last executing test programs: 10.40958299s ago: executing program 2 (id=606): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bind$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, @any, 0xdd}, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000340)=0x10001) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008b39500b7030000070000008500000006000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0x8}, 0x94) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)}], 0x1) writev(r5, &(0x7f0000000300), 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000280)={0x4, @win={{0x6123, 0x9, 0x8, 0x2}, 0x8, 0x1, &(0x7f0000000000)={{0x101, 0x8, 0x10000000, 0x9}}, 0x2, 0x0, 0x9}}) 8.246650087s ago: executing program 3 (id=608): mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x18, 0x0, 0x1) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) socket(0x2b, 0xa, 0x1) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) lseek(0xffffffffffffffff, 0x101, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0xff, 0x0, 0x8, 0x5, 0xfd, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) 8.025988392s ago: executing program 1 (id=610): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x2a, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x48b}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="a2010000100001000000000000000000fc010000000000000000000000000000ac1414bb000000000000000000000000000000000000000000000000000000001cbc5766be712003d7b28841358459f9ffffff1b9cd6dfe0ba71cd2d08fc7a9330fde7d9bddaa929780863dd0dbb1db0546bb48a9a4c12c803aeb588b4c5741638f29819530422b3e2d5230911b5512aebac8cab624ea89e5d0e645f9f4ebbfb95567d13641f473f437e3c93bb6265f17ca3b6542d5608edf63c33bed58e5d09161e41af11ab523e1a810eade2035b0f943a17e206323be87204", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000002000000cd0000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000000000000028bd7000000000004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000"], 0x1a0}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f00000000c0)=0x4002, 0x4) chdir(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x40}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x2, 0x1, 0x4, 0x90, 0x1}, 0x20) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) write$vga_arbiter(r6, &(0x7f0000001400)=ANY=[@ANYBLOB], 0xc) openat$ttyprintk(0xffffff9c, &(0x7f0000000000), 0x883, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001300)={0x0, 0x6, 0xbe, 0x1, @buffer={0x0, 0x4a, &(0x7f0000001380)=""/74}, &(0x7f0000000200)="d6124e558d910ca73809501ee48e959983c477757373bd235271af799326320192b9199c86e4f845c1bee659f9c527117e482b6a4f20bafae0cd85dea7da2c5722bc4971ef791d7e4556abc055cd2860d8cf432358a76daca011a18a98943f1c6b750845885ff2d55ebf370aeef59ffc359ae3f4a34cefb110f9083b45698aa19e4340fc8644d10c11cedfc02232d3ef046754a3e3d637a9e4562f65442c09f993ac7794bcabaa1818cfc9eeb6f75218d88a7c1bbab6cb49953d1698370b", &(0x7f0000000300)=""/4096, 0x3, 0x10000, 0x6, 0x0}) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@loopback, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6, 0x0, 0x26, 0x100, 0x8, 0x2200007, r7}) 7.97356395s ago: executing program 3 (id=611): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = socket(0x28, 0x5, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) munlock(&(0x7f00003a5000/0x4000)=nil, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x5, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) getpid() r5 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r5, &(0x7f0000006f80)={0x23, 0x0, 0x8}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="300000002000010000000000000000000200000000000000000000001400110076657468305f6d6163767461700000009b0bc89274c0b206ee2370d3366f6dbd1721e2a28b4ef7f14306fd7930691580142b18edbe3f5d78c85c027362fc7cf5d8861fed860539bc5baaac1c0b3daa152f3891f190cd7695c9201ce7cc8be77e555879a6c6"], 0x30}}, 0x48850) r7 = openat$cdrom(0xffffff9c, &(0x7f00000013c0), 0x4, 0x0) ioctl$CDROMREADTOCENTRY(r7, 0x5306, 0x0) fsopen(&(0x7f0000000180)='romfs\x00', 0x0) 7.435551679s ago: executing program 2 (id=612): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00890600000000000000000000000088a8140081002b0086dd6900040000082c"], 0x4a) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x200a00, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000080)={0x0, {0x1, 0xffffffff}}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r7, 0x540a, 0x0) ioctl$TCFLSH(r7, 0x400455c8, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) 7.251632104s ago: executing program 0 (id=614): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_vhci(0x0, 0x27) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x2, 0x0, 0x2043}}}, 0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r1, &(0x7f0000007700), 0x318, 0xfc0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000ac0)={'filter\x00', 0x102, 0x4, 0x404, 0x0, 0x10c, 0x10c, 0x324, 0x324, 0x324, 0x4, 0x0, {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @remote, @multicast1}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @multicast2, @empty, 0x9, 0xffffffff}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'ipvlan1\x00'}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e9fb760d26c0", @multicast1, @broadcast}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x450) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x182, 0x0) openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000010000000900000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000f28382e8e018c79af375000000000083c2fc16b08f29c233e6616e6f6c98152ebd17053033f83ad7a9324cdb42f720938a06ca81d9878e7e99fbf384e07ae940347af2d6a82d8f05b43fa531735a6213c13df7e4a6813fa0fd2189f73998da13338108005d0bb60e453d6f2a2051febb0cab9693b6a6348566b9c41c338a412b5fc6c0717e7102e75dee713135d53cc92352c15511260d6f175df95cc98bdb6a6290b3170f000006808b26528d3107e307f03ad0d33352d0fb0f68ea90462e1a51196859afb01517abfede898fb8a861b42c7d1a81bcb9429a9986826492c959de7d4516f2711bf80000323b5201eecc79468b1b0d670cddfd0591c5d3401288db5fea1df7a1100d1dabde36", @ANYRES32=0x0, @ANYRES32, @ANYRES8=r2], 0x48) syz_io_uring_setup(0x1114, &(0x7f0000000300), &(0x7f00000001c0), &(0x7f0000000180)) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) 6.893176996s ago: executing program 1 (id=615): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffff8}}, './file0\x00'}) ioctl$KVM_RUN(r0, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x94) syz_io_uring_setup(0x370a, &(0x7f00000003c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2bf}, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000089}, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) dup2(0xffffffffffffffff, r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r4 = userfaultfd(0x801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) 6.150672296s ago: executing program 0 (id=616): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x4) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0xfffc, @broadcast}, 0x2}}, 0x2e) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@host, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@hyper}) r5 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r7, 0x0, r6, 0x0, 0x10000008ebc, 0x0) 5.899497108s ago: executing program 1 (id=617): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xfffffffd, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) pipe(0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r3, 0x1) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) pwritev(r4, &(0x7f00000003c0)=[{&(0x7f0000000440)="07fd468efdb2b168c92b960743e2c888f73fd05f5cac7697e564d933784ce06b526d14a1c86a4d483c499f07b768851638606d6f990234dc97c976761e7505c91c50b0c01dc95db90a1fd46f5722636cbf65871219c3191f083cfda7c675980485faf2ffda68fe865e5674804940e716ce1030402f1dec00b19c77880935adff0e2d39c975e69179bd569c80a5ece8d97a6c101766b189b12bcd1f200fa12d95e791021862476abcd3d958d3de83015adafac8a124", 0xb5}, {&(0x7f0000000500)="604f6400eb842b6043beff1471a5823456e8ddf3814c65ac641917a765e0d3b1dd5bc64425b84010203cc2b774127b90549da5a92b02a5f90876c1ee9292be8c73726d9750dc3682832380f0bdcd50b1feb36ef98c1c19c61adbafa435f1297a3592d8136ccc59fba73fd75d1447ba9b7525f2b94f815b9c5119d019a657ca0e815ce5b5011563eb82d74aff9bb555472f4a01b415543cdc", 0x98}, {&(0x7f00000001c0)="bf", 0x1}, {&(0x7f0000000300)="63ad4a9e70e0142836682ce42fcb67115b92eccf0a744962f078a7affd51dff1d51f2f9602eac9e098ace812e2c76ac972eba799b959ba606c60057d5936c73244055c06cea5cc4004b3fd7aa88f10c1d148eea7fa09", 0x56}, {&(0x7f00000005c0)="882683cbf7c168b033bc98cad9943635c161864a13567505fbfb7cf76de64c2b0a13d9e3f6b69501ac924015639817ca41e31c9bbdba07a81a33b389721713fddf2baa563f9c19be1845c691555758a0365b1dad0d1d4912afe67f47fc40986015f8342ab9739c38534c5729a907821aac51948797a8a416cf681160a5f99490ea0b733c620a939c274d90a65cdf24652f8b4d088856a3544ef0ca2a94f8e4c795db8a1d7933ea3e476610f8c3fa0a43daeb39fe72b9711f8f4451e253a89d1f75398b41dc42fff6c06c1f485654b4b45e8c4877689e272d1ebf364e6a6fdf19f91958ab", 0xe4}], 0x5, 0xfffffffe, 0x4) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 5.324532867s ago: executing program 3 (id=618): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x8004}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0xfffffe01}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'ip6tnl0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x2000000}, 0x1c) r4 = syz_open_procfs(0x0, 0x0) fchdir(r4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x900, 0x12) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "0587a06a93f2aad4", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38) connect$llc(0xffffffffffffffff, &(0x7f00000003c0)={0x1a, 0x336, 0x40, 0xa1, 0x5, 0x9, @remote}, 0x10) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r8 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r6, 0x39) syz_open_dev$evdev(&(0x7f0000000100), 0x1000, 0x10800) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r7, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.130608061s ago: executing program 0 (id=619): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xfffffffd, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) pipe(0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r3, 0x1) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) pwritev(r4, &(0x7f00000003c0)=[{&(0x7f0000000440)="07fd468efdb2b168c92b960743e2c888f73fd05f5cac7697e564d933784ce06b526d14a1c86a4d483c499f07b768851638606d6f990234dc97c976761e7505c91c50b0c01dc95db90a1fd46f5722636cbf65871219c3191f083cfda7c675980485faf2ffda68fe865e5674804940e716ce1030402f1dec00b19c77880935adff0e2d39c975e69179bd569c80a5ece8d97a6c101766b189b12bcd1f200fa12d95e791021862476abcd3d958d3de83015adafac8a124", 0xb5}, {&(0x7f0000000500)="604f6400eb842b6043beff1471a5823456e8ddf3814c65ac641917a765e0d3b1dd5bc64425b84010203cc2b774127b90549da5a92b02a5f90876c1ee9292be8c73726d9750dc3682832380f0bdcd50b1feb36ef98c1c19c61adbafa435f1297a3592d8136ccc59fba73fd75d1447ba9b7525f2b94f815b9c5119d019a657ca0e815ce5b5011563eb82d74aff9bb555472f4a01b415543cdc", 0x98}, {&(0x7f00000001c0)="bf", 0x1}, {&(0x7f0000000300)="63ad4a9e70e0142836682ce42fcb67115b92eccf0a744962f078a7affd51dff1d51f2f9602eac9e098ace812e2c76ac972eba799b959ba606c60057d5936c73244055c06cea5cc4004b3fd7aa88f10c1d148eea7fa09", 0x56}, {&(0x7f00000005c0)="882683cbf7c168b033bc98cad9943635c161864a13567505fbfb7cf76de64c2b0a13d9e3f6b69501ac924015639817ca41e31c9bbdba07a81a33b389721713fddf2baa563f9c19be1845c691555758a0365b1dad0d1d4912afe67f47fc40986015f8342ab9739c38534c5729a907821aac51948797a8a416cf681160a5f99490ea0b733c620a939c274d90a65cdf24652f8b4d088856a3544ef0ca2a94f8e4c795db8a1d7933ea3e476610f8c3fa0a43daeb39fe72b9711f8f4451e253a89d1f75398b41dc42fff6c06c1f485654b4b45e8c4877689e272d1ebf364e6a6fdf19f91958ab", 0xe4}], 0x5, 0xfffffffe, 0x4) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 5.071787604s ago: executing program 2 (id=620): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00890600000000000000000000000088a8140081002b0086dd6900040000082c"], 0x4a) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x200a00, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000080)={0x0, {0x1, 0xffffffff}}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r7, 0x540a, 0x0) ioctl$TCFLSH(r7, 0x400455c8, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) 4.401514512s ago: executing program 3 (id=621): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd29, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x1}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r4, 0x708, 0x2) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000100)={0x0, 0x4, 0x7, &(0x7f0000000000)={0xb, "1401003d876ff44271f19ca6e4482707dab729631eae010000004d70b41d4008e3"}}) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x29, &(0x7f0000001e00)=""/218, &(0x7f0000001f00)=0xda) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f00000001c0)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8d, &(0x7f0000000300)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000003c0), &(0x7f0000000440), 0x8, 0x7a, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f0000000840)=ANY=[@ANYRES16=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0x8008330e, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) unshare(0x400) syz_80211_inject_frame(0x0, &(0x7f00000003c0)=ANY=[], 0x2e) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000400)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80000}) 3.880772997s ago: executing program 1 (id=622): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xfffffffd, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) pipe(0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r3, 0x1) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) pwritev(r4, &(0x7f00000003c0)=[{&(0x7f0000000440)="07fd468efdb2b168c92b960743e2c888f73fd05f5cac7697e564d933784ce06b526d14a1c86a4d483c499f07b768851638606d6f990234dc97c976761e7505c91c50b0c01dc95db90a1fd46f5722636cbf65871219c3191f083cfda7c675980485faf2ffda68fe865e5674804940e716ce1030402f1dec00b19c77880935adff0e2d39c975e69179bd569c80a5ece8d97a6c101766b189b12bcd1f200fa12d95e791021862476abcd3d958d3de83015adafac8a124", 0xb5}, {&(0x7f0000000500)="604f6400eb842b6043beff1471a5823456e8ddf3814c65ac641917a765e0d3b1dd5bc64425b84010203cc2b774127b90549da5a92b02a5f90876c1ee9292be8c73726d9750dc3682832380f0bdcd50b1feb36ef98c1c19c61adbafa435f1297a3592d8136ccc59fba73fd75d1447ba9b7525f2b94f815b9c5119d019a657ca0e815ce5b5011563eb82d74aff9bb555472f4a01b415543cdc", 0x98}, {&(0x7f00000001c0)="bf", 0x1}, {&(0x7f0000000300)="63ad4a9e70e0142836682ce42fcb67115b92eccf0a744962f078a7affd51dff1d51f2f9602eac9e098ace812e2c76ac972eba799b959ba606c60057d5936c73244055c06cea5cc4004b3fd7aa88f10c1d148eea7fa09", 0x56}, {&(0x7f00000005c0)="882683cbf7c168b033bc98cad9943635c161864a13567505fbfb7cf76de64c2b0a13d9e3f6b69501ac924015639817ca41e31c9bbdba07a81a33b389721713fddf2baa563f9c19be1845c691555758a0365b1dad0d1d4912afe67f47fc40986015f8342ab9739c38534c5729a907821aac51948797a8a416cf681160a5f99490ea0b733c620a939c274d90a65cdf24652f8b4d088856a3544ef0ca2a94f8e4c795db8a1d7933ea3e476610f8c3fa0a43daeb39fe72b9711f8f4451e253a89d1f75398b41dc42fff6c06c1f485654b4b45e8c4877689e272d1ebf364e6a6fdf19f91958ab", 0xe4}], 0x5, 0xfffffffe, 0x4) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 3.028816514s ago: executing program 0 (id=623): syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) syz_io_uring_setup(0x643d, &(0x7f0000000140)={0x0, 0xfffffffc, 0x10100, 0x1, 0x40}, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x10) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$dir(0xffffff9c, &(0x7f0000000d00)='./file0\x00', 0x0, 0x80) write$char_usb(r1, &(0x7f0000000700)="027ef4e4486467", 0x7) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)={0x2002}) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000080)=0x4000004, 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1}}, 0x40) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r6, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0xd8, 0x3f, 0x6, "3eccd25569e20900"}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) writev(r5, &(0x7f0000001080)=[{&(0x7f0000000080)="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", 0xc6a}], 0x1) socket$nl_route(0x10, 0x3, 0x0) 2.531427723s ago: executing program 2 (id=624): mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x18, 0x0, 0x1) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) socket(0x2b, 0xa, 0x1) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) lseek(0xffffffffffffffff, 0x101, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0xff, 0x0, 0x8, 0x5, 0xfd, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) 2.236842168s ago: executing program 0 (id=625): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000080)={0x2, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x14) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x1, 0x2000240000a95c, 0x40000009, 0x4000000201, 0x8000000000000001, 0x48d1, 0x0, 0x800000df}) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x181ac1, 0x0) fchown(r2, 0xee01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f00000001c0)='./file0/../file0/../file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) unlinkat(r3, &(0x7f0000000240)='./file1\x00', 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) ptrace$setsig(0x4203, 0x0, 0xf8, &(0x7f0000000380)={0x1e, 0x4, 0x6}) 2.199256187s ago: executing program 1 (id=626): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x18, 0x0, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fafb) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000004, 0x3, 0xfffffffffffffffb, 0xfffffffffedfff81, 0x3, 0x1, {0xffffffffffffffff, 0x8, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3ff, 0x7fffffff, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f04) sendmsg(r2, &(0x7f0000000ac0)={&(0x7f00000005c0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'morus640-sse2\x00'}, 0x80, &(0x7f0000000a00), 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="200000001001000000000080c029781a94ceb6df1d249ee9da2210889625902afb2204b07f1f28a1a3252bad407e00"], 0x20}, 0x20004040) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000300)=0x4, &(0x7f0000000340)=0x2) socket$inet6(0xa, 0x6, 0x7abc7908) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000003c0)=0x20, 0x4) listen(0xffffffffffffffff, 0x401) r4 = socket(0x1e, 0x80004, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'dvmrp0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@private1, 0x56, r6}) 1.473187223s ago: executing program 2 (id=627): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000002380), 0x4) chdir(&(0x7f0000000080)='./file1\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x190) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}]}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x3}, 0x4) r6 = openat$sr(0xffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffc, 0xb, 0x3, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e450ab8bca3cc5d0de67e2", &(0x7f0000000380)=""/148, 0x0, 0x1, 0x1, 0x0}) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x88482) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0) ioctl$EVIOCGREP(r8, 0x80284504, &(0x7f0000000040)=""/98) sendto(r7, 0x0, 0x0, 0x51, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xb}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008050}, 