last executing test programs: 1m16.235348628s ago: executing program 3 (id=1089): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="30fdff00d1b722375c6148be1a3e30089d2264", @ANYBLOB="200027bd7000fddbdfa507000000080001000100000039ff0300", @ANYRES32=r2, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') prlimit64(0x0, 0xe, 0x0, 0x0) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000080)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="f20b05"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000140)={0x1, 0x82, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000020601010000000000000000000000000c000780060005404e2200000500010006000000050005000a00000005000400000000000900020073797a31000000000c00030068617370004621fd5ddbf3c57fe14641d6dfa6a2bd757b48e13269b45191bcc487f3232dbd8b52760726bdf4783a9fcb7b44e9703b4d8aad244ab8f5bb983473d1b2f84faf7608854c9f125484410a767a7f2b6956ec2d3e9d686e4ef91fbf22dd"], 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000f20000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000040)={0x3, r8, 0x10000000, 0x80000005, 0xb, 0x1fd, 0x1}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000280)='workqueue_activate_work\x00', r9}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x107142, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) 1m14.514494087s ago: executing program 3 (id=1103): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x75, &(0x7f00000002c0)="1a00000002000000", 0x8) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)={0x2c, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1m14.513243003s ago: executing program 3 (id=1104): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000540)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001180), 0x2a01, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020200020c0000000000000000000000030006000000000002004e2364010101000000000000000002000100000000000000fb0000000000030005000000000002004e22ac141444000000000000000001000800000000000100140100000000e42bdcd9f1fb6b03026ce4ca30e65c955fe6e510ae65847ed169404887afd1912278abfff8ff2dbe2740ab88833ac2ee218fbc0b00000000000036d5ffed2444367ef777b0409be3e6ac9261c89738"], 0x60}, 0x1, 0x7}, 0x0) 1m14.377757857s ago: executing program 3 (id=1106): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000004e000102"], 0x14}}, 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000004e000102"], 0x14}}, 0x0) (async) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) (async) umount2(&(0x7f0000000100)='./file0\x00', 0x8) (async) 1m14.376866691s ago: executing program 3 (id=1107): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x3f2e}, 0x8, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000300)={0x692e}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRES8=r1], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x632881, 0x19d) write$P9_RREADLINK(r5, &(0x7f0000000180)={0x10, 0x17, 0xfffd, {0x7, './file0'}}, 0xe80) open(&(0x7f0000000140)='./file0\x00', 0x33f, 0xfe) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x48040, &(0x7f00000003c0)='grpquotaA\xf0\x8bh\xc1R9\x05\xf7\xd7\xdb\xcc\x84\xae1&\xb7l\xbc\x8b\v\x807\x97\x97\x92\xc8\xf7\xbe/\xde\x1a\xc4n\'\x82\x89O\xde\xf6\xa0\xfd\x1b.\xb0\xa7\xf3\x9c\xb8\x84U\xbb\xdb\xfc\xa9\x14\xc5=B9\xdd\x1e\xcd]\x98c\xa1\xa2;`\xd9\x8b_\xe1\xa4\xce\xe6\xb3Z#n6\xb1v\xde\x15\f\xd4\xd1\x11\xb5S\x94\x9e0\xe2\xbe\xe2Mfw\x1dlv!?\xb9\x9c\xce\xbc?\x06<\x19\x06\x05\xe7\xd8\xb6\x97$M\x19\xa5\xe8\xc0~\xed\n\xbb') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000034cb63077b538bfaeaab10000000000000000000000000200000000"], 0x0, 0x1a}, 0x28) umount2(&(0x7f0000000340)='./file0\x00', 0x0) 1m14.254746113s ago: executing program 3 (id=1109): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0xe}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x4}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x80000000440, 0xe053, 0x2, 0xfffffffffffffffd, 0x2004c8, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x2000, 0x4, 0x3ff], 0x5000, 0x2a0217}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000300)={0xb0000000, 0x6, 0x6, 0x8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004ec0)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m14.186466757s ago: executing program 32 (id=1109): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0xe}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x4}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x80000000440, 0xe053, 0x2, 0xfffffffffffffffd, 0x2004c8, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x2000, 0x4, 0x3ff], 0x5000, 0x2a0217}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000300)={0xb0000000, 0x6, 0x6, 0x8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004ec0)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.002764092s ago: executing program 4 (id=1594): getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000040)={0xa, 0x4e21, 0x5, @local, 0x1}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010101, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x8000000000002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000003, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r6, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000180)={0x5, {{0xa, 0x4e20, 0x6, @remote, 0x9}}, {{0xa, 0x4e22, 0xffffffff, @private0, 0x8}}}, 0x104) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r7, &(0x7f0000000cc0)=[{{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x1, 0x48094) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000140)={'\x00', 0x24fb, 0x9, 0x746, 0x5, 0x7, 0x0}) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x60, r4, 0x100, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24008014}, 0x1) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000040)=""/60, 0x304000, 0x0, 0x0, 0x2}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000004440)=""/5) 4.352499428s ago: executing program 4 (id=1596): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000040)={0x0, 0x2}, 0x8) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) 4.324172516s ago: executing program 4 (id=1597): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='mm_page_alloc\x00', r0}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x100000000000000, 0x20000000000000b2, 0x1}}, 0x40) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)=@x86={0x4, 0x8, 0xf2, 0x0, 0x2, 0x9, 0xa6, 0x1, 0xb, 0x2, 0x35, 0x1, 0x0, 0x5, 0x1, 0x8, 0xc, 0x1, 0x2, '\x00', 0x0, 0xe}) 4.287225498s ago: executing program 4 (id=1599): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000240)=""/4096) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/cgroup\x00') r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r4, 0x800455d1, &(0x7f0000000680)) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) 3.064366943s ago: executing program 2 (id=1613): prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x4a7c0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@gettaction={0x14, 0x32, 0x801, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x880e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = epoll_create1(0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xffe) r6 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_pwait(r6, &(0x7f0000000200)=[{}], 0x1, 0x101, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000400)={0xa}) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 2.713304347s ago: executing program 4 (id=1614): socket$kcm(0x10, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) add_key$user(&(0x7f0000000200), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'ip6gre0\x00'}}, 0x1e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0xe, 0xfffffffffffffead, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d}, 0x4c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x420001, 0x187) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @private2}, 0x1c) listen(r3, 0xfffffffc) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010000001c00018cffffffffffffff0008000300ac1414aa0800060006000000"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000229fbdbdf61ae000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0xe4c55c1b84f900b4) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(r3, &(0x7f0000000340)={0xa, 0x4e24, 0x2c4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9bd5}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000140)=0x200000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2.371346056s ago: executing program 0 (id=1615): r0 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000002080)={'nat\x00', 0xd0, "ee14b4175d759aaab7c5b1bd47c3f9e0e6b00c361cfe6f294c62c03b51d53358cccc7f80a3e8fbdea8c3c446aec6811bbc70c3f842a078c726403dbf3b03ee418a823b74dc557f842ed291b170882a67c17b66807f6f93aaaef165ef1017c55cef8129baea39774e447b26085f0fbd5737b0105e419f6966dc927590c389bc129850a5fb841fe2db49842fa52708455ba49c3e811a2cfac3be4d73f8f9e5fb1402e50e5ca90e79c11debe691387cc77ab30ad9abd51449d75799ab3bc7deba07200b93b7532cf48bb5d59d86a7c82fa6"}, &(0x7f0000002180)=0xf4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = openat$vnet(0xffffff9c, &(0x7f00000021c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000002680)={0x8, 0x0, [{0x0, 0x60, &(0x7f0000002200)=""/96}, {0xffff1000, 0x97, &(0x7f0000002280)=""/151}, {0xdddd0000, 0x23, &(0x7f0000002340)=""/35}, {0x4000, 0x1d, &(0x7f0000002380)=""/29}, {0xf000, 0x45, &(0x7f00000023c0)=""/69}, {0x4, 0xf3, &(0x7f0000002440)=""/243}, {0x4, 0x1b, &(0x7f0000002540)=""/27}, {0xeeee0000, 0xd6, &(0x7f0000002580)=""/214}]}) write$FUSE_CREATE_OPEN(r0, &(0x7f00000027c0)={0xa0, 0xffffffffffffffda, r1, {{0x2, 0x2, 0xff, 0x7f, 0xefbc, 0x7, {0x2, 0x6, 0x6, 0x7, 0x6, 0x5, 0xce, 0x3, 0x2, 0x1000, 0x3, r2, r3, 0x4, 0x1}}, {0x0, 0x4}}}, 0xa0) ioctl$VIDIOC_S_CROP(r6, 0x4014563c, &(0x7f0000002880)={0x6, {0x4, 0x65, 0x579, 0x100}}) sendto$ax25(0xffffffffffffffff, &(0x7f00000028c0)="d847553a4528c8d0c22d54709d9e8e406fe584520745d7fbf51ede1947f5dd8b76a3b85ff4106ff5628a79d0467d548d8e171142e35506c3ca85afb381fdd947ef2fbade4fb8d8f0cf11bedce51451321b2ed47ad4b0cf73086ccd1b298b2c477b1d8792625332cbbe65b1b142e3207ea7a20ea855", 0x75, 0x4000, &(0x7f0000002940)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f00000029c0)={0x0, 0x7fff, 0x0, [0xf, 0x9, 0x1, 0x3, 0x7ff], [0x40, 0x7fffffff, 0xff, 0x3ff, 0x8, 0x3, 0x9, 0x3, 0x7, 0x7, 0xd, 0x8, 0x6, 0x400, 0x5, 0x6, 0x1ff, 0x0, 0x8, 0x3a17, 0x2, 0x10, 0x8, 0x80000001, 0xfffffffffffffff7, 0x1, 0x8, 0x4, 0x4, 0x4db, 0xffffffff, 0x8, 0x2, 0x5, 0xb6, 0x100, 0x70, 0xb, 0x80000001, 0x27d, 0x10001, 0x8, 0xfa7, 0x7, 0x7fffffffffffffff, 0x0, 0xde58, 0x1, 0x2, 0x8, 0x5, 0x8000000000000000, 0x8, 0xffffffffffff8001, 0x7, 0x9, 0xffffffffffff8001, 0x8, 0x9, 0x101, 0x33, 0xf, 0x9, 0x1, 0x8000000000000000, 0x8b2, 0xfffffffffffffff7, 0x9, 0x7fff, 0x3, 0xcab, 0x9, 0x401, 0x7, 0x9, 0x100, 0x7, 0x4, 0x9, 0x1, 0xbf5, 0x4, 0x6c34d2f2, 0x6, 0x6, 0xace1, 0x9, 0x80000001, 0x2, 0x8, 0xff, 0x8001, 0x1, 0xd9, 0x6, 0x1, 0xfffffffffffffffc, 0x9, 0x8c, 0x5, 0x2, 0x7, 0x9, 0x63, 0xfbe5, 0xffffffffffff539b, 0x2, 0x9, 0x6, 0x6, 0x3, 0x0, 0xb, 0x3, 0x6, 0x5, 0x3, 0x5, 0x1, 0x8, 0x7]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000002e00)={{r6}, 0x0, 0x2, @unused=[0x0, 0x1a, 0x80000000, 0x1], @devid=r7}) r8 = openat$snapshot(0xffffff9c, &(0x7f0000003e00), 0xb0000, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r8, 0x80083313, &(0x7f0000003e40)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f0000003ec0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000003f00)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003fc0)={0x1, 0x58, &(0x7f0000003f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r9, &(0x7f0000004280)={&(0x7f0000003e80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004240)={&(0x7f0000004000)={0x208, r10, 0x4, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r11}, {0x170, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x208}}, 0x40) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f00000042c0)={r7, 0xc49, 0x7, 0x1}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000046c0)={0x40, 0x0, 0x8000, 0xf4bc, 0x8001, 0x695, 0x5, 0x9, 0x0}, &(0x7f0000004700)=0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000004740)={r13, 0x4, 0x10}, &(0x7f0000004780)=0xc) r14 = syz_open_dev$vivid(&(0x7f00000047c0), 0x1, 0x2) ioctl$VIDIOC_G_DV_TIMINGS(r14, 0xc0845658, &(0x7f0000004800)={0x0, @bt={0xf1, 0x0, 0x0, 0x0, 0xff, 0x8000, 0x2, 0x7, 0x1, 0x10001, 0x7, 0x16, 0xc5000000, 0x6, 0x22, 0x4, {0x101, 0x7}, 0x5, 0xa}}) r15 = syz_io_uring_setup(0x66b1, &(0x7f00000048c0)={0x0, 0xb5aa, 0xc008, 0x2, 0x64}, &(0x7f0000004940), &(0x7f0000004980)) io_uring_setup(0x41f9, &(0x7f00000049c0)={0x0, 0xc461, 0x3061, 0x2, 0x260, 0x0, r15}) r16 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSETD(r16, 0x5423, &(0x7f0000004a40)=0x1) socket(0x23, 0x3, 0xf0b) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc04c5609, &(0x7f0000004ac0)={0x8, 0xa, 0x4, 0x40, 0x7, {0x0, 0xea60}, {0x0, 0x1, 0x9, 0x9, 0x24, 0x5, "553768d5"}, 0x4d66, 0x4, {}, 0x5}) 2.325160613s ago: executing program 0 (id=1616): eventfd(0x7) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0100000004001000ffff00000b00000001000000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0100000004001000ffff00000b00000001000000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r1}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r1}, 0x38) setxattr$trusted_overlay_upper(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040), 0x0, 0x0, 0x3) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) (async) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x6}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x6}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0xfffd, 0x13, 0x0, 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001c000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000015010000033800001d13fcff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 2.032329001s ago: executing program 1 (id=1619): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x0, 0xffffffff]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={r3, 0x80000}) 1.996486218s ago: executing program 2 (id=1620): landlock_create_ruleset(&(0x7f00000001c0)={0xc000, 0x4}, 0x18, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000100)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d00030000000080000000000000000000000700000000000000080000000000400005000000000000000204"], 0x78) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) 1.913218384s ago: executing program 2 (id=1621): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) close_range(r0, r3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) sched_getattr(0x0, &(0x7f00000000c0)={0x38}, 0x38, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$sock_bt_hci(r4, 0x400448c9, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4401, @empty}, 0x10) sendto$inet(r5, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) r6 = openat$udambuf(0xffffff9c, &(0x7f0000000380), 0x2) ioctl$UDMABUF_CREATE_LIST(r6, 0x40087543, &(0x7f00000003c0)={0x1, 0x1, [{0xffffffffffffffff, 0x0, 0x1fffff000, 0xfffffffff0000000}]}) unshare(0x40020000) 1.911155599s ago: executing program 1 (id=1622): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0xc2, &(0x7f00000002c0)={@local, @link_local, @val={@void, {0x8100, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b74000c00e63b9ba2ea4f115a67245b00", "584cbf2649a50f2dbc436fa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "9cfd56d3c86e55010000000000000000000000004137dfff2f8f00", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r2 = syz_io_uring_setup(0x83b, &(0x7f00000000c0)={0x0, 0x11e, 0x0, 0x1, 0x319}, &(0x7f0000000140)=0x0, &(0x7f0000000400)=0x0) r5 = socket(0x1d, 0x2, 0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x40, 0x4, r5, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000000c0)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f00000003c0), 0x12) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth1_to_bridge\x00', &(0x7f0000000340)=@ethtool_gstrings={0x1b, 0x6}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) syz_emit_ethernet(0xc2, &(0x7f00000002c0)={@local, @link_local, @val={@void, {0x8100, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b74000c00e63b9ba2ea4f115a67245b00", "584cbf2649a50f2dbc436fa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "9cfd56d3c86e55010000000000000000000000004137dfff2f8f00", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async) syz_io_uring_setup(0x83b, &(0x7f00000000c0)={0x0, 0x11e, 0x0, 0x1, 0x319}, &(0x7f0000000140), &(0x7f0000000400)) (async) socket(0x1d, 0x2, 0x6) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x40, 0x4, r5, 0x0, 0x0, 0x0, 0x80800}) (async) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r6, &(0x7f00000000c0)='cpuacct.usage\x00', 0x2, 0x0) (async) write$cgroup_int(r7, &(0x7f00000003c0), 0x12) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth1_to_bridge\x00', &(0x7f0000000340)=@ethtool_gstrings={0x1b, 0x6}}) (async) 1.718223223s ago: executing program 4 (id=1623): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="30fdff00d1b722375c6148be1a3e30089d2264", @ANYRES16=r2, @ANYBLOB="200027bd7000fddbdfa507000000080001000100000039ff0300", @ANYRES32=r3, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') prlimit64(0x0, 0xe, 0x0, 0x0) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000080)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="f20b05"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000140)={0x1, 0x82, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000020601010000000000000000000000000c000780060005404e2200000500010006000000050005000a00000005000400000000000900020073797a31000000000c00030068617370004621fd5ddbf3c57fe14641d6dfa6a2bd757b48e13269b45191bcc487f3232dbd8b52760726bdf4783a9fcb7b44e9703b4d8aad244ab8f5bb983473d1b2f84faf7608854c9f125484410a767a7f2b6956ec2d3e9d686e4ef91fbf22dd"], 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000f20000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000040)={0x3, r9, 0x10000000, 0x80000005, 0xb, 0x1fd, 