last executing test programs: 9.190156112s ago: executing program 1 (id=691): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r5, &(0x7f0000002980)=[{&(0x7f00000003c0)="8b", 0x1}, {&(0x7f00000008c0)="dd52e3", 0x3}], 0x2) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x163d02) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r8, @ANYRES32, @ANYBLOB="05"], 0x10) close(0xffffffffffffffff) close(0x4) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004240)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r9}, 0x38) openat$nvram(0xffffff9c, &(0x7f00000006c0), 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={&(0x7f0000000000), &(0x7f0000000040)=""/213, &(0x7f0000000140), &(0x7f0000000180), 0x3, r9}, 0x38) 5.941565388s ago: executing program 1 (id=697): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048800) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x161d02) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setgroups(0x0, 0x0) r4 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xfffffffd, 0x1000, 0x0, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r9 = syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x1bd, 0x0, 0x0, 0x1000, 0xffffffff, r1, 0x0, 0x1}}}, &(0x7f00000004c0)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) statx(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x800, 0x7ff, &(0x7f0000000740)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@empty, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f00000062c0)=0xe4) r12 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r9, 0x2) syz_ublk_setup_queues(r12, r11, &(0x7f0000000540)={0x0, 0xfa81, 0x0, 0x3, 0x28e, 0x0, r5}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8c3, 0x1000, 0x2, 0x1af, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xddca, 0x2, 0x0, 0x330, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x8, 0x0, 0x20, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x4, 0x0, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r12, 0xc0107524, 0x0, 0x0, 0x0, 0x1, {0x10}, 0x0, r10, '\x00', {0x2, 0x79, 0x0, 0x0}}, &(0x7f0000001fc0)) 5.940936383s ago: executing program 3 (id=699): pipe(0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x804c040}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000500)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={r4, 0xdbb, 0x3ff}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="f4050000050000006110880000fcff009500000000000000"], 0x0, 0xd, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e0b031120"], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000400)=0x9f, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40800) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) accept4(r6, 0x0, 0x0, 0x80000) 5.919186813s ago: executing program 3 (id=701): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) write$nci(r4, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 5.868528517s ago: executing program 0 (id=702): connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0xfffffffe}, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x20, 0x10, 0x401, 0x70bd25, 0x40000, {0x0, 0x0, 0x0, 0x0, 0x503}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x6) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r5 = syz_ublk_setup_io_uring(0x1b1d, &(0x7f0000000080)={0x0, 0x1c3f, 0x10000, 0x2, 0xf5}, &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(0x0, 0x782, 0x1000002, 0x12, r5, 0x8000000) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$nfc_llcp(r6, 0x118, 0x1, &(0x7f00000000c0)=""/222, 0xde) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x0, 0x3, 0x2, 0x0, 0x2}) socket$inet6_tcp(0xa, 0x1, 0x0) 4.566262599s ago: executing program 3 (id=703): prctl$PR_SET_MM(0x23, 0xb, &(0x7f00002d5000/0x2000)=nil) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$vicodec0(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket(0x2b, 0x1, 0x1) sendmmsg$sock(r2, &(0x7f0000001280)=[{{&(0x7f0000000240)=@in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x80, 0x0}}], 0xa19, 0x20040800) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r1, 0x379c5000) r3 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r3, 0x0, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x3b, 0x800000000004}, &(0x7f00000002c0)) fcntl$lock(r2, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0xd}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) clock_nanosleep(0x2, 0x0, 0x0, 0xfffffffffffffffe) socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$unix(r2, &(0x7f0000007cc0)=[{{0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000b40)=[@cred={{0x18}}], 0x18, 0x4008050}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000010}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008000}}], 0x4, 0x1) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x2, 0x86, 0x2}) 4.511608864s ago: executing program 3 (id=704): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x30}, 0xa, 0x0, 0x1, 0x6, 0xbc, 0x5}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = socket$kcm(0x23, 0x5, 0x0) listen(r3, 0x800) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) sendto$phonet(r5, 0x0, 0x0, 0x80, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x80000) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000003c0)={0xfff9, 0xe38b, 0xffff, 0x40}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0xc005}, 0x4000890) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000200), &(0x7f0000000240)=0x8) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0xd, 0x68c80) ioctl$VIDIOC_S_EDID(r6, 0xc0285629, &(0x7f00000008c0)={0x0, 0x8, 0xf, '\x00', &(0x7f0000000880)=0x5}) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) 4.364192773s ago: executing program 0 (id=706): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r1, &(0x7f0000000600)='dir .', 0x5) write(r1, &(0x7f0000000700)='bind', 0x4) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, &(0x7f0000000140)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r2, 0xc0106441, &(0x7f00000001c0)={0x0, 0x0, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r4}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, 0x0) close(r0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000003000)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_READ_UNCORRECTED_BLOCKS(r8, 0x80046f49, &(0x7f0000000480)) close_range(r7, 0xffffffffffffffff, 0x0) 4.159577181s ago: executing program 1 (id=707): kexec_load(0x5, 0x6, &(0x7f0000000480)=[{&(0x7f0000000000), 0x0, 0x0, 0x3}, {&(0x7f0000000040)="8f9b", 0x2, 0x7f, 0x5}, {&(0x7f0000000100)="4690d921ed257ab9956a77f6ba44e4459a518fe17f1a4381e2248855d0658a47395e4802c26b4720", 0x28, 0x5, 0x671f}, {&(0x7f0000000140)="cecf30e51940cff1cdf084767d8e1808faa5121a7e0e4d6a2f57eb2ce72f9034adf8ed99f5c648a7024d5dc6c9638562205c4d8bfc919658628cea7528bf80b25bd1f6848c505e82f1ca9f1676af1317ddc07623a7ce94c20b91c44887168ac9aa2e2eb27403f545f6ceb7481a9bba9e9a3a32cac2472f6c2ebc42929fd61f9762a5dc5c97240bf5d09f1e44e373491f828e3c80c694e8cfde8d43d540fbf05e089252ebe5b8c2015532c938cf60919e55fcf4453c5fa76389f90852ab540d4a97e9a2bb41e31693ed08938f033bd744576a53d4dadfac8ad3b6ad80af2e", 0xde, 0x8, 0x6}, {&(0x7f0000000300)="8f19a9a3eb697d3986ee375ca792366e6db3220c7b991a452528e57c2e5cb02ae9d31fb50b9973398010e1f884f155b9816834d0f0a9d54619bca8f466e72d4e45c61a7f3cfe4894c4f1a99f8288c6a3c07ccc60c24771c990acd7fcf55c685f2649e473e3926b3ab5cf4a5c4020e7f3f44aca403afc1e0821f9bee13045c6d49b444d47bbd97a6d2e119048bd3aa9926f935092acba247292b9ee72f0176b7d7b306698d9a09ad2cebb938c4ec4bbcdcb32e63fd4ef9ea0799f849d010008079df1ebcb54670248c737", 0xca, 0x3db, 0xfffffd6b}, {0x0, 0x0, 0x9, 0x5}], 0xa0000) socket$nl_generic(0x10, 0x3, 0x10) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8971, &(0x7f0000000000)={'netdevsim0\x00', @remote}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000040)) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r2) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x1) r6 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x3) unshare(0x2c060000) unshare(0x2a060400) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000000), 0x10) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) io_getevents(0x0, 0x2, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socket$inet6(0xa, 0x2, 0x6) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x28011, r5, 0x100000) setsockopt$sock_int(r6, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r4, 0xc0207511, &(0x7f0000000240)={0x0, 0xffff, 0x0, 0x0, 0x0}) prlimit64(r7, 0xc, &(0x7f00000002c0)={0x2, 0xfffffff7}, &(0x7f0000000340)) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002f010000100001800a000200626f6e6430000000140002800800010000000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3.807872233s ago: executing program 0 (id=709): pipe(0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x804c040}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000500)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={r4, 0xdbb, 0x3ff}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="f4050000050000006110880000fcff009500000000000000"], 0x0, 0xd, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e0b031120"], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000400)=0x9f, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40800) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) accept4(r6, 0x0, 0x0, 0x80000) 3.640935666s ago: executing program 0 (id=710): pipe(0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x804c040}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000500)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={r4, 0xdbb, 0x3ff}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="f4050000050000006110880000fcff009500000000000000"], 0x0, 0xd, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e0b031120"], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000400)=0x9f, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40800) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x80000) 3.266138715s ago: executing program 0 (id=711): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000000280)='GPL\x00') r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, 0x0}}], 0x2, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) getpriority(0x0, r0) r4 = syz_open_dev$video(&(0x7f0000000080), 0x8003, 0x105580) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f0000000100)={0xe000000, 0x52424752, 0xf00, 0x870, 0x2, @stepwise={{0x1fb, 0xfffffff7}, {0x100, 0x5}, {0x2, 0x10001}}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x2a694b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) 2.965819422s ago: executing program 2 (id=712): prctl$PR_SET_MM(0x23, 0xb, &(0x7f00002d5000/0x2000)=nil) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$vicodec0(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket(0x2b, 0x1, 0x1) sendmmsg$sock(r2, &(0x7f0000001280)=[{{&(0x7f0000000240)=@in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x80, 0x0}}], 0xa19, 0x20040800) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000180)={{0x87, @remote, 0x4e24, 0x3, 'rr\x00', 0x1b, 0x1, 0x5f}, {@multicast1, 0x4e23, 0x1, 0x5, 0x3, 0x8}}, 0x44) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r1, 0x379c5000) r3 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r3, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f00000002c0)) fcntl$lock(r2, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0xd}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) clock_nanosleep(0x2, 0x0, 0x0, 0xfffffffffffffffe) socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$unix(r2, &(0x7f0000007cc0)=[{{0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000b40)=[@cred={{0x18}}], 0x18, 0x4008050}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000010}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008000}}], 0x4, 0x1) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x2, 0x86, 0x2}) 2.918407503s ago: executing program 2 (id=713): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x19, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xd}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r2, 0x0, 0x4004) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0xfe, 0x7fff0006}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x1000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=ANY=[@ANYBLOB="4c060000", @ANYRES16=r4, @ANYBLOB="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"], 0x64c}, 0x1, 0x0, 0x0, 0xc004}, 0x40001) r5 = socket$nl_generic(0x10, 0x3, 0x10) writev(r5, &(0x7f0000000200), 0x20) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x67) mount$binder(0x0, &(0x7f00000021c0)='.\x00', &(0x7f0000002200), 0x1200850, &(0x7f0000002240)={[{@stats}]}) 2.736307784s ago: executing program 1 (id=714): socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x4, 0x7fff, 0x3, 0x400000000], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket(0x2a, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setns(0xc9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f00000010c0)={0xb, {"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", 0x1000}}, 0x1006) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0xffe) 2.192447025s ago: executing program 2 (id=715): socket$packet(0x11, 0x2, 0x300) openat$vmci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='status\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000080)={0x19, 0x10, 0x19, 0x10, 0x3, 0x2, 0x2, 0xac, 0xffffffffffffffff}) readv(r1, &(0x7f0000000000), 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x52) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0xb3b54c18e0590239, 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = syz_ublk_setup_io_uring(0x1a, &(0x7f0000000040)={0x0, 0x1a16, 0x0, 0x6, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x92cc, 0x800, 0x3, 0x80000258, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2888, 0x2100, 0x11c, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e4, 0x2000, 0x1, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xefa7, 0x0, 0x2, 0x1f0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x502d, 0x80000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x755, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 2.127479289s ago: executing program 0 (id=716): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048800) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x161d02) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setgroups(0x0, 0x0) r4 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xfffffffd, 0x1000, 0x0, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r9 = syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x1bd, 0x0, 0x0, 0x1000, 0xffffffff, r1, 0x0, 0x1}}}, &(0x7f00000004c0)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) statx(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x800, 0x7ff, &(0x7f0000000740)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@empty, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f00000062c0)=0xe4) r12 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r9, 0x2) syz_ublk_setup_queues(r12, r11, &(0x7f0000000540)={0x0, 0xfa81, 0x0, 0x3, 0x28e, 0x0, r5}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8c3, 0x1000, 0x2, 0x1af, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xddca, 0x2, 0x0, 0x330, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x8, 0x0, 0x20, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x4, 0x0, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r12, 0xc0107524, 0x0, 0x0, 0x0, 0x1, {0x10}, 0x0, r10, '\x00', {0x2, 0x79, 0x0, 0x0}}, &(0x7f0000001fc0)) 2.099881506s ago: executing program 3 (id=717): socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='1', 0x1) socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000d00)='krb5\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 1.095401414s ago: executing program 3 (id=718): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000340)=0x3) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) setreuid(0xee00, 0x0) write$sequencer(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_NAPI(r2, 0x1c, &(0x7f0000000200), 0x1) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x1200004, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x13) chdir(0x0) syz_io_uring_setup(0x4b5, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000180)={0x0, 0x1, r0, 0x5, 0x80000}) unshare(0x6a040000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, 0x2, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_STATUS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x200000c0) 426.669443ms ago: executing program 2 (id=719): pipe(0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x804c040}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000500)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={r4, 0xdbb, 0x3ff}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="f4050000050000006110880000fcff009500000000000000"], 0x0, 0xd, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e0b031120"], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000400)=0x9f, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40800) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x80000) 287.103104ms ago: executing program 2 (id=720): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x350, 0x3d8, 0x3d8, 0x350, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1dc, 0x244, 0x0, {}, [@common=@rt={{0x138}, {0x6, [0x400, 0x9], 0x1109442d, 0x2, 0x7, [@private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x40}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @local, @local, @rand_addr=' \x01\x00', @private0, @private1, @local, @empty, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback], 0xfc}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xb, 0x911, 0x0, 0x5, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, [0x0, 0x0, 0xff, 0xffffffff], [0xff, 0xff000000, 0x0, 0xff000000], 'netdevsim0\x00', 'ip_vti0\x00', {}, {0xff}, 0x21, 0xf4, 0x0, 0x5}, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1d, 0x0, 0xfffffffc, 0x0, 'syz1\x00', 'syz0\x00', {0x9}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x474) syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7}) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x534, 