last executing test programs: 12.191204042s ago: executing program 1 (id=619): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x14, 0x30, 0x9}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0xc0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = memfd_create(&(0x7f00000024c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xb2\xae\xda\xa9\xf6\x92\xaf4\xb5|W\r0{\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\x97.A\x84\x1d\xc2\x86\x89{\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\x9d\xce\xb3%QF\x03\b\x9dh\xfd\x91\xea\xce\x06\a\xba`\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5I\xd7\xd3#\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\x98\xfa\xbbb\xb1\x00\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5po,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x13\xa4\xad\xd8\xf9\xd2\x95\xa8\x81\xbe\xbc\xa6\x14_o\xfb\xdaL\xcb\xda\x9a\xec\xce\xd18&\xfbG\xa1\f\xf4\xd5u\xb0xE)j\x1b\xecL\xa1\xdc\xabUiN\xdet\xc7Q\xe6\xa4\x99-\xba\x16\xe5\xba!\xbdCI#\x03', 0x1) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x20051, r2, 0xce9e1000) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000009c1f4ac09816b368000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x6, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='mpol=prefer:0\nNs']) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000000080), 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x12, &(0x7f0000000240)=0x7, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f00000007c0)="fbbf0b5044e308ca7bd572aa2b42e9678bcf30eff9f3aed14dc94a114bd2b45956aebe2b10ff3ee8655d1a5f9e0383611afdd3f8bac3d5cfd7772a3ab48d0ba4b600731e357e38716c449fae7c28548a642105f44bafd08ef8c064db041f1a405e3f650fc3b0926d481c364fca00000000000000006d3a3ede9fc738b8d86209c060161d5ddb5fcf3d09001117cdb9d055aa2d89fe3458720724853a876448d4a1fe9ef0569ad98a05ab5df763923b4e2c576e00000000000000000000000000000000002090666159e3075f7244014ec3d38193ec097245fa260e16ded4fb615647414c0c934f44e200219e6dd7bc23397d5f2f2c76a5baddd0fd8c340362691ef226f7a0ac51b74b6b05000000948514cd466943d08eeb3895b80499da2b209da4f3ec5e3744ce3e863b0e04d0ec2f39edf50b6e08c4b47e448a35414763d687fbe3792ee15c5b9791310a346472723c100bf77a310b0ced8004b5ac6d48c40439f512e8ef34a53d65f55563f68136a577736ca5f6f66e01ef4ec2cdc8db34f6de50713adaa3f70189958263fddc13b33ee6c6c13d1fc290c5fbaeadc3035d019f0dc75de307de6c0d010000000000000027083d1d5b4b013c503b863b560688d94de886b6dc73d5da2dfeff4bed49a975a6c8dbb480e4415ddca5657a5a8e3b8a151015499e952bb5e8d8f60de3d688df7802c6e8b27b31fac4e199038b79a3999920e634a5af162a958130e6647e410700246548234acacf9cb43a", 0xffffff91, 0x0, 0x0, 0xfffffffffffffefa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000300)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="69b8a907dafe6d72ea33d8f8f1ab82e872853aa6429846"], 0x118) socket$nl_route(0x10, 0x3, 0x0) 10.99048901s ago: executing program 1 (id=630): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x27, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x80000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r4}, 0x10) prctl$PR_SET_THP_DISABLE(0x29, 0xdffffffffffffffe) sendfile(0xffffffffffffffff, r3, &(0x7f00000000c0)=0x8e, 0x180000504) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @none}, 0x8) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000280)={0x3, r7, 0x3, 0x0, 0xa, 0x1ff, 0x1}) syz_open_dev$tty20(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r8, 0xc01064bd, &(0x7f0000000000)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r8, 0xc01064ac, &(0x7f0000000040)={r9, 0x1000, &(0x7f00000015c0)=""/4096}) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0x8, &(0x7f0000000480)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, r3, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000240)={0x0, 0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) 10.561422997s ago: executing program 1 (id=635): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x24, &(0x7f0000000000)=0x7, 0x4) socket(0xf, 0x2, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000040)={0x3000}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x8, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xf}, {0x100000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x10, 0x0, 0x0, 0xfd}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cb], 0x100000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x0, 0xffffffffffffff01}, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) listen(r0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x15, 0x8, 0x7, 0x0, 0xc, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f0000019300)={0x2, 0x7fffffff, 0x3, {0x2, @sdr={0x32314d56, 0x6}}, 0x100}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r6, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r7}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b40600000000000071112400000000008510000002000000850000000700000095000000000000009500000000000000ce8920f29328b7ddd3856df677997bc5cafa405a82061c5386992ff41f5524a21802a859883d24cc98e697e9e2aa06a6ade7a79a62029a98a8e09c7c6edefac53c5f767377cfcd6bb593240100378e"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x44, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 9.750216172s ago: executing program 1 (id=638): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x3f, 0x9, 0x0, 0x0, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x3}]}, 0x1c}}, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0x1, &(0x7f0000000040)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x98, &(0x7f0000000100)=""/152, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x9, 0x80000001, 0x1d}, 0x10, 0x29788, 0xffffffffffffffff, 0x4, 0x0, &(0x7f00000002c0)=[{0x3, 0x1, 0x2, 0xa}, {0x5, 0x3, 0xe}, {0x1, 0x3, 0x7, 0xb}, {0x2, 0x3, 0x5, 0x7}], 0x10, 0xfffffffc, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x20, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xc}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x8}, 0x10, 0x0, r1, 0x52, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x13, r2, 0x1df04000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r4, &(0x7f0000000680)=""/128, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26, 0x0, 0x0, @void, @value}, 0x10) r5 = socket$kcm(0x2, 0x1, 0x106) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=r5, @ANYBLOB="9101000000000000240012800b000100677265746170"], 0x54}}, 0x0) r7 = syz_open_dev$evdev(&(0x7f00000003c0), 0xb, 0x80800) ioctl$EVIOCGUNIQ(r7, 0x80404508, &(0x7f0000000400)=""/245) fanotify_init(0x2, 0x8000) 9.73885483s ago: executing program 1 (id=640): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d80)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000702000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000089000000b7030000010000006a0a00fe000000008500000032000000b700000001000000950000000000000098ae8e5e7b0c65752a3ad50000007ddd0000cb4500639100f51f00000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6dca9d6999f926250b180000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16d875fe369258673b5df11cc2afb53611cc320000bc0b80db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4ff9ded1cad1831909b7ce6d2c8212237458d1863cc67c4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151f07bd4e97d62ecc645e143a60f1c6edc76609077909826151e2b42bf0edc399f78f42d979b694dc1e5cf8c6e09e0c7e8b0db51662de6d87c493db845b10e9468bda6f82881eb8c9cfa72bba6708eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e183722537395019f02ecaa85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89eddfc3783f6c9129a7c5f8ee5f505724d6e417b1c2cbfdcada0a16e31790e26cf101000080496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b917e21f8f187b1866108b6e8c71e26032176066599783568628f0309c3afa716d3706e1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6d2676bef8310f7032775cfd75652f87b039d54308a5e0000000000008ce31344b554aca78a00000000000000e63a0dba7f6b25e8d5e40a3a571a5dfde3b4dca2d38a9c0ea7b5bcd49f977c609915c7601080d10b96af1eb55922b2ad13a0eeefae505f4535cd9dc69fbab92150c7e7695c5b051ddf6399b0d00eee5c3afee38cdc55b8d3fbbe210bdec686a23503f4a547327caf381171cc9002be6d89f5734a9e204dbc327ec8f9851d273fa07369c419942509198605ff2781f4d2d4685d762d4764f7ff762e09116946137b7ab812a2d408b57206093eea233054c6aa08bffc8a076d476bc28fc21d521b778de9e583b596d7102d0a7bea32f51aba25da0f72b895ec90882f56730236b30e656a1ab2fcb80df49afa05d8c9d5bdc3c1feed5c593a5d8482f3fcb287655b007368593c6c4a1513115f1382adfe98cf4d8ae0fb0b8c3022df57e70b3140b6027b9ad373a027a75e2fd187b421663ca8c579554e825e2a65f6a17f65a0b246710654555e59b08e4a52a36fcdb0278fd80b4d6aea4c0db6652f56f7c91530539f98554348794696597c7d4ead2548f8f636b20e1e5b4cceb0ad42784752595cba883e9de9abe2c16bba1c4a786f11b8ebd31d5941a6d47ec9727315e03711623e99ac4ce0eb40b51ef9d9d7cbf1e5a30883eccde1564b805bd3db0d6c389c694df6fae50c2c03dc90f5a0e9b8d6ceab763940f505a6d4617be5c236e8087c4fd0428d0c6a0c6b2d64f9cf1a7bb009064cb20d28427df575c04df0d2c20b8beb24eaa42c79a1ee9ae5f3e47d4c5c2d646450a6353f58c5e8d22669a02b88c69a09770e34603865c96505caff12000000000000000000000000000045c964f15deb2a3ddfd72428f3105777a67df7e01a03338c24e887ceaf9ae810217a6d749aaf17e4bcf92d9e62000000000000000000000000000000bb9865c2fa0bffd003e47cb9facf215d213e3b13afafd722f9a064b04a91f9d70d5b9e11763716c569f140987ea210df06"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x46a3, &(0x7f00000001c0), 0x0, 0x0) io_uring_setup(0x1928, &(0x7f0000000240)) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000500)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[@ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0xe, 0x38f, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) 9.679265927s ago: executing program 1 (id=642): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x7, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x4, 0x2, 0x13, 0x2}, {0x0, 0x5, 0x5, 0x7}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) getpid() openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019840)=""/102400, 0x19000) keyctl$setperm(0x5, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x5c, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYRES8], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) request_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000180)='\\$-/{.\x00', 0x0) syz_io_uring_setup(0x47be, &(0x7f00000004c0)={0x0, 0x0, 0x40, 0x3}, 0x0, &(0x7f00000002c0)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x5, &(0x7f00000003c0)=0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d802, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000003000000000000000000000d02000000010000000000008ce1000000005f"], 0x0, 0x33, 0x0, 0x0, 0x200000, 0x0, @void, @value}, 0xfffffffffffffed1) ioctl$FS_IOC_RESVSP(r5, 0x402c5839, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8000000009a88}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) io_submit(r4, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000001c0)='m', 0xfffffdfc}]) io_destroy(r4) 7.041324878s ago: executing program 3 (id=662): getpid() socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x55af) fsetxattr$security_capability(r3, &(0x7f0000000140), &(0x7f0000000080)=@v3={0x3000000, [], 0xee00}, 0x18, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x2, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010009d7a00"/20, @ANYRES32=0x0, @ANYBLOB="000400000000000008001b00000000000800280000000001"], 0x30}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=@polexpire={0x1114, 0x1b, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010101, @in6=@private1}, {}, {0x0, 0x0, 0x0, 0x6}}}, [@algo_comp={0x1048, 0x3, {{'deflate\x00'}, 0x8000, "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"}}, @mark={0xc}]}, 0x1114}}, 0x0) ioctl$KVM_SET_CLOCK(r6, 0x4188aec6, &(0x7f0000000040)={0x1}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 5.820015056s ago: executing program 3 (id=669): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) r2 = dup3(r1, r0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x71, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x17) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='7\\\"\x00', @ANYRES16=r3, @ANYBLOB="00022dbd7000fddbdf256f0000000a00060008021100000100000a000600080211000001000008009f0003000000050019010b000000"], 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000340), 0x2000000, &(0x7f0000000440)={[{@redirect_dir_follow}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) 5.751445197s ago: executing program 3 (id=670): r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9000070100f3ff83000058007a159385e582"], 0x0}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r3, 0x4b4c, &(0x7f0000000080)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x14) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x14) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) ioctl$MON_IOCX_GET(r0, 0x400c9206, &(0x7f00000003c0)={0x0, 0x0}) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xe6d85) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r6, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x98, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000400), &(0x7f0000000580), 0x8, 0xa7, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x13, 0x10, 0x7f, 0x0, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [@printk={@d}], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000000c0)="5aee41dea43e9eee28e622e563a3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r10}, 0x10) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000180)=0xe3b) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x0) 4.271385598s ago: executing program 0 (id=673): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) setxattr$security_evm(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)=@v2={0x5, 0x2, 0x11, 0x0, 0x24, "04a7d01a5cb0471f7a4a06a6afebaca5dfd96a10d2a1c63ac068ad60711ecaefe9ea9549"}, 0x2d, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}]}) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, 0x0, 0x0) io_setup(0x202, &(0x7f0000000200)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x6, &(0x7f0000000000)=0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) io_setup(0x0, 0x0) io_submit(r3, 0x3, &(0x7f0000000580)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x0, r4, 0x0}, 0x0]) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)=0xa1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x44, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44810}, 0x0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001b80)={0x40, r6, 0x1, 0x0, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}}, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') setxattr$security_ima(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x1, 0x0) (fail_nth: 27) 4.071362127s ago: executing program 0 (id=674): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x4) r1 = dup(r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYRES16=r1, @ANYRESHEX=r2], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, 0x1c) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x3, &(0x7f00000001c0)=""/207, &(0x7f0000000000)=0xcf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) read$FUSE(r5, 0x0, 0x0) r6 = syz_io_uring_setup(0x75b8, &(0x7f0000000300)={0x0, 0xf2f6, 0x10100, 0x1}, &(0x7f00000003c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r9 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r9, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0xfffffffffffffe64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) io_uring_enter(r6, 0x27e2, 0x0, 0x0, 0x0, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080), 0xe) listen(r1, 0x0) accept4$vsock_stream(r1, 0x0, 0x58, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000000)={{{@in=@multicast2, @in6}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe4) pipe(&(0x7f0000000080)) 2.87113178s ago: executing program 0 (id=677): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x4, 0x1000000}, &(0x7f0000000240), &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) io_uring_enter(r1, 0x2def, 0x4000, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x1, 0x84) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) bind$inet6(r2, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r2, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r2, &(0x7f0000000100)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000140)='b', 0x1, 0x48045, 0x0, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r5, &(0x7f00000021c0)={0x2020}, 0x2020) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) 2.689873299s ago: executing program 3 (id=678): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x38, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x60}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0x2, 0xe4}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000004000000ff0f000009"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1400000004000000080000000600000000000000", @ANYRES32, @ANYBLOB="0000000000000000000200000000010000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r4, 0x0, 0x0}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x20, 0x15, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0xc040) 2.490605909s ago: executing program 3 (id=679): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) ppoll(&(0x7f0000000100)=[{r0, 0x40}], 0x1, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f00000006c0)={&(0x7f000074d000/0x2000)=nil, &(0x7f000099e000/0x1000)=nil, 0x2000, 0x3, 0x18100}) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000080001000010"], 0x1c}}, 0x0) 2.280981126s ago: executing program 3 (id=680): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a3200000000f70007404884b24b02a8a7758a688958ed60ecfd057e10926ba77e5596b13e43cd4488e4aa68a75f7236ec205b6e4cac2a0d86c336bf07dbe861f4f57bcef92dcf818d532d4475b5daa4dadc1690f228e860bba5a0b5d9bde86862e8f7fc08f0debd4974c6fae7d737a0007ec948ac4d8714ebff6b25648fb910e0d6d07f023cf5fa4051627b9c5b69e265538f9ba683bf172a5ff815afa543c12e550a1bcc9287080c7c12cc89d216c56febb0b06134672ea6b0077c846396169475f271319988f49ec94f2996e5d0e1cb151fb223e556f10fb681d068e055eb34e5f8fc7a524ffe5f4632a6c74ad0fe0b1542497d76a5a4416c47805e001c0005800800014000000008080002"], 0x1ec}}, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000140)={0x28, 0x2, 0x0, {0x3, 0x3, 0x10001}}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x6}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x80}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x8080) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000001040)={0x324, r4, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x310, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x30c, 