0x1}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000280)='workqueue_activate_work\x00', r10}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x107142, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) 1.354027736s ago: executing program 1 (id=1624): syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000100080a000100beaa060000000000"], 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x64, 0x24, 0xe0b, 0x70bd2b, 0x3, {0x0, 0x0, 0x0, r9, {0x0, 0x5}, {0x1, 0xe}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1, 0xff13, 0x0, 0xffff8000, 0xfffffffd, 0xfffffffc}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1ff}, @TCA_RATE={0x6, 0x5, {0x8}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x64}}, 0x40000) bind$packet(r6, &(0x7f0000000400)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$packet(r6, &(0x7f0000000080)="1555f6acfd136f8ed06375bd86dd", 0xe, 0x0, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) read$FUSE(r4, &(0x7f0000006300)={0x2020}, 0x2020) 985.68557ms ago: executing program 2 (id=1625): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4004, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x637000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4008094) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc0f8565c, &(0x7f00000001c0)={0x2000000, 0x1, 0x2, {0x1, @raw_data="7160795237b7120a0082785a69fa9beaaa7b08eb04cb6777082f86e523d94f6fdf229aed642d559a5e0a2724736ee88c14772b8ad2c9e49c7b337b739851408431d878d464ae5c974631f47d096d30e469e782e8a8bcb319cb180e82772eb750146251e633710a08c23e5dd61be10569705807213929f2879679263868388087946507b7ca339f52033b689a688927e4f78f395267e271713b4ab6c9d70e3679429bf7450305153e8abe0bfeafbe72406b48fe1ed5059d6b3290cc3dc1950427d29066d9fe2e7618"}, 0x4}) openat$cgroup_ro(r0, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x28, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f0000000180)={'ipvs\x00'}, &(0x7f00000001c0)=0x1e) rt_sigsuspend(0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000010000304000000000000000000000000475ffbbe2320fd71d568d0f218493436de2ee422a85a31b32dee379c8573d8061307e2c06d51d3d1cf4789cfcb05c23ab18e794b1a4b73ae7dc4b57b5dd93ebbabb3750086323df25879567480e33a9ad27229cfbdbc26294064486808ab0e3bebb205e02fbf6c6c39769063793b45d5300ed9271dd5a0a26e47", @ANYRES32=0x0, @ANYBLOB="7fff0000000000001c0012800b0001006d616373656300000c00028005000c0000000000140035006d616373656330000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) 947.944247ms ago: executing program 2 (id=1626): r0 = socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(r1, 0x7, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) fcntl$setflags(r0, 0x2, 0x1) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000080), 0x8) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x181082, 0x157) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000440)={{0x6, 0x7, 0x5, 0x4, 'syz0\x00', 0x8}, 0x6, 0x2, 0x4b70520f, r1, 0x3, 0x3c49, 'syz0\x00', &(0x7f0000000280)=['$\x00', 'asymmetric\x00', '\x00'], 0xe}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r5, 0x400455c8, 0x4) ioctl$TIOCSTI(r5, 0x5412, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, 0x1c) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) 409.359688ms ago: executing program 0 (id=1627): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x80000000, 0x10081) r1 = dup2(r0, r0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @private=0xa010101}, 0x1, 0x0, 0x2}}, 0x2e) socket$inet6(0xa, 0x2, 0x6) syz_open_dev$sndmidi(&(0x7f0000000080), 0xfd1, 0x111000) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x453, 0x20, 0x70bd26, 0x25dfdbfe, "d01a279eab62452b6776c4404606fd68e0d60a8b5746e60e4d76976495", ["", "", "", ""]}, 0x30}}, 0x48) r3 = openat$cgroup_type(r1, &(0x7f00000001c0), 0x2, 0x0) ppoll(&(0x7f0000000200)=[{r0, 0x2000}, {r3}, {r2, 0x20}, {r2, 0x60}], 0x4, &(0x7f0000000240), &(0x7f0000000280)={[0x0, 0xff]}, 0x8) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f00000002c0)={0x84, 0x8, 0x1, 0xa, 0x0, [@private1={0xfc, 0x1, '\x00', 0x40}, @private0, @empty, @empty]}, 0x48) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x7) r4 = openat$cgroup_procs(r1, &(0x7f0000000340)='cgroup.threads\x00', 0x2, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(rfc4543(morus640-generic))\x00'}, 0x58) recvmmsg(r1, &(0x7f0000001a00)=[{{&(0x7f0000000400)=@can, 0x80, &(0x7f0000000480), 0x0, &(0x7f00000004c0)=""/4096, 0x1000}, 0xfffffffc}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000014c0)=""/85, 0x55}, {&(0x7f0000001540)=""/93, 0x5d}], 0x2, &(0x7f0000001600)=""/14, 0xe}, 0x9}, {{&(0x7f0000001640)=@isdn, 0x80, &(0x7f0000001900)=[{&(0x7f00000016c0)=""/75, 0x4b}, {&(0x7f0000001740)=""/182, 0xb6}, {&(0x7f0000001800)=""/82, 0x52}, {&(0x7f0000001880)=""/94, 0x5e}], 0x4, &(0x7f0000001940)=""/189, 0xbd}, 0xe1}], 0x3, 0x10000, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000001a80)={0x4}) socket$nl_rdma(0x10, 0x3, 0x14) r5 = open(&(0x7f0000001ac0)='./file0\x00', 0x100, 0x1) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f0000001b00)={"b0f1fa0bacebe67fbd9e9763de13575d23e129fe6c4f0162520904d50681", 0x9, 0x1, 0x0, 0x7, 0xe02, 0xc89, 0x45d, 0x4, [0xfffff782, 0xcd, 0x2, 0x10000, 0xc0000000, 0x9, 0x9, 0x8, 0x6fbed4a6, 0x803, 0x5, 0x0, 0x0, 0x8, 0x4bb5, 0x458ae0d3, 0xfffffff9, 0x6, 0xb]}) getsockopt$XDP_MMAP_OFFSETS(r5, 0x11b, 0x1, &(0x7f0000001bc0), &(0x7f0000001c40)=0x80) ioctl$IOCTL_START_ACCEL_DEV(r5, 0x40096102, &(0x7f0000002080)={{&(0x7f0000002000)={'Accelerator1\x00', {&(0x7f0000001d40)=@adf_str={@format={'Cy', '1', 'NumConcurrentAsymRequests\x00'}, {"634d8088d9b129139254fec6135230d3a65683591cd90c5398fcefdbc3918f62c0e68228ef7661634b2a3b8e446d2d4fded222e8fd754a78b654828fbbb6508e"}, {&(0x7f0000001c80)=@adf_hex={@normal='NumberCyInstances\x00', {0x7fffffff}}}}}, {&(0x7f0000001f80)={'Accelerator0\x00', {&(0x7f0000001ec0)=@adf_dec={@bank={'Bank', '0', 'InterruptCoalescingNumResponses\x00'}, {0x100000001}, {&(0x7f0000001e00)=@adf_hex={@format={'Cy', '1', 'RingSymRx\x00'}, {0xb6c}}}}}}}}}}) r6 = openat$apparmor_task_current(0xffffff9c, &(0x7f00000020c0), 0x2, 0x0) readv(r6, &(0x7f0000002140)=[{&(0x7f0000002100)=""/45, 0x2d}], 0x1) syslog(0x1dd44fdc, &(0x7f0000002180)=""/103, 0x67) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000002240), r1) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000002300)={&(0x7f0000002200), 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x1c, r7, 0x400, 0x70bd2a, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4008014) utimensat(r1, &(0x7f0000002340)='./file0\x00', &(0x7f0000002380), 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f00000023c0)={0x2, 0xf}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000002400)) r8 = gettid() ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000002440)={r8}) 383.580578ms ago: executing program 1 (id=1628): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x10000841}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="48fd000010001f0c010000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e2400000400060008000a00", @ANYRES32=r2, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 313.146406ms ago: executing program 1 (id=1629): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = socket$inet(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=r2, @ANYRESDEC=r4, @ANYRES64=r2], 0x20000600}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = dup(0xffffffffffffffff) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r8 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x7fffefff}], 0x2}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) rt_sigsuspend(0x0, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x5}]}}]}, 0xa8}}, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x30) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 285.546376ms ago: executing program 0 (id=1630): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x0, 0xffffffff]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={r3, 0x80000}) 243.018013ms ago: executing program 0 (id=1631): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x2, 0x1) (async) r2 = syz_open_dev$video(&(0x7f0000000040), 0x8000000a7, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0185647, &(0x7f0000000080)={0xf0003e7, 0x1, 0x6, 0xffffffffffffffff, 0xffe7, &(0x7f0000000000)={0x980912, 0xe43, '\x00', @value=0x5}}) (async, rerun: 64) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) (async, rerun: 64) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3, 0xffffff00, 0x5}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x0, 0x2, 0x4, 0x8}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x2404c080}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000140)={0x0, 0x1}, 0x8) 239.255391ms ago: executing program 1 (id=1632): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_pgetevents(r1, 0x7, 0x7, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}], 0x0, 0x0) io_getevents(r1, 0x2, 0x2, &(0x7f0000000440)=[{}, {}], 0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r2 = syz_io_uring_setup(0x204a, &(0x7f0000001300)={0x0, 0x71fe, 0x10, 0x1, 0xcb}, &(0x7f0000001380), &(0x7f00000013c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) io_uring_register$IORING_UNREGISTER_RING_FDS(r2, 0x15, &(0x7f0000000740)=[{0x0, 0x1, 0x0, 0x0, &(0x7f0000001780)}, {0x0, 0x0, 0x0, 0x0, 0x0}, {0xa, 0x1, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/189, 0xbd}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000180)}, {&(0x7f00000001c0)=""/147, 0x93}, {&(0x7f0000000280)=""/74, 0x4a}, {&(0x7f0000000300)=""/235, 0xeb}, {&(0x7f0000000400)=""/212, 0xd4}, {&(0x7f0000000500)=""/64, 0x40}, {&(0x7f0000000540)=""/107, 0x6b}, {&(0x7f00000005c0)=""/163, 0xa3}], &(0x7f0000000700)=[0x14, 0x5, 0x4]}], 0x3) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r2, 0x1e, &(0x7f0000000000)={r2}, 0x1) 182.572717ms ago: executing program 0 (id=1633): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cf", 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{0xfffc2001, 0x80a0000, 0x4, 0xd, 0xf4, 0x8, 0x9, 0x1, 0xe, 0x3, 0x1, 0x65}, {0xeeee8000, 0x8000000, 0xf, 0xc, 0x8, 0xa, 0x1d, 0x3, 0x1, 0xfa, 0x7, 0x80}, {0x8000000, 0x0, 0x8, 0x3, 0x0, 0x4, 0x76, 0x7, 0xa4, 0x5, 0x1}, {0xffffb000, 0x80a0000, 0x8, 0x7, 0x10, 0x6, 0x40, 0x1, 0x0, 0x2, 0x80, 0x50}, {0x4, 0x1, 0x10, 0x0, 0x56, 0x3, 0xbb, 0x8, 0x7f, 0x0, 0x2, 0xc}, {0xeeef0000, 0xeeef0000, 0x0, 0x6, 0x9d, 0x2, 0x9, 0x80, 0x6, 0x3, 0x38, 0xe}, {0xdddd0000, 0x2a222000, 0x8, 0xa, 0x7, 0x2, 0xf9, 0x1, 0xf9, 0x3, 0x6, 0x6}, {0x80a0000, 0xffff1000, 0xf, 0xe, 0x1, 0x8, 0x7, 0xf1, 0xaf, 0x0, 0x5, 0x5e}, {0x5000}, {0xeeee0000, 0x2}, 0x20000001, 0x0, 0x80a0000, 0x100649, 0x10001, 0x400, 0x8080000, [0x400, 0x2, 0x80, 0xb9]}) r4 = fsmount(r2, 0x1, 0x0) unlinkat(r4, 0x0, 0x200) chmod(0x0, 0x42) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x102) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r5, 0x0) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r7, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) shutdown(0xffffffffffffffff, 0x3b3ec04e0e1636c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 2 (id=1634): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002640), &(0x7f0000000000), 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) recvmsg$can_raw(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002880)=""/4112, 0x1010}], 0x1}, 0x10000) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4}}, [@NFT_MSG_DELRULE={0x5c, 0x8, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}]}, @NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0xd00, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xf0}}, 0x4000000) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10) kernel console output (not intermixed with test programs): r parsing attributes in process `syz.3.852'. [ 182.462187][ T9430] 8021q: adding VLAN 0 to HW filter on device bond3 [ 182.475319][ T9430] bond3: entered promiscuous mode [ 182.477987][ T9430] bond0: (slave bond3): Enslaving as an active interface with an up link [ 182.538801][ T9436] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 182.541515][ T9436] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 182.548680][ T9436] vhci_hcd vhci_hcd.0: Device attached [ 182.646689][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.851'. [ 182.794921][ T53] usb 41-1: new low-speed USB device number 6 using vhci_hcd [ 182.966181][ T9438] vhci_hcd: connection reset by peer [ 182.968069][ T13] vhci_hcd: stop threads [ 182.969489][ T13] vhci_hcd: release socket [ 182.971104][ T13] vhci_hcd: disconnect device [ 183.079662][ T9455] netlink: 'syz.1.858': attribute type 30 has an invalid length. [ 183.149058][ T9465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.861'. [ 183.830159][ T9493] overlayfs: conflicting options: userxattr,metacopy=on [ 183.929008][ T9498] Bluetooth: MGMT ver 1.23 [ 183.943613][ T9498] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 183.949250][ T9498] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 184.090135][ T9507] bond0: (slave syz_tun): Releasing backup interface [ 184.106866][ T9507] bond1: (slave gretap1): Releasing active interface [ 184.199945][ T9507] team0: Mode changed to "loadbalance" [ 184.208575][ T9507] netlink: 'syz.3.873': attribute type 10 has an invalid length. [ 184.218684][ T9507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.222480][ T9507] team0: Port device bond0 added [ 184.245314][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.873'. [ 184.315144][ T9507] team0 (unregistering): Port device bond0 removed [ 184.338234][ T9505] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.451351][ T9505] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.525188][ T9509] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 184.529390][ T9509] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 184.531427][ T9509] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 184.580610][ T9505] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.655459][ T9516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.876'. [ 184.660215][ T9505] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.771129][ T1141] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.791795][ T1141] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.797122][ T40] kauditd_printk_skb: 347 callbacks suppressed [ 184.797132][ T40] audit: type=1326 audit(1756284048.242:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.1.878" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 184.812668][ T40] audit: type=1326 audit(1756284048.242:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.1.878" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 184.815363][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.820449][ T40] audit: type=1326 audit(1756284048.242:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.1.878" exe="/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 184.830696][ T40] audit: type=1326 audit(1756284048.242:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.1.878" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 184.833447][ T1141] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.838672][ T40] audit: type=1326 audit(1756284048.242:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.1.878" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 184.847741][ T40] audit: type=1326 audit(1756284048.242:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.1.878" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 184.857794][ T40] audit: type=1326 audit(1756284048.242:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.1.878" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 184.864384][ T40] audit: type=1326 audit(1756284048.242:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.1.878" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 184.877987][ T40] audit: type=1326 audit(1756284048.242:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.1.878" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 184.886021][ T40] audit: type=1326 audit(1756284048.242:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.1.878" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 184.912993][ T9526] sp0: Synchronizing with TNC [ 184.921939][ T9527] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 184.930507][ T9529] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 184.943023][ T9526] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.993715][ T9527] sp0: Found TNC [ 185.009506][ T9532] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 185.011944][ T9532] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 185.018452][ T9532] vhci_hcd vhci_hcd.0: Device attached [ 185.022191][ T9526] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.246774][ T9526] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.274753][ T6041] usb 39-1: new low-speed USB device number 6 using vhci_hcd [ 185.341773][ T9526] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.441197][ T1141] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.452693][ T1141] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.464450][ T1141] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.480264][ T1141] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.886373][ T9533] vhci_hcd: connection reset by peer [ 185.908032][ T1224] vhci_hcd: stop threads [ 185.909640][ T1224] vhci_hcd: release socket [ 185.911408][ T1224] vhci_hcd: disconnect device [ 186.546077][ T5982] Bluetooth: hci1: command 0x0c1a tx timeout [ 186.548489][ T5982] Bluetooth: hci0: command 0x0c1a tx timeout [ 186.550922][ T5986] Bluetooth: hci3: command 0x0c1a tx timeout [ 186.555145][ T9562] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3663400886 (468915313408 ns) > initial count (101983626112 ns). Using initial count to start timer. [ 187.644840][ T9585] FAULT_INJECTION: forcing a failure. [ 187.644840][ T9585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.649138][ T9585] CPU: 1 UID: 0 PID: 9585 Comm: syz.0.892 Not tainted syzkaller #0 PREEMPT(full) [ 