0x3e8, 0x288, 0x0, 0x354, 0x354, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x6, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x1c4, 0x1f4, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0xff, 0xff, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x2a}, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffffff], 0x4d2, 0x34ff, 0x4, 0x1, 0xf301d94a6ccd76a1, 0x1}, {@ipv4=@empty, [0xff, 0xff000000, 0xff, 0xffffff00], @ipv4=@loopback, [0xff000000, 0xff, 0x0, 0xffffffff], 0x4d6, 0x34ff, 0x2c, 0x1, 0x6}, {@ipv6=@mcast2, [0x13139661c108bed2, 0xffffffff], @ipv6=@local, [0xffffffff, 0x0, 0x0, 0xff], 0x9, 0x3502, 0x0, 0x1, 0x0, 0xb}, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], @ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff000000], 0x4d6, 0x3503, 0x6cab86d5531856f4, 0x0, 0x8, 0xc}]}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x3, @remote, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 0x3, 0x7, [0x23, 0x40, 0x6, 0x26, 0x25, 0x14, 0x2e, 0xd, 0xf, 0x6, 0xd, 0x25, 0xd, 0x3c, 0x2e, 0x2d], 0x1, 0xa50, 0xfffffffc}}}, {{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0x0, 'macvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2f, 0x1, 0x8}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x7}}]}, @unspec=@CHECKSUM={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x590) 55.182981ms ago: executing program 1 (id=721): prctl$PR_SET_MM(0x23, 0xb, &(0x7f00002d5000/0x2000)=nil) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$vicodec0(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket(0x2b, 0x1, 0x1) sendmmsg$sock(r2, &(0x7f0000001280)=[{{&(0x7f0000000240)=@in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x80, 0x0}}], 0xa19, 0x20040800) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000180)={{0x87, @remote, 0x4e24, 0x3, 'rr\x00', 0x1b, 0x1, 0x5f}, {@multicast1, 0x4e23, 0x1, 0x5, 0x3, 0x8}}, 0x44) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r1, 0x379c5000) r3 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r3, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f00000002c0)) fcntl$lock(r2, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0xd}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) clock_nanosleep(0x2, 0x0, 0x0, 0xfffffffffffffffe) socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$unix(r2, &(0x7f0000007cc0)=[{{0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000b40)=[@cred={{0x18}}], 0x18, 0x4008050}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000010}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008000}}], 0x4, 0x1) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x2, 0x86, 0x2}) 0s ago: executing program 1 (id=722): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024001000000080001400000000014000000110001"], 0x68}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/tcp\x00') read$FUSE(r2, &(0x7f00000003c0)={0x2020}, 0x2020) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000002080)={0x1f, 0x0, @any, 0xa}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002440)=ANY=[@ANYRES32=r3, @ANYRESHEX=r1], 0x80}}, 0x480d1) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="20000000170a0101"], 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x800) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) utime(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, 0x0, 0x404000c) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@newtfilter={0x74, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbf, {0x0, 0x0, 0x0, r9, {0x5, 0x3da48c8682330ab8}, {0x0, 0x1}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xffff, 0x1, 0x200}, {0x1, 0x400, 0x10, 0x0, 0x4, 0x2, 0x2}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x5, 0x1, 0x1}, {0x4, 0x1, 0x7, 0x2, 0x5, 0x1, 0x1}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x7, r6, 0x41}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)='t', 0x1}], 0x1}, 0x0) kernel console output (not intermixed with test programs): m3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.820304][ T30] usb 38-1: device descriptor read/8, error -110 [ 99.920688][ T5886] usbhid 5-1:0.0: can't add hid device: -71 [ 99.920815][ T5886] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 99.937286][ T5886] usb 5-1: USB disconnect, device number 3 [ 100.229872][ T30] usb usb38-port1: attempt power cycle [ 100.844869][ T30] usb usb38-port1: unable to enumerate USB device [ 101.589606][ T70] IPVS: starting estimator thread 0... [ 101.643914][ T6354] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 101.644747][ T6354] i2c i2c-0: delete_device: Can't find device in list [ 101.678522][ T6352] IPVS: using max 43 ests per chain, 103200 per kthread [ 101.848179][ T25] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 102.010483][ T25] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 102.011427][ T25] usb 8-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 102.011446][ T25] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.013646][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 102.013666][ T25] usb 8-1: SerialNumber: syz [ 102.232993][ T6349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.238445][ T6349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.263353][ T25] usb 8-1: 0:2 : does not exist [ 102.302955][ T25] usb 8-1: USB disconnect, device number 2 [ 102.329184][ T5746] udevd[5746]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.961907][ T25] e1000 0000:00:06.0 eth0: Reset adapter [ 103.139185][ T5830] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 103.208693][ T6376] IPv6: NLM_F_CREATE should be specified when creating new route [ 103.318515][ T5830] usb 7-1: Using ep0 maxpacket: 32 [ 103.325791][ T5830] usb 7-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 103.335479][ T5830] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.340537][ T5830] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.359342][ T5830] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.363939][ T5830] usb 7-1: Product: syz [ 103.366223][ T5830] usb 7-1: Manufacturer: syz [ 103.368758][ T5830] usb 7-1: SerialNumber: syz [ 103.372594][ T5742] Bluetooth: hci3: ISO packet too small [ 103.485122][ T6357] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 103.613261][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.99'. [ 103.651447][ T75] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 103.780243][ T42] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 103.871562][ T6366] pim6reg: entered allmulticast mode [ 103.874036][ T6368] pim6reg: left allmulticast mode [ 104.748481][ T6416] block2mtd: error: cannot open device /dev/loop0 [ 104.774863][ T5830] usb 7-1: USB disconnect, device number 2 [ 105.899308][ T42] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 112.784453][ T6494] zram0: detected capacity change from 0 to 8 [ 112.787345][ T6491] evm: overlay not supported [ 114.825121][ T6513] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.947756][ T43] audit: type=1800 audit(1788479903.901:6): pid=6516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.115" name="idProduct" dev="configfs" ino=12780 res=0 errno=0 [ 115.007168][ T6513] CIFS mount error: No usable UNC path provided in device string! [ 115.007168][ T6513] [ 115.007226][ T6513] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 115.404379][ T6518] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.499421][ T75] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 115.555964][ T6518] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.699991][ T75] usb 8-1: Using ep0 maxpacket: 32 [ 115.705642][ T75] usb 8-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 115.757421][ T75] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.762699][ T75] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.855100][ T75] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.855152][ T75] usb 8-1: Product: syz [ 115.855192][ T75] usb 8-1: Manufacturer: syz [ 115.863285][ T75] usb 8-1: SerialNumber: syz [ 115.920811][ T6518] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.996662][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.030501][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.030551][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.030749][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.082978][ T6524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.116'. [ 116.890132][ T75] usb 8-1: USB disconnect, device number 3 [ 116.895794][ T6542] IPv6: NLM_F_CREATE should be specified when creating new route [ 116.912462][ T5742] Bluetooth: hci2: ISO packet too small [ 117.015608][ T6546] input: syz0 as /devices/virtual/input/input6 [ 117.084539][ T6549] netlink: 'syz.1.122': attribute type 10 has an invalid length. [ 117.336670][ T6549] team0 (unregistering): Port device team_slave_0 removed [ 117.594374][ T6558] netlink: 'syz.3.124': attribute type 4 has an invalid length. [ 117.594512][ T6558] netlink: 17 bytes leftover after parsing attributes in process `syz.3.124'. [ 117.849710][ T6549] team0 (unregistering): Port device team_slave_1 removed [ 119.082834][ T43] audit: type=1804 audit(1788479908.041:7): pid=6576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.134" name="/newroot/27/bus/bus" dev="overlay" ino=180 res=1 errno=0 [ 119.276328][ T6577] netlink: 224 bytes leftover after parsing attributes in process `syz.0.134'. [ 119.277976][ T6577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'. [ 119.336138][ T6580] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 119.336193][ T6580] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 119.347129][ T6580] vhci_hcd vhci_hcd.0: Device attached [ 119.357138][ T6577] team0: Port device team_slave_1 removed [ 120.109055][ T6584] vhci_hcd: connection closed [ 120.111149][ T13] vhci_hcd vhci_hcd.3: stop threads [ 120.111499][ T13] vhci_hcd vhci_hcd.3: release socket [ 120.111718][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 120.879126][ T6594] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 120.879167][ T6594] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 120.880853][ T6594] vhci_hcd vhci_hcd.0: Device attached [ 121.328260][ T5747] usb 40-1: SetAddress Request (6) to port 0 [ 121.328353][ T5747] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 122.196215][ T6595] vhci_hcd: connection reset by peer [ 122.196535][ T12] vhci_hcd vhci_hcd.1: stop threads [ 122.196551][ T12] vhci_hcd vhci_hcd.1: release socket [ 122.196605][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 122.568242][ T30] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 122.748209][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 122.749718][ T30] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 122.751006][ T30] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.751025][ T30] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.754214][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.754234][ T30] usb 5-1: Product: syz [ 122.754246][ T30] usb 5-1: Manufacturer: syz [ 122.754259][ T30] usb 5-1: SerialNumber: syz [ 123.332853][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'. [ 123.658785][ T6631] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 123.660856][ T6631] i2c i2c-0: delete_device: Can't find device in list [ 123.707552][ T6632] bridge0: entered promiscuous mode [ 123.707616][ T6632] bridge0: entered allmulticast mode [ 124.103998][ T30] usb 5-1: USB disconnect, device number 4 [ 124.990103][ T6647] netlink: 64 bytes leftover after parsing attributes in process `syz.0.143'. [ 125.144419][ T6643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.141'. [ 126.094145][ T6680] loop9: detected capacity change from 0 to 524287998 [ 126.244108][ T6682] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 126.244140][ T6682] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 126.245611][ T6682] vhci_hcd vhci_hcd.0: Device attached [ 127.615610][ T6683] vhci_hcd: connection reset by peer [ 127.618942][ T12] vhci_hcd vhci_hcd.1: stop threads [ 127.618984][ T12] vhci_hcd vhci_hcd.1: release socket [ 127.619139][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 127.619294][ T5747] usb 40-1: device descriptor read/8, error -110 [ 128.040071][ T5747] usb usb40-port1: attempt power cycle [ 128.586130][ T6710] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 128.644843][ T6710] kvm: pic: level sensitive irq not supported [ 128.653457][ T6710] kvm: pic: non byte read [ 129.188283][ T5747] usb usb40-port1: unable to enumerate USB device [ 129.619616][ T6732] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size. [ 129.748332][ T6733] ceph: No mds server is up or the cluster is laggy [ 129.765754][ T5747] libceph: connect (1)[c::]:6789 error -22 [ 129.769525][ T5747] libceph: mon0 (1)[c::]:6789 connect error [ 130.957480][ T1158] IPVS: starting estimator thread 0... [ 131.088316][ T6744] IPVS: using max 43 ests per chain, 103200 per kthread [ 131.228432][ T50] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 131.280841][ T6751] 9pnet_virtio: no channels available for device c::: [ 131.369324][ T6749] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 131.378862][ T50] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 131.384696][ T50] usb 7-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 131.388931][ T50] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.393753][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 131.396499][ T50] usb 7-1: SerialNumber: syz [ 131.425690][ T6749] kvm: pic: level sensitive irq not supported [ 131.426561][ T6749] kvm: pic: non byte read [ 131.433711][ T6749] kvm: pic: level sensitive irq not supported [ 131.435806][ T6749] kvm: pic: non byte read [ 131.446979][ T6749] kvm: pic: level sensitive irq not supported [ 131.498730][ T6755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.553396][ T6758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.611261][ T6755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.674151][ T6755] ip6gretap1: entered allmulticast mode [ 131.679908][ T6755] batman_adv: batadv0: Adding interface: ip6gretap1 [ 131.679967][ T6755] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.680071][ T6755] batman_adv: batadv0: Interface activated: ip6gretap1 [ 131.707460][ T6743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.712537][ T6743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.723199][ T50] usb 7-1: 0:2 : does not exist [ 131.770122][ T50] usb 7-1: USB disconnect, device number 3 [ 131.853812][ T6502] udevd[6502]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.958613][ T42] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 132.118348][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 132.122505][ T42] usb 5-1: unable to get BOS descriptor or descriptor too short [ 132.122593][ T42] usb 5-1: New USB device found, idVendor=1b3d, idProduct=013b, bcdDevice=da.94 [ 132.130029][ T42] usb 5-1: config 172 has an invalid interface number: 82 but max is 0 [ 132.133579][ T42] usb 5-1: config 172 has no interface number 0 [ 132.133618][ T42] usb 5-1: config 172 interface 82 has no altsetting 0 [ 132.141422][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.144986][ T42] usb 5-1: Product: syz [ 132.146939][ T42] usb 5-1: Manufacturer: syz [ 132.148785][ T42] usb 5-1: SerialNumber: syz [ 132.363963][ T42] ftdi_sio 5-1:172.82: FTDI USB Serial Device converter detected [ 132.368812][ T42] ftdi_sio ttyUSB0: unknown device type: 0xda94 [ 132.374799][ T42] usb 5-1: USB disconnect, device number 5 [ 132.376693][ T42] ftdi_sio 5-1:172.82: device disconnected [ 132.699675][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.903209][ T6767] netlink: 64 bytes leftover after parsing attributes in process `syz.3.167'. [ 133.001943][ T6768] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 135.508366][ T6805] CIFS mount error: No usable UNC path provided in device string! [ 135.508366][ T6805] [ 135.508410][ T6805] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 135.790275][ T5843] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 135.841004][ T5449] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 135.938421][ T5843] usb 6-1: Using ep0 maxpacket: 8 [ 135.941545][ T5843] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 135.947611][ T5843] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.947655][ T5843] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 135.947691][ T5843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.972015][ T5843] usb 6-1: config 0 descriptor?? [ 136.156978][ T6824] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 136.157055][ T6824] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 136.158413][ T6824] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x0003 instead [ 136.158433][ T6824] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0x0009 instead [ 136.158448][ T6824] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000004c: 0x0b5e instead [ 136.158470][ T6824] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0140 instead [ 136.158485][ T6824] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000084: 0x0010 instead [ 136.158512][ T6824] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 136.158528][ T6824] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 136.158543][ T6824] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 136.158558][ T6824] jffs2: Further such events for this erase block will not be printed [ 136.158615][ T6824] jffs2: Empty flash at 0x00000308 ends at 0x0000030c [ 136.158630][ T6824] jffs2: Empty flash at 0x00000330 ends at 0x00000334 [ 136.158643][ T6824] jffs2: Empty flash at 0x0000034c ends at 0x00000350 [ 136.172633][ T6824] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 136.172646][ T6824] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 136.513958][ T6812] Set syz1 is full, maxelem 6117 reached [ 136.527245][ T42] usb 6-1: USB disconnect, device number 3 [ 137.155901][ T6835] netlink: 64 bytes leftover after parsing attributes in process `syz.1.178'. [ 137.228556][ T6838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.187'. [ 