0xd, 0x0, 0x1, [{0x4e, 0x0, "1f69b7e807114f17b911ccfdb88454f42e897d3fbe1e6405c95a8d9154282be4812b2093a94d297c514161444fea45224917e286c7ae051df03a66e04e8f54f0b85948bbf5df0ff417eb"}, {0x4}, {0x95, 0x0, "e0d0318cd952cf797ba6eeb58f16501ee399ca029a324f58be6c69c1c08dd0a35a23fdf8831c829bb13300b975cc49be241f4dde70d10da3699ba1d23551322b2410130b760fee34d28d42ecff4160dd4906431201d9dff4c021d17a35e4fba70dc903b4743a185f76ce543af09089fe0a5df3b3ee6fe48bf5f36a68063cdcaa880f8cc0d982fcd1a30f7cafb80ca73cba"}, {0x87, 0x0, "e7cd2c5b45b171a0ec3e3daa67504c8c0c0cfb8637e16b2c0981817fcef64bfba30a70617f3f4aabaf1dbe7bbf44ad6e7ef1558d874c3f2c2cd0c1cd7ff1e4ba3abb99c10dbcfa8105b9ad96bc5d7ea99261da65dd86f4d53eacae18f36033bd7dc155523506872cd2d7846e540a5db102d4cd3eac4bf89b27ce28816957dc48b24112"}, {0x68, 0x0, "b8185394b8c3b4b56f9d0c8cba3f26733c8726f95d00523533c4271aed67a2e02b56b158ef206ed5d4b460014ab36771f9eb8755f9424c85611f2293c1f8be52b0a5f58d1606ec47eeea6a688d7a773ca08ea518a911aab7328b40bff028d8587da4dc9f"}, {0x40, 0x0, "3bb331e5232dce087a24022fdb2ae0e166f8e9c919166beb07e0fedd5588d5db8349f092cd6f24a34b3fcad1b1b76a9bfc3c3c9afd57dd0bcf598941"}, {0xec, 0x0, "d51016bb5f7844e4268b5579cf4a71f8a4651f42b927e7251966c2441d98927c8894a622653a1785ace4fa4029289f43ffd15f13c34c47e0eaa82d011481525ba5349d556f3f14dae8d4860d1b29afbb592132dbd475dbe6ed8d8732b169d906693d73800e4ef862667d110a0416f9be8752ae045708f904362b164d3ab91582537b0ba5c1ea9c2035c04d070b58bb9b3897bb2e3b2c02d9bbb8e1d3951bffdcc51148510f0f70943fc090b1393ca0ad56d32a4d0847dffbb1a3112c2d2c52e3be407865f42217a2c42a7e7895dacba5d755031b7560f92d8b380ea5ea1914b3f33bd5c95b774935"}]}]}]}, 0x324}, 0x1, 0x0, 0x0, 0x4000010}, 0x40044001) socket$inet_sctp(0x2, 0x1, 0x84) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) userfaultfd(0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e44000304"], 0x47) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev, @multicast2}, 0xc) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000001c0)) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) 1.990789125s ago: executing program 0 (id=681): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x5, {0x0, "f1b9a81697008d68a0328c49d2ee"}}]}, 0x30}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000400)={0x60, 0x0, &(0x7f0000180000/0x4000)=nil, &(0x7f0000977000/0x3000)=nil, 0x9, 0x0, 0x0, 0x1c, 0x46, 0x4, 0x0, 0x67}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x5, {0x0, "f1b9a81697008d68a0328c49d2ee"}}]}, 0x30}}, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d032, 0xffffffffffffffff, 0x0) (async) userfaultfd(0x801) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) (async) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000400)={0x60, 0x0, &(0x7f0000180000/0x4000)=nil, &(0x7f0000977000/0x3000)=nil, 0x9, 0x0, 0x0, 0x1c, 0x46, 0x4, 0x0, 0x67}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) 1.980787561s ago: executing program 0 (id=682): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) setxattr$security_evm(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)=@v2={0x5, 0x2, 0x11, 0x0, 0x24, "04a7d01a5cb0471f7a4a06a6afebaca5dfd96a10d2a1c63ac068ad60711ecaefe9ea9549"}, 0x2d, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}]}) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, 0x0, 0x0) io_setup(0x202, &(0x7f0000000200)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x6, &(0x7f0000000000)=0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) io_setup(0x0, 0x0) io_submit(r3, 0x3, &(0x7f0000000580)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x0, r4, 0x0}, 0x0]) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)=0xa1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x44, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44810}, 0x0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001b80)={0x40, r6, 0x1, 0x0, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}}, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') setxattr$security_ima(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x1, 0x0) (fail_nth: 28) 1.770954443s ago: executing program 0 (id=684): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000040)=0xa, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x62) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400d80300ab8c156ff1f2f64e0000", @ANYRES16=r4, @ANYBLOB="cd5300000000000000081f000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040850}, 0x2040034) syz_genetlink_get_family_id$devlink(&(0x7f0000002a00), r3) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffd4a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000940), 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000000)={0x4, "f3c492eb0165203d36bec7080089b42c000004002231a110000000005900", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000100)={"9fcaa0504b38d5004b9277c079417ff857dc9b7ac770169aed764b4d2ada8bde", r8}) r9 = dup(0xffffffffffffffff) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x3666b165f8ff1357}) 313.078373ms ago: executing program 2 (id=692): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) setxattr$security_evm(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)=@v2={0x5, 0x2, 0x11, 0x0, 0x24, "04a7d01a5cb0471f7a4a06a6afebaca5dfd96a10d2a1c63ac068ad60711ecaefe9ea9549"}, 0x2d, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}]}) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, 0x0, 0x0) io_setup(0x202, &(0x7f0000000200)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x6, &(0x7f0000000000)=0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) io_setup(0x0, 0x0) io_submit(r3, 0x3, &(0x7f0000000580)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x0, r4, 0x0}, 0x0]) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)=0xa1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x44, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44810}, 0x0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001b80)={0x40, r6, 0x1, 0x0, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}}, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') setxattr$security_ima(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x1, 0x0) (fail_nth: 29) 241.111661ms ago: executing program 2 (id=693): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4000, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000000080)={{0x2, 0x0, 0x80, {0xf000, 0xd000, 0x3}}, "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", "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"}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x48, 0x3, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0xdd}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$fuse(0xffffff9c, &(0x7f0000002240), 0x2, 0x0) bind$l2tp(r0, &(0x7f0000002280)={0x2, 0x0, @loopback, 0x2}, 0x10) write$vga_arbiter(r0, &(0x7f00000022c0)=@unlock_all, 0xb) r4 = socket$nl_generic(0x10, 0x3, 0x10) listxattr(&(0x7f0000002300)='./file0\x00', &(0x7f0000002340)=""/4096, 0x1000) r5 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) io_uring_enter(r0, 0x3496, 0xb63, 0x8, &(0x7f0000003340)={[0x1]}, 0x8) mmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x3, 0x40010, r2, 0x6460a000) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0684113, &(0x7f0000003380)={0x1, 0x9, 0x5, 0x80, 0x9, 0x0, 0x8, 0x6, 0x2, 0xffff, 0x3, 0x5}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000003440), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000003500)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000034c0)={&(0x7f0000003480)={0x34, r6, 0x100, 0x70bd27, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x14, 0x0, @l2={'ib', 0x3a, 'macsec0\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20044044) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000003640)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003600)={&(0x7f00000035c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", ""]}, 0x1c}}, 0x40011) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000003680)='syscall\x00') r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003700), r4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f00000046c0)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004680)={&(0x7f0000003740)={0xf60, r9, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x7a}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x24, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x86f5, 0x0]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x18, 0xba, [0x0, 0x4, 0x0, 0xffff, 0x3, 0x8, 0x5, 0x0, 0x0, 0x7]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0xefc, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_PROBE_RESP={0x41e, 0x91, "38922e3cf75074003b9acb243cb45c0ab88116de90096dce31aaef2314a9af1fc24949fadbbb09d4da1299e531efd68a10f28330e143cdf78e59999c7c47bc50f1ca0590e077a05f31f5f11ff30abb500c91e96c2132f426c8c444e1c789717cecae3760c0c2749f129b613c616a9fb05203fd2893141899ba567bf22dd34ec5c0aabe340f8aec74a8a38b2423ba2d368a3d52518b09a8622abfa671e18adb383a1b36e949f21ab356624b4b3dcc683ae5616b72554b86918613cee9afd5d928e75404513f9577f74f8f8ef215848e4f543fe38156e6bfc01aa30338cd3c52808c3fe7fb2d788724c304c56842a680b41100654534d64f6afd28da0119fab7974596b4d502ccf131f40b02ee41c0aaba8015b99725009305dd6345e9e0dda49ad93eba5e62999a039571ed31bcbcf6830e26ddd976e182366fb81fe48f567fa45b15c1bd10595152e84854c2cab2a13cb21a496dc52aefdef756d7c3bf344a075cc39a8b81dab8364337cefe78ced9f9c484a3a78822f0af80acb278c4f4eb2cfdb0fd9240a91fef64d5d349613a1b3aa60593ecae67203201b0c32e3bb4ba794f523d21de4befddd5b1d6758bbfb4bbdd32cbaca26f8cd1f110baa6b9a1c0e6726589a72272e423577a0e67362225de7ccf232dbec9867313e55bf526b3fcd05ac2338559aa91e58452899370e99546d1dce255de3cf76ef0e6cea9944ea350abdc722061fa705c13392ac48c1c2b4ce35d105dcdd500dfff5f75a2fcd5f95ea959894e5de6418da6f6a9009ddc183a75ca1b1e653b64a453778c2d57b8674037d4a26465e27232c9a764d888baaa39b86a5253b73811fb52749d9857242bd9cfe05741bd392b2b78c27b14771c3e038973a12a95efa8e9e1325be2a728ed9b420e7e7f6292f6cbc21a92e3689b7ffb1e81e0ded50ea1ae48fd724f901e8b0c05ab9573644ec75228f3d0b638f604c60b39be5e54d372b7a21a929efffd3ba16a14928b6e170e9e6d534c1c11585213ea708d1dbc3b0c9e79d36c3c3a84e7e6883a0433b8ab3e2f169f097eaf54ea860dac14be8f010dbca42ac46a1d4b21d06208c52c48f8ef4dd13b310b76fc8989b2174ec76ce78cf66fe123da9a654512a0e8ae50f344cc506f8e518a268b244e9e8cdadf351ca65c30aa2e763cef5da57a5dc54897ec6027a819e0cfd3d86d79419d1ad73bb54d6f5ba4a87dd33f51efcf6c40541fa96a06065462df5902deacef89777c41513e088fbdab5bf11cb6184144d103c430f23d5bce63189f9eabfcc220e7f560e5c86684e1ff2139e73fda11e03ef038266189f79dc03c02325b3d274f195a9e542cbea9ffb68feb83fe618aa5c540380d09b5ef70180b6dd8f6ff250ebc1bae5fc68f4b20cc1111fc8450c3e702cec6dc2a70744d1dce7656be8deb1c27b29ad8dd3fdfdacd44326acd3ad84bcef20a7edfe26d7ba05029d207fe022db5689cd4cae15e8c"}, @NL80211_ATTR_FTM_RESPONDER={0x80, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x75, 0x3, "7d4959fcbf44c1e2c3156d1979b8e035ca83773e225b7e10d1123489c6022aaeba3d9f5fd2362f815db2a3848e5b500e77c2741e76281955b3be7bd2ab1160a98669349aff8b354de0ca0d2920886a657bf65fb45261870578d8d46282dee5fe38be493809572ce25c63373f28d546b4e8"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x20a, 0x7f, [@supported_rates={0x1, 0x1, [{0x60, 0x1}]}, @peer_mgmt={0x75, 0x18, {0x1, 0xb8b, @val=0x5, @val=0x25, @val="2a8688d42bd05b2fe0f7eae74b53bf33"}}, @fast_bss_trans={0x37, 0xc7, {0x9, 0x6, "a52a89a9dd0334ad90f7a3d1a4c6d8dd", "6ee69daeed0163c33980908b01612a0532af90063a3731d97397a922c57d3681", "a04d6573711395b9247faa733834aba8f342004acd6c7d597bac46ef85b7ddba", [{0x4, 0x1d, "57a8ce7f3e4833cb28a9692b2490a1359682a75573245beb81a2993746"}, {0x1, 0xe, "a700db31a47b2a635ea28042cc60"}, {0x3, 0xa, "52f670f8f8b6061cead9"}, {0x3, 0x14, "affa3895aed189a7a5fa23a0507e5f94b7cf933f"}, {0x1, 0x2, 's6'}, {0x3, 0x1e, "b8549f9350280760748e1a3fdafbb395fad228d3d10e632c80054a6242c8"}]}}, @perr={0x84, 0xee, {0x3, 0xe, [{{}, @device_a, 0x8, @void, 0x15}, {{}, @device_a, 0x1, @void, 0x39}, {{0x0, 0x1}, @device_a, 0x1, @value=@broadcast, 0x1b}, {{}, @device_a, 0x4fe0c3de, @void, 0x2b}, {{0x0, 0x1}, @device_a, 0x5, @value, 0x21}, {{0x0, 0x1}, @device_b, 0x7810, @value=@device_b, 0x25}, {{0x0, 0x1}, @device_b, 0x1, @value=@broadcast, 0x3a}, {{0x0, 0x1}, @device_b, 0x2, @value=@device_b, 0xf}, {{0x0, 0x1}, @device_b, 0x1, @value=@broadcast, 0x2b}, {{}, @device_b, 0x6, @void, 0x34}, {{0x0, 0x1}, @device_a, 0x3, @value=@broadcast, 0x39}, {{0x0, 0x1}, @device_b, 0x80000001, @value=@broadcast, 0x21}, {{0x0, 0x1}, @device_a, 0x5, @value, 0x11}, {{}, @broadcast, 0x2, @void, 0xb}]}}, @ht={0x2d, 0x1a, {0xc0, 0x3, 0x3, 0x0, {0x54, 0x7d, 0x0, 0x2, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x300, 0x1, 0xfc}}, @link_id={0x65, 0x12, {@from_mac=@device_b}}]}, @NL80211_ATTR_IE={0xe9, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x8}, 0x1, 0x5, @broadcast, 0x7, 0x4, 0x9}}, @random={0x7, 0x4f, "af9bf3d1fbca373952bdb3ce72d7195e1cdc18579675f03d9512b4a064943b80102dd1429f8ae661616d31b922116c706cc2fc69f4faf1b90f054168ab9cdae60081a2dfd956e30bb0f96ee8b083d6"}, @supported_rates={0x1, 0x5, [{0x16}, {0x60}, {0x0, 0x1}, {0x36}, {0x4, 0x1}]}, @link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast, @device_b}}, @dsss={0x3, 0x1, 0x2c}, @random={0x4, 0x5d, "66341548fef61dae4ebd7319ccca2a010f0ddec767f28499747a5c4313d99f4596048f3fd1feb4f709f62d4a35240ca551974af9508cd460c3a9e826f204755242c96e38cd781e614ee8d88d1415e41f29e0797265d538321e3a24d669"}]}, @NL80211_ATTR_PROBE_RESP={0x1a, 0x91, "8c9c9a5057b5efef314679476679655b546d1064e171"}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0xef, 0xfff8]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x6]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x7a, 0x80, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x9, 0xb7, 0x81}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @chsw_timing={0x68, 0x4, {0x2, 0xd}}, @rann={0x7e, 0x15, {{0x1, 0x1}, 0x23, 0x83, @device_a, 0x6252ef0b, 0x7, 0x2}}, @ibss={0x6, 0x2, 0x5}, @cf={0x4, 0x6, {0x30, 0x8, 0x5, 0x9}}, @prep={0x83, 0x1f, {{}, 0x9, 0x2, @device_a, 0x4, @void, 0x2, 0xffffffff, @broadcast}}, @supported_rates={0x1, 0x5, [{0x1b, 0x1}, {0x9, 0x1}, {0x2, 0x1}, {0x6}, {0x9}]}, @mesh_id={0x72, 0x6}, @ssid={0x0, 0x12, @random="62c1b5ac46bd0ede33f560bd77bc8d3c655b"}]}, @NL80211_ATTR_IE={0x5e, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @ibss={0x6, 0x2, 0x20c}, @tim={0x5, 0x35, {0x2, 0xba, 0xc0, "603ca8fcd38d76f1534df64243ef9e54bf0d6737a0a37951c8e018a7e4da163753371c26045e090f6e106a7872039fbcf523"}}, @rann={0x7e, 0x15, {{0x1, 0x3e}, 0x5, 0x0, @device_b, 0x206ed0ef, 0x8}}]}, @NL80211_ATTR_BEACON_TAIL={0x1e, 0xf, [@peer_mgmt={0x75, 0x18, {0x0, 0x7, @val=0x6, @val=0x3a, @val="22c4e922c3cd3f82965a2610645b8d00"}}]}, @NL80211_ATTR_BEACON_HEAD={0x2d1, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x3}, @device_b, @device_b, @initial, {0x2, 0x1}, @value=@ver_80211n={0x0, 0x5, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x5eeb, @default, 0x4, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @val={0x6, 0x2, 0x7345}, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x10, 0x1, 0x4, 0x0, {0x40, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x400, 0x9, 0x2}}, @void, @val={0x71, 0x7, {0x0, 0x1, 0x1, 0x0, 0x1, 0x10}}, @void, [{0xdd, 0xda, "b35baeabedb31bf47cb0364b87acc6a6dee1cb5b7e286a4ba9d57470272fac055bf7abb481120ba7a18a09952da670f6f9893b935086b99167d1f910ba68479ad35d80d07e093c81378a9ce7a8627435a0ba4d889d90f1d2b7538a6bab146ba26922d2b80862c14e5a62b2611094d8184ef1bc9b73941b32438a70765a4dfefaa6f083604bf9b326fcc2f457feeccabaff638636aca5a6a148cabf2ad84013972c1e3759d498021331c54764308f50c202c00bc745b595a1ff37ce38023c45e160a392aa54014396de39b2ab9ea18281380dc58b78a0fc89e1c9"}, {0xdd, 0xb5, "6d5cc090854f57ec7931bb8d8279cdbed14117385e700558d8c6ac4e5170691e0297a6e45c8b2fd109ade93dc93749d30902c61a7c3cc653d28d322ccfe853728b0bcfb54df136d4f12c0a079ef9ae8d2dd830c8f4c1c1f5787843a2b562fa8c3c4bc246f3dceddc40044058b306d695ab9beab9bab1801eabb54fce9a6f95b5ba80e18955c23c8b669660c0dae7e8ad4cf376503443f57cf284851b9ae548bc37a43c73dbf14eb4a01025808876b68747a5ca7792"}, {0xdd, 0xd1, "39de5e0a7e05d439c6d9febb6510679d9aea5f3b5a8578622fa65ebe76d7ff5843dd99c0a8b7c84fa687298ae9b39f77a30eaf48ab3c4ee5cd60bb7cb595706cf11f498bf3ee325e59281d01edea1be42af1b69356c62ab044e71d951e00ecbf4a50b3d1c4af2a118216109e5e2393e945af927055e4cb4c3fad8ef2d1a2af4071872a242cd99c66f999d887e58c84596012bcb6748701e0610467c46d4bccb3f165e32179701335352591a7cbd93523b2f8697863d79005bd2e54018081a2ab27280d6a3a4f6f35e2744f4567669e3439"}, {0xdd, 0xc, "05e6f6427b605ec354b14165"}]}}, @NL80211_ATTR_BEACON_TAIL={0x58, 0xf, [@mesh_config={0x71, 0x7, {0x1, 0x0, 0x1, 0x1, 0x1, 0xe, 0x28}}, @challenge={0x10, 0x1, 0x78}, @perr={0x84, 0x43, {0x6, 0x5, [{{}, @device_b, 0xf, @void, 0x3f}, {{}, @device_a, 0x2, @void, 0x35}, {{}, @broadcast, 0x8, @void, 0x24}, {{}, @device_b, 0x5, @void, 0x14}, {{}, @device_b, 0xd, @void, 0x4}]}}, @sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x12, 0x80, [@channel_switch={0x25, 0x3, {0x0, 0xb9, 0xe4}}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb, 0x1}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x4}, @NL80211_ATTR_BEACON_HEAD={0x242, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @broadcast, @broadcast, @from_mac=@device_b, {0x0, 0x9}}, 0xc, @default, 0x0, @void, @void, @val={0x3, 0x1, 0x95}, @void, @val={0x6, 0x2, 0x6}, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5}}, @void, [{0xdd, 0x29, "9406cae3ce11219a8a13ccd018625b1e2a30e17885418bcf0284489e0c572e305a068e73b4684c9dc3"}, {0xdd, 0x82, "e8cfcd935a510a35d166067cbed068552f160b7d4a4c554cd5565ab7b4ed00848296987db615c557b1fb86eabd12aaba77bd7cd09c9fb41835402b56e4533cf0c434833691b13eea1c131030735906871a827f214289e939ba87b50e83f7813e76987522324f42180e628132e61d65e19136e9439fb20224797d8ff0f512454873aa"}, {0xdd, 0xc9, "7b6c840f500bfd029a78acba00cc0890974e8096c91653da81bdab70c6ce2662c8a7c6cdcfceb31f2e898e336c0cafd101f4a9f32d9d2ae11f4f6aa6fabcaed072e18e77c1b9d636fd93c048d65e67ca00bf8b33ae73e0d97b40e7509e4d9ccc5a3756b2a021a22bb9f32deaaa9a589033f93da04416a71587ac7b31e3a969e87c9d29577c6ff79ed9a85f0800ebd813a63e295ee68e8705e26729e0fb518ccfcbebbf0fb06995842cc28546df181197e0f480b9f6135693e37bf3395e6d450f2a86bba9564e5cdb5f"}, {0xdd, 0x86, "cd9be60d69297dd398e4f67de45e2add0376054cdd1a5876dc1ca322472ec724238adbbd797e278e5bc17149b74f73ccf17ea42c6ba995c1dc90407ea564f2a18410bfb9499ee5bdb8dfd77f3154e86f26cdcef1e9f0d1cee1dfc2086506f03c7180ad5645a2e4b757ea11e3dd0dc70effa8e720f1bd42e4e2a22ecd7e6bd2445484e7ab209f"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0xad, 