last executing test programs: 6m19.13158446s ago: executing program 3 (id=1156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000140003"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 6m19.081460554s ago: executing program 3 (id=1158): r0 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000000)=0x4, 0x25) recvmmsg(r0, &(0x7f000000a380)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x40010002, 0x0) 6m19.081217944s ago: executing program 3 (id=1159): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/uts\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') readlinkat(r0, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000540)=""/76, 0x4c) 6m19.030460664s ago: executing program 3 (id=1160): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000280)='./file0\x00', 0x0, 0x97801, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x112) 6m18.979746372s ago: executing program 3 (id=1161): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x14) rt_sigprocmask(0x2, &(0x7f0000000180)={[0x3]}, 0x0, 0x8) 6m18.601396185s ago: executing program 3 (id=1168): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x88}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) 6m18.546381209s ago: executing program 32 (id=1168): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x88}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) 5m12.130433586s ago: executing program 4 (id=3079): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000340)={0x1, 0x0, [{0x48, 0x0, 0x3908}]}) 5m12.045779045s ago: executing program 4 (id=3081): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0xee00) keyctl$setperm(0x5, r0, 0x200c0d32) keyctl$read(0xb, r0, 0x0, 0x0) 5m11.974337682s ago: executing program 4 (id=3083): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=@updpolicy={0x13c, 0x19, 0x1, 0x70bd29, 0x25dfdbfb, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x5, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2}, [@tmpl={0x84, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x3507, 0x0, 0x3, 0x10, 0x9, 0x0, 0x10001}, {{@in6=@mcast1, 0x4d4, 0x2b}, 0x2, @in6=@empty, 0x0, 0x2, 0x1, 0x6a, 0x7ff, 0x8, 0x5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 5m11.836521076s ago: executing program 4 (id=3084): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 5m11.835179688s ago: executing program 4 (id=3085): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setuid(0xee01) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) 5m11.480898279s ago: executing program 4 (id=3086): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1cb) sendfile(r1, r0, 0x0, 0xfffa83) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) 5m11.405251702s ago: executing program 33 (id=3086): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1cb) sendfile(r1, r0, 0x0, 0xfffa83) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) 3m41.765285992s ago: executing program 0 (id=5436): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) 3m41.719389984s ago: executing program 0 (id=5440): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0x200, 0x0, 0x9, 0x0, 0x42}) 3m40.070175173s ago: executing program 0 (id=5472): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 3m39.92998422s ago: executing program 0 (id=5476): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 3m39.929643115s ago: executing program 0 (id=5478): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x6, 0x5004, 0x7, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='tlb_flush\x00', r2}, 0x10) 3m39.519392408s ago: executing program 0 (id=5483): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='lowerdir', &(0x7f0000000100)='{\x00', 0x0) 3m39.482237701s ago: executing program 34 (id=5483): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='lowerdir', &(0x7f0000000100)='{\x00', 0x0) 3m8.863446989s ago: executing program 2 (id=6067): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb0100180000010000610c0000000018"], 0x0, 0x32, 0x0, 0x0, 0x6, 0x10000}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0xa, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x5, 0x9}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800c801}, 0x20040000) 3m8.684058042s ago: executing program 2 (id=6069): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x41100}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r1, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="040046000a0034000101010101010000080026006c090000800051802000008009000100b168fa316700000005000200020000000800030001ac0f"], 0xb4}, 0x1, 0x0, 0x0, 0x4090}, 0x0) 3m8.683487419s ago: executing program 2 (id=6070): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @loopback, {[@end, @timestamp_addr={0x44, 0x1c, 0xb2, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0x3c}, 0x2}, {@multicast2, 0x3}, {@multicast2, 0x100}]}, @timestamp={0x44, 0x20, 0xc0, 0x0, 0x1, [0xfffffffe, 0x0, 0x7fffffff, 0x7, 0xffffffff, 0x1000, 0x2]}]}}}}}, 0x7e) 3m8.560253695s ago: executing program 2 (id=6073): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00') 3m8.466345308s ago: executing program 2 (id=6075): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x24080044}, 0x4) 3m8.309662424s ago: executing program 2 (id=6081): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000008c0)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f02da602bd", 0x5}, {&(0x7f0000000340)="5af945fffea20fd7ca8a1fe410de94d074bef69eab17dcc315ea78df4fc9df905e149c4115426d86a32949153e666f7c36a74dae0d49d7083507916681e11b5bd6a81b3b", 0x44}], 0x2, 0x0, 0x0, 0xc801}], 0x1, 0x48c0) 3m8.265981168s ago: executing program 35 (id=6081): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000008c0)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f02da602bd", 0x5}, {&(0x7f0000000340)="5af945fffea20fd7ca8a1fe410de94d074bef69eab17dcc315ea78df4fc9df905e149c4115426d86a32949153e666f7c36a74dae0d49d7083507916681e11b5bd6a81b3b", 0x44}], 0x2, 0x0, 0x0, 0xc801}], 0x1, 0x48c0) 2m51.396271818s ago: executing program 6 (id=6459): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x41100}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r1, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="040046000a0034000101010101010000080026006c090000800051802000008009000100b168fa316700000005000200020000000800030001ac0f"], 0xb4}, 0x1, 0x0, 0x0, 0x4090}, 0x0) 2m51.357634886s ago: executing program 6 (id=6454): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) 2m51.188399547s ago: executing program 6 (id=6461): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m51.102322127s ago: executing program 6 (id=6470): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00') 2m50.877615872s ago: executing program 6 (id=6471): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xffffffffffffffff) 2m50.507680141s ago: executing program 6 (id=6484): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001900)=@newlink={0x60, 0x10, 0x403, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x12}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) 2m50.463614553s ago: executing program 36 (id=6484): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001900)=@newlink={0x60, 0x10, 0x403, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x12}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) 53.996923104s ago: executing program 5 (id=9569): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x300000e, 0x2172, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0) 53.897034846s ago: executing program 5 (id=9570): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x31, @tick=0xfffffffa, 0x0, {0x1, 0x2}, 0x1, 0x2, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00000001c0)={0x38, 0x7, 0x0, 0x9, 0x80000000, 0x87}) tkill(r0, 0x7) 53.694963748s ago: executing program 5 (id=9573): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r2 = dup2(r1, r1) syz_fuse_handle_req(r2, &(0x7f0000003400)="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", 0x2000, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r2, &(0x7f00000000c0)=""/192, 0xc0) 53.62337284s ago: executing program 5 (id=9575): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x80000, 0x0) 53.567625466s ago: executing program 5 (id=9577): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x54, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x7, 0x1, 0xfff, 0x2, 0x5, 0xfffffffe}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) 53.367118157s ago: executing program 5 (id=9585): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300) 53.314206214s ago: executing program 37 (id=9585): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300) 1.967537271s ago: executing program 1 (id=10843): syz_usb_connect$uac1(0x2, 0xa8, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000004740)=@newtaction={0x14, 0x30, 0x200, 0xf0bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) close(r0) 1.835940698s ago: executing program 9 (id=10852): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) listen(r1, 0x0) close(r1) 1.745479189s ago: executing program 9 (id=10854): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="0100000040fc51c64400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="01000000080800"/16, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES16=r0], 0x80}}, 0x0) 1.745338408s ago: executing program 9 (id=10855): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 898.587452ms ago: executing program 9 (id=10857): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @empty}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 745.519559ms ago: executing program 9 (id=10859): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xe, &(0x7f0000000200)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)='+\fER', 0x4) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 697.091786ms ago: executing program 9 (id=10861): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x82cb000}) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) 422.439708ms ago: executing program 1 (id=10868): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a0", 0xca}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 416.150277ms ago: executing program 1 (id=10870): close(0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) read$FUSE(r0, &(0x7f0000001740)={0x2020}, 0x2020) close(0x3) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xffffff4c}]) 344.606604ms ago: executing program 7 (id=10871): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x281c2, 0x120) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) close(r0) 204.140215ms ago: executing program 1 (id=10875): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0xe, &(0x7f00000001c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x80000000}]) io_getevents(r1, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 203.018491ms ago: executing program 8 (id=10876): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf0400000000f70bffff1200000008000300", @ANYRES32=r3, @ANYBLOB="040013000a0006000802110000010000060010002806000006001200070000000500c200ca00"], 0x44}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) 192.992811ms ago: executing program 7 (id=10877): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_khugepaged_scan_pmd\x00', r1}, 0x18) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 138.215463ms ago: executing program 8 (id=10878): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x481, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000740)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000000000001"]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000240)={"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"}) 137.801313ms ago: executing program 7 (id=10879): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) 137.647086ms ago: executing program 8 (id=10880): fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000180)=0x1000, 0x4) 64.892686ms ago: executing program 7 (id=10881): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r3 = dup2(r2, r1) write$RDMA_USER_CM_CMD_NOTIFY(r3, 0x0, 0x0) 64.740083ms ago: executing program 8 (id=10882): sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) r2 = openat$cgroup_ro(r1, &(0x7f0000001100)='cpu.stat\x00', 0x5000000, 0x0) readv(r2, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) 64.019828ms ago: executing program 7 (id=10883): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x101, 0x200, 0x4, 0x9}, 'syz1\x00', 0x4c}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf) ioctl$UI_DEV_CREATE(r0, 0x5501) 6.004057ms ago: executing program 8 (id=10884): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) 5.80116ms ago: executing program 1 (id=10885): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="98ac3c6741a40ce1997f49fba70d946a07f2178b8bc77dc9339505c7", 0x1c}, {&(0x7f0000000140)="f3e41672c645e11018dc0400000000000000a4c47b311e714b5aab5a85ab5f", 0x1f}, {&(0x7f00000002c0)="390ea240d45db5fcbed46fe54ba61b38faa36d565c3ed3685df9f01173ce90c93393750e9e37617c255ddb6d56", 0x2d}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 3.944449ms ago: executing program 7 (id=10886): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="400104"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 3.766746ms ago: executing program 8 (id=10887): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@remote, @in6=@remote, 0x0, 0x33, 0x0, 0x0, 0xa, 0x60, 0x30}, {0x0, 0x7f, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x200, 0xfeffffffffffffff}, {0x3, 0x0, 0x0, 0x1}, 0x400006, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x23}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60, 0x0, 0x0, 0xee01}, {0x0, 0x1000000000000401, 0x0, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x77, 0x3, 0x0, 0x100000000007fff}, 0x0, 0x6e6bb1, 0x1, 0x0, 0x3}}, 0xb8}}, 0x0) sendto$inet6(r1, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 0s ago: executing program 1 (id=10888): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb90}, 0x1, 0x0, 0x0, 0x400c010}, 0x20004000) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041) kernel console output (not intermixed with test programs): .658874][ T34] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 313.663614][ T34] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 313.678119][ T34] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 313.681940][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.688548][ T34] usb 10-1: config 0 descriptor?? [ 313.690665][T20668] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 313.799485][ T5950] Bluetooth: hci1: command tx timeout [ 313.868846][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 314.107020][ T34] plantronics 0003:047F:FFFF.0020: reserved main item tag 0xd [ 314.114047][ T34] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 314.371396][ T6028] usb 10-1: USB disconnect, device number 19 [ 314.438821][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 314.608896][ T1459] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 314.770620][ T1459] usb 12-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 314.774136][ T1459] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.777683][ T1459] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.781193][ T1459] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 314.786498][ T1459] usb 12-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 314.789632][ T1459] usb 12-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 314.792365][ T1459] usb 12-1: Manufacturer: syz [ 314.795126][ T1459] usb 12-1: config 0 descriptor?? [ 314.918834][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 315.149373][ T29] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 315.207283][ T1459] appleir 0003:05AC:8243.0021: unknown main item tag 0x0 [ 315.212392][ T1459] appleir 0003:05AC:8243.0021: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 315.298945][ T29] usb 10-1: Using ep0 maxpacket: 32 [ 315.302217][ T29] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 315.305455][T20764] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.6662'. [ 315.305848][ T29] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 315.313208][ T29] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 315.318981][ T29] usb 10-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 315.322520][ T29] usb 10-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 315.325871][ T29] usb 10-1: Product: syz [ 315.327451][ T29] usb 10-1: Manufacturer: syz [ 315.329149][ T29] usb 10-1: SerialNumber: syz [ 315.337415][ T29] input: appletouch as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/input/input73 [ 315.392194][T20770] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6667'. [ 315.460660][ T1459] usb 12-1: USB disconnect, device number 3 [ 315.468824][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 315.541708][ T29] usb 10-1: USB disconnect, device number 20 [ 315.547557][ T29] appletouch 10-1:1.0: input: appletouch disconnected [ 315.879171][ T5950] Bluetooth: hci1: command tx timeout [ 315.948858][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 316.389936][ T40] audit: type=1800 audit(1763361335.632:7688): pid=20807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6683" name="nullb0" dev="tmpfs" ino=6536 res=0 errno=0 [ 316.508797][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 316.646082][T20830] input: syz1 as /devices/virtual/input/input74 [ 316.898603][T20855] loop4: detected capacity change from 0 to 7 [ 316.910293][T20855] Dev loop4: unable to read RDB block 7 [ 316.912772][T20855] loop4: unable to read partition table [ 316.915359][T20855] loop4: partition table beyond EOD, truncated [ 316.918064][T20855] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 316.953249][T20859] tipc: Started in network mode [ 316.955635][T20859] tipc: Node identity ac14142f, cluster identity 4711 [ 316.959267][T20859] tipc: New replicast peer: 0.0.0.0 [ 316.961649][T20859] tipc: Enabled bearer , priority 10 [ 316.964742][T20859] tipc: New replicast peer: fc00:0000:0000:0000:0000:0000:0000:0000 [ 316.988818][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 317.309424][ T6271] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 317.460150][ T6271] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.463860][ T6271] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.467096][ T6271] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 317.469056][ T1021] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 317.471455][ T6271] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 317.477124][ T6271] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.489497][ T6271] usb 12-1: config 0 descriptor?? [ 317.495046][T20905] veth0_macvtap: left promiscuous mode [ 317.548865][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 317.642245][ T1021] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 317.646003][ T1021] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.651207][ T1021] usb 10-1: Product: syz [ 317.653012][ T1021] usb 10-1: Manufacturer: syz [ 317.655131][ T1021] usb 10-1: SerialNumber: syz [ 317.661476][ T1021] usb 10-1: config 0 descriptor?? [ 317.723904][ T1459] IPVS: starting estimator thread 0... [ 317.808927][T20926] IPVS: using max 45 ests per chain, 108000 per kthread [ 317.872444][ T1459] usb 10-1: USB disconnect, device number 21 [ 317.901093][ T6271] plantronics 0003:047F:FFFF.0022: reserved main item tag 0xd [ 317.906432][ T6271] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 317.958990][ T1021] tipc: Node number set to 2886997039 [ 318.038823][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 318.170613][ T6025] usb 12-1: USB disconnect, device number 4 [ 318.588932][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 318.611035][T20950] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.6748'. [ 319.068837][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 319.090297][T20966] ip6_vti0 speed is unknown, defaulting to 1000 [ 319.638794][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 319.699855][T20998] bridge1: entered promiscuous mode [ 319.718932][T21000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6770'. [ 319.722674][T21000] netlink: 'syz.1.6770': attribute type 21 has an invalid length. [ 319.769520][T21004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6771'. [ 319.772452][T21004] netlink: 172 bytes leftover after parsing attributes in process `syz.1.6771'. [ 320.087964][ T5950] Bluetooth: hci2: unexpected event for opcode 0x0c7c [ 320.109027][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 320.264709][T21055] Invalid ELF header magic: != ELF [ 320.526286][T21059] syz.5.6794 (21059) used greatest stack depth: 19432 bytes left [ 320.573123][T21078] geneve2: entered promiscuous mode [ 320.575232][T21078] geneve2: entered allmulticast mode [ 320.679024][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 321.093855][T21096] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6808'. [ 321.097758][T21096] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6808'. [ 321.103702][T21096] netlink: 'syz.5.6808': attribute type 13 has an invalid length. [ 321.107196][T21096] netlink: 'syz.5.6808': attribute type 12 has an invalid length. [ 321.148811][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 321.542128][ T5950] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 321.546723][ T5950] CPU: 2 UID: 0 PID: 5950 Comm: kworker/u33:6 Not tainted syzkaller #0 PREEMPT(full) [ 321.546750][ T5950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 321.546762][ T5950] Workqueue: hci0 hci_rx_work [ 321.546789][ T5950] Call Trace: [ 321.546796][ T5950] [ 321.546803][ T5950] dump_stack_lvl+0x16c/0x1f0 [ 321.546828][ T5950] sysfs_warn_dup+0x7f/0xa0 [ 321.546853][ T5950] sysfs_create_dir_ns+0x24b/0x2b0 [ 321.546876][ T5950] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 321.546898][ T5950] ? find_held_lock+0x2b/0x80 [ 321.546924][ T5950] ? do_raw_spin_unlock+0x172/0x230 [ 321.546944][ T5950] kobject_add_internal+0x2c4/0x9b0 [ 321.546975][ T5950] kobject_add+0x16e/0x240 [ 321.547001][ T5950] ? __pfx_kobject_add+0x10/0x10 [ 321.547029][ T5950] ? do_raw_spin_unlock+0x172/0x230 [ 321.547047][ T5950] ? kobject_put+0xab/0x5a0 [ 321.547079][ T5950] device_add+0x288/0x1aa0 [ 321.547109][ T5950] ? __pfx_dev_set_name+0x10/0x10 [ 321.547128][ T5950] ? __pfx_device_add+0x10/0x10 [ 321.547158][ T5950] ? mgmt_send_event_skb+0x2fb/0x460 [ 321.547187][ T5950] hci_conn_add_sysfs+0x17e/0x230 [ 321.547211][ T5950] le_conn_complete_evt+0x1260/0x2150 [ 321.547238][ T5950] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 321.547258][ T5950] ? hci_event_packet+0x459/0x11c0 [ 321.547286][ T5950] hci_le_conn_complete_evt+0x23c/0x370 [ 321.547314][ T5950] hci_le_meta_evt+0x357/0x5e0 [ 321.547336][ T5950] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 321.547360][ T5950] hci_event_packet+0x685/0x11c0 [ 321.547379][ T5950] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 321.547402][ T5950] ? __pfx_hci_event_packet+0x10/0x10 [ 321.547425][ T5950] ? kcov_remote_start+0x3c9/0x6d0 [ 321.547443][ T5950] ? lockdep_hardirqs_on+0x7c/0x110 [ 321.547473][ T5950] hci_rx_work+0x2c5/0x16b0 [ 321.547495][ T5950] ? rcu_is_watching+0x12/0xc0 [ 321.547520][ T5950] process_one_work+0x9cf/0x1b70 [ 321.547561][ T5950] ? __pfx_process_one_work+0x10/0x10 [ 321.547617][ T5950] ? assign_work+0x1a0/0x250 [ 321.547652][ T5950] worker_thread+0x6c8/0xf10 [ 321.547680][ T5950] ? __kthread_parkme+0x19e/0x250 [ 321.547707][ T5950] ? __pfx_worker_thread+0x10/0x10 [ 321.547738][ T5950] kthread+0x3c5/0x780 [ 321.547767][ T5950] ? __pfx_kthread+0x10/0x10 [ 321.547798][ T5950] ? rcu_is_watching+0x12/0xc0 [ 321.547818][ T5950] ? __pfx_kthread+0x10/0x10 [ 321.547846][ T5950] ret_from_fork+0x675/0x7d0 [ 321.547872][ T5950] ? __pfx_kthread+0x10/0x10 [ 321.547898][ T5950] ret_from_fork_asm+0x1a/0x30 [ 321.547937][ T5950] [ 321.547979][ T5950] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 321.656358][ T5950] Bluetooth: hci0: failed to register connection device [ 321.718827][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 321.954010][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.198910][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 322.748900][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 323.026635][ T40] audit: type=1326 audit(1763361342.262:7689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21187 comm="syz.5.6851" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb5579 code=0x0 [ 323.228953][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 323.588936][ T6028] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 323.739361][ T6028] usb 12-1: Using ep0 maxpacket: 8 [ 323.743362][ T6028] usb 12-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.748144][ T6028] usb 12-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.751939][ T6028] usb 12-1: config 0 interface 0 has no altsetting 0 [ 323.754240][ T6028] usb 12-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 323.758090][ T6028] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.762309][ T6028] usb 12-1: config 0 descriptor?? [ 323.788790][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 324.177273][ T6028] mcp2221 0003:04D8:00DD.0023: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 324.280925][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 324.381309][ T1459] usb 12-1: USB disconnect, device number 5 [ 324.828824][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 325.122514][T21316] netlink: 116 bytes leftover after parsing attributes in process `syz.7.6904'. [ 325.300162][T21329] sit0: entered promiscuous mode [ 325.304097][T21329] netlink: 'syz.7.6910': attribute type 1 has an invalid length. [ 325.306840][T21329] netlink: 1 bytes leftover after parsing attributes in process `syz.7.6910'. [ 325.318889][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 325.590911][T21361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6924'. [ 325.816558][T21379] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6931'. [ 325.868847][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 325.946419][T21398] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6938'. [ 325.952904][T21398] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6938'. [ 326.348905][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 326.670242][T21467] netlink: 116 bytes leftover after parsing attributes in process `syz.8.6968'. [ 326.711834][T21471] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6970'. [ 326.909136][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 327.072317][T21502] fuse: Bad value for 'fd' [ 327.159440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 327.208958][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 327.323337][ T5950] Bluetooth: hci2: unexpected event 0x06 length: 4 > 3 [ 327.388861][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 327.477954][T21547] netlink: 6 bytes leftover after parsing attributes in process `syz.8.7005'. [ 327.656699][T21554] netlink: 116 bytes leftover after parsing attributes in process `syz.5.7008'. [ 327.685550][T21557] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7009'. [ 327.690957][T21557] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7009'. [ 327.711399][ T40] audit: type=1326 audit(1763361346.952:7690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21560 comm="syz.5.7011" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x0 [ 327.844181][T21570] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7015'. [ 327.948968][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 328.249223][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 328.266731][T21601] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7031'. [ 328.290898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 328.428843][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 328.568294][T21626] fuse: Bad value for 'fd' [ 328.598664][ T64] Bluetooth: hci1: unexpected event 0x06 length: 4 > 3 [ 328.998935][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 329.353551][T21684] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7059'. [ 329.389899][ T64] Bluetooth: hci2: command 0x0405 tx timeout [ 329.468844][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 329.509132][T21642] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 329.513355][T21642] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 329.539246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 329.872307][T21720] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7068'. [ 330.028969][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 330.508821][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 330.682429][ T5950] Bluetooth: hci1: command tx timeout [ 331.068861][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 331.468897][ T5950] Bluetooth: hci2: command 0x0405 tx timeout [ 331.475841][T21642] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 331.478023][T21642] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 331.496913][T21642] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 331.499181][T21642] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 331.549215][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 331.979221][T21785] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7096'. [ 332.108818][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 332.427062][T21823] 8021q: VLANs not supported on ip_vti0 [ 332.588923][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 332.758948][ T5950] Bluetooth: hci1: command 0x0406 tx timeout [ 332.764927][T21642] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 332.767585][T21642] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 332.835711][T21831] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7119'. [ 332.965396][T21845] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7123'. [ 332.968330][T21845] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7123'. [ 333.148835][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 333.218900][ T29] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 333.380334][ T29] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.384833][ T29] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.389336][ T29] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 333.394922][ T29] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 333.399034][ T29] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.404460][ T29] usb 12-1: config 0 descriptor?? [ 333.421172][T21861] bridge1: entered promiscuous mode [ 333.638807][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 333.813014][ T29] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 333.815491][ T29] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 333.818033][ T29] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 333.820600][ T29] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 333.823038][ T29] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 333.825778][ T29] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 333.828334][ T29] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 333.831182][ T29] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 333.834073][ T29] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 333.836620][ T29] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 333.841350][ T29] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 333.997108][T21900] Invalid ELF header magic: != ELF [ 334.051332][T21906] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7152'. [ 334.083676][ T29] usb 12-1: USB disconnect, device number 6 [ 334.188827][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 334.487989][T21945] 9pnet_fd: Insufficient options for proto=fd [ 334.678794][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 335.205705][ T40] audit: type=1326 audit(1763361354.442:7691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21999 comm="syz.5.7196" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 335.214167][ T40] audit: type=1326 audit(1763361354.442:7692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21999 comm="syz.5.7196" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 335.222181][ T40] audit: type=1326 audit(1763361354.442:7693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21999 comm="syz.5.7196" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 335.229231][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 335.231513][ T40] audit: type=1326 audit(1763361354.442:7694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21999 comm="syz.5.7196" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 335.238376][ T40] audit: type=1326 audit(1763361354.442:7695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21999 comm="syz.5.7196" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 335.245438][ T40] audit: type=1326 audit(1763361354.442:7696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21999 comm="syz.5.7196" exe="/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 335.256369][T22003] tipc: Started in network mode [ 335.258056][T22003] tipc: Node identity ac14142f, cluster identity 4711 [ 335.260545][T22003] tipc: New replicast peer: 0.0.0.0 [ 335.261577][ T40] audit: type=1326 audit(1763361354.502:7697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21999 comm="syz.5.7196" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 335.262846][T22003] tipc: Enabled bearer , priority 10 [ 335.269978][ T40] audit: type=1326 audit(1763361354.502:7698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21999 comm="syz.5.7196" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 335.279116][ T40] audit: type=1326 audit(1763361354.502:7699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21999 comm="syz.5.7196" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 335.283210][T22003] tipc: New replicast peer: fc00:0000:0000:0000:0000:0000:0000:0000 [ 335.286075][ T40] audit: type=1326 audit(1763361354.502:7700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21999 comm="syz.5.7196" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 335.320157][T22008] vxcan0: tx address claim with different name [ 335.682501][T22029] overlayfs: failed to clone upperpath [ 335.686612][T22029] overlayfs: failed to clone lowerpath [ 335.708830][ C2] net_ratelimit: 1 callbacks suppressed [ 335.708846][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 335.722257][T22034] tipc: Enabling of bearer rejected, already enabled [ 335.726317][T22034] tipc: New replicast peer: fc00:0000:0000:0000:0000:0000:0000:0000 [ 335.977651][T22036] ip6_vti0 speed is unknown, defaulting to 1000 [ 336.271205][ T1021] tipc: Node number set to 2886997039 [ 336.278797][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 336.475316][T22071] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.479087][T22071] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.623895][T22071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.636987][T22071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.748796][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 336.831898][ T12] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.843147][ T12] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.855436][ T12] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.862364][ T12] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.919975][T22083] ip6_vti0 speed is unknown, defaulting to 1000 [ 337.316092][T22116] syzkaller1: entered promiscuous mode [ 337.318449][T22116] syzkaller1: entered allmulticast mode [ 337.318878][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 337.692475][T22130] ip6_vti0 speed is unknown, defaulting to 1000 [ 337.788869][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 338.348830][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 338.673861][T22208] 8021q: adding VLAN 0 to HW filter on device bond1 [ 338.838889][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 339.208451][T22248] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7294'. [ 339.388803][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 339.803399][T22287] fuse: Bad value for 'fd' [ 339.878871][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 340.267820][T22299] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7316'. [ 340.428826][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 340.453427][T22310] netlink: 84 bytes leftover after parsing attributes in process `syz.7.7321'. [ 340.457476][T22310] netlink: 84 bytes leftover after parsing attributes in process `syz.7.7321'. [ 340.719108][T22336] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.7333'. [ 340.908817][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 340.927142][T22359] overlayfs: failed lookup in lower (newroot/1076, name='bus', err=-40): overlapping layers [ 341.439064][ T29] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 341.468821][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 341.588938][ T29] usb 10-1: Using ep0 maxpacket: 16 [ 341.591871][ T29] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.595123][ T29] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.598809][ T29] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 341.602055][ T29] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 341.607247][ T29] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 341.610427][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 341.613122][ T29] usb 10-1: SerialNumber: syz [ 341.618822][ T29] hub 10-1:1.0: bad descriptor, ignoring hub [ 341.620833][ T29] hub 10-1:1.0: probe with driver hub failed with error -5 [ 341.623842][ T29] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 341.948937][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 342.019360][T22369] raw-gadget.0 gadget.5: fail, usb_ep_set_halt returned -11 [ 342.128953][ T24] usb 10-1: USB disconnect, device number 22 [ 342.145271][T22402] io-wq is not configured for unbound workers [ 342.508828][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 342.531406][T22430] input: syz0 as /devices/virtual/input/input77 [ 342.998890][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 343.108644][T22473] sit0: entered promiscuous mode [ 343.111513][T22473] netlink: 'syz.8.7396': attribute type 1 has an invalid length. [ 343.114832][T22473] netlink: 1 bytes leftover after parsing attributes in process `syz.8.7396'. [ 343.173676][T22479] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7399'. [ 343.548812][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 343.614761][T22502] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7407'. [ 343.630222][T22502] bond1: Invalid ad_actor_system MAC address. [ 343.632386][T22502] bond1: option ad_actor_system: invalid value (68719607821) [ 343.637467][T22502] bond1 (unregistering): Released all slaves [ 343.765170][T22511] input: syz0 as /devices/virtual/input/input78 [ 344.038907][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 344.312485][T22550] syzkaller1: entered promiscuous mode [ 344.314667][T22550] syzkaller1: entered allmulticast mode [ 344.588849][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 344.637478][T22588] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7444'. [ 344.643581][T22588] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7444'. [ 344.798962][T22598] syzkaller1: entered promiscuous mode [ 344.801085][T22598] syzkaller1: entered allmulticast mode [ 344.932285][T22609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.078860][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 345.233365][T22623] pim6reg1: entered promiscuous mode [ 345.235422][T22623] pim6reg1: entered allmulticast mode [ 345.629054][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 346.118818][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 346.150639][T22692] batadv_slave_1: entered promiscuous mode [ 346.160644][T22684] batadv_slave_1: left promiscuous mode [ 346.668849][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 346.900674][T22753] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7516'. [ 346.904581][T22753] netlink: 'syz.5.7516': attribute type 6 has an invalid length. [ 346.907971][T22753] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7516'. [ 347.148868][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 348.031042][T22831] input: syz1 as /devices/virtual/input/input79 [ 348.033355][T22831] input: failed to attach handler leds to device input79, error: -6 [ 348.198951][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 348.318632][T22859] ip6_vti0 speed is unknown, defaulting to 1000 [ 348.529508][T22864] nbd: device at index 5 is going down [ 349.228823][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 349.697745][T22957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7608'. [ 349.898817][T22986] 9pnet_fd: Insufficient options for proto=fd [ 350.268826][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 350.337446][T23043] binder_alloc: binder_alloc_mmap_handler: 23042 80ffd000-80ffe000 already mapped failed -16 [ 351.308861][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 351.465787][T23130] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 40 [ 351.490316][T23132] bridge1: entered promiscuous mode [ 351.668832][ T6025] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 351.818886][ T6025] usb 10-1: Using ep0 maxpacket: 16 [ 351.822250][ T6025] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 351.824936][ T6025] usb 10-1: config 0 has no interface number 0 [ 351.827386][ T6025] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 351.830999][ T6025] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 351.835760][ T6025] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 351.839895][ T6025] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 351.843313][ T6025] usb 10-1: Product: syz [ 351.845142][ T6025] usb 10-1: SerialNumber: syz [ 351.849307][ T6025] usb 10-1: config 0 descriptor?? [ 351.854236][ T6025] cm109 10-1:0.8: invalid payload size 0, expected 4 [ 351.858548][ T6025] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.8/input/input80 [ 351.921890][T23149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7691'. [ 351.924937][T23149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7691'. [ 352.055632][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 352.077613][T23160] 9pnet_fd: Insufficient options for proto=fd [ 352.270288][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 352.275124][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 352.281066][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 352.284316][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 352.286993][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 352.290941][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 352.294116][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 352.297839][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 352.307272][ T6025] usb 10-1: USB disconnect, device number 23 [ 352.309903][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 352.309926][ C1] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 352.322888][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 352.322902][ T40] audit: type=1326 audit(1763361371.562:7702): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=23176 comm="syz.1.7707" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x0 [ 352.341012][ T6025] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 352.348876][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 353.388823][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 354.342333][T23270] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7744'. [ 354.419650][ T6271] hid_parser_main: 5 callbacks suppressed [ 354.419669][ T6271] hid-generic 0000:0000:0000.0025: unknown main item tag 0x1 [ 354.425431][ T6271] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 354.428677][ T6271] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 354.431845][ T6271] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 354.434660][ T6271] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 354.437832][ T6271] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 354.439028][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 354.442260][ T6271] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 354.448690][ T6271] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 354.453572][ T6271] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 354.455943][ T6271] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 354.460068][ T6271] hid-generic 0000:0000:0000.0025: hidraw0: HID v8.00 Device [syz0] on syz0 [ 354.660120][T23299] vxcan0: tx address claim with different name [ 354.802380][T23314] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7765'. [ 355.469508][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 355.572014][T23384] netlink: 'syz.7.7797': attribute type 1 has an invalid length. [ 355.574529][T23384] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7797'. [ 355.587031][T23386] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7798'. [ 355.703409][T23392] binder_alloc: binder_alloc_mmap_handler: 23391 80ffd000-80ffe000 already mapped failed -16 [ 355.827281][T23402] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7805'. [ 355.973719][T23409] syzkaller1: entered promiscuous mode [ 355.977021][T23409] syzkaller1: entered allmulticast mode [ 356.511316][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 356.749014][T23470] 8021q: adding VLAN 0 to HW filter on device bond2 [ 356.911943][T23491] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7855'. [ 357.548963][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 358.174029][T23550] overlayfs: failed to clone upperpath [ 358.180658][ T1190] bridge_slave_0: left allmulticast mode [ 358.182655][ T1190] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.416822][T23569] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7878'. [ 358.419974][T23569] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7878'. [ 358.422862][T23569] netlink: 'syz.8.7878': attribute type 13 has an invalid length. [ 358.425588][T23569] netlink: 'syz.8.7878': attribute type 12 has an invalid length. [ 358.548623][ T1190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.553560][ T1190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.564438][ T1190] bond0 (unregistering): (slave bond1): Releasing backup interface [ 358.567668][ T1190] bond0 (unregistering): Released all slaves [ 358.598916][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 358.661838][ T1190] bond1 (unregistering): Released all slaves [ 358.750341][ T1190] tipc: Disabling bearer [ 358.753051][ T1190] tipc: Left network mode [ 358.768047][ T40] audit: type=1326 audit(1763361378.002:7703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23574 comm="syz.8.7879" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f46579 code=0x0 [ 359.047797][ T1190] hsr_slave_0: left promiscuous mode [ 359.055008][ T1190] hsr_slave_1: left promiscuous mode [ 359.057653][ T1190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.061598][ T1190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.628911][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 359.684317][ T1190] team0 (unregistering): Port device team_slave_1 removed [ 359.775131][ T1190] team0 (unregistering): Port device team_slave_0 removed [ 360.474347][T23648] overlayfs: failed to clone upperpath [ 360.541338][T23652] ip6_vti0 speed is unknown, defaulting to 1000 [ 360.649138][ T1190] IPVS: stop unused estimator thread 0... [ 360.668832][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 360.928846][T23680] overlayfs: failed lookup in lower (newroot/371, name='bus', err=-40): overlapping layers [ 361.152407][T23694] ip6_vti0 speed is unknown, defaulting to 1000 [ 361.718854][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 362.748865][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 363.260510][T23801] Bluetooth: hci0: load_link_keys: too big key_count value 9472 [ 363.788889][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 364.615348][T23853] nbd: device at index 7 is going down [ 364.838941][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 365.247289][T23887] overlayfs: failed to clone upperpath [ 365.868888][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 366.084605][T23940] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 366.091931][T23940] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 366.291374][T23956] 8021q: VLANs not supported on ip_vti0 [ 366.613013][ T6025] hid_parser_main: 27 callbacks suppressed [ 366.613033][ T6025] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x4 [ 366.619201][ T6025] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x2 [ 366.622533][ T6025] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 366.625846][ T6025] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 366.631697][ T6025] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 366.634997][ T6025] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 366.638397][ T6025] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 366.641455][ T6025] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 366.644176][ T6025] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 366.646680][ T6025] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 366.650142][ T6025] hid-generic 0000:3000000:0000.0026: hidraw0: HID v0.00 Device [sy] on syz0 [ 366.905340][T23992] bridge1: entered promiscuous mode [ 366.908892][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 367.057336][T24006] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8056'. [ 367.061514][T24006] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8056'. [ 367.294730][T24014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8069'. [ 367.948853][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 368.988977][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 369.094858][T24140] netlink: 'syz.1.8115': attribute type 23 has an invalid length. [ 370.038834][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 371.078902][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 371.449839][ T40] audit: type=1326 audit(1763361390.692:7704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24288 comm="syz.5.8176" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb5579 code=0x0 [ 371.627962][T24302] bridge2: entered promiscuous mode [ 372.109032][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 372.962637][ T6025] kernel write not supported for file /audio1 (pid: 6025 comm: kworker/1:4) [ 373.108120][T24367] input: syz0 as /devices/virtual/input/input81 [ 373.149390][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 373.338872][ T5981] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 373.500161][ T5981] usb 12-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 373.503862][ T5981] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.507348][ T5981] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.510800][ T5981] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 373.516646][ T5981] usb 12-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 373.519977][ T5981] usb 12-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 373.522640][ T5981] usb 12-1: Manufacturer: syz [ 373.525371][ T5981] usb 12-1: config 0 descriptor?? [ 373.823821][T24402] syzkaller1: entered promiscuous mode [ 373.826168][T24402] syzkaller1: entered allmulticast mode [ 373.933070][ T5981] hid_parser_main: 6 callbacks suppressed [ 373.933082][ T5981] appleir 0003:05AC:8243.0027: unknown main item tag 0x0 [ 373.940559][ T5981] appleir 0003:05AC:8243.0027: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 374.189033][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 374.200225][ T34] usb 12-1: USB disconnect, device number 7 [ 374.383883][T24441] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.8246'. [ 374.444189][T24445] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8248'. [ 374.447966][T24445] netlink: 'syz.5.8248': attribute type 5 has an invalid length. [ 374.582826][T24463] overlayfs: failed to clone upperpath [ 375.228942][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 375.282284][T24489] overlayfs: failed to clone upperpath [ 375.768048][T24519] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8280'. [ 375.847522][T24528] dummy0: entered promiscuous mode [ 375.851420][T24528] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 375.856423][T24528] hsr1: entered allmulticast mode [ 375.858290][T24528] dummy0: entered allmulticast mode [ 375.862054][T24528] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 375.954594][T24546] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8291'. [ 376.158974][T24574] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8304'. [ 376.200580][T24576] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8305'. [ 376.228198][T24578] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8306'. [ 376.278901][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 376.407342][T24592] 9pnet_fd: Insufficient options for proto=fd [ 376.408878][ T1459] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 376.570750][ T1459] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 376.575767][ T1459] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 376.580866][ T1459] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 376.585083][ T1459] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 376.590911][ T1459] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 376.594775][ T1459] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.602793][ T1459] usb 10-1: config 0 descriptor?? [ 377.014013][ T1459] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 377.064488][T24646] netlink: 'syz.1.8335': attribute type 19 has an invalid length. [ 377.087414][T24648] geneve2: entered promiscuous mode [ 377.156568][T24654] 9pnet_fd: Insufficient options for proto=fd [ 377.261865][T24660] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8343'. [ 377.308829][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 377.754835][T24692] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8353'. [ 378.132597][T24720] netlink: 14560 bytes leftover after parsing attributes in process `syz.7.8365'. [ 378.348861][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 378.574113][T24754] team0: Port device team_slave_1 removed [ 379.096650][ T5981] usb 10-1: USB disconnect, device number 24 [ 379.128989][T24785] tipc: New replicast peer: 0.0.0.0 [ 379.131387][T24785] tipc: Enabled bearer , priority 10 [ 379.209327][T24791] pim6reg: entered allmulticast mode [ 379.212851][T24791] pim6reg: left allmulticast mode [ 379.398904][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 379.503611][T24838] __nla_validate_parse: 1 callbacks suppressed [ 379.503622][T24838] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8422'. [ 379.567298][T24844] tipc: Enabling of bearer rejected, already enabled [ 379.568882][ T1459] usb 12-1: new full-speed USB device number 8 using dummy_hcd [ 379.664883][T24852] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.8429'. [ 379.720594][ T1459] usb 12-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 379.724916][ T1459] usb 12-1: config 0 interface 0 has no altsetting 0 [ 379.731371][ T1459] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 379.735937][ T1459] usb 12-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 379.739804][ T1459] usb 12-1: Product: syz [ 379.741739][ T1459] usb 12-1: Manufacturer: syz [ 379.743809][ T1459] usb 12-1: SerialNumber: syz [ 379.746551][ T1459] usb 12-1: config 0 descriptor?? [ 379.752667][T24862] netlink: 14560 bytes leftover after parsing attributes in process `syz.5.8431'. [ 379.757952][ T1459] usb 12-1: selecting invalid altsetting 0 [ 379.864777][T24876] ip6_vti0 speed is unknown, defaulting to 1000 [ 379.957771][ T1459] usb 12-1: USB disconnect, device number 8 [ 379.996799][T24888] 9pnet_fd: Insufficient options for proto=fd [ 380.120809][ T40] audit: type=1326 audit(1763361399.362:7705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24898 comm="syz.8.8449" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f46598 code=0x7ffc0000 [ 380.128634][ T40] audit: type=1326 audit(1763361399.362:7706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24898 comm="syz.8.8449" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f46598 code=0x7ffc0000 [ 380.144915][ T40] audit: type=1326 audit(1763361399.362:7707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24898 comm="syz.8.8449" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f46598 code=0x7ffc0000 [ 380.152971][ T40] audit: type=1326 audit(1763361399.362:7708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24898 