137.232466][ T6838] vlan0: entered promiscuous mode [ 137.938046][ T6830] orangefs_mount: mount request failed with -4 [ 138.827711][ T6851] netlink: 'syz.3.180': attribute type 9 has an invalid length. [ 138.882102][ T6855] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 139.188250][ T855] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 139.358037][ T855] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 139.391668][ T855] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 139.392030][ T855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.392277][ T855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.392568][ T855] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 139.421289][ T855] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 139.421417][ T855] usb 5-1: Manufacturer: syz [ 139.495373][ T855] usb 5-1: config 0 descriptor?? [ 139.689105][ T6867] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 140.226431][ T855] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 140.260981][ T43] audit: type=1400 audit(1788479929.191:8): apparmor="STATUS" operation="profile_load" profile="unconfined" name=223A6F pid=6853 comm="syz.0.190" [ 140.265676][ T6876] xt_CT: You must specify a L4 protocol and not use inversions on it [ 140.327417][ T855] appleir 0003:05AC:8243.0002: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 140.399596][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.184'. [ 141.839434][ T5843] usb 5-1: reset high-speed USB device number 6 using dummy_hcd [ 142.259145][ T6894] Console: switching to colour dummy device 80x25 [ 142.435651][ T6897] UDC core: g1: couldn't find an available UDC or it's busy [ 142.673683][ T6903] netlink: 64 bytes leftover after parsing attributes in process `syz.2.193'. [ 142.929744][ T6909] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 143.225188][ T50] usb 5-1: USB disconnect, device number 6 [ 143.860561][ T6915] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 144.871236][ T6946] FAULT_INJECTION: forcing a failure. [ 144.871236][ T6946] name fail_futex, interval 1, probability 0, space 0, times 1 [ 144.871776][ T6946] CPU: 0 UID: 0 PID: 6946 Comm: syz.1.208 Not tainted syzkaller #0 PREEMPT(full) [ 144.871801][ T6946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 144.871812][ T6946] Call Trace: [ 144.871818][ T6946] [ 144.871825][ T6946] dump_stack_lvl+0x100/0x190 [ 144.871856][ T6946] should_fail_ex.cold+0x5/0xa [ 144.871890][ T6946] get_futex_key+0x293/0x14f0 [ 144.871921][ T6946] ? __pfx_get_futex_key+0x10/0x10 [ 144.871949][ T6946] ? __mutex_unlock_slowpath+0x35d/0x930 [ 144.871980][ T6946] futex_wake+0xf4/0x5e0 [ 144.872003][ T6946] ? __pfx_futex_wake+0x10/0x10 [ 144.872028][ T6946] ? detach_task_ctx_data+0x83/0x490 [ 144.872063][ T6946] do_futex+0x2b2/0x440 [ 144.872080][ T6946] ? __pfx_do_futex+0x10/0x10 [ 144.872096][ T6946] ? __might_fault+0xc5/0x140 [ 144.872154][ T6946] mm_exit_exec_release+0x256/0x2f0 [ 144.872185][ T6946] do_exit+0x707/0x2ae0 [ 144.872203][ T6946] ? lock_acquire+0x1d1/0x380 [ 144.872227][ T6946] ? cgroup1_freezing+0x27/0x3b0 [ 144.872248][ T6946] ? find_held_lock+0x2b/0x80 [ 144.872267][ T6946] ? __pfx_do_exit+0x10/0x10 [ 144.872289][ T6946] ? find_held_lock+0x2b/0x80 [ 144.872307][ T6946] ? get_signal+0x7e0/0x21e0 [ 144.872334][ T6946] do_group_exit+0xd5/0x2a0 [ 144.872354][ T6946] get_signal+0x1ec7/0x21e0 [ 144.872385][ T6946] ? find_held_lock+0x2b/0x80 [ 144.872405][ T6946] ? __pfx_get_signal+0x10/0x10 [ 144.872436][ T6946] ? do_futex+0x190/0x440 [ 144.872456][ T6946] arch_do_signal_or_restart+0x91/0x7a0 [ 144.872495][ T6946] ? __sys_bind+0x1c7/0x260 [ 144.872525][ T6946] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 144.872554][ T6946] ? xfd_validate_state+0x129/0x190 [ 144.872588][ T6946] exit_to_user_mode_loop+0x139/0x700 [ 144.872615][ T6946] ? rcu_is_watching+0x13/0xc0 [ 144.872636][ T6946] __do_fast_syscall_32+0x59f/0x8b0 [ 144.872661][ T6946] ? lockdep_hardirqs_on+0x7d/0x110 [ 144.872686][ T6946] do_fast_syscall_32+0x32/0x70 [ 144.872711][ T6946] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 144.872733][ T6946] RIP: 0023:0xf700efec [ 144.872754][ T6946] Code: Unable to access opcode bytes at 0xf700efc2. [ 144.872762][ T6946] RSP: 002b:00000000f53fd5bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 144.872780][ T6946] RAX: fffffffffffffe00 RBX: 00000000f7404f88 RCX: 0000000000000080 [ 144.872792][ T6946] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7404f8c [ 144.872803][ T6946] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 144.872814][ T6946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.872825][ T6946] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 144.872847][ T6946] [ 145.099502][ T6958] ceph: No mds server is up or the cluster is laggy [ 145.123036][ T75] libceph: connect (1)[c::]:6789 error -22 [ 145.133581][ T75] libceph: mon0 (1)[c::]:6789 connect error [ 145.715393][ T6968] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 145.731441][ T6964] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 145.820285][ T6964] kvm: pic: non byte read [ 145.821264][ T6964] kvm: pic: level sensitive irq not supported [ 145.821602][ T6964] kvm: pic: non byte read [ 145.823051][ T6964] kvm: pic: level sensitive irq not supported [ 145.823320][ T6964] kvm: pic: non byte read [ 145.824886][ T6964] kvm: pic: level sensitive irq not supported [ 145.825210][ T6964] kvm: pic: non byte read [ 145.826242][ T6964] kvm: pic: level sensitive irq not supported [ 145.826610][ T6964] kvm: pic: non byte read [ 145.827819][ T6964] kvm: pic: level sensitive irq not supported [ 145.828227][ T6964] kvm: pic: non byte read [ 145.902957][ T6969] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.020326][ T6969] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.094514][ T6969] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.230858][ T6969] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.230374][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.348572][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.408632][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.498346][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.728270][ T855] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 147.797200][ T6992] random: crng reseeded on system resumption [ 147.886046][ T855] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 147.908358][ T855] usb 6-1: config 0 has no interfaces? [ 147.910594][ T855] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 147.910610][ T855] usb 6-1: Product: syz [ 147.910620][ T855] usb 6-1: Manufacturer: syz [ 147.910629][ T855] usb 6-1: SerialNumber: syz [ 147.913120][ T855] usb 6-1: config 0 descriptor?? [ 148.150307][ T5830] usb 6-1: USB disconnect, device number 4 [ 148.348396][ T50] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 148.488275][ T50] usb 7-1: device descriptor read/64, error -71 [ 148.748444][ T50] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 148.773745][ T7001] 9pnet_virtio: no channels available for device c::: [ 148.878224][ T50] usb 7-1: device descriptor read/64, error -71 [ 148.998475][ T50] usb usb7-port1: attempt power cycle [ 149.338287][ T50] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 149.360158][ T50] usb 7-1: device descriptor read/8, error -71 [ 149.598391][ T50] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 149.618905][ T50] usb 7-1: device descriptor read/8, error -71 [ 149.717257][ T7004] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 149.717315][ T7004] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 149.717373][ T7004] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x0003 instead [ 149.717391][ T7004] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0x0009 instead [ 149.717403][ T7004] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000004c: 0x0b5e instead [ 149.717421][ T7004] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0140 instead [ 149.717438][ T7004] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000084: 0x0010 instead [ 149.717462][ T7004] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 149.717476][ T7004] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 149.717490][ T7004] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 149.717562][ T7004] jffs2: Further such events for this erase block will not be printed [ 149.717620][ T7004] jffs2: Empty flash at 0x00000308 ends at 0x0000030c [ 149.717637][ T7004] jffs2: Empty flash at 0x00000330 ends at 0x00000334 [ 149.717649][ T7004] jffs2: Empty flash at 0x0000034c ends at 0x00000350 [ 149.731370][ T7004] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 149.731383][ T7004] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 149.739810][ T50] usb usb7-port1: unable to enumerate USB device [ 149.766615][ T7004] tipc: Started in network mode [ 149.766643][ T7004] tipc: Node identity ac14140f, cluster identity 4711 [ 149.767429][ T7004] tipc: New replicast peer: 255.255.255.255 [ 149.768268][ T7004] tipc: Enabled bearer , priority 10 [ 149.903754][ T7008] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 150.014342][ T7014] netlink: 'syz.0.215': attribute type 4 has an invalid length. [ 150.014428][ T7014] netlink: 17 bytes leftover after parsing attributes in process `syz.0.215'. [ 150.148236][ T50] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 150.840477][ T7020] UDC core: g1: couldn't find an available UDC or it's busy [ 151.176798][ T5830] tipc: Node number set to 2886997007 [ 151.199276][ T50] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 151.200420][ T50] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 151.200441][ T50] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.200470][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.428487][ T50] usb 6-1: usb_control_msg returned -32 [ 151.428546][ T50] usbtmc 6-1:16.0: can't read capabilities [ 152.006846][ T25] usb 6-1: USB disconnect, device number 5 [ 152.377652][ T7063] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 152.600635][ T7066] input: syz0 as /devices/virtual/input/input7 [ 154.438883][ T7086] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 154.569630][ T5886] libceph: connect (1)[c::]:6789 error -22 [ 154.570083][ T5886] libceph: mon0 (1)[c::]:6789 connect error [ 154.584277][ T7088] ceph: No mds server is up or the cluster is laggy [ 154.841220][ T5886] libceph: connect (1)[c::]:6789 error -22 [ 154.841713][ T5886] libceph: mon0 (1)[c::]:6789 connect error [ 155.280122][ T7095] UDC core: g1: couldn't find an available UDC or it's busy [ 155.297434][ T7094] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 155.590795][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 155.630358][ T9] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 156.574839][ T7115] Bluetooth: MGMT ver 1.23 [ 156.584325][ T43] audit: type=1800 audit(1788479945.541:9): pid=7115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.235" name="c_srate" dev="configfs" ino=14814 res=0 errno=0 [ 156.653074][ T7117] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 157.364798][ T7109] netlink: 'syz.0.242': attribute type 4 has an invalid length. [ 159.252425][ T7187] ceph: No mds server is up or the cluster is laggy [ 159.294491][ T5747] libceph: connect (1)[c::]:6789 error -22 [ 159.321708][ T5747] libceph: mon0 (1)[c::]:6789 connect error [ 159.935546][ T7192] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 160.132655][ T43] audit: type=1804 audit(1788479949.091:10): pid=7195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.248" name="file1" dev="ramfs" ino=14143 res=1 errno=0 [ 160.951207][ T7227] input: syz0 as /devices/virtual/input/input9 [ 161.028757][ T43] audit: type=1804 audit(1788479949.981:11): pid=7232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.254" name="/newroot/64/bus/bus" dev="overlay" ino=405 res=1 errno=0 [ 161.135520][ T7237] netlink: 224 bytes leftover after parsing attributes in process `syz.2.254'. [ 161.136266][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.254'. [ 161.144252][ T7237] team0: Port device team_slave_1 removed [ 163.026563][ T7256] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 163.369413][ T5747] libceph: connect (1)[c::]:6789 error -22 [ 163.373375][ T5747] libceph: mon0 (1)[c::]:6789 connect error [ 163.420934][ T7260] ceph: No mds server is up or the cluster is laggy [ 163.633729][ T5747] libceph: connect (1)[c::]:6789 error -22 [ 163.633878][ T5747] libceph: mon0 (1)[c::]:6789 connect error [ 164.467419][ T7273] input: syz0 as /devices/virtual/input/input10 [ 164.489782][ T7278] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 165.332592][ T7286] random: crng reseeded on system resumption [ 165.375335][ T7288] netlink: 'syz.2.267': attribute type 9 has an invalid length. [ 165.420774][ T7294] netlink: 'syz.0.277': attribute type 10 has an invalid length. [ 165.426916][ T7296] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 165.452451][ T7294] team0 (unregistering): Port device team_slave_0 removed [ 165.634096][ T7300] netlink: 256 bytes leftover after parsing attributes in process `syz.3.268'. [ 165.634806][ T7300] comedi comedi4: bad chanlist[1]=0x00000101 chan=257 range length=2 [ 166.799682][ T7318] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 166.799710][ T7318] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 166.808499][ T7318] vhci_hcd vhci_hcd.0: Device attached [ 166.931538][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.931587][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.959379][ T7323] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 167.078230][ T75] usb 44-1: SetAddress Request (2) to port 0 [ 167.078313][ T75] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 168.051966][ T7336] input: syz0 as /devices/virtual/input/input11 [ 168.195971][ T7319] vhci_hcd: connection reset by peer [ 168.289390][ T13] vhci_hcd vhci_hcd.3: stop threads [ 168.289458][ T13] vhci_hcd vhci_hcd.3: release socket [ 168.290357][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 168.417517][ T7343] random: crng reseeded on system resumption [ 168.598009][ T7346] netlink: 256 bytes leftover after parsing attributes in process `syz.1.282'. [ 168.602092][ T7346] comedi comedi4: bad chanlist[1]=0x00000101 chan=257 range length=2 [ 168.938591][ T7350] netlink: 'syz.3.283': attribute type 10 has an invalid length. [ 168.960105][ T7350] team0 (unregistering): Port device team_slave_0 removed [ 168.971309][ T7350] team0 (unregistering): Port device team_slave_1 removed [ 170.121482][ T7361] zram: Can't change algorithm for initialized device [ 170.141926][ T7361] zram: Cannot change disksize for initialized device [ 170.633316][ T65] Bluetooth: hci2: command 0x0406 tx timeout [ 170.633431][ T65] Bluetooth: hci1: command 0x0406 tx timeout [ 172.138306][ T75] usb 44-1: device descriptor read/8, error -110 [ 172.549514][ T5747] libceph: connect (1)[c::]:6789 error -22 [ 172.549647][ T5747] libceph: mon0 (1)[c::]:6789 connect error [ 172.725058][ T7389] ceph: No mds server is up or the cluster is laggy [ 172.776219][ T75] usb usb44-port1: attempt power cycle [ 173.419948][ T75] usb usb44-port1: unable to enumerate USB device [ 173.987336][ T7413] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 173.987367][ T7413] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 173.990640][ T7413] vhci_hcd vhci_hcd.0: Device attached [ 174.050066][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.050131][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.262110][ T7413] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 174.459819][ T75] usb 38-1: SetAddress Request (6) to port 0 [ 174.460020][ T75] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 175.090655][ T7414] vhci_hcd: connection reset by peer [ 175.091099][ T12] vhci_hcd vhci_hcd.0: stop threads [ 175.091130][ T12] vhci_hcd vhci_hcd.0: release socket [ 175.091238][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 175.270789][ T43] audit: type=1800 audit(1788479964.231:12): pid=7439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.302" name="memory_backed" dev="configfs" ino=16714 res=0 errno=0 [ 175.284554][ T43] audit: type=1800 audit(1788479964.241:13): pid=7435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.302" name="zoned" dev="configfs" ino=15132 res=0 errno=0 [ 175.285698][ T7435] netlink: 'syz.2.302': attribute type 1 has an invalid length. [ 175.285712][ T7435] netlink: 84 bytes leftover after parsing attributes in process `syz.2.302'. [ 175.285720][ T7435] netlink: 'syz.2.302': attribute type 2 has an invalid length. [ 175.285727][ T7435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.302'. [ 175.358304][ T43] audit: type=1800 audit(1788479964.311:14): pid=7439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.302" name="power" dev="configfs" ino=15135 res=0 errno=0 [ 175.386130][ T7439] null_blk: my_zoned_dev: using native zone append [ 175.678605][ T7439] null_blk: disk my_zoned_dev created [ 176.869474][ T7461] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 177.771875][ T7479] cdrom: dropping to single frame dma [ 178.361369][ T7489] kAFS: unable to lookup cell '/,c¾ûL' [ 178.371745][ T7489] binder: BINDER_SET_CONTEXT_MGR already set [ 178.374122][ T7489] binder: 7487:7489 ioctl 4018620d 80004a80 returned -16 [ 179.448366][ T5843] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 179.498270][ T75] usb 38-1: device descriptor read/8, error -110 [ 179.608876][ T5843] usb 6-1: Using ep0 maxpacket: 16 [ 179.615084][ T5843] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 179.626291][ T5843] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.633222][ T5843] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 179.643007][ T5843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.697469][ T5843] usb 6-1: config 0 descriptor?? [ 180.163153][ T75] usb usb38-port1: attempt power cycle [ 180.782798][ T7511] bridge0: left promiscuous mode [ 180.859981][ T5752] Bluetooth: hci3: command 0x0406 tx timeout [ 180.871874][ T7516] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 180.871901][ T7516] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 180.872190][ T7516] vhci_hcd vhci_hcd.0: Device attached [ 181.108628][ T7511] 8021q: adding VLAN 0 to HW filter on device eth0 [ 181.119256][ T75] usb usb38-port1: unable to enumerate USB device [ 181.150730][ T5886] usb 42-1: SetAddress Request (2) to port 0 [ 181.150871][ T5886] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 181.222814][ T7511] 8021q: adding VLAN 0 to HW filter on device eth1 [ 181.234030][ T7511] 8021q: adding VLAN 0 to HW filter on device eth2 [ 181.252546][ T7511] 8021q: adding VLAN 0 to HW filter on device eth3 [ 181.362043][ T5843] usbhid 6-1:0.0: can't add hid device: -71 [ 181.364365][ T5843] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 181.375760][ T5843] usb 6-1: USB disconnect, device number 6 [ 181.498253][ T7517] vhci_hcd: connection reset by peer [ 181.499621][ T5789] vhci_hcd vhci_hcd.2: stop threads [ 181.499652][ T5789] vhci_hcd vhci_hcd.2: release socket [ 181.499937][ T5789] vhci_hcd vhci_hcd.2: disconnect device [ 181.868643][ T25] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 182.028388][ T25] usb 8-1: Using ep0 maxpacket: 16 [ 182.584661][ T25] usb 8-1: unable to get BOS descriptor or descriptor too short [ 182.584738][ T25] usb 8-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 182.586726][ T25] usb 8-1: no configurations [ 182.586736][ T25] usb 8-1: can't read configurations, error -22 [ 183.123721][ T43] audit: type=1804 audit(1788479972.071:15): pid=7531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.324" name="/newroot/88/bus/bus" dev="overlay" ino=516 res=1 errno=0 [ 183.124291][ T5742] Bluetooth: hci1: unexpected event for opcode 0x4ad0 [ 183.166778][ T7538] netlink: 'syz.2.323': attribute type 10 has an invalid length. [ 183.206193][ T7538] team0 (unregistering): Port device team_slave_0 removed [ 183.596512][ T7542] netlink: 224 bytes leftover after parsing attributes in process `syz.3.324'. [ 183.626242][ T7542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.324'. [ 186.059417][ T30] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 186.218230][ T5886] usb 42-1: device descriptor read/8, error -110 [ 186.228771][ T30] usb 7-1: Using ep0 maxpacket: 16 [ 186.235147][ T30] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 186.242084][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.242262][ T30] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 186.244324][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.293008][ T30] usb 7-1: config 0 descriptor?? [ 186.615281][ T5886] usb usb42-port1: attempt power cycle [ 187.473063][ T5886] usb usb42-port1: unable to enumerate USB device [ 187.538414][ T7570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.553815][ T7570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.578271][ T1684] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 187.729843][ T1684] usb 6-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 187.732229][ T1684] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.732280][ T1684] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 187.734512][ T1684] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 187.734554][ T1684] usb 6-1: Product: syz [ 187.735241][ T1684] usb 6-1: Manufacturer: syz [ 187.885272][ T7570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.889640][ T7570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.897476][ T7570] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 187.897571][ T7570] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.911793][ T7570] veth1_vlan: left promiscuous mode [ 187.915713][ T7570] veth0_vlan: left promiscuous mode [ 187.922046][ T7570] veth0_vlan: entered promiscuous mode [ 187.923887][ T7570] veth1_vlan: entered promiscuous mode [ 187.932800][ T7570] veth1_macvtap: left promiscuous mode [ 187.935227][ T7570] veth0_macvtap: left promiscuous mode [ 187.936362][ T7570] veth0_macvtap: entered promiscuous mode [ 187.940433][ T7570] veth1_macvtap: entered promiscuous mode [ 187.961250][ T7570] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 187.965226][ T7570] 8021q: adding VLAN 0 to HW filter on device eth0 [ 187.970822][ T7570] 8021q: adding VLAN 0 to HW filter on device eth1 [ 187.976152][ T7570] 8021q: adding VLAN 0 to HW filter on device eth2 [ 187.981217][ T7570] 8021q: adding VLAN 0 to HW filter on device eth3 [ 187.998239][ T5789] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.002281][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.002338][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.006463][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.006536][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.068257][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.088218][ T5789] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.088286][ T5789] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.211584][ T30] usbhid 7-1:0.0: can't add hid device: -71 [ 188.213802][ T1684] usb 6-1: USB disconnect, device number 7 [ 188.220768][ T30] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 188.228900][ T30] usb 7-1: USB disconnect, device number 8 [ 188.897571][ T7593] netlink: 14 bytes leftover after parsing attributes in process `syz.1.337'. [ 190.060526][ T7606] netlink: 'syz.0.341': attribute type 10 has an invalid length. [ 191.430830][ T43] audit: type=1326 audit(1788479980.391:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.0.346" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x0 [ 192.921606][ T7640] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 194.199563][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.214205][ T43] audit: type=1804 audit(1788479983.171:17): pid=7652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.352" name="/newroot/90/bus/bus" dev="overlay" ino=543 res=1 errno=0 [ 194.291538][ T7655] netlink: 224 bytes leftover after parsing attributes in process `syz.1.352'. [ 194.292410][ T7655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.352'. [ 194.486455][ T7659] netlink: 'syz.0.355': attribute type 10 has an invalid length. [ 196.664466][ T7680] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 196.991574][ T43] audit: type=1326 audit(1788479985.951:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7683 comm="syz.2.360" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15fec code=0x7ffc0000 [ 196.991676][ T43] audit: type=1326 audit(1788479985.951:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7683 comm="syz.2.360" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15fec code=0x7ffc0000 [ 196.994120][ T43] audit: type=1326 audit(1788479985.951:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7683 comm="syz.2.360" exe="/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf7f15fec code=0x7ffc0000 [ 197.127121][ T43] audit: type=1326 audit(1788479986.081:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7683 comm="syz.2.360" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f16008 code=0x7ffc0000 [ 197.127382][ T43] audit: type=1326 audit(1788479986.081:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7683 comm="syz.2.360" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15fec code=0x7ffc0000 [ 197.127558][ T43] audit: type=1326 audit(1788479986.081:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7683 comm="syz.2.360" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15fec code=0x7ffc0000 [ 197.316053][ T7695] erspan0: entered promiscuous mode [ 197.318338][ T855] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 197.319243][ T7695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.362'. [ 197.499774][ T855] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 197.502462][ T855] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.502518][ T855] usb 7-1: Product: syz [ 197.502527][ T855] usb 7-1: Manufacturer: syz [ 197.502534][ T855] usb 7-1: SerialNumber: syz [ 197.544362][ T855] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 197.755691][ T43] audit: type=1326 audit(1788479986.711:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7683 comm="syz.2.360" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f15fec code=0x7ffc0000 [ 197.756092][ T43] audit: type=1326 audit(1788479986.711:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7683 comm="syz.2.360" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71175ab code=0x7ffc0000 [ 197.956559][ T43] audit: type=1326 audit(1788479986.911:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7683 comm="syz.2.360" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15fec code=0x7ffc0000 [ 197.963764][ T43] audit: type=1326 audit(1788479986.911:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7683 comm="syz.2.360" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15fec code=0x7ffc0000 [ 198.058262][ T7684] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 198.058374][ T7684] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 198.068145][ T7684] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 198.068202][ T7684] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 198.071298][ T7684] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 198.071343][ T7684] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 198.112942][ T25] usb 7-1: USB disconnect, device number 9 [ 198.116953][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 198.628277][ T855] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 198.632809][ T855] ath9k_htc: Failed to initialize the device [ 198.635817][ T25] usb 7-1: ath9k_htc: USB layer deinitialized [ 199.979906][ T7723] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 200.061576][ T5742] Bluetooth: hci1: command 0x0406 tx timeout [ 200.139016][ T5742] Bluetooth: hci3: command 0x0406 tx timeout [ 200.139108][ T5742] Bluetooth: hci2: command 0x0406 tx timeout [ 201.282090][ T7731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.374'. [ 202.148189][ T5752] Bluetooth: hci1: command 0x0406 tx timeout [ 202.221161][ T5742] Bluetooth: hci3: command 0x0406 tx timeout [ 202.221446][ T5752] Bluetooth: hci2: command 0x0406 tx timeout [ 203.271737][ T43] kauditd_printk_skb: 59 callbacks suppressed [ 203.271790][ T43] audit: type=1326 audit(1788479992.231:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7776 comm="syz.0.380" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 203.282318][ T43] audit: type=1326 audit(1788479992.241:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7776 comm="syz.0.380" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 203.290253][ T43] audit: type=1326 audit(1788479992.251:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7776 comm="syz.0.380" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf70befec code=0x7ffc0000 [ 203.297634][ T43] audit: type=1326 audit(1788479992.251:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7776 comm="syz.0.380" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 203.305818][ T43] audit: type=1326 audit(1788479992.261:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7776 comm="syz.0.380" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70befec code=0x7ffc0000 [ 203.312790][ T43] audit: type=1326 audit(1788479992.271:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7776 comm="syz.0.380" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 203.320224][ T43] audit: type=1326 audit(1788479992.281:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7776 comm="syz.0.380" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70befec code=0x7ffc0000 [ 203.495180][ T7786] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 203.603595][ T7787] comedi comedi1: dt2814: I/O base address not correctly aligned [ 205.568334][ T7807] xt_MASQUERADE: bad rangesize 29 [ 205.576508][ T7807] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.197807][ T7814] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 206.747037][ T7823] netlink: 'syz.2.393': attribute type 11 has an invalid length. [ 206.864547][ T7823] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 206.864609][ T7823] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 209.233230][ T43] audit: type=1400 audit(1788479998.191:94): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=7857 comm="syz.0.401" [ 209.275904][ T25] kernel read not supported for file /video9 (pid: 25 comm: kworker/2:0) [ 209.800690][ T43] audit: type=1804 audit(1788479998.761:95): pid=7870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.403" name="/newroot/103/bus/bus" dev="overlay" ino=628 res=1 errno=0 [ 209.865510][ T7873] netlink: 224 bytes leftover after parsing attributes in process `syz.2.403'. [ 209.917946][ T7876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.403'. [ 211.013766][ T7886] netlink: 20 bytes leftover after parsing attributes in process `syz.0.406'. [ 211.333316][ T7898] netlink: 'syz.1.408': attribute type 10 has an invalid length. [ 211.365649][ T7894] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 211.365701][ T7894] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 211.378341][ T7894] vhci_hcd vhci_hcd.0: Device attached [ 211.483353][ T7894] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 211.718467][ T75] usb 42-1: SetAddress Request (6) to port 0 [ 211.719099][ T75] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 212.027732][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.047586][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.223515][ T7900] vhci_hcd: connection reset by peer [ 212.229744][ T13] vhci_hcd vhci_hcd.2: stop threads [ 212.229783][ T13] vhci_hcd vhci_hcd.2: release socket [ 212.236774][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 213.181662][ T7920] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 213.808255][ T25] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 213.959131][ T25] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 213.965555][ T25] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 213.970005][ T25] usb 6-1: config 0 has no interface number 0 [ 213.973317][ T25] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 213.980733][ T25] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 213.980823][ T25] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 213.980897][ T25] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 213.980939][ T25] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 213.980981][ T25] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 213.981041][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.021654][ T25] usb 6-1: config 0 descriptor?? [ 214.022387][ T7929] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 214.022737][ T7929] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 214.047383][ T25] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 214.420154][ T25] usb 6-1: USB disconnect, device number 8 [ 214.420221][ C3] ldusb 6-1:0.55: usb_submit_urb failed (-19) [ 214.445533][ T25] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 214.448822][ T7934] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 214.448850][ T7934] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 214.451327][ T7934] vhci_hcd vhci_hcd.0: Device attached [ 214.748358][ T5747] usb 38-1: SetAddress Request (10) to port 0 [ 214.749186][ T5747] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 215.045008][ T7935] vhci_hcd: connection reset by peer [ 215.045467][ T5789] vhci_hcd vhci_hcd.0: stop threads [ 215.045481][ T5789] vhci_hcd vhci_hcd.0: release socket [ 215.045507][ T5789] vhci_hcd vhci_hcd.0: disconnect device [ 215.733476][ T30] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 216.098147][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 216.111958][ T30] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 216.428672][ T30] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 216.513129][ T30] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 216.513199][ T30] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 216.513233][ T30] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 216.513264][ T30] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.513289][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.778406][ T75] usb 42-1: device descriptor read/8, error -110 [ 216.794816][ T7966] netlink: 'syz.0.422': attribute type 10 has an invalid length. [ 216.839155][ T30] usb 6-1: usb_control_msg returned -32 [ 216.839233][ T30] usbtmc 6-1:16.0: can't read capabilities [ 217.147200][ T7965] LUN: removable file: (no medium) [ 217.165261][ T7965] LUN: removable file: (no medium) [ 217.169131][ T75] usb usb42-port1: attempt power cycle [ 217.669358][ T7973] input: syz0 as /devices/virtual/input/input17 [ 217.912621][ T75] usb usb42-port1: unable to enumerate USB device [ 217.926963][ T30] usb 6-1: USB disconnect, device number 9 [ 218.041897][ T7981] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 218.041941][ T7981] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 218.042602][ T7981] vhci_hcd vhci_hcd.0: Device attached [ 218.135702][ T7985] nbd0: detected capacity change from 0 to 63 [ 218.206905][ T7985] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 218.223592][ T7985] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 218.223865][ T7985] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 218.225197][ T7985] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 218.229393][ T7985] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 218.318462][ T75] usb 42-1: SetAddress Request (10) to port 0 [ 218.318601][ T75] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 218.775980][ T7985] pci 0000:00:01.0: Adding to iommu group 1 [ 218.818903][ T7985] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 218.818930][ T7985] pci 0000:00:01.0: vgaarb: bridge control possible [ 218.818938][ T7985] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 218.843285][ T7985] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 218.861510][ T7985] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 218.917084][ T7985] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 219.000434][ T7985] [drm] Found bochs VGA, ID 0xb0c5. [ 219.000536][ T7985] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 