last executing test programs: 7.003032696s ago: executing program 1 (id=1210): syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="ea814099460896a778268636248bc819fb334c09c718cbc358235c54f9c01db85bf8732b1d6b33705c", @ANYRES64], 0x14) memfd_create(0x0, 0x0) epoll_create1(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r0, &(0x7f0000000080)=""/237, 0xed, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x77359400}}, 0x0) readv(r1, &(0x7f0000002140)=[{&(0x7f0000000140)=""/29, 0x1d}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="7365000000000000000000000000000000000004000000428ff471"], &(0x7f0000000200)=0x28) setresgid(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, @val=@tracing={0x0, 0xdefa}}, 0x3c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) write$vga_arbiter(r4, &(0x7f0000000400)=ANY=[@ANYBLOB='target PCI:0:0:16.1'], 0x15) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002980)=ANY=[@ANYBLOB="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"], 0x110}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6.859282904s ago: executing program 3 (id=1211): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x34, r2, 0x1, 0x70bd29, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x34}}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="110800000000000008002000000008000300", @ANYRES32=r7, @ANYBLOB="24002d800800030000000000050001000000000008000200030000000500040000000000"], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r9) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x34, r10, 0x607, 0x0, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x34}}, 0x0) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r15, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r14, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=ANY=[@ANYBLOB="88010000", @ANYRES16=r13, @ANYBLOB="010000000000000000002300000038002f800c0002000000000000000000280003802400038006000100000000000c0004000201aaaaaaaaaaaa0c0004008bd7b84e2d86341908000300", @ANYRES32=r16, @ANYBLOB="34012f80"], 0x188}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) r18 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r19 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r18, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x1c, r19, 0x1, 0x0, 0x0, {0x8}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r20}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r16}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r17}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r20}]}, 0x64}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r21 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r21, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r21, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x40, r0, 0x1, 0x70bd28, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r22}, @NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 6.18069447s ago: executing program 3 (id=1213): socket$kcm(0x10, 0x0, 0x4) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x20000035, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d0000006700000005"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x10) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000000c0), 0x96, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) tee(r5, r4, 0x8, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r6, 0x40045569, 0xa) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$hidraw(r7, 0x0, 0xc) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000200)={{0x0, 0x9, 0x4, 0x7fff}, 'syz0\x00', 0x3d}) ioctl$UI_SET_LEDBIT(r6, 0x40045569, 0x0) ioctl$UI_DEV_CREATE(r6, 0x5501) 4.890326017s ago: executing program 0 (id=1215): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_open_dev$mouse(0x0, 0x6, 0x181000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x80000000}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_DREG={0x8, 0x4, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) close(r3) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendfile(r4, r2, 0x0, 0xffefffff) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x0) 4.500726155s ago: executing program 2 (id=1216): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00'}, 0x10) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_open_dev$mouse(0x0, 0x6, 0x181000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x80000000}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) close(r3) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendfile(r4, r2, 0x0, 0xffefffff) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) accept4(r0, 0x0, 0x0, 0x0) 4.090887644s ago: executing program 0 (id=1217): keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000140)=[{0xffffffffffffffff}, {0x0}], 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e21, @broadcast}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x282040, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04000f08"], 0x7) syz_emit_vhci(0x0, 0x7) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) shutdown(0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x2}, 0x20) syz_emit_ethernet(0x42, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaa272b89b872fa045aea7eb2a75aaaaaa00000000000086dd60e90e5b000c11002001000000000000001000000000007801000000000000000000"], 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a00"], 0x58}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[], 0x58}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r9, @ANYBLOB="080026008f0900000800b70000000000"], 0x2c}}, 0x0) 3.952899752s ago: executing program 1 (id=1218): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = gettid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r5, &(0x7f0000000440)=""/247, 0x26) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000080)={0x1, @tick=0x401, 0xfd}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, &(0x7f0000000100)={{}, {0x0, 0x5}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000180)) tkill(r4, 0x7) socket$vsock_stream(0x28, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x102) r6 = socket$netlink(0x10, 0x3, 0x2) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r6, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="570f20100a7d4420f8b60cb7d29b23dd99a843a8e0f4493d4efa5e7df47a089bfefc94abda2042b3", @ANYRES16=r7, @ANYBLOB="000428bd7000fddbdf250a0000003400068014000400fe8000000000000000000000000000bb14000400fe8000000000000000000000000000bb08000700", @ANYRES32=r8, @ANYBLOB="050005000a0000000500050007000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x40) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getdents(0xffffffffffffffff, 0x0, 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000020a000000000000000000000850000001700000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x98, &(0x7f0000000000)=""/152}, 0x80) r10 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0x8) r12 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_persistent(0x16, r11, r12) keyctl$instantiate(0xc, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="6c7c7c6e2f54656661756c7420747275737465643a24292e5ef67d4020303030303030303030303030303030303030303820313461ed35300040a9a60ce93fb44fd5ff96ed32dafaa73e0e41c4d27306f92588ba62041b4522959b6ebe77ff9deb2c0a5701956da8a9d2a326e59f72918e9dcfc07ccb0b132ecb69a85950438c4143aa46dd4c0217691448fcab394d56039063f171f97c5e969ce7ee16f634e63f09c1336bb1cc0ba0d08765ed558fa584ca094df16581ba22bc56cbf2c0baca0c16ad126ed320778344781b8c589a456e6af7c8c84edf50227305be55"], 0x39, r12) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)={0x34, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r9}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x14, 0x2b, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x1, 0x0, 0x0, @fd=r9}]}]}, 0x34}], 0x1}, 0x0) 3.938048515s ago: executing program 0 (id=1219): getpid() r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000959800001801000020a0702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x10, 0x3, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x200, 0x9) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8102) syz_open_dev$ttys(0xc, 0x2, 0x1) r4 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x4, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)='g-jD', 0x0, 0x0, 0x0, 0x0, 0x0}) socket$l2tp6(0xa, 0x2, 0x73) write$tun(r4, &(0x7f0000000400)=ANY=[], 0xa2) read$rfkill(r4, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000000)={0x1d, r7, 0x2}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000001e000102000000000000000007000000c7dd496457172ca75781280f3c677659683bc5ca9901ce9eba4082654c3ed7917ba60b10ae9712027d6d713b049680a1eb0f3dc8c5eba000bfb8fbf5186495737d743f9ad63001f8301d80a0a74df611ba27b2123bdb005e9e2186bfbcf3dc6ead03c4d9b97a38925c1cafd8fe9dd1e322b6fa3a60814709e56efee3d7", @ANYRES32=r7], 0x18}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000a40)={'veth0_to_team\x00', &(0x7f0000000a00)=@ethtool_perm_addr}) ppoll(&(0x7f0000000040)=[{r5}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x10) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000740)={0x0}) 3.590487241s ago: executing program 1 (id=1220): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0}, 0x10) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_open_dev$mouse(0x0, 0x6, 0x181000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x80000000}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_DREG={0x8, 0x4, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) close(r3) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendfile(r4, r2, 0x0, 0xffefffff) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x0) 3.468261285s ago: executing program 2 (id=1221): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x1}, &(0x7f0000000080)=0x0) timer_settime(r0, 0x0, &(0x7f0000000240)={{0x77359400}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0) unshare(0x20000600) unshare(0x28020200) mount(0x0, &(0x7f0000000600)='./bus\x00', &(0x7f0000000240)='bdev\x00', 0x10, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000680)={{r1, r2+10000000}}, &(0x7f00000006c0)) syncfs(0xffffffffffffffff) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mount$overlay(0x0, &(0x7f0000000740)='./bus\x00', &(0x7f0000000780), 0x10000, &(0x7f0000000800)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_off}, {@index_off}, {@metacopy_off}, {@lowerdir={'lowerdir', 0x3d, './bus'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x64, 0x39, 0x34, 0x64, 0x35, 0x32, 0x62, 0x39], 0x2d, [0x66, 0x66, 0x38, 0x66], 0x2d, [0x32, 0x39, 0x63, 0x37], 0x2d, [0x36, 0x34, 0x37, 0x62], 0x2d, [0x34, 0x61, 0x62, 0x66, 0x32, 0x36, 0x31, 0x34]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x30, 0x36, 0x63, 0x30, 0x36, 0x62, 0x2], 0x2d, [0x64, 0x65, 0x30, 0x34], 0x2d, [0x30, 0x38, 0x35], 0x2d, [0x65, 0x66, 0x36, 0x64], 0x2d, [0x36, 0x64, 0x62, 0x63, 0x39, 0x63, 0x63]}}}, {@uid_eq}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@measure}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@audit}, {@smackfshat={'smackfshat', 0x3d, ':$,-'}}]}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000007c0)={'geneve1\x00', {0x2, 0x4e20, @broadcast}}) statfs(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000940)=""/78) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000005000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x23) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000008000000850000002e000000a50000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000800b70200000000000085000000860000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) socketpair(0x28, 0x2, 0x0, &(0x7f0000000e80)) 3.265618071s ago: executing program 3 (id=1222): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='host1x_syncpt_wait_check\x00', r3}, 0x10) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) read$FUSE(r5, &(0x7f0000003800)={0x2020}, 0x2020) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0}) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r7, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) bind$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) ioperm(0xffffff7d, 0x7, 0x7) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/fscaps', 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000440)='net/ip6_tables_targets\x00') lseek(r8, 0xd7, 0x0) syz_io_uring_setup(0xd79, &(0x7f00000035c0), 0x0, &(0x7f0000003580)=0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(0x0, r9, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f0000000300)=@l2={0x1f, 0x8, @any, 0xfff4}}) 2.630259985s ago: executing program 2 (id=1223): sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYBLOB="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"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x9, 0x200, 0x1, 0x800, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4, 0x6}, 0x48) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000300000000001845f6380abcbf110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x810) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e80)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="01000000000000000000010000006a000000014100000014001700000000000069623a"], 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xf, 0x60000007, &(0x7f0000000100)="05ff03076844268cb89e14f08848fee0ffff00febabec44277fb86dd1402e000030c62079f4b4d2f87e5feca6aab055013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x5a0e}, 0x2c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x8b, &(0x7f0000000000), 0x2}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0x1}, 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='fib_table_lookup\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000600)=""/199, 0x109, 0xc7, 0x1, 0x2}, 0x20) openat$sw_sync_info(0xffffff9c, &(0x7f0000000700), 0x622400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="0e47e5eafb9a6eff299a326bb8116883880186c968225dd0f379fd56fbd320cc976cf7e2681e5522594dbb8a3a9d744c715ad2789895ff7569ff83ab"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r9}, 0x90) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='leases_conflict\x00'}, 0x10) 2.399716659s ago: executing program 1 (id=1224): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x35) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={0x0, r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x4c, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$packet(0x11, 0x0, 0x300) r2 = socket(0x10, 0x803, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000080)='./file1\x00', 0x12b842, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x80000000) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x54}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) recvmmsg(r5, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000001800), 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, 0x4}, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x9) 2.071910538s ago: executing program 3 (id=1225): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_open_dev$mouse(0x0, 0x6, 0x181000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x80000000}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_DREG={0x8, 0x4, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) close(r3) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendfile(r4, r2, 0x0, 0xffefffff) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x0) 2.06654683s ago: executing program 2 (id=1226): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x35) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={0x0, r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x4c, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$packet(0x11, 0x0, 0x300) r2 = socket(0x10, 0x803, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r4 = open(&(0x7f0000000080)='./file1\x00', 0x12b842, 0x0) sendfile(r4, r3, 0x0, 0x80000000) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x54}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) recvmmsg(r6, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000001800), 0x0, 0x0) bind$bt_hci(r3, &(0x7f0000000340)={0x1f, 0x0, 0x4}, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x9) 2.010624885s ago: executing program 0 (id=1227): keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000140)=[{0xffffffffffffffff}, {0x0}], 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e21, @broadcast}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x282040, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04000f08"], 0x7) syz_emit_vhci(0x0, 0x7) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) shutdown(0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x2}, 0x20) syz_emit_ethernet(0x42, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaa272b89b872fa045aea7eb2a75aaaaaa00000000000086dd60e90e5b000c11002001000000000000001000000000007801000000000000000000"], 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a00"], 0x58}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[], 0x58}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r9, @ANYBLOB="080026008f0900000800b70000000000"], 0x2c}}, 0x0) 1.769837036s ago: executing program 0 (id=1228): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000ffff000000007200ea04850000007b00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioprio_get$pid(0x2, 0x0) read(r3, &(0x7f0000001a00)=""/177, 0xb1) r4 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setpriority(0x2, 0x0, 0x3) write(r4, &(0x7f0000000040)="78eb046387cf51c15fbcc8d2bddbddb0f3fc0013421949927985c4f591d871d7a1509e1160f31f0188694cdb16e060d77f7c715ab5715bb70f286a45912932", 0x3f) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, 0x0, 0xfffffffffffffef2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000180), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) mlock2(&(0x7f0000727000/0x1000)=nil, 0x1000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) 1.340845976s ago: executing program 1 (id=1229): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_open_dev$mouse(0x0, 0x6, 0x181000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x80000000}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) close(r3) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendfile(r4, r2, 