: left promiscuous mode [ 73.449334][ T63] veth1_vlan: left promiscuous mode [ 73.450878][ T63] veth0_vlan: left promiscuous mode [ 73.784836][ T5960] Bluetooth: hci0: command tx timeout [ 73.908037][ T6536] input: syz0 as /devices/virtual/input/input11 [ 74.214244][ T63] team0 (unregistering): Port device team_slave_1 removed [ 74.276575][ T63] team0 (unregistering): Port device team_slave_0 removed [ 75.039530][ T6469] veth0_vlan: entered promiscuous mode [ 75.047345][ T6469] veth1_vlan: entered promiscuous mode [ 75.062109][ T6469] veth0_macvtap: entered promiscuous mode [ 75.068290][ T6469] veth1_macvtap: entered promiscuous mode [ 75.079768][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.083512][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.086332][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.089195][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.094539][ T6469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.101060][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.104869][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.108089][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.110987][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.120415][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.123847][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.128796][ T6469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.145825][ T6469] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.148293][ T6469] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.150692][ T6469] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.154789][ T6469] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.267901][ T222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.270735][ T222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.289082][ T1253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.289105][ T1253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.609177][ T39] kauditd_printk_skb: 815 callbacks suppressed [ 75.609190][ T39] audit: type=1326 audit(1739135955.530:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.4.151" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 75.623490][ T39] audit: type=1326 audit(1739135955.530:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.4.151" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 75.630661][ T39] audit: type=1326 audit(1739135955.530:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.4.151" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 75.638064][ T39] audit: type=1326 audit(1739135955.540:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.4.151" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 75.644924][ T39] audit: type=1326 audit(1739135955.550:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.4.151" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 75.651625][ T39] audit: type=1326 audit(1739135955.550:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.4.151" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f315a7 code=0x7ffc0000 [ 75.658482][ T39] audit: type=1326 audit(1739135955.550:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.4.151" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 75.666076][ T39] audit: type=1326 audit(1739135955.550:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.4.151" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f315a7 code=0x7ffc0000 [ 75.673129][ T39] audit: type=1326 audit(1739135955.550:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.4.151" exe="/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 75.679446][ T39] audit: type=1326 audit(1739135955.550:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.4.151" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 75.861419][ T5960] Bluetooth: hci0: command tx timeout [ 75.874084][ T6593] input input12: cannot allocate more than FF_MAX_EFFECTS effects [ 76.148392][ T6615] netlink: 'syz.2.170': attribute type 1 has an invalid length. [ 76.160742][ T6615] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.185763][ T6615] bond1: (slave veth3): Enslaving as an active interface with a down link [ 76.216931][ T6615] bond1: (slave ip6erspan0): making interface the new active one [ 76.219721][ T6615] ip6erspan0: entered promiscuous mode [ 76.223161][ T6615] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 76.398071][ T6627] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.619116][ T6649] mmap: syz.2.180 (6649) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 77.242775][ T6663] input: syz0 as /devices/virtual/input/input13 [ 77.582815][ T6670] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 77.584922][ T6670] overlayfs: failed to set xattr on upper [ 77.586521][ T6670] overlayfs: ...falling back to redirect_dir=nofollow. [ 77.588429][ T6670] overlayfs: ...falling back to index=off. [ 77.590203][ T6670] overlayfs: ...falling back to uuid=null. [ 77.607297][ T6670] evm: overlay not supported [ 77.929660][ T6672] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 77.941469][ T5960] Bluetooth: hci0: command tx timeout [ 79.581835][ T1253] ip6erspan0: left promiscuous mode [ 79.980903][ T6712] Bluetooth: MGMT ver 1.23 [ 80.021502][ T5960] Bluetooth: hci0: command tx timeout [ 80.704848][ T39] kauditd_printk_skb: 341 callbacks suppressed [ 80.704861][ T39] audit: type=1326 audit(1739135960.630:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.1.204" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 80.717937][ T39] audit: type=1326 audit(1739135960.640:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.1.204" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe5598 code=0x7ffc0000 [ 80.728460][ T39] audit: type=1326 audit(1739135960.640:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.1.204" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe5598 code=0x7ffc0000 [ 80.735263][ T39] audit: type=1326 audit(1739135960.640:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.1.204" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 80.741704][ T39] audit: type=1326 audit(1739135960.640:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.1.204" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe5598 code=0x7ffc0000 [ 80.747772][ T39] audit: type=1326 audit(1739135960.640:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.1.204" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 80.753865][ T39] audit: type=1326 audit(1739135960.640:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.1.204" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 80.759832][ T39] audit: type=1326 audit(1739135960.640:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.1.204" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 80.766496][ T39] audit: type=1326 audit(1739135960.640:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.1.204" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe5598 code=0x7ffc0000 [ 80.773155][ T39] audit: type=1326 audit(1739135960.640:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.1.204" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 81.392374][ T35] cfg80211: failed to load regulatory.db [ 82.347721][ T6762] netlink: 'syz.4.210': attribute type 1 has an invalid length. [ 82.350078][ T6762] netlink: 224 bytes leftover after parsing attributes in process `syz.4.210'. [ 82.869318][ T6786] input: syz0 as /devices/virtual/input/input14 [ 83.883947][ T56] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 84.034588][ T56] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 84.037109][ T56] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 84.040041][ T56] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 84.043327][ T56] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 84.046487][ T56] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 84.051293][ T56] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 84.054404][ T56] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 84.056786][ T56] usb 9-1: Product: syz [ 84.057993][ T56] usb 9-1: Manufacturer: syz [ 84.063392][ T56] cdc_wdm 9-1:1.0: skipping garbage [ 84.064922][ T56] cdc_wdm 9-1:1.0: skipping garbage [ 84.069084][ T56] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 84.070850][ T56] cdc_wdm 9-1:1.0: Unknown control protocol [ 84.078350][ T6804] input: syz0 as /devices/virtual/input/input15 [ 84.266150][ T25] usb 9-1: USB disconnect, device number 2 [ 84.921465][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 85.074368][ T9] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 85.077164][ T9] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 85.080174][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 85.083706][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 85.086999][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 85.093415][ T9] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 85.097146][ T9] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 85.100149][ T9] usb 9-1: Product: syz [ 85.102455][ T9] usb 9-1: Manufacturer: syz [ 85.119930][ T9] cdc_wdm 9-1:1.0: skipping garbage [ 85.122385][ T9] cdc_wdm 9-1:1.0: skipping garbage [ 85.132617][ T9] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 85.135726][ T9] cdc_wdm 9-1:1.0: Unknown control protocol [ 85.251353][ T6847] netlink: 28 bytes leftover after parsing attributes in process `syz.1.224'. [ 85.253844][ T6847] netlink: 'syz.1.224': attribute type 7 has an invalid length. [ 85.256064][ T6847] netlink: 'syz.1.224': attribute type 8 has an invalid length. [ 85.258433][ T6847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.224'. [ 85.265272][ T6847] bond0: entered promiscuous mode [ 85.266711][ T6847] bond_slave_0: entered promiscuous mode [ 85.268384][ T6847] bond_slave_1: entered promiscuous mode [ 85.270971][ T6847] erspan0: entered promiscuous mode [ 85.273167][ T6847] gretap0: entered promiscuous mode [ 85.493836][ T6862] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 