219.368917][ T7982] vhci_hcd: connection reset by peer [ 219.375630][ T5789] vhci_hcd vhci_hcd.2: stop threads [ 219.375669][ T5789] vhci_hcd vhci_hcd.2: release socket [ 219.375717][ T5789] vhci_hcd vhci_hcd.2: disconnect device [ 219.488459][ T7997] netlink: 20 bytes leftover after parsing attributes in process `syz.1.429'. [ 219.979658][ T5747] usb 38-1: device descriptor read/8, error -110 [ 220.248179][ T7985] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 220.435880][ T5747] usb usb38-port1: attempt power cycle [ 220.579752][ T7985] Console: switching to colour frame buffer device 160x50 [ 220.582808][ T7985] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 221.110501][ T5747] usb usb38-port1: unable to enumerate USB device [ 221.149389][ T66] block nbd0: Receive control failed (result -104) [ 222.842147][ T8019] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 223.035793][ T8024] ptrace attach of ""[8025] was attempted by "/syz-executor exec"[8024] [ 223.427669][ T75] usb 42-1: device descriptor read/8, error -110 [ 223.841493][ T75] usb usb42-port1: attempt power cycle [ 224.515972][ T75] usb usb42-port1: unable to enumerate USB device [ 225.141125][ T8036] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 225.141167][ T8036] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 225.142979][ T8036] vhci_hcd vhci_hcd.0: Device attached [ 225.539315][ T5747] usb 44-1: SetAddress Request (6) to port 0 [ 225.541911][ T5747] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 225.722990][ T8042] Invalid ELF header magic: != ELF [ 225.726122][ T8042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.440'. [ 226.003673][ T8036] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 226.476319][ T8037] vhci_hcd: connection reset by peer [ 226.478719][ T12] vhci_hcd vhci_hcd.3: stop threads [ 226.478787][ T12] vhci_hcd vhci_hcd.3: release socket [ 226.478902][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 227.421598][ T8060] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 227.421635][ T8060] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 227.421784][ T8060] vhci_hcd vhci_hcd.0: Device attached [ 227.529379][ T8064] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 227.711356][ T8060] wg2 speed is unknown, defaulting to 1000 [ 227.739932][ T58] usb 40-1: SetAddress Request (10) to port 0 [ 227.740026][ T58] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 228.053354][ T8060] wg2 speed is unknown, defaulting to 1000 [ 228.115995][ T8061] vhci_hcd: connection reset by peer [ 228.143582][ T12] vhci_hcd vhci_hcd.1: stop threads [ 228.143635][ T12] vhci_hcd vhci_hcd.1: release socket [ 228.143683][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 228.238490][ T8060] wg2 speed is unknown, defaulting to 1000 [ 228.362514][ T43] audit: type=1800 audit(1788480017.311:96): pid=8070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.445" name="file0" dev="overlay" ino=671 res=0 errno=0 [ 228.831079][ T8060] infiniband syz2: set active [ 228.845098][ T8060] infiniband syz2: added wg2 [ 228.869686][ T75] wg2 speed is unknown, defaulting to 1000 [ 228.898887][ T8060] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 228.915912][ T8060] infiniband syz2: Couldn't open port 1 [ 228.916180][ T8060] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 228.916202][ T8060] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 228.916227][ T8060] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 229.068057][ T8060] RDS/IB: syz2: added [ 229.068399][ T8060] smc: adding ib device syz2 with port count 1 [ 229.068455][ T8060] smc: ib device syz2 port 1 has no pnetid [ 229.097403][ T75] wg2 speed is unknown, defaulting to 1000 [ 229.199041][ T8060] wg2 speed is unknown, defaulting to 1000 [ 230.360142][ T8060] wg2 speed is unknown, defaulting to 1000 [ 230.607611][ T8060] wg2 speed is unknown, defaulting to 1000 [ 230.618223][ T5747] usb 44-1: device descriptor read/8, error -110 [ 230.684903][ T8091] overlayfs: missing 'lowerdir' [ 230.802451][ T8060] wg2 speed is unknown, defaulting to 1000 [ 231.019276][ T5747] usb usb44-port1: attempt power cycle [ 231.239546][ T8100] NILFS (loop2): device size too small [ 231.589453][ T5747] usb usb44-port1: unable to enumerate USB device [ 231.857243][ T8109] netlink: 256 bytes leftover after parsing attributes in process `syz.1.453'. [ 232.327652][ T8104] trusted_key: syz.1.453 sent an empty control message without MSG_MORE. [ 232.338350][ T855] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 232.612598][ T855] usb 8-1: New USB device found, idVendor=0781, idProduct=55e8, bcdDevice=71.2b [ 232.638704][ T855] usb 8-1: config 4 has an invalid interface number: 201 but max is 0 [ 232.638790][ T855] usb 8-1: config 4 has no interface number 0 [ 232.638842][ T855] usb 8-1: config 4 interface 201 has no altsetting 0 [ 232.659984][ T855] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.660037][ T855] usb 8-1: Product: syz [ 232.660064][ T855] usb 8-1: Manufacturer: syz [ 232.660085][ T855] usb 8-1: SerialNumber: syz [ 232.778350][ T58] usb 40-1: device descriptor read/8, error -110 [ 232.791684][ T8125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.305643][ T58] usb usb40-port1: attempt power cycle [ 233.368237][ T5843] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 233.450635][ T855] usb-storage 8-1:4.201: USB Mass Storage device detected [ 233.507040][ T855] usb-storage 8-1:4.201: Quirks match for vid 0781 pid 55e8: 800000 [ 233.588962][ T5843] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 233.595022][ T5843] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.600109][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 233.605142][ T5843] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 233.611201][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 233.611236][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 233.611264][ T5843] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 233.629201][ T5843] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 233.633221][ T5843] usb 5-1: Manufacturer: syz [ 233.637255][ T5843] usb 5-1: config 0 descriptor?? [ 233.787040][ T855] usb 8-1: USB disconnect, device number 6 [ 233.861995][ T5843] usb 5-1: USB disconnect, device number 7 [ 234.225253][ T58] usb usb40-port1: unable to enumerate USB device [ 235.214090][ T8159] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 235.301614][ T8149] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 236.603000][ T8180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.466'. [ 236.931627][ T8181] zram0: detected capacity change from 8 to 0 [ 237.019022][ T1355] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 237.181810][ T1355] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 237.191024][ T1355] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 237.197392][ T1355] usb 7-1: config 0 interface 0 has no altsetting 0 [ 237.215558][ T1355] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 237.215868][ T1355] usb 7-1: Product: syz [ 237.215997][ T1355] usb 7-1: Manufacturer: syz [ 237.216085][ T1355] usb 7-1: SerialNumber: syz [ 237.263441][ T1355] usb 7-1: config 0 descriptor?? [ 237.321990][ T1355] usb 7-1: selecting invalid altsetting 0 [ 237.365238][ T8188] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 237.365305][ T8188] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 237.389643][ T8188] vhci_hcd vhci_hcd.0: Device attached [ 237.648222][ T58] usb 40-1: SetAddress Request (14) to port 0 [ 237.648302][ T58] usb 40-1: new SuperSpeed USB device number 14 using vhci_hcd [ 237.706450][ T1355] usb 7-1: USB disconnect, device number 10 [ 237.884641][ T8194] netlink: 'syz.0.470': attribute type 9 has an invalid length. [ 237.904248][ T8194] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 238.636098][ T8189] vhci_hcd: connection reset by peer [ 238.651885][ T13] vhci_hcd vhci_hcd.1: stop threads [ 238.652036][ T13] vhci_hcd vhci_hcd.1: release socket [ 238.652078][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 239.980840][ T8216] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 240.350442][ T8223] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.351562][ T8223] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.382217][ T8223] bridge0: left allmulticast mode [ 240.670407][ T8223] Console: switching to colour dummy device 80x25 [ 240.859619][ T8225] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 240.882010][ T8225] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 240.882200][ T8225] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 240.882534][ T8225] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 240.883104][ T8225] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 240.897453][ T8225] pci 0000:00:01.0: Adding to iommu group 1 [ 240.905741][ T8225] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 240.905781][ T8225] pci 0000:00:01.0: vgaarb: bridge control possible [ 240.905794][ T8225] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 240.927775][ T8225] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 240.927984][ T8225] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 240.932049][ T8225] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 240.942278][ T8225] [drm] Found bochs VGA, ID 0xb0c5. [ 240.942351][ T8225] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 241.019658][ T8225] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 241.126672][ T8225] Console: switching to colour frame buffer device 160x50 [ 241.126829][ T8225] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 241.459430][ T8242] lo: entered allmulticast mode [ 241.461159][ T8242] lo: left allmulticast mode [ 241.468996][ T8242] bond0: entered promiscuous mode [ 241.469042][ T8242] bond_slave_0: entered promiscuous mode [ 241.469584][ T8242] bond_slave_1: entered promiscuous mode [ 241.476995][ T8242] batadv0: entered promiscuous mode [ 241.485457][ T8242] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 241.554977][ T8242] bond0: left promiscuous mode [ 241.555034][ T8242] bond_slave_0: left promiscuous mode [ 241.555186][ T8242] bond_slave_1: left promiscuous mode [ 241.557592][ T8242] batadv0: left promiscuous mode [ 242.727807][ T58] usb 40-1: device descriptor read/8, error -110 [ 242.899353][ T8255] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 243.109325][ T58] usb usb40-port1: attempt power cycle [ 243.818557][ T58] usb usb40-port1: unable to enumerate USB device [ 244.316935][ T8274] macvlan0: entered promiscuous mode [ 245.144242][ T8287] mmap: syz.3.491 (8287) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 246.437306][ T8296] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 247.980507][ T8321] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 248.065704][ T8321] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 248.066494][ T8321] overlayfs: failed to look up (tracing) for ino (-66) [ 248.874722][ T5131] block nbd0: Possible stuck request ffff88802756e000: control (read@0,4096B). Runtime 30 seconds [ 249.159049][ T8337] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 250.058218][ T8353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.507'. [ 250.346634][ T8362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 250.346682][ T8362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 250.346835][ T8362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x0003 instead [ 250.346914][ T8362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0x0009 instead [ 250.346989][ T8362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000004c: 0x0b5e instead [ 250.347067][ T8362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0140 instead [ 250.347143][ T8362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000084: 0x0010 instead [ 250.347228][ T8362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 250.347255][ T8362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 250.347279][ T8362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 250.347301][ T8362] jffs2: Further such events for this erase block will not be printed [ 250.347349][ T8362] jffs2: Empty flash at 0x00000308 ends at 0x0000030c [ 250.347407][ T8362] jffs2: Empty flash at 0x00000330 ends at 0x00000334 [ 250.347429][ T8362] jffs2: Empty flash at 0x0000034c ends at 0x00000350 [ 250.356413][ T8362] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 250.356440][ T8362] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 251.432162][ T8376] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 251.670764][ T8378] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 251.670792][ T8378] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 251.670928][ T8378] vhci_hcd vhci_hcd.0: Device attached [ 251.840433][ T5843] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 251.998243][ T5843] usb 8-1: Using ep0 maxpacket: 8 [ 251.998434][ T5747] usb 40-1: SetAddress Request (18) to port 0 [ 251.998727][ T5747] usb 40-1: new SuperSpeed USB device number 18 using vhci_hcd [ 252.006351][ T5843] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 252.010971][ T5843] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.015065][ T5843] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 252.015110][ T5843] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.026126][ T5843] usb 8-1: config 0 descriptor?? [ 252.156918][ T8390] bond0: Error: Cannot enslave bond to itself. [ 252.201610][ T8382] vhci_hcd: connection reset by peer [ 252.201883][ T12] vhci_hcd vhci_hcd.1: stop threads [ 252.201898][ T12] vhci_hcd vhci_hcd.1: release socket [ 252.203549][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 254.207258][ T8407] NILFS (loop1): device size too small [ 254.257026][ T8406] netlink: 20 bytes leftover after parsing attributes in process `syz.2.520'. [ 255.590828][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.148384][ T8421] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 256.729247][ T8381] Set syz1 is full, maxelem 65536 reached [ 256.743729][ T30] usb 8-1: USB disconnect, device number 7 [ 257.017351][ T8433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.525'. [ 257.098367][ T5747] usb 40-1: device descriptor read/8, error -110 [ 257.808973][ T5747] usb usb40-port1: attempt power cycle [ 257.898686][ T8440] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 257.898729][ T8440] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 257.899218][ T8440] vhci_hcd vhci_hcd.0: Device attached [ 258.168250][ T30] usb 38-1: SetAddress Request (14) to port 0 [ 258.170707][ T30] usb 38-1: new SuperSpeed USB device number 14 using vhci_hcd [ 258.280344][ T8441] vhci_hcd: connection reset by peer [ 258.283066][ T13] vhci_hcd vhci_hcd.0: stop threads [ 258.283162][ T13] vhci_hcd vhci_hcd.0: release socket [ 258.283718][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 258.399146][ T5747] usb usb40-port1: unable to enumerate USB device [ 258.584024][ T8456] NILFS (loop3): device size too small [ 259.100538][ T8460] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 259.550769][ T8471] netlink: 20 bytes leftover after parsing attributes in process `syz.0.534'. [ 260.623048][ T8493] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 260.635632][ T8482] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 261.019454][ T25] wg2 speed is unknown, defaulting to 1000 [ 261.500606][ T8511] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 262.506439][ T5752] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 262.799453][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2011 [ 263.056223][ T8537] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.071183][ T8539] /dev/loop0: Can't open blockdev [ 263.256550][ T8537] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.345738][ T30] usb 38-1: device descriptor read/8, error -110 [ 263.378367][ T1684] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 263.541058][ T1684] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 263.548837][ T1684] usb 7-1: config 0 has no interfaces? [ 263.567537][ T1684] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 263.571876][ T1684] usb 7-1: Product: syz [ 263.574132][ T1684] usb 7-1: Manufacturer: syz [ 263.577210][ T1684] usb 7-1: SerialNumber: syz [ 263.602771][ T1684] usb 7-1: config 0 descriptor?? [ 263.629975][ T8537] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.676341][ T8547] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 263.905016][ T8552] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 263.978966][ T8552] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 263.979194][ T8552] overlayfs: failed to look up (tracing) for ino (-66) [ 264.045266][ T30] usb usb38-port1: attempt power cycle [ 264.836286][ T8537] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.932468][ T5752] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 264.968708][ T30] usb usb38-port1: unable to enumerate USB device [ 265.601813][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2011 [ 265.605201][ T8566] FAULT_INJECTION: forcing a failure. [ 265.605201][ T8566] name failslab, interval 1, probability 0, space 0, times 0 [ 265.611210][ T8566] CPU: 2 UID: 0 PID: 8566 Comm: syz.0.559 Not tainted syzkaller #0 PREEMPT(full) [ 265.611252][ T8566] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 265.611273][ T8566] Call Trace: [ 265.611281][ T8566] [ 265.611291][ T8566] dump_stack_lvl+0x100/0x190 [ 265.611325][ T8566] should_fail_ex.cold+0x5/0xa [ 265.611354][ T8566] should_failslab+0xc2/0x120 [ 265.611381][ T8566] __kmalloc_noprof+0xfc/0x840 [ 265.611404][ T8566] ? sock_kmalloc+0x111/0x170 [ 265.611439][ T8566] sock_kmalloc+0x111/0x170 [ 265.611471][ T8566] skcipher_accept_parent_nokey+0x29/0x2f0 [ 265.611508][ T8566] af_alg_accept+0x34a/0x610 [ 265.611534][ T8566] ? __pfx_skcipher_accept_parent_nokey+0x10/0x10 [ 265.611594][ T8566] do_accept+0x340/0x530 [ 265.611617][ T8566] ? __pfx_do_accept+0x10/0x10 [ 265.611655][ T8566] __sys_accept4+0x108/0x200 [ 265.611675][ T8566] ? __pfx___sys_accept4+0x10/0x10 [ 265.611693][ T8566] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 