0x4010) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x2, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x6}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x43084) 1.273716433s ago: executing program 3 (id=628): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x4) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0xfffc, @broadcast}, 0x2}}, 0x2e) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@host, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@hyper}) r5 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r7, 0x0, r6, 0x0, 0x10000008ebc, 0x0) 1.165279322s ago: executing program 0 (id=629): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x145, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x14) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000000c0), &(0x7f00000001c0)) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r4, &(0x7f00000004c0)={{0x6, @rose, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) write$uinput_user_dev(r6, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x4d, [0x10004, 0x6, 0x9, 0x8a4, 0xfffffffe, 0x2, 0x7fffffff, 0x80000001, 0x4, 0x1, 0xfd, 0x3c6, 0x7, 0x7, 0xf70, 0x3c00, 0xe7, 0x4007, 0x401, 0xbc5e, 0x4, 0x1, 0x8, 0xffff, 0xe, 0xe, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1, 0x1, 0x1, 0x4, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x3, 0x1, 0x6, 0x2, 0x5, 0x49, 0x5, 0x9, 0x0, 0x1, 0x1000, 0x3, 0x2, 0x6, 0x7ff, 0xb8547353], [0x4, 0xffffffff, 0x4, 0x5, 0x7ffffdff, 0x1, 0x550, 0x6, 0x2, 0xfffffffc, 0x10001, 0xc, 0x36, 0x4, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x9, 0x99d, 0x8, 0x0, 0xd, 0x10001, 0xfffffffe, 0x6e38, 0x8000, 0xa, 0x6, 0x3, 0x0, 0x5, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x4, 0x0, 0x40000040, 0x1, 0x8, 0x5, 0x8, 0x0, 0x34f1, 0x1ff, 0x4, 0x1b2c5a97, 0x0, 0x9, 0x8, 0x0, 0x1, 0x1, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x5, 0xdb8, 0x9, 0x4, 0x2, 0x200006, 0x5, 0x5, 0x2, 0x80, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x4, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x40000008, 0x2, 0x4, 0x800, 0x7, 0x9, 0x10000, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x4, 0x8c0, 0x9, 0x2, 0x8, 0x7, 0x6, 0x2, 0x81, 0x8, 0x1, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x2, 0xa, 0x6, 0x2, 0xffffff00, 0xda15, 0x82, 0x3, 0x10], [0x0, 0x897, 0x8, 0x246d, 0x6, 0x101, 0x7fffffff, 0xd, 0x7ff, 0x606, 0x5, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x8, 0x7ff, 0xffffffff, 0x0, 0x2, 0x6, 0x20c, 0xfffffffd, 0xa18, 0x61c8, 0x6, 0x7ff, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0x20e, 0x4000006, 0x7, 0xfffffffd, 0x9, 0x1, 0x4, 0x100009, 0x100, 0x8, 0x3c, 0x1000, 0x3, 0x3, 0x15, 0x8000, 0x7, 0x81, 0x8, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r3, 0x1e, &(0x7f0000000040)={r3}, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r7, 0x1, 0x9, 0x0, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) close(0x3) syz_usb_connect$uac1(0x3, 0xa2, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r8, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@ra={0x94, 0x4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe, 0x0, 0x8000}}}}}}, 0x0) 1.161938032s ago: executing program 2 (id=630): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xfffffffd, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) pipe(0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r3, 0x1) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) pwritev(r4, &(0x7f00000003c0)=[{&(0x7f0000000440)="07fd468efdb2b168c92b960743e2c888f73fd05f5cac7697e564d933784ce06b526d14a1c86a4d483c499f07b768851638606d6f990234dc97c976761e7505c91c50b0c01dc95db90a1fd46f5722636cbf65871219c3191f083cfda7c675980485faf2ffda68fe865e5674804940e716ce1030402f1dec00b19c77880935adff0e2d39c975e69179bd569c80a5ece8d97a6c101766b189b12bcd1f200fa12d95e791021862476abcd3d958d3de83015adafac8a124", 0xb5}, {&(0x7f0000000500)="604f6400eb842b6043beff1471a5823456e8ddf3814c65ac641917a765e0d3b1dd5bc64425b84010203cc2b774127b90549da5a92b02a5f90876c1ee9292be8c73726d9750dc3682832380f0bdcd50b1feb36ef98c1c19c61adbafa435f1297a3592d8136ccc59fba73fd75d1447ba9b7525f2b94f815b9c5119d019a657ca0e815ce5b5011563eb82d74aff9bb555472f4a01b415543cdc", 0x98}, {&(0x7f00000001c0)="bf", 0x1}, {&(0x7f0000000300)="63ad4a9e70e0142836682ce42fcb67115b92eccf0a744962f078a7affd51dff1d51f2f9602eac9e098ace812e2c76ac972eba799b959ba606c60057d5936c73244055c06cea5cc4004b3fd7aa88f10c1d148eea7fa09", 0x56}, {&(0x7f00000005c0)="882683cbf7c168b033bc98cad9943635c161864a13567505fbfb7cf76de64c2b0a13d9e3f6b69501ac924015639817ca41e31c9bbdba07a81a33b389721713fddf2baa563f9c19be1845c691555758a0365b1dad0d1d4912afe67f47fc40986015f8342ab9739c38534c5729a907821aac51948797a8a416cf681160a5f99490ea0b733c620a939c274d90a65cdf24652f8b4d088856a3544ef0ca2a94f8e4c795db8a1d7933ea3e476610f8c3fa0a43daeb39fe72b9711f8f4451e253a89d1f75398b41dc42fff6c06c1f485654b4b45e8c4877689e272d1ebf364e6a6fdf19f91958ab", 0xe4}], 0x5, 0xfffffffe, 0x4) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 1.116481945s ago: executing program 1 (id=631): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) pipe(0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r3, 0x1) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) pwritev(r4, &(0x7f00000003c0)=[{&(0x7f0000000440)="07fd468efdb2b168c92b960743e2c888f73fd05f5cac7697e564d933784ce06b526d14a1c86a4d483c499f07b768851638606d6f990234dc97c976761e7505c91c50b0c01dc95db90a1fd46f5722636cbf65871219c3191f083cfda7c675980485faf2ffda68fe865e5674804940e716ce1030402f1dec00b19c77880935adff0e2d39c975e69179bd569c80a5ece8d97a6c101766b189b12bcd1f200fa12d95e791021862476abcd3d958d3de83015adafac8a124", 0xb5}, {&(0x7f0000000500)="604f6400eb842b6043beff1471a5823456e8ddf3814c65ac641917a765e0d3b1dd5bc64425b84010203cc2b774127b90549da5a92b02a5f90876c1ee9292be8c73726d9750dc3682832380f0bdcd50b1feb36ef98c1c19c61adbafa435f1297a3592d8136ccc59fba73fd75d1447ba9b7525f2b94f815b9c5119d019a657ca0e815ce5b5011563eb82d74aff9bb555472f4a01b415543cdc", 0x98}, {&(0x7f00000001c0)="bf", 0x1}, {&(0x7f0000000300)="63ad4a9e70e0142836682ce42fcb67115b92eccf0a744962f078a7affd51dff1d51f2f9602eac9e098ace812e2c76ac972eba799b959ba606c60057d5936c73244055c06cea5cc4004b3fd7aa88f10c1d148eea7fa09", 0x56}, {&(0x7f00000005c0)="882683cbf7c168b033bc98cad9943635c161864a13567505fbfb7cf76de64c2b0a13d9e3f6b69501ac924015639817ca41e31c9bbdba07a81a33b389721713fddf2baa563f9c19be1845c691555758a0365b1dad0d1d4912afe67f47fc40986015f8342ab9739c38534c5729a907821aac51948797a8a416cf681160a5f99490ea0b733c620a939c274d90a65cdf24652f8b4d088856a3544ef0ca2a94f8e4c795db8a1d7933ea3e476610f8c3fa0a43daeb39fe72b9711f8f4451e253a89d1f75398b41dc42fff6c06c1f485654b4b45e8c4877689e272d1ebf364e6a6fdf19f91958ab", 0xe4}], 0x5, 0xfffffffe, 0x4) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 0s ago: executing program 3 (id=632): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) unlink(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x200a00, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000080)={0x0, {0x1, 0xffffffff}}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r7, 0x540a, 0x0) ioctl$TCFLSH(r7, 0x400455c8, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) kernel console output (not intermixed with test programs): ded '[localhost]:16185' (ED25519) to the list of known hosts. [ 57.727671][ T5929] cgroup: Unknown subsys name 'net' [ 57.891203][ T5929] cgroup: Unknown subsys name 'cpuset' [ 57.895876][ T5929] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.851200][ T5929] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.214967][ T5303] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.218158][ T5303] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.220975][ T5303] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.223729][ T5303] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.226287][ T5303] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.250463][ T5953] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.266046][ T5955] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.269585][ T5955] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.273256][ T5955] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.276443][ T5955] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.277308][ T5956] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.278633][ T5957] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.280232][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.283551][ T5956] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.286947][ T5955] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.288165][ T5956] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.291663][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.294846][ T5956] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.296682][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.299855][ T5956] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.572708][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 63.643618][ T5952] chnl_net:caif_netlink_parms(): no params data found [ 63.674775][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 63.713577][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.717303][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.719819][ T5947] bridge_slave_0: entered allmulticast mode [ 63.722454][ T5947] bridge_slave_0: entered promiscuous mode [ 63.756289][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 63.769456][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.772478][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.775439][ T5947] bridge_slave_1: entered allmulticast mode [ 63.779441][ T5947] bridge_slave_1: entered promiscuous mode [ 63.874428][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.892455][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.895425][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.897972][ T5952] bridge_slave_0: entered allmulticast mode [ 63.901914][ T5952] bridge_slave_0: entered promiscuous mode [ 63.914857][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.929015][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.932189][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.935650][ T5952] bridge_slave_1: entered allmulticast mode [ 63.939730][ T5952] bridge_slave_1: entered promiscuous mode [ 63.984886][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.987649][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.990894][ T5942] bridge_slave_0: entered allmulticast mode [ 63.994396][ T5942] bridge_slave_0: entered promiscuous mode [ 64.005298][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.008197][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.011601][ T5942] bridge_slave_1: entered allmulticast mode [ 64.014315][ T5942] bridge_slave_1: entered promiscuous mode [ 64.033816][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.036953][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.040480][ T5946] bridge_slave_0: entered allmulticast mode [ 64.044398][ T5946] bridge_slave_0: entered promiscuous mode [ 64.050586][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.061171][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.066745][ T5947] team0: Port device team_slave_0 added [ 64.068908][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.073418][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.076551][ T5946] bridge_slave_1: entered allmulticast mode [ 64.080666][ T5946] bridge_slave_1: entered promiscuous mode [ 64.085907][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.096049][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.100335][ T5947] team0: Port device team_slave_1 added [ 64.146699][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.149911][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.160564][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.166613][ T5952] team0: Port device team_slave_0 added [ 64.171861][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.176739][ T5942] team0: Port device team_slave_0 added [ 64.179781][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.182672][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.193172][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.199613][ T5952] team0: Port device team_slave_1 added [ 64.204048][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.209464][ T5942] team0: Port device team_slave_1 added [ 64.271707][ T5946] team0: Port device team_slave_0 added [ 64.274649][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.277585][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.288348][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.301007][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.304033][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.315020][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.320214][ T5946] team0: Port device team_slave_1 added [ 64.322944][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.325887][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.336784][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.353656][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.356265][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.364839][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.388215][ T5947] hsr_slave_0: entered promiscuous mode [ 64.390646][ T5947] hsr_slave_1: entered promiscuous mode [ 64.395491][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.397844][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.406095][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.410509][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.412776][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.421332][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.472415][ T5942] hsr_slave_0: entered promiscuous mode [ 64.474772][ T5942] hsr_slave_1: entered promiscuous mode [ 64.476912][ T5942] debugfs: 'hsr0' already exists in 'hsr' [ 64.479206][ T5942] Cannot create hsr debugfs directory [ 64.484835][ T5952] hsr_slave_0: entered promiscuous mode [ 64.487133][ T5952] hsr_slave_1: entered promiscuous mode [ 64.489774][ T5952] debugfs: 'hsr0' already exists in 'hsr' [ 64.491593][ T5952] Cannot create hsr debugfs directory [ 64.572940][ T5946] hsr_slave_0: entered promiscuous mode [ 64.576257][ T5946] hsr_slave_1: entered promiscuous mode [ 64.579549][ T5946] debugfs: 'hsr0' already exists in 'hsr' [ 64.581955][ T5946] Cannot create hsr debugfs directory [ 64.865764][ T5947] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.873376][ T5947] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.885506][ T5947] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.890715][ T5947] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.927831][ T5942] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.934152][ T5942] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.939240][ T5942] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.945794][ T5942] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.000792][ T5946] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.005824][ T5946] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.011320][ T5946] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.022620][ T5946] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.084406][ T5952] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.091425][ T5952] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.097577][ T5952] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.105275][ T5952] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.144560][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.170108][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.197757][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.203740][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.212081][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.215034][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.225806][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.228145][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.232369][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.234759][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.247250][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.249671][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.300164][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.334271][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.339228][ T5956] Bluetooth: hci2: command tx timeout [ 65.339232][ T5953] Bluetooth: hci0: command tx timeout [ 65.341019][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.349070][ T5956] Bluetooth: hci3: command tx timeout [ 65.349084][ T5953] Bluetooth: hci1: command tx timeout [ 65.355966][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.358426][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.368789][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.371199][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.380959][ T5952] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.403613][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.406139][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.421158][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.424255][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.460077][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.517622][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.536043][ T5942] veth0_vlan: entered promiscuous mode [ 65.565512][ T5942] veth1_vlan: entered promiscuous mode [ 65.588934][ T5947] veth0_vlan: entered promiscuous mode [ 65.604892][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.608787][ T5947] veth1_vlan: entered promiscuous mode [ 65.621262][ T5942] veth0_macvtap: entered promiscuous mode [ 65.626844][ T5942] veth1_macvtap: entered promiscuous mode [ 65.643174][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.657961][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.674145][ T75] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.684187][ T5947] veth0_macvtap: entered promiscuous mode [ 65.686789][ T75] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.691241][ T75] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.700375][ T75] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.710539][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.713861][ T5947] veth1_macvtap: entered promiscuous mode [ 65.721731][ T5946] veth0_vlan: entered promiscuous mode [ 65.750990][ T5946] veth1_vlan: entered promiscuous mode [ 65.765925][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.787554][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.815869][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.834529][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.839333][ T160] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.844930][ T5952] veth0_vlan: entered promiscuous mode [ 65.858922][ T160] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.862740][ T160] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.869695][ T160] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.875480][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.879402][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.897141][ T5952] veth1_vlan: entered promiscuous mode [ 65.903814][ T5946] veth0_macvtap: entered promiscuous mode [ 65.923147][ T5946] veth1_macvtap: entered promiscuous mode [ 65.929474][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.930339][ T5942] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.933180][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.959244][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.996762][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.000105][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.005331][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.012637][ T75] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.015397][ T75] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.018155][ T75] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.068915][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.078777][ T5952] veth0_macvtap: entered promiscuous mode [ 66.085058][ T5952] veth1_macvtap: entered promiscuous mode [ 66.095168][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.101609][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.162937][ T160] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.177602][ T160] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.181451][ T160] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.185730][ T160] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.243989][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.258749][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.287595][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.294945][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.322781][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.325435][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.331693][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.339332][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.628935][ T6040] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 66.631694][ T6040] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4'. [ 66.808629][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.812123][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.838770][ T6043] cgroup: name respecified [ 66.898494][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.920141][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.923909][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.927428][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.932118][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.935134][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.080649][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.183053][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.418937][ T5956] Bluetooth: hci3: command tx timeout [ 67.421840][ T5956] Bluetooth: hci2: command tx timeout [ 67.424690][ T5956] Bluetooth: hci1: command tx timeout [ 67.427772][ T5956] Bluetooth: hci0: command tx timeout [ 68.550794][ T6061] 9pnet_virtio: no channels available for device syz [ 68.594139][ T6069] overlay: Unknown parameter '/' [ 68.678611][ T6070] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 69.508756][ T5953] Bluetooth: hci0: command tx timeout [ 69.509066][ T5956] Bluetooth: hci1: command tx timeout [ 69.510964][ T5956] Bluetooth: hci2: command tx timeout [ 69.512869][ T5953] Bluetooth: hci3: command tx timeout [ 70.602034][ T6082] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7'. [ 71.403531][ T6097] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10'. [ 71.836425][ T5953] Bluetooth: hci3: command tx timeout [ 71.836508][ T5956] Bluetooth: hci0: command tx timeout [ 71.836542][ T5303] Bluetooth: hci1: command tx timeout [ 71.838609][ T64] Bluetooth: hci2: command tx timeout [ 73.333495][ T5948] udevd[5948]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 73.799711][ T6125] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.867958][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16'. [ 73.871817][ T6125] bridge_slave_1: left allmulticast mode [ 73.874242][ T6125] bridge_slave_1: left promiscuous mode [ 73.878664][ T6125] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.094693][ T6125] bridge_slave_0: left allmulticast mode [ 74.097477][ T6125] bridge_slave_0: left promiscuous mode [ 74.106498][ T6125] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.977139][ T6139] binder: 6138:6139 ioctl c0306201 0 returned -14 [ 75.281133][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.439206][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 75.444336][ T24] usb 5-1: config 0 has no interfaces? [ 75.446674][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 75.454279][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.467148][ T24] usb 5-1: config 0 descriptor?? [ 75.610519][ T6152] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 75.612871][ T6152] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 75.616221][ T6152] vhci_hcd vhci_hcd.0: Device attached [ 75.708240][ T6080] usb 5-1: USB disconnect, device number 2 [ 75.722078][ T6152] x_tables: duplicate underflow at hook 3 [ 75.855754][ T6152] fuse: Bad value for 'fd' [ 75.918496][ T34] usb 44-1: SetAddress Request (2) to port 0 [ 75.921524][ T34] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 75.938116][ T982] cfg80211: failed to load regulatory.db [ 76.001588][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.085378][ T6157] ªªªªª»: renamed from hsr0 (while UP) [ 76.135602][ T6157] tipc: Can't bind to reserved service type 1 [ 76.304781][ T6153] vhci_hcd: connection reset by peer [ 76.340743][ T160] vhci_hcd vhci_hcd.3: stop threads [ 76.356780][ T160] vhci_hcd vhci_hcd.3: release socket [ 76.391110][ T160] vhci_hcd vhci_hcd.3: disconnect device [ 76.747571][ T6165] netlink: 'syz.0.23': attribute type 4 has an invalid length. [ 76.787459][ T6165] netlink: 'syz.0.23': attribute type 4 has an invalid length. [ 77.459014][ T6177] Bluetooth: MGMT ver 1.23 [ 77.837771][ T6184] overlay: Unknown parameter '/' [ 77.848740][ T6184] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 78.349854][ T6192] 9pnet_virtio: no channels available for device syz [ 78.984972][ T6172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24'. [ 81.018611][ T34] usb 44-1: device descriptor read/8, error -110 [ 81.496254][ T6226] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 81.498376][ T6226] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 81.508485][ T6226] vhci_hcd vhci_hcd.0: Device attached [ 81.577322][ T34] usb usb44-port1: attempt power cycle [ 81.607974][ T6226] x_tables: duplicate underflow at hook 3 [ 81.656910][ T6226] fuse: Bad value for 'fd' [ 81.825569][ T6029] usb 38-1: SetAddress Request (2) to port 0 [ 81.843263][ T6029] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 82.067829][ T6227] vhci_hcd: connection reset by peer [ 82.071182][ T6105] vhci_hcd vhci_hcd.0: stop threads [ 82.075009][ T6105] vhci_hcd vhci_hcd.0: release socket [ 82.077224][ T6105] vhci_hcd vhci_hcd.0: disconnect device [ 82.770446][ T34] usb usb44-port1: unable to enumerate USB device [ 83.026303][ T6242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.38'. [ 83.029823][ T6242] bridge_slave_1: left allmulticast mode [ 83.031884][ T6242] bridge_slave_1: left promiscuous mode [ 83.035128][ T6242] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.062008][ T6242] bridge_slave_0: left allmulticast mode [ 83.063977][ T6242] bridge_slave_0: left promiscuous mode [ 83.066546][ T6242] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.952461][ T6268] netlink: 'syz.1.40': attribute type 1 has an invalid length. [ 83.954956][ T6268] netlink: 224 bytes leftover after parsing attributes in process `syz.1.40'. [ 84.788266][ T6286] overlay: Unknown parameter '/' [ 84.851027][ T6287] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 85.617803][ T6266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.39'. [ 87.005350][ T6029] usb 38-1: device descriptor read/8, error -110 [ 87.321858][ T6314] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 87.324661][ T6314] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 87.331178][ T6314] vhci_hcd vhci_hcd.0: Device attached [ 87.412490][ T6313] tmpfs: Unknown parameter 'òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿtmpfs' [ 87.453336][ T6029] usb usb38-port1: attempt power cycle [ 87.818539][ T6193] usb 40-1: SetAddress Request (2) to port 0 [ 87.820786][ T6193] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 88.019286][ T6029] usb usb38-port1: unable to enumerate USB device [ 88.600194][ T6316] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 88.642347][ T6315] vhci_hcd: connection closed [ 88.650722][ T6296] vhci_hcd vhci_hcd.1: stop threads [ 88.654045][ T6296] vhci_hcd vhci_hcd.1: release socket [ 89.208402][ T6296] vhci_hcd vhci_hcd.1: disconnect device [ 89.678582][ T6336] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 89.680697][ T6336] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 89.683618][ T6336] vhci_hcd vhci_hcd.0: Device attached [ 89.972118][ T6029] usb 42-1: SetAddress Request (2) to port 0 [ 89.974702][ T6029] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 90.239311][ T6337] vhci_hcd: connection reset by peer [ 90.242195][ T1164] vhci_hcd vhci_hcd.2: stop threads [ 90.244391][ T1164] vhci_hcd vhci_hcd.2: release socket [ 90.247149][ T1164] vhci_hcd vhci_hcd.2: disconnect device [ 90.347616][ T6343] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 90.349694][ T6343] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 90.360652][ T6343] vhci_hcd vhci_hcd.0: Device attached [ 91.719728][ T40] audit: type=1326 audit(1769148596.183:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6358 comm="syz.3.56" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f76579 code=0x0 [ 91.875109][ T6344] vhci_hcd: connection closed [ 91.879524][ T12] vhci_hcd vhci_hcd.1: stop threads [ 91.883756][ T12] vhci_hcd vhci_hcd.1: release socket [ 91.886299][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 92.428869][ T6373] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 92.431672][ T6373] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 92.435524][ T6373] vhci_hcd vhci_hcd.0: Device attached [ 92.698457][ T34] usb 38-1: SetAddress Request (6) to port 0 [ 92.700887][ T34] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 93.075885][ T6382] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 93.078507][ T6382] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 93.128772][ T6382] vhci_hcd vhci_hcd.0: Device attached [ 93.176195][ T6374] vhci_hcd: connection reset by peer [ 93.178720][ T1147] vhci_hcd vhci_hcd.0: stop threads [ 93.180432][ T1147] vhci_hcd vhci_hcd.0: release socket [ 93.182209][ T1147] vhci_hcd vhci_hcd.0: disconnect device [ 93.237396][ T6382] x_tables: duplicate underflow at hook 3 [ 93.296931][ T6382] fuse: Bad value for 'fd' [ 94.088417][ T6383] vhci_hcd: connection reset by peer [ 94.098793][ T1206] vhci_hcd vhci_hcd.1: stop threads [ 94.101021][ T1206] vhci_hcd vhci_hcd.1: release socket [ 94.103539][ T6193] usb 40-1: device descriptor read/8, error -110 [ 94.119308][ T1206] vhci_hcd vhci_hcd.1: disconnect device [ 94.132577][ T6390] netlink: 'syz.3.61': attribute type 2 has an invalid length. [ 94.288604][ T982] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 94.553816][ T6398] netlink: 'syz.0.60': attribute type 1 has an invalid length. [ 94.556381][ T6398] netlink: 224 bytes leftover after parsing attributes in process `syz.0.60'. [ 95.028017][ T6029] usb 42-1: device descriptor read/8, error -110 [ 95.493831][ T6193] usb usb40-port1: attempt power cycle [ 95.694164][ T6416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.64'. [ 95.700448][ T6029] usb usb42-port1: attempt power cycle [ 96.639078][ T6193] usb usb40-port1: unable to enumerate USB device [ 96.699139][ T6029] usb usb42-port1: unable to enumerate USB device [ 96.992910][ T6431] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 96.995733][ T6431] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 97.016069][ T6431] vhci_hcd vhci_hcd.0: Device attached [ 97.089126][ T6429] overlay: Unknown parameter '/' [ 97.098831][ T6429] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 97.248431][ T60] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 97.640915][ T6435] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 97.643191][ T6435] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 97.646337][ T6435] vhci_hcd vhci_hcd.0: Device attached [ 97.738568][ T34] usb 38-1: device descriptor read/8, error -110 [ 97.824425][ T6437] vhci_hcd: connection closed [ 97.824801][ T1147] vhci_hcd vhci_hcd.1: stop threads [ 97.829927][ T1147] vhci_hcd vhci_hcd.1: release socket [ 97.832508][ T1147] vhci_hcd vhci_hcd.1: disconnect device [ 98.106794][ T6432] vhci_hcd: connection reset by peer [ 98.111093][ T13] vhci_hcd vhci_hcd.2: stop threads [ 98.115683][ T13] vhci_hcd vhci_hcd.2: release socket [ 98.118136][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 98.138801][ T34] usb usb38-port1: attempt power cycle [ 98.618631][ T5953] Bluetooth: hci4: command 0x1003 tx timeout [ 98.622621][ T5956] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 98.699266][ T34] usb usb38-port1: unable to enumerate USB device [ 99.326191][ T6459] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 99.328369][ T6459] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 99.331350][ T6459] vhci_hcd vhci_hcd.0: Device attached [ 99.828446][ T6460] vhci_hcd: connection closed [ 99.829889][ T62] vhci_hcd vhci_hcd.2: stop threads [ 99.834245][ T62] vhci_hcd vhci_hcd.2: release socket [ 99.847396][ T62] vhci_hcd vhci_hcd.2: disconnect device [ 99.876391][ T6443] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 99.888493][ T6443] Error validating options; rc = [-22] [ 100.218543][ T6195] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 100.368395][ T6195] usb 6-1: Using ep0 maxpacket: 16 [ 100.372892][ T6195] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 100.377063][ T6195] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 100.381453][ T6195] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.386817][ T6195] usb 6-1: config 1 interface 0 has no altsetting 0 [ 100.392229][ T6195] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 100.395221][ T6195] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.418413][ T6195] usb 6-1: Product: syz [ 100.419794][ T6195] usb 6-1: Manufacturer: syz [ 100.421278][ T6195] usb 6-1: SerialNumber: syz [ 100.648063][ T6195] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 101.005827][ T6480] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 101.007974][ T6480] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 101.010864][ T6480] vhci_hcd vhci_hcd.0: Device attached [ 101.036178][ T6480] x_tables: duplicate underflow at hook 3 [ 101.046554][ T6480] fuse: Bad value for 'fd' [ 101.226394][ T6487] netlink: 20 bytes leftover after parsing attributes in process `syz.3.78'. [ 101.470573][ T6481] vhci_hcd: connection closed [ 101.470739][ T6296] vhci_hcd vhci_hcd.2: stop threads [ 101.478429][ T6296] vhci_hcd vhci_hcd.2: release socket [ 101.481542][ T6296] vhci_hcd vhci_hcd.2: disconnect device [ 101.518698][ T5945] udevd[5945]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 101.524936][ T5948] udevd[5948]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 102.368542][ T60] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 102.439198][ T6501] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 102.441868][ T6501] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 102.445338][ T6501] vhci_hcd vhci_hcd.0: Device attached [ 102.708506][ T6195] usb 44-1: SetAddress Request (6) to port 0 [ 102.710694][ T5956] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 102.713774][ T6195] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 103.008618][ T6502] vhci_hcd: connection reset by peer [ 103.013406][ T62] vhci_hcd vhci_hcd.3: stop threads [ 103.015672][ T62] vhci_hcd vhci_hcd.3: release socket [ 103.018493][ T62] vhci_hcd vhci_hcd.3: disconnect device [ 103.629030][ T6002] usb usb42-port1: attempt power cycle [ 104.858423][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 104.858547][ T5956] Bluetooth: hci4: command 0x1003 tx timeout [ 104.919000][ T6002] usb usb42-port1: unable to enumerate USB device [ 105.084378][ T6529] Zero length message leads to an empty skb [ 105.100359][ T6529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.85'. [ 105.104232][ T6529] openvswitch: netlink: Flow actions attr not present in new flow. [ 105.138171][ T6530] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 105.141013][ T6530] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 105.149039][ T6530] vhci_hcd vhci_hcd.0: Device attached [ 105.518675][ T6002] usb 38-1: SetAddress Request (10) to port 0 [ 105.520728][ T6002] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 105.766338][ T6531] vhci_hcd: connection closed [ 105.768196][ T160] vhci_hcd vhci_hcd.0: stop threads [ 105.772337][ T160] vhci_hcd vhci_hcd.0: release socket [ 105.774661][ T160] vhci_hcd vhci_hcd.0: disconnect device [ 105.904500][ T6443] usblp0:failed reading printer status (-110) [ 106.093911][ T6193] usb 6-1: USB disconnect, device number 2 [ 106.101400][ T6193] usblp0: removed [ 106.216728][ T6002] usb 38-1: enqueue for inactive port 0 [ 106.754302][ T6002] usb usb38-port1: attempt power cycle [ 106.827137][ T6560] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 106.829302][ T6560] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 106.868616][ T6560] vhci_hcd vhci_hcd.0: Device attached [ 106.909122][ T6002] usb 38-1: SetAddress Request (12) to port 0 [ 106.928180][ T6002] usb 38-1: new SuperSpeed USB device number 12 using vhci_hcd [ 107.172837][ T6550] tmpfs: Unknown parameter 'òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿtmpfs' [ 107.362261][ T6567] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0) [ 107.404909][ T6561] vhci_hcd: connection reset by peer [ 107.406922][ T62] vhci_hcd vhci_hcd.0: stop threads [ 107.408957][ T62] vhci_hcd vhci_hcd.0: release socket [ 107.411304][ T62] vhci_hcd vhci_hcd.0: disconnect device [ 107.738735][ T6195] usb 44-1: device descriptor read/8, error -110 [ 107.762526][ T6571] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 107.765223][ T6571] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 107.768223][ T6571] vhci_hcd vhci_hcd.0: Device attached [ 108.058582][ T60] usb 42-1: SetAddress Request (10) to port 0 [ 108.063018][ T60] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 108.141802][ T6195] usb usb44-port1: attempt power cycle [ 108.350353][ T6572] vhci_hcd: connection reset by peer [ 108.353841][ T6296] vhci_hcd vhci_hcd.2: stop threads [ 108.356168][ T6296] vhci_hcd vhci_hcd.2: release socket [ 108.358650][ T6296] vhci_hcd vhci_hcd.2: disconnect device [ 108.703844][ T6195] usb usb44-port1: unable to enumerate USB device [ 108.966815][ T6587] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 108.968946][ T6587] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 108.972044][ T6587] vhci_hcd vhci_hcd.0: Device attached [ 109.388406][ T6195] usb 44-1: SetAddress Request (10) to port 0 [ 109.390405][ T6195] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 109.961054][ T6588] vhci_hcd: connection reset by peer [ 110.039290][ T160] vhci_hcd vhci_hcd.3: stop threads [ 110.041564][ T160] vhci_hcd vhci_hcd.3: release socket [ 110.047740][ T160] vhci_hcd vhci_hcd.3: disconnect device [ 111.472797][ T6618] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 111.475210][ T6618] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 111.497890][ T6618] vhci_hcd vhci_hcd.0: Device attached [ 112.796060][ T6619] vhci_hcd: connection reset by peer [ 112.798265][ T6296] vhci_hcd vhci_hcd.0: stop threads [ 112.805112][ T6296] vhci_hcd vhci_hcd.0: release socket [ 112.808492][ T6002] usb 38-1: device descriptor read/8, error -110 [ 112.811112][ T6603] FAT-fs (sr0): bogus number of reserved sectors [ 112.818784][ T6296] vhci_hcd vhci_hcd.0: disconnect device [ 112.824021][ T6603] FAT-fs (sr0): Can't find a valid FAT filesystem [ 113.098705][ T60] usb 42-1: device descriptor read/8, error -110 [ 113.229922][ T6002] usb usb38-port1: unable to enumerate USB device [ 113.883187][ T60] usb usb42-port1: attempt power cycle [ 113.891612][ T6633] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 113.894242][ T6633] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 113.898283][ T6633] vhci_hcd vhci_hcd.0: Device attached [ 113.978599][ T6646] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 113.980626][ T6646] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 113.984594][ T6646] vhci_hcd vhci_hcd.0: Device attached [ 113.997369][ T6645] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 113.999754][ T6645] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 114.002950][ T6645] vhci_hcd vhci_hcd.0: Device attached [ 114.152025][ T6640] vhci_hcd: connection closed [ 114.152325][ T160] vhci_hcd vhci_hcd.3: stop threads [ 114.156929][ T160] vhci_hcd vhci_hcd.3: release socket [ 114.159227][ T160] vhci_hcd vhci_hcd.3: disconnect device [ 114.218507][ T60] usb 42-1: SetAddress Request (12) to port 0 [ 114.221271][ T60] usb 42-1: new SuperSpeed USB device number 12 using vhci_hcd [ 114.268492][ T6002] usb 40-1: SetAddress Request (7) to port 0 [ 114.271245][ T6002] usb 40-1: new SuperSpeed USB device number 7 using vhci_hcd [ 114.459618][ T6195] usb 44-1: device descriptor read/8, error -110 [ 114.625046][ T6648] vhci_hcd: connection reset by peer [ 114.627845][ T6216] vhci_hcd vhci_hcd.1: stop threads [ 114.629785][ T6216] vhci_hcd vhci_hcd.1: release socket [ 114.631751][ T6216] vhci_hcd vhci_hcd.1: disconnect device [ 114.723164][ T6647] vhci_hcd: connection reset by peer [ 114.725664][ T75] vhci_hcd vhci_hcd.2: stop threads [ 114.727727][ T75] vhci_hcd vhci_hcd.2: release socket [ 114.730319][ T75] vhci_hcd vhci_hcd.2: disconnect device [ 114.849537][ T6195] usb usb44-port1: attempt power cycle [ 114.928576][ T9] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 115.493291][ T6666] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 115.496042][ T6666] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 115.500091][ T6666] vhci_hcd vhci_hcd.0: Device attached [ 116.138454][ T5956] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 116.138607][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 116.208855][ T6195] usb usb44-port1: unable to enumerate USB device [ 116.383819][ T6668] vhci_hcd: connection closed [ 116.384050][ T75] vhci_hcd vhci_hcd.1: stop threads [ 116.387314][ T75] vhci_hcd vhci_hcd.1: release socket [ 116.390065][ T75] vhci_hcd vhci_hcd.1: disconnect device [ 116.478891][ T6680] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 116.481565][ T6680] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 116.485057][ T6680] vhci_hcd vhci_hcd.0: Device attached [ 116.593842][ T40] audit: type=1804 audit(1769148621.053:3): pid=6680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.113" name="/newroot/30/file0/file1" dev="overlay" ino=177 res=1 errno=0 [ 116.728464][ T6195] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 117.098489][ T5956] Bluetooth: hci5: command 0x1003 tx timeout [ 117.113850][ T5953] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 117.144583][ T6028] libceph: connect (1)[c::]:6789 error -101 [ 117.149084][ T6028] libceph: mon0 (1)[c::]:6789 connect error [ 117.672768][ T6028] libceph: connect (1)[c::]:6789 error -101 [ 117.674793][ T6028] libceph: mon0 (1)[c::]:6789 connect error [ 117.682683][ T6681] vhci_hcd: connection reset by peer [ 117.685524][ T75] vhci_hcd vhci_hcd.0: stop threads [ 117.687720][ T75] vhci_hcd vhci_hcd.0: release socket [ 117.690325][ T75] vhci_hcd vhci_hcd.0: disconnect device [ 118.188675][ T6028] libceph: connect (1)[c::]:6789 error -101 [ 118.190564][ T6028] libceph: mon0 (1)[c::]:6789 connect error [ 118.459126][ T6702] netlink: 20 bytes leftover after parsing attributes in process `syz.0.115'. [ 119.142428][ T6707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.116'. [ 119.149375][ T6707] bridge_slave_1: left allmulticast mode [ 119.151587][ T6707] bridge_slave_1: left promiscuous mode [ 119.187935][ T6707] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.268493][ T60] usb 42-1: device descriptor read/8, error -110 [ 119.293960][ T5948] udevd[5948]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 119.338699][ T6002] usb 40-1: device descriptor read/8, error -110 [ 119.348964][ T6028] libceph: connect (1)[c::]:6789 error -101 [ 119.350982][ T6028] libceph: mon0 (1)[c::]:6789 connect error [ 119.405841][ T6707] bridge_slave_0: left allmulticast mode [ 119.408808][ T6707] bridge_slave_0: left promiscuous mode [ 119.411160][ T6707] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.644781][ T6714] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 119.647529][ T6714] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 119.651055][ T6714] vhci_hcd vhci_hcd.0: Device attached [ 119.668999][ T60] usb usb42-port1: unable to enumerate USB device [ 119.729101][ T6002] usb usb40-port1: attempt power cycle [ 119.889860][ T6688] ceph: No mds server is up or the cluster is laggy [ 120.034641][ T6721] 9pnet_virtio: no channels available for device syz [ 120.126621][ T6723] overlay: Unknown parameter '/' [ 120.190893][ T6724] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 120.193921][ T6724] overlayfs: overlapping lowerdir path [ 120.845701][ T6715] vhci_hcd: connection closed [ 120.846069][ T6296] vhci_hcd vhci_hcd.0: stop threads [ 120.852511][ T6296] vhci_hcd vhci_hcd.0: release socket [ 120.855529][ T6296] vhci_hcd vhci_hcd.0: disconnect device [ 121.289991][ T6002] usb usb40-port1: unable to enumerate USB device [ 122.006013][ T6736] netlink: 'syz.2.122': attribute type 2 has an invalid length. [ 122.008517][ T6195] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 123.073136][ T6753] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 123.300061][ T60] usb usb38-port1: attempt power cycle [ 123.869661][ T60] usb usb38-port1: unable to enumerate USB device [ 124.109625][ T6762] process 'syz.3.126' launched './file0' with NULL argv: empty string added [ 124.120337][ T6762] capability: warning: `syz.3.126' uses 32-bit capabilities (legacy support in use) [ 124.144452][ T6759] netlink: 'syz.2.127': attribute type 2 has an invalid length. [ 124.378604][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 125.325401][ T6777] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 125.327533][ T6777] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 125.330723][ T6777] vhci_hcd vhci_hcd.0: Device attached [ 125.628817][ T60] usb 44-1: SetAddress Request (14) to port 0 [ 125.632119][ T60] usb 44-1: new SuperSpeed USB device number 14 using vhci_hcd [ 125.757484][ T6781] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 125.983275][ T6778] vhci_hcd: connection reset by peer [ 125.987923][ T6105] vhci_hcd vhci_hcd.3: stop threads [ 125.994835][ T6105] vhci_hcd vhci_hcd.3: release socket [ 125.997503][ T6105] vhci_hcd vhci_hcd.3: disconnect device [ 126.652212][ T6789] netlink: 'syz.1.132': attribute type 4 has an invalid length. [ 126.768066][ T6790] netlink: 'syz.1.132': attribute type 4 has an invalid length. [ 127.971218][ T6803] netlink: 'syz.1.135': attribute type 2 has an invalid length. [ 129.499062][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 129.499114][ T5956] Bluetooth: hci4: command 0x1003 tx timeout [ 129.545701][ T6817] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 129.548536][ T6817] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 129.554029][ T6817] vhci_hcd vhci_hcd.0: Device attached [ 129.569237][ T6816] netlink: 20 bytes leftover after parsing attributes in process `syz.2.136'. [ 130.219764][ T6818] vhci_hcd: connection closed [ 130.226531][ T1164] vhci_hcd vhci_hcd.3: stop threads [ 130.234719][ T1164] vhci_hcd vhci_hcd.3: release socket [ 130.237413][ T1164] vhci_hcd vhci_hcd.3: disconnect device [ 130.880584][ T60] usb 44-1: device descriptor read/8, error -110 [ 131.929030][ T60] usb usb44-port1: attempt power cycle [ 133.193839][ T60] usb usb44-port1: unable to enumerate USB device [ 133.526525][ T40] audit: type=1326 audit(1769148637.983:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6855 comm="syz.2.144" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x0 [ 133.615007][ T6863] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 133.617128][ T6863] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 133.627241][ T6863] vhci_hcd vhci_hcd.0: Device attached [ 133.731223][ T40] audit: type=1804 audit(1769148638.193:5): pid=6863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.147" name="/newroot/35/file0/file1" dev="overlay" ino=209 res=1 errno=0 [ 133.899510][ T24] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 134.033602][ T6868] netlink: 'syz.0.148': attribute type 2 has an invalid length. [ 134.319130][ T6864] vhci_hcd: connection reset by peer [ 134.405297][ T6874] tipc: Started in network mode [ 134.407679][ T6874] tipc: Node identity 7f000001, cluster identity 4711 [ 134.412350][ T6874] tipc: Enabling of bearer rejected, failed to enable media [ 134.428914][ T6874] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:017b:70bb [ 134.433391][ T6874] tipc: Enabled bearer , priority 10 [ 134.440851][ T6874] Cannot find add_set index 3 as target [ 134.448605][ T6081] vhci_hcd vhci_hcd.3: stop threads [ 134.450724][ T6081] vhci_hcd vhci_hcd.3: release socket [ 134.453092][ T6081] vhci_hcd vhci_hcd.3: disconnect device [ 135.550760][ T6195] tipc: Node number set to 2130706433 [ 136.083837][ T6894] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 136.085974][ T6894] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 136.140523][ T6894] vhci_hcd vhci_hcd.0: Device attached [ 136.538990][ T6895] vhci_hcd: connection closed [ 136.547974][ T160] vhci_hcd vhci_hcd.3: stop threads [ 136.551654][ T160] vhci_hcd vhci_hcd.3: release socket [ 136.553684][ T160] vhci_hcd vhci_hcd.3: disconnect device [ 136.786100][ T6901] ubi31: attaching mtd0 [ 136.795810][ T6901] ubi31: scanning is finished [ 136.797864][ T6901] ubi31: empty MTD device detected [ 137.008760][ T6901] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 137.011998][ T6901] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 137.055938][ T6901] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 137.078394][ T6901] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 137.102877][ T6901] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 137.108896][ T6901] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 137.118622][ T6901] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1888444611 [ 137.133382][ T6901] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 137.159732][ T6905] ubi31: background thread "ubi_bgt31d" started, PID 6905 [ 137.550477][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.754781][ T40] audit: type=1326 audit(1769148642.213:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6909 comm="syz.2.157" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x0 [ 138.261861][ T6924] netlink: 'syz.0.159': attribute type 2 has an invalid length. [ 139.018957][ T24] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 139.581823][ T6940] tipc: Started in network mode [ 139.583892][ T6940] tipc: Node identity 7f000001, cluster identity 4711 [ 139.589282][ T6940] tipc: Enabling of bearer rejected, failed to enable media [ 139.606526][ T6940] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:017b:70bb [ 139.610862][ T6940] tipc: Enabled bearer , priority 10 [ 139.619060][ T6940] Cannot find add_set index 3 as target [ 140.148432][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 140.148703][ T5956] Bluetooth: hci4: command 0x1003 tx timeout [ 140.310398][ T6755] usb usb44-port1: attempt power cycle [ 140.738409][ T6221] tipc: Node number set to 2130706433 [ 140.901986][ T6755] usb usb44-port1: unable to enumerate USB device [ 141.083702][ T40] audit: type=1326 audit(1769148645.543:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6954 comm="syz.0.166" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x0 [ 141.352118][ T6959] hpfs: hpfs_map_sector(): read error [ 143.442210][ T6966] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 143.444946][ T6966] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 143.557882][ T6966] vhci_hcd vhci_hcd.0: Device attached [ 143.625788][ T6971] netlink: 'syz.0.170': attribute type 2 has an invalid length. [ 143.829221][ T6967] vhci_hcd: connection closed [ 143.829497][ T1164] vhci_hcd vhci_hcd.3: stop threads [ 143.835570][ T1164] vhci_hcd vhci_hcd.3: release socket [ 143.838750][ T1164] vhci_hcd vhci_hcd.3: disconnect device [ 143.858808][ T6221] usb 44-1: enqueue for inactive port 0 [ 144.383454][ T6221] usb usb44-port1: attempt power cycle [ 145.156270][ T7000] delete_channel: no stack [ 145.669241][ T6221] usb usb44-port1: unable to enumerate USB device [ 145.934018][ T40] audit: type=1326 audit(1769148650.393:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.0.176" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x0 [ 146.942167][ T7027] netlink: 20 bytes leftover after parsing attributes in process `syz.2.181'. [ 147.327863][ T5948] udevd[5948]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 147.335026][ T7041] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 147.337734][ T7041] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 147.497525][ T7041] vhci_hcd vhci_hcd.0: Device attached [ 147.778608][ T6755] usb 40-1: SetAddress Request (11) to port 0 [ 147.778753][ T6755] usb 40-1: new SuperSpeed USB device number 11 using vhci_hcd [ 148.106729][ T7042] vhci_hcd: connection reset by peer [ 148.109672][ T160] vhci_hcd vhci_hcd.1: stop threads [ 148.118434][ T160] vhci_hcd vhci_hcd.1: release socket [ 148.123117][ T160] vhci_hcd vhci_hcd.1: disconnect device [ 148.268137][ T40] audit: type=1326 audit(1769148652.723:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.0.184" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x0 [ 149.018672][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 149.146236][ T40] audit: type=1326 audit(1769148653.603:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.1.187" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x0 [ 149.505300][ T7077] Bluetooth: MGMT ver 1.23 [ 151.419218][ T5956] Bluetooth: hci3: command 0x0405 tx timeout [ 152.625404][ T7107] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 152.628293][ T7107] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 152.859630][ T7107] vhci_hcd vhci_hcd.0: Device attached [ 152.868531][ T6755] usb 40-1: device descriptor read/8, error -110 [ 153.131673][ T7108] vhci_hcd: connection closed [ 153.132141][ T75] vhci_hcd vhci_hcd.3: stop threads [ 153.136470][ T75] vhci_hcd vhci_hcd.3: release socket [ 153.139214][ T6221] usb 44-1: SetAddress Request (26) to port 0 [ 153.141781][ T6221] usb 44-1: new SuperSpeed USB device number 26 using vhci_hcd [ 153.145132][ T75] vhci_hcd vhci_hcd.3: disconnect device [ 153.158706][ T6221] usb 44-1: enqueue for inactive port 0 [ 153.267095][ T6755] usb usb40-port1: attempt power cycle [ 153.559235][ T6221] usb usb44-port1: attempt power cycle [ 153.829239][ T6755] usb usb40-port1: unable to enumerate USB device [ 154.139175][ T6221] usb usb44-port1: unable to enumerate USB device [ 154.347260][ T7133] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 154.349529][ T7133] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 154.352511][ T7133] vhci_hcd vhci_hcd.0: Device attached [ 154.557074][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.200'. [ 154.561113][ T7140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.200'. [ 154.740795][ T7140] /dev/sr0: Can't open blockdev [ 154.758478][ T60] usb 44-1: SetAddress Request (30) to port 0 [ 154.760573][ T60] usb 44-1: new SuperSpeed USB device number 30 using vhci_hcd [ 154.974690][ T7134] vhci_hcd: connection reset by peer [ 154.976658][ T1164] vhci_hcd vhci_hcd.3: stop threads [ 154.978567][ T1164] vhci_hcd vhci_hcd.3: release socket [ 154.981246][ T1164] vhci_hcd vhci_hcd.3: disconnect device [ 155.578610][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 155.624796][ T7142] netlink: 'syz.2.202': attribute type 2 has an invalid length. [ 156.007818][ T7151] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 156.010606][ T7151] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 156.024000][ T7151] vhci_hcd vhci_hcd.0: Device attached [ 156.898458][ T6221] usb 38-1: SetAddress Request (18) to port 0 [ 156.900540][ T6221] usb 38-1: new SuperSpeed USB device number 18 using vhci_hcd [ 157.158779][ T7155] vhci_hcd: connection closed [ 157.159060][ T6216] vhci_hcd vhci_hcd.0: stop threads [ 157.163091][ T6216] vhci_hcd vhci_hcd.0: release socket [ 157.182749][ T6216] vhci_hcd vhci_hcd.0: disconnect device [ 157.316935][ T7169] netlink: 'syz.1.213': attribute type 2 has an invalid length. [ 157.967706][ T7172] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 157.974458][ T7172] Error validating options; rc = [-22] [ 159.819517][ T60] usb 44-1: device descriptor read/8, error -110 [ 160.128215][ T7209] overlay: Unknown parameter '/' [ 160.134473][ T7209] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 160.208897][ T60] usb usb44-port1: attempt power cycle [ 160.858496][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 160.861318][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 161.609862][ T5953] Bluetooth: hci5: command 0x1003 tx timeout [ 161.612162][ T5956] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 161.665795][ T60] usb usb44-port1: unable to enumerate USB device [ 162.218640][ T6221] usb 38-1: device descriptor read/8, error -110 [ 162.638812][ T6221] usb usb38-port1: attempt power cycle [ 162.995824][ T40] audit: type=1326 audit(1769148667.453:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.2.216" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x0 [ 163.206452][ T6221] usb usb38-port1: unable to enumerate USB device [ 164.510412][ T7246] delete_channel: no stack [ 166.778493][ T5956] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 166.779041][ T5953] Bluetooth: hci4: command 0x1003 tx timeout [ 168.070284][ T7259] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 168.072444][ T7259] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 168.075238][ T7259] vhci_hcd vhci_hcd.0: Device attached [ 168.106545][ T7259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.223'. [ 168.114864][ T7259] netlink: 20 bytes leftover after parsing attributes in process `syz.1.223'. [ 168.136669][ T7259] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 168.318536][ T6965] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 169.211098][ T7270] vhci_hcd: connection reset by peer [ 169.213846][ T62] vhci_hcd vhci_hcd.1: stop threads [ 169.216275][ T62] vhci_hcd vhci_hcd.1: release socket [ 169.219107][ T62] vhci_hcd vhci_hcd.1: disconnect device [ 170.089392][ T7290] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 170.091571][ T7290] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 170.094705][ T7290] vhci_hcd vhci_hcd.0: Device attached [ 170.219385][ T5953] Bluetooth: hci4: command 0x1003 tx timeout [ 170.220476][ T5956] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 170.321839][ T982] libceph: connect (1)[c::]:6789 error -101 [ 170.324271][ T982] libceph: mon0 (1)[c::]:6789 connect error [ 170.368536][ T60] usb 44-1: SetAddress Request (34) to port 0 [ 170.371872][ T60] usb 44-1: new SuperSpeed USB device number 34 using vhci_hcd [ 170.578611][ T982] libceph: connect (1)[c::]:6789 error -101 [ 170.581119][ T982] libceph: mon0 (1)[c::]:6789 connect error [ 170.672285][ T7291] vhci_hcd: connection reset by peer [ 170.674695][ T62] vhci_hcd vhci_hcd.3: stop threads [ 170.677120][ T62] vhci_hcd vhci_hcd.3: release socket [ 170.679609][ T62] vhci_hcd vhci_hcd.3: disconnect device [ 171.089608][ T982] libceph: connect (1)[c::]:6789 error -101 [ 171.092518][ T982] libceph: mon0 (1)[c::]:6789 connect error [ 172.309344][ T982] libceph: connect (1)[c::]:6789 error -101 [ 172.311407][ T982] libceph: mon0 (1)[c::]:6789 connect error [ 172.561193][ T7317] delete_channel: no stack [ 172.836558][ T7312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.233'. [ 172.840437][ T7312] bridge_slave_1: left allmulticast mode [ 172.842486][ T7295] ceph: No mds server is up or the cluster is laggy [ 172.843705][ T7312] bridge_slave_1: left promiscuous mode [ 172.856401][ T7312] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.019919][ T7312] bridge_slave_0: left allmulticast mode [ 173.022061][ T7312] bridge_slave_0: left promiscuous mode [ 173.025660][ T7312] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.419814][ T6965] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 173.811187][ T7337] usb usb1: usbfs: process 7337 (syz.3.238) did not claim interface 0 before use [ 175.115524][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.243'. [ 175.119520][ T7371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.243'. [ 175.418533][ T60] usb 44-1: device descriptor read/8, error -110 [ 175.456835][ T7371] /dev/sr0: Can't open blockdev [ 175.826473][ T7381] capability: warning: `syz.0.246' uses deprecated v2 capabilities in a way that may be insecure [ 175.829973][ T60] usb usb44-port1: attempt power cycle [ 176.389234][ T60] usb usb44-port1: unable to enumerate USB device [ 177.556927][ T7391] netlink: 'syz.1.248': attribute type 4 has an invalid length. [ 178.738544][ T7402] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 178.741448][ T7402] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 178.745484][ T7402] vhci_hcd vhci_hcd.0: Device attached [ 179.039628][ T6029] usb 44-1: SetAddress Request (38) to port 0 [ 179.042790][ T6029] usb 44-1: new SuperSpeed USB device number 38 using vhci_hcd [ 179.348781][ T7403] vhci_hcd: connection reset by peer [ 179.351390][ T1147] vhci_hcd vhci_hcd.3: stop threads [ 179.353639][ T1147] vhci_hcd vhci_hcd.3: release socket [ 179.356151][ T1147] vhci_hcd vhci_hcd.3: disconnect device [ 179.838371][ T7415] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 179.840562][ T7415] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 179.845440][ T7415] vhci_hcd vhci_hcd.0: Device attached [ 180.130667][ T6326] usb 40-1: SetAddress Request (15) to port 0 [ 180.132666][ T6326] usb 40-1: new SuperSpeed USB device number 15 using vhci_hcd [ 180.542311][ T7416] vhci_hcd: connection reset by peer [ 180.546285][ T1164] vhci_hcd vhci_hcd.1: stop threads [ 180.551689][ T1164] vhci_hcd vhci_hcd.1: release socket [ 180.554398][ T1164] vhci_hcd vhci_hcd.1: disconnect device [ 182.609053][ T7442] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 182.611772][ T7442] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 182.615238][ T7442] vhci_hcd vhci_hcd.0: Device attached [ 182.623707][ T7443] vhci_hcd: connection closed [ 182.624261][ T13] vhci_hcd vhci_hcd.1: stop threads [ 182.630984][ T13] vhci_hcd vhci_hcd.1: release socket [ 182.633881][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 183.208161][ T7450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.260'. [ 183.374252][ T7450] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.631120][ T7450] netlink: 60 bytes leftover after parsing attributes in process `syz.0.260'. [ 183.738419][ T5956] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 184.138449][ T6029] usb 44-1: device descriptor read/8, error -110 [ 184.529479][ T6029] usb usb44-port1: attempt power cycle [ 184.849949][ T7472] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 184.852572][ T7472] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 184.857803][ T7472] vhci_hcd vhci_hcd.0: Device attached [ 184.951701][ T6029] usb 44-1: SetAddress Request (41) to port 0 [ 184.954378][ T6029] usb 44-1: new SuperSpeed USB device number 41 using vhci_hcd [ 184.999284][ T40] audit: type=1804 audit(1769148689.463:12): pid=7480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.266" name="/newroot/68/bus/bus" dev="overlay" ino=386 res=1 errno=0 [ 184.999687][ T7480] evm: overlay not supported [ 185.027201][ T40] audit: type=1804 audit(1769148689.483:13): pid=7480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.266" name="/newroot/68/bus/bus" dev="overlay" ino=386 res=1 errno=0 [ 185.036322][ T40] audit: type=1800 audit(1769148689.483:14): pid=7480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.266" name="bus" dev="overlay" ino=386 res=0 errno=0 [ 185.178488][ T6326] usb 40-1: device descriptor read/8, error -110 [ 185.528456][ T7475] vhci_hcd: connection reset by peer [ 185.530498][ T13] vhci_hcd vhci_hcd.3: stop threads [ 185.532256][ T13] vhci_hcd vhci_hcd.3: release socket [ 185.534408][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 185.578457][ T5956] Bluetooth: hci0: command 0x0406 tx timeout [ 185.579459][ T5949] Bluetooth: hci2: command 0x0406 tx timeout [ 185.587241][ T6326] usb usb40-port1: attempt power cycle [ 185.588527][ T5949] Bluetooth: hci1: command 0x0406 tx timeout [ 185.588537][ T5956] Bluetooth: hci3: command 0x0405 tx timeout [ 186.158948][ T6326] usb usb40-port1: unable to enumerate USB device [ 186.787291][ T7492] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 186.790133][ T7492] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 186.853547][ T7492] vhci_hcd vhci_hcd.0: Device attached [ 187.029269][ T7504] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 187.032097][ T7504] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 187.047984][ T7504] vhci_hcd vhci_hcd.0: Device attached [ 187.308517][ T6755] usb 38-1: SetAddress Request (22) to port 0 [ 187.310342][ T6755] usb 38-1: new SuperSpeed USB device number 22 using vhci_hcd [ 187.371501][ T7495] vhci_hcd: connection closed [ 187.371689][ T1147] vhci_hcd vhci_hcd.3: stop threads [ 187.375216][ T1147] vhci_hcd vhci_hcd.3: release socket [ 187.377197][ T1147] vhci_hcd vhci_hcd.3: disconnect device [ 187.721409][ T7505] vhci_hcd: connection reset by peer [ 187.725921][ T1147] vhci_hcd vhci_hcd.0: stop threads [ 187.729324][ T1147] vhci_hcd vhci_hcd.0: release socket [ 187.733742][ T1147] vhci_hcd vhci_hcd.0: disconnect device [ 188.233258][ T7513] ubi: mtd0 is already attached to ubi31 [ 188.254871][ T7513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.272'. [ 190.072072][ T6029] usb 44-1: device descriptor read/8, error -110 [ 190.533556][ T6029] usb usb44-port1: unable to enumerate USB device [ 192.465425][ T6012] libceph: connect (1)[c::]:6789 error -101 [ 192.468010][ T6012] libceph: mon0 (1)[c::]:6789 connect error [ 192.629278][ T6755] usb 38-1: device descriptor read/8, error -110 [ 192.742928][ T6033] libceph: connect (1)[c::]:6789 error -101 [ 192.745610][ T6033] libceph: mon0 (1)[c::]:6789 connect error [ 192.750498][ T7546] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 192.753414][ T7546] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 192.784168][ T7546] vhci_hcd vhci_hcd.0: Device attached [ 193.078463][ T60] usb 42-1: SetAddress Request (14) to port 0 [ 193.080803][ T60] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 193.218441][ T7556] vhci_hcd: connection reset by peer [ 193.220987][ T1164] vhci_hcd vhci_hcd.2: stop threads [ 193.222898][ T1164] vhci_hcd vhci_hcd.2: release socket [ 193.225216][ T1164] vhci_hcd vhci_hcd.2: disconnect device [ 193.259736][ T6033] libceph: connect (1)[c::]:6789 error -101 [ 193.264982][ T6033] libceph: mon0 (1)[c::]:6789 connect error [ 193.773169][ T6755] usb usb38-port1: attempt power cycle [ 194.298610][ T6033] libceph: connect (1)[c::]:6789 error -101 [ 194.301494][ T6033] libceph: mon0 (1)[c::]:6789 connect error [ 194.339541][ T6755] usb usb38-port1: unable to enumerate USB device [ 194.707074][ T7573] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 194.709290][ T7573] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 194.738621][ T7573] vhci_hcd vhci_hcd.0: Device attached [ 194.759236][ T7579] netlink: 'syz.1.283': attribute type 2 has an invalid length. [ 194.919662][ T7547] ceph: No mds server is up or the cluster is laggy [ 195.154856][ T7575] vhci_hcd: connection closed [ 195.155757][ T160] vhci_hcd vhci_hcd.2: stop threads [ 195.159579][ T160] vhci_hcd vhci_hcd.2: release socket [ 195.161606][ T160] vhci_hcd vhci_hcd.2: disconnect device [ 195.649968][ T7585] usb usb1: usbfs: process 7585 (syz.1.284) did not claim interface 0 before use [ 196.058505][ T5303] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 197.373169][ T40] audit: type=1326 audit(1769148701.833:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7604 comm="syz.0.290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 197.379853][ T40] audit: type=1326 audit(1769148701.833:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7604 comm="syz.0.290" exe="/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 197.386890][ T40] audit: type=1326 audit(1769148701.833:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7604 comm="syz.0.290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 197.395719][ T40] audit: type=1326 audit(1769148701.833:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7604 comm="syz.0.290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 197.399013][ T7605] netfs: Duplicate cookie detected [ 197.406059][ T40] audit: type=1326 audit(1769148701.833:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7604 comm="syz.0.290" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 197.407008][ T7605] netfs: O-cookie c=00000002 [fl=5088 na=1 nA=0 s=-] [ 197.416720][ T40] audit: type=1326 audit(1769148701.833:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7604 comm="syz.0.290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 197.418750][ T7605] netfs: O-cookie V=00000001 [9p,syz,] [ 197.418767][ T7605] netfs: O-key=[8] 'c300540400000000' [ 197.418780][ T7605] netfs: N-cookie c=00000004 [fl=8 na=0 nA=0 s=-] [ 197.418794][ T7605] netfs: N-cookie V=00000001 [9p,syz,] [ 197.428104][ T40] audit: type=1326 audit(1769148701.833:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7604 comm="syz.0.290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 197.428996][ T7605] netfs: N-key=[8] 'c300540400000000' [ 197.448903][ T40] audit: type=1326 audit(1769148701.833:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7604 comm="syz.0.290" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 197.455607][ T40] audit: type=1326 audit(1769148701.833:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7604 comm="syz.0.290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 197.463040][ T40] audit: type=1326 audit(1769148701.833:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7604 comm="syz.0.290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 198.841215][ T60] usb 42-1: device descriptor read/8, error -110 [ 198.871476][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.076759][ T6194] libceph: connect (1)[c::]:6789 error -101 [ 199.078864][ T6194] libceph: mon0 (1)[c::]:6789 connect error [ 199.319743][ T60] usb usb42-port1: attempt power cycle [ 199.349336][ T6012] libceph: connect (1)[c::]:6789 error -101 [ 199.353827][ T6012] libceph: mon0 (1)[c::]:6789 connect error [ 200.058634][ T6033] libceph: connect (1)[c::]:6789 error -101 [ 200.060754][ T6033] libceph: mon0 (1)[c::]:6789 connect error [ 200.243836][ T60] usb usb42-port1: unable to enumerate USB device [ 200.550475][ T7637] (syz.0.297,7637,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 200.842889][ T7641] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 200.844933][ T7641] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 200.858463][ T7641] vhci_hcd vhci_hcd.0: Device attached [ 201.138505][ T6326] usb 44-1: SetAddress Request (42) to port 0 [ 201.141286][ T6326] usb 44-1: new SuperSpeed USB device number 42 using vhci_hcd [ 201.304635][ T7642] vhci_hcd: connection reset by peer [ 201.309262][ T46] vhci_hcd vhci_hcd.3: stop threads [ 201.311534][ T46] vhci_hcd vhci_hcd.3: release socket [ 201.317454][ T46] vhci_hcd vhci_hcd.3: disconnect device [ 201.349198][ T6012] libceph: connect (1)[c::]:6789 error -101 [ 201.351916][ T6012] libceph: mon0 (1)[c::]:6789 connect error [ 201.452555][ T7653] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 201.455391][ T7653] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 201.468907][ T7653] vhci_hcd vhci_hcd.0: Device attached [ 201.579348][ T7648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.298'. [ 201.703454][ T7621] ceph: No mds server is up or the cluster is laggy [ 201.748475][ T60] usb 42-1: SetAddress Request (18) to port 0 [ 201.768393][ T60] usb 42-1: new SuperSpeed USB device number 18 using vhci_hcd [ 202.249024][ T7654] vhci_hcd: connection reset by peer [ 202.251812][ T13] vhci_hcd vhci_hcd.2: stop threads [ 202.257032][ T13] vhci_hcd vhci_hcd.2: release socket [ 202.265552][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 204.651994][ T7704] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 204.654081][ T7704] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 204.658512][ T7704] vhci_hcd vhci_hcd.0: Device attached [ 204.687044][ T7704] netlink: 20 bytes leftover after parsing attributes in process `syz.1.304'. [ 204.938500][ T6221] usb 40-1: SetAddress Request (19) to port 0 [ 204.940836][ T6221] usb 40-1: new SuperSpeed USB device number 19 using vhci_hcd [ 206.011242][ T7705] vhci_hcd: connection reset by peer [ 206.013594][ T6105] vhci_hcd vhci_hcd.1: stop threads [ 206.015831][ T6105] vhci_hcd vhci_hcd.1: release socket [ 206.018176][ T6105] vhci_hcd vhci_hcd.1: disconnect device [ 206.097065][ T7726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'. [ 206.125043][ T7726] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 206.295687][ T6326] usb 44-1: device descriptor read/8, error -110 [ 206.516240][ T6012] libceph: connect (1)[c::]:6789 error -101 [ 206.518920][ T6012] libceph: mon0 (1)[c::]:6789 connect error [ 206.774806][ T7726] netlink: 60 bytes leftover after parsing attributes in process `syz.2.308'. [ 206.778666][ T6033] libceph: connect (1)[c::]:6789 error -101 [ 206.781534][ T6033] libceph: mon0 (1)[c::]:6789 connect error [ 206.787946][ T7735] netlink: 'syz.1.310': attribute type 4 has an invalid length. [ 206.799513][ T7735] netlink: 'syz.1.310': attribute type 4 has an invalid length. [ 206.858622][ T60] usb 42-1: device descriptor read/8, error -110 [ 206.868981][ T6326] usb usb44-port1: attempt power cycle [ 206.928519][ T7735] could not allocate digest TFM handle sha224-generic [ 207.272643][ T60] usb usb42-port1: attempt power cycle [ 207.290061][ T6012] libceph: connect (1)[c::]:6789 error -101 [ 207.293350][ T6012] libceph: mon0 (1)[c::]:6789 connect error [ 207.338534][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 207.338738][ T5303] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 207.482602][ T7744] netlink: 'syz.2.312': attribute type 2 has an invalid length. [ 207.638463][ T6326] usb usb44-port1: unable to enumerate USB device [ 207.869466][ T60] usb usb42-port1: unable to enumerate USB device [ 208.330703][ T29] libceph: connect (1)[c::]:6789 error -101 [ 208.333948][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 209.129785][ T7730] ceph: No mds server is up or the cluster is laggy [ 209.988509][ T6221] usb 40-1: device descriptor read/8, error -110 [ 210.388817][ T6221] usb usb40-port1: attempt power cycle [ 211.009006][ T7781] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 211.011870][ T7781] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 211.020990][ T7781] vhci_hcd vhci_hcd.0: Device attached [ 211.186014][ T6221] usb usb40-port1: unable to enumerate USB device [ 211.268634][ T6002] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 211.818641][ T5303] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 211.949358][ T7782] vhci_hcd: connection reset by peer [ 211.955506][ T6216] vhci_hcd vhci_hcd.2: stop threads [ 211.957206][ T6216] vhci_hcd vhci_hcd.2: release socket [ 211.961478][ T6216] vhci_hcd vhci_hcd.2: disconnect device [ 212.165453][ T7799] netlink: 'syz.1.324': attribute type 2 has an invalid length. [ 213.117310][ T6012] libceph: connect (1)[c::]:6789 error -101 [ 213.134368][ T6012] libceph: mon0 (1)[c::]:6789 connect error [ 213.778819][ T6012] libceph: connect (1)[c::]:6789 error -101 [ 213.782149][ T6012] libceph: mon0 (1)[c::]:6789 connect error [ 214.396262][ T6033] libceph: connect (1)[c::]:6789 error -101 [ 214.403737][ T6033] libceph: mon0 (1)[c::]:6789 connect error [ 215.339018][ T6033] libceph: connect (1)[c::]:6789 error -101 [ 215.341082][ T6033] libceph: mon0 (1)[c::]:6789 connect error [ 215.538230][ T7810] ceph: No mds server is up or the cluster is laggy [ 216.378596][ T6002] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 217.498570][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 217.509090][ T5303] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 218.405013][ T60] IPVS: starting estimator thread 0... [ 218.498567][ T7871] IPVS: using max 23 ests per chain, 55200 per kthread [ 218.511494][ T7874] usb usb1: usbfs: process 7874 (syz.0.341) did not claim interface 0 before use [ 218.517201][ T7872] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 218.519493][ T7872] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 218.570812][ T7872] vhci_hcd vhci_hcd.0: Device attached [ 218.928590][ T6012] usb 44-1: SetAddress Request (46) to port 0 [ 218.928792][ T6012] usb 44-1: new SuperSpeed USB device number 46 using vhci_hcd [ 219.271693][ T7877] vhci_hcd: connection reset by peer [ 219.280708][ T7771] vhci_hcd vhci_hcd.3: stop threads [ 219.283590][ T7771] vhci_hcd vhci_hcd.3: release socket [ 219.286524][ T7771] vhci_hcd vhci_hcd.3: disconnect device [ 219.807301][ T7892] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 219.809921][ T7892] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 219.813168][ T7892] vhci_hcd vhci_hcd.0: Device attached [ 