187.649153][ T9585] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 187.649159][ T9585] Call Trace: [ 187.649164][ T9585] [ 187.649179][ T9585] dump_stack_lvl+0x16c/0x1f0 [ 187.649218][ T9585] should_fail_ex+0x512/0x640 [ 187.649242][ T9585] _copy_from_user+0x2e/0xd0 [ 187.649259][ T9585] get_compat_msghdr+0xa7/0x170 [ 187.649273][ T9585] ? __pfx_get_compat_msghdr+0x10/0x10 [ 187.649291][ T9585] ___sys_sendmsg+0x1ae/0x1d0 [ 187.649307][ T9585] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.649328][ T9585] ? find_held_lock+0x2b/0x80 [ 187.649348][ T9585] __sys_sendmsg+0x16d/0x220 [ 187.649362][ T9585] ? __pfx___sys_sendmsg+0x10/0x10 [ 187.649382][ T9585] ? rcu_is_watching+0x12/0xc0 [ 187.649395][ T9585] __do_fast_syscall_32+0x7c/0x3a0 [ 187.649411][ T9585] do_fast_syscall_32+0x32/0x80 [ 187.649426][ T9585] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 187.649439][ T9585] RIP: 0023:0xf7f91579 [ 187.649448][ T9585] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 187.649458][ T9585] RSP: 002b:00000000f549555c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 187.649469][ T9585] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000440 [ 187.649475][ T9585] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 187.649481][ T9585] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 187.649487][ T9585] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 187.649493][ T9585] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 187.649505][ T9585] [ 188.048053][ T9596] binder_alloc: binder_alloc_mmap_handler: 9594 80ffd000-81000000 already mapped failed -16 [ 188.052379][ T9595] binder_alloc: binder_alloc_mmap_handler: 9594 80ffd000-80ffe000 already mapped failed -16 [ 188.060757][ T9596] binder_alloc: binder_alloc_mmap_handler: 9594 80ffd000-80ffe000 already mapped failed -16 [ 188.076929][ T9595] netlink: 16 bytes leftover after parsing attributes in process `syz.1.895'. [ 188.169750][ T53] vhci_hcd: vhci_device speed not set [ 188.231634][ T9593] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 188.429397][ T9620] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 188.456635][ T1141] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 188.460128][ T1141] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 188.485009][ T6039] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 188.524822][ T61] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 188.604807][ T61] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 188.972938][ T9643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.900'. [ 189.232534][ T9654] vlan2: entered promiscuous mode [ 189.235161][ T9654] macvtap0: entered promiscuous mode [ 189.596497][ T53] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 189.648597][ T5978] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 189.753162][ T9668] overlay: Bad value for 'workdir' [ 189.764854][ T53] usb 5-1: Using ep0 maxpacket: 8 [ 189.778151][ T53] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.782285][ T53] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.787776][ T53] usb 5-1: config 0 interface 0 has no altsetting 0 [ 189.790073][ T53] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 189.793010][ T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.806067][ T53] usb 5-1: config 0 descriptor?? [ 190.151336][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 190.151449][ T40] audit: type=1804 audit(1756284053.592:708): pid=9672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.908" name="/newroot/215/bus" dev="tmpfs" ino=1145 res=1 errno=0 [ 190.246674][ T53] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 190.249722][ T53] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 190.373716][ T53] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 190.379959][ T53] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 190.382527][ T53] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 190.387534][ T53] mcp2221 0003:04D8:00DD.0011: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 190.425432][ T6041] vhci_hcd: vhci_device speed not set [ 190.631251][ T53] usb 5-1: USB disconnect, device number 8 [ 191.632380][ T9687] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 191.634452][ T9687] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 191.636992][ T9687] vhci_hcd vhci_hcd.0: Device attached [ 192.121060][ T6041] usb 43-1: new low-speed USB device number 5 using vhci_hcd [ 192.224959][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 192.300463][ T9690] vhci_hcd: connection reset by peer [ 192.302551][ T1224] vhci_hcd: stop threads [ 192.303914][ T1224] vhci_hcd: release socket [ 192.306594][ T1224] vhci_hcd: disconnect device [ 192.640015][ T9705] overlayfs: failed to resolve './file0': -2 [ 192.671982][ T40] audit: type=1804 audit(1756284056.112:709): pid=9705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.917" name="/newroot/211/bus/bus" dev="tmpfs" ino=1155 res=1 errno=0 [ 193.588319][ T9737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.927'. [ 193.654150][ T40] audit: type=1326 audit(1756284057.092:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9732 comm="syz.2.926" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7fc00000 [ 193.747637][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.749667][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.005345][ T9751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.929'. [ 194.151640][ T40] audit: type=1326 audit(1756284057.592:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9732 comm="syz.2.926" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb2579 code=0x7fc00000 [ 194.161131][ T40] audit: type=1326 audit(1756284057.592:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9732 comm="syz.2.926" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7fc00000 [ 194.170215][ T40] audit: type=1326 audit(1756284057.592:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9732 comm="syz.2.926" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7fc00000 [ 194.179651][ T40] audit: type=1326 audit(1756284057.592:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9732 comm="syz.2.926" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7fc00000 [ 194.190667][ T40] audit: type=1326 audit(1756284057.592:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9732 comm="syz.2.926" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7fc00000 [ 194.200169][ T40] audit: type=1326 audit(1756284057.592:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9732 comm="syz.2.926" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7fc00000 [ 194.210959][ T40] audit: type=1326 audit(1756284057.592:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9732 comm="syz.2.926" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7fc00000 [ 194.225085][ T61] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 194.295178][ T9767] netlink: 20 bytes leftover after parsing attributes in process `syz.3.933'. [ 194.298286][ T9768] netlink: 20 bytes leftover after parsing attributes in process `syz.3.933'. [ 194.384852][ T61] usb 6-1: Using ep0 maxpacket: 16 [ 194.387932][ T61] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 194.390534][ T61] usb 6-1: config 0 has no interface number 0 [ 194.394111][ T61] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 194.397981][ T61] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.400489][ T61] usb 6-1: Product: syz [ 194.401885][ T61] usb 6-1: Manufacturer: syz [ 194.403352][ T61] usb 6-1: SerialNumber: syz [ 194.406326][ T61] usb 6-1: config 0 descriptor?? [ 194.413106][ T61] hub 6-1:0.132: bad descriptor, ignoring hub [ 194.415615][ T61] hub 6-1:0.132: probe with driver hub failed with error -5 [ 194.419598][ T61] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.132/input/input17 [ 194.433645][ T9778] netlink: 36 bytes leftover after parsing attributes in process `syz.2.936'. [ 194.497572][ T9779] netlink: 88 bytes leftover after parsing attributes in process `syz.3.935'. [ 195.352328][ T9799] wlan1 speed is unknown, defaulting to 1000 [ 195.389620][ T9800] netlink: 360 bytes leftover after parsing attributes in process `syz.3.941'. [ 195.717375][ T9810] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 195.721621][ T9805] IPVS: stopping backup sync thread 9810 ... [ 195.758464][ T9805] netlink: 20 bytes leftover after parsing attributes in process `syz.0.943'. [ 195.762218][ T9805] netlink: 32 bytes leftover after parsing attributes in process `syz.0.943'. [ 195.819505][ T5373] usb 6-1: reset high-speed USB device number 7 using dummy_hcd [ 195.853333][ T9817] mkiss: ax0: crc mode is auto. [ 195.985679][ T5373] usb 6-1: device firmware changed [ 196.005244][ T6496] usb 6-1: USB disconnect, device number 7 [ 196.184743][ T6496] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 196.364682][ T6496] usb 6-1: Using ep0 maxpacket: 16 [ 196.372430][ T6496] usb 6-1: descriptor type invalid, skip [ 196.375690][ T6496] usb 6-1: descriptor type invalid, skip [ 196.377526][ T6496] usb 6-1: descriptor type invalid, skip [ 196.382008][ T6496] usb 6-1: config 5 has an invalid interface number: 99 but max is 3 [ 196.385295][ T6496] usb 6-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 196.388537][ T6496] usb 6-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 196.391343][ T6496] usb 6-1: config 5 has an invalid interface number: 94 but max is 3 [ 196.394338][ T6496] usb 6-1: config 5 has an invalid interface number: 22 but max is 3 [ 196.397158][ T6496] usb 6-1: config 5 has an invalid interface number: 189 but max is 3 [ 196.399843][ T6496] usb 6-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 196.402694][ T6496] usb 6-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 196.406148][ T6496] usb 6-1: config 5 has no interface number 0 [ 196.408244][ T6496] usb 6-1: config 5 has no interface number 1 [ 196.410295][ T6496] usb 6-1: config 5 has no interface number 2 [ 196.412334][ T6496] usb 6-1: config 5 has no interface number 3 [ 196.415033][ T6496] usb 6-1: config 5 interface 99 altsetting 2 bulk endpoint 0xD has invalid maxpacket 1024 [ 196.418346][ T6496] usb 6-1: config 5 interface 99 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 196.421986][ T6496] usb 6-1: config 5 interface 99 altsetting 2 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 196.425916][ T6496] usb 6-1: config 5 interface 99 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 1024 [ 196.429599][ T6496] usb 6-1: config 5 interface 99 altsetting 2 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 196.433313][ T6496] usb 6-1: config 5 interface 99 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 196.437022][ T6496] usb 6-1: config 5 interface 99 altsetting 2 endpoint 0x9 has invalid maxpacket 80, setting to 64 [ 196.440497][ T6496] usb 6-1: config 5 interface 99 altsetting 2 has an endpoint descriptor with address 0x4E, changing to 0xE [ 196.444426][ T6496] usb 6-1: config 5 interface 99 altsetting 2 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 196.449776][ T6496] usb 6-1: config 5 interface 94 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 196.455349][ T6496] usb 6-1: config 5 interface 94 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 196.459797][ T6496] usb 6-1: config 5 interface 94 altsetting 5 has an endpoint descriptor with address 0xCC, changing to 0x8C [ 196.464674][ T6496] usb 6-1: config 5 interface 94 altsetting 5 endpoint 0x8C has invalid maxpacket 1024, setting to 64 [ 196.469182][ T6496] usb 6-1: config 5 interface 94 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 196.473376][ T6496] usb 6-1: config 5 interface 94 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 196.477898][ T6496] usb 6-1: config 5 interface 22 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 196.482511][ T6496] usb 6-1: config 5 interface 22 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 196.487290][ T6496] usb 6-1: config 5 interface 22 altsetting 2 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 196.491983][ T6496] usb 6-1: config 5 interface 189 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 8 [ 196.496230][ T6496] usb 6-1: config 5 interface 189 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 196.500709][ T6496] usb 6-1: config 5 interface 189 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 196.505420][ T6496] usb 6-1: config 5 interface 189 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 196.509009][ T6496] usb 6-1: config 5 interface 189 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 196.512573][ T6496] usb 6-1: config 5 interface 189 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 196.516399][ T6496] usb 6-1: config 5 interface 189 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 196.519817][ T6496] usb 6-1: config 5 interface 189 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 196.523476][ T6496] usb 6-1: config 5 interface 189 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 196.527822][ T6496] usb 6-1: config 5 interface 189 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 196.531507][ T6496] usb 6-1: config 5 interface 189 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 196.535041][ T6496] usb 6-1: config 5 interface 189 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 196.538491][ T6496] usb 6-1: config 5 interface 99 has no altsetting 0 [ 196.540610][ T6496] usb 6-1: config 5 interface 94 has no altsetting 0 [ 196.542923][ T6496] usb 6-1: config 5 interface 22 has no altsetting 0 [ 196.545581][ T6496] usb 6-1: config 5 interface 189 has no altsetting 0 [ 196.555442][ T6496] usb 6-1: New USB device found, idVendor=0451, idProduct=8140, bcdDevice=fe.c1 [ 196.558635][ T6496] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.561168][ T6496] usb 6-1: Product: syz [ 196.562540][ T6496] usb 6-1: Manufacturer: 琡ے苹滭岬ᘷ쳇䡦ĝ衷겦櫝䞝⤛倀䥽㤉럗ꗖꚭĮ禲貺ኇ븒鶨잘἗䏣갿딖ꎚ⤁ꡪ玀齣繣ᬣ饩ᛯ筞昪앉砌蟁㿽Ðᒌ瓊 [ 196.569324][ T6496] usb 6-1: SerialNumber: syz [ 196.583164][ T9803] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 196.586821][ T9803] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 196.738168][ T9847] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 196.740472][ T9847] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 196.743019][ T9847] vhci_hcd vhci_hcd.0: Device attached [ 196.843012][ T9803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.942'. [ 196.984822][ T5838] usb 41-1: new low-speed USB device number 7 using vhci_hcd [ 197.055119][ T6122] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 197.154105][ T6496] hub 6-1:5.99: Invalid hub with more than one config or interface [ 197.163169][ T6496] hub 6-1:5.99: probe with driver hub failed with error -22 [ 197.198030][ T6496] hub 6-1:5.94: Invalid hub with more than one config or interface [ 197.200916][ T6496] hub 6-1:5.94: probe with driver hub failed with error -22 [ 197.210439][ T6496] usb 6-1: unknown interface protocol 0x72, assuming v1 [ 197.213294][ T6496] usb 6-1: cannot find UAC_HEADER [ 197.215430][ T6122] usb 7-1: Using ep0 maxpacket: 16 [ 197.219891][ T6122] usb 7-1: config 0 has no interfaces? [ 197.221912][ T6122] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 197.235154][ T6122] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.255028][ T6041] vhci_hcd: vhci_device speed not set [ 197.262792][ T6122] usb 7-1: config 0 descriptor?? [ 197.281713][ T6496] snd-usb-audio 6-1:5.94: probe with driver snd-usb-audio failed with error -22 [ 197.292830][ T6496] hub 6-1:5.22: Invalid hub with more than one config or interface [ 197.296359][ T6496] hub 6-1:5.22: probe with driver hub failed with error -22 [ 197.318123][ T6496] hub 6-1:5.189: Invalid hub with more than one config or interface [ 197.321675][ T6496] hub 6-1:5.189: probe with driver hub failed with error -22 [ 197.334306][ T6496] usb 6-1: USB disconnect, device number 8 [ 197.406659][ T8425] udevd[8425]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:5.94/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 197.471645][ T9848] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 5 [ 197.474873][ T61] usb 7-1: USB disconnect, device number 11 [ 197.482734][ T1148] vhci_hcd: stop threads [ 197.515063][ T1148] vhci_hcd: release socket [ 197.533109][ T1148] vhci_hcd: disconnect device [ 197.745742][ T9862] openvswitch: netlink: Multiple metadata blocks provided [ 198.584781][ T9865] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 198.587596][ T9865] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 198.590308][ T9865] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 