comm="syz.8.8449" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f46598 code=0x7ffc0000 [ 380.160432][ T40] audit: type=1326 audit(1763361399.372:7709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24898 comm="syz.8.8449" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f46598 code=0x7ffc0000 [ 380.167350][ T40] audit: type=1326 audit(1763361399.372:7710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24898 comm="syz.8.8449" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f46598 code=0x7ffc0000 [ 380.174889][ T40] audit: type=1326 audit(1763361399.372:7711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24898 comm="syz.8.8449" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f46598 code=0x7ffc0000 [ 380.184253][ T40] audit: type=1326 audit(1763361399.372:7712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24898 comm="syz.8.8449" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f46598 code=0x7ffc0000 [ 380.193801][ T40] audit: type=1326 audit(1763361399.372:7713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24898 comm="syz.8.8449" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f46598 code=0x7ffc0000 [ 380.201268][ T40] audit: type=1326 audit(1763361399.372:7714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24898 comm="syz.8.8449" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f46598 code=0x7ffc0000 [ 380.428893][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 380.642078][T24932] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8464'. [ 380.646664][T24932] vlan0: left allmulticast mode [ 380.650756][T24932] bridge_slave_0: left allmulticast mode [ 380.779709][T24944] syzkaller1: entered promiscuous mode [ 380.781593][T24944] syzkaller1: entered allmulticast mode [ 381.022235][T24979] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8486'. [ 381.030694][T24981] wireguard: wg0: Could not create IPv4 socket [ 381.185427][T25004] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8498'. [ 381.188889][T25004] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8498'. [ 381.478832][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 381.776330][T25068] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8526'. [ 381.780347][T25068] netlink: 104 bytes leftover after parsing attributes in process `syz.7.8526'. [ 381.783285][T25068] netlink: 104 bytes leftover after parsing attributes in process `syz.7.8526'. [ 382.030912][T25108] netlink: 'syz.1.8544': attribute type 11 has an invalid length. [ 382.508864][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 382.668878][ T24] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 382.717562][T25163] overlayfs: failed to clone upperpath [ 382.741317][T25165] netlink: 'syz.1.8569': attribute type 13 has an invalid length. [ 382.744041][T25165] netlink: 'syz.1.8569': attribute type 17 has an invalid length. [ 382.748479][T25165] gre0: left promiscuous mode [ 382.750790][T25165] gre0: left allmulticast mode [ 382.769619][T25165] sit0: left promiscuous mode [ 382.814537][T25165] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 382.836069][ T24] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 382.842157][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 382.846284][ T24] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 382.851713][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 382.855625][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 382.858843][ T24] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 382.862841][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 382.867041][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 382.872634][ T24] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 382.877329][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 382.883910][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 382.887917][ T24] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 382.892808][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 382.896832][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 382.900549][ T24] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 382.905201][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 382.908545][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 382.912362][ T24] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 382.915954][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 382.923446][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 382.926501][ T24] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 382.930190][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 382.933898][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 382.937782][ T24] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 382.942710][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 382.947776][ T24] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 382.951748][ T24] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 382.955356][ T24] usb 10-1: Product: syz [ 382.957230][ T24] usb 10-1: Manufacturer: syz [ 382.959587][ T24] usb 10-1: SerialNumber: syz [ 382.969693][ T24] usb 10-1: config 0 descriptor?? [ 382.975576][ T24] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 383.184037][ T29] usb 10-1: USB disconnect, device number 25 [ 383.188053][ T29] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 383.391801][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.548965][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 384.538271][T25208] gre0: Master is either lo or non-ether device [ 384.589071][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 385.568914][ T29] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 385.635813][T25259] __nla_validate_parse: 1 callbacks suppressed [ 385.635827][T25259] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8622'. [ 385.638839][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 385.642110][T25259] netlink: 104 bytes leftover after parsing attributes in process `syz.8.8622'. [ 385.646561][T25259] netlink: 104 bytes leftover after parsing attributes in process `syz.8.8622'. [ 385.730872][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.735606][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.739970][ T29] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 385.745531][ T29] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 385.749613][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.755005][ T29] usb 10-1: config 0 descriptor?? [ 386.167873][ T29] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 386.170509][ T29] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 386.173021][ T29] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 386.175615][ T29] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 386.178080][ T29] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 386.180706][ T29] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 386.183184][ T29] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 386.185881][ T29] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 386.188320][ T29] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 386.191039][ T29] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 386.197708][ T29] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 386.422132][ T9] usb 10-1: USB disconnect, device number 26 [ 386.678913][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 387.055854][T25275] IPVS: Unknown mcast interface: hsr0 [ 387.201343][T25288] netlink: 'syz.8.8627': attribute type 21 has an invalid length. [ 387.204724][T25288] netlink: 128 bytes leftover after parsing attributes in process `syz.8.8627'. [ 387.209724][T25288] netlink: 'syz.8.8627': attribute type 4 has an invalid length. [ 387.212666][T25288] netlink: 'syz.8.8627': attribute type 3 has an invalid length. [ 387.215674][T25288] netlink: 3 bytes leftover after parsing attributes in process `syz.8.8627'. [ 387.265827][T25296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8631'. [ 387.373971][T25307] batadv_slave_0: entered promiscuous mode [ 387.719021][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 388.227939][T25385] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.8672'. [ 388.531859][T25416] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8687'. [ 388.642155][T25431] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 388.678567][T25433] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8694'. [ 388.681625][T25433] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8694'. [ 388.748888][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 389.286308][T25479] siw: device registration error -23 [ 389.438482][T25501] netlink: 'syz.5.8724': attribute type 6 has an invalid length. [ 389.443143][T25501] netlink: 'syz.5.8724': attribute type 5 has an invalid length. [ 389.788878][ T6025] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 389.789056][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 389.938944][ T6025] usb 10-1: Using ep0 maxpacket: 8 [ 389.941915][ T6025] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 389.945210][ T6025] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 389.948468][ T6025] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 389.952229][ T6025] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 389.954297][T25539] 9pnet_fd: Insufficient options for proto=fd [ 389.955648][ T6025] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 389.962906][ T6025] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 389.965999][ T6025] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.006777][T25541] pim6reg: entered allmulticast mode [ 390.015827][T25541] pim6reg: left allmulticast mode [ 390.173760][ T6025] usb 10-1: GET_CAPABILITIES returned 0 [ 390.175676][ T6025] usbtmc 10-1:16.0: can't read capabilities [ 390.376951][ T6264] usb 10-1: USB disconnect, device number 27 [ 390.838886][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 391.072609][ T40] kauditd_printk_skb: 1131 callbacks suppressed [ 391.072620][ T40] audit: type=1326 audit(1763361410.312:8846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25564 comm="syz.8.8750" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f46579 code=0x0 [ 391.160738][T25571] __nla_validate_parse: 5 callbacks suppressed [ 391.160750][T25571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8752'. [ 391.652367][T25607] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8767'. [ 391.878906][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 391.904548][T25625] wireguard: wg0: Could not create IPv4 socket [ 392.025737][T25640] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8780'. [ 392.367353][T25686] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8801'. [ 392.451062][T25697] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 392.454347][T10327] Bluetooth: hci4: Frame reassembly failed (-84) [ 392.918884][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 393.463334][T25739] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8822'. [ 393.777301][T25762] overlayfs: failed to clone upperpath [ 393.948866][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 393.983874][T25786] overlayfs: failed to clone upperpath [ 393.989961][T25786] overlayfs: failed to clone upperpath [ 394.052743][T25794] 9pnet_fd: Insufficient options for proto=fd [ 394.508916][ T5950] Bluetooth: hci4: command 0x1003 tx timeout [ 394.508986][ T5303] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 394.791390][T25851] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 394.998897][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 395.109073][ T1459] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 395.261887][ T1459] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.265700][ T1459] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.269177][ T1459] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 395.273464][ T1459] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 395.277338][ T1459] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.282866][ T1459] usb 10-1: config 0 descriptor?? [ 395.343663][T25876] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 395.696882][ T1459] hid_parser_main: 5 callbacks suppressed [ 395.696899][ T1459] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 395.702671][ T1459] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 395.706035][ T1459] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 395.717802][ T1459] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 395.720899][ T1459] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 395.724762][ T1459] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 395.728162][ T1459] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 395.731759][ T1459] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 395.734988][ T1459] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 395.738188][ T1459] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 395.745029][ T1459] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 395.954061][ T1459] usb 10-1: USB disconnect, device number 28 [ 395.955957][T25912] netlink: 80 bytes leftover after parsing attributes in process `syz.8.8901'. [ 395.965072][T25912] netlink: 80 bytes leftover after parsing attributes in process `syz.8.8901'. [ 396.029097][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 396.520815][T25950] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8916'. [ 396.523805][T25950] netlink: 'syz.8.8916': attribute type 1 has an invalid length. [ 396.768710][T25968] Process accounting resumed [ 396.841252][T25979] 9pnet_fd: Insufficient options for proto=fd [ 396.891663][T25984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8933'. [ 397.078884][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 397.114332][T26016] netlink: 80 bytes leftover after parsing attributes in process `syz.1.8947'. [ 397.119850][T26016] netlink: 80 bytes leftover after parsing attributes in process `syz.1.8947'. [ 397.639828][T26062] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8967'. [ 398.051511][ T40] audit: type=1326 audit(1763361417.292:8847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26110 comm="syz.7.8990" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 398.062346][ T40] audit: type=1326 audit(1763361417.292:8848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26110 comm="syz.7.8990" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 398.072828][ T40] audit: type=1326 audit(1763361417.292:8849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26110 comm="syz.7.8990" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 398.083134][ T40] audit: type=1326 audit(1763361417.292:8850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26110 comm="syz.7.8990" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 398.092511][ T40] audit: type=1326 audit(1763361417.292:8851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26110 comm="syz.7.8990" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 398.100773][ T40] audit: type=1326 audit(1763361417.292:8852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26110 comm="syz.7.8990" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 398.110185][ T40] audit: type=1326 audit(1763361417.292:8853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26110 comm="syz.7.8990" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 398.118962][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 398.121581][ T40] audit: type=1326 audit(1763361417.292:8854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26110 comm="syz.7.8990" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 398.132905][ T40] audit: type=1326 audit(1763361417.292:8855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26110 comm="syz.7.8990" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 398.142533][ T40] audit: type=1326 audit(1763361417.302:8856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26110 comm="syz.7.8990" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 398.442104][T26152] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.9010'. [ 398.446001][T26149] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.9010'. [ 398.488157][T26158] bond1 (unregistering): Released all slaves [ 398.493294][T26161] netlink: 'syz.5.9014': attribute type 3 has an invalid length. [ 398.493312][T26161] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9014'. [ 398.927343][T26214] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9039'. [ 398.942430][T26216] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9040'. [ 399.148925][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 399.650158][ T6025] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 399.819164][ T6025] usb 10-1: Using ep0 maxpacket: 8 [ 399.822408][ T6025] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 399.825095][ T6025] usb 10-1: config 179 has no interface number 0 [ 399.827130][ T6025] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 399.838794][ T6025] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 399.843666][ T6025] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 399.848455][ T6025] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 399.858853][ T6025] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 399.864695][ T6025] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 399.868559][ T6025] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.891361][T26255] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 400.112385][ T6025] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:179.65/input/input83 [ 400.188895][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 400.313099][ T6264] usb 10-1: USB disconnect, device number 29 [ 400.313159][ C1] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 400.319844][ C1] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 401.228964][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 401.287947][T26306] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 401.298836][ T34] usb 10-1: new full-speed USB device number 30 using dummy_hcd [ 401.328562][T26309] batadv_slave_1: entered promiscuous mode [ 401.331508][T26308] batadv_slave_1: left promiscuous mode [ 401.450743][ T34] usb 10-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 401.456157][ T34] usb 10-1: config 1 interface 0 has no altsetting 0 [ 401.460299][ T34] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 401.464246][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 401.467728][ T34] usb 10-1: SerialNumber: syz [ 401.471336][T26290] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 401.622009][T26335] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ0 [ 401.678041][T26290] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 401.682367][T26339] ip6_vti0 speed is unknown, defaulting to 1000 [ 401.684464][ T34] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71 [ 401.689719][ T34] usb 10-1: USB