85.673602][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.675397][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.677170][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.678981][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.680802][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.682760][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.684895][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.686586][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.689830][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.693637][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.695502][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.697247][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.698977][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.700761][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.702754][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.705099][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.706851][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.708440][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.711868][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.713866][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.715659][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.717253][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.718946][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.720763][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.722962][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.725126][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.727385][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.729760][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.731995][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.734380][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.736635][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.738909][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.740735][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.742603][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.744338][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.746197][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.747954][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.749604][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.751387][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.753058][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.754809][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.756549][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.758434][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.760040][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.761873][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.763522][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.765274][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.766952][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.768727][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.770343][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.772153][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.773744][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.775425][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.777070][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.778752][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.780349][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.782743][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.784361][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.786063][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.787688][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.789406][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.791059][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.792770][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.794486][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.796111][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.797894][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.799600][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.801515][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.803854][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.805895][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.807923][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.809527][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.811419][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.813013][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.814688][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.816309][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.818070][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.819653][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.821727][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.823565][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.825268][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.826908][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.828708][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.830322][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.832207][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.833873][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.835636][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.837315][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.839194][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.841204][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.843071][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.844739][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.846494][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.848145][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.849945][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.851703][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.853537][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.855175][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.857398][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.859522][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.862234][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.864325][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.866964][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.869259][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.871476][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.873845][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.875990][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.878243][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.880452][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.882244][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.883816][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.885559][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.887132][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.888894][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.890487][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.892264][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.893850][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.895573][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.897184][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.898947][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.901199][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.903585][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.905625][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.907197][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.908987][ C3] cdc_wdm 9-1:1.0: Stall on int endpoint [ 85.910683][ C3] cdc_wdm 9-1:1.0: Cannot schedule work [ 85.914507][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 85.918619][ T9] usb 9-1: USB disconnect, device number 3 [ 86.915382][ T6908] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 87.071309][ T39] kauditd_printk_skb: 438 callbacks suppressed [ 87.080339][ T39] audit: type=1326 audit(1739135966.990:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.2.237" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 87.086506][ T39] audit: type=1326 audit(1739135967.000:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.2.237" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 87.095701][ T39] audit: type=1326 audit(1739135967.000:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.2.237" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 87.102802][ T39] audit: type=1326 audit(1739135967.000:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.2.237" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 87.108905][ T39] audit: type=1326 audit(1739135967.000:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.2.237" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 87.117216][ T39] audit: type=1326 audit(1739135967.000:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.2.237" exe="/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 87.125643][ T39] audit: type=1326 audit(1739135967.000:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.2.237" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 87.132063][ T39] audit: type=1326 audit(1739135967.010:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.2.237" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 87.138086][ T39] audit: type=1326 audit(1739135967.010:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.2.237" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 87.145355][ T39] audit: type=1326 audit(1739135967.010:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.2.237" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 87.222788][ T6920] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.225291][ T6920] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.227836][ T6920] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.230675][ T6920] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.245301][ T6920] team0: Port device vxlan0 added [ 87.551656][ T5960] Bluetooth: hci0: command tx timeout [ 87.981741][ T1253] ip6erspan0: left promiscuous mode [ 88.437263][ T6979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.245'. [ 92.800166][ T39] kauditd_printk_skb: 108 callbacks suppressed [ 92.800201][ T39] audit: type=1326 audit(1739135972.720:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.0.260" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 92.808212][ T39] audit: type=1326 audit(1739135972.730:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.0.260" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 92.815679][ T39] audit: type=1326 audit(1739135972.750:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.0.260" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 92.824633][ T39] audit: type=1326 audit(1739135972.750:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.0.260" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f255a7 code=0x7ffc0000 [ 92.834483][ T39] audit: type=1326 audit(1739135972.750:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.0.260" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 92.841650][ T39] audit: type=1326 audit(1739135972.750:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.0.260" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f255a7 code=0x7ffc0000 [ 92.850014][ T39] audit: type=1326 audit(1739135972.750:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.0.260" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 92.858148][ T39] audit: type=1326 audit(1739135972.750:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.0.260" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 93.170097][ T39] audit: type=1326 audit(1739135972.750:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.0.260" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 93.175978][ T39] audit: type=1326 audit(1739135972.750:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.0.260" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 94.594001][ T7084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.268'. [ 94.691533][ T6016] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 94.863024][ T6016] usb 5-1: Using ep0 maxpacket: 16 [ 94.869245][ T6016] usb 5-1: config 1 has an invalid interface number: 118 but max is 0 [ 94.873363][ T6016] usb 5-1: config 1 has no interface number 0 [ 94.875770][ T6016] usb 5-1: config 1 interface 118 has no altsetting 0 [ 94.893539][ T7082] netlink: 28 bytes leftover after parsing attributes in process `syz.0.267'. [ 94.897024][ T7082] netlink: 28 bytes leftover after parsing attributes in process `syz.0.267'. [ 94.904532][ T7082] team0: entered promiscuous mode [ 94.906555][ T7082] team_slave_0: entered promiscuous mode [ 94.909357][ T7082] team_slave_1: entered promiscuous mode [ 94.913429][ T7082] bond0: entered promiscuous mode [ 94.915441][ T7082] bond_slave_1: entered promiscuous mode [ 94.918905][ T7082] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 94.922418][ T7082] Cannot create hsr debugfs directory [ 94.925221][ T7082] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 94.954082][ T6016] usb 5-1: string descriptor 0 read error: -71 [ 94.956570][ T6016] usb 5-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice=e2.32 [ 94.961902][ T6016] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.966563][ T6016] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 94.969838][ T6016] usb 5-1: no configuration chosen from 1 choice [ 94.973856][ T6016] usb 5-1: USB disconnect, device number 4 [ 95.614348][ T7104] netlink: 52 bytes leftover after parsing attributes in process `syz.4.272'. [ 96.323601][ T7112] netlink: 36 bytes leftover after parsing attributes in process `syz.1.274'. [ 96.331278][ T7112] netlink: 16 bytes leftover after parsing attributes in process `syz.1.274'. [ 96.351511][ T7112] netlink: 36 bytes leftover after parsing attributes in process `syz.1.274'. [ 96.354182][ T7112] netlink: 36 bytes leftover after parsing attributes in process `syz.1.274'. [ 97.357947][ T7134] process 'syz.2.280' launched './file0' with NULL argv: empty string added [ 97.613138][ T25] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 97.621443][ T1323] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 97.761480][ T25] usb 9-1: Using ep0 maxpacket: 16 [ 97.765382][ T25] usb 9-1: config 1 has an invalid interface number: 118 but max is 0 [ 97.768597][ T25] usb 9-1: config 1 has no interface number 0 [ 97.771111][ T25] usb 9-1: config 1 interface 118 has no altsetting 0 [ 97.783656][ T1323] usb 7-1: unable to get BOS descriptor or descriptor too short [ 97.786589][ T1323] usb 7-1: not running at top speed; connect to a high speed hub [ 97.787294][ T7137] netlink: 28 bytes leftover after parsing attributes in process `syz.4.281'. [ 97.791890][ T1323] usb 7-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 911, setting to 64 [ 97.792456][ T7137] netlink: 28 bytes leftover after parsing attributes in process `syz.4.281'. [ 97.795116][ T1323] usb 7-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.795132][ T1323] usb 7-1: config 1 interface 0 has no altsetting 0 [ 97.805473][ T1323] usb 7-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.40 [ 97.809228][ T1323] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.812024][ T1323] usb 7-1: Product: syz [ 97.813434][ T1323] usb 7-1: Manufacturer: syz [ 97.814979][ T1323] usb 7-1: SerialNumber: syz [ 97.821929][ T7134] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 97.822451][ T7137] team0: entered promiscuous mode [ 97.826306][ T7137] team_slave_0: entered promiscuous mode [ 97.828831][ T7137] team_slave_1: entered promiscuous mode [ 97.833773][ T7137] bond0: entered promiscuous mode [ 97.835901][ T7137] bond_slave_0: entered promiscuous mode [ 97.838354][ T7137] bond_slave_1: entered promiscuous mode [ 97.844288][ T7137] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 97.847406][ T7137] Cannot create hsr debugfs directory [ 97.850161][ T7137] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 97.906286][ T25] usb 9-1: string descriptor 0 read error: -71 [ 97.908869][ T25] usb 9-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice=e2.32 [ 97.913131][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.917410][ T25] usb 9-1: rejected 1 configuration due to insufficient available bus power [ 97.920630][ T25] usb 9-1: no configuration chosen from 1 choice [ 97.924176][ T25] usb 9-1: USB disconnect, device number 4 [ 98.074417][ T1323] usbhid 7-1:1.0: can't add hid device: -71 [ 98.079270][ T1323] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 98.080678][ T7146] input: syz0 as /devices/virtual/input/input16 [ 98.104430][ T1323] usb 7-1: USB disconnect, device number 6 [ 99.843976][ T7172] input: syz0 as /devices/virtual/input/input17 [ 100.671485][ T56] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 100.822693][ T56] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 100.825627][ T56] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 100.829290][ T56] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 100.832367][ T56] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 100.835485][ T56] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 100.840050][ T56] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 100.843137][ T56] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 100.845435][ T56] usb 9-1: Product: syz [ 100.847059][ T56] usb 9-1: Manufacturer: syz [ 100.851815][ T56] cdc_wdm 9-1:1.0: skipping garbage [ 100.853443][ T56] cdc_wdm 9-1:1.0: skipping garbage [ 100.857298][ T56] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 100.859273][ T56] cdc_wdm 9-1:1.0: Unknown control protocol [ 101.106065][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 101.106141][ T56] usb 9-1: USB disconnect, device number 5 [ 101.108247][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 101.111624][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 101.312621][ T7185] netlink: 100 bytes leftover after parsing attributes in process `syz.4.293'. [ 101.315224][ T7185] nbd: must specify at least one socket [ 101.320471][ T7185] capability: warning: `syz.4.293' uses 32-bit capabilities (legacy support in use) [ 101.905954][ T7200] input: syz0 as /devices/virtual/input/input18 [ 102.609971][ T7214] ALSA: mixer_oss: invalid OSS volume 'u' [ 103.431483][ T5991] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 103.472977][ T7236] batman_adv: batadv0: Adding interface: dummy0 [ 103.475510][ T7236] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.484987][ T7236] batman_adv: batadv0: Interface activated: dummy0 [ 103.497518][ T7236] batadv0: mtu less than device minimum [ 103.499959][ T7236] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 103.505389][ T7236] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 103.509629][ T7236] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 103.513231][ T7236] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 103.516827][ T7236] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 103.520397][ T7236] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 103.524047][ T7236] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 103.527670][ T7236] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 103.531300][ T7236] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 103.624115][ T5991] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 103.631450][ T5991] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 103.638269][ T5991] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 103.651490][ T5991] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 103.656786][ T5991] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 103.665989][ T5991] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 103.668891][ T5991] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 103.673278][ T5991] usb 5-1: Product: syz [ 103.675312][ T5991] usb 5-1: Manufacturer: syz [ 103.682480][ T5991] cdc_wdm 5-1:1.0: skipping garbage [ 103.684770][ T5991] cdc_wdm 5-1:1.0: skipping garbage [ 103.688059][ T5991] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 103.689838][ T5991] cdc_wdm 5-1:1.0: Unknown control protocol [ 103.886017][ T5991] usb 5-1: USB disconnect, device number 5 [ 104.537331][ T35] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 104.580764][ T7256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.309'. [ 104.710293][ T35] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 104.713572][ T35] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 104.716453][ T35] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 104.719094][ T35] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 104.722634][ T35] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 104.727830][ T35] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 104.730740][ T35] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 104.733237][ T35] usb 