198.739599][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.742610][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.746213][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.748786][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.751125][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.753929][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.759188][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.761753][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.764947][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.768094][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.770908][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.773678][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.777721][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.781086][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.784242][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.788536][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.791389][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.793799][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.796652][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.798953][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.801249][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.803508][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.805871][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.808156][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.810440][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.812620][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.815935][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.819065][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.822128][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.824843][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.827247][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.829719][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.835302][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.839276][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.842677][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.845304][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.847777][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.850739][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.853003][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.855498][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.857800][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.860352][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.863113][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.866549][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.869541][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.872445][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.876402][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.879139][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.881754][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.892383][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.895856][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.900570][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.902904][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.905448][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.907342][ T9891] input: syz0 as /devices/virtual/input/input18 [ 198.907700][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.912621][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.914994][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.917588][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.921841][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.925141][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.935509][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.949564][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.951928][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.954151][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 198.960641][ T9885] binder: 9884:9885 ioctl c0306201 800001c0 returned -22 [ 199.050676][ T9903] __nla_validate_parse: 6 callbacks suppressed [ 199.050689][ T9903] netlink: 24 bytes leftover after parsing attributes in process `syz.1.969'. [ 199.100347][ T9908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.971'. [ 199.241730][ T40] kauditd_printk_skb: 60 callbacks suppressed [ 199.241741][ T40] audit: type=1326 audit(1756284062.682:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9902 comm="syz.1.969" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x0 [ 199.828473][ T5978] Bluetooth: hci0: command 0x0c1a tx timeout [ 199.831257][ T6058] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 199.834174][ T6058] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 199.925825][ T9952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.976'. [ 200.089235][ T9962] 9pnet_fd: Insufficient options for proto=fd [ 200.144778][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 200.482794][ T9976] trusted_key: encrypted_key: insufficient parameters specified [ 200.634771][ T5978] Bluetooth: hci3: command 0x0c1a tx timeout [ 200.637403][ T5978] Bluetooth: hci1: command 0x0c1a tx timeout [ 200.641671][ T6058] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 200.644364][ T6058] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 200.934888][ T6039] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 201.086840][ T6039] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.091688][ T6039] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 201.097608][ T6039] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 201.101670][ T6039] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.109393][ T6039] usb 6-1: config 0 descriptor?? [ 201.213165][ T9986] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 201.237804][ T61] libceph: connect (1)[c::]:6789 error -101 [ 201.240940][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 201.505139][ T61] libceph: connect (1)[c::]:6789 error -101 [ 201.507163][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 202.014889][ T61] libceph: connect (1)[c::]:6789 error -101 [ 202.016924][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 202.042490][ T9986] ceph: No mds server is up or the cluster is laggy [ 202.089111][ T9998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.989'. [ 202.134740][ T5838] vhci_hcd: vhci_device speed not set [ 202.704964][ T5982] Bluetooth: hci3: command 0x0c1a tx timeout [ 202.705021][ T6058] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 202.709119][ T6058] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 202.761160][ T6039] usb 6-1: string descriptor 0 read error: -71 [ 202.784776][ T6039] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 202.787862][ T6039] usb 6-1: USB disconnect, device number 9 [ 202.806177][T10008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.993'. [ 203.571962][T10024] wlan1 speed is unknown, defaulting to 1000 [ 203.784746][ T6496] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 203.934770][ T6496] usb 7-1: Using ep0 maxpacket: 8 [ 203.941576][ T6496] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.948256][ T6496] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.954185][ T6496] usb 7-1: config 0 interface 0 has no altsetting 0 [ 203.974482][ T6496] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 203.977842][ T6496] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.981713][ T6496] usb 7-1: config 0 descriptor?? [ 204.398645][ T6496] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 204.400961][ T6496] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 204.426426][ T6496] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 204.429300][ T6496] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 204.431869][ T6496] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 204.445742][ T6496] mcp2221 0003:04D8:00DD.0012: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 204.658930][ T5838] usb 7-1: USB disconnect, device number 12 [ 204.968337][T10059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1005'. [ 205.157384][T10065] netlink: 'syz.1.1007': attribute type 11 has an invalid length. [ 205.198292][T10065] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 205.235960][T10070] batadv_slave_1: entered promiscuous mode [ 205.680411][T10087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1013'. [ 206.429926][T10100] wlan1 speed is unknown, defaulting to 1000 [ 206.570211][T10069] batadv_slave_1: left promiscuous mode [ 206.832948][T10100] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1015'. [ 206.900075][T10112] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 206.902882][T10112] bridge4: entered allmulticast mode [ 208.054957][T10146] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 208.057802][T10146] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 208.072890][T10146] vhci_hcd vhci_hcd.0: Device attached [ 208.160640][T10152] loop8: detected capacity change from 0 to 7 [ 208.173829][ T8425] Dev loop8: unable to read RDB block 7 [ 208.196399][ T8425] loop8: unable to read partition table [ 208.199342][ T8425] loop8: partition table beyond EOD, truncated [ 208.304922][ T6041] usb 43-1: new low-speed USB device number 6 using vhci_hcd [ 208.319169][ T8425] Dev loop8: unable to read RDB block 7 [ 208.322072][ T8425] loop8: unable to read partition table [ 208.324396][ T8425] loop8: partition table beyond EOD, truncated [ 208.335693][T10152] Dev loop8: unable to read RDB block 7 [ 208.337623][T10152] loop8: unable to read partition table [ 208.342614][T10152] loop8: partition table beyond EOD, truncated [ 208.346148][T10152] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 208.351899][T10154] Dev loop8: unable to read RDB block 7 [ 208.353703][T10154] loop8: unable to read partition table [ 208.356044][T10154] loop8: partition table beyond EOD, truncated [ 208.363487][T10154] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 208.543360][T10164] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 208.668999][T10147] vhci_hcd: connection reset by peer [ 208.671840][ T1224] vhci_hcd: stop threads [ 208.677826][ T1224] vhci_hcd: release socket [ 208.685486][ T1224] vhci_hcd: disconnect device [ 208.968271][T10170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1031'. [ 209.666254][T10188] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1035'. [ 209.797228][ T6122] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 209.944830][ T6122] usb 7-1: Using ep0 maxpacket: 8 [ 209.953106][ T6122] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.958669][ T6122] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.963935][ T6122] usb 7-1: config 0 interface 0 has no altsetting 0 [ 209.969018][ T6122] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 209.972665][ T6122] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.979168][ T6122] usb 7-1: config 0 descriptor?? [ 210.419299][ T6122] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 210.421534][ T6122] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 210.423736][ T6122] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 210.444767][ T6122] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 210.447139][ T6122] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 210.449703][ T6122] mcp2221 0003:04D8:00DD.0013: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 210.710767][ T1022] usb 7-1: USB disconnect, device number 13 [ 211.012500][T10233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1044'. [ 212.686046][ T6039] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 212.746233][T10281] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1058'. [ 212.808687][T10282] netlink: 892 bytes leftover after parsing attributes in process `syz.0.1058'. [ 212.811891][T10282] netlink: 892 bytes leftover after parsing attributes in process `syz.0.1058'. [ 212.844769][ T6039] usb 7-1: Using ep0 maxpacket: 8 [ 212.849324][ T6039] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.853807][ T6039] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.858128][ T6039] usb 7-1: config 0 interface 0 has no altsetting 0 [ 212.861267][ T6039] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 212.864939][ T6039] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.871796][ T6039] usb 7-1: config 0 descriptor?? [ 213.215729][T10291] dns_resolver: Unsupported server list version (0) [ 213.314375][ T6039] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 213.319522][T10295] tipc: Started in network mode [ 213.321311][T10295] tipc: Node identity 563a6b0283d2, cluster identity 4711 [ 213.324447][T10295] tipc: Enabled bearer , priority 0 [ 213.327231][ T6039] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 213.330003][ T6039] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 213.332891][ T6039] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 213.337624][T10295] syzkaller0: entered allmulticast mode [ 213.340686][ T6039] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 213.344230][ T6039] mcp2221 0003:04D8:00DD.0014: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 213.402594][T10294] tipc: Disabling bearer [ 213.417579][ T6041] vhci_hcd: vhci_device speed not set [ 213.596050][ T1022] usb 7-1: USB disconnect, device number 14 [ 213.864799][T10303] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1064'. [ 214.252162][T10316] netlink: 'syz.2.1067': attribute type 1 has an invalid length. [ 214.394909][ T60] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 214.594738][ T60] usb 6-1: Using ep0 maxpacket: 32 [ 214.600305][ T60] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 214.603401][ T60] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 214.608054][ T60] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 214.612053][ T60] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 214.615185][ T60] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 214.619544][ T60] usb 6-1: config 0 interface 0 has no altsetting 0 [ 214.623727][ T60] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 214.633222][ T60] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 214.636093][ T60] usb 6-1: Product: syz [ 214.637323][ T60] usb 6-1: Manufacturer: syz [ 214.639017][ T60] usb 6-1: SerialNumber: syz [ 214.644238][T10329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1070'. [ 214.684881][ T60] usb 6-1: config 0 descriptor?? [ 214.696291][ T60] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 214.702965][ T60] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 215.014237][T10341] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1072'. [ 215.018744][T10341] 0XD: renamed from macvtap0 (while UP) [ 215.027886][T10341] 0XD: entered allmulticast mode [ 215.030226][T10341] veth0_macvtap: entered allmulticast mode [ 215.033098][T10341] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 215.097657][T10341] hub 1-0:1.0: USB hub found [ 215.106393][T10341] hub 1-0:1.0: 2 ports detected [ 215.218293][T10344] ldusb 6-1:0.0: Couldn't submit interrupt_in_urb -90 [ 215.454958][ T6977] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 215.604737][ T6977] usb 5-1: Using ep0 maxpacket: 8 [ 215.608880][ T6977] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.613666][ T6977] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.617464][ T6977] usb 5-1: config 0 interface 0 has no altsetting 0 [ 215.619626][ T6977] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 215.622552][ T6977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.628598][ T6977] usb 5-1: config 0 descriptor?? [ 216.037621][ T6977] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 216.039899][ T6977] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 216.042172][ T6977] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 216.045065][ T6977] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 216.047703][ T6977] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 216.050355][ T6977] mcp2221 0003:04D8:00DD.0015: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 216.144807][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 216.280235][ T6977] usb 5-1: USB disconnect, device number 9 [ 217.047649][T10372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.059762][T10372] netlink: 'syz.3.1081': attribute type 29 has an invalid length. [ 217.062980][T10372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1081'. [ 217.109969][T10372] wlan1 speed is unknown, defaulting to 1000 [ 217.443930][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1083'. [ 217.687094][ T6041] usb 6-1: USB disconnect, device number 10 [ 217.694772][T10382] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 217.701912][ T6041] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 217.722383][T10383] 9pnet: Found fid 0 not clunked [ 217.773471][T10388] macsec1: entered promiscuous mode [ 217.776235][T10388] veth1_to_batadv: entered promiscuous mode [ 218.154749][ T1022] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 218.325819][ T1022] usb 8-1: Using ep0 maxpacket: 8 [ 218.332823][ T1022] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.338131][ T1022] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.342830][ T1022] usb 8-1: config 0 interface 0 has no altsetting 0 [ 218.345936][ T1022] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 218.349754][ T1022] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.357666][ T1022] usb 8-1: config 0 descriptor?? [ 218.363421][T10415] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 218.366414][T10415] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 218.370612][T10415] vhci_hcd vhci_hcd.0: Device attached [ 218.397720][T10416] vhci_hcd: connection closed [ 218.398130][ T1148] vhci_hcd: stop threads [ 218.401588][ T1148] vhci_hcd: release socket [ 218.403299][ T1148] vhci_hcd: disconnect device [ 218.779783][ T1022] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 218.814727][ T1022] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 218.817051][ T1022] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 218.819491][ T1022] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 218.821820][ T1022] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 218.824412][ T1022] mcp2221 0003:04D8:00DD.0016: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 218.906167][T10438] IPv6: sit1: Disabled Multicast RS [ 218.909082][T10438] sit1: entered allmulticast mode [ 218.913384][ T40] audit: type=1326 audit(1756284082.342:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.1.1097" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 218.921681][T10438] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1097'. [ 218.927993][ T40] audit: type=1326 audit(1756284082.342:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.1.1097" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 218.937572][ T40] audit: type=1326 audit(1756284082.342:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.1.1097" exe="/syz-executor" sig=0 arch=40000003 syscall=178 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 218.949484][ T40] audit: type=1326 audit(1756284082.342:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.1.1097" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 218.960233][ T40] audit: type=1326 audit(1756284082.342:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.1.1097" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 