disconnect, device number 30 [ 401.723964][T26342] __nla_validate_parse: 1 callbacks suppressed [ 401.723975][T26342] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9098'. [ 401.729293][T26342] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9098'. [ 401.735133][T26342] geneve2: entered promiscuous mode [ 402.175805][T26367] overlayfs: failed to clone upperpath [ 402.217960][T26371] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9111'. [ 402.221313][T26371] netlink: 80 bytes leftover after parsing attributes in process `syz.5.9111'. [ 402.224318][T26371] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9111'. [ 402.227307][T26371] netlink: 80 bytes leftover after parsing attributes in process `syz.5.9111'. [ 402.268893][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 402.280532][T26379] netlink: 7 bytes leftover after parsing attributes in process `syz.1.9115'. [ 402.300402][T26383] 9pnet_fd: Insufficient options for proto=fd [ 402.518845][ T6025] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 402.522650][T26400] overlayfs: failed to clone upperpath [ 402.668833][ T6025] usb 12-1: Using ep0 maxpacket: 32 [ 402.672302][ T6025] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.676570][ T6025] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.680582][ T6025] usb 12-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 402.684539][ T6025] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.690001][ T6025] usb 12-1: config 0 descriptor?? [ 402.751376][T26413] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 403.118918][ T6025] savu 0003:1E7D:2D5A.002B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 403.308859][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 403.360851][ T34] usb 12-1: USB disconnect, device number 9 [ 403.514233][T26460] 9pnet_fd: Insufficient options for proto=fd [ 404.127459][T26487] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 404.131859][T26487] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 404.348825][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 404.944540][T26522] loop6: detected capacity change from 0 to 15 [ 404.953592][T26522] Dev loop6: unable to read RDB block 15 [ 404.956089][T26522] loop6: unable to read partition table [ 404.958375][T26522] loop6: partition table beyond EOD, truncated [ 404.962677][T26522] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 405.349573][T26540] overlayfs: failed to clone lowerpath [ 405.388883][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 406.249998][T26586] tmpfs: Bad value for 'mpol' [ 406.392151][T26604] veth1_to_hsr: entered promiscuous mode [ 406.394235][T26604] macvtap2: entered promiscuous mode [ 406.396250][T26604] macvtap2: entered allmulticast mode [ 406.398482][T26604] veth1_to_hsr: entered allmulticast mode [ 406.414857][T26604] macvtap3: entered promiscuous mode [ 406.417289][T26604] macvtap3: entered allmulticast mode [ 406.427410][T26607] loop5: detected capacity change from 0 to 9599 [ 406.428894][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 406.436934][T26607] loop5: detected capacity change from 9599 to 10455 [ 406.551102][T26614] overlayfs: missing 'lowerdir' [ 406.568880][ T5981] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 406.724775][ T5981] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 406.730180][ T5981] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 406.734815][ T5981] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 406.739883][ T5981] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.746927][T26596] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 406.761119][ T5981] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 406.887175][T26625] syzkaller1: entered promiscuous mode [ 406.890102][T26625] syzkaller1: entered allmulticast mode [ 406.962595][ T5981] usb 10-1: USB disconnect, device number 31 [ 407.286546][T26641] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9233'. [ 407.468913][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 408.052397][T26672] team0 (unregistering): Port device geneve0 removed [ 408.165238][T26683] ip6_vti0 speed is unknown, defaulting to 1000 [ 408.290315][T26692] ip6_vti0 speed is unknown, defaulting to 1000 [ 408.476412][T26683] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9253'. [ 408.508879][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 409.216844][T26745] overlayfs: failed to clone lowerpath [ 409.292379][T26749] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9282'. [ 409.338981][T26754] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9284'. [ 409.342715][T26754] netlink: 'syz.8.9284': attribute type 30 has an invalid length. [ 409.352642][ T80] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.355554][T26754] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9284'. [ 409.356627][ T80] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.360558][T26754] netlink: 'syz.8.9284': attribute type 30 has an invalid length. [ 409.376998][ T80] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.381315][ T80] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.398184][ T40] kauditd_printk_skb: 270 callbacks suppressed [ 409.398201][ T40] audit: type=1326 audit(1763361684.634:9127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26757 comm="syz.1.9286" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 409.411072][ T40] audit: type=1326 audit(1763361684.634:9128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26757 comm="syz.1.9286" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 409.418217][ T40] audit: type=1326 audit(1763361684.644:9129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26757 comm="syz.1.9286" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 409.426260][ T40] audit: type=1326 audit(1763361684.644:9131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26757 comm="syz.1.9286" exe="/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 409.429697][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 409.435369][ T40] audit: type=1326 audit(1763361684.644:9130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26757 comm="syz.1.9286" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 409.437737][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 409.446587][ T40] audit: type=1326 audit(1763361684.644:9132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26757 comm="syz.1.9286" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 409.457853][ T40] audit: type=1326 audit(1763361684.644:9133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26757 comm="syz.1.9286" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 409.466020][ T40] audit: type=1326 audit(1763361684.644:9134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26757 comm="syz.1.9286" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 409.473450][ T40] audit: type=1326 audit(1763361684.644:9136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26757 comm="syz.1.9286" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 409.483676][ T40] audit: type=1326 audit(1763361684.644:9135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26757 comm="syz.1.9286" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 409.500763][T26762] tipc: Enabling of bearer rejected, already enabled [ 409.558947][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 409.631549][T26770] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9292'. [ 409.802387][T26787] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 409.907170][T26799] syzkaller1: entered promiscuous mode [ 409.909793][T26799] syzkaller1: entered allmulticast mode [ 410.037380][T26815] [U] ¹ [ 410.256316][T26843] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.9327'. [ 410.598896][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 411.633507][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 412.668848][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 413.377947][T26864] ip6_vti0 speed is unknown, defaulting to 1000 [ 413.404368][T26892] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9346'. [ 413.407786][T26892] 8021q: VLANs not supported on lo [ 413.487694][T26902] input: syz1 as /devices/virtual/input/input84 [ 413.708914][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 414.330459][T26945] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.9369'. [ 414.574473][T26969] sp0: Synchronizing with TNC [ 414.748854][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 414.852011][T26992] ip6_vti0 speed is unknown, defaulting to 1000 [ 415.081796][T26992] netlink: 32 bytes leftover after parsing attributes in process `syz.8.9390'. [ 415.659734][T27022] atomic_op ffff88802349e198 conn xmit_atomic 0000000000000000 [ 415.788933][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 416.398275][T27044] ªªªªªª: renamed from wg2 (while UP) [ 416.733836][T27079] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9427'. [ 416.738983][T27079] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9427'. [ 416.808921][ T6264] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 416.828886][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 416.848877][ T24] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 416.958929][ T6264] usb 10-1: Using ep0 maxpacket: 8 [ 416.961959][ T6264] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 416.965730][ T6264] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 416.968826][ T6264] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.973786][ T6264] usb 10-1: config 0 descriptor?? [ 417.002042][ T24] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.006921][ T24] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.011365][ T24] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 417.017085][ T24] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 417.020795][ T24] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.025078][ T24] usb 12-1: config 0 descriptor?? [ 417.182794][ T6264] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 417.383805][ T1023] usb 10-1: USB disconnect, device number 32 [ 417.439530][ T24] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 417.835096][T27097] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9434'. [ 417.868865][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 418.651301][ C2] plantronics 0003:047F:FFFF.002C: usb_submit_urb(ctrl) failed: -1 [ 418.918902][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 418.974553][T27147] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 419.286609][T27172] netlink: 360 bytes leftover after parsing attributes in process `syz.8.9466'. [ 419.428908][ T1023] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 419.433652][T27181] Invalid ELF header magic: != ELF [ 419.442001][ T1021] usb 12-1: USB disconnect, device number 10 [ 419.588919][ T1023] usb 10-1: Using ep0 maxpacket: 8 [ 419.592489][ T1023] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 419.597250][ T1023] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 419.602248][ T1023] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.607651][ T1023] usb 10-1: config 0 descriptor?? [ 419.816536][ T1023] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 419.949047][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 420.163777][T27192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9475'. [ 420.988969][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 421.123933][T27236] pim6reg: entered allmulticast mode [ 421.130589][ T24] hid_parser_main: 5 callbacks suppressed [ 421.130607][ T24] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 421.137714][ T24] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 421.306493][T27244] dummy0: entered promiscuous mode [ 421.309151][T27244] bond_slave_0: entered promiscuous mode [ 421.311177][T27244] bond_slave_0: left promiscuous mode [ 421.313297][T27244] dummy0: left promiscuous mode [ 421.925411][T27279] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9514'. [ 422.028894][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 422.206085][ T1021] usb 10-1: USB disconnect, device number 33 [ 422.207148][T27305] dummy0: entered promiscuous mode [ 422.207988][T27305] bond_slave_0: entered promiscuous mode [ 422.214409][T27305] debugfs: 'hsr0' already exists in 'hsr' [ 422.214423][T27305] Cannot create hsr debugfs directory [ 422.214473][T27305] hsr0: Slave B (bond_slave_0) is not up; please bring it up to get a fully working HSR network [ 422.214513][T27305] hsr0: entered promiscuous mode [ 422.260791][ T40] kauditd_printk_skb: 115 callbacks suppressed [ 422.260801][ T40] audit: type=1326 audit(1763361697.504:9252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27307 comm="syz.1.9528" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 422.260922][ T40] audit: type=1326 audit(1763361697.504:9253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27307 comm="syz.1.9528" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 422.263124][ T40] audit: type=1326 audit(1763361697.504:9254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27307 comm="syz.1.9528" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 422.289470][ T40] audit: type=1326 audit(1763361697.504:9255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27307 comm="syz.1.9528" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 422.289520][ T40] audit: type=1326 audit(1763361697.504:9256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27307 comm="syz.1.9528" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 422.307269][ T40] audit: type=1326 audit(1763361697.504:9257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27307 comm="syz.1.9528" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 422.373303][ T40] audit: type=1326 audit(1763361697.614:9258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27307 comm="syz.1.9528" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 422.373406][ T40] audit: type=1326 audit(1763361697.614:9259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27307 comm="syz.1.9528" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 422.471487][T27322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.495813][ T40] audit: type=1326 audit(1763361697.734:9260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27326 comm="syz.7.9533" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x0 [ 422.508054][ T40] audit: type=1326 audit(1763361697.734:9261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27307 comm="syz.1.9528" exe="/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 422.786753][T27340] kvm: apic: phys broadcast and lowest prio [ 423.069166][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 423.372980][T27367] netlink: 'syz.7.9554': attribute type 1 has an invalid length. [ 423.390096][T27367] bond3: entered promiscuous mode [ 423.392262][T27367] bond3: entered allmulticast mode [ 423.413187][T27367] bond3: (slave erspan1): making interface the new active one [ 423.415770][T27367] erspan1: entered promiscuous mode [ 423.417772][T27367] erspan1: entered allmulticast mode [ 423.420740][T27367] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 424.067829][T27408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9571'. [ 424.108925][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 424.405272][T27433] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 424.409748][T27433] overlayfs: failed to clone lowerpath [ 424.417266][T27433] overlayfs: failed to clone upperpath [ 424.630826][ T5950] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 424.639580][ T5950] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 424.644631][ T5950] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 424.648558][ T5950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 424.652372][ T5950] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 424.660149][ T5303] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 424.663211][ T5303] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 424.665986][ T5303] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 424.671114][ T5303] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 424.675486][ T5303] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 424.711858][T27447] ip6_vti0 speed is unknown, defaulting to 1000 [ 424.950836][T27447] chnl_net:caif_netlink_parms(): no params data found [ 425.054968][T27447] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.057508][T27447] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.059965][T27447] bridge_slave_0: entered allmulticast mode [ 425.062581][T27447] bridge_slave_0: entered promiscuous mode [ 425.065755][T27447] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.068124][T27447] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.070471][T27447] bridge_slave_1: entered allmulticast mode [ 425.073055][T27447] bridge_slave_1: entered promiscuous mode [ 425.114356][T27447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.119041][T27447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.167464][T27447] team0: Port device team_slave_0 added [ 425.172829][T27447] team0: Port device team_slave_1 added [ 425.215487][T27447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.222539][T27447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.234331][T27447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.239828][T27447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.242170][T27447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.251939][T27447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.325066][T27493] veth3: entered promiscuous mode [ 425.342032][T27447] hsr_slave_0: entered promiscuous mode [ 425.344305][T27447] hsr_slave_1: entered promiscuous mode [ 425.345649][T27500] netlink: 72 bytes leftover after parsing attributes in process `syz.7.9607'. [ 425.346873][T27447] debugfs: 'hsr0' already exists in 'hsr' [ 425.351578][T27447] Cannot create hsr debugfs directory [ 425.542698][T27447] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 425.549381][T27447] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 425.555021][T27447] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 425.570493][T27447] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 425.621650][T27447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.625204][T27520] netlink: 64 bytes leftover after parsing attributes in process `syz.7.9613'. [ 425.646851][T27447] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.656079][T10327] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.659234][T10327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.669421][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.672024][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.905742][T27447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.080084][T27447] veth0_vlan: entered promiscuous mode [ 426.085084][T27447] veth1_vlan: entered promiscuous mode [ 