5-1: Product: syz [ 104.734636][ T35] usb 5-1: Manufacturer: syz [ 104.743245][ T35] cdc_wdm 5-1:1.0: skipping garbage [ 104.773395][ T35] cdc_wdm 5-1:1.0: skipping garbage [ 104.776836][ T35] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 104.779254][ T35] cdc_wdm 5-1:1.0: Unknown control protocol [ 105.201767][ T7273] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.206710][ T7273] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.322427][ T7278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.314'. [ 105.374321][ T7280] fuse: Unknown parameter 'Æ&0000000000000000000000000000000000000000' [ 105.401923][ T6016] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 105.513437][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.515121][ C3] cdc_wdm 5-1:1.0: Cannot schedule work [ 105.517237][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.519493][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.521518][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.523621][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.525471][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.527340][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.529168][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.530939][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.532783][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.534435][ C3] cdc_wdm 5-1:1.0: Cannot schedule work [ 105.536321][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.538373][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.540195][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.542063][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.543891][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.545730][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.547549][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.549516][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.551361][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.553184][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.554951][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.556814][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.558611][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.560505][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.562276][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.564118][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.565978][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.567777][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.569622][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.571505][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.573391][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.574609][ T7284] random: crng reseeded on system resumption [ 105.575171][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.580050][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.582166][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.583973][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.585942][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.587767][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.589252][ T7284] Restarting kernel threads ... [ 105.589560][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.591475][ T7284] done. [ 105.601540][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.607127][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.608852][ C3] cdc_wdm 5-1:1.0: Cannot schedule work [ 105.610644][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.612782][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.614563][ C3] cdc_wdm 5-1:1.0: Cannot schedule work [ 105.616458][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.618040][ C3] cdc_wdm 5-1:1.0: Cannot schedule work [ 105.619872][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.621646][ C3] cdc_wdm 5-1:1.0: Cannot schedule work [ 105.628164][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.630112][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.631930][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.633727][ C3] cdc_wdm 5-1:1.0: Cannot schedule work [ 105.636280][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.638409][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.640425][ C3] cdc_wdm 5-1:1.0: Cannot schedule work [ 105.642211][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.643784][ C3] cdc_wdm 5-1:1.0: Cannot schedule work [ 105.645856][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.647511][ C3] cdc_wdm 5-1:1.0: Cannot schedule work [ 105.649183][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.650715][ C3] cdc_wdm 5-1:1.0: Cannot schedule work [ 105.652477][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.654069][ C3] cdc_wdm 5-1:1.0: Cannot schedule work [ 105.656165][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.658583][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.660480][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.662286][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.664052][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.666039][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.667804][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.669565][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.671171][ C3] cdc_wdm 5-1:1.0: Cannot schedule work [ 105.672901][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.674579][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.676437][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.678911][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.681160][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.682938][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.684684][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.686535][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.688419][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.690203][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.692072][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.693870][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.695679][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.697424][ C3] cdc_wdm 5-1:1.0: Cannot schedule work [ 105.699729][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.701622][ C3] cdc_wdm 5-1:1.0: Cannot schedule work [ 105.704219][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.706028][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.707627][ C3] cdc_wdm 5-1:1.0: Cannot schedule work [ 105.709565][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.711163][ C3] cdc_wdm 5-1:1.0: Cannot schedule work [ 105.713169][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.714914][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.716586][ C3] cdc_wdm 5-1:1.0: Cannot schedule work [ 105.718292][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.720301][ C3] cdc_wdm 5-1:1.0: Cannot schedule work [ 105.722128][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.723865][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.725510][ C3] cdc_wdm 5-1:1.0: Cannot schedule work [ 105.727315][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.729091][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.731114][ C3] cdc_wdm 5-1:1.0: Cannot schedule work [ 105.732840][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.734578][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.736235][ C3] cdc_wdm 5-1:1.0: Cannot schedule work [ 105.737948][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.739695][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.741954][ C3] cdc_wdm 5-1:1.0: Cannot schedule work [ 105.743788][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.745604][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.747343][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.749604][ C3] cdc_wdm 5-1:1.0: Cannot schedule work [ 105.752845][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.755132][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.757591][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.759987][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.762386][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.764784][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.767168][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.768910][ C3] cdc_wdm 5-1:1.0: Cannot schedule work [ 105.770646][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.772590][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.774848][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.777080][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.778869][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.780624][ C3] cdc_wdm 5-1:1.0: Stall on int endpoint [ 105.783054][ T35] usb 5-1: USB disconnect, device number 6 [ 106.478630][ T7301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.320'. [ 106.491715][ T7301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.320'. [ 107.481439][ T1323] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 107.631563][ T1323] usb 7-1: Using ep0 maxpacket: 32 [ 107.710011][ T1323] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.713439][ T1323] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.716812][ T1323] usb 7-1: config 32 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 107.721465][ T1323] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 107.725906][ T1323] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.742166][ T7328] input: syz0 as /devices/virtual/input/input19 [ 108.218613][ T1323] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:32.0/0003:0458:5011.0004/input/input20 [ 108.287422][ T1323] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:32.0/0003:0458:5011.0004/input/input21 [ 108.322894][ T1323] kye 0003:0458:5011.0004: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 108.500114][ T5991] usb 7-1: USB disconnect, device number 7 [ 108.585100][ T7334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.328'. [ 108.640590][ T7336] fuse: Unknown parameter 'Æ&0000000000000000000000000000000000000000' [ 109.620516][ T7360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.757013][ T39] kauditd_printk_skb: 546 callbacks suppressed [ 109.757027][ T39] audit: type=1326 audit(1739398389.684:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7366 