218.972534][ T40] audit: type=1326 audit(1756284082.342:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.1.1097" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 218.981723][ T40] audit: type=1326 audit(1756284082.352:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.1.1097" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 219.011336][ T40] audit: type=1326 audit(1756284082.352:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.1.1097" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 219.030476][ T40] audit: type=1326 audit(1756284082.352:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.1.1097" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 219.052391][ T40] audit: type=1326 audit(1756284082.352:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.1.1097" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 219.077418][ T61] usb 8-1: USB disconnect, device number 17 [ 219.198429][T10450] overlayfs: invalid origin (000000790000fe0000000069100c0000000000950000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 219.530099][T10454] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1100'. [ 219.644535][T10462] random: crng reseeded on system resumption [ 219.670797][T10464] overlayfs: failed to resolve './file2': -2 [ 219.870652][T10476] netlink: 'syz.0.1108': attribute type 1 has an invalid length. [ 219.902673][ T13] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.964023][ T13] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.077203][ T13] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.136579][ T5978] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 220.141637][ T5978] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 220.146608][ T5978] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 220.152426][ T13] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.154721][ T5978] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 220.159656][ T5978] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 220.172732][ T5982] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 220.175632][ T5982] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 220.178841][ T5982] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 220.184399][ T5982] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 220.190934][ T5982] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 220.215831][T10482] wlan1 speed is unknown, defaulting to 1000 [ 220.305182][ T6061] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 220.376521][T10486] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1113'. [ 220.379897][T10486] netlink: 'syz.1.1113': attribute type 4 has an invalid length. [ 220.454691][ T6061] usb 5-1: Using ep0 maxpacket: 8 [ 220.457720][ T6061] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.461859][ T6061] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.466937][ T6061] usb 5-1: config 0 interface 0 has no altsetting 0 [ 220.469152][ T6061] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 220.472004][ T6061] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.478109][ T6061] usb 5-1: config 0 descriptor?? [ 220.541023][ T13] dvmrp0 (unregistering): left allmulticast mode [ 220.886679][ T6061] mcp2221 0003:04D8:00DD.0017: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 220.932863][ T13] bond0 (unregistering): Released all slaves [ 221.032724][ T13] bond1 (unregistering): Released all slaves [ 221.130033][ T13] tipc: Left network mode [ 221.178181][T10482] chnl_net:caif_netlink_parms(): no params data found [ 221.195223][ T60] usb 5-1: USB disconnect, device number 10 [ 221.307471][T10514] fuse: Unknown parameter '' [ 221.359217][T10482] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.361621][T10482] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.363988][T10482] bridge_slave_0: entered allmulticast mode [ 221.371412][T10482] bridge_slave_0: entered promiscuous mode [ 221.376947][T10482] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.382321][T10482] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.384890][T10482] bridge_slave_1: entered allmulticast mode [ 221.388396][T10482] bridge_slave_1: entered promiscuous mode [ 221.463042][T10523] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 221.463058][T10482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.472499][T10482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.541437][T10528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1120'. [ 221.550709][T10523] /dev/sr0: Can't open blockdev [ 221.557885][T10482] team0: Port device team_slave_0 added [ 221.593464][T10482] team0: Port device team_slave_1 added [ 221.704780][T10482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.706994][T10482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.716118][T10482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.720576][T10482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.723088][T10482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.735932][T10482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.791242][T10482] hsr_slave_0: entered promiscuous mode [ 221.794049][T10482] hsr_slave_1: entered promiscuous mode [ 221.796774][T10482] debugfs: 'hsr0' already exists in 'hsr' [ 221.798608][T10482] Cannot create hsr debugfs directory [ 221.818085][ T13] hsr_slave_0: left promiscuous mode [ 221.821168][ T13] hsr_slave_1: left promiscuous mode [ 221.851453][ T13] veth1_macvtap: left promiscuous mode [ 221.853668][ T13] veth0_macvtap: left allmulticast mode [ 221.855838][ T13] veth0_macvtap: left promiscuous mode [ 221.857652][ T13] veth1_vlan: left promiscuous mode [ 221.859347][ T13] veth0_vlan: left promiscuous mode [ 222.235732][ T5982] Bluetooth: hci0: command tx timeout [ 223.619453][T10574] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1132'. [ 223.623415][T10574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1132'. [ 223.624304][T10482] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 223.636375][T10482] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 223.643453][T10482] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 223.656664][T10482] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 223.755008][ T6496] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 223.827347][T10482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.851239][T10482] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.859461][ T13] IPVS: stop unused estimator thread 0... [ 223.861489][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.864746][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.880478][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.883477][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.934772][ T6496] usb 6-1: Using ep0 maxpacket: 8 [ 223.939698][ T6496] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.949493][ T6496] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.957916][ T6496] usb 6-1: config 0 interface 0 has no altsetting 0 [ 223.974720][ T6496] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 223.984229][ T6496] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.993406][ T6496] usb 6-1: config 0 descriptor?? [ 224.197581][T10482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.304867][ T5982] Bluetooth: hci0: command tx timeout [ 224.417654][ T6496] hid_parser_main: 5 callbacks suppressed [ 224.417677][ T6496] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 224.422143][ T6496] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 224.425471][ T6496] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 224.426387][T10482] veth0_vlan: entered promiscuous mode [ 224.427997][ T6496] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 224.431921][ T6496] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 224.434497][T10482] veth1_vlan: entered promiscuous mode [ 224.434525][ T6496] mcp2221 0003:04D8:00DD.0018: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 224.454478][T10482] veth0_macvtap: entered promiscuous mode [ 224.462268][T10482] veth1_macvtap: entered promiscuous mode [ 224.472371][T10482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.479291][T10482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.487827][ T1148] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.491451][ T1148] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.494950][ T1148] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.497814][ T1148] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.571808][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.574427][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.596289][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.599531][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.651439][ T6496] usb 6-1: USB disconnect, device number 11 [ 224.686428][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 224.686452][ T40] audit: type=1326 audit(1756284088.132:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.4.1111" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 224.698973][ T40] audit: type=1326 audit(1756284088.132:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.4.1111" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 224.709086][ T40] audit: type=1326 audit(1756284088.132:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.4.1111" exe="/syz-executor" sig=0 arch=40000003 syscall=266 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 224.718243][ T40] audit: type=1326 audit(1756284088.132:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.4.1111" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 224.726231][ T40] audit: type=1326 audit(1756284088.132:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.4.1111" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 224.783640][T10626] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1137'. [ 224.887788][T10631] vimc link validate: Sensor A:src:16x16 (0x33424752, 12, 0, 5, 2) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 226.201472][T10649] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 226.203604][T10649] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 226.206493][T10649] vhci_hcd vhci_hcd.0: Device attached [ 226.335240][T10658] 9pnet_fd: Insufficient options for proto=fd [ 226.335398][T10659] 9pnet_fd: Insufficient options for proto=fd [ 226.394844][ T5982] Bluetooth: hci0: command tx timeout [ 226.524925][ T6122] usb 37-1: new low-speed USB device number 7 using vhci_hcd [ 226.584878][T10652] vhci_hcd: connection reset by peer [ 226.590782][ T12] vhci_hcd: stop threads [ 226.592595][ T12] vhci_hcd: release socket [ 226.594535][ T12] vhci_hcd: disconnect device [ 226.948228][T10679] netlink: 'syz.1.1149': attribute type 1 has an invalid length. [ 227.371494][ T60] libceph: connect (1)[c::]:6789 error -101 [ 227.379360][ T60] libceph: mon0 (1)[c::]:6789 connect error [ 227.577501][T10686] ceph: No mds server is up or the cluster is laggy [ 227.635159][ T60] libceph: connect (1)[c::]:6789 error -101 [ 227.637850][ T60] libceph: mon0 (1)[c::]:6789 connect error [ 228.464820][ T5982] Bluetooth: hci0: command tx timeout [ 228.562400][T10720] 9pnet_fd: Insufficient options for proto=fd [ 228.766525][T10736] [U]  [ 228.829670][ T40] audit: type=1326 audit(1756284092.272:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10729 comm="syz.2.1162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 228.838404][ T40] audit: type=1326 audit(1756284092.272:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10729 comm="syz.2.1162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 228.845815][ T40] audit: type=1326 audit(1756284092.292:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10729 comm="syz.2.1162" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 228.852893][ T40] audit: type=1326 audit(1756284092.292:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10729 comm="syz.2.1162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 228.860779][ T40] audit: type=1326 audit(1756284092.292:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10729 comm="syz.2.1162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 229.080876][T10741] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 229.225108][T10752] tipc: Enabling of bearer rejected, failed to enable media [ 229.334153][T10758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1168'. [ 229.682218][T10769] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1172'. [ 229.689535][T10769] netlink: 'syz.2.1172': attribute type 12 has an invalid length. [ 229.692996][T10769] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1172'. [ 229.730839][T10771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1173'. [ 230.033275][ T40] kauditd_printk_skb: 43 callbacks suppressed [ 230.033374][ T40] audit: type=1326 audit(1756284093.472:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10753 comm="syz.4.1168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 230.047246][ T40] audit: type=1326 audit(1756284093.472:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10753 comm="syz.4.1168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 230.202219][T10791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1175'. [ 231.655005][ T6122] vhci_hcd: vhci_device speed not set [ 231.802354][T10827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1186'. [ 231.805771][T10830] geneve2: entered promiscuous mode [ 231.807471][T10830] geneve2: entered allmulticast mode [ 231.810837][ T59] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 231.813607][ T59] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 231.829671][ T59] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 231.834740][ T59] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 232.010447][ T40] audit: type=1326 audit(1756284095.452:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10839 comm="syz.2.1188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 232.022634][ T40] audit: type=1326 audit(1756284095.452:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10839 comm="syz.2.1188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 232.031974][ T40] audit: type=1326 audit(1756284095.462:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10839 comm="syz.2.1188" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 232.042752][ T40] audit: type=1326 audit(1756284095.462:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10839 comm="syz.2.1188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 232.055688][ T40] audit: type=1326 audit(1756284095.462:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10839 comm="syz.2.1188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 232.067332][ T40] audit: type=1326 audit(1756284095.462:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10839 comm="syz.2.1188" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 232.082016][ T40] audit: type=1326 audit(1756284095.462:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10839 comm="syz.2.1188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 232.089675][ T40] audit: type=1326 audit(1756284095.462:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10839 comm="syz.2.1188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 232.190689][T10855] netlink: 'syz.0.1191': attribute type 4 has an invalid length. [ 232.816808][T10878] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1197'. [ 232.819843][T10878] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1197'. [ 233.371237][T10896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1203'. [ 233.550456][T10905] GUP no longer grows the stack in syz.0.1202 (10905): 80004000-8000a000 (80002000) [ 233.554985][T10905] CPU: 1 UID: 0 PID: 10905 Comm: syz.0.1202 Not tainted syzkaller #0 PREEMPT(full) [ 233.555014][T10905] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 233.555025][T10905] Call Trace: [ 233.555032][T10905] [ 233.555040][T10905] dump_stack_lvl+0x16c/0x1f0 [ 233.555070][T10905] gup_vma_lookup+0x1d2/0x220 [ 233.555098][T10905] __get_user_pages+0x243/0x34a0 [ 233.555128][T10905] ? find_held_lock+0x2b/0x80 [ 233.555161][T10905] ? __pfx___get_user_pages+0x10/0x10 [ 233.555197][T10905] get_user_pages_remote+0x243/0xab0 [ 233.555222][T10905] ? mas_parent_gap+0x6f0/0x7b0 [ 233.555248][T10905] ? __pfx_get_user_pages_remote+0x10/0x10 [ 233.555277][T10905] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 233.555308][T10905] __access_remote_vm+0x24d/0x850 [ 233.555337][T10905] ? do_raw_spin_lock+0x12c/0x2b0 [ 233.555361][T10905] ? __pfx___access_remote_vm+0x10/0x10 [ 233.555393][T10905] proc_pid_cmdline_read+0x4de/0x8e0 [ 233.555416][T10905] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 233.555435][T10905] ? rw_verify_area+0xcf/0x6c0 [ 233.555457][T10905] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 233.555476][T10905] vfs_readv+0x5c1/0x8b0 [ 233.555498][T10905] ? __pfx_vfs_readv+0x10/0x10 [ 233.555533][T10905] ? __fget_files+0x20e/0x3c0 [ 233.555566][T10905] ? do_preadv+0x1a6/0x270 [ 233.555580][T10905] do_preadv+0x1a6/0x270 [ 233.555599][T10905] ? __pfx_do_preadv+0x10/0x10 [ 233.555622][T10905] ? rcu_is_watching+0x12/0xc0 [ 233.555644][T10905] __do_fast_syscall_32+0x7c/0x3a0 [ 233.555668][T10905] do_fast_syscall_32+0x32/0x80 [ 233.555693][T10905] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 233.555715][T10905] RIP: 0023:0xf7f91579 [ 233.555728][T10905] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 233.555745][T10905] RSP: 002b:00000000f547455c EFLAGS: 00000296 ORIG_RAX: 000000000000014d [ 233.555764][T10905] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000040 [ 233.555774][T10905] RDX: 0000000000000001 RSI: 0000000000000300 RDI: 0000000000000000 [ 233.555785][T10905] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 233.555793][T10905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.555805][T10905] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 233.555828][T10905] [ 233.560064][T10907] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1204'. [ 234.441152][T10940] bridge6: entered allmulticast mode [ 235.840260][T10969] __nla_validate_parse: 1 callbacks suppressed [ 235.840285][T10969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1217'. [ 235.860488][T10974] tipc: Enabling of bearer rejected, media not registered [ 236.063648][T10996] IPVS: length: 62 != 8 [ 236.145024][ T61] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 236.294861][ T61] usb 5-1: Using ep0 maxpacket: 8 [ 236.298883][ T61] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.303945][ T61] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.312363][ T61] usb 5-1: config 0 interface 0 has no altsetting 0 [ 236.320138][ T61] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 236.323748][ T61] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.325467][ T6122] libceph: connect (1)[c::]:6789 error -101 [ 236.328357][ T61] usb 5-1: config 0 descriptor?? [ 236.330869][ T6122] libceph: mon0 (1)[c::]:6789 connect error [ 236.486184][T11011] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 236.488854][T11011] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 236.492491][T11011] vhci_hcd vhci_hcd.0: Device attached [ 236.646849][T11007] ceph: No mds server is up or the cluster is laggy [ 236.764982][ T6122] usb 39-1: new low-speed USB device number 7 using vhci_hcd [ 236.776248][ T61] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0 [ 236.783399][ T61] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0 [ 236.793230][ T61] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0 [ 236.799781][ T61] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0 [ 236.807740][ T61] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0 [ 236.812634][ T61] mcp2221 0003:04D8:00DD.0019: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 236.962425][T11012] vhci_hcd: connection reset by peer [ 236.966465][ T12] vhci_hcd: stop threads [ 236.968472][ T12] vhci_hcd: release socket [ 236.970463][ T12] vhci_hcd: disconnect device [ 237.009203][ T6041] usb 5-1: USB disconnect, device number 11 [ 237.654922][T11037] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 237.657081][T11037] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 237.662758][T11037] vhci_hcd vhci_hcd.0: Device attached [ 237.668063][T11038] vhci_hcd: connection closed [ 237.669299][ T12] vhci_hcd: stop threads [ 237.761384][ T12] vhci_hcd: release socket [ 237.763060][ T12] vhci_hcd: disconnect device [ 237.808733][T11053] syz.2.1234 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 237.911050][T11057] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1229'. [ 238.099722][T11063] IPVS: length: 139 != 8 [ 238.109570][ T40] kauditd_printk_skb: 41 callbacks suppressed [ 238.109584][ T40] audit: type=1326 audit(1756284101.552:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11062 comm="syz.2.1236" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x0 [ 238.454795][ T1022] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 238.624728][ T1022] usb 9-1: Using ep0 maxpacket: 8 [ 238.629522][ T1022] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.752521][ T1022] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.763985][ T1022] usb 9-1: config 0 interface 0 has no altsetting 0 [ 238.767039][ T1022] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 238.770760][ T1022] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.776787][ T1022] usb 9-1: config 0 descriptor?? [ 238.883545][T11075] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 238.886231][T11075] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 238.889670][T11075] vhci_hcd vhci_hcd.0: Device attached [ 239.005831][T11083] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1241'. [ 239.010258][T11083] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1241'. [ 239.080045][ T40] audit: type=1326 audit(1756284102.522:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11088 comm="syz.2.1242" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb2579 code=0x0 [ 239.203312][ T1022] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 239.212222][ T1022] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 239.221695][ T1022] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 239.228136][ T1022] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 239.235832][ T1022] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 239.243122][ T1022] mcp2221 0003:04D8:00DD.001A: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 239.442846][ T60] usb 9-1: USB disconnect, device number 2 [ 239.472782][T11076] vhci_hcd: connection closed [ 239.473015][ T59] vhci_hcd: stop threads [ 239.476069][ T59] vhci_hcd: release socket [ 239.479262][ T59] vhci_hcd: disconnect device [ 240.396233][T11100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.401566][T11100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.406542][T11100] bond0 (unregistering): Released all slaves [ 240.438569][T11109] pim6reg: entered allmulticast mode [ 240.668427][T11125] netlink: 'syz.1.1251': attribute type 1 has an invalid length. [ 240.713245][T11119] random: crng reseeded on system resumption [ 240.716160][T11125] 8021q: adding VLAN 0 to HW filter on device bond6 [ 240.739621][T11125] 8021q: adding VLAN 0 to HW filter on device bond6 [ 240.742626][T11125] bond6: (slave vti0): The slave device specified does not support setting the MAC address [ 240.749795][T11125] bond6: (slave vti0): Error -95 calling set_mac_address [ 240.985710][T11097] pim6reg: left allmulticast mode [ 241.021173][T11133] JFS: charset not found [ 241.394746][ T1022] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 241.471111][T11142] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 241.664911][ T1022] usb 7-1: Using ep0 maxpacket: 8 [ 241.670975][ T1022] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.678221][ T1022] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.681352][ T1022] usb 7-1: config 0 interface 0 has no altsetting 0 [ 241.683435][ T1022] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 241.687117][ T1022] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.691569][ T1022] usb 7-1: config 0 descriptor?? [ 241.708507][T11145] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 241.711251][T11145] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 241.716136][T11145] vhci_hcd vhci_hcd.0: Device attached [ 241.914882][ T6122] vhci_hcd: vhci_device speed not set [ 242.024812][ T53] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 242.102051][ T1022] mcp2221 0003:04D8:00DD.001B: unknown main item tag 0x0 [ 242.105296][ T1022] mcp2221 0003:04D8:00DD.001B: unknown main item tag 0x0 [ 242.108180][ T1022] mcp2221 0003:04D8:00DD.001B: unknown main item tag 0x0 [ 242.110570][ T1022] mcp2221 0003:04D8:00DD.001B: unknown main item tag 0x0 [ 242.112897][ T1022] mcp2221 0003:04D8:00DD.001B: unknown main item tag 0x0 [ 242.115929][ T1022] mcp2221 0003:04D8:00DD.001B: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 242.302556][T11146] vhci_hcd: connection reset by peer [ 242.305960][ T1173] vhci_hcd: stop threads [ 242.307767][ T1173] vhci_hcd: release socket [ 242.309743][ T1173] vhci_hcd: disconnect device [ 242.347611][T11176] loop2: detected capacity change from 0 to 7 [ 242.354884][T11176] Dev loop2: unable to read RDB block 7 [ 242.356623][T11176] loop2: unable to read partition table [ 242.358883][T11176] loop2: partition table beyond EOD, truncated [ 242.363505][T11176] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 242.379052][ T1022] usb 7-1: USB disconnect, device number 15 [ 242.452816][T11181] 9pnet_fd: Insufficient options for proto=fd [ 242.664781][ T60] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 242.816899][ T60] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.821569][ T60] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 242.831555][ T60] usb 5-1: language id specifier not provided by device, defaulting to English [ 243.689348][T11199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1270'. [ 245.377733][T11243] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1283'. [ 245.449660][ T60] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 245.453488][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.462436][ T60] usb 5-1: can't set config #1, error -71 [ 245.470722][ T60] usb 5-1: USB disconnect, device number 12 [ 245.526851][T11246] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1283'. [ 245.530616][T11246] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1283'. [ 246.224836][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 246.293792][T11248] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 247.175579][ T53] vhci_hcd: vhci_device speed not set [ 247.429252][T11279] netlink: 'syz.1.1294': attribute type 10 has an invalid length. [ 247.433860][T11279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.436756][T11279] team0: Device bond0 failed to register rx_handler [ 247.462305][T11279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1294'. [ 247.664559][T11285] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 248.155028][T11295] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 248.157327][T11295] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 248.159977][T11295] vhci_hcd vhci_hcd.0: Device attached [ 248.404910][ T1022] usb 37-1: new high-speed USB device number 8 using vhci_hcd [ 248.783820][T11300] vhci_hcd: connection reset by peer [ 248.786790][ T1173] vhci_hcd: stop threads [ 248.788370][ T1173] vhci_hcd: release socket [ 248.790079][ T1173] vhci_hcd: disconnect device [ 249.246797][T11341] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1313'. [ 249.387161][T11345] [U]  [ 249.389782][T11345] [U] K{ [ 249.390959][T11345] [U] T 1ŠFFˊ`GJǘGO/MC [ 249.393540][T11345] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 249.398923][T11345] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 249.402734][T11345] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 249.414764][T11345] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 249.422208][T11345] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 249.426534][T11345] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 249.430536][T11345] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 249.460851][T11345] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 249.463960][T11345] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 249.468331][T11345] [U] 22Ʃ۩X?0;3U [ 249.476577][T11345] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 249.484293][T11345] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 249.487557][T11345] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 249.490444][T11345] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 249.492762][T11345] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 249.497030][T11345] [U] EC [ 249.498308][T11345] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 249.503841][T11344] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 250.058180][T11375] random: crng reseeded on system resumption [ 250.489979][T11379] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.557674][T11379] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.593443][T11378] ubi0: attaching mtd0 [ 250.609680][T11379] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.611691][T11378] ubi0: scanning is finished [ 250.620188][T11378] ubi0: empty MTD device detected [ 250.670046][T11379] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.719627][T11384] tipc: Failed to remove unknown binding: 66,1,1/0:2688807490/2688807492 [ 250.725369][T11384] tipc: Failed to remove unknown binding: 66,1,1/0:2688807490/2688807492 [ 250.728501][T11384] tipc: Failed to remove unknown binding: 66,1,1/0:2688807490/2688807492 [ 250.807552][T11378] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 250.810118][T11378] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 250.816579][T11378] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 250.818982][T11378] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 250.821866][T11378] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 250.824149][T11378] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 250.828399][T11378] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2379011706 [ 250.831638][T11378] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 250.861413][T11387] ubi0: background thread "ubi_bgt0d" started, PID 11387 [ 250.863547][T11380] ubi0: detaching mtd0 [ 250.878981][T11380] ubi0: mtd0 is detached [ 250.900341][ T1224] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.917082][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.935507][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.974406][ T1224] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.064894][ T61] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 251.256003][ T61] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 251.260841][ T61] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023 [ 251.264012][ T61] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 251.267843][ T61] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 251.273723][ T61] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 251.276726][ T61] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.279285][ T61] usb 6-1: Product: syz [ 251.280708][ T61] usb 6-1: Manufacturer: syz [ 251.282477][ T61] usb 6-1: SerialNumber: syz [ 251.287400][ T61] usb 6-1: config 0 descriptor?? [ 251.289747][T11384] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 251.294072][ T61] usb 6-1: ucan: probing device on interface #0 [ 251.296351][ T61] usb 6-1: ucan: invalid endpoint configuration [ 251.298395][ T61] usb 6-1: ucan: probe failed; try to update the device firmware [ 251.708201][T11408] tmpfs: Bad value for 'mpol' [ 251.984794][ T6122] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 252.154721][ T6122] usb 5-1: Using ep0 maxpacket: 32 [ 252.158294][ T6122] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 252.163743][ T6122] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 252.166679][ T6122] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 252.169241][ T6122] usb 5-1: Product: syz [ 252.170811][ T6122] usb 5-1: Manufacturer: syz [ 252.172337][ T6122] usb 5-1: SerialNumber: syz [ 252.178006][ T6122] usb 5-1: config 0 descriptor?? [ 252.180947][T11408] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 252.184720][ T6122] hub 5-1:0.0: bad descriptor, ignoring hub [ 252.186700][ T6122] hub 5-1:0.0: probe with driver hub failed with error -5 [ 252.886308][T11408] usb 5-1: reset high-speed USB device number 13 using dummy_hcd [ 253.015610][T11408] usb 5-1: device descriptor read/64, error -71 [ 253.088009][T11442] netlink: 'syz.2.1339': attribute type 21 has an invalid length. [ 253.091707][T11442] netlink: 'syz.2.1339': attribute type 1 has an invalid length. [ 253.095723][T11442] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1339'. [ 253.265095][T11408] usb 5-1: reset high-speed USB device number 13 using dummy_hcd [ 253.331991][T11445] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 253.334810][T11445] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 253.348207][T11445] vhci_hcd vhci_hcd.0: Device attached [ 253.394883][T11408] usb 5-1: device descriptor read/64, error -71 [ 253.476877][T11447] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 253.494865][ T1022] vhci_hcd: vhci_device speed not set [ 253.646075][ T6041] usb 6-1: USB disconnect, device number 12 [ 253.654821][T11408] usb 5-1: reset high-speed USB device number 13 using dummy_hcd [ 253.662202][ T6122] usb 45-1: new low-speed USB device number 3 using vhci_hcd [ 253.675306][T11408] usb 5-1: device descriptor read/8, error -71 [ 253.873937][ T40] audit: type=1326 audit(1756284373.313:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11459 comm="syz.1.1343" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 253.882034][ T40] audit: type=1326 audit(1756284373.313:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11459 comm="syz.1.1343" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 253.889650][ T40] audit: type=1326 audit(1756284373.313:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11459 comm="syz.1.1343" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 253.896882][ T40] audit: type=1326 audit(1756284373.313:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11459 comm="syz.1.1343" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 253.903816][ T40] audit: type=1326 audit(1756284373.313:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11459 comm="syz.1.1343" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 253.911052][ T40] audit: type=1326 audit(1756284373.313:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11459 comm="syz.1.1343" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 253.919095][T11408] usb 5-1: reset high-speed USB device number 13 using dummy_hcd [ 253.919132][ T40] audit: type=1326 audit(1756284373.313:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11459 comm="syz.1.1343" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 253.922251][T11446] vhci_hcd: connection reset by peer [ 253.929824][ T40] audit: type=1326 audit(1756284373.313:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11459 comm="syz.1.1343" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 253.931243][ T1173] vhci_hcd: stop threads [ 253.937165][ T40] audit: type=1326 audit(1756284373.313:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11459 comm="syz.1.1343" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 253.937191][ T40] audit: type=1326 audit(1756284373.313:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11459 comm="syz.1.1343" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 253.942926][T11408] usb 5-1: device descriptor read/8, error -71 [ 253.946765][ T1173] vhci_hcd: release socket [ 253.957030][ T1173] vhci_hcd: disconnect device [ 254.057089][ T6058] usb 5-1: USB disconnect, device number 13 [ 254.103934][T11479] binder: 11478:11479 unknown command 0 [ 254.107369][T11479] binder: 