426.107733][T27447] veth0_macvtap: entered promiscuous mode [ 426.117406][T27447] veth1_macvtap: entered promiscuous mode [ 426.127588][T27447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.135510][T27447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.143997][ T1177] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.149480][ T1177] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.160364][ T1177] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.164542][ T1177] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.229551][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.232971][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.253575][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.256801][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.748939][ T5950] Bluetooth: hci2: command tx timeout [ 427.025036][T27601] netlink: 'syz.7.9645': attribute type 4 has an invalid length. [ 427.033289][T27601] netlink: 'syz.7.9645': attribute type 4 has an invalid length. [ 427.073688][T27605] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 427.081574][T27605] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 428.153367][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 428.153382][ T40] audit: type=1326 audit(1763361959.392:9264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27642 comm="syz.8.9662" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f46579 code=0x0 [ 428.598970][ T1459] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 428.751766][ T1459] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 428.755687][ T1459] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 428.759672][ T1459] usb 12-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 428.762520][ T1459] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 428.765047][ T1459] usb 12-1: SerialNumber: syz [ 428.829396][ T5950] Bluetooth: hci2: command tx timeout [ 428.974542][ T1459] usb 12-1: 0:2 : does not exist [ 428.982495][ T1459] usb 12-1: USB disconnect, device number 11 [ 429.162491][T27677] overlayfs: failed to clone upperpath [ 429.242319][T27685] 9pnet_fd: Insufficient options for proto=fd [ 430.279003][T27778] ip6_vti0 speed is unknown, defaulting to 1000 [ 430.918842][ T5950] Bluetooth: hci2: command tx timeout [ 431.435510][ T6025] libceph: connect (1)[c::]:6789 error -101 [ 431.438538][ T6025] libceph: mon0 (1)[c::]:6789 connect error [ 431.444103][ T6025] libceph: connect (1)[c::]:6789 error -101 [ 431.446216][ T6025] libceph: mon0 (1)[c::]:6789 connect error [ 431.492569][ T6025] libceph: connect (1)[b::]:6789 error -101 [ 431.494896][ T6025] libceph: mon0 (1)[b::]:6789 connect error [ 431.712490][ T6025] libceph: connect (1)[c::]:6789 error -101 [ 431.715258][ T6025] libceph: mon0 (1)[c::]:6789 connect error [ 431.759719][ T6025] libceph: connect (1)[b::]:6789 error -101 [ 431.769325][ T6025] libceph: mon0 (1)[b::]:6789 connect error [ 432.220765][ T6025] libceph: connect (1)[c::]:6789 error -101 [ 432.223183][ T6025] libceph: mon0 (1)[c::]:6789 connect error [ 432.257740][T27817] ceph: No mds server is up or the cluster is laggy [ 432.261938][T27820] ceph: No mds server is up or the cluster is laggy [ 432.289466][ T6025] libceph: connect (1)[b::]:6789 error -101 [ 432.300503][ T6025] libceph: mon0 (1)[b::]:6789 connect error [ 432.989006][ T5950] Bluetooth: hci2: command tx timeout [ 433.780809][T27911] bridge0: port 3(vlan0) entered blocking state [ 433.783842][T27911] bridge0: port 3(vlan0) entered disabled state [ 433.786812][T27911] vlan0: entered allmulticast mode [ 433.789276][T27911] bridge0: entered allmulticast mode [ 433.794226][T27911] vlan0: left allmulticast mode [ 433.796549][T27911] bridge0: left allmulticast mode [ 433.949285][T27923] binder: 27922:27923 ioctl 40046205 0 returned -22 [ 435.631004][T28012] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9816'. [ 435.637422][T28012] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9816'. [ 435.685064][ T40] audit: type=1326 audit(1763361966.922:9265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28015 comm="syz.7.9818" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 435.695811][ T40] audit: type=1326 audit(1763361966.922:9266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28015 comm="syz.7.9818" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 435.706143][ T40] audit: type=1326 audit(1763361966.922:9267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28015 comm="syz.7.9818" exe="/syz-executor" sig=0 arch=40000003 syscall=258 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 435.717729][ T40] audit: type=1326 audit(1763361966.922:9268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28015 comm="syz.7.9818" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 435.726921][ T40] audit: type=1326 audit(1763361966.932:9269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28015 comm="syz.7.9818" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 435.843476][T28031] Invalid ELF header len 11 [ 436.068160][T28043] ip6_vti0 speed is unknown, defaulting to 1000 [ 436.627137][T28065] overlayfs: failed to clone upperpath [ 436.665135][ T40] audit: type=1326 audit(1763361967.902:9270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28066 comm="syz.8.9840" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 436.674153][ T40] audit: type=1326 audit(1763361967.902:9271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28066 comm="syz.8.9840" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 436.683591][ T40] audit: type=1326 audit(1763361967.902:9272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28066 comm="syz.8.9840" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 436.693125][ T40] audit: type=1326 audit(1763361967.902:9273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28066 comm="syz.8.9840" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 436.702017][ T40] audit: type=1326 audit(1763361967.902:9274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28066 comm="syz.8.9840" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 436.755329][T28072] netlink: 'syz.8.9842': attribute type 2 has an invalid length. [ 437.003814][T28098] netlink: 96 bytes leftover after parsing attributes in process `syz.9.9854'. [ 437.065652][T28100] ip6_vti0 speed is unknown, defaulting to 1000 [ 437.361830][T28141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9867'. [ 438.194377][T28152] netlink: 'syz.1.9874': attribute type 1 has an invalid length. [ 438.206829][T28152] 8021q: adding VLAN 0 to HW filter on device bond3 [ 438.245847][T28152] 8021q: adding VLAN 0 to HW filter on device bond3 [ 438.248013][T28152] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 438.255554][T28152] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 438.963914][T28220] ip6_vti0 speed is unknown, defaulting to 1000 [ 439.008417][T28221] netlink: 'syz.1.9910': attribute type 16 has an invalid length. [ 439.011227][T28221] netlink: 'syz.1.9910': attribute type 17 has an invalid length. [ 439.018928][ T1459] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 439.022493][T28221] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 439.111442][ T840] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 439.178834][ T1459] usb 14-1: Using ep0 maxpacket: 16 [ 439.185859][ T1459] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.190449][ T1459] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.195330][ T1459] usb 14-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 439.201798][ T1459] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 439.205632][ T1459] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 439.209274][ T1459] usb 14-1: SerialNumber: syz [ 439.214885][ T1459] hub 14-1:1.0: bad descriptor, ignoring hub [ 439.217742][ T1459] hub 14-1:1.0: probe with driver hub failed with error -5 [ 439.221941][ T1459] cdc_ether 14-1:1.0: probe with driver cdc_ether failed with error -22 [ 439.260453][ T840] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.264745][ T840] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.269828][ T840] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 439.274781][ T840] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 439.278218][ T840] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.283424][ T840] usb 12-1: config 0 descriptor?? [ 439.694984][ T840] plantronics 0003:047F:FFFF.002E: reserved main item tag 0xd [ 439.701799][ T840] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 440.048963][ T1021] usb 14-1: USB disconnect, device number 2 [ 441.572824][T28327] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9946'. [ 441.720177][ T6025] usb 12-1: USB disconnect, device number 12 [ 441.959996][T28353] tls_set_device_offload: netdev not found [ 442.004468][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 442.004484][ T40] audit: type=1326 audit(1763361973.242:9281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28354 comm="syz.1.9961" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 442.016619][ T40] audit: type=1326 audit(1763361973.242:9282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28354 comm="syz.1.9961" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 442.025917][ T40] audit: type=1326 audit(1763361973.242:9283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28354 comm="syz.1.9961" exe="/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 442.035324][ T40] audit: type=1326 audit(1763361973.242:9284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28354 comm="syz.1.9961" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 442.042654][ T40] audit: type=1326 audit(1763361973.242:9285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28354 comm="syz.1.9961" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 442.049758][ T40] audit: type=1326 audit(1763361973.242:9286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28354 comm="syz.1.9961" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 442.056954][ T40] audit: type=1326 audit(1763361973.242:9287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28354 comm="syz.1.9961" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 442.064957][ T40] audit: type=1326 audit(1763361973.242:9288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28354 comm="syz.1.9961" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 442.074316][ T40] audit: type=1326 audit(1763361973.242:9289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28354 comm="syz.1.9961" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 442.084004][ T40] audit: type=1326 audit(1763361973.252:9290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28354 comm="syz.1.9961" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 442.118892][ T6025] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 442.288826][ T6025] usb 12-1: Using ep0 maxpacket: 32 [ 442.294387][ T6025] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.299321][ T6025] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.303424][ T6025] usb 12-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 442.306741][ T6025] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.311827][ T6025] usb 12-1: config 0 descriptor?? [ 442.746483][ T6025] savu 0003:1E7D:2D5A.002F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 443.000255][ T1459] usb 12-1: USB disconnect, device number 13 [ 443.321974][T28410] netlink: 'syz.1.9986': attribute type 4 has an invalid length. [ 443.341656][T28410] netlink: 'syz.1.9986': attribute type 4 has an invalid length. [ 443.387560][T28414] overlayfs: failed to clone lowerpath [ 443.497015][T28428] netlink: 9 bytes leftover after parsing attributes in process `syz.1.9995'. [ 443.500643][T28428] z00ªX¹¦: renamed from gretap0 (while UP) [ 443.505222][T28428] z00ªX¹¦: entered allmulticast mode [ 443.682201][T28443] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10002'. [ 444.188921][ T6028] usb 14-1: new low-speed USB device number 3 using dummy_hcd [ 444.310418][T28479] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10017'. [ 444.350812][ T6028] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 444.353380][ T6028] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 444.357293][ T6028] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 444.361300][ T6028] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 444.365144][ T6028] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 444.369790][ T6028] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 444.372506][ T6028] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 444.376549][ T6028] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 444.381621][ T6028] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 444.386417][ T6028] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 444.392636][ T6028] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 444.395727][ T6028] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 444.399488][ T6028] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 444.403396][ T6028] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 444.408084][ T6028] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 444.415175][ T6028] usb 14-1: string descriptor 0 read error: -22 [ 444.417415][ T6028] usb 14-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 444.420634][ T6028] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.427661][ T6028] adutux 14-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 444.714135][ T840] usb 14-1: USB disconnect, device number 3 [ 444.831433][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.661546][T28555] netlink: 'syz.9.10047': attribute type 4 has an invalid length. [ 445.671567][T28555] netlink: 'syz.9.10047': attribute type 4 has an invalid length. [ 445.804785][T28573] netlink: 830 bytes leftover after parsing attributes in process `syz.1.10055'. [ 445.843704][T28578] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10057'. [ 445.846666][T28578] netlink: 44 bytes leftover after parsing attributes in process `syz.9.10057'. [ 445.960414][T28594] overlayfs: failed to clone upperpath [ 445.977119][T28596] overlayfs: failed to clone upperpath [ 445.986220][T28596] overlayfs: failed to clone upperpath [ 446.386060][T28622] netlink: 'syz.9.10076': attribute type 4 has an invalid length. [ 446.396063][T28622] netlink: 'syz.9.10076': attribute type 4 has an invalid length. [ 446.687492][T28630] ip6_vti0 speed is unknown, defaulting to 1000 [ 446.758250][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.763619][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.185543][T28658] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10088'. [ 447.192271][T28658] tipc: Enabling of bearer rejected, already enabled [ 447.651489][T28675] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 447.729431][T28682] netlink: 'syz.9.10092': attribute type 1 has an invalid length. [ 447.746420][T28682] 8021q: adding VLAN 0 to HW filter on device bond1 [ 447.783617][T28682] bond1: (slave geneve2): making interface the new active one [ 447.792799][T28682] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 449.239212][ T1143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.242753][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.429994][ T5950] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 450.430024][ T5303] Bluetooth: hci4: command 0x1003 tx timeout [ 450.599330][ T1141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.604156][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.440276][T28851] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 451.837182][T28873] 8021q: adding VLAN 0 to HW filter on device bond4 [ 451.840885][T28873] bridge0: port 1(bond4) entered blocking state [ 451.843771][T28873] bridge0: port 1(bond4) entered disabled state [ 451.846541][T28873] bond4: entered allmulticast mode [ 451.856279][T28873] bond4: entered promiscuous mode [ 451.859537][T28873] bridge0: port 1(bond4) entered blocking state [ 451.862789][T28873] bridge0: port 1(bond4) entered forwarding state [ 451.870654][T10327] bridge0: port 1(bond4) entered disabled state [ 452.049376][T28901] netlink: 'syz.8.10190': attribute type 4 has an invalid length. [ 452.057186][T28901] netlink: 'syz.8.10190': attribute type 4 has an invalid length. [ 452.402680][T28919] netfs: Couldn't get user pages (rc=-14) [ 452.404590][T28919] netfs: Zero-sized read [R=6] [ 452.509754][T10327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.512689][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.767210][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 452.767226][ T40] audit: type=1326 audit(1763361984.002:9315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28946 comm="syz.7.10211" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ed579 code=0x0 [ 452.793367][ T40] audit: type=1326 audit(1763361984.032:9316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28934 comm="syz.9.10202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7fc00000 [ 453.413329][ T40] audit: type=1326 audit(1763361984.652:9317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28934 comm="syz.9.10202" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702d579 code=0x7fc00000 [ 453.499220][ T1021] libceph: connect (1)[c::]:6789 error -101 [ 453.502034][ T1021] libceph: mon0 (1)[c::]:6789 connect error [ 453.597697][T28977] ceph: No mds server is up or the cluster is laggy [ 453.724468][T28991] ip6_vti0 speed is unknown, defaulting to 1000 [ 453.755059][T28990] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 453.761369][T28990] kvm: kvm [28988]: vcpu0, guest rIP: 0xf000 Unhandled WRMSR(0x40000074) = 0x0 [ 453.868526][T28999] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.10231'. [ 454.409502][ T40] audit: type=1326 audit(1763361985.652:9318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29041 comm="syz.9.10249" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702d579 code=0x0 [ 454.429494][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.433210][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.241992][T29065] 8021q: adding VLAN 0 to HW filter on device bond1 [ 455.245458][T29065] bridge0: port 3(bond1) entered blocking state [ 455.248535][T29065] bridge0: port 3(bond1) entered disabled state [ 455.252044][T29065] bond1: entered allmulticast mode [ 455.255225][T29065] bond1: entered promiscuous mode [ 455.639005][ T1143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.642081][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.101777][T29119] overlayfs: failed to clone lowerpath [ 456.107091][T29119] overlayfs: failed to clone lowerpath [ 456.243012][ T1459] kernel read not supported for file /dsp (pid: 1459 comm: kworker/3:2) [ 456.388820][T29133] netlink: 'syz.1.10287': attribute type 8 has an invalid length. [ 456.395737][T29133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10287'. [ 456.634097][T29155] netlink: 