0x80, [@peer_mgmt={0x75, 0x14, {0x0, 0x5, @void, @void, @val="cdb4d6f7c46767b265c51489576d394b"}}, @ibss={0x6, 0x2, 0xfffb}, @mesh_chsw={0x76, 0x6, {0x1, 0xfd, 0x14, 0x80}}, @perr={0x84, 0x82, {0x9, 0x8, [{{0x0, 0x1}, @broadcast, 0xfffffffa, @value=@broadcast, 0x32}, {{0x0, 0x1}, @device_a, 0x3, @value=@device_b, 0x3f}, {{0x0, 0x1}, @device_b, 0x3ff, @value, 0x3b}, {{}, @broadcast, 0x6, @void, 0x2b}, {{}, @broadcast, 0x5, @void, 0x3}, {{0x0, 0x1}, @device_b, 0xb, @value, 0xf}, {{}, @device_a, 0xd, @void, 0xb}, {{}, @device_b, 0x4, @void, 0x42}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}]}]]}]}, 0xf60}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) syz_genetlink_get_family_id$ethtool(&(0x7f0000004700), r8) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000004780), r4) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000004840)={&(0x7f0000004740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004800)={&(0x7f00000047c0)={0x30, r10, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x9, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000004dc0)={0x0, 0x0}) ioctl$NS_GET_OWNER_UID(r8, 0xb704, &(0x7f0000004e40)=0x0) r14 = getgid() sendmmsg$unix(r0, &(0x7f000000c0c0)=[{{&(0x7f0000004880)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000004d80)=[{&(0x7f0000004900)="ec259301fd6268ee2dad91db11ca60c1f549db97df5692d11c2072cb0907d79cf1bd7436c1f9f26eb68ec1a3b84f99da07591a2c70d9d0c80afcd752d65abaf363442b94b931cd9a118ca0855e9703fb17adf7a1d13623d1dac1af8cad523604ec9b4a0e7fc6581e593a2813619270ddef33d97034f3fd359fa0865dfb169da576ecd06b6631fb729cc50e558e", 0x8d}, {&(0x7f00000049c0)="2e03dbc7676482978f7a102ac7e2e38c7808ea3bf7326aea0c106af92e8fb48eb710b07a5fc5cfed4d47b6e4873213b466da6ee306c0232a376cdf1c10644b57b844e0aa955ae168818a4c711cf27ff3a146371761e16b", 0x57}, {&(0x7f0000004a40)="347799ae8441557ed4fdabe40253862ec7f944ecd45198e25137228fc546c6490cd2cf2c8c1e2f5d1ec7bcf62f51415e334a4a7cb8a8d04c24fe4338da8234d6aa164792b96b4fee56d3e708327c3ee5d68143b748dc22a27c3063314da3604b0e9e305388263dc65bd044c887fbf998b5fcbf51be5bedbeba7f52c2913ade9fda7af2c9969d337f788ba8036b0302ef2b69ad93b3a8065e61ce5d5bcf2b8d86a49cc46a9236b16be8b709a455d763a3314a0828e0c546", 0xb7}, {&(0x7f0000004b00)="2606fae72727d2ec200004495bb9d3da9c51243e60bbace8dfb412af1c2d4b66731e9dbbc9eace0d97f326e52cabc336d8bd5310be22380f6d430d65cb53bb21a777cd438308b95a8aa685f4432d84985100f9d236430bdb892a2452797663d787d21a6e2de82dafa56a8a6222ddaded6558b50e549b27b4dcc6ef98e73af794cf10d3f3b779ede4e1bc5eac3dbebe5798cbad0194dfbffbdde8a546bc7c6917c0f410dd50c663910cd334e54dd6e53509768302f69cf1140694e1744bd1c85932acb7b4a98a74c6c71f13b4a5c8", 0xce}, {&(0x7f0000004c00)="e594ae5b516ae482ca65885ba7b63a859b712191c393e4b9466dbb02208ad1a72d24d92864d97af77e5ef67adc00a1e9d63e666404298fe10b24f7723e557d054ad8d5a8d7b4803f5604f0e5a5c752a0f56f7d7989cf0d7b4f9202e3f69d805970533d5c5048ca2434999dd2fc162967d32ff0d6cc78c7e9449b3b69a71b2285290e5dbd9333803d6e32fefd2d687bcbbceb06e2a13c3a6b3eb8dc622af1c39d57c068b6e3ccb5e2b91ef13c91c1b3ae8882ec7b33b83819281ea7dcc8e58deeb179557e03ea0ad760af00f375d61f3904e8f4b9c857", 0xd6}, {&(0x7f0000004d00)="29fac5907914fbc347960b17c0a87ee124ccc89e0d08c5cebc4a4b036fc04093b310d16998854f62fdf812ddd5be4280c8e301c9c799d2b068c8840567b2763c35b576b27b9d43b717b0066844d69b0123905d7f51ee03f5d18425370209ce7fa49c", 0x62}], 0x6, &(0x7f0000007140)=[@rights={{0x14, 0x1, 0x1, [r8, r4]}}, @cred={{0x18, 0x1, 0x2, {r12, r13, r14}}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [r3, r3, 0xffffffffffffffff, 0xffffffffffffffff, r2, r0]}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, r5, r5, r1, r4, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r0]}}], 0xbc, 0x4000001}}, {{0x0, 0x0, &(0x7f0000007440)=[{&(0x7f0000007200)="0d3811bfa985329d337f24a8fa3d6d74d4909c056b817fd1cba82dead535786fd99a4f159842a77147b32a2f6da0f16f0d867b2c6a1762f79216ba6eb6131ab18f91b89be3e25a532096f3d9e40b39b9c074ff0e1f3baa16ce63ec0559a77ee8574aefa91e31fa80d86b293afbe26758439eacd174a6d607623056ec190e78d4b95b0a98172aa1207a79df5b634d746cc4009caba7c4174881abf4c6ffd9e9a07f36127832ce9baf0e744b7a2821d042ca8fd78c9c50bfc65a", 0xb9}, {&(0x7f00000072c0)="42ee1a385997322248cfd855d6a1a59945f69dc9e66f91de0fa665d4025ac4dc6e227833f27ad624aee69f467a0ad91961f98327fb48a749642f306abcd44ec60ec944232999a57899f32577abddedd31211b7ca3c5fdf5b959dbda2fb64ef7ab4f3aeda19c70c3e34641ae01690a3091272173d70c6a785cc048cb02bfb", 0x7e}, {&(0x7f0000007340)="1934857624076bf674f9510c0858e3efc7499e420fe439dd9b701224289bc0c9de57fa484a90ef8c0e11b5c45ec8ce406c30d16d48ae97b3be7c9681a0059a3b9423750d87c428f80290d19f4cbd5ba90d0bd60c17d0bbf56d1dce9788a0008e3a6dac3168e11f7a5b688970eaaddbdc324e68d9479c2481761545259be7abf50531b6b682db5ebcc8eb0b8f586da0a199a38c381a4eadc375d57b15f7000a19f7f2460de7b42cfb929797b4cc96562f028aef9deccb7ff39656068a2f643ea058c1a43e475145f859209eefebb43fe8334506980861ad6dedffff8373727ba856f1c0a9a433500bf4ed9dc994", 0xed}], 0x3, &(0x7f0000009cc0)=[@rights={{0x20, 0x1, 0x1, [r2, r2, r1, r3, r2]}}, @cred={{0x18}}, @rights={{0x34, 0x1, 0x1, [r11, r1, r5, r5, r3, r11, r1, r11, r4, r5]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r11, 0xffffffffffffffff, r4, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x108, 0x4008000}}, {{&(0x7f0000009e00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000a340)=[{&(0x7f0000009e80)="531364904de55de688fd8ccdfc3376394578ee988671123ae75c43dc1d206f630dbe8cf4e52cfe2a2109130939ac98c27e79ef9cd4891e5c079a3b5c69ca918fae7b1d556d8ba6a688dca1cf31fd7cf30407a0dd0e271e16", 0x58}, {&(0x7f0000009f00)="c61a441abefd7bc6f003de063c53bdba73f0bd1ff4722281e6454e0d1bfbe4b7372439654be09c8dac8776f6a10904547bc91bb594f1f537d3e75aea055350e28d0600a86a1355ffa3", 0x49}, {&(0x7f0000009f80)="ab5a789a9703667e636cd16d0be59c388f0c60243ed4246abaf86b1397a6e8f7fe76e5df3ca3e7bbc3cf5d029640afb00d87f56af7d8062c031679a22fe616254685e17c4a4302a551efa83cfb9f5ff6b22cfcad3aaabfee933bac049539ab9ee01e6972ce465563d380a6227304dc9cdfa937d19d6808c347c7e931da11749065fb402ae41044cfd3f03a7d6f5c63028d319ec6a2edda38406e32d719cc8e422a4ff6a47e40508219c029f5141c9bf3298f5c6edd1868d75543d26168", 0xbd}, {&(0x7f000000a040)="a5b94443b2c53731011ab6deb0f8bd372057cf85ddeff62627855e30e84eb6f0cd79b307220328aaaec3b3d509f1e41a2cbbcfe7ab6373eb69cfe67da86b59bc7f5897f691b128ef667a4daa797efe5a455e4da5d22d4bc834f1baf336b776ac27d944890192040eba7891b05f41e1e7a194d40a3d64c82536a59f51b3de0c57fbc5d3bfc16489b880596eb9cb9c830eb87a1d99b86544ab39454a6ed425c3912042b5a5a131b18ad2b870f24713650e0b31a4224813575255d9fe5a85d27cfe22afa9cde936b12ec2753e", 0xcb}, {&(0x7f000000a140)="62c74508b18e4bea9cf9e2efc411cfafb5f4b3367cc415c9029467f240969b424ad8409cbcbb594e83a9d62c", 0x2c}, {&(0x7f000000a180)="fa7a827c261b296b118ea11dce316be8d9863db202fd2160d2359a3ec0a6aac3dcf7e759296bd8bf8987b9a4a074fa05726c13f868b41070ed95b85829e008439498", 0x42}, {&(0x7f000000a200)="5d9f18a9df66f07170", 0x9}, {&(0x7f000000a240)="89704db2a25d11d6cce6ede1413dae58843bae0218c1968f4d403b5773a03985c491a80c907bae3af74fef57063e38d63782f1a5e84fd3591a5c162bdd72390dc912ab4ba861c5c10df4cbd65811f984592f693115b59c1ee3a7170ab35554715d529e8066f379c59c6c833dcc0798300b6385f010e0c62fcf1a22b3dc959b35828a85181aa0a5f062b5443b186db7b451a94d2685fcd24d90eee88a2bbfb02fa66820afe3b66ed5b895cf14f7d5d046e12af6aa0f8b01aeb2562a7c4f97bd1f965a2bb3f7b99173d5d66906ff0b7c5c", 0xd0}], 0x8, &(0x7f000000ab00)=[@rights={{0x20, 0x1, 0x1, [r3, r11, r2, 0xffffffffffffffff, r4]}}, @rights={{0x2c, 0x1, 0x1, [r8, r8, r8, 0xffffffffffffffff, r11, r4, r0, r2]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0xc}}, @rights={{0x20, 0x1, 0x1, [r3, r4, r3, 0xffffffffffffffff, r2]}}], 0xd8, 0x40001}}, {{&(0x7f000000ac00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000b200)=[{&(0x7f000000ac80)="4c2bda8f5dfd3eb23e3d59b23c62a042aaab13322b95c22a34f98186fa8db8dfefbb57211c8ca404e6aa171baa04405d09e4fcc8606dc0cdbe55abadb26de1be0c1be141006e318dc85b2084f3655c07f2be4611c307beeee8cf4f2b89c194e6d61726bdc957f7c876fac2f1962da8f261c39c18acd54315a28c9abbb9c60a2a9b29fa2da4eebbf7686226e5646723a570dd908724de65dcfa8343f4e53ac9", 0x9f}, {&(0x7f000000ad40)="16ede31669d82411d06785267b0c32cd8b4f86928d3a3a54e74802f8e312210243435d57e3d2d194178fc8f34151784f4b1edd71f8b645911886a09034d9bbc121dc7335e4c09d311a986a14fda8017b567a360799c84920c91794acdb", 0x5d}, {&(0x7f000000adc0)="6abf26f1b90724f3affe32cf129624354c3b19ab3e44f12773aea098fe6d9a4904143a5cbd9aff9e339f3f056239c1dffff9b868357ba21f893bca9feec2d5d6b39a4c59bc4adb84", 0x48}, {&(0x7f000000ae40)="6d039ec4e3e30f6cbbd69ea09a6d8c7a2684066c7292b1579ea4fa51d86fb13071f7bdca235d495bcd32258328b98d3ec7555b49881b7f5f3b7d919970b9ee", 0x3f}, {&(0x7f000000ae80)="60721b614187b9294f8438be28545f26902911f21fc4f3d2104d9d4bea8853d62983b0f1c321d8b32b0d7a79d47e81331b6043ac5feedc42e36965691ad5a49e5c8098326c65cc63550a4166735659af9f0b1bcd18e28c5d4cdd4811158ef270dea763210b48a4d318fe3b6dd5d0330db8459f8f79efef6f5db7b2843443d0e6fbf0148d28d0fbd841539536765d79e0db646fbbd81ee2c586e3611b0b887d057a0021b87937f5697b0c0b8af844102ad8609331f8e08bce4b0af6a912ac9f1ad4169b33", 0xc4}, {&(0x7f000000af80)="7dca8619f03603810d50ca9f72410daa6d14dcfa4da9ef1b692fb180a5bd461ac9d8f3d25f6a3ee850e77922447ad600d119d09b4463927f245f4045517cec1f083be7451e6b5b8746d07c545d61afb847f2aba5bcb18db06618", 0x5a}, {&(0x7f000000b000)="b62782e2bbdf9dc9d5ac1d3aac40a96eba1b19a02926cf6c0f01267495defc5b5934", 0x22}, {&(0x7f000000b040)="70042122e1e0cf3a857bc5d65a21c4ccb83026cbda79ff207d9ba3f2f7476957d0203cf65058d0e43cbd500522b27df72acfa2f3fb4b3f3f86d1ee160b7c2aaab29efb862d27e307fd3458ea7fb3ceaad66b25fe699fcb592bb08e984a17990b17fbe8bc9bbd57c03c21fe2bae1bb607ac27a3f40d41b92b53b60e67007a54176bd40d3ebe8834d21d815a5a61da62a1be351822061518318516da8cec4bee5f3b4fa8ed41ed880378b694e01904b4c97727729e6fa02111c6781cfde20b7c74385ad60e038041fa36f4df9dd5a86ae4bff90c5dd95e250bb45f64c91c8657e78c183237", 0xe4}, {&(0x7f000000b140)="d38be0217a55cc7d33934f4ef946a4db04cf9ef3ca874d3f2352df5dabd65782bd1ef97bba95b1c38b552af2c6aba6414156e6bd4d908371490476597a2a0109283170bb67e5c957b7f51b0bc54a268154942d8172ddd6dd8a72a3a320752f67a0823330dcf24e60930f1bb9d12bcb84649f2fa1beb7e309d8eb3cde7c58193ed674f9c87025a7647653281177af0b9cfe245d2c47cf8133b4421afc74281afaffcae230fd5770d70bcaef08510fa58325e7aaa92b56", 0xb6}], 0x9, &(0x7f000000b340)=[@cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [r5, r2, r1, r11]}}], 0x34, 0x890}}, {{&(0x7f000000b380)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f000000b480)=[{&(0x7f000000b400)="6710be9642ef2afbb6c3026f7568d99dedabd073964e4df277bd96b3486d06d8751ceec127e72b901958995426e2eac8843755bff0b7e284d3c2fd03e79d8c7eff0359deb2a547eac4459cde8c650ee432d098303e9ab1fa06", 0x59}], 0x1, &(0x7f000000b780)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [r11]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r0, r5, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, r2, r4]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x90, 0x400c084}}, {{&(0x7f000000b840)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f000000ba00)=[{&(0x7f000000b8c0)="1f47f36890af68b1b7e14fe893b164c930d08f08d81c821b1a01f8102a27d18b6d1d1873ba75f57f233f9034aa2fdfbb324b78646aea4eb4e83ced0abc1eb83041c3a5854d493e409bac2ccd3882d7195264c5c48b561be3049d8434815cd4edb0565a62a853bd6cf0ee8f92a1dbf7434c413a4ab7d7d723639a53d7030b40319bcee712afb879bb98c952db60e825a6b484b38daa52b48072bf047d40fb90d844dbb7b0d2103809b86ff56eb3755f49b8c2d45819c0530f69990d479bb4415a38ee5b12d188eddb73be25da30cab4cb4e6eec6ca5bb4167a4cfbcabad5ae4fd499d080636b1b7f7dec7bba9", 0xec}, {&(0x7f000000b9c0)="b8d0a46710afcc02b5598ee1a916a13140ef43f2647ea264266479d979c4b354deac87a1753949a8a42b38fbd99259289a42227c106218", 0x37}], 0x2, &(0x7f000000c000)=[@rights={{0x28, 0x1, 0x1, [r0, r11, r8, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0xc}}, @rights={{0x28, 0x1, 0x1, [r11, r3, r8, r2, r4, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x18}}, @cred={{0x18}}], 0xbc, 0x40c0}}], 0x6, 0x8040) 240.743412ms ago: executing program 2 (id=694): mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ocfs2\x00', 0x800d, 0x0) 140.913046ms ago: executing program 2 (id=695): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000071000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000071000000010"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) (async) 1.029341ms ago: executing program 2 (id=696): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000002c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000500)=0x304000000) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b00)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x9, 0x0, 0x0, 0x2}}, {0x4}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x5c}}, 0x0) 0s ago: executing program 2 (id=697): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = gettid() sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) iopl(0x3) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000100), 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000003080)=ANY=[@ANYBLOB="9c020000230001000000000000000000550200800c00010002"], 0x29c}], 0x1}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x7f, 0x3, 0x0, 0x3147504d, [0xf8, 0x6], [0x4324, 0xfffffff8]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key(&(0x7f0000000180)='.dead\x00', 0x0, &(0x7f00000002c0), 0x0, 0xfffffffffffffffb) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000400), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, &(0x7f0000000440)={0x0, 0xe8d, 0x1, {0x1, @win={{0x0, 0xffffffff, 0x100000, 0x4}, 0x0, 0x195, 0x0, 0x0, 0x0, 0xfd}}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): ast mode [ 99.241002][ T88] bridge_slave_1: left promiscuous mode [ 99.243745][ T88] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.252291][ T88] bridge_slave_0: left allmulticast mode [ 99.253814][ T88] bridge_slave_0: left promiscuous mode [ 99.255789][ T88] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.437046][ T88] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 99.487665][ T1289] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 99.566917][ T88] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.573504][ T88] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.578409][ T88] bond0 (unregistering): Released all slaves [ 99.582737][ T88] bond1 (unregistering): Released all slaves [ 99.616129][ T6681] hsr_slave_0: entered promiscuous mode [ 99.618377][ T6681] hsr_slave_1: entered promiscuous mode [ 99.620145][ T6681] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.620701][ T1289] usb 7-1: device descriptor read/64, error -71 [ 99.622112][ T6681] Cannot create hsr debugfs directory [ 99.716324][ T6719] netlink: 104 bytes leftover after parsing attributes in process `syz.1.318'. [ 99.719649][ T6719] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 99.721250][ T6719] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 99.725298][ T6719] vhci_hcd vhci_hcd.0: Device attached [ 99.729049][ T6721] vhci_hcd: cannot find a urb of seqnum 15 max seqnum 0 [ 99.732697][ T12] vhci_hcd: stop threads [ 99.733867][ T12] vhci_hcd: release socket [ 99.735173][ T12] vhci_hcd: disconnect device [ 99.857281][ T1289] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 99.925353][ T88] hsr_slave_0: left promiscuous mode [ 99.934168][ T88] hsr_slave_1: left promiscuous mode [ 99.936834][ T88] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.938887][ T88] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.942568][ T88] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.944977][ T88] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.979726][ T88] veth1_macvtap: left promiscuous mode [ 99.982335][ T88] veth0_macvtap: left promiscuous mode [ 99.986800][ T1289] usb 7-1: device descriptor read/64, error -71 [ 100.102643][ T1289] usb usb7-port1: attempt power cycle [ 100.436195][ T5364] Bluetooth: hci2: command tx timeout [ 100.436914][ T66] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 100.456128][ T1289] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 100.486507][ T1289] usb 7-1: device descriptor read/8, error -71 [ 100.623717][ T6746] xt_connbytes: Forcing CT accounting to be enabled [ 100.628634][ T6746] xt_CT: You must specify a L4 protocol and not use inversions on it [ 100.657777][ T6746] input: syz0 as /devices/virtual/input/input12 [ 100.681323][ T88] team0 (unregistering): Port device team_slave_1 removed [ 100.729947][ T88] team0 (unregistering): Port device team_slave_0 removed [ 100.735637][ T1289] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 100.766219][ T1289] usb 7-1: device descriptor read/8, error -71 [ 100.885851][ T1289] usb usb7-port1: unable to enumerate USB device [ 101.655050][ T6681] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.659178][ T6681] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.674538][ T6681] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.688665][ T6681] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.751034][ T6681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.763487][ T6681] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.769326][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.771510][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.780151][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.781973][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.940334][ T6681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.998917][ T6681] veth0_vlan: entered promiscuous mode [ 102.006584][ T6681] veth1_vlan: entered promiscuous mode [ 102.022723][ T6681] veth0_macvtap: entered promiscuous mode [ 102.032510][ T6681] veth1_macvtap: entered promiscuous mode [ 102.038413][ T6681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.041479][ T6681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.043954][ T6681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.046839][ T6681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.049704][ T6681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.052600][ T6681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.056852][ T6681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.061722][ T6681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.065681][ T6681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.068299][ T6681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.070922][ T6681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.073338][ T6681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.076269][ T6681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.080288][ T6681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.091375][ T6681] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.094553][ T6681] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.097629][ T6681] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.100608][ T6681] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.155127][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.157156][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.178577][ T88] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.180655][ T88] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.432787][ T39] kauditd_printk_skb: 19 callbacks suppressed [ 102.432799][ T39] audit: type=1326 audit(1729729081.804:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.2.324" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38579 code=0x7ffc0000 [ 102.439829][ T39] audit: type=1326 audit(1729729081.804:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.2.324" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38579 code=0x7ffc0000 [ 102.455793][ T39] audit: type=1326 audit(1729729081.804:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.2.324" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f38579 code=0x7ffc0000 [ 102.461088][ T39] audit: type=1326 audit(1729729081.804:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.2.324" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38579 code=0x7ffc0000 [ 102.467848][ T39] audit: type=1326 audit(1729729081.804:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.2.324" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38579 code=0x7ffc0000 [ 102.476914][ T39] audit: type=1326 audit(1729729081.814:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.2.324" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f38579 code=0x7ffc0000 [ 102.482872][ T39] audit: type=1326 audit(1729729081.814:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.2.324" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38579 code=0x7ffc0000 [ 102.497595][ T39] audit: type=1326 audit(1729729081.814:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.2.324" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38579 code=0x7ffc0000 [ 102.503357][ T66] Bluetooth: hci2: command tx timeout [ 102.504881][ T39] audit: type=1326 audit(1729729081.814:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.2.324" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f38579 code=0x7ffc0000 [ 102.513164][ T39] audit: type=1326 audit(1729729081.814:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.2.324" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38579 code=0x7ffc0000 [ 102.857472][ T6803] netlink: 16 bytes leftover after parsing attributes in process `syz.0.326'. [ 102.876736][ T6803] : entered promiscuous mode [ 103.306117][ T5414] libceph: connect (1)[c::]:6789 error -101 [ 103.307906][ T5414] libceph: mon0 (1)[c::]:6789 connect error [ 103.389043][ T6808] ceph: No mds server is up or the cluster is laggy [ 103.906409][ T6827] binder: BINDER_SET_CONTEXT_MGR already set [ 103.908300][ T6827] binder: 6822:6827 ioctl 4018620d 200001c0 returned -16 [ 103.912872][ T6827] binder: 6822:6827 ioctl c0306201 20000280 returned -11 [ 104.277475][ T6830] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 104.294868][ T6830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.332'. [ 104.580800][ T66] Bluetooth: hci2: command tx timeout [ 106.668949][ T66] Bluetooth: hci2: command tx timeout [ 106.906871][ T6855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.338'. [ 108.082203][ T6879] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 108.098383][ T6879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.343'. [ 108.130164][ T6879] nbd: device at index 2 is going down [ 108.169507][ T6880] dvmrp0: entered allmulticast mode [ 108.221964][ T6882] overlayfs: failed to resolve './control/file0': -2 [ 108.283423][ T6883] overlayfs: failed to resolve './file0': -2 [ 108.816608][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 109.428808][ T9] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 109.431597][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.436104][ T9] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 109.439241][ T9] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 109.441782][ T9] usb 5-1: Manufacturer: syz [ 109.460478][ T9] usb 5-1: config 0 descriptor?? [ 109.527219][ T9] rc_core: IR keymap rc-hauppauge not found [ 109.529463][ T9] Registered IR keymap rc-empty [ 109.543663][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 109.552135][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input13 [ 109.669896][ T6885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.673730][ T6885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.837179][ C0] igorplugusb 5-1:0.0: Error: urb status = -32 [ 109.838702][ T6885] batman_adv: batadv0: Adding interface: wlan1 [ 109.841107][ T6885] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.851746][ T6885] batman_adv: batadv0: Interface activated: wlan1 [ 109.873790][ T6885] batman_adv: batadv0: Interface deactivated: wlan1 [ 109.918392][ T6885] batman_adv: batadv0: Removing interface: wlan1 [ 110.112309][ T63] usb 5-1: USB disconnect, device number 6 [ 110.800947][ T6914] team0: No ports can be present during mode change [ 111.844314][ T5364] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 111.848718][ T5364] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 111.851829][ T5364] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 111.856712][ T5364] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 111.859638][ T5364] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 111.864124][ T5364] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 111.904302][ T6921] lo speed is unknown, defaulting to 1000 [ 112.083359][ T6921] chnl_net:caif_netlink_parms(): no params data found [ 112.335530][ T6921] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.338403][ T6921] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.340526][ T6921] bridge_slave_0: entered allmulticast mode [ 112.358484][ T6921] bridge_slave_0: entered promiscuous mode [ 112.369672][ T6921] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.374159][ T6921] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.378165][ T6921] bridge_slave_1: entered allmulticast mode [ 112.381811][ T6921] bridge_slave_1: entered promiscuous mode [ 112.492057][ T6921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.510237][ T6921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.595791][ T6917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.597336][ T6921] team0: Port device team_slave_0 added [ 112.609069][ T6921] team0: Port device team_slave_1 added [ 112.660396][ T6921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.662723][ T6921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.683122][ T6921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.691363][ T6921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.695242][ T6921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.704355][ T6921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.762733][ T6921] hsr_slave_0: entered promiscuous mode [ 112.770105][ T6921] hsr_slave_1: entered promiscuous mode [ 112.772691][ T6921] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.776651][ T6921] Cannot create hsr debugfs directory [ 112.959135][ T6921] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.070822][ T6921] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.255241][ T6921] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.452830][ T6921] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.557499][ T6921] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 113.561986][ T6921] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 113.565391][ T6921] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 113.568404][ T6921] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 113.667042][ T6921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.687695][ T6921] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.698464][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.701156][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.727879][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.730578][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.864213][ T63] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 113.897908][ T6921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.932901][ T5364] Bluetooth: hci5: command tx timeout [ 113.963133][ T6921] veth0_vlan: entered promiscuous mode [ 113.981316][ T6921] veth1_vlan: entered promiscuous mode [ 114.017446][ T63] usb 8-1: Using ep0 maxpacket: 8 [ 114.019419][ T6921] veth0_macvtap: entered promiscuous mode [ 114.024469][ T63] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 114.030528][ T6921] veth1_macvtap: entered promiscuous mode [ 114.032114][ T63] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 114.039578][ T63] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 114.051989][ T63] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.054337][ T6921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.057225][ T63] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 114.062268][ T63] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.066351][ T6921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.069046][ T6921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.079807][ T6921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.086658][ T6921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.089369][ T6921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.091929][ T6921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.095790][ T6921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.100096][ T6921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.107363][ T6921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.110124][ T6921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.115687][ T6921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.119422][ T6921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.122085][ T6921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.125094][ T6921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.127682][ T6921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.130729][ T6921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.138376][ T6921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.145004][ T6921] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.147776][ T6921] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.150540][ T6921] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.157358][ T6921] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.270616][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.281889][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.292398][ T63] usb 8-1: GET_CAPABILITIES returned 0 [ 114.295765][ T63] usbtmc 8-1:16.0: can't read capabilities [ 114.315860][ T88] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.318707][ T88] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.437225][ T6952] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 114.483427][ T4803] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 114.546149][ T6958] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 114.557946][ T39] kauditd_printk_skb: 7 callbacks suppressed [ 114.557961][ T39] audit: type=1326 audit(1729729093.945:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6949 comm="syz.1.354" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 114.595876][ T39] audit: type=1326 audit(1729729093.945:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6949 comm="syz.1.354" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 114.611899][ T39] audit: type=1326 audit(1729729093.995:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6949 comm="syz.1.354" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 114.631173][ T39] audit: type=1326 audit(1729729093.995:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6949 comm="syz.1.354" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 114.664246][ T4803] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 114.667333][ T4803] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.669990][ T4803] usb 7-1: Product: syz [ 114.671527][ T4803] usb 7-1: Manufacturer: syz [ 114.674163][ T4803] usb 7-1: SerialNumber: syz [ 114.677758][ T39] audit: type=1326 audit(1729729093.995:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6949 comm="syz.1.354" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 114.683745][ T4803] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 114.742502][ T4803] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 114.746036][ T39] audit: type=1326 audit(1729729093.995:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6949 comm="syz.1.354" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 114.766892][ T39] audit: type=1326 audit(1729729094.015:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6949 comm="syz.1.354" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 114.826053][ T39] audit: type=1326 audit(1729729094.015:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6949 comm="syz.1.354" exe="/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 114.840310][ T39] audit: type=1326 audit(1729729094.015:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6949 comm="syz.1.354" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 114.854793][ T39] audit: type=1326 audit(1729729094.015:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6949 comm="syz.1.354" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 115.601980][ T5232] usb 7-1: USB disconnect, device number 6 [ 115.708686][ T6976] binder: Unknown parameter 'smackfsroot' [ 115.739589][ T6976] ubi0: attaching mtd0 [ 115.744832][ T6976] ubi0: scanning is finished [ 115.746119][ T6976] ubi0: empty MTD device detected [ 115.771893][ T4803] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 115.774084][ T4803] ath9k_htc: Failed to initialize the device [ 115.778951][ T5232] usb 7-1: ath9k_htc: USB layer deinitialized [ 115.884356][ T6976] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 115.887279][ T6976] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 115.890012][ T6976] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 115.893615][ T6976] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 115.895785][ T6976] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 115.898646][ T6976] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 115.901249][ T6976] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2826759475 [ 115.904883][ T6976] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 115.913278][ T6982] ubi0: background thread "ubi_bgt0d" started, PID 6982 [ 116.011629][ T66] Bluetooth: hci5: command tx timeout [ 116.110756][ T6989] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 116.375400][ T6993] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 116.382739][ T6996] input: syz0 as /devices/virtual/input/input14 [ 116.476542][ T6993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.370'. [ 116.537552][ T6993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.370'. [ 116.549091][ T5442] block nbd1: NBD_DISCONNECT [ 116.947010][ T7003] 9pnet_virtio: no channels available for device syz [ 117.035021][ T7005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.371'. [ 117.038653][ T7005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.053458][ T7005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.090741][ T7005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.105440][ T7005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.835304][ T4803] usb 8-1: USB disconnect, device number 18 [ 117.960097][ T7021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.374'. [ 118.002565][ T7021] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 118.090612][ T66] Bluetooth: hci5: command 0x040f tx timeout [ 118.106427][ T7026] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 118.740360][ T7041] netlink: 20 bytes leftover after parsing attributes in process `syz.3.379'. [ 118.847665][ T7046] netlink: 'syz.2.380': attribute type 9 has an invalid length. [ 118.864178][ T7046] netlink: 76 bytes leftover after parsing attributes in process `syz.2.380'. [ 118.869887][ T7046] Κό: entered promiscuous mode [ 118.942463][ T7050] overlayfs: missing 'lowerdir' [ 119.175859][ T7066] overlayfs: failed to resolve './file0': -2 [ 119.563725][ T7086] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 119.588026][ T7086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.388'. [ 119.687571][ T7086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.388'. [ 119.849593][ T7093] UBIFS error (pid: 7093): cannot open "./file0", error -22 [ 120.225685][ T5364] Bluetooth: hci5: command 0x040f tx timeout [ 121.056784][ T7099] block device autoloading is deprecated and will be removed. [ 121.178757][ T7105] input: syz0 as /devices/virtual/input/input15 [ 121.327668][ T7116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.396'. [ 121.621323][ T7136] input: syz1 as /devices/virtual/input/input16 [ 122.068902][ T7141] 9pnet_fd: Insufficient options for proto=fd [ 122.258818][ T5364] Bluetooth: hci5: command 0x040f tx timeout [ 122.580212][ T7147] 9pnet_fd: Insufficient options for proto=fd [ 122.587184][ T7147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.766718][ T7151] dlm: non-version read from control device 4096 [ 123.413349][ T7179] netlink: 'syz.0.411': attribute type 4 has an invalid length. [ 123.429675][ T7179] netlink: 'syz.0.411': attribute type 4 has an invalid length. [ 124.139315][ T7177] overlayfs: statfs failed on './file0' [ 124.258021][ T7187] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 124.269704][ T7187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.413'. [ 124.309783][ T7187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.413'. [ 124.335054][ T7190] IPVS: set_ctl: invalid protocol: 43 10.1.1.1:20003 [ 124.357218][ T39] kauditd_printk_skb: 24 callbacks suppressed [ 124.357229][ T39] audit: type=1326 audit(1729729103.749:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7189 comm="syz.0.414" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffe0000 [ 124.397618][ T39] audit: type=1800 audit(1729729103.789:242): pid=7192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.415" name="bus" dev="overlay" ino=107 res=0 errno=0 [ 124.753656][ C3] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 124.861957][ T7210] geneve2: entered promiscuous mode [ 124.863505][ T7210] geneve2: entered allmulticast mode [ 125.341304][ T7227] input: syz1 as /devices/virtual/input/input17 [ 125.637815][ T63] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 125.787723][ T63] usb 5-1: Using ep0 maxpacket: 32 [ 125.790154][ T63] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 125.793698][ T63] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 125.796070][ T63] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 125.796092][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 125.796103][ T63] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 125.796114][ T63] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 125.796131][ T63] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 125.796142][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.808256][ T63] usb 5-1: config 0 descriptor?? [ 126.025298][ T63] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 126.039609][ T63] usb 5-1: USB disconnect, device number 7 [ 126.043190][ T63] usblp0: removed [ 126.300006][ T7245] netlink: 'syz.3.429': attribute type 1 has an invalid length. [ 126.303923][ T7245] netlink: 636 bytes leftover after parsing attributes in process `syz.3.429'. [ 126.327587][ T63] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 126.487945][ T63] usb 5-1: Using ep0 maxpacket: 32 [ 126.496128][ T63] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 126.500030][ T63] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 126.503196][ T63] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 126.506251][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 126.509346][ T63] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 126.512401][ T63] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 126.516011][ T63] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 126.519144][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.523886][ T63] usb 5-1: config 0 descriptor?? [ 126.732656][ T63] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 126.932662][ T25] hid-generic 0000:0000:100000.0005: unknown main item tag 0x0 [ 126.937818][ T25] hid-generic 0000:0000:100000.0005: unknown main item tag 0x0 [ 126.942844][ T25] hid-generic 0000:0000:100000.0005: unknown main item tag 0x0 [ 126.945567][ T25] hid-generic 0000:0000:100000.0005: unknown main item tag 0x0 [ 126.951434][ T25] hid-generic 0000:0000:100000.0005: unknown main item tag 0x0 [ 126.955551][ T25] hid-generic 0000:0000:100000.0005: unknown main item tag 0x0 [ 126.957951][ T25] hid-generic 0000:0000:100000.0005: unknown main item tag 0x0 [ 126.960810][ T25] hid-generic 0000:0000:100000.0005: unknown main item tag 0x0 [ 126.962964][ T25] hid-generic 0000:0000:100000.0005: unknown main item tag 0x0 [ 126.965054][ T25] hid-generic 0000:0000:100000.0005: unknown main item tag 0x0 [ 126.967102][ T25] hid-generic 0000:0000:100000.0005: unknown main item tag 0x0 [ 126.969631][ T25] hid-generic 0000:0000:100000.0005: unknown main item tag 0x0 [ 126.972518][ T25] hid-generic 0000:0000:100000.0005: unknown main item tag 0x0 [ 126.975146][ T25] hid-generic 0000:0000:100000.0005: unknown main item tag 0x0 [ 126.977918][ T25] hid-generic 0000:0000:100000.0005: unknown main item tag 0x0 [ 126.980059][ T25] hid-generic 0000:0000:100000.0005: unknown main item tag 0x0 [ 126.982146][ T25] hid-generic 0000:0000:100000.0005: unknown main item tag 0x0 [ 126.984236][ T25] hid-generic 0000:0000:100000.0005: unknown main item tag 0x0 [ 126.986321][ T25] hid-generic 0000:0000:100000.0005: unknown main item tag 0x0 [ 126.996893][ T25] hid-generic 0000:0000:100000.0005: hidraw0: HID v0.01 Device [syz1] on syz0 [ 128.233669][ T7257] 9pnet_fd: Insufficient options for proto=fd [ 128.235821][ T7258] 9pnet_fd: Insufficient options for proto=fd [ 128.450587][ T1995] usb 5-1: USB disconnect, device number 8 [ 128.465198][ T1995] usblp0: removed [ 128.571324][ T7268] input: syz0 as /devices/virtual/input/input18 [ 129.461891][ T7273] random: crng reseeded on system resumption [ 129.864795][ T7284] netlink: 'syz.2.438': attribute type 1 has an invalid length. [ 129.869943][ T7285] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 129.877253][ T7284] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.438'. [ 129.879718][ T7284] netlink: 'syz.2.438': attribute type 1 has an invalid length. [ 129.883641][ T7285] Cannot find add_set index 3 as target [ 130.187361][ T7302] [U] : [ 130.188486][ T7302] [U] [ 130.189471][ T7302] [U] [ 130.190503][ T7302] [U] [ 130.191533][ T7302] [U] [ 130.192394][ T7302] [U] [ 130.193215][ T7302] [U] [ 130.193992][ T7302] [U] [ 130.194907][ T7302] [U] [ 130.195691][ T7302] [U] [ 130.196471][ T7302] [U] [ 130.197356][ T7302] [U] [ 130.198069][ T7302] [U] [ 130.198911][ T7302] [U] [ 130.199696][ T7302] [U] [ 130.200425][ T7302] [U] [ 130.203229][ T7302] [U] [ 130.203988][ T7302] [U] [ 130.204804][ T7302] [U] [ 130.205572][ T7302] [U] [ 130.206306][ T7302] [U] [ 130.207078][ T7302] [U] [ 130.207850][ T7302] [U] [ 130.208616][ T7302] [U] [ 130.209850][ T7302] [U] [ 130.210707][ T7302] [U] [ 130.211479][ T7302] [U] [ 130.212270][ T7302] [U] [ 130.213105][ T7302] [U] [ 130.213866][ T7302] [U] [ 130.214616][ T7302] [U] [ 130.215556][ T7302] [U] [ 130.221835][ T7302] [U] [ 130.222886][ T7302] [U] [ 130.223625][ T7302] [U] [ 130.224467][ T7302] [U] [ 130.225532][ T7302] [U] [ 130.226587][ T7302] [U] [ 130.227523][ T7302] [U] [ 130.228255][ T7302] [U] [ 130.230609][ T7302] [U] [ 130.231647][ T7302] [U] [ 130.232651][ T7302] [U] [ 130.233570][ T7302] [U] [ 130.234437][ T7302] [U] [ 130.235383][ T7302] [U] [ 130.236273][ T7302] [U] [ 130.237327][ T7302] [U] [ 130.243731][ T7302] [U] [ 130.245043][ T7302] [U] [ 130.246018][ T7302] [U] [ 130.246953][ T7302] [U] [ 130.247884][ T7302] [U] [ 130.248708][ T7302] [U] [ 130.249507][ T7302] [U] [ 130.250350][ T7302] [U] [ 130.256389][ T7302] [U] [ 130.257497][ T7302] [U] [ 130.258524][ T7302] [U] [ 130.259557][ T7302] [U] [ 130.260615][ T7302] [U] [ 130.261663][ T7302] [U] [ 130.262707][ T7302] [U] [ 130.263747][ T7302] [U] [ 130.266192][ T7302] [U] [ 130.267275][ T7302] [U] [ 130.268276][ T7302] [U] [ 130.269232][ T7302] [U] [ 130.270252][ T7302] [U] [ 130.271257][ T7302] [U] [ 130.272142][ T7302] [U] [ 130.273090][ T7302] [U] [ 130.276148][ T7302] [U] [ 130.277236][ T7302] [U] [ 130.278262][ T7302] [U] [ 130.279282][ T7302] [U] [ 130.280309][ T7302] [U] [ 130.281351][ T7302] [U] [ 130.282342][ T7302] [U] [ 130.283074][ T7302] [U] [ 130.284346][ T7302] [U] [ 130.285264][ T7302] [U] [ 130.286270][ T7302] [U] [ 130.287274][ T7302] [U] [ 130.288075][ T7302] [U] [ 130.289145][ T7302] [U] [ 130.290177][ T7302] [U] [ 130.291290][ T7302] [U] [ 130.293635][ T7302] [U] [ 130.294667][ T7302] [U] [ 130.295729][ T7302] [U] [ 130.296774][ T7302] [U] [ 130.297788][ T7302] [U] [ 130.298808][ T7302] [U] [ 130.299804][ T7302] [U] [ 130.300927][ T7302] [U] [ 130.303216][ T7302] [U] [ 130.304279][ T7302] [U] [ 130.305311][ T7302] [U] [ 130.306310][ T7302] [U] [ 130.307362][ T7302] [U] [ 130.308395][ T7302] [U] [ 130.309508][ T7302] [U] [ 130.310554][ T7302] [U] [ 130.313027][ T7302] [U] [ 130.314084][ T7302] [U] [ 130.315161][ T7302] [U] [ 130.316251][ T7302] [U] [ 130.317353][ T7302] [U] [ 130.318385][ T7302] [U] [ 130.319228][ T7302] [U] [ 130.320276][ T7302] [U] [ 130.322249][ T7302] [U] [ 130.323217][ T7302] [U] [ 130.324143][ T7302] [U] [ 130.325119][ T7302] [U] [ 130.326133][ T7302] [U] [ 130.327133][ T7302] [U] [ 130.328129][ T7302] [U] [ 130.329087][ T7302] [U] [ 130.333777][ T7302] [U] [ 130.334699][ T7302] [U] [ 130.335652][ T7302] [U] [ 130.336634][ T7302] [U] [ 130.337517][ T7302] [U] [ 130.338291][ T7302] [U] [ 130.339073][ T7302] [U] [ 131.018003][ T7301] [U] [ 131.607056][ T1374] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.608943][ T1374] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.120626][ T7320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.779609][ T7327] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 132.783086][ T7327] overlayfs: failed to set uuid (67/file1, err=-1); falling back to uuid=null. [ 132.895772][ T7328] netlink: 36 bytes leftover after parsing attributes in process `syz.0.449'. [ 133.524079][ T7330] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 133.538150][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.450'. [ 133.601246][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.450'. [ 133.636472][ T5442] block nbd3: NBD_DISCONNECT [ 133.650712][ T7335] netlink: 'syz.1.451': attribute type 10 has an invalid length. [ 133.652987][ T7335] ipvlan1: entered promiscuous mode [ 133.745054][ T7323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.888967][ T7346] netlink: 28 bytes leftover after parsing attributes in process `syz.3.454'. [ 134.179854][ T39] audit: type=1326 audit(1729729113.581:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="syz.0.452" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x0 [ 134.397780][ T7362] netlink: 'syz.2.457': attribute type 2 has an invalid length. [ 134.406996][ T7362] openvswitch: : Dropping previously announced user features [ 135.308656][ T7369] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 135.453098][ T7375] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 135.468699][ T7375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.462'. [ 135.510264][ T7375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.462'. [ 135.517193][ T5442] block nbd2: NBD_DISCONNECT [ 135.656192][ T7378] 9pnet_fd: Insufficient options for proto=fd [ 136.298226][ T39] audit: type=1800 audit(1729729115.702:244): pid=7391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.467" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 136.319331][ T39] audit: type=1800 audit(1729729115.722:245): pid=7390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.467" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 136.526797][ T39] audit: type=1326 audit(1729729115.932:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7394 comm="syz.3.469" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x0 [ 136.814957][ T7402] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 136.836016][ T7402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.471'. [ 136.881851][ T7402] nbd: device at index 2 is going down [ 137.752457][ T5232] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 137.905720][ T5232] usb 5-1: device descriptor read/64, error -71 [ 138.155355][ T5232] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 138.295258][ T5232] usb 5-1: device descriptor read/64, error -71 [ 138.408627][ T5232] usb usb5-port1: attempt power cycle [ 138.765295][ T5232] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 138.789154][ T5232] usb 5-1: device descriptor read/8, error -71 [ 138.855160][ T1995] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 139.005107][ T1995] usb 8-1: Using ep0 maxpacket: 16 [ 139.052657][ T5232] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 139.054436][ T1995] usb 8-1: config 0 has no interfaces? [ 139.058784][ T1995] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 139.061476][ T1995] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.063536][ T1995] usb 8-1: Product: syz [ 139.064677][ T1995] usb 8-1: Manufacturer: syz [ 139.067511][ T1995] usb 8-1: SerialNumber: syz [ 139.070951][ T1995] usb 8-1: config 0 descriptor?? [ 139.078374][ T5232] usb 5-1: device descriptor read/8, error -71 [ 139.126910][ T7438] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 139.140437][ T7438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'. [ 139.181837][ T7438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'. [ 139.197364][ T5232] usb usb5-port1: unable to enumerate USB device [ 139.292483][ T4803] usb 8-1: USB disconnect, device number 19 [ 139.464772][ T7446] syz.2.481: attempt to access beyond end of device [ 139.464772][ T7446] loop2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 139.474074][ T7446] EXT4-fs (loop2): unable to read superblock [ 139.646836][ T7446] hub 2-0:1.0: USB hub found [ 139.648375][ T7446] hub 2-0:1.0: 6 ports detected [ 139.815118][ T1289] usb 2-1: new high-speed USB device number 4 using ehci-pci [ 139.992429][ T7450] random: crng reseeded on system resumption [ 140.000895][ T1289] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 140.001971][ T7450] Unrecognized hibernate image header format! [ 140.006115][ T1289] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 140.007461][ T7450] PM: hibernation: Image mismatch: architecture specific data [ 140.011023][ T1289] usb 2-1: Product: QEMU USB Tablet [ 140.013309][ T1289] usb 2-1: Manufacturer: QEMU [ 140.015068][ T1289] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 140.049752][ T1289] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0006/input/input19 [ 140.059911][ T1289] hid-generic 0003:0627:0001.0006: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 141.040693][ T7451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.098305][ T7468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.423760][ T7472] netlink: 'syz.1.488': attribute type 1 has an invalid length. [ 142.428277][ T7472] netlink: 88156 bytes leftover after parsing attributes in process `syz.1.488'. [ 142.638336][ T7486] syzkaller0: entered promiscuous mode [ 142.639790][ T7486] syzkaller0: entered allmulticast mode [ 142.718072][ T7492] usb 2-1: USB disconnect, device number 4 [ 142.769679][ T7492] hub 2-0:1.0: USB hub found [ 142.771541][ T7492] hub 2-0:1.0: 6 ports detected [ 142.801493][ T7490] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.803548][ T7490] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.934829][ T1289] usb 2-1: new high-speed USB device number 5 using ehci-pci [ 143.000321][ T7490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.010794][ T7490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.111472][ T1289] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 143.114522][ T1289] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 143.118243][ T1289] usb 2-1: Product: QEMU USB Tablet [ 143.120356][ T1289] usb 2-1: Manufacturer: QEMU [ 143.122014][ T1289] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 143.125771][ T7490] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.128827][ T7490] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.131752][ T7490] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.134045][ T7490] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.144744][ T63] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 143.158291][ T1289] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0007/input/input20 [ 143.220015][ T1289] hid-generic 0003:0627:0001.0007: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 143.304783][ T63] usb 8-1: Using ep0 maxpacket: 8 [ 143.307613][ T63] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 143.310439][ T63] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 143.312877][ T63] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 143.316192][ T63] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 143.318738][ T63] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 143.321275][ T63] usb 8-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 143.323541][ T63] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.332876][ T63] usb 8-1: config 0 descriptor?? [ 143.371516][ T5364] Bluetooth: hci6: urb ffff888066d9f600 submission failed (90) [ 145.176551][ T7494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.492'. [ 145.181442][ T7518] netlink: 'syz.2.499': attribute type 21 has an invalid length. [ 145.181547][ T63] usb 8-1: USB disconnect, device number 20 [ 145.567155][ T7536] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.502'. [ 145.839179][ T7542] input: syz1 as /devices/virtual/input/input21 [ 146.409857][ T7555] binder: 7553:7555 ioctl c00c6211 0 returned -14 [ 146.440642][ T7564] binder_alloc: binder_alloc_mmap_handler: 7563 20ffc000-20ffe000 already mapped failed -16 [ 146.448917][ T7564] binder_alloc: 7563: binder_alloc_buf, no vma [ 146.599394][ T63] libceph: connect (1)[c::]:6789 error -101 [ 146.601081][ T63] libceph: mon0 (1)[c::]:6789 connect error [ 146.741504][ T7574] ceph: No mds server is up or the cluster is laggy [ 146.845993][ T7587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.514'. [ 146.867001][ T7587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.514'. [ 146.906721][ T7581] /dev/sr0: Can't open blockdev [ 148.172696][ T7604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.719690][ T7619] netlink: 'syz.2.521': attribute type 1 has an invalid length. [ 148.724351][ T7619] netlink: 9312 bytes leftover after parsing attributes in process `syz.2.521'. [ 148.731634][ T7619] netlink: 'syz.2.521': attribute type 1 has an invalid length. [ 148.896493][ T7622] netlink: 116 bytes leftover after parsing attributes in process `syz.1.522'. [ 148.899016][ T7622] bridge_slave_1: left allmulticast mode [ 148.900556][ T7622] bridge_slave_1: left promiscuous mode [ 148.902160][ T7622] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.913950][ T7622] bridge_slave_0: left allmulticast mode [ 148.915525][ T7622] bridge_slave_0: left promiscuous mode [ 148.939567][ T7622] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.436141][ T7627] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 149.441077][ T7627] macvtap1: entered promiscuous mode [ 149.443004][ T7627] macvtap1: entered allmulticast mode [ 149.445628][ T7627] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 150.205884][ T39] audit: type=1326 audit(1729729129.603:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7640 comm="syz.0.527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 150.212914][ T39] audit: type=1326 audit(1729729129.603:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7640 comm="syz.0.527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 150.218920][ T39] audit: type=1326 audit(1729729129.603:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7640 comm="syz.0.527" exe="/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 150.224723][ T39] audit: type=1326 audit(1729729129.603:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7640 comm="syz.0.527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 150.230215][ T39] audit: type=1326 audit(1729729129.603:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7640 comm="syz.0.527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 