219.899007][ T7892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.344'. [ 219.909073][ T7892] netlink: 20 bytes leftover after parsing attributes in process `syz.2.344'. [ 219.952533][ T7892] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 220.060244][ T6002] usb 41-1: new low-speed USB device number 4 using vhci_hcd [ 220.405066][ T7893] vhci_hcd: connection reset by peer [ 220.407319][ T12] vhci_hcd vhci_hcd.2: stop threads [ 220.410105][ T12] vhci_hcd vhci_hcd.2: release socket [ 220.412572][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 221.013140][ T7900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.375328][ T7909] XFS (nullb0): Invalid superblock magic number [ 221.738562][ T5303] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 221.739466][ T5957] Bluetooth: hci4: command 0x1003 tx timeout [ 222.228488][ T5303] Bluetooth: hci5: command 0x1003 tx timeout [ 222.228626][ T64] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 224.385484][ T7943] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 224.387869][ T7943] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 224.392743][ T7943] vhci_hcd vhci_hcd.0: Device attached [ 224.441538][ T7946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.355'. [ 225.040886][ T7944] vhci_hcd: connection closed [ 225.041379][ T62] vhci_hcd vhci_hcd.2: stop threads [ 225.045114][ T62] vhci_hcd vhci_hcd.2: release socket [ 225.047780][ T62] vhci_hcd vhci_hcd.2: disconnect device [ 225.178781][ T6002] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 225.623478][ T6012] usb 44-1: device descriptor read/8, error -110 [ 225.722843][ T7954] Cannot find add_set index 0 as target [ 225.728404][ T40] kauditd_printk_skb: 52 callbacks suppressed [ 225.728420][ T40] audit: type=1326 audit(1769148730.183:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.3.357" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f76579 code=0x0 [ 225.845688][ T7956] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 226.029185][ T6012] usb usb44-port1: attempt power cycle [ 226.471013][ T6221] usb usb42-port1: attempt power cycle [ 226.800488][ T6012] usb usb44-port1: unable to enumerate USB device [ 227.041298][ T6221] usb usb42-port1: unable to enumerate USB device [ 228.228521][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 228.300251][ T5957] Bluetooth: hci5: command 0x1003 tx timeout [ 228.303191][ T5303] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 228.496065][ T8004] netlink: 'syz.0.366': attribute type 1 has an invalid length. [ 229.251780][ T8008] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 229.254491][ T8008] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 229.257912][ T8008] vhci_hcd vhci_hcd.0: Device attached [ 229.433881][ T8017] comedi comedi3: pcl818: I/O port conflict (0x4f23,16) [ 229.888453][ T9] usb 42-1: SetAddress Request (26) to port 0 [ 229.890817][ T9] usb 42-1: new SuperSpeed USB device number 26 using vhci_hcd [ 230.202250][ T8013] vhci_hcd: connection reset by peer [ 230.205220][ T6105] vhci_hcd vhci_hcd.2: stop threads [ 230.207470][ T6105] vhci_hcd vhci_hcd.2: release socket [ 230.211112][ T6105] vhci_hcd vhci_hcd.2: disconnect device [ 231.651730][ T40] audit: type=1804 audit(1769148735.703:78): pid=8029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.369" name="/newroot/89/bus/file0" dev="overlay" ino=506 res=1 errno=0 [ 234.080536][ T8054] debugfs: 'ttyS3' already exists in 'caif_serial' [ 234.939369][ T9] usb 42-1: device descriptor read/8, error -110 [ 235.108443][ T5957] Bluetooth: hci4: command 0x1003 tx timeout [ 235.108462][ T5303] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 235.330896][ T9] usb usb42-port1: attempt power cycle [ 235.397104][ T5303] Bluetooth: hci2: unexpected event 0x07 length: 5 < 255 [ 235.439983][ T8077] usb usb1: usbfs: process 8077 (syz.2.379) did not claim interface 0 before use [ 235.924862][ T8087] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 235.927745][ T8087] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 235.987105][ T8087] vhci_hcd vhci_hcd.0: Device attached [ 236.020831][ T9] usb usb42-port1: unable to enumerate USB device [ 236.270785][ T9] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 236.352476][ T8094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.381'. [ 237.220269][ T8103] netlink: 'syz.2.383': attribute type 1 has an invalid length. [ 237.581662][ T8081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.387'. [ 237.589686][ T8081] netlink: 20 bytes leftover after parsing attributes in process `syz.0.387'. [ 237.603150][ T8081] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 237.735105][ T8125] ======================================================= [ 237.735105][ T8125] WARNING: The mand mount option has been deprecated and [ 237.735105][ T8125] and is ignored by this kernel. Remove the mand [ 237.735105][ T8125] option from the mount to silence this warning. [ 237.735105][ T8125] ======================================================= [ 237.759776][ T8125] overlay: Unknown parameter '/' [ 237.827705][ T8126] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 237.883533][ T8126] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 237.888027][ T8126] overlayfs: failed to look up (tracing) for ino (-66) [ 238.677708][ T8088] vhci_hcd: connection reset by peer [ 238.815967][ T7771] vhci_hcd vhci_hcd.0: stop threads [ 238.824808][ T7771] vhci_hcd vhci_hcd.0: release socket [ 238.827207][ T7771] vhci_hcd vhci_hcd.0: disconnect device [ 239.178705][ T5957] Bluetooth: hci4: command 0x1003 tx timeout [ 239.181644][ T8131] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 239.183604][ T5303] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 239.183821][ T8131] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 239.207198][ T8131] vhci_hcd vhci_hcd.0: Device attached [ 240.482147][ T8132] vhci_hcd: connection closed [ 240.488580][ T160] vhci_hcd vhci_hcd.0: stop threads [ 240.498416][ T160] vhci_hcd vhci_hcd.0: release socket [ 240.500619][ T160] vhci_hcd vhci_hcd.0: disconnect device [ 241.352734][ T8165] XFS (nullb0): Invalid superblock magic number [ 241.408525][ T9] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 241.578551][ T5303] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 241.692219][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.393'. [ 244.218573][ T5303] Bluetooth: hci4: command 0x1003 tx timeout [ 244.218595][ T5957] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 245.949640][ T8197] usb usb1: usbfs: process 8197 (syz.1.402) did not claim interface 0 before use [ 247.312304][ T8225] XFS (nullb0): Invalid superblock magic number [ 248.548459][ T8243] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 248.551234][ T8243] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 248.558494][ T8243] vhci_hcd vhci_hcd.0: Device attached [ 248.798576][ T34] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 248.873669][ T8242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.407'. [ 249.359823][ T8244] vhci_hcd: connection reset by peer [ 249.364280][ T7771] vhci_hcd vhci_hcd.1: stop threads [ 249.370626][ T7771] vhci_hcd vhci_hcd.1: release socket [ 249.373033][ T7771] vhci_hcd vhci_hcd.1: disconnect device [ 249.376856][ T8266] random: crng reseeded on system resumption [ 249.970934][ T8292] Restarting kernel threads ... [ 249.973398][ T8292] Done restarting kernel threads. [ 252.754239][ T8309] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 252.757054][ T8309] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 252.765435][ T8309] vhci_hcd vhci_hcd.0: Device attached [ 252.981023][ T8337] XFS (nullb0): Invalid superblock magic number [ 253.908544][ T34] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 253.943838][ T8314] vhci_hcd: connection closed [ 253.958650][ T62] vhci_hcd vhci_hcd.1: stop threads [ 253.983242][ T62] vhci_hcd vhci_hcd.1: release socket [ 253.986685][ T62] vhci_hcd vhci_hcd.1: disconnect device [ 254.011822][ T8369] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 254.014643][ T8369] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 254.020711][ T8369] vhci_hcd vhci_hcd.0: Device attached [ 254.144270][ T8375] netlink: 884 bytes leftover after parsing attributes in process `syz.0.420'. [ 254.298457][ T6326] usb 44-1: SetAddress Request (50) to port 0 [ 254.302823][ T6326] usb 44-1: new SuperSpeed USB device number 50 using vhci_hcd [ 254.413828][ T8370] vhci_hcd: connection reset by peer [ 254.416561][ T62] vhci_hcd vhci_hcd.3: stop threads [ 254.419316][ T62] vhci_hcd vhci_hcd.3: release socket [ 254.421439][ T62] vhci_hcd vhci_hcd.3: disconnect device [ 254.621524][ T8380] faux_driver vgem: [drm] Unknown color mode 65545; guessing buffer size. [ 255.205307][ T54] usb usb40-port1: attempt power cycle [ 255.768883][ T54] usb usb40-port1: unable to enumerate USB device [ 257.912303][ T8407] comedi comedi3: pcl818: I/O port conflict (0x4f23,16) [ 259.304454][ T8409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.429'. [ 259.340333][ T6326] usb 44-1: device descriptor read/8, error -110 [ 259.891497][ T6326] usb usb44-port1: attempt power cycle [ 260.452182][ T8470] ref_ctr going negative. vaddr: 0x80ffc002, curr val: -29824, delta: 1 [ 260.454828][ T8470] ref_ctr increment failed for inode: 0x22d offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88806b5a8c40 [ 260.459020][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.648853][ T6326] usb usb44-port1: unable to enumerate USB device [ 260.655193][ T8474] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 260.657301][ T8474] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 260.669966][ T8474] vhci_hcd vhci_hcd.0: Device attached [ 260.743934][ T8474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.434'. [ 260.773440][ T8474] netlink: 20 bytes leftover after parsing attributes in process `syz.3.434'. [ 260.850261][ T8474] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 260.928460][ T6012] usb 43-1: new low-speed USB device number 4 using vhci_hcd [ 261.418860][ T5957] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 261.420188][ T5303] Bluetooth: hci4: command 0x1003 tx timeout [ 262.149978][ T8475] vhci_hcd: connection reset by peer [ 262.153031][ T62] vhci_hcd vhci_hcd.3: stop threads [ 262.154920][ T62] vhci_hcd vhci_hcd.3: release socket [ 262.157614][ T62] vhci_hcd vhci_hcd.3: disconnect device [ 264.248896][ T8509] comedi comedi3: pcl818: I/O port conflict (0x4f23,16) [ 264.591858][ T8511] warning: `syz.2.444' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 264.969932][ T8515] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 264.972077][ T8515] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 264.974952][ T8515] vhci_hcd vhci_hcd.0: Device attached [ 265.010336][ T8517] vhci_hcd: connection closed [ 265.018563][ T6216] vhci_hcd vhci_hcd.1: stop threads [ 265.025432][ T6216] vhci_hcd vhci_hcd.1: release socket [ 265.027982][ T6216] vhci_hcd vhci_hcd.1: disconnect device [ 265.482198][ T8511] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 265.486201][ T8511] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 265.495019][ T8511] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 265.499177][ T8511] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 265.506258][ T8511] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 265.508619][ T8511] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 265.552196][ T8511] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 265.554795][ T8511] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 265.868880][ T8556] random: crng reseeded on system resumption [ 266.059062][ T6012] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 266.335581][ T8566] debugfs: 'ttyS3' already exists in 'caif_serial' [ 267.073738][ T8584] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.828406][ T5957] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 267.846567][ T8589] netlink: 'syz.0.452': attribute type 8 has an invalid length. [ 267.854805][ T8589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.452'. [ 267.863855][ T8589] bond0: entered promiscuous mode [ 267.866352][ T8589] bond_slave_0: entered promiscuous mode [ 267.870913][ T8589] bond_slave_1: entered promiscuous mode [ 267.879070][ T8589] team0: entered promiscuous mode [ 267.881230][ T8589] team_slave_0: entered promiscuous mode [ 267.883669][ T8589] team_slave_1: entered promiscuous mode [ 267.887530][ T8589] hsr1: entered promiscuous mode [ 267.899949][ T8589] netlink: 'syz.0.452': attribute type 8 has an invalid length. [ 267.902777][ T8589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.452'. [ 268.027421][ T8589] netlink: 'syz.0.452': attribute type 4 has an invalid length. [ 268.461910][ T8556] Restarting kernel threads ... [ 268.463997][ T8556] Done restarting kernel threads. [ 269.773647][ T8610] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 269.776337][ T8610] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 269.779965][ T8610] vhci_hcd vhci_hcd.0: Device attached [ 269.811296][ T8612] vhci_hcd: connection closed [ 269.813050][ T7771] vhci_hcd vhci_hcd.1: stop threads [ 269.825166][ T7771] vhci_hcd vhci_hcd.1: release socket [ 269.840606][ T7771] vhci_hcd vhci_hcd.1: disconnect device [ 271.592399][ T8621] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 271.594520][ T8621] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 271.596855][ T8621] vhci_hcd vhci_hcd.0: Device attached [ 271.615193][ T8632] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 271.617293][ T8632] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 271.622992][ T8632] vhci_hcd vhci_hcd.0: Device attached [ 271.687335][ T8632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.467'. [ 271.700145][ T8632] netlink: 20 bytes leftover after parsing attributes in process `syz.1.467'. [ 271.721340][ T8632] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 271.838411][ T6326] usb 43-1: new low-speed USB device number 5 using vhci_hcd [ 271.840849][ T40] audit: type=1326 audit(1769148776.303:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.0.461" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 271.847408][ T40] audit: type=1326 audit(1769148776.303:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.0.461" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 271.868440][ T40] audit: type=1326 audit(1769148776.303:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.0.461" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 271.878454][ T1328] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 271.885241][ T40] audit: type=1326 audit(1769148776.303:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.0.461" exe="/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 271.893652][ T40] audit: type=1326 audit(1769148776.303:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.0.461" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 271.925513][ T40] audit: type=1326 audit(1769148776.303:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.0.461" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 271.932962][ T40] audit: type=1326 audit(1769148776.313:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.0.461" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 271.939585][ T40] audit: type=1326 audit(1769148776.313:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.0.461" exe="/syz-executor" sig=0 arch=40000003 syscall=427 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 271.946199][ T40] audit: type=1326 audit(1769148776.313:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.0.461" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 271.955986][ T40] audit: type=1326 audit(1769148776.313:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.0.461" exe="/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 271.971649][ T8630] vhci_hcd: connection reset by peer [ 271.974119][ T12] vhci_hcd vhci_hcd.3: stop threads [ 271.975797][ T12] vhci_hcd vhci_hcd.3: release socket [ 271.977548][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 272.078020][ T8633] vhci_hcd: connection reset by peer [ 272.079979][ T6216] vhci_hcd vhci_hcd.1: stop threads [ 272.081689][ T6216] vhci_hcd vhci_hcd.1: release socket [ 272.083448][ T6216] vhci_hcd vhci_hcd.1: disconnect device [ 272.773681][ T8652] random: crng reseeded on system resumption [ 273.470773][ T8652] Restarting kernel threads ... [ 273.473432][ T8652] Done restarting kernel threads. [ 274.878488][ T5957] Bluetooth: hci4: command 0x1003 tx timeout [ 274.888788][ T5303] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 275.173612][ T8672] ref_ctr going negative. vaddr: 0x80ffc002, curr val: -29824, delta: 1 [ 275.176934][ T8672] ref_ctr increment failed for inode: 0x28c offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff8880297c8000 [ 275.421543][ T8674] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 275.421561][ T8674] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 275.421867][ T8674] vhci_hcd vhci_hcd.0: Device attached [ 276.375671][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.474'. [ 276.929080][ T6326] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 277.008649][ T1328] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 277.269259][ T40] kauditd_printk_skb: 78 callbacks suppressed [ 277.269275][ T40] audit: type=1326 audit(1769148781.703:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8690 comm="syz.1.476" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 277.488793][ T40] audit: type=1326 audit(1769148781.703:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8690 comm="syz.1.476" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf73bd5a7 code=0x7ffc0000 [ 277.667914][ T40] audit: type=1326 audit(1769148781.703:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8690 comm="syz.1.476" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 277.789166][ T40] audit: type=1326 audit(1769148781.703:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8690 comm="syz.1.476" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf73bd5a7 code=0x7ffc0000 [ 277.799419][ T40] audit: type=1326 audit(1769148781.713:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8690 comm="syz.1.476" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 277.810066][ T40] audit: type=1326 audit(1769148781.723:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8690 comm="syz.1.476" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf73bd5a7 code=0x7ffc0000 [ 277.822448][ T40] audit: type=1326 audit(1769148781.733:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8690 comm="syz.1.476" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 277.840775][ T40] audit: type=1326 audit(1769148781.753:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8690 comm="syz.1.476" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf73bd5a7 code=0x7ffc0000 [ 277.868479][ T60] usb 44-1: SetAddress Request (54) to port 0 [ 277.871154][ T60] usb 44-1: new SuperSpeed USB device number 54 using vhci_hcd [ 277.968444][ T40] audit: type=1326 audit(1769148781.753:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8690 comm="syz.1.476" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 277.977182][ T40] audit: type=1326 