comm="syz.4.337" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 109.767614][ T39] audit: type=1326 audit(1739398389.684:3013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7366 comm="syz.4.337" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 109.775540][ T39] audit: type=1326 audit(1739398389.694:3014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7366 comm="syz.4.337" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 109.781186][ T39] audit: type=1326 audit(1739398389.694:3015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7366 comm="syz.4.337" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 109.788238][ T39] audit: type=1326 audit(1739398389.694:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7366 comm="syz.4.337" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 109.796094][ T39] audit: type=1326 audit(1739398389.694:3017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7366 comm="syz.4.337" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 109.803324][ T39] audit: type=1326 audit(1739398389.694:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7366 comm="syz.4.337" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f315a7 code=0x7ffc0000 [ 109.810459][ T39] audit: type=1326 audit(1739398389.694:3019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7366 comm="syz.4.337" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 109.823677][ T39] audit: type=1326 audit(1739398389.694:3020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7366 comm="syz.4.337" exe="/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 109.830676][ T39] audit: type=1326 audit(1739398389.694:3021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7366 comm="syz.4.337" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 110.147996][ T7372] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 114.399599][ T7435] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.488575][ T7435] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.588968][ T7435] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.699667][ T7435] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.868073][ T7435] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.874207][ T7435] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.880816][ T7435] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.886981][ T7435] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.311797][ T5953] Bluetooth: hci3: command 0x0405 tx timeout [ 116.143364][ T7448] netlink: 'syz.2.357': attribute type 2 has an invalid length. [ 117.462333][ T7485] input: syz0 as /devices/virtual/input/input22 [ 117.891672][ T6016] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 118.043076][ T6016] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 118.046604][ T6016] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 118.050310][ T6016] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.061428][ T6016] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.072168][ T6016] usb 5-1: config 0 descriptor?? [ 118.075272][ T6016] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 118.250041][ T7506] random: crng reseeded on system resumption [ 118.262672][ T7506] Restarting kernel threads ... done. [ 118.882399][ T7522] kernel profiling enabled (shift: 17) [ 119.085981][ T7526] tmpfs: Unknown parameter 'huged·.(nr_inodes' [ 119.408690][ T7532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.374'. [ 119.466560][ T7532] bridge_slave_0 (unregistering): left allmulticast mode [ 119.468707][ T7532] bridge_slave_0 (unregistering): left promiscuous mode [ 119.473692][ T7532] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.485318][ T7545] net_ratelimit: 10 callbacks suppressed [ 120.485333][ T7545] dccp_close: ABORT with 140 bytes unread [ 120.644669][ T7562] bridge_slave_1: left allmulticast mode [ 120.647530][ T7562] bridge_slave_1: left promiscuous mode [ 120.649709][ T7562] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.659111][ T7562] bond0: (slave bond_slave_0): Releasing backup interface [ 120.665109][ T7562] bond_slave_0: left promiscuous mode [ 120.672769][ T7562] bond0: (slave bond_slave_1): Releasing backup interface [ 120.677490][ T7562] bond_slave_1: left promiscuous mode [ 120.677585][ T6017] usb 5-1: USB disconnect, device number 7 [ 120.683117][ T7562] team_slave_0: left promiscuous mode [ 120.703955][ T7562] team0: Port device team_slave_0 removed [ 120.706156][ T7562] team_slave_1: left promiscuous mode [ 120.726514][ T7562] team0: Port device team_slave_1 removed [ 120.728711][ T7562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.730932][ T7562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.736276][ T7562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.738615][ T7562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.759365][ T7563] team0: Mode changed to "broadcast" [ 120.788358][ T7562] vlan0: entered promiscuous mode [ 120.804723][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.807246][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.808198][ T7562] team0: Port device vlan0 added [ 120.809826][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.813391][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.815659][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.817838][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.822067][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.824263][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x4 [ 120.826662][ T7562] tipc: Started in network mode [ 120.826944][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.831009][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.833401][ T7562] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 120.833497][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.836758][ T7562] tipc: Enabled bearer , priority 0 [ 120.838615][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.843171][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.847488][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.850484][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.853602][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.857065][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.861150][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.863727][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.866241][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.869138][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.872409][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.939593][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.941906][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.944253][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.946314][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.948410][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.950483][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.953615][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.956112][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.958425][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.960554][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.962727][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.964954][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.967090][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.969527][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.972275][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.975060][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.977874][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.980747][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.984682][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.997444][ T35] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz0] on syz0 [ 121.832481][ T5991] tipc: Node number set to 11578026 [ 122.715262][ T7603] syz.2.388 (7603): drop_caches: 2 [ 123.841370][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.119122][ T7633] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 126.792968][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.718163][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.982131][ T7685] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.985338][ T7685] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.035193][ T7685] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.038111][ T7685] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.199885][ T7685] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.203300][ T7685] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.271759][ T7685] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.275264][ T7685] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.368463][ T7685] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.372074][ T7685] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.382077][ T7685] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.385039][ T7685] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.390335][ T7685] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.393085][ T7685] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.398523][ T7685] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.400958][ T7685] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.603264][ T7701] netlink: 'syz.2.411': attribute type 10 has an invalid length. [ 128.605948][ T7701] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.609028][ T7701] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.617169][ T7701] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.619224][ T7701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.623067][ T7701] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.625132][ T7701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.629310][ T7701] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 128.743915][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.781569][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.863241][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.825972][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.128136][ T39] kauditd_printk_skb: 218 callbacks suppressed [ 131.128154][ T39] audit: type=1326 audit(1739398411.054:3240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.0.420" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 