11478:11479 ioctl c0306201 80000080 returned -22 [ 254.113582][T11479] devpts: Unknown parameter 'max@' [ 254.205079][ T6058] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 254.542861][ T6058] usb 5-1: device descriptor read/64, error -71 [ 255.189754][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.317115][T11511] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1358'. [ 255.814876][T11524] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 255.817210][T11524] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 255.820131][T11524] vhci_hcd vhci_hcd.0: Device attached [ 256.074762][ T53] usb 41-1: new low-speed USB device number 8 using vhci_hcd [ 256.201928][T11535] IPVS: length: 139 != 8 [ 256.220600][T11535] netlink: 'syz.1.1365': attribute type 83 has an invalid length. [ 256.432195][T11525] vhci_hcd: connection reset by peer [ 256.436780][T11544] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 256.450490][ T1141] vhci_hcd: stop threads [ 256.452397][ T1141] vhci_hcd: release socket [ 256.467000][ T1141] vhci_hcd: disconnect device [ 256.890948][T11553] FAULT_INJECTION: forcing a failure. [ 256.890948][T11553] name failslab, interval 1, probability 0, space 0, times 0 [ 256.896301][T11553] CPU: 2 UID: 0 PID: 11553 Comm: syz.4.1371 Not tainted syzkaller #0 PREEMPT(full) [ 256.896318][T11553] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 256.896325][T11553] Call Trace: [ 256.896329][T11553] [ 256.896334][T11553] dump_stack_lvl+0x16c/0x1f0 [ 256.896360][T11553] should_fail_ex+0x512/0x640 [ 256.896379][T11553] ? io_cache_alloc_new+0x45/0xf0 [ 256.896395][T11553] should_failslab+0xc2/0x120 [ 256.896411][T11553] __kmalloc_noprof+0xd2/0x510 [ 256.896427][T11553] io_cache_alloc_new+0x45/0xf0 [ 256.896444][T11553] io_arm_apoll+0x88e/0xa60 [ 256.896460][T11553] ? __pfx_io_arm_apoll+0x10/0x10 [ 256.896473][T11553] ? __pfx_io_accept+0x10/0x10 [ 256.896495][T11553] io_arm_poll_handler+0x223/0x2b0 [ 256.896511][T11553] io_queue_async+0xaf/0x330 [ 256.896524][T11553] io_submit_sqes+0x1746/0x25c0 [ 256.896545][T11553] __do_sys_io_uring_enter+0xd6a/0x1630 [ 256.896562][T11553] ? __fget_files+0x20e/0x3c0 [ 256.896575][T11553] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 256.896591][T11553] ? fput+0x9b/0xd0 [ 256.896606][T11553] ? ksys_write+0x1ac/0x250 [ 256.896619][T11553] ? __pfx_ksys_write+0x10/0x10 [ 256.896633][T11553] ? rcu_is_watching+0x12/0xc0 [ 256.896647][T11553] __do_fast_syscall_32+0x7c/0x3a0 [ 256.896664][T11553] do_fast_syscall_32+0x32/0x80 [ 256.896679][T11553] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 256.896693][T11553] RIP: 0023:0xf7fd5579 [ 256.896703][T11553] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 256.896714][T11553] RSP: 002b:00000000f54f655c EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 256.896725][T11553] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000000047f5 [ 256.896732][T11553] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 256.896738][T11553] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 256.896744][T11553] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 256.896751][T11553] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 256.896765][T11553] [ 257.148347][T11570] tipc: Can't bind to reserved service type 2 [ 257.288756][T11573] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1374'. [ 257.510851][T11584] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=35 (70 ns) > initial count (64 ns). Using initial count to start timer. [ 258.496040][T11590] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 258.611984][T11590] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 258.750613][T11590] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 258.864962][ T6122] vhci_hcd: vhci_device speed not set [ 259.062234][T11590] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 259.203109][ T1141] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 259.212661][ T1141] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 259.238375][ T1148] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 259.252457][ T1148] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 259.417445][T11609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1385'. [ 259.421383][T11609] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1385'. [ 259.678824][T11624] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 259.681635][T11624] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 259.874794][T11624] vhci_hcd vhci_hcd.0: Device attached [ 260.444698][ T6122] usb 46-1: SetAddress Request (2) to port 0 [ 260.446700][ T6122] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 260.487415][T11626] vhci_hcd: connection closed [ 260.487540][T11627] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 260.498518][ T1173] vhci_hcd: stop threads [ 260.499903][ T1173] vhci_hcd: release socket [ 260.504759][ T1173] vhci_hcd: disconnect device [ 261.404735][ T53] vhci_hcd: vhci_device speed not set [ 261.487320][T11655] comedi comedi3: comedi_config --init_data is deprecated [ 261.511849][T11642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1389'. [ 261.734682][ T6041] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 261.986663][ T6041] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 261.990321][ T6041] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 261.993508][ T6041] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 261.996646][ T6041] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.005031][T11655] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 262.011820][ T6041] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 262.364071][T11700] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 262.372491][T11704] binder: 11701:11704 ioctl 4c00 4 returned -22 [ 262.428355][T11707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1409'. [ 262.559270][T11712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1411'. [ 262.782162][ T5838] usb 7-1: USB disconnect, device number 16 [ 263.150319][T11731] netlink: 'syz.2.1415': attribute type 10 has an invalid length. [ 263.153390][T11731] batman_adv: batadv0: Adding interface: team0 [ 263.155515][T11731] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.163494][T11731] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 263.169891][T11731] netlink: 'syz.2.1415': attribute type 10 has an invalid length. [ 263.172763][T11731] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1415'. [ 263.176553][T11731] team0: entered promiscuous mode [ 263.178342][T11731] team_slave_0: entered promiscuous mode [ 263.180434][T11731] team_slave_1: entered promiscuous mode [ 263.184472][T11731] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.187018][T11731] batman_adv: batadv0: Interface activated: team0 [ 263.189154][T11731] batman_adv: batadv0: Interface deactivated: team0 [ 263.191274][T11731] batman_adv: batadv0: Removing interface: team0 [ 263.194082][T11731] bridge0: port 3(team0) entered blocking state [ 263.204915][T11731] bridge0: port 3(team0) entered disabled state [ 263.207351][T11731] team0: entered allmulticast mode [ 263.209421][T11731] team_slave_0: entered allmulticast mode [ 263.211815][T11731] team_slave_1: entered allmulticast mode [ 263.219041][T11731] team0: left allmulticast mode [ 263.221210][T11731] team_slave_0: left allmulticast mode [ 263.223174][T11731] team_slave_1: left allmulticast mode [ 263.326140][T11734] netlink: 'syz.4.1418': attribute type 4 has an invalid length. [ 263.503903][ T40] kauditd_printk_skb: 75 callbacks suppressed [ 263.503920][ T40] audit: type=1326 audit(1756284611.949:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11738 comm="syz.1.1420" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 263.518203][ T40] audit: type=1326 audit(1756284611.969:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11738 comm="syz.1.1420" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 263.527637][ T40] audit: type=1326 audit(1756284611.969:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11738 comm="syz.1.1420" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 263.536238][ T40] audit: type=1326 audit(1756284611.979:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11738 comm="syz.1.1420" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 263.546307][ T40] audit: type=1326 audit(1756284611.979:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11738 comm="syz.1.1420" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 263.555973][ T40] audit: type=1326 audit(1756284611.999:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11738 comm="syz.1.1420" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 263.565546][ T40] audit: type=1326 audit(1756284611.999:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11738 comm="syz.1.1420" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 263.579699][ T40] audit: type=1326 audit(1756284611.999:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11738 comm="syz.1.1420" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 263.677789][ T40] audit: type=1326 audit(1756284612.019:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11738 comm="syz.1.1420" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 263.703514][ T40] audit: type=1326 audit(1756284612.019:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11738 comm="syz.1.1420" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 264.316297][T11751] gre0: entered allmulticast mode [ 264.318791][T11751] gre0: left allmulticast mode [ 264.346760][T11753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1426'. [ 264.473692][T11760] overlay: ./file0 is not a directory [ 265.316919][T11774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1431'. [ 265.505123][ T6122] usb 46-1: device descriptor read/8, error -110 [ 265.788337][T11784] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1435'. [ 265.792254][T11784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1435'. [ 265.795944][T11784] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1435'. [ 265.799085][T11784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1435'. [ 265.906315][ T6122] usb usb46-port1: attempt power cycle [ 266.543780][ T6122] usb usb46-port1: unable to enumerate USB device [ 266.775123][T11813] __nla_validate_parse: 1 callbacks suppressed [ 266.775136][T11813] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1443'. [ 267.364877][ T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 267.546743][ T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.551448][ T24] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 267.560093][ T24] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=10.40 [ 267.563461][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.566229][ T24] usb 9-1: Product: syz [ 267.567783][ T24] usb 9-1: Manufacturer: syz [ 267.571061][ T24] usb 9-1: SerialNumber: syz [ 267.578827][T11821] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 267.784769][T11834] tipc: Started in network mode [ 267.786384][T11834] tipc: Node identity 4, cluster identity 4711 [ 267.788321][T11834] tipc: Node number set to 4 [ 268.655585][ T1022] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 268.814882][ T1022] usb 7-1: Using ep0 maxpacket: 8 [ 268.819582][ T1022] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.824178][ T1022] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.828787][ T1022] usb 7-1: config 0 interface 0 has no altsetting 0 [ 268.831523][ T1022] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 268.835343][ T1022] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.840498][ T1022] usb 7-1: config 0 descriptor?? [ 269.251988][ T1022] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 269.254398][ T1022] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 269.257047][ T1022] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 269.259338][ T1022] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 269.261576][ T1022] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 269.264542][ T1022] mcp2221 0003:04D8:00DD.001C: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 269.518628][ T60] usb 7-1: USB disconnect, device number 17 [ 270.096599][ T24] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 270.113737][ T24] usb 9-1: USB disconnect, device number 3 [ 270.181663][T11872] bond3: entered allmulticast mode [ 270.184262][T11872] 8021q: adding VLAN 0 to HW filter on device bond3 [ 270.428953][T11885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1461'. [ 270.487956][T11885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1461'. [ 271.225512][T11898] fuse: Bad value for 'fd' [ 271.263549][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 271.263564][ T40] audit: type=1326 audit(1756284619.709:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11899 comm="syz.1.1467" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x0 [ 271.266745][T11901] netlink: 'syz.1.1467': attribute type 8 has an invalid length. [ 271.444835][ T6039] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 271.590311][T11920] cgroup2: Unknown parameter '#]#' [ 271.594746][ T6039] usb 9-1: Using ep0 maxpacket: 8 [ 271.598195][ T6039] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.602095][ T6039] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.605582][ T6039] usb 9-1: config 0 interface 0 has no altsetting 0 [ 271.608043][ T6039] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 271.611458][ T6039] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.618401][ T6039] usb 9-1: config 0 descriptor?? [ 271.635823][ T40] audit: type=1326 audit(1756284620.089:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11921 comm="syz.1.1474" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703e579 code=0x0 [ 272.028542][ T6039] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 272.033841][ T6039] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 272.037476][ T6039] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 272.039810][ T6039] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 272.042197][ T6039] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 272.044929][ T6039] mcp2221 0003:04D8:00DD.001D: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 272.285707][ T6039] usb 9-1: USB disconnect, device number 4 [ 272.684850][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 272.688529][T11944] overlayfs: failed to clone upperpath [ 272.801314][ T40] audit: type=1326 audit(1756284621.249:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11946 comm="syz.2.1479" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x0 [ 272.847628][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 272.861598][ T24] usb 5-1: config 33 has 0 interfaces, different from the descriptor's value: 9 [ 272.865601][ T24] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6006, bcdDevice= 0.00 [ 272.869565][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.870081][T11954] netlink: 'syz.4.1482': attribute type 4 has an invalid length. [ 272.898908][T11954] netlink: 'syz.4.1482': attribute type 4 has an invalid length. [ 272.949074][T11961] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1484'. [ 272.963277][T11963] Process accounting resumed [ 273.173404][ T6039] usb 5-1: USB disconnect, device number 16 [ 273.405449][ T6977] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 273.554722][ T6977] usb 9-1: Using ep0 maxpacket: 8 [ 273.558444][ T6977] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.563074][ T6977] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.567582][ T6977] usb 9-1: config 0 interface 0 has no altsetting 0 [ 273.573346][ T6977] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 273.577658][ T6977] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.582930][ T6977] usb 9-1: config 0 descriptor?? [ 273.890473][T11991] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1492'. [ 273.894312][T11991] 0XD: renamed from macvtap0 (while UP) [ 273.905985][T11991] 0XD: entered allmulticast mode [ 273.908042][T11991] veth0_macvtap: entered allmulticast mode [ 273.910939][T11991] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 273.974089][T11991] hub 1-0:1.0: USB hub found [ 273.977185][T11991] hub 1-0:1.0: 2 ports detected [ 274.017897][ T6977] mcp2221 0003:04D8:00DD.001E: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 274.303044][ T6977] usb 9-1: USB disconnect, device number 5 [ 274.957525][T12013] netlink: 1912 bytes leftover after parsing attributes in process `syz.0.1496'. [ 275.023936][T12012] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 277.456698][T12084] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1512'. [ 277.824787][ T6977] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 278.008683][ T6977] usb 7-1: not running at top speed; connect to a high speed hub [ 278.029446][ T6977] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 278.044090][ T6977] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.049093][ T6977] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 278.056422][ T6977] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 278.060207][ T6977] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.063548][ T6977] usb 7-1: Product: ࠇ [ 278.065848][ T6977] usb 7-1: Manufacturer: 菥䢃虜칄붱ᚑ㭁ፌ䪡곭꯹猈ｘ㮡솂⒚⑬젇褁簼玤谇ྡ뱏䢋⬻ﰖȾ늪₄炭羏俩吁⧅瓚冏一࠵እ䙏䰌爫谍뭓說ຮ菶剝釢뼭䱣蟲䕜㍸㖆䜽ཟᖫ䮠ቃ失薋螠뙯灲煴펤䑲峁巬㛃腙쬳谛寶檶㘆챑꺶ঢ儱蠇琍䦕൱伃ᥙ酺ᜳ쵏ĭ弊卝藢甁荾 [ 278.093333][ T6977] usb 7-1: SerialNumber: Ѕ [ 278.348305][T12086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.355081][T12086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.366529][ T6977] cdc_ncm 7-1:1.0: bind() failure [ 278.370262][ T6977] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 278.372412][ T6977] cdc_ncm 7-1:1.1: bind() failure [ 278.376182][ T6977] usb 7-1: USB disconnect, device number 18 [ 278.380179][T12016] udevd[12016]: setting owner of /dev/bus/usb/007/018 to uid=0, gid=0 failed: No such file or directory [ 278.414851][ T6039] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 278.564856][ T6039] usb 9-1: Using ep0 maxpacket: 