0x0, 0xffefffff) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) accept4(r0, 0x0, 0x0, 0x0) 970.407864ms ago: executing program 3 (id=1230): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = gettid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r5, &(0x7f0000000440)=""/247, 0x26) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000080)={0x1, @tick=0x401, 0xfd}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, &(0x7f0000000100)={{}, {0x0, 0x5}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000180)) tkill(r4, 0x7) socket$vsock_stream(0x28, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x102) r6 = socket$netlink(0x10, 0x3, 0x2) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r6, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="570f20100a7d4420f8b60cb7d29b23dd99a843a8e0f4493d4efa5e7df47a089bfefc94abda2042b3", @ANYRES16=r7, @ANYBLOB="000428bd7000fddbdf250a0000003400068014000400fe8000000000000000000000000000bb14000400fe8000000000000000000000000000bb08000700", @ANYRES32=r8, @ANYBLOB="050005000a0000000500050007000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x40) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getdents(0xffffffffffffffff, 0x0, 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000020a000000000000000000000850000001700000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x98, &(0x7f0000000000)=""/152}, 0x80) r10 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0x8) r12 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_persistent(0x16, r11, r12) keyctl$instantiate(0xc, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="6c7c7c6e2f54656661756c7420747275737465643a24292e5ef67d4020303030303030303030303030303030303030303820313461ed35300040a9a60ce93fb44fd5ff96ed32dafaa73e0e41c4d27306f92588ba62041b4522959b6ebe77ff9deb2c0a5701956da8a9d2a326e59f72918e9dcfc07ccb0b132ecb69a85950438c4143aa46dd4c0217691448fcab394d56039063f171f97c5e969ce7ee16f634e63f09c1336bb1cc0ba0d08765ed558fa584ca094df16581ba22bc56cbf2c0baca0c16ad126ed320778344781b8c589a456e6af7c8c84edf50227305be55"], 0x39, r12) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)={0x34, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r9}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x14, 0x2b, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x1, 0x0, 0x0, @fd=r9}]}]}, 0x34}], 0x1}, 0x0) 913.172628ms ago: executing program 2 (id=1231): keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000140)=[{0xffffffffffffffff}, {0x0}], 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e21, @broadcast}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x282040, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04000f08"], 0x7) syz_emit_vhci(0x0, 0x7) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) shutdown(0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x2}, 0x20) syz_emit_ethernet(0x42, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaa272b89b872fa045aea7eb2a75aaaaaa00000000000086dd60e90e5b000c11002001000000000000001000000000007801000000000000000000"], 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008"], 0x58}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[], 0x58}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r9, @ANYBLOB="080026008f0900000800b70000000000"], 0x2c}}, 0x0) 887.91744ms ago: executing program 0 (id=1232): socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xb989) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f0000001840)=""/4090, 0xffa) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3d, 0x0, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0xfd}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}}, 0x0) r6 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r6, &(0x7f0000000180)="200000d9", 0x4, 0x4008021, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendto$unix(r6, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x9f, 0x9, 0xa0, 0x8, 0x471, 0x311, 0x81d5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xea, 0xf5, 0x1f}}]}}]}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x2c}}, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 670.617449ms ago: executing program 2 (id=1233): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r4) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r5) r7 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r6) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r7) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r8) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001000128008000100736974000400028008000d00040000000500100002000000565f983dadc57770deb8a400fc90229fe18c9d819329a0841559fe09e27d1b"], 0x40}}, 0x0) 433.693818ms ago: executing program 3 (id=1234): open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000040)={0x9, {0x0, 0x0, 0x100}}) socket$l2tp6(0xa, 0x2, 0x73) pipe2$9p(0x0, 0x0) set_mempolicy(0xc002, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001800010000000000000000000a000000000000000000000018001600140001000100000000000000000010000000000008000400", @ANYRES32, @ANYBLOB="0600150007"], 0x44}}, 0x0) sendto$netrom(r2, 0x0, 0x11000, 0x0, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x24, 0x0, &(0x7f00000000c0)) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) 0s ago: executing program 1 (id=1235): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYBLOB="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"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x9, 0x200, 0x1, 0x800, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4, 0x6}, 0x48) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000300000000001845f6380abcbf110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x810) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e80)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="01000000000000000000010000006a000000014100000014001700000000000069623a"], 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xf, 0x60000007, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x5a0e}, 0x2c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x8b, &(0x7f0000000000), 0x2}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0x1}, 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='fib_table_lookup\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000600)=""/199, 0x109, 0xc7, 0x1, 0x2}, 0x20) openat$sw_sync_info(0xffffff9c, &(0x7f0000000700), 0x622400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="0e47e5eafb9a6eff299a326bb8116883880186c968225dd0f379fd56fbd320cc976cf7e2681e5522594dbb8a3a9d744c715ad2789895ff7569ff83ab"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r9}, 0x90) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='leases_conflict\x00'}, 0x10) kernel console output (not intermixed with test programs): e type 11 has an invalid length. [ 182.594828][ T7092] debugfs: Directory 'netdev:' with parent 'phy11' already present! [ 183.589733][ T7114] netlink: 68 bytes leftover after parsing attributes in process `syz.3.385'. [ 183.594292][ T7114] netlink: 68 bytes leftover after parsing attributes in process `syz.3.385'. [ 183.851156][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.383'. [ 184.118702][ T7120] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 184.121929][ T7120] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 184.149974][ T7120] vhci_hcd vhci_hcd.0: Device attached [ 184.236913][ T7130] vhci_hcd: connection closed [ 184.237557][ T548] vhci_hcd: stop threads [ 184.243095][ T548] vhci_hcd: release socket [ 184.245440][ T548] vhci_hcd: disconnect device [ 184.393802][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.386'. [ 184.407912][ T7132] b: renamed from lo (while UP) [ 184.457587][ T7132] b: entered allmulticast mode [ 185.892883][ T7158] random: crng reseeded on system resumption [ 186.122049][ T7158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.395'. [ 186.389429][ T7166] netlink: 'syz.0.397': attribute type 11 has an invalid length. [ 186.406574][ T7166] netlink: 'syz.0.397': attribute type 11 has an invalid length. [ 186.418322][ T7166] debugfs: Directory 'netdev:' with parent 'phy11' already present! [ 187.115015][ T7180] netlink: 'syz.2.399': attribute type 21 has an invalid length. [ 188.259616][ T7190] syz.0.403: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 188.265275][ T7190] CPU: 0 UID: 0 PID: 7190 Comm: syz.0.403 Not tainted 6.11.0-rc5-syzkaller-00316-g6cd90e5ea72f #0 [ 188.265297][ T7190] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 188.265307][ T7190] Call Trace: [ 188.265314][ T7190] [ 188.265322][ T7190] dump_stack_lvl+0x16c/0x1f0 [ 188.265371][ T7190] warn_alloc+0x24d/0x3a0 [ 188.265400][ T7190] ? __pfx_warn_alloc+0x10/0x10 [ 188.265418][ T7190] ? hlock_class+0x4e/0x130 [ 188.265435][ T7190] ? stack_depot_save_flags+0x28/0x900 [ 188.265460][ T7190] ? kasan_save_stack+0x42/0x60 [ 188.265470][ T7190] ? kasan_save_stack+0x33/0x60 [ 188.265479][ T7190] ? kasan_save_track+0x14/0x30 [ 188.265488][ T7190] ? __kasan_kmalloc+0xaa/0xb0 [ 188.265496][ T7190] ? xskq_create+0x52/0x1d0 [ 188.265505][ T7190] ? xsk_setsockopt+0x8b0/0xac0 [ 188.265519][ T7190] ? __sys_setsockopt+0x1a4/0x270 [ 188.265532][ T7190] ? __ia32_sys_setsockopt+0xbc/0x160 [ 188.265545][ T7190] ? __do_fast_syscall_32+0x73/0x120 [ 188.265562][ T7190] __vmalloc_node_range_noprof+0x10a3/0x14e0 [ 188.265579][ T7190] ? xskq_create+0xfb/0x1d0 [ 188.265591][ T7190] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 188.265608][ T7190] ? xskq_create+0xfb/0x1d0 [ 188.265617][ T7190] vmalloc_user_noprof+0x6b/0x90 [ 188.265629][ T7190] ? xskq_create+0xfb/0x1d0 [ 188.265639][ T7190] xskq_create+0xfb/0x1d0 [ 188.265650][ T7190] xsk_setsockopt+0x8b0/0xac0 [ 188.265666][ T7190] ? __pfx_xsk_setsockopt+0x10/0x10 [ 188.265680][ T7190] ? __pfx_aa_sk_perm+0x10/0x10 [ 188.265699][ T7190] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 188.265710][ T7190] ? __pfx_xsk_setsockopt+0x10/0x10 [ 188.265725][ T7190] do_sock_setsockopt+0x222/0x480 [ 188.265734][ T7190] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 188.265754][ T7190] ? __fget_light+0x173/0x210 [ 188.265768][ T7190] __sys_setsockopt+0x1a4/0x270 [ 188.265782][ T7190] ? __pfx___sys_setsockopt+0x10/0x10 [ 188.265800][ T7190] ? kcov_ioctl+0x268/0x730 [ 188.265817][ T7190] __ia32_sys_setsockopt+0xbc/0x160 [ 188.265832][ T7190] ? lockdep_hardirqs_on+0x7c/0x110 [ 188.265846][ T7190] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 188.265863][ T7190] __do_fast_syscall_32+0x73/0x120 [ 188.265885][ T7190] do_fast_syscall_32+0x32/0x80 [ 188.265908][ T7190] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 188.265927][ T7190] RIP: 0023:0xf7fa0579 [ 188.265942][ T7190] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 188.265958][ T7190] RSP: 002b:00000000f572556c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 188.265976][ T7190] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 000000000000011b [ 188.265988][ T7190] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000020 [ 188.265998][ T7190] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 188.266004][ T7190] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 188.266010][ T7190] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 188.266023][ T7190] [ 188.270007][ T7190] Mem-Info: [ 188.405074][ T7190] active_anon:10402 inactive_anon:5 isolated_anon:0 [ 188.405074][ T7190] active_file:3475 inactive_file:33485 isolated_file:0 [ 188.405074][ T7190] unevictable:768 dirty:440 writeback:0 [ 188.405074][ T7190] slab_reclaimable:6580 slab_unreclaimable:53207 [ 188.405074][ T7190] mapped:18458 shmem:2526 pagetables:804 [ 188.405074][ T7190] sec_pagetables:311 bounce:0 [ 188.405074][ T7190] kernel_misc_reclaimable:0 [ 188.405074][ T7190] free:85876 free_pcp:5631 free_cma:0 [ 188.405120][ T7190] Node 0 active_anon:0kB inactive_anon:12kB active_file:0kB inactive_file:4kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:1880kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9084kB pagetables:976kB sec_pagetables:1156kB all_unreclaimable? no [ 188.405158][ T7190] Node 1 active_anon:41616kB inactive_anon:8kB active_file:13900kB inactive_file:133936kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:71952kB dirty:1760kB writeback:0kB shmem:8568kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:2388kB pagetables:2240kB sec_pagetables:88kB all_unreclaimable? no [ 188.405199][ T7190] Node 0 DMA free:912kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB active_anon:0kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:288kB local_pcp:56kB free_cma:0kB [ 188.405243][ T7190] lowmem_reserve[]: 0 275 0 0 0 [ 188.405276][ T7190] Node 0 DMA32 free:21148kB boost:0kB min:14004kB low:17504kB high:21004kB reserved_highatomic:4096KB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:4kB unevictable:1536kB writepending:0kB present:1032192kB managed:308884kB mlocked:0kB bounce:0kB free_pcp:3012kB local_pcp:2088kB free_cma:0kB [ 188.405321][ T7190] lowmem_reserve[]: 0 0 0 0 0 [ 188.405353][ T7190] Node 1 DMA32 free:321444kB boost:0kB min:47044kB low:58804kB high:70564kB reserved_highatomic:0KB active_anon:41616kB inactive_anon:8kB active_file:13900kB inactive_file:133936kB unevictable:1536kB writepending:1760kB present:1048436kB managed:946208kB mlocked:0kB bounce:0kB free_pcp:19196kB local_pcp:1328kB free_cma:0kB [ 188.405398][ T7190] lowmem_reserve[]: 0 0 0 0 0 [ 188.405431][ T7190] Node 0 DMA: 1*4kB (U) 9*8kB (U) 6*16kB (U) 22*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 876kB [ 188.405649][ T7190] Node 0 DMA32: 151*4kB (UMEH) 104*8kB (UMEH) 46*16kB (UEH) 81*32kB (UMEH) 22*64kB (UE) 7*128kB (UMEH) 3*256kB (UM) 12*512kB (ME) 5*1024kB (UME) 1*2048kB (M) 0*4096kB = 21148kB [ 188.405793][ T7190] Node 1 DMA32: 5*4kB (UME) 33*8kB (UME) 100*16kB (UME) 191*32kB (UME) 83*64kB (UME) 91*128kB (UME) 22*256kB (UME) 18*512kB (UME) 13*1024kB (UME) 7*2048kB (UM) 62*4096kB (UM) = 321404kB [ 188.405943][ T7190] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 188.405956][ T7190] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 188.405969][ T7190] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 188.405982][ T7190] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 188.405995][ T7190] 39731 total pagecache pages [ 188.406002][ T7190] 245 pages in swap cache [ 188.406008][ T7190] Free swap = 118076kB [ 188.406015][ T7190] Total swap = 124996kB [ 188.406022][ T7190] 524155 pages RAM [ 188.406027][ T7190] 0 pages HighMem/MovableOnly [ 188.406033][ T7190] 206542 pages reserved [ 188.406040][ T7190] 0 pages cma reserved [ 188.851534][ T7196] random: crng reseeded on system resumption [ 188.964028][ T7196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.405'. [ 188.968302][ T7196] block nbd0: not configured, cannot reconfigure [ 189.484650][ T7204] netlink: 'syz.0.408': attribute type 11 has an invalid length. [ 189.493734][ T7204] netlink: 'syz.0.408': attribute type 11 has an invalid length. [ 189.498786][ T7204] debugfs: Directory 'netdev:' with parent 'phy11' already present! [ 190.022853][ T7210] netlink: 'syz.0.410': attribute type 7 has an invalid length. [ 190.026083][ T7210] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.410'. [ 190.053708][ T7210] netlink: 'syz.0.410': attribute type 3 has an invalid length. [ 190.057137][ T7210] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.410'. [ 190.742578][ T7216] syz.1.412(7216): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 190.840871][ T7218] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 190.843649][ T7218] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 190.847907][ T7218] vhci_hcd vhci_hcd.0: Device attached [ 191.100492][ T7226] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 191.120011][ T56] usb 19-1: new low-speed USB device number 3 using vhci_hcd [ 191.563230][ T7230] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 191.572292][ T7230] lo: entered allmulticast mode [ 191.592757][ T7219] vhci_hcd: connection reset by peer [ 191.599634][ T548] vhci_hcd: stop threads [ 191.601684][ T548] vhci_hcd: release socket [ 191.606004][ T548] vhci_hcd: disconnect device [ 191.665070][ T7232] random: crng reseeded on system resumption [ 191.725379][ T7232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.416'. [ 191.859884][ T7234] netlink: 'syz.0.417': attribute type 13 has an invalid length. [ 192.850066][ T7243] syz.0.417 (7243) used greatest stack depth: 20848 bytes left [ 192.974727][ T7255] netlink: 'syz.2.422': attribute type 10 has an invalid length. [ 193.143512][ T7255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.181098][ T7255] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 193.400101][ T7255] netlink: 'syz.2.422': attribute type 1 has an invalid length. [ 193.404432][ T7255] netlink: 224 bytes leftover after parsing attributes in process `syz.2.422'. [ 193.620115][ T7267] input: syz0 as /devices/virtual/input/input31 [ 193.743007][ T7269] random: crng reseeded on system resumption [ 193.803308][ T7270] veth0_vlan: entered allmulticast mode [ 193.967506][ T7269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.426'. [ 194.767552][ T7284] input: syz1 as /devices/virtual/input/input32 [ 195.289220][ T39] audit: type=1326 audit(2000000013.790:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7275 comm="syz.2.427" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x0 [ 196.100033][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 196.280269][ T56] vhci_hcd: vhci_device speed not set [ 196.281717][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 196.290922][ T25] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 196.298684][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 196.303567][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 196.307362][ T25] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.313145][ T25] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 196.316520][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.554179][ T25] usb 5-1: GET_CAPABILITIES returned 0 [ 196.557178][ T25] usbtmc 5-1:16.0: can't read capabilities [ 196.756573][ T25] usb 5-1: USB disconnect, device