'syz.9.10298': attribute type 4 has an invalid length. [ 456.737372][T29168] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10303'. [ 456.953328][T29188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.957532][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.324996][T29209] netlink: 48 bytes leftover after parsing attributes in process `syz.9.10321'. [ 457.536703][T29229] netlink: 76 bytes leftover after parsing attributes in process `syz.1.10330'. [ 457.790470][T29249] netlink: 96 bytes leftover after parsing attributes in process `syz.9.10340'. [ 458.269881][ T1141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.272886][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.408420][T29317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10370'. [ 458.554314][ T40] audit: type=1326 audit(458.413:9319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29328 comm="syz.7.10376" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ed579 code=0x0 [ 458.594034][T29337] overlayfs: failed to clone lowerpath [ 458.597612][T29337] overlayfs: failed to clone lowerpath [ 459.293540][ T40] audit: type=1326 audit(459.163:9320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29392 comm="syz.1.10402" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f34579 code=0x0 [ 460.190275][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.193075][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.286445][T29462] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10431'. [ 460.514578][T29488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.518893][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.669084][ T1143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.672387][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.080051][T29455] ceph: No mds server is up or the cluster is laggy [ 461.225799][T29497] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 461.360654][T29508] af_packet: tpacket_rcv: packet too big, clamped from 62 to 4294967286. macoff=82 [ 461.374776][T29510] netlink: 'syz.8.10449': attribute type 4 has an invalid length. [ 461.377552][T29510] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10449'. [ 461.560128][T29532] netlink: 240 bytes leftover after parsing attributes in process `syz.9.10453'. [ 461.676681][T29537] hsr0 (unregistering): left allmulticast mode [ 461.807925][T29544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.812659][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.192726][T29566] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10474'. [ 462.247356][T29573] netlink: 'syz.8.10477': attribute type 2 has an invalid length. [ 463.390515][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.393915][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.178657][T29727] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.10544'. [ 465.357882][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.360717][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.390425][T29786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.395106][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.959233][ T1141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.962539][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.438892][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.442324][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.482478][T29945] input: syz0 as /devices/virtual/input/input86 [ 468.856400][ T40] audit: type=1326 audit(468.723:9321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29966 comm="syz.9.10654" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702d579 code=0x0 [ 469.149515][ T80] net_ratelimit: 2 callbacks suppressed [ 469.149526][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.155080][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.445377][T30002] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10668'. [ 469.546240][T30011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.549314][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.901375][T30031] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 470.440720][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.444592][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.099193][T30115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.103169][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.149682][ T40] audit: type=1326 audit(471.023:9322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30118 comm="syz.1.10718" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f34579 code=0x0 [ 471.448851][ T59] usb 12-1: new high-speed USB device number 14 using dummy_hcd [ 471.610783][ T59] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.614996][ T59] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.618339][ T59] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 471.623500][ T59] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 471.626961][ T59] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.630878][ T59] usb 12-1: config 0 descriptor?? [ 471.709444][ T1177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.041599][ T59] plantronics 0003:047F:FFFF.0030: reserved main item tag 0xe [ 472.044700][ T59] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 472.051661][ T59] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 472.301247][ T29] usb 12-1: USB disconnect, device number 14 [ 472.846209][T30183] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.851367][T30183] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.972092][T30195] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 472.976236][T30195] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 473.264287][ C1] Unknown status report in ack skb [ 473.272465][T30210] "syz.8.10759" (30210) uses obsolete ecb(arc4) skcipher [ 473.314803][T30225] 9pnet_fd: Insufficient options for proto=fd [ 473.358479][T30229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10766'. [ 473.392537][T30229] bond5: entered promiscuous mode [ 473.846678][T30268] netlink: 'syz.1.10782': attribute type 1 has an invalid length. [ 473.869335][T30268] 8021q: adding VLAN 0 to HW filter on device bond6 [ 473.896343][T30268] bond6: (slave geneve2): making interface the new active one [ 473.901622][T30268] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 473.948028][T30273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10784'. [ 474.269116][ T80] net_ratelimit: 3 callbacks suppressed [ 474.269129][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.274343][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.290539][T30308] netlink: 25 bytes leftover after parsing attributes in process `syz.1.10800'. [ 474.433580][T30316] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10804'. [ 474.437403][T30316] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10804'. [ 474.442130][T30316] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10804'. [ 474.445880][T30316] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10804'. [ 474.746450][T30336] overlayfs: failed to clone upperpath [ 474.796000][T30342] overlayfs: failed to clone upperpath [ 474.922370][T30357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.926172][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.975497][T30359] overlayfs: failed to clone lowerpath [ 474.984812][T30362] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10821'. [ 475.539928][T30390] netlink: 'syz.1.10832': attribute type 2 has an invalid length. [ 475.543301][T30390] netlink: 532 bytes leftover after parsing attributes in process `syz.1.10832'. [ 475.549738][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.553793][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.564170][T30390] dummy0 (unregistering): left promiscuous mode [ 475.577523][T30392] overlayfs: failed to clone lowerpath [ 475.996246][ T29] libceph: connect (1)[c::]:6789 error -101 [ 475.999002][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 476.061347][ T59] libceph: connect (1)[c::]:6789 error -101 [ 476.063451][ T59] libceph: mon0 (1)[c::]:6789 connect error [ 476.199486][ T1141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.203307][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.259346][ T29] libceph: connect (1)[c::]:6789 error -101 [ 476.261508][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 476.319508][ T59] libceph: connect (1)[c::]:6789 error -101 [ 476.321604][ T59] libceph: mon0 (1)[c::]:6789 connect error [ 476.769542][ T29] libceph: connect (1)[c::]:6789 error -101 [ 476.772172][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 476.822151][T30428] ceph: No mds server is up or the cluster is laggy [ 476.822174][T30434] ceph: No mds server is up or the cluster is laggy [ 476.839952][ T59] libceph: connect (1)[c::]:6789 error -101 [ 476.840751][ T1141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.842791][ T59] libceph: mon0 (1)[c::]:6789 connect error [ 476.845476][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.948259][T30449] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10864'. [ 477.761308][T30508] input: syz1 as /devices/virtual/input/input87 [ 477.839399][T30517] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10887'. [ 477.841202][T30516] [ 477.843596][T30516] ===================================================== [ 477.843883][T30517] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10887'. [ 477.845865][T30516] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 477.845873][T30516] syzkaller #0 Not tainted [ 477.853798][T30516] ----------------------------------------------------- [ 477.858087][T30516] syz.7.10886/30516 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 477.860710][T30516] ffff88804fc0c8a0 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 477.863538][T30516] [ 477.863538][T30516] and this task is already holding: [ 477.865955][T30516] ffff88806c553028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 477.869323][T30516] which would create a new lock dependency: [ 477.871363][T30516] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 477.874759][T30516] [ 477.874759][T30516] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 477.878330][T30516] (&dev->event_lock#2){..-.}-{3:3} [ 477.878367][T30516] [ 477.878367][T30516] ... which became SOFTIRQ-irq-safe at: [ 477.882833][T30516] lock_acquire+0x179/0x350 [ 477.884459][T30516] _raw_spin_lock_irqsave+0x3a/0x60 [ 477.886103][T30516] input_inject_event+0x9f/0x3b0 [ 477.887792][T30516] led_set_brightness+0x217/0x290 [ 477.889802][T30516] led_trigger_event+0xda/0x270 [ 477.891480][T30516] kbd_bh+0x21b/0x300 [ 477.892890][T30516] tasklet_action_common+0x284/0x400 [ 477.894702][T30516] handle_softirqs+0x219/0x8e0 [ 477.896375][T30516] __irq_exit_rcu+0x109/0x170 [ 477.897986][T30516] irq_exit_rcu+0x9/0x30 [ 477.899420][T30516] sysvec_call_function_single+0xa4/0xc0 [ 477.901465][T30516] asm_sysvec_call_function_single+0x1a/0x20 [ 477.903508][T30516] __tasklet_schedule_common+0x10d/0x190 [ 477.905388][T30516] vt_set_leds_compute_shiftstate+0x76/0x80 [ 477.907491][T30516] redraw_screen+0x542/0x760 [ 477.909215][T30516] complete_change_console+0x110/0x600 [ 477.911031][T30516] change_console+0x1ac/0x560 [ 477.912629][T30516] console_callback+0x1a1/0x4c0 [ 477.914271][T30516] process_one_work+0x9cf/0x1b70 [ 477.915935][T30516] worker_thread+0x6c8/0xf10 [ 477.917533][T30516] kthread+0x3c5/0x780 [ 477.918912][T30516] ret_from_fork+0x675/0x7d0 [ 477.920501][T30516] ret_from_fork_asm+0x1a/0x30 [ 477.922096][T30516] [ 477.922096][T30516] to a SOFTIRQ-irq-unsafe lock: [ 477.924382][T30516] (tasklist_lock){.+.+}-{3:3} [ 477.924398][T30516] [ 477.924398][T30516] ... which became SOFTIRQ-irq-unsafe at: [ 477.928581][T30516] ... [ 477.928586][T30516] lock_acquire+0x179/0x350 [ 477.931068][T30516] _raw_read_lock+0x5f/0x70 [ 477.932755][T30516] __do_wait+0x105/0x890 [ 477.934221][T30516] do_wait+0x21d/0x590 [ 477.935523][T30516] kernel_wait+0x9f/0x160 [ 477.937398][T30516] call_usermodehelper_exec_work+0xf1/0x170 [ 477.939607][T30516] process_one_work+0x9cf/0x1b70 [ 477.941366][T30516] worker_thread+0x6c8/0xf10 [ 477.942919][T30516] kthread+0x3c5/0x780 [ 477.944337][T30516] ret_from_fork+0x675/0x7d0 [ 477.945926][T30516] ret_from_fork_asm+0x1a/0x30 [ 477.947555][T30516] [ 477.947555][T30516] other info that might help us debug this: [ 477.947555][T30516] [ 477.950896][T30516] Chain exists of: [ 477.950896][T30516] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 477.950896][T30516] [ 477.955669][T30516] Possible interrupt unsafe locking scenario: [ 477.955669][T30516] [ 477.959101][T30516] CPU0 CPU1 [ 477.961298][T30516] ---- ---- [ 477.963479][T30516] lock(tasklist_lock); [ 477.965233][T30516] local_irq_disable(); [ 477.967966][T30516] lock(&dev->event_lock#2); [ 477.970930][T30516] lock(&client->buffer_lock); [ 477.973934][T30516] [ 477.975103][T30516] lock(&dev->event_lock#2); [ 477.976738][T30516] [ 477.976738][T30516] *** DEADLOCK *** [ 477.976738][T30516] [ 477.979374][T30516] 7 locks held by syz.7.10886/30516: [ 477.981124][T30516] #0: ffff8880286ff118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x184/0x440 [ 477.984122][T30516] #1: ffff8880204cf230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x3b0 [ 477.987427][T30516] #2: ffffffff8e3c45e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x3b0 [ 477.990529][T30516] #3: ffffffff8e3c45e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x880 [ 477.993608][T30516] #4: ffffffff8e3c45e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x7b/0x390 [ 477.996633][T30516] #5: ffff88806c553028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 477.999982][T30516] #6: ffffffff8e3c45e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 478.002931][T30516] [ 478.002931][T30516] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 478.006287][T30516] -> (&dev->event_lock#2){..-.}-{3:3} { [ 478.008174][T30516] IN-SOFTIRQ-W at: [ 478.009518][T30516] lock_acquire+0x179/0x350 [ 478.011601][T30516] _raw_spin_lock_irqsave+0x3a/0x60 [ 478.013902][T30516] input_inject_event+0x9f/0x3b0 [ 478.016106][T30516] led_set_brightness+0x217/0x290 [ 478.018403][T30516] led_trigger_event+0xda/0x270 [ 478.020664][T30516] kbd_bh+0x21b/0x300 [ 478.022524][T30516] tasklet_action_common+0x284/0x400 [ 478.024834][T30516] handle_softirqs+0x219/0x8e0 [ 478.026970][T30516] __irq_exit_rcu+0x109/0x170 [ 478.029061][T30516] irq_exit_rcu+0x9/0x30 [ 478.031035][T30516] sysvec_call_function_single+0xa4/0xc0 [ 478.033806][T30516] asm_sysvec_call_function_single+0x1a/0x20 [ 478.036980][T30516] __tasklet_schedule_common+0x10d/0x190 [ 478.039428][T30516] vt_set_leds_compute_shiftstate+0x76/0x80 [ 478.041946][T30516] redraw_screen+0x542/0x760 [ 478.044061][T30516] complete_change_console+0x110/0x600 [ 478.046436][T30516] change_console+0x1ac/0x560 [ 478.048569][T30516] console_callback+0x1a1/0x4c0 [ 478.050719][T30516] process_one_work+0x9cf/0x1b70 [ 478.052918][T30516] worker_thread+0x6c8/0xf10 [ 478.055016][T30516] kthread+0x3c5/0x780 [ 478.056996][T30516] ret_from_fork+0x675/0x7d0 [ 478.059110][T30516] ret_from_fork_asm+0x1a/0x30 [ 478.061286][T30516] INITIAL USE at: [ 478.062755][T30516] lock_acquire+0x179/0x350 [ 478.065348][T30516] _raw_spin_lock_irqsave+0x3a/0x60 [ 478.067704][T30516] input_inject_event+0x9f/0x3b0 [ 478.069908][T30516] led_set_brightness+0x217/0x290 [ 478.072531][T30516] kbd_led_trigger_activate+0xcb/0x110 [ 478.074774][T30516] led_trigger_set+0x59a/0xc50 [ 478.076886][T30516] led_trigger_set_default+0x1e0/0x2e0 [ 478.079227][T30516] led_classdev_register_ext+0x7b8/0xa10 [ 478.081636][T30516] input_leds_connect+0x552/0x8e0 [ 478.083844][T30516] input_attach_handler.isra.0+0x176/0x250 [ 478.086426][T30516] input_register_device+0xab9/0x1180 [ 478.088748][T30516] atkbd_connect+0x5f8/0xa40 [ 478.090944][T30516] serio_driver_probe+0x7f/0xd0 [ 478.093587][T30516] really_probe+0x241/0xa90 [ 478.095657][T30516] __driver_probe_device+0x1de/0x440 [ 478.097994][T30516] driver_probe_device+0x4c/0x1b0 [ 478.100195][T30516] __driver_attach+0x283/0x580 [ 478.102282][T30516] bus_for_each_dev+0x13e/0x1d0 [ 478.104366][T30516] serio_handle_event+0x335/0xc30 [ 478.106702][T30516] process_one_work+0x9cf/0x1b70 [ 478.109038][T30516] worker_thread+0x6c8/0xf10 [ 478.111284][T30516] kthread+0x3c5/0x780 [ 478.113387][T30516] ret_from_fork+0x675/0x7d0 [ 478.115536][T30516] ret_from_fork_asm+0x1a/0x30 [ 478.117716][T30516] } [ 478.118597][T30516] ... key at: [] __key.7+0x0/0x40 [ 478.120950][T30516] -> (&client->buffer_lock){....}-{3:3} { [ 478.122823][T30516] INITIAL USE at: [ 478.124211][T30516] lock_acquire+0x179/0x350 [ 478.126268][T30516] _raw_spin_lock+0x2e/0x40 [ 478.128486][T30516] evdev_pass_values+0x10e/0x9b0 [ 478.131120][T30516] evdev_events+0x1bb/0x390 [ 478.133112][T30516] input_pass_values+0x74e/0x880 [ 478.135133][T30516] input_handle_event+0xf00/0x14d0 [ 478.137349][T30516] input_inject_event+0x1e8/0x3b0 [ 478.139462][T30516] evdev_write+0x2e1/0x440 [ 478.141435][T30516] vfs_write+0x2a0/0x11d0 [ 478.143370][T30516] ksys_write+0x1f8/0x250 [ 478.145347][T30516] __do_fast_syscall_32+0x7c/0x300 [ 478.147542][T30516] do_fast_syscall_32+0x32/0x80 [ 478.149633][T30516] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 478.152202][T30516] } [ 478.153067][T30516] ... key at: [] __key.83+0x0/0x40 [ 478.155429][T30516] ... acquired at: [ 478.156726][T30516] _raw_spin_lock+0x2e/0x40 [ 478.158290][T30516] evdev_pass_values+0x10e/0x9b0 [ 478.159976][T30516] evdev_events+0x1bb/0x390 [ 478.161541][T30516] input_pass_values+0x74e/0x880 [ 478.163226][T30516] input_handle_event+0xf00/0x14d0 [ 478.164980][T30516] input_inject_event+0x1e8/0x3b0 [ 478.166717][T30516] evdev_write+0x2e1/0x440 [ 478.168250][T30516] vfs_write+0x2a0/0x11d0 [ 478.169748][T30516] ksys_write+0x1f8/0x250 [ 478.171250][T30516] __do_fast_syscall_32+0x7c/0x300 [ 478.172986][T30516] do_fast_syscall_32+0x32/0x80 [ 478.174653][T30516] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 478.176841][T30516] [ 478.177658][T30516] [ 478.177658][T30516] the dependencies between the lock to be acquired [ 478.177663][T30516] and SOFTIRQ-irq-unsafe lock: [ 478.182026][T30516] -> (tasklist_lock){.+.