265.611725][ T8566] __ia32_sys_accept4+0x94/0x100 [ 265.611746][ T8566] ? lockdep_hardirqs_on+0x7d/0x110 [ 265.611772][ T8566] __do_fast_syscall_32+0x13a/0x8b0 [ 265.611800][ T8566] ? lockdep_hardirqs_on+0x7d/0x110 [ 265.611828][ T8566] do_fast_syscall_32+0x32/0x70 [ 265.611854][ T8566] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 265.611878][ T8566] RIP: 0023:0xf70befec [ 265.611899][ T8566] Code: Unable to access opcode bytes at 0xf70befc2. [ 265.611907][ T8566] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 000000000000016c [ 265.611928][ T8566] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 265.611940][ T8566] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000000 [ 265.611952][ T8566] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 265.611963][ T8566] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 265.611974][ T8566] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 265.612000][ T8566] [ 265.741088][ T8567] bond0: Error: Cannot enslave bond to itself. [ 265.808227][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.941277][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.047127][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.208651][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.225622][ T5747] usb 7-1: USB disconnect, device number 11 [ 266.529530][ T8570] Console: switching to colour dummy device 80x25 [ 267.251057][ T8571] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 267.268947][ T8571] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 267.272826][ T8571] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 267.279016][ T8571] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 267.285888][ T8571] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 267.343826][ T8571] pci 0000:00:01.0: Adding to iommu group 1 [ 267.405670][ T8571] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 267.405717][ T8571] pci 0000:00:01.0: vgaarb: bridge control possible [ 267.405736][ T8571] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 267.437595][ T8571] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 267.438933][ T8571] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 267.456264][ T8571] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 267.501287][ T8571] [drm] Found bochs VGA, ID 0xb0c5. [ 267.501441][ T8571] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 267.703308][ T8571] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 268.404538][ T8571] Console: switching to colour frame buffer device 160x50 [ 268.408514][ T8571] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 268.618178][ T1684] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 268.788853][ T1684] usb 6-1: New USB device found, idVendor=0781, idProduct=55e8, bcdDevice=71.2b [ 268.794325][ T1684] usb 6-1: config 4 has an invalid interface number: 201 but max is 0 [ 268.794381][ T1684] usb 6-1: config 4 has no interface number 0 [ 268.794397][ T1684] usb 6-1: config 4 interface 201 has no altsetting 0 [ 268.808487][ T1684] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.808527][ T1684] usb 6-1: Product: syz [ 268.808536][ T1684] usb 6-1: Manufacturer: syz [ 268.808544][ T1684] usb 6-1: SerialNumber: syz [ 269.109932][ T8592] input: syz0 as /devices/virtual/input/input20 [ 269.256888][ T1684] usb-storage 6-1:4.201: USB Mass Storage device detected [ 269.936562][ T1684] usb-storage 6-1:4.201: Quirks match for vid 0781 pid 55e8: 800000 [ 269.991066][ T1684] usb 6-1: USB disconnect, device number 10 [ 271.418539][ T43] audit: type=1400 audit(1788480058.323:97): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=8611 comm="syz.2.570" [ 272.748302][ T25] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 272.919185][ T25] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 272.925239][ T25] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 272.929116][ T25] usb 7-1: config 0 has no interface number 0 [ 272.932120][ T25] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 272.936757][ T25] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 272.941740][ T25] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 272.947970][ T25] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 272.948298][ T25] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 272.948322][ T25] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 272.948360][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.950934][ T25] usb 7-1: config 0 descriptor?? [ 272.951967][ T8640] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 272.952058][ T8640] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 272.978683][ T25] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 274.042970][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 274.063063][ T25] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz1] on syz0 [ 275.208119][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 275.573722][ T5843] usb 7-1: USB disconnect, device number 12 [ 275.610092][ T5843] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 279.259783][ T5131] block nbd0: Possible stuck request ffff88802756e000: control (read@0,4096B). Runtime 60 seconds [ 279.945206][ T8719] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 280.024923][ T5752] Bluetooth: hci2: unexpected event for opcode 0x2011 [ 280.028479][ T8722] FAULT_INJECTION: forcing a failure. [ 280.028479][ T8722] name failslab, interval 1, probability 0, space 0, times 0 [ 280.033329][ T8722] CPU: 2 UID: 0 PID: 8722 Comm: syz.2.593 Not tainted syzkaller #0 PREEMPT(full) [ 280.033372][ T8722] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 280.033387][ T8722] Call Trace: [ 280.033395][ T8722] [ 280.033403][ T8722] dump_stack_lvl+0x100/0x190 [ 280.033438][ T8722] should_fail_ex.cold+0x5/0xa [ 280.033464][ T8722] should_failslab+0xc2/0x120 [ 280.033528][ T8722] __kmalloc_noprof+0xfc/0x840 [ 280.033551][ T8722] ? sock_kmalloc+0x111/0x170 [ 280.033609][ T8722] sock_kmalloc+0x111/0x170 [ 280.033637][ T8722] skcipher_accept_parent_nokey+0x29/0x2f0 [ 280.033668][ T8722] af_alg_accept+0x34a/0x610 [ 280.033694][ T8722] ? __pfx_skcipher_accept_parent_nokey+0x10/0x10 [ 280.033724][ T8722] do_accept+0x340/0x530 [ 280.033745][ T8722] ? __pfx_do_accept+0x10/0x10 [ 280.033776][ T8722] __sys_accept4+0x108/0x200 [ 280.033794][ T8722] ? __pfx___sys_accept4+0x10/0x10 [ 280.033832][ T8722] __ia32_sys_accept4+0x94/0x100 [ 280.033851][ T8722] ? lockdep_hardirqs_on+0x7d/0x110 [ 280.033874][ T8722] __do_fast_syscall_32+0x13a/0x8b0 [ 280.033899][ T8722] ? lockdep_hardirqs_on+0x7d/0x110 [ 280.033920][ T8722] do_fast_syscall_32+0x32/0x70 [ 280.033943][ T8722] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 280.033967][ T8722] RIP: 0023:0xf7f15fec [ 280.033989][ T8722] Code: Unable to access opcode bytes at 0xf7f15fc2. [ 280.033998][ T8722] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 000000000000016c [ 280.034019][ T8722] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 280.034031][ T8722] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000000 [ 280.034043][ T8722] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 280.034053][ T8722] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 280.034064][ T8722] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 280.034088][ T8722] [ 280.498652][ T8730] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.654019][ T8730] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.709245][ T8730] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.785776][ T8730] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.998336][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.998399][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.998492][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.998538][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.062498][ T58] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 281.228671][ T58] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 281.229204][ T58] usb 5-1: config 0 has no interfaces? [ 281.231325][ T58] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 281.231344][ T58] usb 5-1: Product: syz [ 281.231356][ T58] usb 5-1: Manufacturer: syz [ 281.231367][ T58] usb 5-1: SerialNumber: syz [ 281.234063][ T58] usb 5-1: config 0 descriptor?? [ 281.269229][ T8742] netlink: 14 bytes leftover after parsing attributes in process `syz.3.598'. [ 281.518996][ T9] usb 5-1: USB disconnect, device number 8 [ 282.895674][ T8765] netlink: 'syz.1.601': attribute type 11 has an invalid length. [ 282.942947][ T8765] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.943211][ T8765] bridge0: port 2(bridge_slave_1) entered listening state [ 282.945229][ T8765] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.945342][ T8765] bridge0: port 1(bridge_slave_0) entered listening state [ 282.999414][ T5789] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 283.030108][ T8766] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 283.030175][ T8766] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 283.284737][ T8774] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 283.542976][ T8779] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 283.728382][ T2421] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 283.878435][ T5747] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 283.888197][ T2421] usb 5-1: Using ep0 maxpacket: 8 [ 283.889154][ T2421] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 283.890049][ T2421] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.890067][ T2421] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 283.890095][ T2421] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.892080][ T2421] usb 5-1: config 0 descriptor?? [ 284.028911][ T5747] usb 7-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 284.030051][ T5747] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.030072][ T5747] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 284.031514][ T5747] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 284.031534][ T5747] usb 7-1: Product: syz [ 284.031546][ T5747] usb 7-1: Manufacturer: syz [ 284.216557][ T8776] Set syz1 is full, maxelem 6117 reached [ 284.277747][ T5747] usb 5-1: USB disconnect, device number 9 [ 284.353510][ T5843] usb 7-1: USB disconnect, device number 13 [ 285.064396][ T8795] bond0: Error: Cannot enslave bond to itself. [ 285.260248][ T8789] netlink: 14 bytes leftover after parsing attributes in process `syz.0.610'. [ 286.708217][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 286.885485][ T8811] netlink: 'syz.0.616': attribute type 11 has an invalid length. [ 287.476215][ T8815] 8021q: adding VLAN 0 to HW filter on device eth0 [ 287.494180][ T8815] 8021q: adding VLAN 0 to HW filter on device eth1 [ 287.505163][ T8815] 8021q: adding VLAN 0 to HW filter on device eth2 [ 287.513768][ T8815] 8021q: adding VLAN 0 to HW filter on device eth3 [ 288.171692][ T8811] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 288.171774][ T8811] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 288.327879][ T8828] netlink: 256 bytes leftover after parsing attributes in process `syz.2.620'. [ 288.764638][ T8834] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 288.764681][ T8834] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 288.773902][ T8834] vhci_hcd vhci_hcd.0: Device attached [ 288.950427][ T8838] ptrace attach of ""[8839] was attempted by "/syz-executor exec"[8838] [ 289.058322][ T30] usb 38-1: SetAddress Request (18) to port 0 [ 289.058463][ T30] usb 38-1: new SuperSpeed USB device number 18 using vhci_hcd [ 289.545469][ T8835] vhci_hcd: connection reset by peer [ 289.546014][ T13] vhci_hcd vhci_hcd.0: stop threads [ 289.546086][ T13] vhci_hcd vhci_hcd.0: release socket [ 289.546151][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 289.828738][ T8845] netlink: 14 bytes leftover after parsing attributes in process `syz.2.624'. [ 294.156808][ T5147] udevd[5147]: worker [6502] /devices/virtual/block/nbd0 is taking a long time [ 294.163112][ T30] usb 38-1: device descriptor read/8, error -110 [ 294.475034][ T8839] syz.2.623 (8839) used greatest stack depth: 18112 bytes left [ 294.577740][ T8875] netlink: 'syz.3.630': attribute type 11 has an invalid length. [ 294.593489][ T30] usb usb38-port1: attempt power cycle [ 294.618333][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 294.734587][ T8875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.742675][ T8875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.087246][ T8875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.101371][ T8875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.103784][ T8875] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 295.103798][ T8875] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 295.111973][ T8875] veth1_vlan: left promiscuous mode [ 295.112598][ T8875] veth0_vlan: left promiscuous mode [ 295.113342][ T8875] veth0_vlan: entered promiscuous mode [ 295.117446][ T8875] veth1_vlan: entered promiscuous mode [ 295.126616][ T8875] veth1_macvtap: left promiscuous mode [ 295.127149][ T8875] veth0_macvtap: left promiscuous mode [ 295.127628][ T8875] veth0_macvtap: entered promiscuous mode [ 295.138476][ T8875] veth1_macvtap: entered promiscuous mode [ 295.147533][ T8875] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 295.155300][ T8875] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 295.156118][ T8875] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 295.279441][ T8878] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 295.279502][ T8878] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 295.285523][ T30] usb usb38-port1: unable to enumerate USB device [ 295.561666][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.561795][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.568328][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.568378][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.678228][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.685411][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.689214][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.911405][ T8895] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 295.959627][ T8895] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 295.959985][ T8895] overlayfs: failed to look up (tracing) for ino (-66) [ 297.589087][ T8890] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 297.589117][ T8890] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 297.589225][ T8890] vhci_hcd vhci_hcd.0: Device attached [ 297.868372][ T2421] usb 44-1: SetAddress Request (10) to port 0 [ 297.871053][ T2421] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 298.873944][ T8890] rdma_rxe: rxe_newlink: failed to add wg2 [ 299.019765][ T8897] vhci_hcd: connection reset by peer [ 299.022909][ T12] vhci_hcd vhci_hcd.3: stop threads [ 299.022990][ T12] vhci_hcd vhci_hcd.3: release socket [ 299.023171][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 299.216650][ T8912] bond0: Error: Cannot enslave bond to itself. [ 299.397306][ T8917] netlink: 14 bytes leftover after parsing attributes in process `syz.0.638'. [ 299.989271][ T8927] netlink: 14 bytes leftover after parsing attributes in process `syz.1.651'. [ 300.905760][ T5752] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 300.917137][ T8944] FAULT_INJECTION: forcing a failure. [ 300.917137][ T8944] name failslab, interval 1, probability 0, space 0, times 0 [ 300.917218][ T8944] CPU: 0 UID: 0 PID: 8944 Comm: syz.1.643 Not tainted syzkaller #0 PREEMPT(full) [ 300.917244][ T8944] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 300.917262][ T8944] Call Trace: [ 300.917269][ T8944] [ 300.917278][ T8944] dump_stack_lvl+0x100/0x190 [ 300.917385][ T8944] should_fail_ex.cold+0x5/0xa [ 300.917412][ T8944] should_failslab+0xc2/0x120 [ 300.917476][ T8944] __kmalloc_noprof+0xfc/0x840 [ 300.917499][ T8944] ? trace_kmalloc+0xeb/0x110 [ 300.917521][ T8944] ? lsm_blob_alloc+0x68/0x90 [ 300.917544][ T8944] lsm_blob_alloc+0x68/0x90 [ 300.917562][ T8944] security_sk_alloc+0x2d/0x290 [ 300.917588][ T8944] sk_prot_alloc+0x12a/0x2a0 [ 300.917644][ T8944] sk_alloc+0x36/0xe80 [ 300.917668][ T8944] af_alg_accept+0xd1/0x610 [ 300.917690][ T8944] ? apparmor_socket_accept+0x133/0x210 [ 300.917712][ T8944] do_accept+0x340/0x530 [ 300.917729][ T8944] ? __pfx_do_accept+0x10/0x10 [ 300.917761][ T8944] __sys_accept4+0x108/0x200 [ 300.917778][ T8944] ? __pfx___sys_accept4+0x10/0x10 [ 300.917803][ T8944] __ia32_sys_accept4+0x94/0x100 [ 300.917821][ T8944] ? lockdep_hardirqs_on+0x7d/0x110 [ 300.917875][ T8944] __do_fast_syscall_32+0x13a/0x8b0 [ 300.917902][ T8944] ? lockdep_hardirqs_on+0x7d/0x110 [ 300.917925][ T8944] do_fast_syscall_32+0x32/0x70 [ 300.917950][ T8944] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 300.917973][ T8944] RIP: 0023:0xf700efec [ 300.917997][ T8944] Code: Unable to access opcode bytes at 0xf700efc2. [ 300.918008][ T8944] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 000000000000016c [ 300.918031][ T8944] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 300.918045][ T8944] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000000 [ 300.918058][ T8944] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 300.918069][ T8944] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 300.918079][ T8944] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 300.918103][ T8944] [ 301.351062][ T8946] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 302.940387][ T2421] usb 44-1: device descriptor read/8, error -110 [ 303.876930][ T2421] usb usb44-port1: attempt power cycle [ 304.454295][ T8985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.652'. [ 304.512324][ T8988] netlink: 'syz.3.654': attribute type 11 has an invalid length. [ 304.816472][ T8990] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 304.948960][ T2421] usb usb44-port1: unable to enumerate USB device [ 305.172102][ T8996] FAULT_INJECTION: forcing a failure. [ 305.172102][ T8996] name failslab, interval 1, probability 0, space 0, times 0 [ 305.172190][ T8996] CPU: 3 UID: 0 PID: 8996 Comm: syz.3.656 Not tainted syzkaller #0 PREEMPT(full) [ 305.172230][ T8996] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 305.172245][ T8996] Call Trace: [ 305.172252][ T8996] [ 305.172261][ T8996] dump_stack_lvl+0x100/0x190 [ 305.172295][ T8996] should_fail_ex.cold+0x5/0xa [ 305.172323][ T8996] should_failslab+0xc2/0x120 [ 305.172351][ T8996] __kmalloc_noprof+0xfc/0x840 [ 305.172376][ T8996] ? trace_kmalloc+0xeb/0x110 [ 305.172402][ T8996] ? lsm_blob_alloc+0x68/0x90 [ 305.172429][ T8996] lsm_blob_alloc+0x68/0x90 [ 305.172451][ T8996] security_sk_alloc+0x2d/0x290 [ 305.172477][ T8996] sk_prot_alloc+0x12a/0x2a0 [ 305.172511][ T8996] sk_alloc+0x36/0xe80 [ 305.172535][ T8996] af_alg_accept+0xd1/0x610 [ 305.172561][ T8996] ? apparmor_socket_accept+0x133/0x210 [ 305.172590][ T8996] do_accept+0x340/0x530 [ 305.172613][ T8996] ? __pfx_do_accept+0x10/0x10 [ 305.172652][ T8996] __sys_accept4+0x108/0x200 [ 305.172674][ T8996] ? __pfx___sys_accept4+0x10/0x10 [ 305.172693][ T8996] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 305.172718][ T8996] ? __sys_setsockopt+0x139/0x190 [ 305.172747][ T8996] __ia32_sys_accept4+0x94/0x100 [ 305.172766][ T8996] ? lockdep_hardirqs_on+0x7d/0x110 [ 305.172795][ T8996] __do_fast_syscall_32+0x13a/0x8b0 [ 305.172822][ T8996] ? lockdep_hardirqs_on+0x7d/0x110 [ 305.172848][ T8996] do_fast_syscall_32+0x32/0x70 [ 305.172875][ T8996] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 305.172901][ T8996] RIP: 0023:0xf7f43fec [ 305.172923][ T8996] Code: Unable to access opcode bytes at 0xf7f43fc2. [ 305.172932][ T8996] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 000000000000016c [ 305.172954][ T8996] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 305.172967][ T8996] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000000 [ 305.172980][ T8996] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 305.172992][ T8996] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 305.173005][ T8996] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 305.173032][ T8996] [ 305.198267][ T25] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 305.340766][ T9000] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.342210][ T9000] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.361566][ T25] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 305.364414][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 305.364463][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 305.368035][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.368125][ T25] usb 6-1: Product: syz [ 305.368141][ T25] usb 6-1: Manufacturer: syz [ 305.368155][ T25] usb 6-1: SerialNumber: syz [ 305.370981][ T25] usb 6-1: config 0 descriptor?? [ 305.377983][ T25] hub 6-1:0.0: bad descriptor, ignoring hub [ 305.378009][ T25] hub 6-1:0.0: probe with driver hub failed with error -5 [ 305.387414][ T25] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input23 [ 305.425770][ T9000] Console: switching to colour dummy device 80x25 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xb3000) [ 305.588857][ T1128] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 305.588923][ T1128] ata1: failed to read log page 10h (errno=-5) [ 305.588979][ T1128] ata1.00: exception Emask 0x1 SAct 0xc000 SErr 0x0 action 0x0 [ 305.589021][ T1128] ata1.00: irq_stat 0x41000000 [ 305.589063][ T1128] ata1.00: failed command: READ FPDMA QUEUED [ 305.589095][ T1128] ata1.00: cmd 60/98:70:4e:40:01/05:00:00:00:00/40 tag 14 ncq dma 733184 in [ 305.589095][ T1128] res 50/04:01:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 305.589177][ T1128] ata1.00: status: { DRDY } [ 305.589214][ T1128] ata1.00: error: { ABRT } [ 305.589255][ T1128] ata1.00: failed command: READ FPDMA QUEUED [ 305.589290][ T1128] ata1.00: cmd 60/80:78:6e:46:01/00:00:00:00:00/40 tag 15 ncq dma 65536 in [ 305.589290][ T1128] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 305.589373][ T1128] ata1.00: status: { DRDY } [ 305.589409][ T1128] ata1.00: error: { ABRT } [ 305.593320][ T9004] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 305.599904][ T1128] ata1.00: configured for UDMA/100 [ 305.602054][ T1128] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 305.602096][ T1128] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 305.605678][ T1128] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 305.605706][ T1128] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 01 40 4e 00 05 98 00 [ 305.605892][ T1128] I/O error, dev sda, sector 81998 op 0x0:(READ) flags 0x80700 phys_seg 69 prio class 2 [ 305.606133][ T1128] sd 0:0:0:0: [sda] tag#15 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 305.606154][ T1128] sd 0:0:0:0: [sda] tag#15 Sense Key : Aborted Command [current] [ 305.606173][ T1128] sd 0:0:0:0: [sda] tag#15 Add. Sense: No additional sense information [ 305.606191][ T1128] sd 0:0:0:0: [sda] tag#15 CDB: Read(10) 28 00 00 01 46 6e 00 00 80 00 [ 305.606202][ T1128] I/O error, dev sda, sector 83566 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 305.606270][ T1128] ata1: EH complete [ 305.618716][ T5747] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 305.626942][ T9004] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 305.627080][ T9004] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 305.627289][ T9004] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 305.627683][ T9004] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 305.636466][ T9004] pci 0000:00:01.0: Adding to iommu group 1 [ 305.639205][ T9004] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 305.639218][ T9004] pci 0000:00:01.0: vgaarb: bridge control possible [ 305.639226][ T9004] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 305.647115][ T9004] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 305.647273][ T9004] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 305.649233][ T9004] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 305.659742][ T9004] [drm] Found bochs VGA, ID 0xb0c5. [ 305.659753][ T9004] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 305.684966][ T9004] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 305.771120][ T5747] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 305.778483][ T5747] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 305.781542][ T5747] usb 5-1: config 0 has no interface number 0 [ 305.781595][ T5747] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 305.781614][ T5747] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 305.781633][ T5747] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 305.781652][ T5747] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 305.781671][ T5747] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 305.781690][ T5747] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 305.781730][ T5747] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.867510][ T9004] Console: switching to colour frame buffer device 160x50 [ 305.873325][ T9004] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 306.092298][ T5747] usb 5-1: config 0 descriptor?? [ 306.095067][ T9001] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 306.101202][ T9001] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 306.196763][ T9013] Invalid ELF header magic: != ELF [ 306.198685][ T9013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.662'. [ 306.323961][ T5747] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 306.376929][ T25] usb 5-1: USB disconnect, device number 10 [ 306.389203][ T25] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 306.540620][ T1159] raw-gadget.0 gadget.1: failed to queue suspend event [ 307.737761][ T9031] netlink: 'syz.2.667': attribute type 11 has an invalid length. [ 307.785519][ T9031] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 307.963297][ T9008] raw-gadget.0 gadget.1: failed to queue disconnect event [ 308.023999][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2011 [ 308.025774][ T9036] FAULT_INJECTION: forcing a failure. [ 308.025774][ T9036] name failslab, interval 1, probability 0, space 0, times 0 [ 308.025794][ T9036] CPU: 3 UID: 0 PID: 9036 Comm: syz.0.668 Not tainted syzkaller #0 PREEMPT(full) [ 308.025808][ T9036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 308.025830][ T9036] Call Trace: [ 308.025861][ T9036] [ 308.025867][ T9036] dump_stack_lvl+0x100/0x190 [ 308.025921][ T9036] should_fail_ex.cold+0x5/0xa [ 308.025937][ T9036] should_failslab+0xc2/0x120 [ 308.025972][ T9036] __kmalloc_noprof+0xfc/0x840 [ 308.025985][ T9036] ? sock_kmalloc+0x111/0x170 [ 308.026022][ T9036] sock_kmalloc+0x111/0x170 [ 308.026038][ T9036] ? __pfx_skcipher_accept_parent+0x10/0x10 [ 308.026058][ T9036] skcipher_accept_parent_nokey+0x29/0x2f0 [ 308.026077][ T9036] ? __pfx_skcipher_accept_parent+0x10/0x10 [ 308.026094][ T9036] skcipher_accept_parent+0x57/0x80 [ 308.026115][ T9036] af_alg_accept+0x1a5/0x610 [ 308.026128][ T9036] ? apparmor_socket_accept+0x133/0x210 [ 308.026143][ T9036] do_accept+0x340/0x530 [ 308.026155][ T9036] ? __pfx_do_accept+0x10/0x10 [ 308.026174][ T9036] __sys_accept4+0x108/0x200 [ 308.026186][ T9036] ? __pfx___sys_accept4+0x10/0x10 [ 308.026201][ T9036] __ia32_sys_accept4+0x94/0x100 [ 308.026212][ T9036] ? lockdep_hardirqs_on+0x7d/0x110 [ 308.026246][ T9036] __do_fast_syscall_32+0x13a/0x8b0 [ 308.026261][ T9036] ? lockdep_hardirqs_on+0x7d/0x110 [ 308.026275][ T9036] do_fast_syscall_32+0x32/0x70 [ 308.026292][ T9036] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 308.026307][ T9036] RIP: 0023:0xf70befec [ 308.026321][ T9036] Code: Unable to access opcode bytes at 0xf70befc2. [ 308.026344][ T9036] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 000000000000016c [ 308.026356][ T9036] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 308.026363][ T9036] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000000 [ 308.026369][ T9036] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 308.026376][ T9036] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 308.026382][ T9036] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 308.026397][ T9036] [ 308.069407][ T1684] usb 6-1: USB disconnect, device number 11 [ 308.203647][ T9043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.670'. [ 309.380268][ T5901] block nbd0: Possible stuck request ffff88802756e000: control (read@0,4096B). Runtime 90 seconds [ 310.548294][ T50] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 310.618331][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 310.644435][ T9059] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 310.658216][ T5107] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 310.709124][ T50] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 310.710342][ T50] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 310.710372][ T50] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 310.710406][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.714647][ T9055] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 310.723030][ T50] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 310.808753][ T5107] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 310.812312][ T5107] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 310.816015][ T5107] usb 8-1: config 0 has no interface number 0 [ 310.820254][ T5107] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 310.824515][ T5107] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 310.830478][ T5107] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 310.834198][ T5107] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 310.834233][ T5107] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 310.834260][ T5107] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 310.834301][ T5107] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.852116][ T5107] usb 8-1: config 0 descriptor?? [ 310.857299][ T9060] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 310.857658][ T9060] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 310.870289][ T5107] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 313.181234][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 313.182028][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 313.395390][ T9092] netlink: 'syz.1.680': attribute type 11 has an invalid length. [ 313.471881][ T25] usb 8-1: USB disconnect, device number 8 [ 313.496765][ T25] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 313.672729][ T1355] usb 7-1: USB disconnect, device number 14 [ 315.438156][ T1355] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 315.588319][ T1355] usb 6-1: Using ep0 maxpacket: 8 [ 315.589172][ T1355] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 315.590158][ T1355] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.590178][ T1355] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 315.590207][ T1355] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.594882][ T1355] usb 6-1: config 0 descriptor?? [ 315.678380][ T9124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.694'. [ 316.017808][ T9112] Set syz1 is full, maxelem 6117 reached [ 316.078835][ T1355] usb 6-1: USB disconnect, device number 12 [ 316.943793][ T9133] bridge2: entered promiscuous mode [ 316.947125][ T9133] bridge2: entered allmulticast mode [ 317.031402][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.273987][ T43] audit: type=1326 audit(1788480103.226:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.0.695" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 317.274249][ T43] audit: type=1326 audit(1788480103.226:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.0.695" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 317.275175][ T43] audit: type=1326 audit(1788480103.226:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.0.695" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 317.275350][ T43] audit: type=1326 audit(1788480103.226:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.0.695" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 317.275581][ T43] audit: type=1326 audit(1788480103.226:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.0.695" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf70befec code=0x7ffc0000 [ 317.276084][ T43] audit: type=1326 audit(1788480103.226:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.0.695" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 317.276341][ T43] audit: type=1326 audit(1788480103.226:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.0.695" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 317.276593][ T43] audit: type=1326 audit(1788480103.226:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.0.695" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70befec code=0x7ffc0000 [ 317.276898][ T43] audit: type=1326 audit(1788480103.226:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.0.695" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 317.277095][ T43] audit: type=1326 audit(1788480103.226:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.0.695" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 317.368137][ T25] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 317.600930][ T25] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 317.601752][ T25] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 317.601765][ T25] usb 6-1: config 0 has no interface number 0 [ 317.601781][ T25] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 317.601793][ T25] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 317.601805][ T25] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 317.601817][ T25] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 317.601830][ T25] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 317.601842][ T25] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 317.601861][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.605476][ T25] usb 6-1: config 0 descriptor?? [ 317.606054][ T9142] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 317.606149][ T9142] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 317.611194][ T25] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 320.088795][ T25] usb 6-1: USB disconnect, device number 13 [ 320.098915][ T25] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 320.114840][ T9152] FAULT_INJECTION: forcing a failure. [ 320.114840][ T9152] name failslab, interval 1, probability 0, space 0, times 0 [ 320.114925][ T9152] CPU: 3 UID: 0 PID: 9152 Comm: syz.3.699 Not tainted syzkaller #0 PREEMPT(full) [ 320.114962][ T9152] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 320.114976][ T9152] Call Trace: [ 320.114984][ T9152] [ 320.114991][ T9152] dump_stack_lvl+0x100/0x190 [ 320.115020][ T9152] should_fail_ex.cold+0x5/0xa [ 320.115046][ T9152] should_failslab+0xc2/0x120 [ 320.115071][ T9152] __kmalloc_noprof+0xfc/0x840 [ 320.115093][ T9152] ? sock_kmalloc+0x111/0x170 [ 320.115123][ T9152] sock_kmalloc+0x111/0x170 [ 320.115147][ T9152] ? __pfx_skcipher_accept_parent+0x10/0x10 [ 320.115176][ T9152] skcipher_accept_parent_nokey+0x29/0x2f0 [ 320.115205][ T9152] ? __pfx_skcipher_accept_parent+0x10/0x10 [ 320.115232][ T9152] skcipher_accept_parent+0x57/0x80 [ 320.115258][ T9152] af_alg_accept+0x1a5/0x610 [ 320.115280][ T9152] ? apparmor_socket_accept+0x133/0x210 [ 320.115326][ T9152] do_accept+0x340/0x530 [ 320.115350][ T9152] ? __pfx_do_accept+0x10/0x10 [ 320.115383][ T9152] __sys_accept4+0x108/0x200 [ 320.115403][ T9152] ? __pfx___sys_accept4+0x10/0x10 [ 320.115430][ T9152] __ia32_sys_accept4+0x94/0x100 [ 320.115449][ T9152] ? lockdep_hardirqs_on+0x7d/0x110 [ 320.115473][ T9152] __do_fast_syscall_32+0x13a/0x8b0 [ 320.115496][ T9152] ? lockdep_hardirqs_on+0x7d/0x110 [ 320.115521][ T9152] do_fast_syscall_32+0x32/0x70 [ 320.115546][ T9152] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 320.115577][ T9152] RIP: 0023:0xf7f43fec [ 320.115597][ T9152] Code: Unable to access opcode bytes at 0xf7f43fc2. [ 320.115605][ T9152] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 000000000000016c [ 320.115624][ T9152] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 320.115638][ T9152] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000000 [ 320.115650][ T9152] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 320.115663][ T9152] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 320.115676][ T9152] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 320.115703][ T9152] [ 320.165861][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2011 [ 320.404900][ T9156] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 321.732870][ T9198] netlink: 'syz.3.704': attribute type 2 has an invalid length. [ 321.860784][ T9202] netfs: Cache "CacheFiles" added (type cachefiles) [ 321.860841][ T9202] CacheFiles: File cache on CacheFiles registered [ 321.943174][ T9202] CacheFiles: File cache on CacheFiles unregistering [ 321.943279][ T9202] netfs: Withdrawing cache "CacheFiles" (0 objs) [ 322.354286][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2011 [ 322.368351][ T9219] FAULT_INJECTION: forcing a failure. [ 322.368351][ T9219] name failslab, interval 1, probability 0, space 0, times 0 [ 322.368400][ T9219] CPU: 2 UID: 0 PID: 9219 Comm: syz.0.709 Not tainted syzkaller #0 PREEMPT(full) [ 322.368426][ T9219] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 322.368435][ T9219] Call Trace: [ 322.368440][ T9219] [ 322.368445][ T9219] dump_stack_lvl+0x100/0x190 [ 322.368465][ T9219] should_fail_ex.cold+0x5/0xa [ 322.368487][ T9219] should_failslab+0xc2/0x120 [ 322.368503][ T9219] __kmalloc_noprof+0xfc/0x840 [ 322.368517][ T9219] ? sock_kmalloc+0x111/0x170 [ 322.368537][ T9219] sock_kmalloc+0x111/0x170 [ 322.368554][ T9219] skcipher_accept_parent_nokey+0xa4/0x2f0 [ 322.368573][ T9219] ? __pfx_skcipher_accept_parent+0x10/0x10 [ 322.368590][ T9219] skcipher_accept_parent+0x57/0x80 [ 322.368607][ T9219] af_alg_accept+0x1a5/0x610 [ 322.368622][ T9219] ? apparmor_socket_accept+0x133/0x210 [ 322.368638][ T9219] do_accept+0x340/0x530 [ 322.368651][ T9219] ? __pfx_do_accept+0x10/0x10 [ 322.368672][ T9219] __sys_accept4+0x108/0x200 [ 322.368683][ T9219] ? __pfx___sys_accept4+0x10/0x10 [ 322.368699][ T9219] __ia32_sys_accept4+0x94/0x100 [ 322.368709][ T9219] ? lockdep_hardirqs_on+0x7d/0x110 [ 322.368724][ T9219] __do_fast_syscall_32+0x13a/0x8b0 [ 322.368739][ T9219] ? lockdep_hardirqs_on+0x7d/0x110 [ 322.368754][ T9219] do_fast_syscall_32+0x32/0x70 [ 322.368770][ T9219] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 322.368784][ T9219] RIP: 0023:0xf70befec [ 322.368797][ T9219] Code: Unable to access opcode bytes at 0xf70befc2. [ 322.368802][ T9219] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 000000000000016c [ 322.368814][ T9219] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 322.368822][ T9219] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000000 [ 322.368829][ T9219] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 322.368837][ T9219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.368844][ T9219] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 322.368858][ T9219] [ 322.636932][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2011 [ 322.671495][ T9223] FAULT_INJECTION: forcing a failure. [ 322.671495][ T9223] name fail_futex, interval 1, probability 0, space 0, times 0 [ 322.671577][ T9223] CPU: 2 UID: 0 PID: 9223 Comm: syz.0.710 Not tainted syzkaller #0 PREEMPT(full) [ 322.671615][ T9223] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 322.671629][ T9223] Call Trace: [ 322.671636][ T9223] [ 322.671643][ T9223] dump_stack_lvl+0x100/0x190 [ 322.671681][ T9223] should_fail_ex.cold+0x5/0xa [ 322.671706][ T9223] get_futex_key+0x1d0/0x14f0 [ 322.671739][ T9223] ? __pfx_get_futex_key+0x10/0x10 [ 322.671768][ T9223] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 322.671799][ T9223] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 322.671971][ T9223] futex_wait_setup+0x91/0x540 [ 322.672002][ T9223] __futex_wait+0x19f/0x300 [ 322.672029][ T9223] ? __pfx___futex_wait+0x10/0x10 [ 322.672049][ T9223] ? __pfx_try_to_wake_up+0x10/0x10 [ 322.672076][ T9223] ? futex_hash+0x311/0x400 [ 322.672106][ T9223] ? __pfx_futex_wake_mark+0x10/0x10 [ 322.672133][ T9223] ? find_held_lock+0x2b/0x80 [ 322.672152][ T9223] ? futex_wake+0x4ea/0x5e0 [ 322.672181][ T9223] futex_wait+0xe6/0x370 [ 322.672203][ T9223] ? __pfx_futex_wait+0x10/0x10 [ 322.672229][ T9223] ? do_accept+0x3e3/0x530 [ 322.672254][ T9223] do_futex+0x265/0x440 [ 322.672274][ T9223] ? __pfx_do_futex+0x10/0x10 [ 322.672298][ T9223] __ia32_sys_futex_time32+0x2f4/0x470 [ 322.672323][ T9223] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 322.672354][ T9223] __do_fast_syscall_32+0x13a/0x8b0 [ 322.672380][ T9223] ? lockdep_hardirqs_on+0x7d/0x110 [ 322.672406][ T9223] do_fast_syscall_32+0x32/0x70 [ 322.672432][ T9223] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 322.672454][ T9223] RIP: 0023:0xf70befec [ 322.672475][ T9223] Code: Unable to access opcode bytes at 0xf70befc2. [ 322.672485][ T9223] RSP: 002b:00000000f54ad5bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 322.672508][ T9223] RAX: ffffffffffffffda RBX: 00000000f74b4f88 RCX: 0000000000000080 [ 322.672521][ T9223] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f74b4f8c [ 322.672534][ T9223] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 322.672545][ T9223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.672557][ T9223] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 322.672581][ T9223] [ 323.083939][ T9230] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 323.344688][ T9234] Invalid ELF header magic: != ELF [ 324.151901][ T9238] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 325.444199][ T9266] wg2 speed is unknown, defaulting to 1000 [ 325.742119][ T5752] Bluetooth: hci2: unexpected event for opcode 0x2011 [ 325.755727][ T9269] FAULT_INJECTION: forcing a failure. [ 325.755727][ T9269] name fail_futex, interval 1, probability 0, space 0, times 0 [ 325.755773][ T9269] CPU: 2 UID: 0 PID: 9269 Comm: syz.2.719 Not tainted syzkaller #0 PREEMPT(full) [ 325.755798][ T9269] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 325.755807][ T9269] Call Trace: [ 325.755811][ T9269] [ 325.755816][ T9269] dump_stack_lvl+0x100/0x190 [ 325.755836][ T9269] should_fail_ex.cold+0x5/0xa [ 325.755851][ T9269] get_futex_key+0x1d0/0x14f0 [ 325.755871][ T9269] ? __pfx_get_futex_key+0x10/0x10 [ 325.755900][ T9269] futex_wait_setup+0x91/0x540 [ 325.755919][ T9269] __futex_wait+0x19f/0x300 [ 325.755934][ T9269] ? __pfx___futex_wait+0x10/0x10 [ 325.755948][ T9269] ? __pfx_try_to_wake_up+0x10/0x10 [ 325.755965][ T9269] ? futex_hash+0x311/0x400 [ 325.755985][ T9269] ? __pfx_futex_wake_mark+0x10/0x10 [ 325.756002][ T9269] ? find_held_lock+0x2b/0x80 [ 325.756014][ T9269] ? futex_wake+0x4ea/0x5e0 [ 325.756032][ T9269] futex_wait+0xe6/0x370 [ 325.756046][ T9269] ? __pfx_futex_wait+0x10/0x10 [ 325.756063][ T9269] ? do_accept+0x3e3/0x530 [ 325.756077][ T9269] do_futex+0x265/0x440 [ 325.756089][ T9269] ? __pfx_do_futex+0x10/0x10 [ 325.756103][ T9269] __ia32_sys_futex_time32+0x2f4/0x470 [ 325.756117][ T9269] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 325.756135][ T9269] __do_fast_syscall_32+0x13a/0x8b0 [ 325.756151][ T9269] ? lockdep_hardirqs_on+0x7d/0x110 [ 325.756168][ T9269] do_fast_syscall_32+0x32/0x70 [ 325.756183][ T9269] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 325.756198][ T9269] RIP: 0023:0xf7f15fec [ 325.756211][ T9269] Code: Unable to access opcode bytes at 0xf7f15fc2. [ 325.756216][ T9269] RSP: 002b:00000000f53d65bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 325.756227][ T9269] RAX: ffffffffffffffda RBX: 00000000f73d4f88 RCX: 0000000000000080 [ 325.756234][ T9269] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f73d4f8c [ 325.756241][ T9269] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 325.756247][ T9269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.756254][ T9269] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 325.756267][ T9269] [ 325.816203][ T9271] ip6t_rt: too many addresses specified [ 326.039181][ T9275] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 326.099390][ T9277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.722'. [ 326.102899][ T9277] BUG: unable to handle page fault for address: fffffffffffffc10 [ 326.158350][ T9277] #PF: supervisor read access in kernel mode [ 326.160984][ T9277] #PF: error_code(0x0000) - not-present page [ 326.164938][ T9277] PGD eb99067 P4D eb99067 PUD eb9b067 PMD 0 [ 326.167060][ T9277] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 326.168831][ T9277] CPU: 3 UID: 0 PID: 9277 Comm: syz.1.722 Not tainted syzkaller #0 PREEMPT(full) [ 326.171683][ T9277] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 326.174954][ T9277] RIP: 0010:strnlen+0x4b/0x80 [ 326.176753][ T9277] Code: 49 89 fc 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 <80> 38 00 75 d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c c3 cc cc cc cc 48 [ 326.183666][ T9277] RSP: 0018:ffffc90006307110 EFLAGS: 00010246 [ 326.185775][ T9277] RAX: fffffffffffffc10 RBX: dffffc0000000000 RCX: 0000000000000000 [ 326.188322][ T9277] RDX: 0000000000000000 RSI: 0000000000000010 RDI: fffffffffffffc10 [ 326.190745][ T9277] RBP: fffffffffffffc20 R08: 0000000000000007 R09: 0000000000000000 [ 326.193208][ T9277] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffc10 [ 326.195679][ T9277] R13: ffff88801c6f3e00 R14: 0000000000000006 R15: 0000000000000010 [ 326.198163][ T9277] FS: 0000000000000000(0000) GS:ffff888096c67000(0063) knlGS:00000000f53fdb40 [ 326.201358][ T9277] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 326.203817][ T9277] CR2: fffffffffffffc10 CR3: 0000000074e79000 CR4: 0000000000352ef0 [ 326.206810][ T9277] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 326.209451][ T9277] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 326.211920][ T9277] Call Trace: [ 326.212985][ T9277] [ 326.213962][ T9277] trace_event_raw_event_drv_net_setup_tc+0x101/0x5d0 [ 326.216116][ T9277] ? __pfx_trace_event_raw_event_drv_net_setup_tc+0x10/0x10 [ 326.218325][ T9277] ? __pfx___might_resched+0x10/0x10 [ 326.220190][ T9277] ieee80211_netdev_setup_tc+0x2c6/0x3e0 [ 326.222206][ T9277] ? __pfx_ieee80211_netdev_setup_tc+0x10/0x10 [ 326.224577][ T9277] tcf_block_offload_cmd.isra.0+0x1c4/0x310 [ 326.226857][ T9277] ? __pfx_tcf_block_offload_cmd.isra.0+0x10/0x10 [ 326.229396][ T9277] ? __pfx_down_write+0x10/0x10 [ 326.231575][ T9277] tcf_block_get_ext+0x7ed/0x1950 [ 326.233931][ T9277] tcf_block_get+0xa8/0x100 [ 326.235393][ T9277] ? __pfx_tcf_block_get+0x10/0x10 [ 326.237116][ T9277] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 326.239293][ T9277] ? lockdep_init_map_type+0x5c/0x250 [ 326.241534][ T9277] ? __pfx_multiq_init+0x10/0x10 [ 326.243376][ T9277] multiq_init+0x70/0x2b0 [ 326.244848][ T9277] ? __pfx_multiq_init+0x10/0x10 [ 326.246681][ T9277] qdisc_create+0x47b/0x1060 [ 326.248403][ T9277] tc_modify_qdisc+0xdcf/0x2120 [ 326.250229][ T9277] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 326.252175][ T9277] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 326.254115][ T9277] rtnetlink_rcv_msg+0x3c9/0xe90 [ 326.256007][ T9277] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 326.257745][ T9277] ? ref_tracker_free+0x37e/0x6c0 [ 326.259456][ T9277] netlink_rcv_skb+0x159/0x420 [ 326.260985][ T9277] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 326.262811][ T9277] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 326.264465][ T9277] ? netlink_deliver_tap+0x1ae/0xcc0 [ 326.266191][ T9277] netlink_unicast+0x585/0x850 [ 326.267889][ T9277] ? __pfx_netlink_unicast+0x10/0x10 [ 326.269854][ T9277] netlink_sendmsg+0x8b0/0xda0 [ 326.271701][ T9277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.273978][ T9277] ? apparmor_socket_sendmsg+0x165/0x280 [ 326.275994][ T9277] ____sys_sendmsg+0xa4d/0xbe0 [ 326.277630][ T9277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.279320][ T9277] ? __pfx_____sys_sendmsg+0x10/0x10 [ 326.281415][ T9277] ? plist_check_list+0x1b8/0x280 [ 326.283086][ T9277] ? plist_del+0x308/0x510 [ 326.284544][ T9277] ___sys_sendmsg+0x190/0x1e0 [ 326.286066][ T9277] ? __pfx____sys_sendmsg+0x10/0x10 [ 326.287789][ T9277] ? futex_wake+0x220/0x5e0 [ 326.289359][ T9277] ? find_held_lock+0x2b/0x80 [ 326.291071][ T9277] __sys_sendmsg+0x160/0x210 [ 326.292776][ T9277] ? __pfx___sys_sendmsg+0x10/0x10 [ 326.294606][ T9277] __do_fast_syscall_32+0x13a/0x8b0 [ 326.296416][ T9277] ? lockdep_hardirqs_on+0x7d/0x110 [ 326.298082][ T9277] do_fast_syscall_32+0x32/0x70 [ 326.299745][ T9277] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 326.301736][ T9277] RIP: 0023:0xf700efec [ 326.303000][ T9277] Code: Unable to access opcode bytes at 0xf700efc2. [ 326.305282][ T9277] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 326.307972][ T9277] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000800012c0 [ 326.311212][ T9277] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 326.314469][ T9277] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 326.317347][ T9277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.320078][ T9277] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 326.322665][ T9277] [ 326.323779][ T9277] Modules linked in: [ 326.325136][ T9277] CR2: fffffffffffffc10 [ 326.326491][ T9277] ---[ end trace 0000000000000000 ]--- [ 326.328312][ T9277] RIP: 0010:strnlen+0x4b/0x80 [ 326.328336][ T9277] Code: 49 89 fc 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 <80> 38 00 75 d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c c3 cc cc cc cc 48 [ 326.328347][ T9277] RSP: 0018:ffffc90006307110 EFLAGS: 00010246 [ 326.328357][ T9277] RAX: fffffffffffffc10 RBX: dffffc0000000000 RCX: 0000000000000000 [ 326.328364][ T9277] RDX: 0000000000000000 RSI: 0000000000000010 RDI: fffffffffffffc10 [ 326.328371][ T9277] RBP: fffffffffffffc20 R08: 0000000000000007 R09: 0000000000000000 [ 326.328378][ T9277] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffc10 [ 326.328384][ T9277] R13: ffff88801c6f3e00 R14: 0000000000000006 R15: 0000000000000010 [ 326.328391][ T9277] FS: 0000000000000000(0000) GS:ffff888096c67000(0063) knlGS:00000000f53fdb40 [ 326.328413][ T9277] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 326.328423][ T9277] CR2: 00000000f700f000 CR3: 0000000074e79000 CR4: 0000000000352ef0 [ 326.328430][ T9277] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 326.328440][ T9277] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 326.328453][ T9277] Kernel panic - not syncing: Fatal exception [ 326.369968][ T9277] Kernel Offset: disabled [ 326.371517][ T9277] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:01:55 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=ffffc900042bff48 RCX=ffffffff821388df RDX=0000000000000000 RSI=ffffffff8c622300 RDI=ffffffff8bcd4677 RBP=ffffc900042bff38 RSP=ffffc900042bff00 R8 =0000000000000000 R9 =fffffbfff228a58b R10=0000000000000000 R11=0000000000000000 R12=ffff888049418000 R13=0000000008000010 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8bcd467c RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096967000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000809be000 CR3=000000006c89b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000022000000000 0000000900000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000002 RBX=ffffc900039bfb20 RCX=0000000000000000 RDX=ffff888074ec4b00 RSI=ffffffff81feb443 RDI=0000000000000000 RBP=ffffc900039bfc50 RSP=ffffc900039bfad8 R8 =0000000000000002 R9 =0000000000000000 R10=ffffc900039bfb60 R11=ffffffff81d697b9 R12=0000000000000000 R13=ffffc900039bfc90 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff820b3c76 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096a67000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080030000 CR3=000000006c89b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000800000 RBX=ffff888028bb1710 RCX=0000000000000017 RDX=ffff888024ec0000 RSI=ffffffff86bd978a RDI=ffff888024ec0000 RBP=0000000000000017 RSP=ffffc90003fb7048 R8 =0000000000000005 R9 =000000000000001f R10=0000000000000017 R11=0000000000000012 R12=ffffc90000415138 R13=ffff888028bb176c R14=ffff888028bb1718 R15=0000000000000000 RIP=ffffffff86bd9797 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f7105777300 ffffffff 00c00000 GS =0000 ffff888096b67000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055ad9150ef40 CR3=0000000051cab000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=b14ec363816f56e8 dd8af3834d6660d6 b14ec363816f56e8 dd8af3834d6660d6 b14ec363816f56e8 dd8af3834d6660d6 b14ec363816f56e8 dd8af3834d6660d6 ZMM18=30a0cb3bfe0d78e7 1bc03ac05ce969e0 30a0cb3bfe0d78e7 1bc03ac05ce969e0 30a0cb3bfe0d78e7 1bc03ac05ce969e0 30a0cb3bfe0d78e7 1bc03ac05ce969e0 ZMM19=590a000000000000 0000000000000004 590a000000000000 0000000000000003 590a000000000000 0000000000000002 590a000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 014ed40036336f65 6469762f7665642f 01ffffffffffffff ffe5080280030004 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004080006800201 c7080008004edc00 316f656469762f76 65642f01ffffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffe7080680 0320080006080020 0800060174d202ea c080021608004608 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080003f4f8030280 848080080003f4f0 0300080003f4e803 0fffffffff0203f4 ZMM25=1bc03ac01bc03ac0 1bc03ac01bc03ac0 1bc03ac01bc03ac0 1bc03ac01bc03ac0 1bc03ac01bc03ac0 1bc03ac01bc03ac0 1bc03ac01bc03ac0 1bc03ac01bc03ac0 ZMM26=fe0d78e7fe0d78e7 fe0d78e7fe0d78e7 fe0d78e7fe0d78e7 fe0d78e7fe0d78e7 fe0d78e7fe0d78e7 fe0d78e7fe0d78e7 fe0d78e7fe0d78e7 fe0d78e7fe0d78e7 ZMM27=30a0cb3b30a0cb3b 30a0cb3b30a0cb3b 30a0cb3b30a0cb3b 30a0cb3b30a0cb3b 30a0cb3b30a0cb3b 30a0cb3b30a0cb3b 30a0cb3b30a0cb3b 30a0cb3b30a0cb3b ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=580a0000580a0000 580a0000580a0000 580a0000580a0000 580a0000580a0000 580a0000580a0000 580a0000580a0000 580a0000580a0000 580a0000580a0000 info registers vcpu 3 CPU#3 RAX=000000000000006e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85ae24d5 RDI=ffffffff9bc501e0 RBP=ffffffff9bc501a0 RSP=ffffc90006306828 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023 R12=0000000000000000 R13=000000000000006e R14=0000000000000001 R15=ffffc90006306b40 RIP=ffffffff85ae24ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096c67000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=fffffffffffffc10 CR3=0000000074e79000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000