131.138374][ T39] audit: type=1326 audit(1739398411.054:3241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.0.420" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 131.150300][ T39] audit: type=1326 audit(1739398411.054:3242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.0.420" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 131.158924][ T39] audit: type=1326 audit(1739398411.064:3243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.0.420" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 131.169906][ T39] audit: type=1326 audit(1739398411.064:3244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.0.420" exe="/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 131.176657][ T39] audit: type=1326 audit(1739398411.064:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.0.420" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 131.187402][ T39] audit: type=1326 audit(1739398411.064:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.0.420" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 131.195495][ T39] audit: type=1326 audit(1739398411.064:3247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.0.420" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f255a7 code=0x7ffc0000 [ 131.202559][ T39] audit: type=1326 audit(1739398411.074:3248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.0.420" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 131.209215][ T39] audit: type=1326 audit(1739398411.074:3249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.0.420" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 131.862504][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.902952][ T7750] ./file0: Can't lookup blockdev [ 131.941656][ T835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.584675][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.912738][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.982397][ T6016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.942043][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.981854][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.021641][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.026993][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.446080][ T7818] loop9: detected capacity change from 0 to 8 [ 136.586212][ T7818] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 136.590072][ T7818] loop9: partition table partially beyond EOD, truncated [ 136.595749][ T7818] loop9: p1 size 81768186 extends beyond EOD, truncated [ 136.647045][ T7832] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 136.648664][ T7832] loop9: partition table partially beyond EOD, truncated [ 136.651119][ T7832] loop9: p1 size 81768186 extends beyond EOD, truncated [ 137.062548][ T1323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.172032][ T7857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.186366][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.247802][ T7860] input: syz0 as /devices/virtual/input/input23 [ 137.262584][ T7857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.265580][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.291819][ T7857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.308171][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.379608][ T7857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.389257][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.404316][ T7857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.999323][ T7869] netlink: 'syz.2.448': attribute type 12 has an invalid length. [ 138.636452][ T7876] bridge_slave_0: left allmulticast mode [ 138.638110][ T7876] bridge_slave_0: left promiscuous mode [ 138.639873][ T7876] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.645031][ T7876] bridge_slave_1: left allmulticast mode [ 138.646725][ T7876] bridge_slave_1: left promiscuous mode [ 138.649841][ T7876] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.655903][ T7876] bond0: (slave bond_slave_1): Releasing backup interface [ 138.658859][ T7876] bond_slave_1: left promiscuous mode [ 138.665591][ T7876] team_slave_0: left promiscuous mode [ 138.689133][ T7876] team0: Port device team_slave_0 removed [ 138.691254][ T7876] team_slave_1: left promiscuous mode [ 138.697367][ T7876] team0: Port device team_slave_1 removed [ 138.699636][ T7876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.705890][ T7876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.708088][ T7876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.718278][ T7876] bond1: (slave veth3): Releasing active interface [ 138.720179][ T7876] bond1: (slave veth3): the permanent HWaddr of slave - 5a:c2:8b:54:73:07 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 138.725840][ T7876] ip6erspan0: entered promiscuous mode [ 138.730431][ T7876] bond1: (slave ip6erspan0): Releasing active interface [ 138.733732][ T7876] ip6erspan0: left promiscuous mode [ 138.779440][ T7877] team0: Mode changed to "broadcast" [ 138.784333][ T7876] vlan0: entered promiscuous mode [ 138.794826][ T7876] team0: Port device vlan0 added [ 138.807428][ T7876] tipc: Started in network mode [ 138.809136][ T7876] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 138.815406][ T7876] tipc: Enabled bearer , priority 0 [ 138.924769][ T7881] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 139.414720][ T7887] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 139.943185][ T9] tipc: Node number set to 11578026 [ 140.121949][ T62] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 140.623452][ T7912] input: syz0 as /devices/virtual/input/input24 [ 140.922024][ T39] kauditd_printk_skb: 229 callbacks suppressed [ 140.922038][ T39] audit: type=1326 audit(1739398420.854:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.2.458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 140.930862][ T39] audit: type=1326 audit(1739398420.854:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.2.458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 140.937869][ T39] audit: type=1326 audit(1739398420.854:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.2.458" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 140.945061][ T39] audit: type=1326 audit(1739398420.854:3482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.2.458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 140.953609][ T39] audit: type=1326 audit(1739398420.854:3483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.2.458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 140.960286][ T39] audit: type=1326 audit(1739398420.854:3484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.2.458" exe="/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 140.967478][ T39] audit: type=1326 audit(1739398420.854:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.2.458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 140.973424][ T39] audit: type=1326 audit(1739398420.854:3486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.2.458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 140.979407][ T39] audit: type=1326 audit(1739398420.854:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.2.458" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 140.986371][ T39] audit: type=1326 audit(1739398420.854:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.2.458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 142.102739][ T25] net_ratelimit: 14 callbacks suppressed [ 142.102761][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.408530][ T7938] vxcan1: entered promiscuous mode [ 142.691781][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.168135][ T7946] netlink: 'syz.1.464': attribute type 1 has an invalid length. [ 143.192271][ T7946] bond1: entered promiscuous mode [ 143.197712][ T7946] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.291951][ T7946] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.301130][ T7946] bond1: (slave bond2): making interface the new active one [ 143.304393][ T7946] bond2: entered promiscuous mode [ 143.328210][ T7946] bond1: (slave bond2): Enslaving as an active interface with an up link [ 143.701646][ T1323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.172599][ T7972] input: syz0 as /devices/virtual/input/input25 [ 144.751689][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.152133][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.059303][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.137983][ T39] kauditd_printk_skb: 211 callbacks suppressed [ 146.138004][ T39] audit: type=1800 audit(1739398426.064:3700): pid=7992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.475" name="file1" dev="overlay" ino=736 res=0 errno=0 [ 146.305892][ T8000] can0: slcan on ttyS3. [ 146.704165][ T8000] netlink: 20 bytes leftover after parsing attributes in process `syz.0.476'. [ 147.071803][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.654561][ T7996] can0 (unregistered): slcan off ttyS3. [ 147.942768][ T8040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.479'. [ 147.946177][ T8040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.479'. [ 148.148330][ T1323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.311702][ T8048] input: syz0 as /devices/virtual/input/input26 [ 148.326252][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.260801][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.049611][ T8066] syz_tun: entered allmulticast mode [ 150.173450][ T8077] netlink: 56 bytes leftover after parsing attributes in process `syz.1.489'. [ 150.257138][ T8076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.485'. [ 150.595035][ T1323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.691446][ T8081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.490'. [ 150.697546][ T8081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.490'. [ 150.860381][ T8065] syz_tun: left allmulticast mode [ 151.142271][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.312208][ T35] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 151.391696][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.464059][ T35] usb 5-1: Using ep0 maxpacket: 8 [ 151.466787][ T35] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 151.469083][ T35] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 151.481797][ T35] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 151.484845][ T35] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 151.487626][ T35] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.493649][ T35] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 151.496273][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.621628][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.714520][ T35] usb 5-1: usb_control_msg returned -32 [ 151.714594][ T35] usbtmc 5-1:16.0: can't read capabilities [ 151.919265][ C3] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 151.919439][ T8088] usbtmc 5-1:16.0: Unable to send data, error -71 [ 152.671728][ T1323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.707774][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.431812][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.502716][ T6008] usb 5-1: USB disconnect, device number 8 [ 154.747406][ T1323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.947024][ T8147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.949822][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.961621][ T8147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.012380][ T8147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.791826][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.822020][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.873416][ T8177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.511'. [ 157.055274][ T8187] ptrace attach of "/syz-executor exec"[5958] was attempted by "/syz-executor exec"[8187] [ 157.461695][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.911432][ T62] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 158.061504][ T62] usb 6-1: Using ep0 maxpacket: 8 [ 158.065156][ T62] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 158.071527][ T62] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 158.075347][ T62] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 158.078924][ T62] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 158.082367][ T62] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.086759][ T62] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 158.089964][ T62] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.299722][ T62] usb 6-1: usb_control_msg returned -32 [ 158.302951][ T62] usbtmc 6-1:16.0: can't read capabilities [ 158.921550][ T1323] net_ratelimit: 1 callbacks suppressed [ 158.921569][ T1323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.973674][ T5953] Bluetooth: hci1: link tx timeout [ 158.975253][ T5953] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 159.211863][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 159.372962][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.376692][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.389567][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 159.399734][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 159.403150][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.413322][ T9] usb 5-1: config 0 descriptor?? [ 159.835165][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 159.837826][ T9] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 159.841876][ T9] plantronics 0003:047F:FFFF.0006: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 159.941796][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.034629][ T9] usb 5-1: USB disconnect, device number 9 [ 160.501837][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.751856][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.763147][ T6014] usb 6-1: USB disconnect, device number 2 [ 160.795024][ T8260] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 160.981822][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.073518][ T5953] Bluetooth: hci1: command 0x0406 tx timeout [ 161.688203][ T8261] delete_channel: no stack [ 162.050463][ T1323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.062831][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.541726][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.776698][ T5953] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 164.101729][ T1323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.171570][ T1323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.193860][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.592273][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.171145][ T8360] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 167.221751][ T1323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.359555][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.490384][ T8388] overlayfs: workdir and upperdir must be separate subtrees [ 168.541594][ T8385] ======================================================= [ 168.541594][ T8385] WARNING: The mand mount option has been deprecated and [ 168.541594][ T8385] and is ignored by this kernel. Remove the mand [ 168.541594][ T8385] option from the mount to silence this warning. [ 168.541594][ T8385] ======================================================= [ 168.551862][ T8385] 9pnet_virtio: no channels available for device syz [ 168.571648][ T8385] netlink: 20 bytes leftover after parsing attributes in process `syz.0.549'. [ 169.174179][ T8394] 9pnet_virtio: no channels available for device [ 169.391845][ T1323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.627698][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.346892][ T6014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.422243][ T1323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.434784][ T104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.438121][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.450623][ T6014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.475378][ T8413] netlink: 'syz.0.554': attribute type 9 has an invalid length. [ 170.505516][ T5962] Bluetooth: hci2: command 0x0406 tx timeout [ 170.505579][ T5960] Bluetooth: hci1: command 0x0406 tx timeout [ 170.508831][ T5962] Bluetooth: hci3: command 0x0405 tx timeout [ 171.164269][ T8425] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 171.462670][ T1323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.074850][ T8437] input: syz0 as /devices/virtual/input/input27 [ 172.511757][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.572631][ T8433] page: refcount:3 mapcount:1 mapping:ffff888012e89738 index:0x200 pfn:0x7067f [ 172.576576][ T8433] memcg:ffff88801fb82000 [ 172.577819][ T8433] aops:shmem_aops ino:82c [ 172.579077][ T8433] flags: 0x4fff6800002002d(locked|referenced|uptodate|lru|swapbacked|node=1|zone=1|lastcpupid=0x7ff) [ 172.582190][ T8433] raw: 04fff6800002002d ffffea0001c19f88 ffffea0001406208 ffff888012e89738 [ 172.584672][ T8433] raw: 0000000000000200 0000000000000000 0000000300000000 ffff88801fb82000 [ 172.587109][ T8433] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 172.589187][ T8433] page_owner tracks the page as allocated [ 172.592012][ T8433] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 8427, tgid 8426 (syz.2.558), ts 171749583642, free_ts 170702987007 [ 172.596976][ T8433] post_alloc_hook+0x181/0x1b0 [ 172.598384][ T8433] get_page_from_freelist+0xfce/0x2f80 [ 172.599950][ T8433] __alloc_frozen_pages_noprof+0x221/0x2470 [ 172.601773][ T8433] alloc_pages_mpol+0x1fc/0x540 [ 172.603162][ T8433] folio_alloc_mpol_noprof+0x36/0x2f0 [ 172.604756][ T8433] shmem_alloc_folio+0x135/0x160 [ 172.606178][ T8433] shmem_alloc_and_add_folio+0x48e/0xc10 [ 172.607833][ T8433] shmem_get_folio_gfp+0x689/0x1530 [ 172.609221][ T8433] shmem_fault+0x200/0xae0 [ 172.610511][ T8433] __do_fault+0x10a/0x490 [ 172.611802][ T8433] do_pte_missing+0xecf/0x3e10 [ 172.613211][ T8433] __handle_mm_fault+0x1166/0x2c60 [ 172.614712][ T8433] handle_mm_fault+0x3fa/0xaa0 [ 172.616130][ T8433] __get_user_pages+0x773/0x36f0 [ 172.617598][ T8433] populate_vma_page_range+0x27f/0x3a0 [ 172.619150][ T8433] __mm_populate+0x1d6/0x380 [ 172.620708][ T8433] page last free pid 8380 tgid 8380 stack trace: [ 172.623044][ T8433] free_unref_folios+0xa7b/0x1500 [ 172.624992][ T8433] folios_put_refs+0x587/0x7b0 [ 172.626790][ T8433] shmem_undo_range+0x586/0x1170 [ 172.628289][ T8433] shmem_evict_inode+0x3a3/0xba0 [ 172.629799][ T8433] evict+0x409/0x960 [ 172.631181][ T8433] iput+0x52a/0x890 [ 172.632323][ T8433] dentry_unlink_inode+0x29c/0x480 [ 172.633756][ T8433] __dentry_kill+0x1d0/0x600 [ 172.635085][ T8433] dput.part.0+0x4b1/0x9b0 [ 172.636357][ T8433] dput+0x1f/0x30 [ 172.637404][ T8433] __fput+0x51c/0xb70 [ 172.638534][ T8433] task_work_run+0x14e/0x250 [ 172.639838][ T8433] do_exit+0xad8/0x2d70 [ 172.641111][ T8433] do_group_exit+0xd3/0x2a0 [ 172.642467][ T8433] __ia32_sys_exit_group+0x3e/0x50 [ 172.643958][ T8433] ia32_sys_call+0x1b1c/0x1c20 [ 172.645521][ T8433] ------------[ cut here ]------------ [ 172.647064][ T8433] kernel BUG at mm/filemap.c:154! SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 172.648512][ T8433] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 172.650898][ T8433] CPU: 1 UID: 0 PID: 8433 Comm: syz.2.558 Not tainted 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 172.655831][ T8433] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 172.658983][ T8433] RIP: 0010:filemap_unaccount_folio+0xef/0x860 [ 172.660708][ T8433] Code: b7 2b ca ff 4c 8d 6b 30 31 ff 89 ee e8 aa 26 ca ff 85 ed 7e 17 e8 a1 2b ca ff 48 c7 c6 a0 79 78 8b 48 89 df e8 d2 71 11 00 90 <0f> 0b e8 8a 2b ca ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 172.667745][ T8433] RSP: 0018:ffffc9000ca273a0 EFLAGS: 00010093 [ 172.670037][ T8433] RAX: 0000000000000000 RBX: ffffea0001c19fc0 RCX: ffffc9000ca27248 [ 172.672815][ T8433] RDX: ffff888024c84880 RSI: ffffffff81eec2fe RDI: ffff888024c84cc4 [ 172.675504][ T8433] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff20bfcc2 [ 172.678086][ T8433] R10: ffffffff905fe617 R11: 0000000000000003 R12: ffff888012e89738 [ 172.680682][ T8433] R13: ffffea0001c19ff0 R14: 0000000000000000 R15: ffffc9000ca27688 [ 172.683268][ T8433] FS: 0000000000000000(0000) GS:ffff88802b500000(0000) knlGS:0000000000000000 [ 172.686212][ T8433] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 172.688394][ T8433] CR2: 000000000c3907d3 CR3: 000000000df80000 CR4: 0000000000352ef0 [ 172.691002][ T8433] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 172.693611][ T8433] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 172.696252][ T8433] Call Trace: [ 172.697378][ T8433] [ 172.698384][ T8433] ? die+0x31/0x80 [ 172.699689][ T8433] ? do_trap+0x232/0x430 [ 172.701120][ T8433] ? filemap_unaccount_folio+0xef/0x860 [ 172.703062][ T8433] ? filemap_unaccount_folio+0xef/0x860 [ 172.704932][ T8433] ? do_error_trap+0xf4/0x230 [ 172.706509][ T8433] ? filemap_unaccount_folio+0xef/0x860 [ 172.708354][ T8433] ? handle_invalid_op+0x34/0x40 [ 172.710149][ T8433] ? filemap_unaccount_folio+0xef/0x860 [ 172.712040][ T8433] ? exc_invalid_op+0x2e/0x50 [ 172.713644][ T8433] ? asm_exc_invalid_op+0x1a/0x20 [ 172.715379][ T8433] ? filemap_unaccount_folio+0xee/0x860 [ 172.717250][ T8433] ? filemap_unaccount_folio+0xef/0x860 [ 172.719094][ T8433] filemap_remove_folio+0xf1/0x250 [ 172.720809][ T8433] truncate_inode_folio+0x49/0x70 [ 172.722471][ T8433] shmem_undo_range+0x36e/0x1170 [ 172.724117][ T8433] ? __pfx_shmem_undo_range+0x10/0x10 [ 172.726067][ T8433] ? __lock_acquire+0xcc5/0x3c40 [ 172.727796][ T8433] ? mark_lock+0xb5/0xc60 [ 172.729277][ T8433] ? __pfx___lock_acquire+0x10/0x10 [ 172.731035][ T8433] ? hlock_class+0x4e/0x130 [ 172.732609][ T8433] ? mark_lock+0xb5/0xc60 [ 172.734062][ T8433] ? __pfx___lock_acquire+0x10/0x10 [ 172.735853][ T8433] ? hlock_class+0x4e/0x130 [ 172.737378][ T8433] ? percpu_counter_add_batch+0xb5/0x1e0 [ 172.739244][ T8433] shmem_evict_inode+0x3a3/0xba0 [ 172.740917][ T8433] ? find_held_lock+0x2d/0x110 [ 172.742531][ T8433] ? __pfx_shmem_evict_inode+0x10/0x10 [ 172.744294][ T8433] ? evict+0x3c8/0x960 [ 172.745701][ T8433] ? __pfx_lock_release+0x10/0x10 [ 172.747368][ T8433] ? lock_acquire+0x2f/0xb0 [ 172.748906][ T8433] ? __pfx_shmem_evict_inode+0x10/0x10 [ 172.750714][ T8433] evict+0x409/0x960 [ 172.752043][ T8433] ? __pfx_evict+0x10/0x10 [ 172.753536][ T8433] iput+0x52a/0x890 [ 172.754850][ T8433] ? __pfx_generic_delete_inode+0x10/0x10 [ 172.756745][ T8433] dentry_unlink_inode+0x29c/0x480 [ 172.758447][ T8433] __dentry_kill+0x1d0/0x600 [ 172.759979][ T8433] dput.part.0+0x4b1/0x9b0 [ 172.761291][ T8433] dput+0x1f/0x30 [ 172.762374][ T8433] __fput+0x51c/0xb70 [ 172.763617][ T8433] ? _raw_spin_unlock_irq+0x23/0x50 [ 172.765376][ T8433] task_work_run+0x14e/0x250 [ 172.766930][ T8433] ? __pfx_task_work_run+0x10/0x10 [ 172.768644][ T8433] ? do_raw_spin_unlock+0x172/0x230 [ 172.770356][ T8433] do_exit+0xad8/0x2d70 [ 172.771735][ T8433] ? get_signal+0x8f7/0x2610 [ 172.773264][ T8433] ? __pfx_do_exit+0x10/0x10 [ 172.774943][ T8433] ? do_raw_spin_lock+0x12d/0x2c0 [ 172.776656][ T8433] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 172.778466][ T8433] do_group_exit+0xd3/0x2a0 [ 172.780012][ T8433] get_signal+0x2576/0x2610 [ 172.781536][ T8433] ? __pfx___blk_flush_plug+0x10/0x10 [ 172.783312][ T8433] ? __pfx___up_read+0x10/0x10 [ 172.784932][ T8433] ? __pfx_get_signal+0x10/0x10 [ 172.786535][ T8433] ? __pfx_do_futex+0x10/0x10 [ 172.788109][ T8433] arch_do_signal_or_restart+0x90/0x7e0 [ 172.789925][ T8433] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 172.791946][ T8433] ? rcu_is_watching+0x12/0xc0 [ 172.793538][ T8433] syscall_exit_to_user_mode+0x150/0x2a0 [ 172.795466][ T8433] __do_fast_syscall_32+0x80/0x120 [ 172.797157][ T8433] do_fast_syscall_32+0x32/0x80 [ 172.798781][ T8433] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 172.801082][ T8433] RIP: 0023:0xf7ff8579 [ 172.802339][ T8433] Code: Unable to access opcode bytes at 0xf7ff854f. [ 172.804950][ T8433] RSP: 002b:00000000f50d460c EFLAGS: 00000296 ORIG_RAX: 00000000000000f0 [ 172.807273][ T8433] RAX: fffffffffffffe00 RBX: 00000000f74b50a8 RCX: 0000000000000080 [ 172.809490][ T8433] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f74b50ac [ 172.811697][ T8433] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 172.814037][ T8433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.816300][ T8433] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 172.818493][ T8433] [ 172.819376][ T8433] Modules linked in: [ 172.820504][ T8433] ---[ end trace 0000000000000000 ]--- [ 172.822083][ T8433] RIP: 0010:filemap_unaccount_folio+0xef/0x860 [ 172.823946][ T8433] Code: b7 2b ca ff 4c 8d 6b 30 31 ff 89 ee e8 aa 26 ca ff 85 ed 7e 17 e8 a1 2b ca ff 48 c7 c6 a0 79 78 8b 48 89 df e8 d2 71 11 00 90 <0f> 0b e8 8a 2b ca ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 172.829937][ T8433] RSP: 0018:ffffc9000ca273a0 EFLAGS: 00010093 [ 172.831825][ T8433] RAX: 0000000000000000 RBX: ffffea0001c19fc0 RCX: ffffc9000ca27248 [ 172.834757][ T8433] RDX: ffff888024c84880 RSI: ffffffff81eec2fe RDI: ffff888024c84cc4 [ 172.837827][ T8433] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff20bfcc2 [ 172.840980][ T8433] R10: ffffffff905fe617 R11: 0000000000000003 R12: ffff888012e89738 [ 172.844182][ T8433] R13: ffffea0001c19ff0 R14: 0000000000000000 R15: ffffc9000ca27688 [ 172.847308][ T8433] FS: 0000000000000000(0000) GS:ffff88802b500000(0000) knlGS:0000000000000000 [ 172.850810][ T8433] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 172.853403][ T8433] CR2: 000000000c3907d3 CR3: 000000000df80000 CR4: 0000000000352ef0 [ 172.856212][ T8433] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 172.858482][ T8433] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 172.860721][ T8433] Kernel panic - not syncing: Fatal exception [ 172.863137][ T8433] Kernel Offset: disabled [ 172.864461][ T8433] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:20:52 Registers: info registers vcpu 0 CPU#0 RAX=0000000000799fb7 RBX=0000000000000000 RCX=ffffffff8b46ae39 RDX=0000000000000000 RSI=ffffffff8b6ce5c0 RDI=ffffffff8bd2d3e0 RBP=fffffbfff1bd2ee8 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed1005686f85 R10=ffff88802b437c2b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de97740 R14=ffffffff905fe610 R15=0000000000000000 RIP=ffffffff8b46c21f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080200000 CR3=00000000438f0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=0000000000000000 Opmask02=000000000000ffdf Opmask03=2040000404420020 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe81c4a5a0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cae3ceea72f95ab7 737326ec02b8d645 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737373e2 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 44455a494c414954 494e495f43455355 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f742079617272 6120656c75722079 7261726f706d6574 002a3f005b3f2a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000034 746e6576652f3732 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000559a2889ec68 0000559a2889ec68 0000000000000041 0000000000000031 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdce9ff1f40 0000559a286a84b0 0000000000000551 0000003177617264 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 383a3a263d383a3a 263c383a3a263f38 3a3a263e383a3a26 39383a3a2638383a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff853880b5 RDI=ffffffff9aad4e20 RBP=ffffffff9aad4de0 RSP=ffffc9000ca26ce0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552031203a555043 R12=0000000000000000 R13=0000000000000033 R14=ffffffff9aad4de0 R15=0000000000000000 RIP=ffffffff853880df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000c3907d3 CR3=000000000df80000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d55547367bc8e3a5 2db7d29c4e4cd3db ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f408de4f070db649 72d5136b96980eaa ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9d15220a28905abb e26cd49dd0dcb400 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 df4eeb740a06ee4e eab25e0a9969969f ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000002d40 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7bd3de328a04458a 0000006900000069 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7c6c1eae9ba51056 d0c1f91c0abed0c4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 85276faa00000069 0000006900000069 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006900000000 d0c0fb6e00000069 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9a9042877ce06d8d b58aab51d2d483e0 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 56501f2f228e4e55 1842ceedd4f3b4cd ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=000000000006def1 RCX=ffffffff82273f64 RDX=1ffff1100fff9ca8 RSI=ffffffff82273faa RDI=0000000000000007 RBP=000000000000000d RSP=ffffc90003ba7730 R8 =0000000000000007 R9 =000000000007ffff R10=000000000000000d R11=0000000000000000 R12=ffff88803fffa540 R13=0000000000000000 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff81b8ee90 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7ef6e40 CR3=000000004bd00000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f738cff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88802b546780 RCX=ffffffff81acfc1a RDX=ffff88801fe20000 RSI=ffffffff81acfbf4 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90000bf7930 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffed10056a8cf1 R13=0000000000000001 R14=ffff88802b73ffc0 R15=ffff88802b546788 RIP=ffffffff81acfbf6 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffc08160d0c CR3=000000000df80000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=63faaad263faaad2 63faaad263faaad2 63faaad263faaad2 63faaad263faaad2 63faaad263faaad2 63faaad263faaad2 63faaad263faaad2 63faaad263faaad2 ZMM22=70a605b070a605b0 70a605b070a605b0 70a605b070a605b0 70a605b070a605b0 70a605b070a605b0 70a605b070a605b0 70a605b070a605b0 70a605b070a605b0 ZMM23=17ee964b17ee964b 17ee964b17ee964b 17ee964b17ee964b 17ee964b17ee964b 17ee964b17ee964b 17ee964b17ee964b 17ee964b17ee964b 17ee964b17ee964b ZMM24=7f7558f87f7558f8 7f7558f87f7558f8 7f7558f87f7558f8 7f7558f87f7558f8 7f7558f87f7558f8 7f7558f87f7558f8 7f7558f87f7558f8 7f7558f87f7558f8 ZMM25=92c7895892c78958 92c7895892c78958 92c7895892c78958 92c7895892c78958 92c7895892c78958 92c7895892c78958 92c7895892c78958 92c7895892c78958 ZMM26=2ee93ccc2ee93ccc 2ee93ccc2ee93ccc 2ee93ccc2ee93ccc 2ee93ccc2ee93ccc 2ee93ccc2ee93ccc 2ee93ccc2ee93ccc 2ee93ccc2ee93ccc 2ee93ccc2ee93ccc ZMM27=221546c2221546c2 221546c2221546c2 221546c2221546c2 221546c2221546c2 221546c2221546c2 221546c2221546c2 221546c2221546c2 221546c2221546c2 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=a6050000a6050000 a6050000a6050000 a6050000a6050000 a6050000a6050000 a6050000a6050000 a6050000a6050000 a6050000a6050000 a6050000a6050000