number 3 [ 198.098002][ T7312] random: crng reseeded on system resumption [ 198.151397][ T7312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.437'. [ 199.558390][ T1378] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.274551][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.442'. [ 201.884295][ T7349] random: crng reseeded on system resumption [ 201.952655][ T7349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.447'. [ 202.150931][ T7345] netlink: 16 bytes leftover after parsing attributes in process `syz.1.446'. [ 202.194274][ T7353] random: crng reseeded on system resumption [ 202.261531][ T7353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.457'. [ 202.369025][ T7355] QAT: failed to copy from user cfg_data. [ 202.590503][ T7357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.450'. [ 203.577845][ T7376] netlink: 'syz.2.454': attribute type 4 has an invalid length. [ 203.669964][ C1] vkms_vblank_simulate: vblank timer overrun [ 204.505066][ T7387] random: crng reseeded on system resumption [ 204.572376][ T7387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.459'. [ 205.104503][ T7397] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.108273][ T7397] bridge0: port 2(bridge_slave_1) entered listening state [ 205.112306][ T7397] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.119521][ T7397] bridge0: port 1(bridge_slave_0) entered listening state [ 205.126328][ T7397] team0: Port device bridge0 added [ 205.239919][ T5412] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 205.468986][ T5412] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 205.473182][ T5412] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.479681][ T5412] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 205.479956][ T7401] netlink: 'syz.1.465': attribute type 11 has an invalid length. [ 205.484006][ T5412] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 205.491143][ T5412] usb 5-1: Manufacturer: syz [ 205.493454][ T7401] netlink: 'syz.1.465': attribute type 11 has an invalid length. [ 205.496463][ T7401] debugfs: Directory 'netdev:' with parent 'phy9' already present! [ 205.531516][ T5412] usb 5-1: config 0 descriptor?? [ 205.639953][ T5412] rc_core: IR keymap rc-hauppauge not found [ 205.648945][ T5412] Registered IR keymap rc-empty [ 205.711770][ T5412] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 205.761214][ T5412] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input37 [ 205.969336][ T1166] usb 5-1: USB disconnect, device number 4 [ 206.918321][ T1294] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 207.027859][ T7419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.470'. [ 207.109989][ T1294] usb 5-1: Using ep0 maxpacket: 32 [ 207.118489][ T1294] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 207.124979][ T1294] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 207.137796][ T1294] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 207.143646][ T1294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 207.148492][ T1294] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 207.152993][ T1294] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 207.159618][ T1294] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 207.167527][ T1294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.184253][ T1294] usb 5-1: config 0 descriptor?? [ 207.409414][ T1294] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 207.446002][ T1294] usb 5-1: USB disconnect, device number 5 [ 207.484451][ T1294] usblp0: removed [ 208.029987][ T1294] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 208.118206][ T7430] netlink: 'syz.2.475': attribute type 11 has an invalid length. [ 208.128606][ T7430] netlink: 'syz.2.475': attribute type 11 has an invalid length. [ 208.132086][ T7430] debugfs: Directory 'netdev:' with parent 'phy3' already present! [ 208.249945][ T1294] usb 5-1: Using ep0 maxpacket: 32 [ 208.254344][ T1294] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 208.258801][ T1294] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 208.272268][ T1294] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 208.276245][ T1294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 208.290309][ T1294] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 208.294535][ T1294] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 208.307117][ T1294] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 208.310614][ T7431] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 208.314521][ T7431] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 208.315399][ T1294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.320220][ T7431] vhci_hcd vhci_hcd.0: Device attached [ 208.326061][ T1294] usb 5-1: config 0 descriptor?? [ 208.565514][ T7434] vhci_hcd: connection closed [ 208.591164][ T13] vhci_hcd: stop threads [ 208.594850][ T13] vhci_hcd: release socket [ 208.599179][ T13] vhci_hcd: disconnect device [ 208.626436][ T1294] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 208.642471][ T1166] usb 16-1: enqueue for inactive port 0 [ 208.989373][ T25] usb 5-1: USB disconnect, device number 6 [ 209.164394][ T1166] usb usb16-port1: attempt power cycle [ 209.215064][ T7414] usblp0: removed [ 209.821184][ T1166] usb usb16-port1: unable to enumerate USB device [ 209.991364][ T7450] random: crng reseeded on system resumption [ 210.059977][ T7450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.480'. [ 210.914400][ T1166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x1 [ 210.917914][ T1166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 210.936737][ T1166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 210.942616][ T1166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 210.945984][ T1166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 210.949436][ T1166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 210.953512][ T1166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x4 [ 210.956304][ T1166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 210.960327][ T1166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x2 [ 210.963239][ T1166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 210.966653][ T1166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 210.971308][ T1166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 210.975002][ T1166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 210.978347][ T1166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 210.982688][ T1166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 210.986926][ T1166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 210.991877][ T1166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 210.996618][ T1166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.001459][ T1166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.005555][ T1166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.010181][ T1166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.013570][ T1166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.016953][ T1166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.020848][ T1166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.024279][ T1166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.027454][ T1166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.030977][ T1166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.035092][ T1166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.038271][ T1166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.042668][ T1166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.046612][ T1166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.052076][ T1166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.055628][ T1166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.059250][ T1166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.071363][ T1166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.074881][ T1166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.078473][ T1166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.090998][ T1166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.094359][ T1166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.097528][ T1166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.104920][ T1166] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [syz0] on syz0 [ 212.266902][ T7467] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.492'. [ 212.320020][ T7467] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.492'. [ 212.543797][ T7470] input: syz1 as /devices/virtual/input/input40 [ 213.386292][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.473370][ T1294] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 213.682485][ T1294] usb 7-1: Using ep0 maxpacket: 8 [ 213.690758][ T1294] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 213.696991][ T1294] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 213.704559][ T1294] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 213.709772][ T1294] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.716653][ T1294] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 213.723364][ T1294] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.977752][ T1294] usb 7-1: GET_CAPABILITIES returned 0 [ 213.990110][ T1294] usbtmc 7-1:16.0: can't read capabilities [ 214.178901][ T56] usb 7-1: USB disconnect, device number 6 [ 214.479074][ T7499] Invalid ELF header magic: != ELF [ 214.491639][ T7497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.494'. [ 214.675530][ T39] audit: type=1326 audit(2000000033.180:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7498 comm="syz.1.495" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x0 [ 216.309996][ T25] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 216.509899][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 216.523056][ T25] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 216.528427][ T25] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 216.533765][ T25] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 216.538399][ T25] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.544998][ T25] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 216.549145][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.765170][ T25] usb 6-1: GET_CAPABILITIES returned 0 [ 216.767408][ T25] usbtmc 6-1:16.0: can't read capabilities [ 216.977005][ T1294] usb 6-1: USB disconnect, device number 2 [ 217.166223][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.204629][ T7526] input: syz1 as /devices/virtual/input/input41 [ 217.751469][ T7535] netlink: 'syz.3.504': attribute type 11 has an invalid length. [ 217.770052][ T7535] netlink: 'syz.3.504': attribute type 11 has an invalid length. [ 217.777135][ T7535] debugfs: Directory 'netdev:' with parent 'phy6' already present! [ 217.793392][ T7538] random: crng reseeded on system resumption [ 217.903236][ T7538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.505'. [ 217.908403][ T7538] block nbd0: not configured, cannot reconfigure [ 218.185686][ T7546] Bluetooth: MGMT ver 1.23 [ 218.283127][ T7550] netlink: 'syz.2.510': attribute type 11 has an invalid length. [ 218.294031][ T7550] netlink: 'syz.2.510': attribute type 11 has an invalid length. [ 218.296758][ T7550] debugfs: Directory 'netdev:' with parent 'phy3' already present! [ 218.683615][ T39] audit: type=1326 audit(2000000037.190:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.3.512" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7eff579 code=0x0 [ 219.197132][ T7568] virtio-fs: tag <(null)> not found [ 219.272780][ T7568] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 219.275685][ T7568] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 219.303137][ T7568] vhci_hcd vhci_hcd.0: Device attached [ 219.316136][ T7569] vhci_hcd: connection closed [ 219.316373][ T13] vhci_hcd: stop threads [ 219.322981][ T13] vhci_hcd: release socket [ 219.327613][ T13] vhci_hcd: disconnect device [ 220.325010][ T7579] random: crng reseeded on system resumption [ 220.643528][ T7586] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 220.646916][ T7586] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 220.662717][ C3] bridge0: port 1(bridge_slave_0) entered learning state [ 220.666437][ C3] bridge0: port 2(bridge_slave_1) entered learning state [ 220.690199][ T7586] vhci_hcd vhci_hcd.0: Device attached [ 220.782664][ T7592] No control pipe specified [ 221.034489][ T1294] usb 14-1: SetAddress Request (2) to port 0 [ 221.037590][ T1294] usb 14-1: new SuperSpeed USB device number 2 using vhci_hcd [ 221.220514][ T7593] ebtables: wrong size: *len 120, entries_size 144, replsz 144 [ 221.321057][ T7593] 9pnet_fd: Insufficient options for proto=fd [ 221.399663][ T7588] vhci_hcd: connection reset by peer [ 221.420223][ T1108] vhci_hcd: stop threads [ 221.422745][ T1108] vhci_hcd: release socket [ 221.425039][ T1108] vhci_hcd: disconnect device [ 223.485229][ T7623] random: crng reseeded on system resumption [ 224.338621][ T39] audit: type=1326 audit(2000000042.830:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7632 comm="syz.3.530" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7eff579 code=0x7fc00000 [ 224.403096][ T39] audit: type=1326 audit(2000000042.910:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7632 comm="syz.3.530" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7eff579 code=0x7fc00000 [ 224.450150][ T39] audit: type=1326 audit(2000000042.910:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7632 comm="syz.3.530" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7eff5a7 code=0x7fc00000 [ 224.459085][ T39] audit: type=1326 audit(2000000042.910:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7632 comm="syz.3.530" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7eff579 code=0x7fc00000 [ 224.723650][ T7640] netlink: 'syz.2.531': attribute type 11 has an invalid length. [ 224.740668][ T7640] netlink: 'syz.2.531': attribute type 11 has an invalid length. [ 224.743938][ T7640] debugfs: Directory 'netdev:' with parent 'phy3' already present! [ 226.110318][ T1294] usb 14-1: device descriptor read/8, error -110 [ 226.538395][ T1294] usb usb14-port1: attempt power cycle [ 227.279642][ T7664] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 227.284719][ T1294] usb usb14-port1: unable to enumerate USB device [ 227.774878][ T7650] netlink: 'syz.2.536': attribute type 11 has an invalid length. [ 227.778351][ T7650] netlink: 20 bytes leftover after parsing attributes in process `syz.2.536'. [ 227.915517][ T7669] netlink: 'syz.2.541': attribute type 11 has an invalid length. [ 227.924659][ T7669] netlink: 'syz.2.541': attribute type 11 has an invalid length. [ 227.929319][ T7669] debugfs: Directory 'netdev:' with parent 'phy3' already present! [ 227.971879][ T7673] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 227.975656][ T7673] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 227.979184][ T7673] overlayfs: missing 'lowerdir' [ 228.001260][ T7673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.544'. [ 228.025343][ T7673] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 228.052329][ T7673] batman_adv: batadv1: Adding interface: netdevsim0 [ 228.057583][ T7673] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.081272][ T7673] batman_adv: batadv1: Interface activated: netdevsim0 [ 229.769552][ T7704] veth0_vlan: entered allmulticast mode [ 229.864218][ T7705] evm: overlay not supported [ 230.815487][ T39] audit: type=1800 audit(2000000049.320:124): pid=7712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.554" name="bus" dev="overlay" ino=748 res=0 errno=0 [ 236.020029][ C3] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.023421][ C3] bridge0: topology change detected, propagating [ 236.026856][ C3] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.030224][ C3] bridge0: topology change detected, propagating [ 237.379964][ T5415] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 237.569923][ T5415] usb 7-1: Using ep0 maxpacket: 8 [ 237.573784][ T5415] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 237.578535][ T5415] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 237.583687][ T5415] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 237.587531][ T5415] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.593009][ T5415] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 237.596564][ T5415] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.825586][ T5415] usb 7-1: GET_CAPABILITIES returned 0 [ 237.828140][ T5415] usbtmc 7-1:16.0: can't read capabilities [ 238.027403][ T1294] usb 7-1: USB disconnect, device number 7 [ 238.776033][ T7768] ufs: Invalid option: "#N%ۗweJ?Wԑat5ѝ 1 [ 240.247577][ T5363] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 240.253253][ T5363] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 240.258049][ T5363] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 240.262351][ T5363] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 240.265683][ T5363] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 240.308320][ T66] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 240.311937][ T66] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 240.316467][ T66] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 240.322727][ T66] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 240.326277][ T66] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 240.329558][ T66] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 240.470231][ T7787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.927852][ T7781] chnl_net:caif_netlink_parms(): no params data found [ 241.052605][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.250154][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.398262][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 241.410242][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.510946][ T7781] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.515479][ T7781] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.518440][ T7781] bridge_slave_0: entered allmulticast mode [ 241.527614][ T7781] bridge_slave_0: entered promiscuous