audit(1769148781.753:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8690 comm="syz.1.476" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf73bd5a7 code=0x7ffc0000 [ 279.979331][ T5957] Bluetooth: hci4: sending frame failed (-49) [ 279.983939][ T5303] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 280.054943][ T8711] XFS (nullb0): Invalid superblock magic number [ 280.267003][ T8732] lo speed is unknown, defaulting to 1000 [ 280.270523][ T8732] lo speed is unknown, defaulting to 1000 [ 280.275884][ T8732] lo speed is unknown, defaulting to 1000 [ 280.283657][ T8732] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 280.294946][ T8732] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 280.324842][ T8732] lo speed is unknown, defaulting to 1000 [ 280.331460][ T8732] lo speed is unknown, defaulting to 1000 [ 280.335325][ T8732] lo speed is unknown, defaulting to 1000 [ 280.341417][ T8732] lo speed is unknown, defaulting to 1000 [ 280.751948][ T8742] ubi: mtd0 is already attached to ubi31 [ 281.655436][ T8675] vhci_hcd: connection reset by peer [ 281.661325][ T1142] vhci_hcd vhci_hcd.3: stop threads [ 281.663757][ T1142] vhci_hcd vhci_hcd.3: release socket [ 281.666903][ T1142] vhci_hcd vhci_hcd.3: disconnect device [ 282.938612][ T60] usb 44-1: device descriptor read/8, error -110 [ 283.315911][ T8759] comedi comedi0: Minor 47 could not be opened [ 283.321812][ T8759] netlink: 'syz.0.487': attribute type 1 has an invalid length. [ 283.329306][ T60] usb usb44-port1: attempt power cycle [ 283.339615][ T8759] bond1: entered promiscuous mode [ 283.341713][ T8759] 8021q: adding VLAN 0 to HW filter on device bond1 [ 283.509357][ T8759] 8021q: adding VLAN 0 to HW filter on device bond1 [ 283.512457][ T8759] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 283.516733][ T8759] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 283.524714][ T8759] bond1: (slave gre1): making interface the new active one [ 283.527475][ T8759] gre1: entered promiscuous mode [ 283.531131][ T8759] bond1: (slave gre1): Enslaving as an active interface with an up link [ 283.711976][ T8771] random: crng reseeded on system resumption [ 283.899219][ T60] usb usb44-port1: unable to enumerate USB device [ 284.512955][ T8779] Restarting kernel threads ... [ 284.515589][ T8779] Done restarting kernel threads. [ 285.978540][ T5957] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 285.978905][ T5953] Bluetooth: hci4: command 0x1003 tx timeout [ 286.167294][ T8805] loop5: detected capacity change from 0 to 7 [ 286.184538][ T8805] Dev loop5: unable to read RDB block 7 [ 286.186691][ T8805] loop5: AHDI p1 p2 [ 286.188441][ T8805] loop5: partition table partially beyond EOD, truncated [ 286.192141][ T8805] loop5: p1 start 1702000233 is beyond EOD, truncated [ 286.299812][ T8810] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 286.301710][ T8810] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 286.304737][ T8810] vhci_hcd vhci_hcd.0: Device attached [ 286.378543][ T5303] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 286.378558][ T5953] Bluetooth: hci5: command 0x1003 tx timeout [ 286.582484][ T60] usb 42-1: SetAddress Request (30) to port 0 [ 286.585174][ T60] usb 42-1: new SuperSpeed USB device number 30 using vhci_hcd [ 286.975225][ T8817] ubi: mtd0 is already attached to ubi31 [ 287.098998][ T8811] vhci_hcd: connection reset by peer [ 287.108476][ T64] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 287.114192][ T5303] Bluetooth: hci6: command 0x1003 tx timeout [ 287.125267][ T6216] vhci_hcd vhci_hcd.2: stop threads [ 287.127025][ T6216] vhci_hcd vhci_hcd.2: release socket [ 287.137073][ T6216] vhci_hcd vhci_hcd.2: disconnect device [ 288.926996][ T8834] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.199969][ T8834] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.216914][ T8847] hub 1-0:1.0: USB hub found [ 289.219452][ T8847] hub 1-0:1.0: 2 ports detected [ 289.721558][ T8834] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.117345][ T8834] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.236528][ T6216] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.268816][ T1164] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.284892][ T1164] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.318630][ T1164] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.974197][ T8866] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 290.976295][ T8866] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 290.980648][ T8866] vhci_hcd vhci_hcd.0: Device attached [ 291.248457][ T6002] usb 38-1: SetAddress Request (26) to port 0 [ 291.251001][ T6002] usb 38-1: new SuperSpeed USB device number 26 using vhci_hcd [ 291.630086][ T8867] vhci_hcd: connection reset by peer [ 291.632372][ T1164] vhci_hcd vhci_hcd.0: stop threads [ 291.634653][ T1164] vhci_hcd vhci_hcd.0: release socket [ 291.637120][ T1164] vhci_hcd vhci_hcd.0: disconnect device [ 291.658438][ T60] usb 42-1: device descriptor read/8, error -110 [ 292.049556][ T60] usb usb42-port1: attempt power cycle [ 292.609131][ T60] usb usb42-port1: unable to enumerate USB device [ 292.698500][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 293.124832][ T8886] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (eth1-tx-0) [ 295.857421][ T8915] hub 9-0:1.0: USB hub found [ 295.864542][ T8915] hub 9-0:1.0: 1 port detected [ 296.308637][ T6002] usb 38-1: device descriptor read/8, error -110 [ 297.060149][ T6002] usb usb38-port1: attempt power cycle [ 297.628916][ T6002] usb usb38-port1: unable to enumerate USB device [ 297.779297][ T8927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.522'. [ 298.938735][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 299.303029][ T8951] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 299.305145][ T8951] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 299.309038][ T8951] vhci_hcd vhci_hcd.0: Device attached [ 299.450181][ T8962] ubi: mtd0 is already attached to ubi31 [ 300.093778][ T8952] vhci_hcd: connection closed [ 300.094432][ T6216] vhci_hcd vhci_hcd.2: stop threads [ 300.103473][ T6216] vhci_hcd vhci_hcd.2: release socket [ 300.106359][ T6216] vhci_hcd vhci_hcd.2: disconnect device [ 300.199264][ T6080] usb 42-1: enqueue for inactive port 0 [ 300.457915][ T8971] tipc: Started in network mode [ 300.461324][ T8971] tipc: Node identity 7f000001, cluster identity 4711 [ 300.465742][ T8971] tipc: Enabling of bearer rejected, failed to enable media [ 300.496274][ T8971] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:017b:70bb [ 300.499631][ T8971] tipc: Enabled bearer , priority 10 [ 300.513777][ T8971] Cannot find add_set index 3 as target [ 300.960314][ T6080] usb usb42-port1: attempt power cycle [ 301.266477][ T8982] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 301.542277][ T6080] usb usb42-port1: unable to enumerate USB device [ 301.628413][ T6194] tipc: Node number set to 2130706433 [ 302.926911][ T8992] mmap: syz.0.543 (8992) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 304.710874][ T9006] ubi: mtd0 is already attached to ubi31 [ 305.656287][ T9025] XFS (nullb0): Invalid superblock magic number [ 306.373219][ T9044] random: crng reseeded on system resumption [ 306.857136][ T9045] Restarting kernel threads ... [ 306.860716][ T9045] Done restarting kernel threads. [ 307.288808][ T9048] hub 9-0:1.0: USB hub found [ 307.295921][ T9048] hub 9-0:1.0: 1 port detected [ 307.818534][ T5303] Bluetooth: hci4: command 0x1003 tx timeout [ 307.858586][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 307.968064][ T9050] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 307.970768][ T9050] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 307.974388][ T9050] vhci_hcd vhci_hcd.0: Device attached [ 308.049956][ T9052] vhci_hcd: connection closed [ 308.050495][ T62] vhci_hcd vhci_hcd.0: stop threads [ 308.054655][ T62] vhci_hcd vhci_hcd.0: release socket [ 308.056876][ T62] vhci_hcd vhci_hcd.0: disconnect device [ 309.640573][ T9078] netlink: 24 bytes leftover after parsing attributes in process `syz.0.553'. [ 310.378746][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 310.382541][ T64] Bluetooth: hci5: command 0x1003 tx timeout [ 310.385265][ T5303] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 310.708599][ T9087] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 310.710763][ T9087] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 310.717672][ T9087] vhci_hcd vhci_hcd.0: Device attached [ 311.017654][ T9095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.558'. [ 311.028556][ T6080] usb 42-1: SetAddress Request (38) to port 0 [ 311.031257][ T6080] usb 42-1: new SuperSpeed USB device number 38 using vhci_hcd [ 311.670664][ T9087] wg2 speed is unknown, defaulting to 1000 [ 311.735236][ T9087] wg2 speed is unknown, defaulting to 1000 [ 312.122460][ T9087] wg2 speed is unknown, defaulting to 1000 [ 313.295687][ T9087] infiniband syz2: set active [ 313.298887][ T6194] wg2 speed is unknown, defaulting to 1000 [ 313.302781][ T9087] infiniband syz2: added wg2 [ 313.471663][ T9087] RDS/IB: syz2: added [ 313.474018][ T9087] smc: adding ib device syz2 with port count 1 [ 313.476788][ T9087] smc: ib device syz2 port 1 has no pnetid [ 313.509809][ T6194] wg2 speed is unknown, defaulting to 1000 [ 313.536270][ T9087] wg2 speed is unknown, defaulting to 1000 [ 313.687335][ T9113] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 313.690176][ T9113] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 313.693793][ T9113] vhci_hcd vhci_hcd.0: Device attached [ 313.791598][ T9114] vhci_hcd: connection closed [ 313.791876][ T7936] vhci_hcd vhci_hcd.0: stop threads [ 313.796030][ T7936] vhci_hcd vhci_hcd.0: release socket [ 313.798284][ T7936] vhci_hcd vhci_hcd.0: disconnect device [ 314.207006][ T9088] vhci_hcd: connection reset by peer [ 314.209095][ T1164] vhci_hcd vhci_hcd.2: stop threads [ 314.210821][ T1164] vhci_hcd vhci_hcd.2: release socket [ 314.212532][ T1164] vhci_hcd vhci_hcd.2: disconnect device [ 314.267711][ T9087] wg2 speed is unknown, defaulting to 1000 [ 314.615629][ T9087] wg2 speed is unknown, defaulting to 1000 [ 314.938456][ T5303] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 314.938478][ T5953] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 314.940188][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 314.957826][ T9087] wg2 speed is unknown, defaulting to 1000 [ 315.726271][ T9131] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.812832][ T9131] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.924908][ T9131] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.036281][ T9131] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.138784][ T6080] usb 42-1: device descriptor read/8, error -110 [ 316.211704][ T62] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.255553][ T7936] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.299659][ T7936] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.330797][ T7936] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.531312][ T6080] usb usb42-port1: attempt power cycle [ 317.059242][ T9145] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 317.061454][ T9145] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 317.064532][ T9145] vhci_hcd vhci_hcd.0: Device attached [ 317.109757][ T6080] usb usb42-port1: unable to enumerate USB device [ 317.257144][ T6194] libceph: connect (1)[c::]:6789 error -101 [ 317.259662][ T6194] libceph: mon0 (1)[c::]:6789 connect error [ 317.313778][ T9152] ceph: No mds server is up or the cluster is laggy [ 317.328446][ T6080] usb 38-1: SetAddress Request (30) to port 0 [ 317.331340][ T6080] usb 38-1: new SuperSpeed USB device number 30 using vhci_hcd [ 317.335897][ T9155] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 317.853119][ T9146] vhci_hcd: connection reset by peer [ 317.857482][ T1164] vhci_hcd vhci_hcd.0: stop threads [ 317.861541][ T1164] vhci_hcd vhci_hcd.0: release socket [ 317.863641][ T1164] vhci_hcd vhci_hcd.0: disconnect device [ 317.880276][ T9157] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 317.882418][ T9157] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 317.885283][ T9157] vhci_hcd vhci_hcd.0: Device attached [ 317.926078][ T9158] vhci_hcd: connection closed [ 317.926348][ T1164] vhci_hcd vhci_hcd.1: stop threads [ 317.930770][ T1164] vhci_hcd vhci_hcd.1: release socket [ 317.932574][ T1164] vhci_hcd vhci_hcd.1: disconnect device [ 318.390192][ T9171] nbd3: detected capacity change from 0 to 63 [ 318.399411][ T9172] block nbd3: NBD_DISCONNECT [ 318.410202][ T9172] block nbd3: Disconnected due to user request. [ 318.421843][ T9172] block nbd3: shutting down sockets [ 318.433579][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 318.437276][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 318.440904][ C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 318.444731][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 318.447463][ C0] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 318.451328][ C0] Buffer I/O error on dev nbd3, logical block 2, async page read [ 318.454649][ C0] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 318.457780][ C0] Buffer I/O error on dev nbd3, logical block 3, async page read [ 318.476014][ T5948] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 318.480984][ T5948] Buffer I/O error on dev nbd3, logical block 0, async page read [ 318.484332][ T5948] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 318.503221][ T5948] Buffer I/O error on dev nbd3, logical block 1, async page read [ 318.523571][ T5948] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 318.531446][ T5948] Buffer I/O error on dev nbd3, logical block 2, async page read [ 318.536936][ T5948] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 318.548270][ T5948] Buffer I/O error on dev nbd3, logical block 3, async page read [ 318.555579][ T5948] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 318.562489][ T5948] Buffer I/O error on dev nbd3, logical block 0, async page read [ 318.569698][ T5948] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 318.576036][ T5948] Buffer I/O error on dev nbd3, logical block 1, async page read [ 318.579922][ T5948] ldm_validate_partition_table(): Disk read failed. [ 318.582749][ T5948] Dev nbd3: unable to read RDB block 0 [ 318.589282][ T5948] nbd3: unable to read partition table [ 318.596699][ T5948] ldm_validate_partition_table(): Disk read failed. [ 318.600482][ T5948] Dev nbd3: unable to read RDB block 0 [ 318.603714][ T5948] nbd3: unable to read partition table [ 319.788776][ T9192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.579'. [ 320.218532][ T5953] Bluetooth: hci4: command 0x1003 tx timeout [ 320.228497][ T5303] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 320.334793][ T9192] wg2 speed is unknown, defaulting to 1000 [ 321.752981][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.195745][ T9212] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 322.198788][ T9212] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 322.210199][ T9212] vhci_hcd vhci_hcd.0: Device attached [ 322.388499][ T6080] usb 38-1: device descriptor read/8, error -110 [ 322.508529][ T6002] usb 40-1: SetAddress Request (27) to port 0 [ 322.510776][ T6002] usb 40-1: new SuperSpeed USB device number 27 using vhci_hcd [ 322.779139][ T6080] usb usb38-port1: attempt power cycle [ 322.969022][ T9213] vhci_hcd: connection reset by peer [ 322.971944][ T1142] vhci_hcd vhci_hcd.1: stop threads [ 322.974262][ T1142] vhci_hcd vhci_hcd.1: release socket [ 322.976564][ T1142] vhci_hcd vhci_hcd.1: disconnect device [ 323.360456][ T6080] usb usb38-port1: unable to enumerate USB device [ 323.517059][ T9218] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 323.519909][ T9218] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 323.523557][ T9218] vhci_hcd vhci_hcd.0: Device attached [ 323.625218][ T9219] vhci_hcd: connection closed [ 323.625458][ T1164] vhci_hcd vhci_hcd.0: stop threads [ 323.629625][ T1164] vhci_hcd vhci_hcd.0: release socket [ 323.631831][ T1164] vhci_hcd vhci_hcd.0: disconnect device [ 324.008887][ T9228] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 324.011043][ T9228] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 324.014366][ T9228] vhci_hcd vhci_hcd.0: Device attached [ 324.063747][ T9228] Illegal XDP return value 4294967274 on prog (id 163) dev N/A, expect packet loss! [ 324.278498][ T60] usb 42-1: SetAddress Request (42) to port 0 [ 324.281164][ T60] usb 42-1: new SuperSpeed USB device number 42 using vhci_hcd [ 324.298411][ T5303] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 324.298584][ T5953] Bluetooth: hci4: command 0x1003 tx timeout [ 324.371690][ T9240] tipc: Enabling of bearer rejected, failed to enable media [ 324.381803][ T9240] tipc: Enabling of bearer rejected, already enabled [ 324.404826][ T9240] Cannot find add_set index 3 as target [ 324.635126][ T9229] vhci_hcd: connection reset by peer [ 324.637377][ T1164] vhci_hcd vhci_hcd.2: stop threads [ 324.639127][ T1164] vhci_hcd vhci_hcd.2: release socket [ 324.648503][ T1164] vhci_hcd vhci_hcd.2: disconnect device [ 324.784065][ T9245] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 324.786614][ T9245] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 324.789670][ T9245] vhci_hcd vhci_hcd.0: Device attached [ 325.058623][ T6194] usb 44-1: SetAddress Request (58) to port 0 [ 325.061053][ T6194] usb 44-1: new SuperSpeed USB device number 58 using vhci_hcd [ 325.296922][ T9246] vhci_hcd: connection reset by peer [ 325.299863][ T1142] vhci_hcd vhci_hcd.3: stop threads [ 325.301664][ T1142] vhci_hcd vhci_hcd.3: release socket [ 325.303483][ T1142] vhci_hcd vhci_hcd.3: disconnect device [ 325.480433][ T9254] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 325.482552][ T9254] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 325.485279][ T9254] vhci_hcd vhci_hcd.0: Device attached [ 325.571607][ T9254] netlink: 64 bytes leftover after parsing attributes in process `syz.0.591'. [ 325.748549][ T9] usb 38-1: SetAddress Request (34) to port 0 [ 325.752161][ T9] usb 38-1: new SuperSpeed USB device number 34 using vhci_hcd [ 327.069699][ T9255] vhci_hcd: connection reset by peer [ 327.072822][ T7936] vhci_hcd vhci_hcd.0: stop threads [ 327.075090][ T7936] vhci_hcd vhci_hcd.0: release socket [ 327.077639][ T7936] vhci_hcd vhci_hcd.0: disconnect device [ 327.578566][ T6002] usb 40-1: device descriptor read/8, error -110 [ 327.580862][ T9284] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 327.584058][ T9284] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 327.598974][ T9284] vhci_hcd vhci_hcd.0: Device attached [ 327.969751][ T6002] usb usb40-port1: attempt power cycle [ 328.223564][ T9285] vhci_hcd: connection closed [ 328.223758][ T1142] vhci_hcd vhci_hcd.3: stop threads [ 328.227816][ T1142] vhci_hcd vhci_hcd.3: release socket [ 328.230214][ T1142] vhci_hcd vhci_hcd.3: disconnect device [ 328.458486][ T5303] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 328.458495][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 328.528874][ T6002] usb usb40-port1: unable to enumerate USB device [ 329.338602][ T60] usb 42-1: device descriptor read/8, error -110 [ 329.718937][ T9299] serio: Serial port ptm0 [ 329.735642][ T9303] comedi comedi3: pcl726: I/O port conflict (0x4f29,16) [ 329.738886][ T60] usb usb42-port1: attempt power cycle [ 329.898487][ T5303] Bluetooth: hci5: command 0x1003 tx timeout [ 329.899059][ T5953] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 330.148954][ T6194] usb 44-1: device descriptor read/8, error -110 [ 330.168477][ T9310] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 330.170673][ T9310] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 330.174324][ T9310] vhci_hcd vhci_hcd.0: Device attached [ 330.299257][ T60] usb usb42-port1: unable to enumerate USB device [ 330.389907][ T6194] usb 44-1: SetAddress Request (59) to port 0 [ 330.390941][ T9315] random: crng reseeded on system resumption [ 330.392557][ T6194] usb 44-1: new SuperSpeed USB device number 59 using vhci_hcd [ 330.573369][ T9311] vhci_hcd: connection reset by peer [ 330.581769][ T7936] vhci_hcd vhci_hcd.3: stop threads [ 330.588524][ T7936] vhci_hcd vhci_hcd.3: release socket [ 330.594040][ T7936] vhci_hcd vhci_hcd.3: disconnect device [ 330.778638][ T9] usb 38-1: device descriptor read/8, error -110 [ 331.012404][ T9317] Restarting kernel threads ... [ 331.015085][ T9317] Done restarting kernel threads. [ 331.179272][ T9] usb usb38-port1: attempt power cycle [ 332.178005][ T9329] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 332.178240][ T9] usb usb38-port1: unable to enumerate USB device [ 332.180371][ T9329] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 332.186908][ T9329] vhci_hcd vhci_hcd.0: Device attached [ 332.357649][ T9337] vhci_hcd: connection closed [ 332.358002][ T160] vhci_hcd vhci_hcd.1: stop threads [ 332.363449][ T160] vhci_hcd vhci_hcd.1: release socket [ 332.365386][ T160] vhci_hcd vhci_hcd.1: disconnect device [ 333.399026][ T9348] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 333.401860][ T9348] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 333.424678][ T9348] vhci_hcd vhci_hcd.0: Device attached [ 333.629807][ T9350] vhci_hcd: connection closed [ 333.630037][ T7936] vhci_hcd vhci_hcd.0: stop threads [ 333.634130][ T7936] vhci_hcd vhci_hcd.0: release socket [ 333.637584][ T7936] vhci_hcd vhci_hcd.0: disconnect device [ 333.909319][ T9360] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 333.911457][ T9360] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 333.919881][ T9360] vhci_hcd vhci_hcd.0: Device attached [ 334.590354][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.614'. [ 334.606083][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.614'. [ 334.612123][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.614'. [ 334.617821][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.614'. [ 335.508962][ T9361] vhci_hcd: connection reset by peer [ 335.511711][ T7936] vhci_hcd vhci_hcd.3: stop threads [ 335.519033][ T7936] vhci_hcd vhci_hcd.3: release socket [ 335.525273][ T6194] usb 44-1: device descriptor read/8, error -110 [ 335.525816][ T7936] vhci_hcd vhci_hcd.3: disconnect device [ 335.648484][ T6194] usb usb44-port1: attempt power cycle [ 336.179387][ T9388] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 336.182203][ T9388] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 336.199837][ T9388] vhci_hcd vhci_hcd.0: Device attached [ 336.331315][ T6194] usb usb44-port1: unable to enumerate USB device [ 336.420319][ T9394] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 336.423677][ T9394] block device autoloading is deprecated and will be removed. [ 336.458494][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 336.472737][ T60] usb 40-1: SetAddress Request (32) to port 0 [ 336.478747][ T60] usb 40-1: new SuperSpeed USB device number 32 using vhci_hcd [ 336.573631][ T9389] vhci_hcd: connection reset by peer [ 336.576137][ T6216] vhci_hcd vhci_hcd.1: stop threads [ 336.578407][ T6216] vhci_hcd vhci_hcd.1: release socket [ 336.580465][ T6216] vhci_hcd vhci_hcd.1: disconnect device [ 337.506441][ T9408] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 337.509333][ T9408] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 337.528692][ T9408] vhci_hcd vhci_hcd.0: Device attached [ 337.563076][ T9408] random: crng reseeded on system resumption [ 337.611647][ T9411] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 337.613782][ T9411] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 337.616859][ T9411] vhci_hcd vhci_hcd.0: Device attached [ 337.807909][ T9412] vhci_hcd: connection closed [ 337.856620][ T7936] vhci_hcd vhci_hcd.0: stop threads [ 337.861029][ T7936] vhci_hcd vhci_hcd.0: release socket [ 337.867233][ T7936] vhci_hcd vhci_hcd.0: disconnect device [ 337.908502][ T6195] usb 44-1: SetAddress Request (62) to port 0 [ 337.911236][ T6195] usb 44-1: new SuperSpeed USB device number 62 using vhci_hcd [ 337.993557][ T9419] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 337.996359][ T9419] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 338.005036][ T9419] vhci_hcd vhci_hcd.0: Device attached [ 338.567707][ T9420] vhci_hcd: connection closed [ 338.568426][ T7936] vhci_hcd vhci_hcd.1: stop threads [ 338.574058][ T7936] vhci_hcd vhci_hcd.1: release socket [ 338.576737][ T7936] vhci_hcd vhci_hcd.1: disconnect device [ 338.698578][ T5303] Bluetooth: hci4: command 0x1003 tx timeout [ 338.712619][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 339.159605][ T9408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.209866][ T9409] vhci_hcd: connection reset by peer [ 339.212601][ T7936] vhci_hcd vhci_hcd.3: stop threads [ 339.214869][ T7936] vhci_hcd vhci_hcd.3: release socket [ 339.217279][ T7936] vhci_hcd vhci_hcd.3: disconnect device [ 339.407590][ T9433] overlayfs: conflicting lowerdir path [ 340.244939][ T9442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.627'. [ 340.255045][ T9442] overlay: filesystem on ./bus not supported [ 340.852330][ T9456] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 340.854509][ T9456] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 340.857263][ T9456] vhci_hcd vhci_hcd.0: Device attached [ 340.949548][ T9460] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 341.148702][ T9] usb 42-1: SetAddress Request (46) to port 0 [ 341.151440][ T9] usb 42-1: new SuperSpeed USB device number 46 using vhci_hcd [ 341.367159][ T9457] vhci_hcd: connection reset by peer [ 341.369409][ T1142] vhci_hcd vhci_hcd.2: stop threads [ 341.371668][ T1142] vhci_hcd vhci_hcd.2: release socket [ 341.378500][ T1142] vhci_hcd vhci_hcd.2: disconnect device [ 341.578524][ T60] usb 40-1: device descriptor read/8, error -110 [ 341.760956][ T9467] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 341.763076][ T9467] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 341.777106][ T9467] vhci_hcd vhci_hcd.0: Device attached [ 341.917575][ T9468] vhci_hcd: connection closed [ 341.918075][ T7771] vhci_hcd vhci_hcd.1: stop threads [ 341.923069][ T7771] vhci_hcd vhci_hcd.1: release socket [ 341.925477][ T7771] vhci_hcd vhci_hcd.1: disconnect device [ 342.001928][ T1328] ================================================================== [ 342.005342][ T1328] BUG: KASAN: slab-use-after-free in hci_uart_write_work+0x81c/0x950 [ 342.008789][ T1328] Read of size 4 at addr ffff888021816f70 by task kworker/0:2/1328 [ 342.014170][ T1328] [ 342.015199][ T1328] CPU: 0 UID: 0 PID: 1328 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 342.015224][ T1328] Tainted: [L]=SOFTLOCKUP [ 342.015231][ T1328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 342.015242][ T1328] Workqueue: events hci_uart_write_work [ 342.015264][ T1328] Call Trace: [ 342.015271][ T1328] [ 342.015277][ T1328] dump_stack_lvl+0x100/0x190 [ 342.015300][ T1328] print_report+0x156/0x4c9 [ 342.015323][ T1328] ? __virt_addr_valid+0x81/0x620 [ 342.015348][ T1328] ? __phys_addr+0xe8/0x180 [ 342.015372][ T1328] ? hci_uart_write_work+0x81c/0x950 [ 342.015387][ T1328] kasan_report+0xdf/0x1a0 [ 342.015412][ T1328] ? hci_uart_write_work+0x81c/0x950 [ 342.015431][ T1328] hci_uart_write_work+0x81c/0x950 [ 342.015446][ T1328] ? __pfx_pty_write+0x10/0x10 [ 342.015471][ T1328] process_one_work+0x9c2/0x1840 [ 342.015501][ T1328] ? __pfx_process_one_work+0x10/0x10 [ 342.015529][ T1328] ? assign_work+0x19c/0x250 [ 342.015555][ T1328] worker_thread+0x5da/0xe40 [ 342.015585][ T1328] ? kthread+0x17d/0x730 [ 342.015606][ T1328] ? __pfx_worker_thread+0x10/0x10 [ 342.015631][ T1328] kthread+0x3b3/0x730 [ 342.015653][ T1328] ? __pfx_kthread+0x10/0x10 [ 342.015676][ T1328] ? ret_from_fork+0x79/0xaf0 [ 342.015692][ T1328] ? ret_from_fork+0x79/0xaf0 [ 342.015708][ T1328] ? rcu_is_watching+0x12/0xc0 [ 342.015725][ T1328] ? __pfx_kthread+0x10/0x10 [ 342.015747][ T1328] ret_from_fork+0x754/0xaf0 [ 342.015763][ T1328] ? __pfx_ret_from_fork+0x10/0x10 [ 342.015780][ T1328] ? __switch_to+0x7b9/0x10c0 [ 342.015801][ T1328] ? __pfx_kthread+0x10/0x10 [ 342.015824][ T1328] ret_from_fork_asm+0x1a/0x30 [ 342.015855][ T1328] [ 342.015861][ T1328] [ 342.084523][ T1328] Allocated by task 54: [ 342.085901][ T1328] kasan_save_stack+0x30/0x50 [ 342.087447][ T1328] kasan_save_track+0x14/0x30 [ 342.088975][ T1328] __kasan_slab_alloc+0x89/0x90 [ 342.091054][ T1328] kmem_cache_alloc_node_noprof+0x303/0x880 [ 342.093608][ T1328] __alloc_skb+0x156/0x410 [ 342.095551][ T1328] bcsp_prepare_pkt+0xe0/0xa90 [ 342.097626][ T1328] bcsp_dequeue+0x237/0x4b0 [ 342.099587][ T1328] hci_uart_write_work+0x4d9/0x950 [ 342.101812][ T1328] process_one_work+0x9c2/0x1840 [ 342.103902][ T1328] worker_thread+0x5da/0xe40 [ 342.105415][ T1328] kthread+0x3b3/0x730 [ 342.106768][ T1328] ret_from_fork+0x754/0xaf0 [ 342.108278][ T1328] ret_from_fork_asm+0x1a/0x30 [ 342.110012][ T1328] [ 342.111067][ T1328] The buggy address belongs to the object at ffff888021816f00 [ 342.111067][ T1328] which belongs to the cache skbuff_head_cache of size 240 [ 342.117129][ T1328] The buggy address is located 112 bytes inside of [ 342.117129][ T1328] freed 240-byte region [ffff888021816f00, ffff888021816ff0) [ 342.122896][ T1328] [ 342.123952][ T1328] The buggy address belongs to the physical page: [ 342.126661][ T1328] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x21816 [ 342.129935][ T1328] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 342.132945][ T1328] memcg:ffff888025951201 [ 342.134345][ T1328] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 342.136743][ T1328] page_type: f5(slab) [ 342.138055][ T1328] raw: 00fff00000000040 ffff88801cb6e8c0 dead000000000100 dead000000000122 [ 342.141116][ T1328] raw: 0000000000000000 0000000000190019 00000000f5000000 ffff888025951201 [ 342.143876][ T1328] head: 00fff00000000040 ffff88801cb6e8c0 dead000000000100 dead000000000122 [ 342.146666][ T1328] head: 0000000000000000 0000000000190019 00000000f5000000 ffff888025951201 [ 342.149457][ T1328] head: 00fff00000000001 ffffea0000860581 00000000ffffffff 00000000ffffffff [ 342.151993][ T1328] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 342.154444][ T1328] page dumped because: kasan: bad access detected [ 342.156508][ T1328] page_owner tracks the page as allocated [ 342.158343][ T1328] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 13, tgid 13 (kworker/u32:1), ts 183390218740, free_ts 123018875924 [ 342.166074][ T1328] post_alloc_hook+0x1e1/0x250 [ 342.168136][ T1328] get_page_from_freelist+0xe3d/0x2e10 [ 342.170513][ T1328] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 342.173039][ T1328] alloc_pages_mpol+0x1fb/0x550 [ 342.175151][ T1328] new_slab+0x2c4/0x440 [ 342.176945][ T1328] ___slab_alloc+0xda3/0x1ca0 [ 342.178989][ T1328] __slab_alloc.isra.0+0x63/0x110 [ 342.181163][ T1328] kmem_cache_alloc_node_noprof+0x51e/0x880 [ 342.183689][ T1328] __alloc_skb+0x156/0x410 [ 342.185605][ T1328] __ipv6_ifa_notify+0x1f1/0xf90 [ 342.187622][ T1328] addrconf_dad_completed+0x195/0xff0 [ 342.189791][ T1328] addrconf_dad_work+0xb1e/0x1360 [ 342.191858][ T1328] process_one_work+0x9c2/0x1840 [ 342.194011][ T1328] worker_thread+0x5da/0xe40 [ 342.195784][ T1328] kthread+0x3b3/0x730 [ 342.197106][ T1328] ret_from_fork+0x754/0xaf0 [ 342.198623][ T1328] page last free pid 60 tgid 60 stack trace: [ 342.201049][ T1328] __free_frozen_pages+0x822/0x1130 [ 342.203289][ T1328] __put_partials+0x127/0x160 [ 342.205310][ T1328] qlist_free_all+0x47/0xe0 [ 342.207294][ T1328] kasan_quarantine_reduce+0x1a0/0x1f0 [ 342.209636][ T1328] __kasan_slab_alloc+0x69/0x90 [ 342.211731][ T1328] __kmalloc_cache_noprof+0x2e1/0x810 [ 342.214033][ T1328] usb_control_msg+0xbc/0x4a0 [ 342.216062][ T1328] hub_port_reset+0x6b7/0x1c60 [ 342.218134][ T1328] hub_port_init+0x1f2/0x37f0 [ 342.220169][ T1328] hub_event+0x2f27/0x4af0 [ 342.222105][ T1328] process_one_work+0x9c2/0x1840 [ 342.224066][ T1328] worker_thread+0x5da/0xe40 [ 342.225971][ T1328] kthread+0x3b3/0x730 [ 342.227667][ T1328] ret_from_fork+0x754/0xaf0 [ 342.229604][ T1328] ret_from_fork_asm+0x1a/0x30 [ 342.231673][ T1328] [ 342.232722][ T1328] Memory state around the buggy address: [ 342.235133][ T1328] ffff888021816e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 342.238554][ T1328] ffff888021816e80: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 342.241970][ T1328] >ffff888021816f00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 342.245383][ T1328] ^ [ 342.248658][ T1328] ffff888021816f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 342.252057][ T1328] ffff888021817000: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 342.255435][ T1328] ================================================================== [ 342.468441][ T1328] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 342.471567][ T1328] CPU: 0 UID: 0 PID: 1328 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 342.476127][ T1328] Tainted: [L]=SOFTLOCKUP [ 342.477994][ T1328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 342.482272][ T1328] Workqueue: events hci_uart_write_work [ 342.484638][ T1328] Call Trace: [ 342.486106][ T1328] [ 342.487397][ T1328] dump_stack_lvl+0x100/0x190 [ 342.489413][ T1328] vpanic+0x20d/0x630 [ 342.491173][ T1328] panic+0xd1/0xd1 [ 342.492809][ T1328] ? __pfx_panic+0x10/0x10 [ 342.494737][ T1328] ? hci_uart_write_work+0x81c/0x950 [ 342.496987][ T1328] ? preempt_schedule_common+0x42/0xc0 [ 342.499325][ T1328] ? check_panic_on_warn+0x1f/0x90 [ 342.501529][ T1328] check_panic_on_warn.cold+0x19/0x34 [ 342.503825][ T1328] end_report.part.0+0x3a/0x90 [ 342.505925][ T1328] kasan_report.cold+0xe/0x18 [ 342.507955][ T1328] ? hci_uart_write_work+0x81c/0x950 [ 342.510249][ T1328] hci_uart_write_work+0x81c/0x950 [ 342.512439][ T1328] ? __pfx_pty_write+0x10/0x10 [ 342.514515][ T1328] process_one_work+0x9c2/0x1840 [ 342.516652][ T1328] ? __pfx_process_one_work+0x10/0x10 [ 342.518970][ T1328] ? assign_work+0x19c/0x250 [ 342.520971][ T1328] worker_thread+0x5da/0xe40 [ 342.522938][ T1328] ? kthread+0x17d/0x730 [ 342.524624][ T1328] ? __pfx_worker_thread+0x10/0x10 [ 342.526815][ T1328] kthread+0x3b3/0x730 [ 342.528585][ T1328] ? __pfx_kthread+0x10/0x10 [ 342.530604][ T1328] ? ret_from_fork+0x79/0xaf0 [ 342.532615][ T1328] ? ret_from_fork+0x79/0xaf0 [ 342.534648][ T1328] ? rcu_is_watching+0x12/0xc0 [ 342.536711][ T1328] ? __pfx_kthread+0x10/0x10 [ 342.538719][ T1328] ret_from_fork+0x754/0xaf0 [ 342.540702][ T1328] ? __pfx_ret_from_fork+0x10/0x10 [ 342.542897][ T1328] ? __switch_to+0x7b9/0x10c0 [ 342.544908][ T1328] ? __pfx_kthread+0x10/0x10 [ 342.546928][ T1328] ret_from_fork_asm+0x1a/0x30 [ 342.549008][ T1328] [ 342.551163][ T1328] Kernel Offset: disabled [ 342.553026][ T1328] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:14:06 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85672910 RDI=ffffffff9b1f0260 RBP=ffffffff9b1f0220 RSP=ffffc9000780f510 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff363e09e R15=dffffc0000000000 RIP=ffffffff85672937 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880973e5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5436b0c CR3=000000006e88a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000020800000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000110fca5 RBX=ffff88801dada4c0 RCX=ffffffff8b73f4b5 RDX=0000000000000000 RSI=ffffffff8dc4123d RDI=ffffffff8bfa32a0 RBP=0000000000000001 RSP=ffffc9000046fdf0 R8 =0000000000000001 R9 =ffffed100566673d R10=ffff88802b3339eb R11=0000000000000000 R12=ffffed1003b5b498 R13=0000000000000001 R14=ffffffff90b75dd0 R15=0000000000000000 RIP=ffffffff8b73de1f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974e5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7175700 CR3=000000004d246000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000020800000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000005fbf97 RBX=ffff88801dadc980 RCX=ffffffff8b73f4b5 RDX=0000000000000000 RSI=ffffffff8dc4123d RDI=ffffffff8bfa32a0 RBP=0000000000000002 RSP=ffffc9000047fdf0 R8 =0000000000000001 R9 =ffffed100568673d R10=ffff88802b4339eb R11=0000000000000000 R12=ffffed1003b5b930 R13=0000000000000002 R14=ffffffff90b75dd0 R15=0000000000000000 RIP=ffffffff8b73de1f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975e5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000563e269e5f48 CR3=00000000505ef000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=da9f54421add2b09 c11f138ed41c9b23 da9f54421add2b09 c11f138ed41c9b23 da9f54421add2b09 c11f138ed41c9b23 da9f54421add2b09 c11f138ed41c9b23 ZMM18=178f075acc3171a6 c9c2aa7abb91c4d8 178f075acc3171a6 c9c2aa7abb91c4d8 178f075acc3171a6 c9c2aa7abb91c4d8 178f075acc3171a6 c9c2aa7abb91c4d8 ZMM19=4a0f000000000000 0000000000000005 4a0f000000000000 0000000000000004 4a0f000000000000 0000000000000003 4a0f000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0330040000030808 0006080014080006 0170fa2008000608 00200800060171b0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0180021ece080001 000000080606011b 9248808008000180 0300040004080005 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 800201c708000800 4bca0069636d762f 7665642f01ffffff ffffffffffeb0805 ZMM24=bb91c4d8bb91c4d8 bb91c4d8bb91c4d8 bb91c4d8bb91c4d8 bb91c4d8bb91c4d8 bb91c4d8bb91c4d8 bb91c4d8bb91c4d8 bb91c4d8bb91c4d8 bb91c4d8bb91c4d8 ZMM25=c9c2aa7ac9c2aa7a c9c2aa7ac9c2aa7a c9c2aa7ac9c2aa7a c9c2aa7ac9c2aa7a c9c2aa7ac9c2aa7a c9c2aa7ac9c2aa7a c9c2aa7ac9c2aa7a c9c2aa7ac9c2aa7a ZMM26=cc3171a6cc3171a6 cc3171a6cc3171a6 cc3171a6cc3171a6 cc3171a6cc3171a6 cc3171a6cc3171a6 cc3171a6cc3171a6 cc3171a6cc3171a6 cc3171a6cc3171a6 ZMM27=178f075a178f075a 178f075a178f075a 178f075a178f075a 178f075a178f075a 178f075a178f075a 178f075a178f075a 178f075a178f075a 178f075a178f075a ZMM28=000000500000004f 0000004e0000004d 0000004c0000004b 0000004a00000049 0000004800000047 0000004600000045 0000004400000043 0000004200000041 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=490f0000490f0000 490f0000490f0000 490f0000490f0000 490f0000490f0000 490f0000490f0000 490f0000490f0000 490f0000490f0000 490f0000490f0000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=0000000000000000 RCX=ffffffff81f9ff4a RDX=0000000000000001 RSI=0000000000000000 RDI=0000000000000005 RBP=ffff88802b242ee0 RSP=ffffc90006c1f800 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed10056485dd R14=0000000000000001 R15=ffff88802b53c040 RIP=ffffffff820647f0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976e5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7436288 CR3=000000000e392000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000015c00000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000