8 [ 278.568533][ T6039] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.572256][ T6039] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.575803][ T6039] usb 9-1: config 0 interface 0 has no altsetting 0 [ 278.578161][ T6039] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 278.581079][ T6039] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.586418][ T6039] usb 9-1: config 0 descriptor?? [ 278.976573][T12105] syz.2.1519 (12105): attempted to duplicate a private mapping with mremap. This is not supported. [ 279.000359][T12105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1519'. [ 279.016476][T12105] loop6: detected capacity change from 0 to 7 [ 279.023342][T12016] Dev loop6: unable to read RDB block 7 [ 279.026329][T12016] loop6: unable to read partition table [ 279.029013][T12016] loop6: partition table beyond EOD, truncated [ 279.063946][ T6039] hid_parser_main: 5 callbacks suppressed [ 279.063959][ T6039] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 279.064404][T12105] Dev loop6: unable to read RDB block 7 [ 279.066250][ T6039] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 279.070749][T12105] loop6: unable to read partition table [ 279.073023][ T6039] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 279.077030][T12105] loop6: partition table beyond EOD, truncated [ 279.077039][ T6039] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 279.077054][ T6039] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 279.081975][T12105] loop_reread_partitions: partition scan of loop6 (被x) failed (rc=-5) [ 279.084150][ T6039] mcp2221 0003:04D8:00DD.001F: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 279.267691][ T6977] usb 9-1: USB disconnect, device number 6 [ 279.903721][T12121] 9pnet_virtio: no channels available for device syz [ 280.183219][T12133] 9pnet: Could not find request transport: f [ 281.083522][T12171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1533'. [ 281.478353][T12186] block nbd2: Attempted send on invalid socket [ 281.480928][T12186] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 281.484720][T12186] vxfs: unable to read disk superblock at 1 [ 281.486985][T12186] block nbd2: Attempted send on invalid socket [ 281.488947][T12186] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 281.492274][T12186] vxfs: unable to read disk superblock at 8 [ 281.494308][T12186] vxfs: can't find superblock. [ 281.894924][ T6039] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 282.064742][ T6039] usb 7-1: Using ep0 maxpacket: 16 [ 282.068749][ T6039] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 282.076522][ T6039] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 282.080127][ T6039] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.083266][ T6039] usb 7-1: Product: syz [ 282.085103][ T6039] usb 7-1: Manufacturer: syz [ 282.086960][ T6039] usb 7-1: SerialNumber: syz [ 282.091562][ T6039] usb 7-1: config 0 descriptor?? [ 282.095625][ T6039] hub 7-1:0.0: bad descriptor, ignoring hub [ 282.098134][ T6039] hub 7-1:0.0: probe with driver hub failed with error -5 [ 282.103608][ T6039] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input21 [ 282.400115][T12218] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 282.401132][T12220] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 282.433037][T12226] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1545'. [ 282.619712][ T6039] usb 7-1: USB disconnect, device number 19 [ 282.636323][ T40] audit: type=1804 audit(1756284631.089:1021): pid=12236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1548" name="/newroot/368/bus" dev="tmpfs" ino=1974 res=1 errno=0 [ 282.980872][T12244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1550'. [ 283.140220][T12248] comedi comedi3: Minor 33771 is invalid! [ 283.147018][T12248] overlayfs: failed to resolve './file1': -2 [ 283.477971][T12263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1555'. [ 283.497572][T12263] program syz.4.1555 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 283.519213][T12263] ipvlan2: entered promiscuous mode [ 283.712602][T12270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1556'. [ 283.717365][T12270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1556'. [ 284.896662][T12297] overlay: Unknown parameter '/' [ 284.904765][T12295] netlink: 'syz.4.1563': attribute type 10 has an invalid length. [ 284.933503][T12295] veth0_vlan: left promiscuous mode [ 284.938410][T12295] veth0_vlan: entered promiscuous mode [ 284.948157][T12295] team0: Device veth0_vlan failed to register rx_handler [ 285.308880][T12307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1566'. [ 285.309662][T12317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1568'. [ 286.019396][T12332] tmpfs: Unknown parameter 'nr_iodes' [ 286.097881][T12330] /dev/sr0: Can't open blockdev [ 286.547630][ T5838] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 286.705004][ T5838] usb 5-1: Using ep0 maxpacket: 8 [ 286.710527][ T5838] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 286.710546][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.710557][ T5838] usb 5-1: Product: syz [ 286.710566][ T5838] usb 5-1: Manufacturer: syz [ 286.710574][ T5838] usb 5-1: SerialNumber: syz [ 286.712274][ T5838] usb 5-1: config 0 descriptor?? [ 286.929963][ T5838] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 287.505753][T12364] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 287.508583][T12364] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 287.511392][T12364] vhci_hcd vhci_hcd.0: Device attached [ 287.754955][ T6122] usb 41-1: new low-speed USB device number 9 using vhci_hcd [ 287.985396][ T5838] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 288.001014][T12365] vhci_hcd: connection reset by peer [ 288.006139][ T1224] vhci_hcd: stop threads [ 288.008051][ T1224] vhci_hcd: release socket [ 288.010545][ T1224] vhci_hcd: disconnect device [ 288.261969][T12393] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1589'. [ 288.265738][T12393] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1589'. [ 289.019554][ T24] usb 5-1: USB disconnect, device number 17 [ 289.698857][T12421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1595'. [ 289.785320][T12421] macvtap1: entered promiscuous mode [ 289.787163][T12421] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 289.793374][T12421] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 290.047265][T12435] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1600'. [ 290.096851][ T1022] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 290.247637][ T1022] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 290.250804][ T1022] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 290.254808][ T1022] usb 7-1: config 0 interface 0 has no altsetting 0 [ 290.264782][ T1022] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 290.269345][ T1022] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 290.272968][ T1022] usb 7-1: Product: syz [ 290.279643][ T1022] usb 7-1: Manufacturer: syz [ 290.281477][ T1022] usb 7-1: SerialNumber: syz [ 290.284543][ T1022] usb 7-1: config 0 descriptor?? [ 290.290078][ T1022] hub 7-1:0.0: bad descriptor, ignoring hub [ 290.292417][ T1022] hub 7-1:0.0: probe with driver hub failed with error -5 [ 290.297260][ T1022] usb 7-1: selecting invalid altsetting 0 [ 290.334851][ T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 290.504975][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 290.509053][ T24] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.515890][ T24] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.519207][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 290.521387][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 290.533790][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.538628][ T24] usb 5-1: config 0 descriptor?? [ 290.539584][T12450] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1604'. [ 290.559638][T12450] bond0 (unregistering): left promiscuous mode [ 290.561854][T12450] bond_slave_0: left promiscuous mode [ 290.563670][T12450] bond_slave_1: left promiscuous mode [ 290.565710][T12450] bond3: left promiscuous mode [ 290.574188][T12450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.583179][T12450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.587376][T12450] bond0 (unregistering): (slave bond3): Releasing backup interface [ 290.591625][T12450] bond0 (unregistering): Released all slaves [ 290.605138][ T53] usb 7-1: USB disconnect, device number 20 [ 290.725741][T12453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1605'. [ 290.759061][T12457] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1606'. [ 290.762378][T12457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1606'. [ 290.767736][T12459] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1606'. [ 290.850194][T12464] nftables ruleset with unbound chain [ 290.957745][ T24] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 290.959982][ T24] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 290.962183][ T24] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 290.964320][ T24] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 290.966968][ T24] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 290.969521][ T24] mcp2221 0003:04D8:00DD.0020: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 291.170544][T12482] kvm: pic: level sensitive irq not supported [ 291.175618][T12482] kvm: pic: single mode not supported [ 291.178190][T12482] kvm: pic: level sensitive irq not supported [ 291.181200][T12482] kvm: pic: single mode not supported [ 291.183187][T12482] kvm: pic: level sensitive irq not supported [ 291.186529][T12482] kvm: pic: non byte write [ 291.191040][T12482] kvm: pic: non byte write [ 291.193501][T12482] kvm: pic: non byte write [ 291.195495][T12482] kvm: pic: non byte write [ 291.198297][T12482] kvm: pic: non byte write [ 291.200537][T12482] kvm: pic: non byte write [ 291.203943][T12482] kvm: pic: non byte write [ 291.206261][T12482] kvm: pic: non byte write [ 291.214092][T12482] kvm: pic: non byte write [ 291.216903][T12482] kvm: pic: non byte write [ 291.218651][ T53] usb 5-1: USB disconnect, device number 18 [ 291.938661][T12499] tipc: Enabling of bearer rejected, failed to enable media [ 292.864752][ T1022] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 292.945385][ T6122] vhci_hcd: vhci_device speed not set [ 293.014789][ T1022] usb 9-1: Using ep0 maxpacket: 8 [ 293.019383][ T1022] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.024015][ T1022] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.029352][ T1022] usb 9-1: config 0 interface 0 has no altsetting 0 [ 293.032189][ T1022] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 293.037368][ T1022] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.044465][ T1022] usb 9-1: config 0 descriptor?? [ 293.049301][T12531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1624'. [ 293.066594][T12519] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 293.069727][T12531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1624'. [ 293.072603][T12531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1624'. [ 293.200112][T12533] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1625'. [ 293.456156][ T1022] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 293.458482][ T1022] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 293.460831][ T1022] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 293.463076][ T1022] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 293.465680][ T1022] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 293.468227][ T1022] mcp2221 0003:04D8:00DD.0021: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 293.713344][ T24] usb 9-1: USB disconnect, device number 7 [ 293.798462][T12546] IPVS: Error connecting to the multicast addr [ 293.808702][ T40] audit: type=1107 audit(1756284642.259:1022): pid=12541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''bE+gv@Fh [ 293.808702][ T40] WFMvd' [ 293.921407][T12558] netlink: 'syz.0.1631': attribute type 4 has an invalid length. [ 294.191497][ T1148] [ 294.192340][ T1148] ============================================ [ 294.194244][ T1148] WARNING: possible recursive locking detected [ 294.196174][ T1148] syzkaller #0 Not tainted [ 294.197671][ T1148] -------------------------------------------- [ 294.201893][ T1148] kworker/u32:8/1148 is trying to acquire lock: [ 294.204398][ T1148] ffffe8ffac157a58 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x7bd/0xd20 [ 294.207369][ T1148] [ 294.207369][ T1148] but task is already holding lock: [ 294.209614][ T1148] ffffe8ffac157aa8 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x697/0xd20 [ 294.212449][ T1148] [ 294.212449][ T1148] other info that might help us debug this: [ 294.214890][ T1148] Possible unsafe locking scenario: [ 294.214890][ T1148] [ 294.217212][ T1148] CPU0 [ 294.218258][ T1148] ---- [ 294.219275][ T1148] lock(&pd_list->lock); [ 294.220610][ T1148] lock(&pd_list->lock); [ 294.221947][ T1148] [ 294.221947][ T1148] *** DEADLOCK *** [ 294.221947][ T1148] [ 294.224412][ T1148] May be due to missing lock nesting notation [ 294.224412][ T1148] [ 294.226975][ T1148] 3 locks held by kworker/u32:8/1148: [ 294.228664][ T1148] #0: ffff888043006148 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 294.232142][ T1148] #1: ffffc90006af7d10 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 294.236023][ T1148] #2: ffffe8ffac157aa8 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x697/0xd20 [ 294.239149][ T1148] [ 294.239149][ T1148] stack backtrace: [ 294.241017][ T1148] CPU: 1 UID: 0 PID: 1148 Comm: kworker/u32:8 Not tainted syzkaller #0 PREEMPT(full) [ 294.241031][ T1148] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 294.241039][ T1148] Workqueue: pencrypt_parallel padata_parallel_worker [ 294.241058][ T1148] Call Trace: [ 294.241063][ T1148] [ 294.241068][ T1148] dump_stack_lvl+0x116/0x1f0 [ 294.241083][ T1148] print_deadlock_bug+0x1e9/0x240 [ 294.241098][ T1148] __lock_acquire+0x1133/0x1ce0 [ 294.241112][ T1148] ? __queue_work+0x431/0x1160 [ 294.241122][ T1148] lock_acquire+0x179/0x350 [ 294.241135][ T1148] ? padata_do_serial+0x7bd/0xd20 [ 294.241150][ T1148] ? mark_held_locks+0x49/0x80 [ 294.241163][ T1148] ? queue_work_on+0x12a/0x1f0 [ 294.241172][ T1148] _raw_spin_lock+0x2e/0x40 [ 294.241183][ T1148] ? padata_do_serial+0x7bd/0xd20 [ 294.241198][ T1148] padata_do_serial+0x7bd/0xd20 [ 294.241216][ T1148] pcrypt_aead_enc+0x5b/0x70 [ 294.241233][ T1148] padata_parallel_worker+0x65/0xb0 [ 294.241249][ T1148] process_one_work+0x9cf/0x1b70 [ 294.241267][ T1148] ? __pfx_process_one_work+0x10/0x10 [ 294.241284][ T1148] ? assign_work+0x1a0/0x250 [ 294.241299][ T1148] worker_thread+0x6c8/0xf10 [ 294.241310][ T1148] ? __pfx_worker_thread+0x10/0x10 [ 294.241326][ T1148] kthread+0x3c5/0x780 [ 294.241340][ T1148] ? __pfx_kthread+0x10/0x10 [ 294.241354][ T1148] ? rcu_is_watching+0x12/0xc0 [ 294.241365][ T1148] ? __pfx_kthread+0x10/0x10 [ 294.241379][ T1148] ret_from_fork+0x5d4/0x6f0 [ 294.241395][ T1148] ? __pfx_kthread+0x10/0x10 [ 294.241409][ T1148] ret_from_fork_asm+0x1a/0x30 [ 294.241425][ T1148] [ 294.291715][ C1] vkms_vblank_simulate: vblank timer overrun VM DIAGNOSIS: 08:42:38 Registers: info registers vcpu 0 CPU#0 RAX=ffff888012cf2000 RBX=0000000000001000 RCX=0000000000000280 RDX=0000000000001000 RSI=ffff888059af4d80 RDI=ffff888012cf2d80 RBP=ffff888012cf2000 RSP=ffffc9000c367100 R8 =0000000000000000 R9 =ffffed100b35e9ff R10=ffff888059af4fff R11=0000000000000000 R12=ffff888059af4000 R13=dffffc0000000000 R14=ffffea000166bd00 R15=000000000e230000 RIP=ffffffff8b8f8056 RFL=00010246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880974c3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000ffae7f6f CR3=0000000027bf5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85617045 RDI=ffffffff9b0f9700 RBP=ffffffff9b0f96c0 RSP=ffffc90006af7570 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000031 R14=ffffffff9b0f96c0 R15=ffffffff85616fe0 RIP=ffffffff8561706f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975c3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000032516ff8 CR3=000000004eda6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9f5639fcdb09848c a01acdb593387a19 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 690ddc1690c7ef2e 8f360f000863d753 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1896be3840bc8743 eb0c7877b32ffe0d ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cc81fd3094030138 c0e7ab74745e3c47 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7c2efd5f10e4adfe 9205b3751bce52fa ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5e625bbd8f954027 96c2a2c347e43dfa ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e75d8b26c09d0554 65dd8036a3797c26 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6a43bcb692c82666 dc0091d4a35a382c ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000002 RBX=ffff8880276708c0 RCX=ffffc900262e9000 RDX=0000000000080000 RSI=ffffffff896746fd RDI=0000000000000005 RBP=00000000ffffffff RSP=ffffc90007fef6f8 R8 =0000000000000005 R9 =0000000000000000 R10=00000000ffffffff R11=0000000000000000 R12=ffff888077073c68 R13=ffff888027670c80 R14=ffffc90007fef898 R15=ffffc90007fef8b8 RIP=ffffffff81bb08f3 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880976c3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000800e4018 CR3=000000004eda6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7434ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81f6fd0f RDX=ffff888043008000 RSI=0000000000000000 RDI=0000000000000007 RBP=ffffea0001d14c40 RSP=ffffc9000214eed0 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=1ffff110024ca99a R12=0000000000000000 R13=1ffff92000429de2 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff81bb0262 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977c3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73bff3c CR3=000000004eda6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000