mode [ 241.552291][ T13] bond0: (slave netdevsim0): Releasing backup interface [ 241.571670][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.811327][ T7781] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.820050][ T7781] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.830080][ T7781] bridge_slave_1: entered allmulticast mode [ 241.834004][ T7781] bridge_slave_1: entered promiscuous mode [ 242.049301][ T7781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.062724][ T7781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.314885][ T7781] team0: Port device team_slave_0 added [ 242.360598][ T1294] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 242.397453][ T7781] team0: Port device team_slave_1 added [ 242.421304][ T5363] Bluetooth: hci4: command tx timeout [ 242.498404][ T7781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.501972][ T7781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.512615][ T7781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.537975][ T7781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.540035][ T1294] usb 5-1: Using ep0 maxpacket: 8 [ 242.540908][ T7781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.545442][ T1294] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 242.556105][ T7781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.560496][ T1294] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 242.569245][ T1294] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 242.573023][ T13] bridge_slave_1: left allmulticast mode [ 242.573958][ T1294] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 242.576293][ T13] bridge_slave_1: left promiscuous mode [ 242.582151][ T1294] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 242.585340][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.588296][ T1294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.613700][ T13] bridge_slave_0: left allmulticast mode [ 242.624912][ T13] bridge_slave_0: left promiscuous mode [ 242.627933][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.814580][ T1294] usb 5-1: GET_CAPABILITIES returned 0 [ 242.817399][ T1294] usbtmc 5-1:16.0: can't read capabilities [ 242.854066][ T7823] random: crng reseeded on system resumption [ 243.016394][ T1294] usb 5-1: USB disconnect, device number 7 [ 243.052852][ T13] team0: Port device bridge0 removed [ 243.212112][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.218477][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.229251][ T13] bond0 (unregistering): (slave team0): Releasing backup interface [ 243.256591][ T13] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 243.268520][ T13] bond0 (unregistering): Released all slaves [ 243.444313][ T13] tipc: Left network mode [ 243.469682][ T7781] hsr_slave_0: entered promiscuous mode [ 243.475255][ T7781] hsr_slave_1: entered promiscuous mode [ 243.484312][ T7781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.488863][ T7781] Cannot create hsr debugfs directory [ 243.935114][ T13] hsr_slave_0: left promiscuous mode [ 243.948029][ T13] hsr_slave_1: left promiscuous mode [ 243.953712][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.956950][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.965944][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.969776][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.044837][ T13] veth1_macvtap: left promiscuous mode [ 244.047219][ T13] veth0_macvtap: left promiscuous mode [ 244.049661][ T13] veth1_vlan: left promiscuous mode [ 244.052701][ T13] veth0_vlan: left promiscuous mode [ 244.500455][ T5363] Bluetooth: hci4: command tx timeout [ 245.909996][ T56] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 246.111414][ T56] usb 5-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 246.115210][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.120670][ T56] usb 5-1: config 0 descriptor?? [ 246.131004][ T56] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input51 [ 246.580473][ T5363] Bluetooth: hci4: command tx timeout [ 246.751783][ T7850] orangefs_mount: mount request failed with -4 [ 246.959667][ T1294] usb 5-1: USB disconnect, device number 8 [ 247.409996][ T13] team0 (unregistering): Port device team_slave_1 removed [ 247.596430][ T13] team0 (unregistering): Port device team_slave_0 removed [ 248.661894][ T5363] Bluetooth: hci4: command tx timeout [ 249.005468][ T13] lo (unregistering): left allmulticast mode [ 250.492716][ T7781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 250.512826][ T7781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 250.543458][ T7781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 250.592885][ T7781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 250.837925][ T7781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.864096][ T7897] netlink: 'syz.3.598': attribute type 11 has an invalid length. [ 250.867660][ T7781] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.885687][ T7897] netlink: 'syz.3.598': attribute type 11 has an invalid length. [ 250.889887][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.893096][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.906845][ T7897] debugfs: Directory 'netdev:' with parent 'phy6' already present! [ 250.947991][ T1195] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.951503][ T1195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.447285][ T7781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.566444][ T7781] veth0_vlan: entered promiscuous mode [ 251.605300][ T7781] veth1_vlan: entered promiscuous mode [ 251.677324][ T7781] veth0_macvtap: entered promiscuous mode [ 251.687030][ T7781] veth1_macvtap: entered promiscuous mode [ 251.719510][ T7781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.724649][ T7781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.729024][ T7781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.733988][ T7781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.738394][ T7781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.743198][ T7781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.752585][ T7781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.766729][ T7781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.772239][ T7781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.777193][ T7781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.784551][ T7781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.789701][ T7781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.794844][ T7781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.807445][ T7781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.829209][ T7781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.834089][ T7781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.839065][ T7781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.844410][ T7781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.022779][ T1195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.026198][ T1195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.057738][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.061793][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.620602][ T7932] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 254.630107][ T7932] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 254.633382][ T7932] overlayfs: missing 'lowerdir' [ 254.680645][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.605'. [ 254.690747][ T7932] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 254.728273][ T7932] batman_adv: batadv1: Adding interface: netdevsim0 [ 254.734055][ T7932] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.760013][ T7932] batman_adv: batadv1: Interface activated: netdevsim0 [ 254.826992][ T7939] netlink: 'syz.0.607': attribute type 11 has an invalid length. [ 254.833439][ T7939] netlink: 'syz.0.607': attribute type 11 has an invalid length. [ 254.861053][ T7939] debugfs: Directory 'netdev:' with parent 'phy11' already present! [ 255.988962][ T39] audit: type=1326 audit(2000000074.470:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7964 comm="syz.2.614" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x0 [ 256.127953][ T7967] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 256.202545][ T7967] netlink: 5 bytes leftover after parsing attributes in process `syz.2.614'. [ 256.206807][ T7967] 0XD: renamed from gretap0 (while UP) [ 256.222848][ T7967] 0XD: entered allmulticast mode [ 256.918043][ T7979] netlink: 'syz.2.618': attribute type 11 has an invalid length. [ 256.938085][ T7979] netlink: 'syz.2.618': attribute type 11 has an invalid length. [ 256.944078][ T7979] debugfs: Directory 'netdev:' with parent 'phy3' already present! [ 257.875860][ T7997] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 257.885965][ T7997] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 257.892746][ T7997] overlayfs: missing 'lowerdir' [ 257.928373][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.619'. [ 257.937646][ T7997] batman_adv: batadv0: Adding interface: netdevsim0 [ 257.943204][ T5363] Bluetooth: hci4: command tx timeout [ 257.956721][ T7997] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.971332][ T7997] batman_adv: batadv0: Interface activated: netdevsim0 [ 258.631949][ T8009] netlink: 'syz.2.623': attribute type 11 has an invalid length. [ 258.653731][ T8009] netlink: 'syz.2.623': attribute type 11 has an invalid length. [ 258.657246][ T8009] debugfs: Directory 'netdev:' with parent 'phy3' already present! [ 258.899995][ T5415] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 259.099920][ T5415] usb 5-1: Using ep0 maxpacket: 8 [ 259.119904][ T5415] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 259.125124][ T5415] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 259.129769][ T5415] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 259.140002][ T5415] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 259.175781][ T5415] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 259.200011][ T5415] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.468884][ T5415] usb 5-1: GET_CAPABILITIES returned 0 [ 259.472106][ T5415] usbtmc 5-1:16.0: can't read capabilities [ 259.599956][ T8014] infiniband syz1: set down [ 259.602863][ T8014] infiniband syz1: added ipvlan1 [ 259.714876][ T1166] usb 5-1: USB disconnect, device number 9 [ 259.823086][ T8014] RDS/IB: syz1: added [ 259.829899][ T8014] smc: adding ib device syz1 with port count 1 [ 259.833752][ T8014] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 261.226485][ T8038] No control pipe specified [ 261.262404][ T8038] o2cb: This node has not been configured. [ 261.265471][ T8038] o2cb: Cluster check failed. Fix errors before retrying. [ 261.279001][ T8038] (syz.3.630,8038,0):user_dlm_register:674 ERROR: status = -22 [ 261.286278][ T8038] (syz.3.630,8038,0):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "file0" [ 262.438457][ T39] audit: type=1804 audit(2000000080.940:126): pid=8049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.634" name="/newroot/146/bus/file0" dev="overlay" ino=858 res=1 errno=0 [ 262.448013][ T39] audit: type=1800 audit(2000000080.940:127): pid=8049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.634" name="file0" dev="overlay" ino=858 res=0 errno=0 [ 262.689989][ T5415] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 262.870206][ T5415] usb 5-1: Using ep0 maxpacket: 8 [ 262.877775][ T5415] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 262.887051][ T5415] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 262.895711][ T5415] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 262.901898][ T5415] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 262.907360][ T5415] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 262.916680][ T5415] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.145624][ T5415] usb 5-1: GET_CAPABILITIES returned 0 [ 263.148298][ T5415] usbtmc 5-1:16.0: can't read capabilities [ 263.149320][ T8049] syz.3.634 (8049): drop_caches: 2 [ 263.348027][ T5415] usb 5-1: USB disconnect, device number 10 [ 264.194549][ T8067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.640'. [ 267.229979][ T39] audit: type=1804 audit(2000000085.660:128): pid=8114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.647" name="/newroot/12/bus/file0" dev="overlay" ino=95 res=1 errno=0 [ 267.249906][ T39] audit: type=1800 audit(2000000085.660:129): pid=8114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.647" name="file0" dev="overlay" ino=95 res=0 errno=0 [ 267.300050][ T5393] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 267.490180][ T5393] usb 7-1: Using ep0 maxpacket: 8 [ 267.498798][ T5393] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 267.504145][ T5393] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 267.508635][ T5393] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 267.517792][ T5393] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 267.524433][ T5393] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 267.528339][ T5393] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.830105][ T5393] usb 7-1: GET_CAPABILITIES returned 0 [ 267.832463][ T5393] usbtmc 7-1:16.0: can't read capabilities [ 267.915109][ T8114] syz.1.647 (8114): drop_caches: 2 [ 268.049485][ T1294] usb 7-1: USB disconnect, device number 8 [ 269.221873][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.680097][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.456416][ T8162] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.661'. [ 270.634627][ T8160] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 271.555684][ T8166] mkiss: ax0: crc mode is auto. [ 272.702253][ T8178] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.666'. [ 272.731580][ T8179] fuse: Unknown parameter '01777777777777777777777M mB⧶4Px{^滶 [ 272.731580][ T8179] E<ԜUewwֆ;b;לT\+SE2)zH\ 00000000000000000000' [ 272.801696][ T8179] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 273.239701][ T8184] random: crng reseeded on system resumption [ 273.361061][ T8184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.667'. [ 273.364980][ T8184] block nbd0: not configured, cannot reconfigure [ 274.015851][ T13] Bluetooth: hci2: Frame reassembly failed (-84) [ 274.273360][ T8195] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 274.834351][ T8198] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 275.069192][ T8201] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 275.452453][ T8207] ebtables: wrong size: *len 120, entries_size 144, replsz 144 [ 276.000054][ T8209] netlink: 'syz.1.674': attribute type 11 has an invalid length. [ 276.020261][ T5363] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 276.060296][ T8209] netlink: 'syz.1.674': attribute type 11 has an invalid length. [ 276.064095][ T8209] debugfs: Directory 'netdev:' with parent 'phy13' already present! [ 276.812154][ T8226] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 276.995734][ T8232] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 277.888719][ T8240] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 278.032323][ T983] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 278.209908][ T983] usb 5-1: Using ep0 maxpacket: 8 [ 278.221845][ T983] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 278.227168][ T983] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 278.232410][ T983] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 278.236670][ T983] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.242469][ T983] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 278.246366][ T983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.413928][ T39] audit: type=1326 audit(2000000096.910:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.1.683" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x0 [ 278.476909][ T983] usb 5-1: GET_CAPABILITIES returned 0 [ 278.479543][ T983] usbtmc 5-1:16.0: can't read capabilities [ 278.518942][ T8247] netlink: 76 bytes leftover after parsing attributes in process `syz.3.685'. [ 278.599337][ T8247] : entered promiscuous mode [ 278.682550][ T983] usb 5-1: USB disconnect, device number 11 [ 279.944490][ T5363] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 279.948404][ T5363] Bluetooth: hci4: Injecting HCI hardware error event [ 279.953659][ T66] Bluetooth: hci4: hardware error 0x00 [ 280.381851][ T8281] netlink: 'syz.0.692': attribute type 10 has an invalid length. [ 280.862132][ T8287] random: crng reseeded on system resumption [ 281.399964][ T983] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 281.626276][ T8301] ebtables: wrong size: *len 120, entries_size 144, replsz 144 [ 281.811592][ T8303] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 282.030105][ T66] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 283.417803][ T8313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.701'. [ 284.890586][ T8330] random: crng reseeded on system resumption [ 285.258864][ T8334] netlink: 'syz.2.707': attribute type 10 has an invalid length. [ 285.267194][ T8334] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 285.305444][ T8334] batman_adv: batadv1: Removing interface: netdevsim0 [ 285.372251][ T8334] team0: Port device netdevsim0 added [ 285.715377][ T39] audit: type=1804 audit(2000000104.220:131): pid=8349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.710" name="/newroot/177/bus/file0" dev="overlay" ino=1022 res=1 errno=0 [ 285.733123][ T39] audit: type=1800 audit(2000000104.230:132): pid=8349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.710" name="file0" dev="overlay" ino=1022 res=0 errno=0 [ 285.761256][ T8349] syz.2.710 (8349): drop_caches: 2 [ 285.765203][ T8349] syz.2.710 (8349): drop_caches: 2 [ 286.597191][ T8360] fuse: Bad value for 'fd' [ 287.679676][ T8371] random: crng reseeded on system resumption [ 288.081459][ T8379] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.718'. [ 288.850687][ T8390] virtio-fs: tag <(null)> not found [ 288.940174][ T8390] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 288.943027][ T8390] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 288.975479][ T8390] vhci_hcd