150.276215][ T7651] fuse: Unknown parameter '' [ 150.445261][ T7659] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 150.452853][ T7659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.531'. [ 150.937629][ T7671] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -1 [ 152.265413][ T7705] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 152.275622][ T7705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.543'. [ 152.349626][ T7705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.543'. [ 152.353183][ T7705] FAULT_INJECTION: forcing a failure. [ 152.353183][ T7705] name failslab, interval 1, probability 0, space 0, times 0 [ 152.359850][ T7705] CPU: 0 UID: 0 PID: 7705 Comm: syz.2.543 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 152.362592][ T7705] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 152.365421][ T7705] Call Trace: [ 152.366306][ T7705] [ 152.367073][ T7705] dump_stack_lvl+0x16c/0x1f0 [ 152.368294][ T7705] should_fail_ex+0x497/0x5b0 [ 152.369536][ T7705] ? fs_reclaim_acquire+0xae/0x150 [ 152.370880][ T7705] should_failslab+0xc2/0x120 [ 152.372112][ T7705] kmem_cache_alloc_lru_noprof+0x72/0x2f0 [ 152.373608][ T7705] ? __d_alloc+0x35/0x8c0 [ 152.374750][ T7705] __d_alloc+0x35/0x8c0 [ 152.375861][ T7705] d_alloc+0x4a/0x1e0 [ 152.376925][ T7705] d_alloc_parallel+0xe9/0x12b0 [ 152.378206][ T7705] ? __pfx_d_alloc_parallel+0x10/0x10 [ 152.379635][ T7705] ? lockdep_init_map_type+0x16d/0x7d0 [ 152.381076][ T7705] ? lockdep_init_map_type+0x16d/0x7d0 [ 152.382499][ T7705] __lookup_slow+0x194/0x460 [ 152.383713][ T7705] ? __pfx___lookup_slow+0x10/0x10 [ 152.385080][ T7705] ? lookup_one_unlocked+0x133/0x160 [ 152.386466][ T7705] ? d_lookup+0xe9/0x180 [ 152.387565][ T7705] lookup_one_unlocked+0x142/0x160 [ 152.388915][ T7705] ? __pfx_lookup_one_unlocked+0x10/0x10 [ 152.390355][ T7705] ? ehci_bus_resume+0x10cc/0x1920 [ 152.391703][ T7705] ? __pfx_mark_lock+0x10/0x10 [ 152.392927][ T7705] ovl_lookup_single+0x201/0xf60 [ 152.394167][ T7705] ? __pfx_ovl_lookup_single+0x10/0x10 [ 152.395514][ T7705] ? __lock_acquire+0x163e/0x3ce0 [ 152.396789][ T7705] ovl_lookup_layer+0x3a9/0x4a0 [ 152.398003][ T7705] ? __pfx___lock_acquire+0x10/0x10 [ 152.399293][ T7705] ? __pfx_ovl_lookup_layer+0x10/0x10 [ 152.400634][ T7705] ? lock_acquire.part.0+0x11b/0x380 [ 152.401942][ T7705] ovl_lookup+0x4ae/0x21f0 [ 152.403034][ T7705] ? d_alloc_parallel+0x984/0x12b0 [ 152.404290][ T7705] ? __d_lookup_rcu+0x331/0x4c0 [ 152.405483][ T7705] ? __pfx_ovl_lookup+0x10/0x10 [ 152.406698][ T7705] ? __pfx_d_alloc_parallel+0x10/0x10 [ 152.408045][ T7705] ? lockdep_init_map_type+0x16d/0x7d0 [ 152.409391][ T7705] __lookup_slow+0x24f/0x460 [ 152.410564][ T7705] ? __pfx___lookup_slow+0x10/0x10 [ 152.411856][ T7705] ? lookup_one_unlocked+0x133/0x160 [ 152.413213][ T7705] ? d_lookup+0xe9/0x180 [ 152.414309][ T7705] lookup_one_unlocked+0x142/0x160 [ 152.415662][ T7705] ? __pfx_lookup_one_unlocked+0x10/0x10 [ 152.417131][ T7705] ovl_lookup_single+0x201/0xf60 [ 152.418440][ T7705] ? __pfx_ovl_lookup_single+0x10/0x10 [ 152.419940][ T7705] ovl_lookup_layer+0x3a9/0x4a0 [ 152.421253][ T7705] ? __pfx_ovl_lookup_layer+0x10/0x10 [ 152.422672][ T7705] ? trace_kmalloc+0x2d/0xe0 [ 152.423912][ T7705] ? __kmalloc_noprof+0x207/0x410 [ 152.425260][ T7705] ovl_lookup+0x13a9/0x21f0 [ 152.426464][ T7705] ? __pfx_ovl_lookup+0x10/0x10 [ 152.427747][ T7705] ? privileged_wrt_inode_uidgid+0xca/0x1d0 [ 152.429271][ T7705] ? __pfx_d_alloc_parallel+0x10/0x10 [ 152.430626][ T7705] ? lockdep_init_map_type+0x16d/0x7d0 [ 152.432054][ T7705] __lookup_slow+0x24f/0x460 [ 152.433278][ T7705] ? __pfx___lookup_slow+0x10/0x10 [ 152.434615][ T7705] ? walk_component+0x342/0x5b0 [ 152.435874][ T7705] ? lookup_fast+0x155/0x540 [ 152.437091][ T7705] walk_component+0x350/0x5b0 [ 152.438350][ T7705] path_lookupat+0x17f/0x770 [ 152.439553][ T7705] filename_lookup+0x1e5/0x5b0 [ 152.440829][ T7705] ? find_held_lock+0x2d/0x110 [ 152.442074][ T7705] ? __pfx_filename_lookup+0x10/0x10 [ 152.443450][ T7705] ? __might_fault+0x13b/0x190 [ 152.444726][ T7705] ? getname_flags.part.0+0x1c5/0x550 [ 152.446230][ T7705] user_path_at+0x3a/0x60 [ 152.447367][ T7705] path_setxattr+0x126/0x280 [ 152.448600][ T7705] ? __pfx_path_setxattr+0x10/0x10 [ 152.449927][ T7705] ? __pfx_lock_release+0x10/0x10 [ 152.451261][ T7705] ? fput+0x30/0x390 [ 152.452300][ T7705] ? ksys_write+0x1ad/0x260 [ 152.453490][ T7705] ? __pfx_ksys_write+0x10/0x10 [ 152.454746][ T7705] __ia32_sys_setxattr+0xc0/0x160 [ 152.455954][ T7705] ? lockdep_hardirqs_on+0x7c/0x110 [ 152.457332][ T7705] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 152.459031][ T7705] __do_fast_syscall_32+0x73/0x120 [ 152.460414][ T7705] do_fast_syscall_32+0x32/0x80 [ 152.461716][ T7705] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 152.463378][ T7705] RIP: 0023:0xf7f38579 [ 152.464440][ T7705] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 152.469440][ T7705] RSP: 002b:00000000f56b656c EFLAGS: 00000296 ORIG_RAX: 00000000000000e2 [ 152.471494][ T7705] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 0000000020000180 [ 152.473522][ T7705] RDX: 00000000200001c0 RSI: 0000000000000001 RDI: 0000000000000000 [ 152.475457][ T7705] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 152.477474][ T7705] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 152.479468][ T7705] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 152.481485][ T7705] [ 152.935689][ T7718] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 152.958202][ T7718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.546'. [ 153.082830][ T7718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.546'. [ 153.086234][ T5442] block nbd1: NBD_DISCONNECT [ 153.563958][ T63] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 153.716174][ T63] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 153.719016][ T63] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 153.722271][ T63] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 153.731956][ T63] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 153.736629][ T63] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 153.743399][ T63] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 153.746522][ T63] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 153.749326][ T63] usb 7-1: Product: syz [ 153.750741][ T63] usb 7-1: Manufacturer: syz [ 153.758789][ T63] cdc_wdm 7-1:1.0: skipping garbage [ 153.760619][ T63] cdc_wdm 7-1:1.0: skipping garbage [ 153.769197][ T63] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 153.771284][ T63] cdc_wdm 7-1:1.0: Unknown control protocol [ 154.021999][ T5414] usb 7-1: USB disconnect, device number 7 [ 154.022872][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 154.025221][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 154.026727][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 154.799153][ T7738] netlink: 148 bytes leftover after parsing attributes in process `syz.2.552'. [ 154.802878][ T7739] netlink: 148 bytes leftover after parsing attributes in process `syz.2.552'. [ 155.168730][ T7742] lo speed is unknown, defaulting to 1000 [ 155.751535][ T7757] syzkaller0: entered allmulticast mode [ 156.095925][ T7761] vivid-003: ================= START STATUS ================= [ 156.098294][ T7761] vivid-003: Radio HW Seek Mode: Bounded [ 156.099879][ T7761] vivid-003: Radio Programmable HW Seek: false [ 156.101532][ T7761] vivid-003: RDS Rx I/O Mode: Block I/O [ 156.104164][ T7761] vivid-003: Generate RBDS Instead of RDS: false [ 156.106017][ T7761] vivid-003: RDS Reception: true [ 156.107309][ T7761] vivid-003: RDS Program Type: 0 inactive [ 156.108820][ T7761] vivid-003: RDS PS Name: inactive [ 156.110200][ T7761] vivid-003: RDS Radio Text: inactive [ 156.111637][ T7761] vivid-003: RDS Traffic Announcement: false inactive [ 156.113559][ T7761] vivid-003: RDS Traffic Program: false inactive [ 156.115863][ T7761] vivid-003: RDS Music: false inactive [ 156.117343][ T7761] vivid-003: ================== END STATUS ================== [ 156.173547][ T7765] fuse: Unknown parameter 'rootmοde' [ 158.861337][ T39] audit: type=1326 audit(1729729138.254:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7796 comm="syz.0.566" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x0 [ 158.927042][ T7789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.965959][ T39] audit: type=1326 audit(1729729138.364:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7796 comm="syz.0.566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 158.974481][ T39] audit: type=1326 audit(1729729138.364:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7796 comm="syz.0.566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 158.980678][ T39] audit: type=1326 audit(1729729138.364:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7796 comm="syz.0.566" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 158.989041][ T39] audit: type=1326 audit(1729729138.364:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7796 comm="syz.0.566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 159.001107][ T39] audit: type=1326 audit(1729729138.374:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7796 comm="syz.0.566" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 159.015012][ T39] audit: type=1326 audit(1729729138.374:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7796 comm="syz.0.566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 159.020739][ T39] audit: type=1326 audit(1729729138.374:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7796 comm="syz.0.566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 159.027091][ T39] audit: type=1326 audit(1729729138.374:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7796 comm="syz.0.566" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 159.029498][ T7802] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 159.032539][ T39] audit: type=1326 audit(1729729138.374:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7796 comm="syz.0.566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 159.052355][ T7802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.568'. [ 159.094778][ T7802] nbd: device at index 1 is going down [ 159.569567][ T7809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.570'. [ 159.748339][ T7817] tmpfs: Bad value for 'mpol' [ 160.180075][ T7832] netlink: 22 bytes leftover after parsing attributes in process `syz.0.573'. [ 160.183570][ T7832] netlink: 32 bytes leftover after parsing attributes in process `syz.0.573'. [ 161.289338][ T7836] input: syz0 as /devices/virtual/input/input22 [ 161.657134][ T7845] overlay: Unknown parameter 'smackfsroot' [ 161.732920][ T7847] program syz.0.578 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.801891][ T7847] netlink: 'syz.0.578': attribute type 1 has an invalid length. [ 161.807110][ T7847] netlink: 16 bytes leftover after parsing attributes in process `syz.0.578'. [ 161.809373][ T7847] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 161.887649][ T7847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.578'. [ 161.899809][ T7840] lo speed is unknown, defaulting to 1000 [ 162.223844][ T63] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 162.384867][ T63] usb 5-1: Using ep0 maxpacket: 32 [ 162.389530][ T63] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 162.392191][ T63] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 162.396377][ T63] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 162.399056][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 162.401461][ T63] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 162.407301][ T63] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 162.411482][ T63] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 162.431296][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.438874][ T63] usb 5-1: config 0 descriptor?? [ 162.439533][ T7855] overlay: ./file0 is not a directory [ 162.677458][ T63] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 162.694750][ T63] usb 5-1: USB disconnect, device number 13 [ 162.699938][ T63] usblp0: removed [ 162.796223][ T7863] lo speed is unknown, defaulting to 1000 [ 163.114205][ T63] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 163.283772][ T63] usb 5-1: Using ep0 maxpacket: 32 [ 163.286771][ T63] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 163.289141][ T63] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 163.292080][ T63] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 163.296956][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 163.300099][ T63] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 163.304200][ T63] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 163.308404][ T63] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 163.311960][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.316811][ T63] usb 5-1: config 0 descriptor?? [ 163.543755][ T63] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 163.780931][ C3] usblp0: nonzero read bulk status received: -71 [ 163.781158][ T5415] usb 5-1: USB disconnect, device number 14 [ 164.018310][ T7852] usblp0: removed [ 164.147798][ T7870] ipvlan1: left promiscuous mode [ 164.150671][ T7870] macvtap1: left promiscuous mode [ 165.099747][ T7889] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 165.109462][ T7889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.588'. [ 165.132427][ T7889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.588'. [ 165.137637][ T7889] FAULT_INJECTION: forcing a failure. [ 165.137637][ T7889] name failslab, interval 1, probability 0, space 0, times 0 [ 165.138425][ T5359] block nbd1: NBD_DISCONNECT [ 165.141029][ T7889] CPU: 2 UID: 0 PID: 7889 Comm: syz.1.588 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 165.144796][ T7889] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 165.147451][ T7889] Call Trace: [ 165.148314][ T7889] [ 165.149063][ T7889] dump_stack_lvl+0x16c/0x1f0 [ 165.150266][ T7889] should_fail_ex+0x497/0x5b0 [ 165.151475][ T7889] ? fs_reclaim_acquire+0xae/0x150 [ 165.152732][ T7889] should_failslab+0xc2/0x120 [ 165.153870][ T7889] __kmalloc_noprof+0xcb/0x410 [ 165.155098][ T7889] ovl_xattr_escape_name+0x6b/0xe0 [ 165.156408][ T7889] ovl_own_xattr_get+0x9d/0x1d0 [ 165.157628][ T7889] ? __pfx_ovl_own_xattr_get+0x10/0x10 [ 165.159043][ T7889] ? find_held_lock+0x2d/0x110 [ 165.160301][ T7889] ? xattr_resolve_name+0x27b/0x3f0 [ 165.161672][ T7889] ? __pfx_ovl_own_xattr_get+0x10/0x10 [ 165.163099][ T7889] __vfs_getxattr+0x13b/0x1a0 [ 165.164361][ T7889] ? __pfx___vfs_getxattr+0x10/0x10 [ 165.165721][ T7889] ? capable+0xd4/0x110 [ 165.166826][ T7889] vfs_getxattr+0x240/0x280 [ 165.168021][ T7889] ? __pfx_vfs_getxattr+0x10/0x10 [ 165.169336][ T7889] ? lockdep_init_map_type+0x16d/0x7d0 [ 165.170729][ T7889] ovl_path_check_origin_xattr+0x149/0x230 [ 165.172173][ T7889] ovl_get_inode+0xf0f/0x13c0 [ 165.173381][ T7889] ? __pfx_ovl_get_inode+0x10/0x10 [ 165.174664][ T7889] ? lockref_get+0x15/0x50 [ 165.175786][ T7889] ? do_raw_spin_unlock+0x172/0x230 [ 165.177110][ T7889] ? _raw_spin_unlock+0x28/0x50 [ 165.178343][ T7889] ovl_lookup+0xd4f/0x21f0 [ 165.179443][ T7889] ? __pfx_ovl_lookup+0x10/0x10 [ 165.180694][ T7889] ? __pfx_d_alloc_parallel+0x10/0x10 [ 165.182060][ T7889] ? lockdep_init_map_type+0x16d/0x7d0 [ 165.183445][ T7889] __lookup_slow+0x24f/0x460 [ 165.184671][ T7889] ? __pfx___lookup_slow+0x10/0x10 [ 165.185978][ T7889] ? walk_component+0x342/0x5b0 [ 165.187244][ T7889] ? lookup_fast+0x155/0x540 [ 165.188444][ T7889] walk_component+0x350/0x5b0 [ 165.189649][ T7889] path_lookupat+0x17f/0x770 [ 165.190836][ T7889] filename_lookup+0x1e5/0x5b0 [ 165.192046][ T7889] ? find_held_lock+0x2d/0x110 [ 165.193269][ T7889] ? __pfx_filename_lookup+0x10/0x10 [ 165.194637][ T7889] ? __might_fault+0x13b/0x190 [ 165.195859][ T7889] ? getname_flags.part.0+0x1c5/0x550 [ 165.197214][ T7889] user_path_at+0x3a/0x60 [ 165.198323][ T7889] path_setxattr+0x126/0x280 [ 165.199490][ T7889] ? __pfx_path_setxattr+0x10/0x10 [ 165.200775][ T7889] ? __pfx_lock_release+0x10/0x10 [ 165.202065][ T7889] ? fput+0x30/0x390 [ 165.203059][ T7889] ? ksys_write+0x1ad/0x260 [ 165.204379][ T7889] ? __pfx_ksys_write+0x10/0x10 [ 165.205638][ T7889] __ia32_sys_setxattr+0xc0/0x160 [ 165.206918][ T7889] ? lockdep_hardirqs_on+0x7c/0x110 [ 165.208254][ T7889] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 165.209938][ T7889] __do_fast_syscall_32+0x73/0x120 [ 165.211253][ T7889] do_fast_syscall_32+0x32/0x80 [ 165.212506][ T7889] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 165.214113][ T7889] RIP: 0023:0xf747e579 [ 165.215128][ T7889] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 165.219976][ T7889] RSP: 002b:00000000f576656c EFLAGS: 00000296 ORIG_RAX: 00000000000000e2 [ 165.222134][ T7889] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 0000000020000180 [ 165.224204][ T7889] RDX: 00000000200001c0 RSI: 0000000000000001 RDI: 0000000000000000 [ 165.226249][ T7889] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 165.228298][ T7889] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 165.230340][ T7889] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 165.232348][ T7889] [ 165.233254][ C2] vkms_vblank_simulate: vblank timer overrun [ 165.460960][ T7897] lo speed is unknown, defaulting to 1000 [ 166.256764][ T1065] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 166.258729][ T1065] ata1: failed to read log page 10h (errno=-5) [ 166.260511][ T1065] ata1.00: exception Emask 0x1 SAct 0x8 SErr 0x0 action 0x0 [ 166.262462][ T1065] ata1.00: irq_stat 0x40000000 [ 166.268200][ T1065] ata1.00: failed command: READ FPDMA QUEUED [ 166.269990][ T1065] ata1.00: cmd 60/00:18:82:28:05/01:00:00:00:00/40 tag 3 ncq dma 131072 in [ 166.269990][ T1065] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 166.276007][ T1065] ata1.00: status: { DRDY } [ 166.279139][ T1065] ata1.00: configured for UDMA/100 [ 166.281111][ T1065] sd 0:0:0:0: [sda] tag#3 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 166.284652][ T1065] sd 0:0:0:0: [sda] tag#3 Sense Key : Illegal Request [current] [ 166.287139][ T1065] sd 0:0:0:0: [sda] tag#3 Add. Sense: Unaligned write command [ 166.289456][ T1065] sd 0:0:0:0: [sda] tag#3 CDB: Read(10) 28 00 00 05 28 82 00 01 00 00 [ 166.291855][ T1065] I/O error, dev sda, sector 338050 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 166.296418][ T1065] ata1: EH complete [ 166.478282][ T66] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 