+}-{3:3} { [ 478.183807][T30516] HARDIRQ-ON-R at: [ 478.185183][T30516] lock_acquire+0x179/0x350 [ 478.187327][T30516] _raw_read_lock+0x5f/0x70 [ 478.189512][T30516] __do_wait+0x105/0x890 [ 478.191535][T30516] do_wait+0x21d/0x590 [ 478.193543][T30516] kernel_wait+0x9f/0x160 [ 478.196103][T30516] call_usermodehelper_exec_work+0xf1/0x170 [ 478.199342][T30516] process_one_work+0x9cf/0x1b70 [ 478.202183][T30516] worker_thread+0x6c8/0xf10 [ 478.204703][T30516] kthread+0x3c5/0x780 [ 478.207249][T30516] ret_from_fork+0x675/0x7d0 [ 478.209938][T30516] ret_from_fork_asm+0x1a/0x30 [ 478.212708][T30516] SOFTIRQ-ON-R at: [ 478.214421][T30516] lock_acquire+0x179/0x350 [ 478.217152][T30516] _raw_read_lock+0x5f/0x70 [ 478.219796][T30516] __do_wait+0x105/0x890 [ 478.222356][T30516] do_wait+0x21d/0x590 [ 478.224860][T30516] kernel_wait+0x9f/0x160 [ 478.227496][T30516] call_usermodehelper_exec_work+0xf1/0x170 [ 478.230715][T30516] process_one_work+0x9cf/0x1b70 [ 478.233478][T30516] worker_thread+0x6c8/0xf10 [ 478.236109][T30516] kthread+0x3c5/0x780 [ 478.238636][T30516] ret_from_fork+0x675/0x7d0 [ 478.241428][T30516] ret_from_fork_asm+0x1a/0x30 [ 478.244106][T30516] INITIAL USE at: [ 478.245768][T30516] lock_acquire+0x179/0x350 [ 478.248144][T30516] _raw_write_lock_irq+0x36/0x50 [ 478.250392][T30516] copy_process+0x4fe3/0x76a0 [ 478.253005][T30516] kernel_clone+0xfc/0x930 [ 478.255530][T30516] user_mode_thread+0xc8/0x110 [ 478.257979][T30516] rest_init+0x23/0x2b0 [ 478.260311][T30516] start_kernel+0x3f6/0x4e0 [ 478.263087][T30516] x86_64_start_reservations+0x18/0x30 [ 478.266239][T30516] x86_64_start_kernel+0x130/0x190 [ 478.269285][T30516] common_startup_64+0x13e/0x148 [ 478.272183][T30516] INITIAL READ USE at: [ 478.274064][T30516] lock_acquire+0x179/0x350 [ 478.277020][T30516] _raw_read_lock+0x5f/0x70 [ 478.279919][T30516] __do_wait+0x105/0x890 [ 478.282730][T30516] do_wait+0x21d/0x590 [ 478.285357][T30516] kernel_wait+0x9f/0x160 [ 478.287980][T30516] call_usermodehelper_exec_work+0xf1/0x170 [ 478.291334][T30516] process_one_work+0x9cf/0x1b70 [ 478.294032][T30516] worker_thread+0x6c8/0xf10 [ 478.296906][T30516] kthread+0x3c5/0x780 [ 478.299649][T30516] ret_from_fork+0x675/0x7d0 [ 478.302405][T30516] ret_from_fork_asm+0x1a/0x30 [ 478.304751][T30516] } [ 478.305764][T30516] ... key at: [] tasklist_lock+0x18/0x40 [ 478.308444][T30516] ... acquired at: [ 478.310103][T30516] _raw_read_lock+0x5f/0x70 [ 478.312054][T30516] send_sigio+0xb8/0x3e0 [ 478.313765][T30516] dnotify_handle_event+0x15e/0x2b0 [ 478.315596][T30516] fsnotify_handle_inode_event.isra.0+0x1e2/0x3f0 [ 478.318207][T30516] fsnotify+0x13d6/0x1dc0 [ 478.320089][T30516] path_openat+0x1b50/0x2cb0 [ 478.322068][T30516] do_filp_open+0x20b/0x470 [ 478.324020][T30516] do_sys_openat2+0x11b/0x1d0 [ 478.326057][T30516] __ia32_compat_sys_openat+0x16d/0x210 [ 478.328410][T30516] __do_fast_syscall_32+0x7c/0x300 [ 478.330282][T30516] do_fast_syscall_32+0x32/0x80 [ 478.331940][T30516] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 478.334099][T30516] [ 478.334912][T30516] -> (&f_owner->lock){....}-{3:3} { [ 478.336704][T30516] INITIAL USE at: [ 478.338053][T30516] lock_acquire+0x179/0x350 [ 478.340113][T30516] _raw_write_lock_irq+0x36/0x50 [ 478.342295][T30516] __f_setown+0x61/0x3c0 [ 478.344279][T30516] generic_setlease+0xef2/0x1300 [ 478.346484][T30516] kernel_setlease+0x106/0x140 [ 478.348612][T30516] vfs_setlease+0x258/0x2d0 [ 478.350668][T30516] fcntl_setlease+0x3ed/0x5a0 [ 478.352776][T30516] do_fcntl+0x751/0x15a0 [ 478.354827][T30516] do_compat_fcntl64+0x367/0x710 [ 478.357056][T30516] __do_fast_syscall_32+0x7c/0x300 [ 478.359279][T30516] do_fast_syscall_32+0x32/0x80 [ 478.361426][T30516] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 478.364026][T30516] INITIAL READ USE at: [ 478.365735][T30516] lock_acquire+0x179/0x350 [ 478.368492][T30516] _raw_read_lock_irqsave+0x74/0x90 [ 478.371491][T30516] send_sigio+0x31/0x3e0 [ 478.373934][T30516] kill_fasync+0x214/0x510 [ 478.376728][T30516] lease_break_callback+0x23/0x30 [ 478.379781][T30516] __break_lease+0x674/0x1810 [ 478.382669][T30516] do_dentry_open+0x91f/0x1530 [ 478.385573][T30516] vfs_open+0x82/0x3f0 [ 478.388314][T30516] path_openat+0x1de4/0x2cb0 [ 478.391195][T30516] do_filp_open+0x20b/0x470 [ 478.394067][T30516] do_sys_openat2+0x11b/0x1d0 [ 478.397100][T30516] __ia32_compat_sys_openat+0x16d/0x210 [ 478.400442][T30516] __do_fast_syscall_32+0x7c/0x300 [ 478.403564][T30516] do_fast_syscall_32+0x32/0x80 [ 478.406500][T30516] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 478.410165][T30516] } [ 478.411335][T30516] ... key at: [] __key.1+0x0/0x40 [ 478.414492][T30516] ... acquired at: [ 478.416196][T30516] _raw_read_lock_irqsave+0x74/0x90 [ 478.418518][T30516] send_sigio+0x31/0x3e0 [ 478.420492][T30516] kill_fasync+0x214/0x510 [ 478.422544][T30516] lease_break_callback+0x23/0x30 [ 478.424837][T30516] __break_lease+0x674/0x1810 [ 478.427001][T30516] do_dentry_open+0x91f/0x1530 [ 478.429193][T30516] vfs_open+0x82/0x3f0 [ 478.431065][T30516] path_openat+0x1de4/0x2cb0 [ 478.433100][T30516] do_filp_open+0x20b/0x470 [ 478.435138][T30516] do_sys_openat2+0x11b/0x1d0 [ 478.437309][T30516] __ia32_compat_sys_openat+0x16d/0x210 [ 478.439738][T30516] __do_fast_syscall_32+0x7c/0x300 [ 478.442033][T30516] do_fast_syscall_32+0x32/0x80 [ 478.444213][T30516] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 478.446821][T30516] [ 478.447797][T30516] -> (&new->fa_lock){....}-{3:3} { [ 478.449955][T30516] INITIAL USE at: [ 478.451593][T30516] lock_acquire+0x179/0x350 [ 478.454135][T30516] _raw_write_lock_irq+0x36/0x50 [ 478.456868][T30516] fasync_remove_entry+0xb2/0x1e0 [ 478.459677][T30516] fasync_helper+0xaf/0xd0 [ 478.462249][T30516] sock_fasync+0x92/0x140 [ 478.464815][T30516] __fput+0x96b/0xb70 [ 478.467256][T30516] task_work_run+0x150/0x240 [ 478.469977][T30516] exit_to_user_mode_loop+0xec/0x130 [ 478.472920][T30516] __do_fast_syscall_32+0x240/0x300 [ 478.475694][T30516] do_fast_syscall_32+0x32/0x80 [ 478.478457][T30516] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 478.481682][T30516] INITIAL READ USE at: [ 478.483533][T30516] lock_acquire+0x179/0x350 [ 478.486388][T30516] _raw_read_lock_irqsave+0x74/0x90 [ 478.489533][T30516] kill_fasync+0x138/0x510 [ 478.492351][T30516] sock_wake_async+0x132/0x160 [ 478.495288][T30516] sk_wake_async+0x102/0x2e0 [ 478.498199][T30516] tcp_rcv_state_process+0x32ea/0x6490 [ 478.501394][T30516] tcp_v4_do_rcv+0x68e/0x10a0 [ 478.504253][T30516] __release_sock+0x361/0x450 [ 478.507172][T30516] release_sock+0x5a/0x220 [ 478.509964][T30516] __inet_stream_connect+0x659/0xf50 [ 478.513047][T30516] inet_stream_connect+0x57/0xa0 [ 478.515926][T30516] __sys_connect_file+0x141/0x1a0 [ 478.518862][T30516] __sys_connect+0x13b/0x160 [ 478.521712][T30516] __ia32_sys_connect+0x71/0xb0 [ 478.524597][T30516] __do_fast_syscall_32+0x7c/0x300 [ 478.527676][T30516] do_fast_syscall_32+0x32/0x80 [ 478.530656][T30516] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 478.534132][T30516] } [ 478.535257][T30516] ... key at: [] __key.0+0x0/0x40 [ 478.538283][T30516] ... acquired at: [ 478.539961][T30516] lock_acquire+0x179/0x350 [ 478.542057][T30516] _raw_read_lock_irqsave+0x74/0x90 [ 478.544413][T30516] kill_fasync+0x138/0x510 [ 478.546489][T30516] evdev_pass_values+0x619/0x9b0 [ 478.548726][T30516] evdev_events+0x1bb/0x390 [ 478.550778][T30516] input_pass_values+0x74e/0x880 [ 478.553018][T30516] input_handle_event+0xf00/0x14d0 [ 478.555330][T30516] input_inject_event+0x1e8/0x3b0 [ 478.557646][T30516] evdev_write+0x2e1/0x440 [ 478.559573][T30516] vfs_write+0x2a0/0x11d0 [ 478.561583][T30516] ksys_write+0x1f8/0x250 [ 478.563597][T30516] __do_fast_syscall_32+0x7c/0x300 [ 478.565927][T30516] do_fast_syscall_32+0x32/0x80 [ 478.568190][T30516] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 478.571026][T30516] [ 478.572111][T30516] [ 478.572111][T30516] stack backtrace: [ 478.574691][T30516] CPU: 0 UID: 0 PID: 30516 Comm: syz.7.10886 Not tainted syzkaller #0 PREEMPT(full) [ 478.574718][T30516] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 478.574729][T30516] Call Trace: [ 478.574738][T30516] [ 478.574746][T30516] dump_stack_lvl+0x116/0x1f0 [ 478.574772][T30516] check_irq_usage+0x7dc/0x920 [ 478.574801][T30516] ? check_path.constprop.0+0x24/0x50 [ 478.574826][T30516] ? __lock_acquire+0x1285/0x1c90 [ 478.574848][T30516] __lock_acquire+0x1285/0x1c90 [ 478.574876][T30516] lock_acquire+0x179/0x350 [ 478.574898][T30516] ? kill_fasync+0x138/0x510 [ 478.574926][T30516] _raw_read_lock_irqsave+0x74/0x90 [ 478.574945][T30516] ? kill_fasync+0x138/0x510 [ 478.574973][T30516] kill_fasync+0x138/0x510 [ 478.574998][T30516] evdev_pass_values+0x619/0x9b0 [ 478.575022][T30516] evdev_events+0x1bb/0x390 [ 478.575042][T30516] input_pass_values+0x74e/0x880 [ 478.575064][T30516] input_handle_event+0xf00/0x14d0 [ 478.575082][T30516] ? _copy_from_user+0x59/0xd0 [ 478.575113][T30516] input_inject_event+0x1e8/0x3b0 [ 478.575135][T30516] evdev_write+0x2e1/0x440 [ 478.575154][T30516] ? __pfx_evdev_write+0x10/0x10 [ 478.575172][T30516] ? common_file_perm+0x1a9/0x340 [ 478.575190][T30516] ? bpf_lsm_file_permission+0x9/0x10 [ 478.575211][T30516] ? security_file_permission+0x71/0x210 [ 478.575230][T30516] ? rw_verify_area+0xcf/0x6c0 [ 478.575246][T30516] ? __pfx_evdev_write+0x10/0x10 [ 478.575263][T30516] vfs_write+0x2a0/0x11d0 [ 478.575284][T30516] ? __pfx_vfs_write+0x10/0x10 [ 478.575301][T30516] ? find_held_lock+0x2b/0x80 [ 478.575318][T30516] ? __fget_files+0x204/0x3c0 [ 478.575337][T30516] ? __fget_files+0x20e/0x3c0 [ 478.575357][T30516] ksys_write+0x1f8/0x250 [ 478.575375][T30516] ? __pfx_ksys_write+0x10/0x10 [ 478.575395][T30516] ? rcu_is_watching+0x12/0xc0 [ 478.575415][T30516] __do_fast_syscall_32+0x7c/0x300 [ 478.575439][T30516] do_fast_syscall_32+0x32/0x80 [ 478.575461][T30516] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 478.575483][T30516] RIP: 0023:0xf70ed579 [ 478.575496][T30516] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 478.575513][T30516] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 478.575530][T30516] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 478.575541][T30516] RDX: 0000000000001068 RSI: 0000000000000000 RDI: 0000000000000000 [ 478.575551][T30516] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 478.575561][T30516] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 478.575571][T30516] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 478.575587][T30516] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 479.079684][ T46] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.238951][ T46] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.398034][ T46] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.487702][ T46] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.550616][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.634235][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.693225][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.733585][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.817638][ T46] bond1: left allmulticast mode [ 479.819485][ T46] bond1: left promiscuous mode [ 479.821157][ T46] bridge0: port 3(bond1) entered disabled state [ 479.824046][ T46] bridge_slave_1: left allmulticast mode [ 479.825936][ T46] bridge_slave_1: left promiscuous mode [ 479.827896][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.830994][ T46] bridge_slave_0: left allmulticast mode [ 479.832880][ T46] bridge_slave_0: left promiscuous mode [ 479.835036][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.840505][ T46] bond4: left allmulticast mode [ 479.842490][ T46] bond4: left promiscuous mode [ 479.844597][ T46] bridge0: port 1(bond4) entered disabled state [ 480.029549][ T1145] net_ratelimit: 1 callbacks suppressed [ 480.029566][ T1145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.035472][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.294401][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.298170][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.301582][ T46] bond0 (unregistering): Released all slaves [ 480.392893][ T46] bond1 (unregistering): Released all slaves [ 480.441335][ T1145] smc: removing ib device syz2 [ 480.537988][ T46] bond6 (unregistering): (slave geneve2): Releasing active interface [ 480.759659][ T46] bond0 (unregistering): Released all slaves [ 480.763481][ T46] bond1 (unregistering): Released all slaves [ 480.861291][ T46] bond2 (unregistering): Released all slaves [ 480.940741][ T46] bond3 (unregistering): Released all slaves [ 481.032164][ T46] bond4 (unregistering): Released all slaves [ 481.035955][ T46] bond5 (unregistering): Released all slaves [ 481.135088][ T46] bond6 (unregistering): Released all slaves [ 481.138929][ T1459] ip6_vti0 speed is unknown, defaulting to 1000 [ 481.141285][ T1459] syz2: Port: 1 Link DOWN [ 481.297578][ T46] tipc: Disabling bearer [ 481.299635][ T46] tipc: Left network mode [ 481.319244][ T1177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.322744][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.326681][ T46] tipc: Disabling bearer [ 481.328544][ T46] tipc: Disabling bearer [ 481.330475][ T46] tipc: Left network mode [ 481.832928][ T46] hsr_slave_0: left promiscuous mode [ 481.835688][ T46] hsr_slave_1: left promiscuous mode [ 481.838362][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.841514][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.845080][ T46] bond_slave_0: left promiscuous mode [ 481.850681][ T46] veth1_to_hsr: left allmulticast mode [ 481.852772][ T46] veth1_to_hsr: left promiscuous mode [ 481.854560][ T46] veth1_macvtap: left promiscuous mode [ 481.949033][ T1145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.951684][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.464651][ T46] team0 (unregistering): Port device team_slave_1 removed [ 482.547750][ T46] team0 (unregistering): Port device team_slave_0 removed [ 483.112605][ T46] pim6reg (unregistering): left allmulticast mode [ 485.789732][ T1141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.792555][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.833194][ T46] IPVS: stop unused estimator thread 0... [ 485.835440][ T46] IPVS: stop unused estimator thread 0... [ 485.893182][ T46] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.932699][ T46] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.982470][ T46] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.051951][ T46] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.120496][ T46] bridge_slave_1: left allmulticast mode [ 486.122155][ T46] bridge_slave_1: left promiscuous mode [ 486.124004][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.127094][ T46] bridge_slave_0: left allmulticast mode [ 486.129075][ T46] bridge_slave_0: left promiscuous mode [ 486.130943][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.181500][ T46] bond1 (unregistering): (slave geneve2): Releasing active interface [ 486.304730][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.309811][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.314286][ T46] bond0 (unregistering): Released all slaves [ 486.412101][ T46] bond1 (unregistering): Released all slaves [ 486.744558][ T46] hsr_slave_0: left promiscuous mode [ 486.747283][ T46] hsr_slave_1: left promiscuous mode [ 486.750015][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.752767][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.756378][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.759827][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.764842][ T46] veth1_macvtap: left promiscuous mode [ 486.767289][ T46] veth0_macvtap: left promiscuous mode [ 486.769525][ T46] veth1_vlan: left promiscuous mode [ 486.771316][ T46] veth0_vlan: left promiscuous mode [ 486.968384][ T46] team0 (unregistering): Port device team_slave_1 removed [ 487.018250][ T46] team0 (unregistering): Port device team_slave_0 removed [ 487.079121][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.082643][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.709091][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.712636][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog VM DIAGNOSIS: 06:17:23 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85269695 RDI=ffffffff9adc5de0 RBP=ffffffff9adc5da0 RSP=ffffc90002f272f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000030 R14=ffffffff9adc5da0 R15=ffffffff85269630 RIP=ffffffff852696bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809780d000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f747f0b8 CR3=00000000761dc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffff00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88802b242520 RCX=ffffffff81b053c1 RDX=ffff8880280f2480 RSI=ffffffff81b0539b RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90003ccf4a8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=ffffed10056484a5 R14=0000000000000001 R15=0000000000000000 RIP=ffffffff81b0539d RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809790d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73748ac CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000004fc00000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff84aaaa36 RDX=ffff888024588000 RSI=0000000000000010 RDI=0000000000000001 RBP=ffffffff8bf09ac0 RSP=ffffc900037df180 R8 =0000000000000001 R9 =0000000000000010 R10=0000000000000010 R11=0000000000000000 R12=0000000000000010 R13=0000000000000001 R14=0000000000000003 R15=ffffffff8bf09f51 RIP=ffffffff81bc51a2 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fa23d588300 ffffffff 00c00000 GS =0000 ffff888097a0d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055895fa93000 CR3=000000004b176000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000002a90 0000001000000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000008060201 03e6000800020800 140800060070ec0c 0000021c00000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 aaaaaaaa01ffffff fffffffffff50815 8003000800010000 02080604013fba38 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800000201000000 0806060101bc1608 00300302d402002e 0300000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001ff ffffffffffffffe5 0814030280020012 0303fc0200100300 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 048800080302b8c4 0484000403140400 0003048c08000208 00140800060270e8 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8200169803004080 8082001698031402 001696033c020016 9403000484001690 ZMM25=45f3dea645f3dea6 45f3dea645f3dea6 45f3dea645f3dea6 45f3dea645f3dea6 45f3dea645f3dea6 45f3dea645f3dea6 45f3dea645f3dea6 45f3dea645f3dea6 ZMM26=6168cb9d6168cb9d 6168cb9d6168cb9d 6168cb9d6168cb9d 6168cb9d6168cb9d 6168cb9d6168cb9d 6168cb9d6168cb9d 6168cb9d6168cb9d 6168cb9d6168cb9d ZMM27=be428a94be428a94 be428a94be428a94 be428a94be428a94 be428a94be428a94 be428a94be428a94 be428a94be428a94 be428a94be428a94 be428a94be428a94 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=c23b0000c23b0000 c23b0000c23b0000 c23b0000c23b0000 c23b0000c23b0000 c23b0000c23b0000 c23b0000c23b0000 c23b0000c23b0000 c23b0000c23b0000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff822fa52d RDX=ffff888022aaa480 RSI=ffffffff82089149 RDI=ffff888022aaa904 RBP=0400000000000040 RSP=ffffc90002c7f800 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000007c7b R12=00000000f6370000 R13=ffff88806b022b80 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff81bc5821 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097b0d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000034011ffc CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000