vhci_hcd.0: Device attached [ 289.038493][ T8392] vhci_hcd: connection closed [ 289.045192][ T11] vhci_hcd: stop threads [ 289.054474][ T11] vhci_hcd: release socket [ 289.056448][ T11] vhci_hcd: disconnect device [ 289.464839][ T39] audit: type=1400 audit(2000000107.970:133): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=8398 comm="syz.3.722" [ 290.109990][ T8404] netlink: 64 bytes leftover after parsing attributes in process `syz.2.723'. [ 290.854052][ T8412] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 291.272779][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.728'. [ 291.802688][ T8422] netlink: 76 bytes leftover after parsing attributes in process `syz.0.730'. [ 291.815693][ T8422] : entered promiscuous mode [ 292.150971][ T8431] binder: BINDER_SET_CONTEXT_MGR already set [ 292.154004][ T8431] binder: 8430:8431 ioctl 4018620d 200001c0 returned -16 [ 292.272113][ T8434] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 292.565703][ T8436] netlink: 'syz.3.734': attribute type 11 has an invalid length. [ 292.580114][ T8436] netlink: 'syz.3.734': attribute type 11 has an invalid length. [ 292.584274][ T8436] debugfs: Directory 'netdev:' with parent 'phy6' already present! [ 292.743697][ T8439] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 292.993481][ T8443] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 293.225851][ T8447] xt_CONNSECMARK: invalid mode: 0 [ 293.905437][ T39] audit: type=1326 audit(2000000112.410:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8456 comm="syz.3.741" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7eff579 code=0x7ffc0000 [ 293.919962][ T39] audit: type=1326 audit(2000000112.410:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8456 comm="syz.3.741" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7eff579 code=0x7ffc0000 [ 293.937698][ T39] audit: type=1326 audit(2000000112.450:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8456 comm="syz.3.741" exe="/syz-executor" sig=0 arch=40000003 syscall=355 compat=1 ip=0xf7eff579 code=0x7ffc0000 [ 293.948232][ T39] audit: type=1326 audit(2000000112.450:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8456 comm="syz.3.741" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7eff579 code=0x7ffc0000 [ 293.962662][ T39] audit: type=1326 audit(2000000112.450:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8456 comm="syz.3.741" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7eff579 code=0x7ffc0000 [ 293.981575][ T39] audit: type=1326 audit(2000000112.460:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8456 comm="syz.3.741" exe="/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf7eff579 code=0x7ffc0000 [ 293.982169][ T8457] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 293.999728][ T39] audit: type=1326 audit(2000000112.460:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8456 comm="syz.3.741" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7eff579 code=0x7ffc0000 [ 294.025484][ T39] audit: type=1326 audit(2000000112.460:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8456 comm="syz.3.741" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7eff579 code=0x7ffc0000 [ 294.038314][ T39] audit: type=1326 audit(2000000112.460:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8456 comm="syz.3.741" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7eff579 code=0x7ffc0000 [ 294.052854][ T39] audit: type=1326 audit(2000000112.470:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8456 comm="syz.3.741" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7eff579 code=0x7ffc0000 [ 294.985222][ T8467] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 295.989548][ T8481] tipc: Started in network mode [ 295.999894][ T8481] tipc: Node identity 7f000001, cluster identity 4711 [ 296.005914][ T8481] tipc: Enabled bearer , priority 10 [ 296.294897][ T8493] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 296.500160][ T5416] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 296.682980][ T5416] usb 5-1: Using ep0 maxpacket: 8 [ 296.687385][ T5416] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 296.692795][ T5416] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 296.697202][ T5416] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 296.709609][ T5416] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 296.726883][ T5416] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 296.732322][ T5416] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.956691][ T5416] usb 5-1: GET_CAPABILITIES returned 0 [ 296.959226][ T5416] usbtmc 5-1:16.0: can't read capabilities [ 296.996848][ T8501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.754'. [ 297.135474][ T5416] tipc: Node number set to 2130706433 [ 297.166451][ T5394] usb 5-1: USB disconnect, device number 12 [ 299.169120][ T8521] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 300.470979][ T5416] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 300.650053][ T5416] usb 5-1: Using ep0 maxpacket: 8 [ 300.665996][ T5416] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 300.671510][ T5416] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 300.675486][ T5416] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 300.679314][ T5416] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 300.710199][ T5416] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 300.714174][ T5416] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.011094][ T5416] usb 5-1: GET_CAPABILITIES returned 0 [ 301.013279][ T5416] usbtmc 5-1:16.0: can't read capabilities [ 301.209279][ T25] usb 5-1: USB disconnect, device number 13 [ 302.017628][ T8558] random: crng reseeded on system resumption [ 302.509933][ T5394] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 302.694919][ T8569] netlink: 'syz.1.773': attribute type 10 has an invalid length. [ 302.697689][ T8569] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 302.711084][ T5394] usb 5-1: Using ep0 maxpacket: 8 [ 302.715680][ T5394] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 302.721225][ T5394] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 302.721676][ T8569] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 302.725609][ T5394] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 302.725634][ T5394] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 302.725670][ T5394] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 302.750390][ T5394] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.757583][ T8569] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 302.910553][ T1294] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 302.985257][ T5394] usb 5-1: GET_CAPABILITIES returned 0 [ 302.987743][ T5394] usbtmc 5-1:16.0: can't read capabilities [ 303.112662][ T1294] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 303.117085][ T1294] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 303.130042][ T1294] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 303.134007][ T1294] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.148237][ T8565] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 303.162508][ T1294] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 303.671719][ T1294] usb 7-1: USB disconnect, device number 10 [ 304.513118][ T8592] ISOFS: Unable to identify CD-ROM format. [ 304.997541][ T8600] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 305.125348][ T5415] usb 5-1: USB disconnect, device number 14 [ 305.204512][ T8602] mkiss: ax0: crc mode is auto. [ 306.744189][ T8626] QAT: failed to copy from user. [ 307.513436][ T8634] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 308.279867][ T39] kauditd_printk_skb: 45 callbacks suppressed [ 308.279885][ T39] audit: type=1400 audit(2000000126.760:189): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=8636 comm="syz.0.798" [ 309.179918][ T5415] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 309.359987][ T5415] usb 6-1: Using ep0 maxpacket: 8 [ 309.364394][ T5415] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 309.368518][ T5415] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 309.378627][ T5415] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 309.383210][ T5415] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 309.388235][ T5415] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 309.399428][ T5415] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.626291][ T5415] usb 6-1: GET_CAPABILITIES returned 0 [ 309.630919][ T5415] usbtmc 6-1:16.0: can't read capabilities [ 310.250456][ T8670] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 310.557572][ T8674] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 311.213935][ T8677] netlink: 'syz.3.802': attribute type 11 has an invalid length. [ 311.227458][ T8677] netlink: 'syz.3.802': attribute type 11 has an invalid length. [ 311.233407][ T8677] debugfs: Directory 'netdev:' with parent 'phy6' already present! [ 311.555361][ T8682] Context (ID=0x10) not attached to queue pair (handle=0x2:0x0) [ 311.768150][ T1166] usb 6-1: USB disconnect, device number 3 [ 311.972495][ T39] audit: type=1400 audit(2000000130.460:190): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=8683 comm="syz.1.805" [ 312.588837][ T8701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.809'. [ 312.636037][ T8702] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 312.666788][ T8705] netlink: 'syz.1.811': attribute type 11 has an invalid length. [ 312.678154][ T8705] netlink: 'syz.1.811': attribute type 11 has an invalid length. [ 312.710628][ T8705] debugfs: Directory 'netdev:' with parent 'phy13' already present! [ 312.931364][ T8708] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 315.163798][ T8723] netlink: 16 bytes leftover after parsing attributes in process `syz.1.818'. [ 315.169353][ T8723] netlink: 24 bytes leftover after parsing attributes in process `syz.1.818'. [ 315.400104][ T8729] netlink: 'syz.3.817': attribute type 1 has an invalid length. [ 315.403462][ T8729] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 315.406262][ T8729] IPv6: NLM_F_CREATE should be set when creating new route [ 316.079934][ T39] audit: type=1326 audit(2000000134.580:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8736 comm="syz.0.820" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 316.086224][ T39] audit: type=1326 audit(2000000134.590:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8736 comm="syz.0.820" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 316.088937][ T39] audit: type=1326 audit(2000000134.590:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8736 comm="syz.0.820" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 316.092024][ T39] audit: type=1326 audit(2000000134.600:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8736 comm="syz.0.820" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 316.092281][ T39] audit: type=1326 audit(2000000134.600:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8736 comm="syz.0.820" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 316.093479][ T39] audit: type=1326 audit(2000000134.600:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8736 comm="syz.0.820" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 316.094044][ T39] audit: type=1326 audit(2000000134.600:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8736 comm="syz.0.820" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 316.094374][ T39] audit: type=1326 audit(2000000134.600:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8736 comm="syz.0.820" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 316.095904][ T39] audit: type=1326 audit(2000000134.600:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8736 comm="syz.0.820" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 316.096592][ T39] audit: type=1326 audit(2000000134.600:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8736 comm="syz.0.820" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 316.580353][ T8741] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 317.019945][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x1 [ 317.023340][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 317.026822][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 317.030418][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 317.033168][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 317.036737][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 317.040126][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x4 [ 317.043320][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 317.047004][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x2 [ 317.050528][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 317.053592][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 317.057075][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 317.060854][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 317.064063][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x4 [ 317.099132][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 317.102809][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 317.110394][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 317.113964][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 317.118233][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 317.125931][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 317.130182][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 317.133642][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 317.137011][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 317.148060][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 317.155083][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 317.160344][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 317.163787][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 317.177205][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 317.183813][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 317.209101][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 317.222081][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 317.225878][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 317.239448][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 317.247440][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 317.254872][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 317.265028][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 317.268593][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 317.276677][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 317.285854][ T56] hid-generic 0000:0000:0000.0008: hidraw1: HID v0.00 Device [syz0] on syz0 [ 317.572465][ T8748] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 318.086584][ T8753] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 318.180669][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.825'. [ 318.196888][ T8755] netlink: 5 bytes leftover after parsing attributes in process `syz.0.825'. [ 318.207107][ T8755] 0XD: renamed from gretap0 (while UP) [ 318.212487][ T8755] 0XD: entered allmulticast mode [ 318.215387][ T8755] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 318.718419][ T8758] netlink: 'syz.2.827': attribute type 11 has an invalid length. [ 318.727525][ T8758] netlink: 'syz.2.827': attribute type 11 has an invalid length. [ 318.731934][ T8758] debugfs: Directory 'netdev:' with parent 'phy3' already present! [ 319.438379][ T11] Bluetooth: hci2: Frame reassembly failed (-84) [ 320.109922][ T8774] random: crng reseeded on system resumption [ 320.297543][ T8774] netlink: 12 bytes leftover after parsing attributes in process `syz.2.831'. [ 321.322246][ T8788] trusted_key: encrypted_key: keylen parameter is missing [ 321.389576][ T39] kauditd_printk_skb: 16 callbacks suppressed [ 321.389591][ T39] audit: type=1326 audit(2000000139.890:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8787 comm="syz.0.835" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x0 [ 321.480513][ T5363] Bluetooth: hci2: command 0x1003 tx timeout [ 321.484499][ T66] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 321.753687][ T8795] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 322.246611][ T39] audit: type=1400 audit(2000000140.750:218): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=8800 comm="syz.2.838" [ 322.276924][ T8804] random: crng reseeded on system resumption [ 322.346074][ T8804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.840'. [ 322.491125][ T39] audit: type=1804 audit(2000000140.990:219): pid=8801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.839" name="/newroot/193/file0/bus/bus/bus" dev="9p" ino=36701630 res=1 errno=0 [ 322.700701][ T8808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.891034][ T58] IPVS: starting estimator thread 0... [ 322.981732][ T8817] IPVS: using max 21 ests per chain, 50400 per kthread [ 324.189494][ T8830] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 324.212558][ T39] audit: type=1804 audit(2000000142.720:220): pid=8831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.844" name="/newroot/149/bus/file0" dev="overlay" ino=889 res=1 errno=0 [ 324.231550][ T39] audit: type=1800 audit(2000000142.720:221): pid=8831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.844" name="file0" dev="overlay" ino=889 res=0 errno=0 [ 324.253705][ T8831] syz.0.844 (8831): drop_caches: 2 [ 324.256712][ T8831] syz.0.844 (8831): drop_caches: 2 [ 324.475712][ T8834] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 324.549412][ T56] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 324.739954][ T56] usb 7-1: Using ep0 maxpacket: 8 [ 324.745198][ T56] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 324.750208][ T56] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 324.754437][ T56] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 324.758485][ T56] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 324.791559][ T56] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 324.811788][ T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.072071][ T56] usb 7-1: GET_CAPABILITIES returned 0 [ 325.074487][ T56] usbtmc 7-1:16.0: can't read capabilities [ 325.131173][ T8839] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 325.278919][ T56] usb 7-1: USB disconnect, device number 11 [ 325.588169][ T8846] random: crng reseeded on system resumption [ 325.795969][ T8846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.850'. [ 327.396598][ T8860] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 328.187916][ T8869] netlink: 'syz.2.856': attribute type 11 has an invalid length. [ 328.210739][ T8869] netlink: 'syz.2.856': attribute type 11 has an invalid length. [ 328.214399][ T8869] debugfs: Directory 'netdev:' with parent 'phy3' already present! [ 328.452359][ T8876] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 329.479326][ T8886] netlink: 3 bytes leftover after parsing attributes in process `syz.0.860'. [ 329.562245][ T8888] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 330.035452][ T8886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 330.192786][ T8894] netlink: 28 bytes leftover after parsing attributes in process `syz.1.862'. [ 330.430197][ T5394] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 330.561495][ T39] audit: type=1400 audit(2000000149.070:222): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=8895 comm="syz.2.863" [ 330.661668][ T5394] usb 5-1: Using ep0 maxpacket: 8 [ 330.672524][ T5394] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 330.677999][ T5394] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 330.682322][ T5394] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 330.687073][ T5394] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 330.693971][ T5394] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 330.701544][ T5394] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 330.706907][ T5394] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 330.728389][ T5394] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 330.734719][ T5394] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 330.738986][ T5394] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 330.744800][ T5394] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 330.750542][ T5394] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 330.756037][ T5394] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 330.761895][ T5394] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 330.775997][ T5394] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 330.787670][ T5394] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 330.791544][ T5394] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 330.797701][ T5394] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 330.804371][ T5394] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 330.810538][ T5394] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 330.816607][ T5394] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 330.846316][ T5394] usb 5-1: string descriptor 0 read error: -22 [ 330.886599][ T5394] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 330.900134][ T5394] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.967966][ T5394] adutux 5-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 331.023360][ T8892] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 331.619180][ T8906] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 331.750351][ T1294] usb 5-1: USB disconnect, device number 15 [ 331.989614][ T544] Bluetooth: hci2: Frame reassembly failed (-84) [ 334.020015][ T66] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 334.353921][ T8936] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 334.614891][ T8930] block nbd1: shutting down sockets [ 335.739644][ T8955] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 336.508052][ T8959] Bluetooth: hci2: Frame reassembly failed (-84) [ 336.513864][ T11] Bluetooth: hci2: Frame reassembly failed (-84) [ 336.520079][ T8959] Bluetooth: hci2: Frame reassembly failed (-84) [ 336.836738][ T8968] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 337.229940][ T1294] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 337.409954][ T1294] usb 5-1: Using ep0 maxpacket: 8 [ 337.417068][ T1294] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 337.425790][ T1294] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 337.435910][ T1294] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 337.446023][ T1294] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 337.456159][ T1294] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 337.460108][ T1294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.684618][ T1294] usb 5-1: usb_control_msg returned -71 [ 337.687006][ T1294] usbtmc 5-1:16.0: can't read capabilities [ 337.724025][ T1294] usb 5-1: USB disconnect, device number 16 [ 337.921735][ T8983] netlink: 16 bytes leftover after parsing attributes in process `syz.3.885'. [ 338.057445][ T8985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.886'. [ 338.579997][ T5363] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 338.697472][ T8997] random: crng reseeded on system resumption [ 338.778081][ T8998] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 339.315314][ T9005] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 339.362335][ T9006] netlink: 'syz.1.891': attribute type 1 has an invalid length. [ 339.372746][ T9006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 339.375624][ T9006] IPv6: NLM_F_CREATE should be set when creating new route [ 339.728061][ T9009] netlink: 3 bytes leftover after parsing attributes in process `syz.2.893'. [ 339.810340][ T9009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.120224][ T1166] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 340.299898][ T1166] usb 7-1: Using ep0 maxpacket: 8 [ 340.304138][ T1166] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 340.307663][ T1166] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 340.311356][ T1166] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 340.315085][ T1166] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 340.319726][ T1166] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 340.329874][ T1166] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 340.334646][ T1166] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 340.361896][ T1166] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 340.365758][ T1166] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 340.368647][ T1166] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 340.389894][ T1166] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 340.395011][ T1166] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 340.399716][ T1166] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 340.404682][ T1166] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 340.413633][ T1166] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 340.417540][ T1166] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 340.420642][ T1166] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 340.424964][ T1166] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 340.430576][ T1166] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 340.435468][ T1166] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 340.439730][ T1166] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 340.462075][ T1166] usb 7-1: string descriptor 0 read error: -22 [ 340.464958][ T1166] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 340.468943][ T1166] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.491720][ T1166] adutux 7-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 342.541694][ T1294] usb 7-1: USB disconnect, device number 12 [ 342.669794][ T9034] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 342.863611][ T9036] netlink: 'syz.3.901': attribute type 11 has an invalid length. [ 342.871058][ T9036] netlink: 'syz.3.901': attribute type 11 has an invalid length. [ 342.874688][ T9036] debugfs: Directory 'netdev:' with parent 'phy6' already present! [ 343.047645][ T9038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.095629][ T9038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.175377][ T9044] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 343.209482][ T9044] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 343.871670][ T9049] netlink: 'syz.2.906': attribute type 11 has an invalid length. [ 343.879300][ T9049] netlink: 'syz.2.906': attribute type 11 has an invalid length. [ 343.898898][ T9049] debugfs: Directory 'netdev:' with parent 'phy3' already present! [ 344.083401][ T9055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.908'. [ 344.093322][ T9055] netlink: 'syz.3.908': attribute type 3 has an invalid length. [ 344.096842][ T9055] netlink: 196520 bytes leftover after parsing attributes in process `syz.3.908'. [ 344.135264][ T9057] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 344.174858][ T9058] usb usb8: usbfs: process 9058 (syz.3.908) did not claim interface 0 before use [ 345.000379][ T9067] netlink: 'syz.3.911': attribute type 11 has an invalid length. [ 345.009470][ T9067] netlink: 'syz.3.911': attribute type 11 has an invalid length. [ 345.013878][ T9067] debugfs: Directory 'netdev:' with parent 'phy6' already present! [ 345.179293][ T9073] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 345.302567][ T9076] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 345.617977][ T9078] block nbd2: shutting down sockets [ 346.446710][ T9089] netlink: 'syz.0.917': attribute type 11 has an invalid length. [ 346.490460][ T9089] netlink: 'syz.0.917': attribute type 11 has an invalid length. [ 346.502171][ T9089] debugfs: Directory 'netdev:' with parent 'phy11' already present! [ 347.314568][ T9097] netlink: 'syz.1.919': attribute type 2 has an invalid length. [ 347.317644][ T9097] netlink: 244 bytes leftover after parsing attributes in process `syz.1.919'. [ 348.185404][ T9114] netlink: 'syz.2.925': attribute type 21 has an invalid length. [ 348.726304][ T9124] netlink: 'syz.3.927': attribute type 11 has an invalid length. [ 348.745883][ T9124] netlink: 'syz.3.927': attribute type 11 has an invalid length. [ 348.753148][ T9124] debugfs: Directory 'netdev:' with parent 'phy6' already present! [ 350.109986][ T5394] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 350.166038][ T9142] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 350.310006][ T5394] usb 7-1: Using ep0 maxpacket: 8 [ 350.323645][ T5394] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 350.327959][ T5394] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 350.332878][ T5394] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 350.336628][ T5394] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 350.346134][ T5394] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 350.350605][ T5394] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.605281][ T5394] usb 7-1: GET_CAPABILITIES returned 0 [ 350.608138][ T5394] usbtmc 7-1:16.0: can't read capabilities [ 350.636514][ T9146] random: crng reseeded on system resumption [ 350.805188][ T56] usb 7-1: USB disconnect, device number 13 [ 351.590550][ T1294] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 351.781653][ T1294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.785753][ T1294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.810080][ T1294] usb 5-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 351.814519][ T1294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.834478][ T1294] usb 5-1: config 0 descriptor?? [ 352.230138][ T9171] 9pnet_fd: Insufficient options for proto=fd [ 352.432937][ T1294] itetech 0003:258A:6A88.0009: unknown main item tag 0x0 [ 352.446412][ T1294] itetech 0003:258A:6A88.0009: hidraw1: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.0-1/input0 [ 352.695580][ T9180] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 353.662558][ T9196] random: crng reseeded on system resumption [ 353.686321][ T9198] netlink: 'syz.3.944': attribute type 11 has an invalid length. [ 353.692398][ T9198] netlink: 'syz.3.944': attribute type 11 has an invalid length. [ 353.695884][ T9198] debugfs: Directory 'netdev:' with parent 'phy6' already present! [ 354.755437][ T9217] netlink: 'syz.1.951': attribute type 11 has an invalid length. [ 354.763793][ T9217] netlink: 'syz.1.951': attribute type 11 has an invalid length. [ 354.767240][ T9217] debugfs: Directory 'netdev:' with parent 'phy13' already present! [ 355.129419][ T5394] usb 5-1: USB disconnect, device number 17 [ 355.149628][ T9227] random: crng reseeded on system resumption [ 355.259239][ T9227] netlink: 20 bytes leftover after parsing attributes in process `syz.2.956'. [ 355.507675][ T9232] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 356.026304][ T9241] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 356.994067][ T544] Bluetooth: hci2: Frame reassembly failed (-84) [ 357.300177][ T9264] random: crng reseeded on system resumption [ 357.374474][ T9264] netlink: 20 bytes leftover after parsing attributes in process `syz.2.966'. [ 357.951515][ T9276] tipc: Enabled bearer , priority 0 [ 359.062722][ T66] Bluetooth: hci2: command 0x1003 tx timeout [ 359.071974][ T5363] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 359.081171][ T58] tipc: Node number set to 1147349727 [ 360.306500][ T9306] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 361.076000][ T9313] netlink: 5 bytes leftover after parsing attributes in process `syz.0.979'. [ 361.080089][ T9313] 1XD: renamed from 30XD (while UP) [ 361.088387][ T9313] A link change request failed with some changes committed already. Interface 31XD may have been left with an inconsistent configuration, please check. [ 361.253889][ T9316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.979'. [ 362.334293][ T9325] netlink: 'syz.0.981': attribute type 21 has an invalid length. [ 362.529782][ T9329] random: crng reseeded on system resumption [ 362.596123][ T9329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.983'. [ 362.907176][ T9335] netlink: 'syz.3.982': attribute type 21 has an invalid length. [ 363.296351][ T9346] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 365.009411][ C2] vxcan0: j1939_tp_rxtimer: 0xffff888012a72c00: rx timeout, send abort [ 365.515113][ C2] vxcan0: j1939_tp_rxtimer: 0xffff888012a72c00: abort rx timeout. Force session deactivation [ 365.638631][ T9364] random: crng reseeded on system resumption [ 365.681265][ T9364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.993'. [ 366.450247][ T9378] random: crng reseeded on system resumption [ 366.931108][ T9387] 9pnet_fd: Insufficient options for proto=fd [ 368.128756][ T9395] random: crng reseeded on system resumption [ 368.246064][ T9395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1002'. [ 368.820153][ T5393] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 369.646747][ T9413] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 370.885481][ T9426] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 371.235649][ T9431] random: crng reseeded on system resumption [ 371.334469][ T9429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1011'. [ 371.484412][ T9436] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1014'. [ 371.850291][ T5394] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 372.041430][ T5394] usb 6-1: string descriptor 0 read error: -22 [ 372.044602][ T5394] usb 6-1: New USB device found, idVendor=30c9, idProduct=0093, bcdDevice=18.c6 [ 372.050228][ T5394] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.056013][ T5394] usb 6-1: config 0 descriptor?? [ 372.063303][ T5394] usb 6-1: Found UVC 0.00 device (30c9:0093) [ 372.073262][ T5394] usb 6-1: No valid video chain found. [ 372.106146][ T9453] tipc: Enabled bearer , priority 0 [ 372.269873][ T9459] input: syz0 as /devices/virtual/input/input61 [ 372.559217][ T9436] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 372.764628][ T5394] usb 6-1: USB disconnect, device number 4 [ 373.396953][ T9469] random: crng reseeded on system resumption [ 373.459104][ T9469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1023'. [ 373.832815][ T9474] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 374.613009][ T9480] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1025'. [ 374.617169][ T9480] 0XD: renamed from gretap0 (while UP) [ 374.638363][ T9480] 0XD: entered allmulticast mode [ 374.641297][ T9480] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 374.678354][ T9478] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1033'. [ 374.812493][ T9488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1025'. [ 374.919178][ T9491] capability: warning: `syz.1.1027' uses 32-bit capabilities (legacy support in use) [ 374.971545][ T9490] can0: slcan on ttyprintk. [ 375.340225][ T5393] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 375.533805][ T5393] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 375.547544][ T5393] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.569093][ T5393] usb 7-1: Product: syz [ 375.582543][ T5393] usb 7-1: Manufacturer: syz [ 375.594660][ T5393] usb 7-1: SerialNumber: syz [ 375.622158][ T5393] usb 7-1: config 0 descriptor?? [ 375.876030][ T5393] usb 7-1: USB disconnect, device number 14 [ 376.373729][ T9489] can0 (unregistered): slcan off ttyprintk. [ 377.082533][ T9526] random: crng reseeded on system resumption [ 377.132208][ T9526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1032'. [ 377.354315][ T9533] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 378.653861][ T9552] overlayfs: missing 'lowerdir' [ 378.678207][ T9552] overlayfs: missing 'lowerdir' [ 381.506250][ T9583] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 381.744877][ T9594] syzkaller1: entered promiscuous mode [ 381.747745][ T9594] syzkaller1: entered allmulticast mode [ 381.769034][ T9594] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1052'. [ 381.830164][ T30] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 382.752304][ T9602] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 382.919777][ T9604] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 383.069929][ T58] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 383.280029][ T58] usb 7-1: too many configurations: 12, using maximum allowed: 8 [ 383.317109][ T58] usb 7-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 383.320816][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.327031][ T58] usb 7-1: config 0 descriptor?? [ 383.652170][ T9607] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(9) [ 383.655375][ T9607] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 383.660188][ T9607] vhci_hcd vhci_hcd.0: Device attached [ 383.872296][ T5415] vhci_hcd: vhci_device speed not set [ 383.950087][ T5415] usb 17-2: new full-speed USB device number 2 using vhci_hcd [ 384.717984][ T9615] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 384.790885][ T9616] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1056'. [ 385.284091][ T9616] veth1_macvtap: entered allmulticast mode [ 385.345943][ T9608] vhci_hcd: connection reset by peer [ 385.353036][ T58] usb 7-1: string descriptor 0 read error: -71 [ 385.362827][ T548] vhci_hcd: stop threads [ 385.363902][ T58] usb 7-1: USB disconnect, device number 15 [ 385.364797][ T548] vhci_hcd: release socket [ 385.380373][ T548] vhci_hcd: disconnect device [ 385.801176][ T9622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1057'. [ 385.820109][ T9622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1057'. [ 385.918174][ T9625] tipc: Enabling of bearer rejected, failed to enable media [ 387.145323][ T9639] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 388.079973][ T5393] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 388.280702][ T5393] usb 5-1: Using ep0 maxpacket: 8 [ 388.285288][ T5393] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 388.289443][ T5393] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 388.297340][ T5393] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 388.336593][ T5393] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 388.351761][ T5393] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 388.362521][ T9655] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 388.371195][ T5393] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.634031][ T5393] usb 5-1: GET_CAPABILITIES returned 0 [ 388.636902][ T5393] usbtmc 5-1:16.0: can't read capabilities [ 388.835948][ T5393] usb 5-1: USB disconnect, device number 19 [ 389.070834][ T5415] vhci_hcd: vhci_device speed not set [ 389.111851][ T9659] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 389.327063][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1069'. [ 390.123431][ T9676] random: crng reseeded on system resumption [ 390.175183][ T9678] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1072'. [ 390.186914][ T9678] fuse: Bad value for 'fd' [ 390.308962][ T9676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1073'. [ 391.296484][ T9689] syzkaller1: entered promiscuous mode [ 391.299092][ T9689] syzkaller1: entered allmulticast mode [ 391.335382][ T9689] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1076'. [ 391.391937][ T9681] [U]  [ 391.454936][ T9693] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 392.838240][ T9713] overlayfs: overlapping lowerdir path [ 393.291913][ T9712] netlink: 'syz.1.1081': attribute type 3 has an invalid length. [ 393.295094][ T9712] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1081'. [ 395.131083][ T9722] random: crng reseeded on system resumption [ 395.178956][ T9722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1082'. [ 395.551056][ T9732] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 395.983068][ T39] audit: type=1326 audit(2000000214.490:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.0.1087" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 396.020527][ T39] audit: type=1326 audit(2000000214.500:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.0.1087" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 396.041064][ T39] audit: type=1326 audit(2000000214.540:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.0.1087" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 396.050200][ T39] audit: type=1326 audit(2000000214.540:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.0.1087" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 396.059211][ T39] audit: type=1326 audit(2000000214.540:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.0.1087" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 396.068603][ T39] audit: type=1326 audit(2000000214.550:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.0.1087" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 396.078026][ T39] audit: type=1326 audit(2000000214.550:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.0.1087" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 396.091434][ T39] audit: type=1326 audit(2000000214.570:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.0.1087" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 396.101577][ T39] audit: type=1326 audit(2000000214.580:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.0.1087" exe="/syz-executor" sig=0 arch=40000003 syscall=333 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 396.111251][ T39] audit: type=1326 audit(2000000214.580:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.0.1087" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 396.761285][ T9742] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 396.764297][ T9742] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 396.779232][ T9742] vhci_hcd vhci_hcd.0: Device attached [ 396.779397][ T9747] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 396.785060][ T9747] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 396.799074][ T9747] vhci_hcd vhci_hcd.0: Device attached [ 396.814110][ T9748] usbip_core: unknown command [ 396.816118][ T9748] vhci_hcd: unknown pdu 0 [ 396.818197][ T9748] usbip_core: unknown command [ 396.852350][ T544] vhci_hcd: stop threads [ 396.854815][ T544] vhci_hcd: release socket [ 396.857027][ T544] vhci_hcd: disconnect device [ 397.003937][ T9751] input: syz0 as /devices/virtual/input/input62 [ 397.038733][ T9754] openvswitch: netlink: Message has 16 unknown bytes. [ 397.109949][ T5394] usb 16-1: SetAddress Request (6) to port 0 [ 397.112729][ T5394] usb 16-1: new SuperSpeed USB device number 6 using vhci_hcd [ 397.405744][ T9744] vhci_hcd: connection reset by peer [ 397.408380][ T544] vhci_hcd: stop threads [ 397.410615][ T544] vhci_hcd: release socket [ 397.419590][ T544] vhci_hcd: disconnect device [ 398.183680][ T9758] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1091'. [ 398.416055][ T9767] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 398.770126][ T1166] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 398.969899][ T1166] usb 6-1: Using ep0 maxpacket: 8 [ 398.981816][ T1166] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 398.987407][ T1166] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 398.993148][ T1166] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 398.999007][ T1166] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 399.003693][ T1166] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 399.013055][ T1166] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.242731][ T1166] usb 6-1: usb_control_msg returned -71 [ 399.245036][ T1166] usbtmc 6-1:16.0: can't read capabilities [ 399.269032][ T1166] usb 6-1: USB disconnect, device number 6 [ 399.512177][ T9778] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 399.815576][ T9784] : entered promiscuous mode [ 400.863844][ T9797] Bluetooth: MGMT ver 1.23 [ 401.763828][ T9810] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 401.823502][ T9809] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 402.183472][ T5394] usb 16-1: device descriptor read/8, error -110 [ 402.284906][ T5412] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 402.492680][ T5412] usb 6-1: too many configurations: 12, using maximum allowed: 8 [ 402.531713][ T5412] usb 6-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 402.534913][ T5412] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.612518][ T5394] usb usb16-port1: attempt power cycle [ 402.644679][ T5412] usb 6-1: config 0 descriptor?? [ 403.061849][ T39] kauditd_printk_skb: 52 callbacks suppressed [ 403.061863][ T39] audit: type=1804 audit(2000000221.570:285): pid=9817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1107" name="/newroot/261/bus/file0" dev="overlay" ino=1643 res=1 errno=0 [ 403.075529][ T39] audit: type=1800 audit(2000000221.580:286): pid=9817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1107" name="file0" dev="overlay" ino=1643 res=0 errno=0 [ 403.096589][ T9820] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(9) [ 403.099749][ T9820] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 403.110095][ T9820] vhci_hcd vhci_hcd.0: Device attached [ 403.126200][ T9817] syz.3.1107 (9817): drop_caches: 2 [ 403.133251][ T9823] random: crng reseeded on system resumption [ 403.141877][ T9817] syz.3.1107 (9817): drop_caches: 2 [ 403.332513][ T5394] usb usb16-port1: unable to enumerate USB device [ 403.420654][ T5415] vhci_hcd: vhci_device speed not set [ 403.489986][ T5415] usb 15-2: new full-speed USB device number 2 using vhci_hcd [ 404.511959][ T9828] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 404.593035][ T9831] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 405.564375][ T9821] vhci_hcd: connection reset by peer [ 405.568812][ T544] vhci_hcd: stop threads [ 405.569938][ T5412] usb 6-1: string descriptor 0 read error: -71 [ 405.573922][ T544] vhci_hcd: release socket [ 405.575641][ T544] vhci_hcd: disconnect device [ 405.583894][ T5412] usb 6-1: USB disconnect, device number 7 [ 405.804511][ T9837] dns_resolver: Unsupported server list version (0) [ 406.199900][ T5412] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 406.409907][ T5412] usb 6-1: Using ep0 maxpacket: 8 [ 406.435461][ T5412] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 406.439657][ T5412] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 406.470143][ T5412] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 406.476506][ T5412] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 406.510062][ T5412] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 406.513883][ T5412] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.681120][ T9852] raw_sendmsg: syz.2.1115 forgot to set AF_INET. Fix it! [ 406.749238][ T5412] usb 6-1: GET_CAPABILITIES returned 0 [ 406.751726][ T5412] usbtmc 6-1:16.0: can't read capabilities [ 406.949971][ T9634] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 406.951100][ T1166] usb 6-1: USB disconnect, device number 8 [ 407.149994][ T9634] usb 7-1: Using ep0 maxpacket: 8 [ 407.175304][ T9634] usb 7-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 407.179891][ T9634] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.183171][ T9634] usb 7-1: Product: syz [ 407.184956][ T9634] usb 7-1: Manufacturer: syz [ 407.187237][ T9634] usb 7-1: SerialNumber: syz [ 407.193429][ T9634] usb 7-1: config 0 descriptor?? [ 407.198425][ T9634] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 407.772802][ T9634] pwc: Failed to set LED on/off time (-71) [ 407.776153][ T9634] pwc: send_video_command error -71 [ 407.778455][ T9634] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 407.791601][ T9634] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 407.818626][ T9634] usb 7-1: USB disconnect, device number 16 [ 408.026527][ T9870] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 408.411351][ T9873] mkiss: ax0: crc mode is auto. [ 408.556269][ T9873] netlink: 'syz.3.1119': attribute type 4 has an invalid length. [ 408.559966][ T9873] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1119'. [ 408.563854][ T9876] syzkaller1: left promiscuous mode [ 408.565958][ T9876] syzkaller1: left allmulticast mode [ 408.580252][ T5415] vhci_hcd: vhci_device speed not set [ 408.706699][ T9876] netlink: 'syz.2.1120': attribute type 3 has an invalid length. [ 408.710833][ T9876] netlink: 'syz.2.1120': attribute type 3 has an invalid length. [ 408.715097][ T9876] netlink: 'syz.2.1120': attribute type 5 has an invalid length. [ 409.075453][ T9882] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 409.111959][ T9884] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 413.271649][ T9917] input: syz0 as /devices/virtual/input/input63 [ 413.401996][ T9920] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 413.652579][ T9924] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 414.902364][ T39] audit: type=1800 audit(2000000233.410:287): pid=9933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1134" name="bus" dev="overlay" ino=1734 res=0 errno=0 [ 414.929684][ T9936] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 415.215646][ T9937] tipc: Enabling of bearer rejected, failed to enable media [ 416.310160][ T9634] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 417.057199][ T9955] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 418.231477][ T9965] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1144'. [ 418.240421][ T9965] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1144'. [ 419.077262][ T9976] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 420.583715][ T9997] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 420.662551][T10000] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1153'. [ 420.671373][T10000] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1153'. [ 420.709954][ T56] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 420.857172][T10003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1154'. [ 420.909989][ T56] usb 5-1: Using ep0 maxpacket: 8 [ 420.914391][ T56] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 420.921161][ T56] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 420.959909][ T56] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 420.967167][ T56] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 420.979893][ T56] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 420.983888][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.225999][ T56] usb 5-1: GET_CAPABILITIES returned 0 [ 421.229063][ T56] usbtmc 5-1:16.0: can't read capabilities [ 421.413811][T10008] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 421.434176][ T56] usb 5-1: USB disconnect, device number 21 [ 421.553900][T10010] program syz.2.1157 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 421.682808][T10010] netlink: 'syz.2.1157': attribute type 2 has an invalid length. [ 421.688346][ T39] audit: type=1326 audit(2000000240.190:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10009 comm="syz.2.1157" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x0 [ 422.629051][T10025] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 423.875482][T10043] libceph: resolve '. [ 423.875482][T10043] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 423.875482][T10043] ' (ret=-3): failed [ 423.958666][T10048] input: syz0 as /devices/virtual/input/input64 [ 424.994133][T10055] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 425.052998][T10056] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 425.059519][T10056] overlayfs: failed to set xattr on upper [ 425.062193][T10056] overlayfs: ...falling back to redirect_dir=nofollow. [ 425.065581][T10056] overlayfs: ...falling back to index=off. [ 425.067942][T10056] overlayfs: ...falling back to uuid=null. [ 426.150686][T10064] netlink: 45 bytes leftover after parsing attributes in process `syz.0.1170'. [ 426.351163][T10067] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 426.520163][ T1166] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 426.709927][ T1166] usb 5-1: device descriptor read/64, error -71 [ 427.003340][ T1166] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 427.164573][ T1166] usb 5-1: device descriptor read/64, error -71 [ 427.285315][ T1166] usb usb5-port1: attempt power cycle [ 427.725725][ T1166] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 427.736416][T10079] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 427.787562][ T1166] usb 5-1: device descriptor read/8, error -71 [ 428.097412][ T1166] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 428.163570][ T1166] usb 5-1: device descriptor read/8, error -71 [ 428.322664][ T1166] usb usb5-port1: unable to enumerate USB device [ 428.814299][T10095] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 429.276574][ T39] audit: type=1326 audit(2000000247.780:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10098 comm="syz.0.1180" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa0579 code=0x0 [ 429.450824][T10099] ALSA: seq fatal error: cannot create timer (-22) [ 429.950196][T10111] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1181'. [ 429.961471][T10111] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1181'. [ 430.099084][T10115] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 431.760720][ T39] audit: type=1326 audit(2000000250.230:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10125 comm="syz.1.1186" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x0 [ 432.539592][T10139] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 432.542789][T10139] overlayfs: failed to set xattr on upper [ 432.545423][T10139] overlayfs: ...falling back to redirect_dir=nofollow. [ 432.560015][T10139] overlayfs: ...falling back to index=off. [ 432.562709][T10139] overlayfs: ...falling back to uuid=null. [ 432.585665][T10138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1189'. [ 432.640477][ T5415] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 432.820188][ T5415] usb 6-1: Using ep0 maxpacket: 8 [ 432.843140][ T5415] usb 6-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 432.853307][ T5415] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.864635][ T5415] usb 6-1: Product: syz [ 432.866478][ T5415] usb 6-1: Manufacturer: syz [ 432.868715][ T5415] usb 6-1: SerialNumber: syz [ 432.909635][ T5415] usb 6-1: config 0 descriptor?? [ 432.919440][ T5415] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 433.038769][T10150] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 433.503671][ T5415] pwc: Failed to set LED on/off time (-71) [ 433.521223][ T5415] pwc: send_video_command error -71 [ 433.523543][ T5415] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 433.526493][ T5415] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 433.562130][ T5415] usb 6-1: USB disconnect, device number 9 [ 434.160496][T10159] random: crng reseeded on system resumption [ 434.187438][T10157] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 434.245627][T10159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1195'. [ 435.012753][T10166] libceph: resolve '. [ 435.012753][T10166] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 435.012753][T10166] ' (ret=-3): failed [ 435.113991][T10166] Restarting kernel threads ... done. [ 435.424024][T10173] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 436.311538][T10177] netlink: 'syz.1.1200': attribute type 3 has an invalid length. [ 436.314988][T10177] netlink: 'syz.1.1200': attribute type 3 has an invalid length. [ 436.320247][T10177] netlink: 'syz.1.1200': attribute type 5 has an invalid length. [ 436.508830][T10182] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 436.640228][ T39] audit: type=1804 audit(2000000255.140:291): pid=10183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1202" name="/newroot/299/bus/file0" dev="overlay" ino=1852 res=1 errno=0 [ 436.676750][ T39] audit: type=1800 audit(2000000255.140:292): pid=10183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1202" name="file0" dev="overlay" ino=1852 res=0 errno=0 [ 436.736010][T10183] syz.2.1202 (10183): drop_caches: 2 [ 436.739501][T10183] syz.2.1202 (10183): drop_caches: 2 [ 437.452011][T10187] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 439.360288][T10199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1207'. [ 441.298919][T10223] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 441.840136][T10233] input: syz0 as /devices/virtual/input/input65 [ 442.347133][T10236] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 443.749472][T10245] netlink: 'syz.0.1217': attribute type 11 has an invalid length. [ 443.754872][T10245] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1217'. [ 443.763753][T10245] netlink: 'syz.0.1217': attribute type 11 has an invalid length. [ 443.767756][T10245] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1217'. [ 444.027145][T10247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1218'. [ 444.190611][ T5416] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 444.379961][ T5416] usb 5-1: Using ep0 maxpacket: 8 [ 444.384261][ T5416] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 444.414081][ T5416] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 444.418392][ T5416] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 444.423101][ T5416] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 444.428807][ T5416] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 444.435184][ T5416] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.710282][ T5416] usb 5-1: GET_CAPABILITIES returned 0 [ 444.712687][ T5416] usbtmc 5-1:16.0: can't read capabilities [ 444.903874][ T58] usb 5-1: USB disconnect, device number 26 [ 444.979282][T10264] overlay: Unknown parameter 'fsuuid' [ 445.622866][T10270] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 445.897312][T10278] netlink: 'syz.0.1227': attribute type 11 has an invalid length. [ 445.902059][T10278] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1227'. [ 445.909994][T10278] netlink: 'syz.0.1227': attribute type 11 has an invalid length. [ 445.913572][T10278] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1227'. [ 446.220837][ T39] audit: type=1326 audit(2000000264.730:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10280 comm="syz.0.1228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 446.239458][ T39] audit: type=1326 audit(2000000264.730:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10280 comm="syz.0.1228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 446.300262][ T39] audit: type=1326 audit(2000000264.800:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10280 comm="syz.0.1228" exe="/syz-executor" sig=0 arch=40000003 syscall=290 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 446.371887][ T39] audit: type=1326 audit(2000000264.800:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10280 comm="syz.0.1228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 446.383979][ T39] audit: type=1326 audit(2000000264.800:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10280 comm="syz.0.1228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 446.395736][ T39] audit: type=1326 audit(2000000264.810:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10280 comm="syz.0.1228" exe="/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 446.430094][ T39] audit: type=1326 audit(2000000264.820:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10280 comm="syz.0.1228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 446.442308][ T39] audit: type=1326 audit(2000000264.820:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10280 comm="syz.0.1228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 446.452049][ T39] audit: type=1326 audit(2000000264.850:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10280 comm="syz.0.1228" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 446.462426][ T39] audit: type=1326 audit(2000000264.850:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10280 comm="syz.0.1228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 446.925585][T10292] netlink: 'syz.2.1231': attribute type 11 has an invalid length. [ 446.933939][T10292] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1231'. [ 446.943663][T10292] netlink: 'syz.2.1231': attribute type 11 has an invalid length. [ 446.947083][T10292] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1231'. [ 447.218622][T10295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1230'. [ 447.369914][ T30] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 447.550113][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 447.587022][ T30] usb 5-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 447.591493][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.595105][ T30] usb 5-1: Product: syz [ 447.597132][ T30] usb 5-1: Manufacturer: syz [ 447.599164][ T30] usb 5-1: SerialNumber: syz [ 447.634319][ T30] usb 5-1: config 0 descriptor?? [ 447.642213][ T30] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 448.124938][T10306] ------------[ cut here ]------------ [ 448.127238][T10306] WARNING: CPU: 3 PID: 10306 at mm/shmem.c:1283 shmem_evict_inode+0x8b3/0xba0 [ 448.131416][T10306] Modules linked in: [ 448.133138][T10306] CPU: 3 UID: 0 PID: 10306 Comm: syz.2.1233 Not tainted 6.11.0-rc5-syzkaller-00316-g6cd90e5ea72f #0 [ 448.141336][T10306] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 448.146347][T10306] RIP: 0010:shmem_evict_inode+0x8b3/0xba0 [ 448.148842][T10306] Code: e6 e8 a1 55 c1 ff 45 85 e4 75 aa e8 57 53 c1 ff 48 8b 74 24 28 48 8b 7c 24 30 e8 08 e3 9b ff e9 1a fe ff ff e8 3e 53 c1 ff 90 <0f> 0b 90 e9 8d f9 ff ff e8 30 53 c1 ff 4c 89 e2 48 b8 00 00 00 00 [ 448.157477][T10306] RSP: 0018:ffffc90023427780 EFLAGS: 00010293 [ 448.160189][T10306] RAX: 0000000000000000 RBX: ffff888060c73c48 RCX: ffffffff81c9c01f [ 448.163555][T10306] RDX: ffff888021c64880 RSI: ffffffff81c9c692 RDI: 0000000000000007 [ 448.166883][T10306] RBP: ffffc900234278b0 R08: 0000000000000007 R09: 0000000000000000 [ 448.170443][T10306] R10: 0000000000000008 R11: 0000000000000000 R12: 0000000000000008 [ 448.173894][T10306] R13: 0000000000000000 R14: ffff888060c73c78 R15: 0000000000000000 [ 448.176838][T10306] FS: 0000000000000000(0000) GS:ffff88802b900000(0000) knlGS:0000000000000000 [ 448.181302][T10306] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 448.184202][T10306] CR2: 0000000020149000 CR3: 000000004ab8a000 CR4: 0000000000352ef0 [ 448.187786][T10306] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 448.191538][T10306] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 448.194870][T10306] Call Trace: [ 448.196321][T10306] [ 448.197642][T10306] ? show_regs+0x8c/0xa0 [ 448.199512][T10306] ? __warn+0xe5/0x3c0 [ 448.201375][T10306] ? shmem_evict_inode+0x8b3/0xba0 [ 448.203565][T10306] ? report_bug+0x3c0/0x580 [ 448.205483][T10306] ? handle_bug+0x3d/0x70 [ 448.207106][T10306] ? exc_invalid_op+0x17/0x50 [ 448.208903][T10306] ? asm_exc_invalid_op+0x1a/0x20 [ 448.212240][T10306] ? shmem_evict_inode+0x23f/0xba0 [ 448.214198][T10306] ? shmem_evict_inode+0x8b2/0xba0 [ 448.214967][T10315] netlink: 'syz.1.1236': attribute type 11 has an invalid length. [ 448.216102][T10306] ? shmem_evict_inode+0x8b3/0xba0 [ 448.219172][T10315] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1236'. [ 448.220993][T10306] ? find_held_lock+0x2d/0x110 [ 448.221017][T10306] ? __pfx_shmem_evict_inode+0x10/0x10 [ 448.221036][T10306] ? evict+0x361/0x8c0 [ 448.221057][T10306] ? __pfx_lock_release+0x10/0x10 [ 448.221076][T10306] ? __pfx_wake_bit_function+0x10/0x10 [ 448.226948][T10315] netlink: 'syz.1.1236': attribute type 11 has an invalid length. [ 448.228964][T10306] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 448.231472][T10315] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1236'. [ 448.233169][T10306] ? __pfx_shmem_evict_inode+0x10/0x10 [ 448.247344][T10306] evict+0x398/0x8c0 [ 448.249071][T10306] ? __pfx_evict+0x10/0x10 [ 448.251056][T10306] ? __pfx_lock_release+0x10/0x10 [ 448.253234][T10306] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 448.255567][T10306] iput.part.0+0x5a8/0x7f0 [ 448.257490][T10306] ? __pfx_generic_delete_inode+0x10/0x10 [ 448.260092][T10306] iput+0x5c/0x80 [ 448.261713][T10306] dentry_unlink_inode+0x29c/0x480 [ 448.263892][T10306] __dentry_kill+0x1d0/0x600 [ 448.265829][T10306] dput.part.0+0x4b1/0x9b0 [ 448.267757][T10306] dput+0x1f/0x30 [ 448.269282][T10306] __fput+0x54e/0xbb0 [ 448.271086][T10306] ? _raw_spin_unlock_irq+0x23/0x50 [ 448.273285][T10306] task_work_run+0x14e/0x250 [ 448.275414][T10306] ? __pfx_task_work_run+0x10/0x10 [ 448.277805][T10306] ? do_raw_spin_unlock+0x172/0x230 [ 448.280139][T10306] do_exit+0xaa3/0x2bb0 [ 448.281904][T10306] ? get_signal+0x8fb/0x26d0 [ 448.283879][T10306] ? __pfx_do_exit+0x10/0x10 [ 448.285873][T10306] ? do_raw_spin_lock+0x12d/0x2c0 [ 448.288112][T10306] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 448.290521][T10306] do_group_exit+0xd3/0x2a0 [ 448.292519][T10306] get_signal+0x2658/0x26d0 [ 448.294481][T10306] ? __pfx_lock_release+0x10/0x10 [ 448.296659][T10306] ? __pfx_get_signal+0x10/0x10 [ 448.298680][T10306] arch_do_signal_or_restart+0x90/0x7e0 [ 448.300820][T10306] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 448.303524][T10306] syscall_exit_to_user_mode+0x150/0x2a0 [ 448.306048][T10306] __do_fast_syscall_32+0x80/0x120 [ 448.308253][T10306] do_fast_syscall_32+0x32/0x80 [ 448.310446][T10306] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 448.313133][T10306] RIP: 0023:0xf7f46579 [ 448.314755][T10306] Code: Unable to access opcode bytes at 0xf7f4654f. [ 448.317203][T10306] RSP: 002b:00000000f56c556c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 448.320818][T10306] RAX: 0000000000010106 RBX: 0000000000000005 RCX: 00000000200000c0 [ 448.324196][T10306] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 448.328021][T10306] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 448.331647][T10306] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 448.335088][T10306] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 448.338655][T10306] [ 448.340344][T10306] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 448.343434][T10306] CPU: 3 UID: 0 PID: 10306 Comm: syz.2.1233 Not tainted 6.11.0-rc5-syzkaller-00316-g6cd90e5ea72f #0 [ 448.347940][T10306] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 448.351938][T10306] Call Trace: [ 448.353205][T10306] [ 448.354324][T10306] dump_stack_lvl+0x3d/0x1f0 [ 448.356197][T10306] panic+0x6dc/0x7c0 [ 448.357886][T10306] ? __pfx_panic+0x10/0x10 [ 448.359948][T10306] ? show_trace_log_lvl+0x363/0x500 [ 448.362311][T10306] ? check_panic_on_warn+0x1f/0xb0 [ 448.364472][T10306] ? shmem_evict_inode+0x8b3/0xba0 [ 448.366672][T10306] check_panic_on_warn+0xab/0xb0 [ 448.368660][T10306] __warn+0xf1/0x3c0 [ 448.370308][T10306] ? shmem_evict_inode+0x8b3/0xba0 [ 448.372485][T10306] report_bug+0x3c0/0x580 [ 448.374411][T10306] handle_bug+0x3d/0x70 [ 448.376314][T10306] exc_invalid_op+0x17/0x50 [ 448.378270][T10306] asm_exc_invalid_op+0x1a/0x20 [ 448.380394][T10306] RIP: 0010:shmem_evict_inode+0x8b3/0xba0 [ 448.382841][T10306] Code: e6 e8 a1 55 c1 ff 45 85 e4 75 aa e8 57 53 c1 ff 48 8b 74 24 28 48 8b 7c 24 30 e8 08 e3 9b ff e9 1a fe ff ff e8 3e 53 c1 ff 90 <0f> 0b 90 e9 8d f9 ff ff e8 30 53 c1 ff 4c 89 e2 48 b8 00 00 00 00 [ 448.391090][T10306] RSP: 0018:ffffc90023427780 EFLAGS: 00010293 [ 448.393741][T10306] RAX: 0000000000000000 RBX: ffff888060c73c48 RCX: ffffffff81c9c01f [ 448.397062][T10306] RDX: ffff888021c64880 RSI: ffffffff81c9c692 RDI: 0000000000000007 [ 448.400109][T10306] RBP: ffffc900234278b0 R08: 0000000000000007 R09: 0000000000000000 [ 448.403047][T10306] R10: 0000000000000008 R11: 0000000000000000 R12: 0000000000000008 [ 448.406006][T10306] R13: 0000000000000000 R14: ffff888060c73c78 R15: 0000000000000000 [ 448.409209][T10306] ? shmem_evict_inode+0x23f/0xba0 [ 448.411385][T10306] ? shmem_evict_inode+0x8b2/0xba0 [ 448.413630][T10306] ? find_held_lock+0x2d/0x110 [ 448.415985][T10306] ? __pfx_shmem_evict_inode+0x10/0x10 [ 448.418489][T10306] ? evict+0x361/0x8c0 [ 448.420296][T10306] ? __pfx_lock_release+0x10/0x10 [ 448.422426][T10306] ? __pfx_wake_bit_function+0x10/0x10 [ 448.424800][T10306] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 448.427150][T10306] ? __pfx_shmem_evict_inode+0x10/0x10 [ 448.429459][T10306] evict+0x398/0x8c0 [ 448.431168][T10306] ? __pfx_evict+0x10/0x10 [ 448.433123][T10306] ? __pfx_lock_release+0x10/0x10 [ 448.435335][T10306] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 448.437665][T10306] iput.part.0+0x5a8/0x7f0 [ 448.439639][T10306] ? __pfx_generic_delete_inode+0x10/0x10 [ 448.442072][T10306] iput+0x5c/0x80 [ 448.443625][T10306] dentry_unlink_inode+0x29c/0x480 [ 448.445787][T10306] __dentry_kill+0x1d0/0x600 [ 448.447555][T10306] dput.part.0+0x4b1/0x9b0 [ 448.449485][T10306] dput+0x1f/0x30 [ 448.451044][T10306] __fput+0x54e/0xbb0 [ 448.452754][T10306] ? _raw_spin_unlock_irq+0x23/0x50 [ 448.454757][T10306] task_work_run+0x14e/0x250 [ 448.456576][T10306] ? __pfx_task_work_run+0x10/0x10 [ 448.458779][T10306] ? do_raw_spin_unlock+0x172/0x230 [ 448.461054][T10306] do_exit+0xaa3/0x2bb0 [ 448.462822][T10306] ? get_signal+0x8fb/0x26d0 [ 448.464774][T10306] ? __pfx_do_exit+0x10/0x10 [ 448.467331][T10306] ? do_raw_spin_lock+0x12d/0x2c0 [ 448.469458][T10306] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 448.471940][T10306] do_group_exit+0xd3/0x2a0 [ 448.474067][T10306] get_signal+0x2658/0x26d0 [ 448.475970][T10306] ? __pfx_lock_release+0x10/0x10 [ 448.478646][T10306] ? __pfx_get_signal+0x10/0x10 [ 448.481169][T10306] arch_do_signal_or_restart+0x90/0x7e0 [ 448.483618][T10306] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 448.486241][T10306] syscall_exit_to_user_mode+0x150/0x2a0 [ 448.488576][T10306] __do_fast_syscall_32+0x80/0x120 [ 448.490805][T10306] do_fast_syscall_32+0x32/0x80 [ 448.492937][T10306] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 448.495647][T10306] RIP: 0023:0xf7f46579 [ 448.497450][T10306] Code: Unable to access opcode bytes at 0xf7f4654f. [ 448.500397][T10306] RSP: 002b:00000000f56c556c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 448.503933][T10306] RAX: 0000000000010106 RBX: 0000000000000005 RCX: 00000000200000c0 [ 448.507403][T10306] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 448.510756][T10306] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 448.514264][T10306] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 448.517481][T10306] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 448.520680][T10306] [ 448.522619][T10306] Kernel Offset: disabled [ 448.524347][T10306] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:23:04 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000021 RCX=ffffffff81685d5e RDX=0000000000000000 RSI=0000000000000008 RDI=ffffffff96890700 RBP=0000000000000000 RSP=ffffc900069f7940 R8 =0000000000000000 R9 =0000000000000000 R10=000000000000000a R11=0000000000000002 R12=0000000000000000 R13=ffff8880258d0b30 R14=0000000000000021 R15=ffff8880258d0000 RIP=ffffffff81e9a9a0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055a7db604000 CR3=000000004653c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000c400000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000110c067d6b4 RBX=ffff88802b7283c0 RCX=00000000000006e0 RDX=0000000000000110 RSI=ffff88802b7283c0 RDI=0000000000009cb4 RBP=0000000000009cb4 RSP=ffffc90000598b38 R8 =0000000000000005 R9 =000000000000003f R10=0000000000000019 R11=0000000000000000 R12=0000000000000001 R13=0000000000000019 R14=0000000000000001 R15=ffff88802b72ca40 RIP=ffffffff8139f235 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002001f000 CR3=000000004653c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004c00000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000005 RDX=0000000000000001 RSI=0000000000000008 RDI=ffff888020958b29 RBP=0000000000000000 RSP=ffffc90000e2f478 R8 =0000000000000000 R9 =fffffbfff2d120e0 R10=ffffffff96890707 R11=0000000000000002 R12=0000000000000002 R13=ffff888020958b08 R14=0000000000000021 R15=ffff888020958000 RIP=ffffffff816905c4 RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000056d6f4c0 CR3=0000000068706000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000049 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fc0c65 RDI=ffffffff9a513600 RBP=ffffffff9a5135c0 RSP=ffffc90023427160 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000049 R14=ffffffff84fc0c00 R15=0000000000000000 RIP=ffffffff84fc0c8f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020149000 CR3=000000004ab8a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004c00000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000