166.482049][ T66] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 166.485384][ T66] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 166.488649][ T66] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 166.492014][ T66] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 166.494631][ T66] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 166.533068][ T7908] lo speed is unknown, defaulting to 1000 [ 166.632930][ T7908] chnl_net:caif_netlink_parms(): no params data found [ 166.719920][ T7908] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.723348][ T7908] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.731774][ T7908] bridge_slave_0: entered allmulticast mode [ 166.740897][ T7908] bridge_slave_0: entered promiscuous mode [ 166.748027][ T7908] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.750642][ T7908] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.753114][ T7908] bridge_slave_1: entered allmulticast mode [ 166.760085][ T7908] bridge_slave_1: entered promiscuous mode [ 166.829159][ T7908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.837609][ T7908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.877821][ T7908] team0: Port device team_slave_0 added [ 166.881002][ T7908] team0: Port device team_slave_1 added [ 166.922460][ T7908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.924560][ T7908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.931540][ T7908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.935827][ T7908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.937697][ T7908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.945160][ T7908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.976620][ T7908] hsr_slave_0: entered promiscuous mode [ 166.978811][ T7908] hsr_slave_1: entered promiscuous mode [ 166.980915][ T7908] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.982947][ T7908] Cannot create hsr debugfs directory [ 167.069621][ T7902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.430738][ T7908] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 167.439108][ T7908] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 167.442253][ T7908] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 167.447272][ T7908] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 167.462937][ T7908] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.464919][ T7908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.466846][ T7908] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.468822][ T7908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.540600][ T7908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.567207][ T7483] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.570384][ T7483] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.599767][ T7908] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.622313][ T88] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.624954][ T88] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.630705][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.633490][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.755145][ T7908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.782447][ T7908] veth0_vlan: entered promiscuous mode [ 167.788144][ T7908] veth1_vlan: entered promiscuous mode [ 167.802712][ T7908] veth0_macvtap: entered promiscuous mode [ 167.810046][ T7908] veth1_macvtap: entered promiscuous mode [ 167.815429][ T7932] netlink: 28 bytes leftover after parsing attributes in process `syz.2.597'. [ 167.825793][ T7908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.828744][ T7908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.831278][ T7908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.835050][ T7908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.837754][ T7908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.840578][ T7908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.844838][ T7908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.857501][ T7908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.860919][ T7908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.865954][ T7908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.869261][ T7908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.875978][ T7908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.878775][ T7908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.893180][ T7908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.901890][ T7908] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.904847][ T7908] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.907095][ T7908] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.909543][ T7908] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.966867][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.977279][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.994450][ T7481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.997152][ T7481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.187930][ T7935] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 168.319433][ T7935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.593'. [ 168.341164][ T7935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.593'. [ 168.357755][ T5359] block nbd3: NBD_DISCONNECT [ 168.563572][ T5364] Bluetooth: hci6: command tx timeout [ 169.565987][ T7942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.643690][ T5364] Bluetooth: hci6: command tx timeout [ 170.753697][ T7958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.235102][ T39] kauditd_printk_skb: 22 callbacks suppressed [ 171.235113][ T39] audit: type=1804 audit(1729729150.634:284): pid=7971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.605" name="/newroot/51/file0/bus" dev="ramfs" ino=21435 res=1 errno=0 [ 171.394165][ T7974] EXT4-fs (sda1): shut down requested (2) [ 171.396121][ T7974] Aborting journal on device sda1-8. [ 171.595314][ T7980] netlink: 'syz.0.608': attribute type 5 has an invalid length. [ 172.733814][ T5364] Bluetooth: hci6: command tx timeout [ 173.028815][ T7991] netlink: 'syz.3.611': attribute type 2 has an invalid length. [ 173.031005][ T7991] netlink: 'syz.3.611': attribute type 1 has an invalid length. [ 173.160042][ T7995] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 173.171194][ T7995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.613'. [ 173.194059][ T7995] nbd: device at index 3 is going down [ 173.198064][ T7995] FAULT_INJECTION: forcing a failure. [ 173.198064][ T7995] name failslab, interval 1, probability 0, space 0, times 0 [ 173.201504][ T7995] CPU: 2 UID: 0 PID: 7995 Comm: syz.3.613 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 173.204366][ T7995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 173.207121][ T7995] Call Trace: [ 173.208007][ T7995] [ 173.208827][ T7995] dump_stack_lvl+0x16c/0x1f0 [ 173.210142][ T7995] should_fail_ex+0x497/0x5b0 [ 173.211386][ T7995] ? fs_reclaim_acquire+0xae/0x150 [ 173.212736][ T7995] should_failslab+0xc2/0x120 [ 173.213977][ T7995] __kmalloc_noprof+0xcb/0x410 [ 173.215238][ T7995] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 173.216799][ T7995] tomoyo_realpath_from_path+0xbf/0x710 [ 173.218310][ T7995] ? tomoyo_path_perm+0x25f/0x480 [ 173.219667][ T7995] tomoyo_path_perm+0x273/0x480 [ 173.220957][ T7995] ? tomoyo_path_perm+0x25f/0x480 [ 173.222283][ T7995] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 173.223691][ T7995] ? __pfx_register_lock_class+0x10/0x10 [ 173.225177][ T7995] ? stack_trace_save+0x95/0xd0 [ 173.226472][ T7995] ? __pfx_common_perm_cond+0x10/0x10 [ 173.227861][ T7995] security_inode_getattr+0x116/0x290 [ 173.229299][ T7995] vfs_getattr+0x36/0xb0 [ 173.230414][ T7995] ovl_copy_up_one+0x5ea/0x35d0 [ 173.231699][ T7995] ? hlock_class+0x4e/0x130 [ 173.232904][ T7995] ? mark_lock+0xb5/0xc60 [ 173.234046][ T7995] ? hlock_class+0x4e/0x130 [ 173.235237][ T7995] ? mark_lock+0xb5/0xc60 [ 173.236388][ T7995] ? lock_repin_lock+0x100/0x360 [ 173.237695][ T7995] ? __pfx_mark_lock+0x10/0x10 [ 173.238988][ T7995] ? __pfx_ovl_copy_up_one+0x10/0x10 [ 173.240497][ T7995] ? __pfx_mark_lock+0x10/0x10 [ 173.241902][ T7995] ? __pfx_mark_lock+0x10/0x10 [ 173.243160][ T7995] ? __lock_acquire+0xbdd/0x3ce0 [ 173.244492][ T7995] ? hlock_class+0x4e/0x130 [ 173.245691][ T7995] ? __lock_acquire+0x163e/0x3ce0 [ 173.247039][ T7995] ? do_raw_spin_unlock+0x172/0x230 [ 173.248610][ T7995] ovl_copy_up_flags+0x18d/0x200 [ 173.249918][ T7995] ovl_xattr_set+0x3bd/0x530 [ 173.251141][ T7995] ? __pfx_ovl_xattr_set+0x10/0x10 [ 173.252495][ T7995] ? evm_protected_xattr_common+0x155/0x190 [ 173.254034][ T7995] ? xattr_resolve_name+0x27b/0x3f0 [ 173.255464][ T7995] ? __pfx_ovl_other_xattr_set+0x10/0x10 [ 173.257085][ T7995] __vfs_setxattr+0x173/0x1e0 [ 173.258420][ T7995] ? __pfx___vfs_setxattr+0x10/0x10 [ 173.259824][ T7995] ? bpf_lsm_capable+0x9/0x10 [ 173.261067][ T7995] ? security_capable+0x7e/0x260 [ 173.262363][ T7995] __vfs_setxattr_noperm+0x127/0x660 [ 173.263746][ T7995] __vfs_setxattr_locked+0x182/0x260 [ 173.265152][ T7995] vfs_setxattr+0x146/0x360 [ 173.266354][ T7995] ? __pfx_lock_release+0x10/0x10 [ 173.267676][ T7995] ? __pfx_vfs_setxattr+0x10/0x10 [ 173.269033][ T7995] ? mnt_get_write_access+0x6a/0x300 [ 173.270416][ T7995] ? mnt_get_write_access+0x6a/0x300 [ 173.271760][ T7995] do_setxattr+0x146/0x170 [ 173.272896][ T7995] path_setxattr+0x221/0x280 [ 173.274071][ T7995] ? __pfx_path_setxattr+0x10/0x10 [ 173.275418][ T7995] ? lock_acquire.part.0+0x11b/0x380 [ 173.276832][ T7995] ? fput+0x30/0x390 [ 173.277992][ T7995] ? ksys_write+0x1ad/0x260 [ 173.279390][ T7995] __ia32_sys_setxattr+0xc0/0x160 [ 173.280717][ T7995] ? syscall_trace_enter+0x1ce/0x240 [ 173.282114][ T7995] __do_fast_syscall_32+0x73/0x120 [ 173.283466][ T7995] do_fast_syscall_32+0x32/0x80 [ 173.284846][ T7995] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 173.286555][ T7995] RIP: 0023:0xf740e579 [ 173.287626][ T7995] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 173.292746][ T7995] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 00000000000000e2 [ 173.295092][ T7995] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 0000000020000180 [ 173.297174][ T7995] RDX: 00000000200001c0 RSI: 0000000000000001 RDI: 0000000000000000 [ 173.299268][ T7995] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 173.301335][ T7995] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 173.303391][ T7995] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 173.305474][ T7995] [ 173.311537][ T7995] ERROR: Out of memory at tomoyo_realpath_from_path. [ 173.379252][ T7997] overlayfs: missing 'lowerdir' [ 173.962606][ T8001] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 173.974742][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.615'. [ 173.994025][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.615'. [ 173.998415][ T8001] netlink: 44 bytes leftover after parsing attributes in process `syz.0.615'. [ 174.000838][ T8001] netlink: 32 bytes leftover after parsing attributes in process `syz.0.615'. [ 174.123143][ T8010] netlink: 196 bytes leftover after parsing attributes in process `syz.2.618'. [ 174.127041][ T8010] netlink: 196 bytes leftover after parsing attributes in process `syz.2.618'. [ 174.130928][ T8010] netlink: 19 bytes leftover after parsing attributes in process `syz.2.618'. [ 174.241707][ T8019] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 174.249820][ T8019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.622'. [ 174.287430][ T8019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.622'. [ 174.289795][ T5359] block nbd2: NBD_DISCONNECT [ 174.290288][ T8019] FAULT_INJECTION: forcing a failure. [ 174.290288][ T8019] name failslab, interval 1, probability 0, space 0, times 0 [ 174.294699][ T8019] CPU: 2 UID: 0 PID: 8019 Comm: syz.2.622 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 174.297449][ T8019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 174.300247][ T8019] Call Trace: [ 174.301134][ T8019] [ 174.301918][ T8019] dump_stack_lvl+0x16c/0x1f0 [ 174.303171][ T8019] should_fail_ex+0x497/0x5b0 [ 174.304420][ T8019] ? fs_reclaim_acquire+0xae/0x150 [ 174.305777][ T8019] should_failslab+0xc2/0x120 [ 174.307030][ T8019] __kmalloc_noprof+0xcb/0x410 [ 174.308313][ T8019] ? __pfx_d_absolute_path+0x10/0x10 [ 174.309708][ T8019] tomoyo_encode2+0x100/0x3e0 [ 174.310952][ T8019] tomoyo_realpath_from_path+0x1a7/0x710 [ 174.312422][ T8019] ? tomoyo_path_perm+0x25f/0x480 [ 174.313754][ T8019] tomoyo_path_perm+0x273/0x480 [ 174.314572][ T8022] syz.0.621[8022] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.315038][ T8019] ? tomoyo_path_perm+0x25f/0x480 [ 174.318000][ T8022] syz.0.621[8022] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.319279][ T8019] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 174.322244][ T8022] syz.0.621[8022] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.323613][ T8019] ? __pfx_register_lock_class+0x10/0x10 [ 174.323635][ T8019] ? stack_trace_save+0x95/0xd0 [ 174.323652][ T8019] ? __pfx_common_perm_cond+0x10/0x10 [ 174.323669][ T8019] security_inode_getattr+0x116/0x290 [ 174.323684][ T8019] vfs_getattr+0x36/0xb0 [ 174.323698][ T8019] ovl_copy_up_one+0x5ea/0x35d0 [ 174.334548][ T8019] ? hlock_class+0x4e/0x130 [ 174.335752][ T8019] ? mark_lock+0xb5/0xc60 [ 174.336902][ T8019] ? hlock_class+0x4e/0x130 [ 174.338106][ T8019] ? mark_lock+0xb5/0xc60 [ 174.339248][ T8019] ? lock_repin_lock+0x100/0x360 [ 174.340560][ T8019] ? __pfx_mark_lock+0x10/0x10 [ 174.341826][ T8019] ? __pfx_ovl_copy_up_one+0x10/0x10 [ 174.343213][ T8019] ? __pfx_mark_lock+0x10/0x10 [ 174.344496][ T8019] ? __pfx_mark_lock+0x10/0x10 [ 174.345764][ T8019] ? __lock_acquire+0xbdd/0x3ce0 [ 174.347072][ T8019] ? hlock_class+0x4e/0x130 [ 174.348278][ T8019] ? __lock_acquire+0x163e/0x3ce0 [ 174.349630][ T8019] ? do_raw_spin_unlock+0x172/0x230 [ 174.351003][ T8019] ovl_copy_up_flags+0x18d/0x200 [ 174.352316][ T8019] ovl_xattr_set+0x3bd/0x530 [ 174.353539][ T8019] ? __pfx_ovl_xattr_set+0x10/0x10 [ 174.354885][ T8019] ? evm_protected_xattr_common+0x155/0x190 [ 174.356444][ T8019] ? xattr_resolve_name+0x27b/0x3f0 [ 174.357819][ T8019] ? __pfx_ovl_other_xattr_set+0x10/0x10 [ 174.359293][ T8019] __vfs_setxattr+0x173/0x1e0 [ 174.360546][ T8019] ? __pfx___vfs_setxattr+0x10/0x10 [ 174.361914][ T8019] ? bpf_lsm_capable+0x9/0x10 [ 174.363157][ T8019] ? security_capable+0x7e/0x260 [ 174.364487][ T8019] __vfs_setxattr_noperm+0x127/0x660 [ 174.365886][ T8019] __vfs_setxattr_locked+0x182/0x260 [ 174.367281][ T8019] vfs_setxattr+0x146/0x360 [ 174.368490][ T8019] ? __pfx_lock_release+0x10/0x10 [ 174.369819][ T8019] ? __pfx_vfs_setxattr+0x10/0x10 [ 174.371151][ T8019] ? mnt_get_write_access+0x6a/0x300 [ 174.372547][ T8019] ? mnt_get_write_access+0x6a/0x300 [ 174.373934][ T8019] do_setxattr+0x146/0x170 [ 174.375118][ T8019] path_setxattr+0x221/0x280 [ 174.376371][ T8019] ? __pfx_path_setxattr+0x10/0x10 [ 174.377716][ T8019] ? __pfx_lock_release+0x10/0x10 [ 174.379058][ T8019] ? fput+0x30/0x390 [ 174.380099][ T8019] ? ksys_write+0x1ad/0x260 [ 174.381308][ T8019] ? __pfx_ksys_write+0x10/0x10 [ 174.382589][ T8019] __ia32_sys_setxattr+0xc0/0x160 [ 174.383906][ T8019] ? lockdep_hardirqs_on+0x7c/0x110 [ 174.385322][ T8019] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 174.387039][ T8019] __do_fast_syscall_32+0x73/0x120 [ 174.388405][ T8019] do_fast_syscall_32+0x32/0x80 [ 174.389692][ T8019] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 174.391352][ T8019] RIP: 0023:0xf7f38579 [ 174.392440][ T8019] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 174.397444][ T8019] RSP: 002b:00000000f56b656c EFLAGS: 00000296 ORIG_RAX: 00000000000000e2 [ 174.399597][ T8019] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 0000000020000180 [ 174.401666][ T8019] RDX: 00000000200001c0 RSI: 0000000000000001 RDI: 0000000000000000 [ 174.403727][ T8019] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 174.405801][ T8019] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 174.407857][ T8019] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 174.409925][ T8019] [ 174.410809][ C2] vkms_vblank_simulate: vblank timer overrun [ 174.420050][ T8019] ERROR: Out of memory at tomoyo_realpath_from_path. [ 174.549001][ T8033] tmpfs: Bad value for 'mpol' [ 174.681077][ T8032] program syz.3.625 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.692046][ T8032] program syz.3.625 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.806881][ T5364] Bluetooth: hci6: command tx timeout [ 174.938151][ T8045] overlayfs: failed to resolve './file0': -2 [ 175.349945][ T39] audit: type=1326 audit(1729729154.744:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8059 comm="syz.3.631" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x0 [ 175.388219][ T8063] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 175.424829][ T8063] nbd: device at index 2 is going down [ 175.437777][ T8063] FAULT_INJECTION: forcing a failure. [ 175.437777][ T8063] name failslab, interval 1, probability 0, space 0, times 0 [ 175.443176][ T8063] CPU: 0 UID: 0 PID: 8063 Comm: syz.2.632 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 175.445956][ T8063] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 175.448760][ T8063] Call Trace: [ 175.449649][ T8063] [ 175.450438][ T8063] dump_stack_lvl+0x16c/0x1f0 [ 175.451693][ T8063] should_fail_ex+0x497/0x5b0 [ 175.452950][ T8063] ? fs_reclaim_acquire+0xae/0x150 [ 175.454300][ T8063] should_failslab+0xc2/0x120 [ 175.455551][ T8063] __kmalloc_node_noprof+0xd1/0x440 [ 175.456939][ T8063] ? shmem_xattr_handler_set+0x2ee/0x3b0 [ 175.458425][ T8063] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 175.459861][ T8063] __kvmalloc_node_noprof+0xad/0x1a0 [ 175.461264][ T8063] simple_xattr_set+0x68/0x450 [ 175.462532][ T8063] shmem_xattr_handler_set+0x31b/0x3b0 [ 175.463986][ T8063] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 175.465572][ T8063] __vfs_setxattr+0x173/0x1e0 [ 175.466826][ T8063] ? __pfx___vfs_setxattr+0x10/0x10 [ 175.468206][ T8063] ? apparmor_capable+0x114/0x1d0 [ 175.469541][ T8063] __vfs_setxattr_noperm+0x127/0x660 [ 175.470930][ T8063] __vfs_setxattr_locked+0x182/0x260 [ 175.472333][ T8063] vfs_setxattr+0x146/0x360 [ 175.473546][ T8063] ? __pfx_vfs_setxattr+0x10/0x10 [ 175.474874][ T8063] ? vfs_setxattr+0x10/0x360 [ 175.476103][ T8063] ovl_check_setxattr+0x181/0x320 [ 175.477437][ T8063] ovl_set_impure+0x13e/0x1e0 [ 175.478674][ T8063] ovl_copy_up_one+0x916/0x35d0 [ 175.479952][ T8063] ? hlock_class+0x4e/0x130 [ 175.481159][ T8063] ? mark_lock+0xb5/0xc60 [ 175.482304][ T8063] ? hlock_class+0x4e/0x130 [ 175.483505][ T8063] ? mark_lock+0xb5/0xc60 [ 175.484666][ T8063] ? __pfx_mark_lock+0x10/0x10 [ 175.485934][ T8063] ? __pfx_ovl_copy_up_one+0x10/0x10 [ 175.487330][ T8063] ? __pfx_mark_lock+0x10/0x10 [ 175.488609][ T8063] ? __pfx_mark_lock+0x10/0x10 [ 175.489882][ T8063] ? __lock_acquire+0xbdd/0x3ce0 [ 175.491196][ T8063] ? hlock_class+0x4e/0x130 [ 175.492410][ T8063] ? __lock_acquire+0x163e/0x3ce0 [ 175.493766][ T8063] ? do_raw_spin_unlock+0x172/0x230 [ 175.495139][ T8063] ovl_copy_up_flags+0x18d/0x200 [ 175.496457][ T8063] ovl_xattr_set+0x3bd/0x530 [ 175.497688][ T8063] ? __pfx_ovl_xattr_set+0x10/0x10 [ 175.499031][ T8063] ? evm_protected_xattr_common+0x155/0x190 [ 175.500592][ T8063] ? xattr_resolve_name+0x27b/0x3f0 [ 175.501966][ T8063] ? __pfx_ovl_other_xattr_set+0x10/0x10 [ 175.503445][ T8063] __vfs_setxattr+0x173/0x1e0 [ 175.504712][ T8063] ? __pfx___vfs_setxattr+0x10/0x10 [ 175.506079][ T8063] ? bpf_lsm_capable+0x9/0x10 [ 175.507351][ T8063] ? security_capable+0x7e/0x260 [ 175.508670][ T8063] __vfs_setxattr_noperm+0x127/0x660 [ 175.510066][ T8063] __vfs_setxattr_locked+0x182/0x260 [ 175.511466][ T8063] vfs_setxattr+0x146/0x360 [ 175.512681][ T8063] ? __pfx_lock_release+0x10/0x10 [ 175.514020][ T8063] ? __pfx_vfs_setxattr+0x10/0x10 [ 175.515353][ T8063] ? mnt_get_write_access+0x6a/0x300 [ 175.516755][ T8063] ? mnt_get_write_access+0x6a/0x300 [ 175.518153][ T8063] do_setxattr+0x146/0x170 [ 175.519330][ T8063] path_setxattr+0x221/0x280 [ 175.520552][ T8063] ? __pfx_path_setxattr+0x10/0x10 [ 175.521901][ T8063] ? __pfx_lock_release+0x10/0x10 [ 175.523243][ T8063] ? fput+0x30/0x390 [ 175.524374][ T8063] ? ksys_write+0x1ad/0x260 [ 175.525582][ T8063] ? __pfx_ksys_write+0x10/0x10 [ 175.526874][ T8063] __ia32_sys_setxattr+0xc0/0x160 [ 175.528221][ T8063] ? lockdep_hardirqs_on+0x7c/0x110 [ 175.529591][ T8063] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 175.531308][ T8063] __do_fast_syscall_32+0x73/0x120 [ 175.532669][ T8063] do_fast_syscall_32+0x32/0x80 [ 175.533955][ T8063] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 175.535612][ T8063] RIP: 0023:0xf7f38579 [ 175.536692][ T8063] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 175.541675][ T8063] RSP: 002b:00000000f56b656c EFLAGS: 00000296 ORIG_RAX: 00000000000000e2 [ 175.543838][ T8063] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 0000000020000180 [ 175.545898][ T8063] RDX: 00000000200001c0 RSI: 0000000000000001 RDI: 0000000000000000 [ 175.547947][ T8063] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 175.550001][ T8063] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 175.552046][ T8063] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 175.554108][ T8063] [ 176.399843][ T8080] overlayfs: failed to resolve './file2': -2 [ 176.401612][ T39] audit: type=1326 audit(1729729155.794:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8081 comm="syz.0.636" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 176.407273][ T39] audit: type=1326 audit(1729729155.794:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8081 comm="syz.0.636" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 176.412818][ T39] audit: type=1326 audit(1729729155.794:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8081 comm="syz.0.636" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 176.418374][ T39] audit: type=1326 audit(1729729155.794:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8081 comm="syz.0.636" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 176.424294][ T39] audit: type=1326 audit(1729729155.794:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8081 comm="syz.0.636" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 176.429791][ T8080] nbd: must specify at least one socket [ 176.432124][ T39] audit: type=1326 audit(1729729155.814:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8081 comm="syz.0.636" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 176.440625][ T39] audit: type=1326 audit(1729729155.814:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8081 comm="syz.0.636" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 176.446227][ T39] audit: type=1326 audit(1729729155.814:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8081 comm="syz.0.636" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 176.452174][ T39] audit: type=1326 audit(1729729155.814:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8081 comm="syz.0.636" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 176.457878][ T39] audit: type=1326 audit(1729729155.814:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8081 comm="syz.0.636" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 176.466179][ T8080] nbd: must specify a size in bytes for the device [ 176.509208][ T8084] ip_vti0: entered promiscuous mode [ 176.633548][ T8097] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 176.649316][ T8100] input: syz0 as /devices/virtual/input/input23 [ 176.733825][ T8097] FAULT_INJECTION: forcing a failure. [ 176.733825][ T8097] name failslab, interval 1, probability 0, space 0, times 0 [ 176.745860][ T8097] CPU: 1 UID: 0 PID: 8097 Comm: syz.0.643 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 176.748350][ T8097] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 176.750846][ T8097] Call Trace: [ 176.751636][ T8097] [ 176.752357][ T8097] dump_stack_lvl+0x16c/0x1f0 [ 176.753494][ T8097] should_fail_ex+0x497/0x5b0 [ 176.754618][ T8097] ? fs_reclaim_acquire+0xae/0x150 [ 176.755837][ T8097] should_failslab+0xc2/0x120 [ 176.756971][ T8097] __kmalloc_node_track_caller_noprof+0xcf/0x440 [ 176.758438][ T8097] ? simple_xattr_set+0xb8/0x450 [ 176.759620][ T8097] kstrdup+0x3c/0x80 [ 176.760562][ T8097] simple_xattr_set+0xb8/0x450 [ 176.761706][ T8097] shmem_xattr_handler_set+0x31b/0x3b0 [ 176.763004][ T8097] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 176.764440][ T8097] __vfs_setxattr+0x173/0x1e0 [ 176.765553][ T8097] ? __pfx___vfs_setxattr+0x10/0x10 [ 176.766784][ T8097] ? apparmor_capable+0x114/0x1d0 [ 176.767985][ T8097] __vfs_setxattr_noperm+0x127/0x660 [ 176.769254][ T8097] __vfs_setxattr_locked+0x182/0x260 [ 176.770510][ T8097] vfs_setxattr+0x146/0x360 [ 176.771596][ T8097] ? __pfx_vfs_setxattr+0x10/0x10 [ 176.772804][ T8097] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 176.774134][ T8097] ? rcu_is_watching+0x12/0xc0 [ 176.775284][ T8097] ovl_check_setxattr+0x181/0x320 [ 176.776491][ T8097] ovl_set_impure+0x13e/0x1e0 [ 176.777611][ T8097] ovl_copy_up_one+0x916/0x35d0 [ 176.778812][ T8097] ? hlock_class+0x4e/0x130 [ 176.779896][ T8097] ? mark_lock+0xb5/0xc60 [ 176.780939][ T8097] ? hlock_class+0x4e/0x130 [ 176.782024][ T8097] ? mark_lock+0xb5/0xc60 [ 176.783056][ T8097] ? __pfx_mark_lock+0x10/0x10 [ 176.784218][ T8097] ? __pfx_ovl_copy_up_one+0x10/0x10 [ 176.785469][ T8097] ? __pfx_mark_lock+0x10/0x10 [ 176.786605][ T8097] ? __pfx_mark_lock+0x10/0x10 [ 176.787739][ T8097] ? __lock_acquire+0xbdd/0x3ce0 [ 176.788922][ T8097] ? hlock_class+0x4e/0x130 [ 176.790003][ T8097] ? __lock_acquire+0x163e/0x3ce0 [ 176.791219][ T8097] ? do_raw_spin_unlock+0x172/0x230 [ 176.792462][ T8097] ovl_copy_up_flags+0x18d/0x200 [ 176.793636][ T8097] ovl_xattr_set+0x3bd/0x530 [ 176.794683][ T8097] ? __pfx_ovl_xattr_set+0x10/0x10 [ 176.795898][ T8097] ? evm_protected_xattr_common+0x155/0x190 [ 176.797301][ T8097] ? xattr_resolve_name+0x27b/0x3f0 [ 176.798533][ T8097] ? __pfx_ovl_other_xattr_set+0x10/0x10 [ 176.799855][ T8097] __vfs_setxattr+0x173/0x1e0 [ 176.801025][ T8097] ? __pfx___vfs_setxattr+0x10/0x10 [ 176.802264][ T8097] ? bpf_lsm_capable+0x9/0x10 [ 176.803386][ T8097] ? security_capable+0x7e/0x260 [ 176.804583][ T8097] __vfs_setxattr_noperm+0x127/0x660 [ 176.805974][ T8097] __vfs_setxattr_locked+0x182/0x260 [ 176.807228][ T8097] vfs_setxattr+0x146/0x360 [ 176.808311][ T8097] ? __pfx_lock_release+0x10/0x10 [ 176.809508][ T8097] ? __pfx_vfs_setxattr+0x10/0x10 [ 176.810695][ T8097] ? mnt_get_write_access+0x6a/0x300 [ 176.811944][ T8097] ? mnt_get_write_access+0x6a/0x300 [ 176.813207][ T8097] do_setxattr+0x146/0x170 [ 176.814268][ T8097] path_setxattr+0x221/0x280 [ 176.815448][ T8097] ? __pfx_path_setxattr+0x10/0x10 [ 176.816663][ T8097] ? __pfx_lock_release+0x10/0x10 [ 176.817864][ T8097] ? fput+0x30/0x390 [ 176.818799][ T8097] ? ksys_write+0x1ad/0x260 [ 176.819876][ T8097] ? __pfx_ksys_write+0x10/0x10 [ 176.821040][ T8097] __ia32_sys_setxattr+0xc0/0x160 [ 176.822230][ T8097] ? lockdep_hardirqs_on+0x7c/0x110 [ 176.823464][ T8097] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 176.825032][ T8097] __do_fast_syscall_32+0x73/0x120 [ 176.826250][ T8097] do_fast_syscall_32+0x32/0x80 [ 176.827406][ T8097] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 176.828913][ T8097] RIP: 0023:0xf748e579 [ 176.830125][ T8097] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 176.834765][ T8097] RSP: 002b:00000000f577656c EFLAGS: 00000296 ORIG_RAX: 00000000000000e2 [ 176.836719][ T8097] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 0000000020000180 [ 176.838603][ T8097] RDX: 00000000200001c0 RSI: 0000000000000001 RDI: 0000000000000000 [ 176.840465][ T8097] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 176.842327][ T8097] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 176.844206][ T8097] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 176.846079][ T8097] [ 177.243592][ T5415] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 177.405226][ T5415] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 177.407776][ T5415] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.413226][ T5415] usb 5-1: config 0 descriptor?? [ 177.454868][ T5415] cp210x 5-1:0.0: cp210x converter detected [ 177.554845][ T8119] can0: slcan on ptm0. [ 177.624548][ T8118] can0 (unregistered): slcan off ptm0. [ 177.868391][ T5415] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 177.877691][ T5415] cp210x 5-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 177.879643][ T5415] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 177.884273][ T5415] usb 5-1: cp210x converter now attached to ttyUSB0 [ 177.888355][ T5415] usb 5-1: USB disconnect, device number 15 [ 177.900594][ T8140] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 177.934730][ T5415] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 177.937616][ T5415] cp210x 5-1:0.0: device disconnected [ 177.942165][ T8140] FAULT_INJECTION: forcing a failure. [ 177.942165][ T8140] name failslab, interval 1, probability 0, space 0, times 0 [ 177.951018][ T8140] CPU: 3 UID: 0 PID: 8140 Comm: syz.2.652 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 177.953807][ T8140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 177.956601][ T8140] Call Trace: [ 177.957493][ T8140] [ 177.958308][ T8140] dump_stack_lvl+0x16c/0x1f0 [ 177.959553][ T8140] should_fail_ex+0x497/0x5b0 [ 177.960811][ T8140] ? fs_reclaim_acquire+0xae/0x150 [ 177.962160][ T8140] should_failslab+0xc2/0x120 [ 177.963406][ T8140] __kmalloc_node_track_caller_noprof+0xcf/0x440 [ 177.965092][ T8140] ? simple_xattr_set+0xb8/0x450 [ 177.966391][ T8140] kstrdup+0x3c/0x80 [ 177.967429][ T8140] simple_xattr_set+0xb8/0x450 [ 177.968809][ T8140] shmem_xattr_handler_set+0x31b/0x3b0 [ 177.970241][ T8140] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 177.971806][ T8140] __vfs_setxattr+0x173/0x1e0 [ 177.973055][ T8140] ? __pfx___vfs_setxattr+0x10/0x10 [ 177.974412][ T8140] ? apparmor_capable+0x114/0x1d0 [ 177.975731][ T8140] __vfs_setxattr_noperm+0x127/0x660 [ 177.977117][ T8140] __vfs_setxattr_locked+0x182/0x260 [ 177.978520][ T8140] vfs_setxattr+0x146/0x360 [ 177.979716][ T8140] ? __pfx_vfs_setxattr+0x10/0x10 [ 177.981050][ T8140] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 177.982515][ T8140] ? rcu_is_watching+0x12/0xc0 [ 177.983776][ T8140] ovl_check_setxattr+0x181/0x320 [ 177.985114][ T8140] ovl_set_impure+0x13e/0x1e0 [ 177.986346][ T8140] ovl_copy_up_one+0x916/0x35d0 [ 177.987618][ T8140] ? hlock_class+0x4e/0x130 [ 177.988889][ T8140] ? mark_lock+0xb5/0xc60 [ 177.990030][ T8140] ? hlock_class+0x4e/0x130 [ 177.991216][ T8140] ? mark_lock+0xb5/0xc60 [ 177.992356][ T8140] ? __pfx_mark_lock+0x10/0x10 [ 177.993604][ T8140] ? __pfx_ovl_copy_up_one+0x10/0x10 [ 177.994971][ T8140] ? __pfx_mark_lock+0x10/0x10 [ 177.996237][ T8140] ? __pfx_mark_lock+0x10/0x10 [ 177.997489][ T8140] ? __lock_acquire+0xbdd/0x3ce0 [ 177.998840][ T8140] ? hlock_class+0x4e/0x130 [ 178.000029][ T8140] ? __lock_acquire+0x163e/0x3ce0 [ 178.001375][ T8140] ? do_raw_spin_unlock+0x172/0x230 [ 178.002740][ T8140] ovl_copy_up_flags+0x18d/0x200 [ 178.004129][ T8140] ovl_xattr_set+0x3bd/0x530 [ 178.005353][ T8140] ? __pfx_ovl_xattr_set+0x10/0x10 [ 178.006680][ T8140] ? evm_protected_xattr_common+0x155/0x190 [ 178.008240][ T8140] ? xattr_resolve_name+0x27b/0x3f0 [ 178.009597][ T8140] ? __pfx_ovl_other_xattr_set+0x10/0x10 [ 178.011059][ T8140] __vfs_setxattr+0x173/0x1e0 [ 178.012303][ T8140] ? __pfx___vfs_setxattr+0x10/0x10 [ 178.013658][ T8140] ? bpf_lsm_capable+0x9/0x10 [ 178.014900][ T8140] ? security_capable+0x7e/0x260 [ 178.016217][ T8140] __vfs_setxattr_noperm+0x127/0x660 [ 178.017602][ T8140] __vfs_setxattr_locked+0x182/0x260 [ 178.018985][ T8140] vfs_setxattr+0x146/0x360 [ 178.020191][ T8140] ? __pfx_lock_release+0x10/0x10 [ 178.021509][ T8140] ? __pfx_vfs_setxattr+0x10/0x10 [ 178.022827][ T8140] ? mnt_get_write_access+0x6a/0x300 [ 178.024232][ T8140] ? mnt_get_write_access+0x6a/0x300 [ 178.025618][ T8140] do_setxattr+0x146/0x170 [ 178.026789][ T8140] path_setxattr+0x221/0x280 [ 178.027997][ T8140] ? __pfx_path_setxattr+0x10/0x10 [ 178.029338][ T8140] ? __pfx_lock_release+0x10/0x10 [ 178.030673][ T8140] ? fput+0x30/0x390 [ 178.031707][ T8140] ? ksys_write+0x1ad/0x260 [ 178.032904][ T8140] ? __pfx_ksys_write+0x10/0x10 [ 178.034189][ T8140] __ia32_sys_setxattr+0xc0/0x160 [ 178.035502][ T8140] ? lockdep_hardirqs_on+0x7c/0x110 [ 178.036871][ T8140] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 178.038606][ T8140] __do_fast_syscall_32+0x73/0x120 [ 178.039945][ T8140] do_fast_syscall_32+0x32/0x80 [ 178.041233][ T8140] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 178.043006][ T8140] RIP: 0023:0xf7f38579 [ 178.044249][ T8140] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 178.049271][ T8140] RSP: 002b:00000000f56b656c EFLAGS: 00000296 ORIG_RAX: 00000000000000e2 [ 178.051428][ T8140] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 0000000020000180 [ 178.053477][ T8140] RDX: 00000000200001c0 RSI: 0000000000000001 RDI: 0000000000000000 [ 178.055531][ T8140] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 178.057587][ T8140] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 178.059643][ T8140] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 178.061713][ T8140] [ 179.104991][ T5415] IPVS: starting estimator thread 0... [ 179.176641][ T8171] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 179.183923][ T8171] __nla_validate_parse: 10 callbacks suppressed [ 179.183932][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.661'. [ 179.213939][ T8165] IPVS: using max 35 ests per chain, 84000 per kthread [ 179.224948][ T8171] nbd: device at index 2 is going down [ 179.228377][ T8171] FAULT_INJECTION: forcing a failure. [ 179.228377][ T8171] name failslab, interval 1, probability 0, space 0, times 0 [ 179.234304][ T8171] CPU: 2 UID: 0 PID: 8171 Comm: syz.2.661 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 179.237073][ T8171] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 179.239861][ T8171] Call Trace: [ 179.240761][ T8171] [ 179.241547][ T8171] dump_stack_lvl+0x16c/0x1f0 [ 179.242827][ T8171] should_fail_ex+0x497/0x5b0 [ 179.244229][ T8171] ? fs_reclaim_acquire+0xae/0x150 [ 179.245613][ T8171] should_failslab+0xc2/0x120 [ 179.246912][ T8171] kmem_cache_alloc_lru_noprof+0x72/0x2f0 [ 179.248425][ T8171] ? shmem_alloc_inode+0x25/0x50 [ 179.249733][ T8171] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 179.251162][ T8171] shmem_alloc_inode+0x25/0x50 [ 179.252432][ T8171] alloc_inode+0x5d/0x230 [ 179.253575][ T8171] new_inode+0x22/0x210 [ 179.254714][ T8171] shmem_get_inode+0x194/0xea0 [ 179.255978][ T8171] shmem_mknod+0x66/0x240 [ 179.257138][ T8171] shmem_mkdir+0x31/0x60 [ 179.258244][ T8171] vfs_mkdir+0x57d/0x860 [ 179.259354][ T8171] ovl_mkdir_real+0xb5/0x380 [ 179.260564][ T8171] ? ovl_lookup_temp+0x1b0/0x240 [ 179.261859][ T8171] ovl_create_real+0x479/0x670 [ 179.263043][ T8171] ? __pfx_ovl_create_real+0x10/0x10 [ 179.264373][ T8171] ovl_copy_up_one+0xc2c/0x35d0 [ 179.265586][ T8171] ? hlock_class+0x4e/0x130 [ 179.266784][ T8171] ? mark_lock+0xb5/0xc60 [ 179.267932][ T8171] ? __pfx_mark_lock+0x10/0x10 [ 179.269183][ T8171] ? __pfx_ovl_copy_up_one+0x10/0x10 [ 179.270516][ T8171] ? __pfx_mark_lock+0x10/0x10 [ 179.271741][ T8171] ? __pfx_mark_lock+0x10/0x10 [ 179.273020][ T8171] ? __lock_acquire+0xbdd/0x3ce0 [ 179.274336][ T8171] ? hlock_class+0x4e/0x130 [ 179.275560][ T8171] ? do_raw_spin_unlock+0x172/0x230 [ 179.276943][ T8171] ovl_copy_up_flags+0x18d/0x200 [ 179.278254][ T8171] ovl_xattr_set+0x3bd/0x530 [ 179.279474][ T8171] ? __pfx_ovl_xattr_set+0x10/0x10 [ 179.280827][ T8171] ? evm_protected_xattr_common+0x155/0x190 [ 179.282380][ T8171] ? xattr_resolve_name+0x27b/0x3f0 [ 179.283746][ T8171] ? __pfx_ovl_other_xattr_set+0x10/0x10 [ 179.285184][ T8171] __vfs_setxattr+0x173/0x1e0 [ 179.286399][ T8171] ? __pfx___vfs_setxattr+0x10/0x10 [ 179.287727][ T8171] ? bpf_lsm_capable+0x9/0x10 [ 179.288935][ T8171] ? security_capable+0x7e/0x260 [ 179.290228][ T8171] __vfs_setxattr_noperm+0x127/0x660 [ 179.291632][ T8171] __vfs_setxattr_locked+0x182/0x260 [ 179.293043][ T8171] vfs_setxattr+0x146/0x360 [ 179.294249][ T8171] ? __pfx_lock_release+0x10/0x10 [ 179.295574][ T8171] ? __pfx_vfs_setxattr+0x10/0x10 [ 179.296904][ T8171] ? mnt_get_write_access+0x6a/0x300 [ 179.298291][ T8171] ? mnt_get_write_access+0x6a/0x300 [ 179.299668][ T8171] do_setxattr+0x146/0x170 [ 179.300854][ T8171] path_setxattr+0x221/0x280 [ 179.302068][ T8171] ? __pfx_path_setxattr+0x10/0x10 [ 179.303408][ T8171] ? __pfx_lock_release+0x10/0x10 [ 179.304759][ T8171] ? fput+0x30/0x390 [ 179.305797][ T8171] ? ksys_write+0x1ad/0x260 [ 179.306988][ T8171] ? __pfx_ksys_write+0x10/0x10 [ 179.308276][ T8171] __ia32_sys_setxattr+0xc0/0x160 [ 179.309589][ T8171] ? lockdep_hardirqs_on+0x7c/0x110 [ 179.310954][ T8171] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 179.312657][ T8171] __do_fast_syscall_32+0x73/0x120 [ 179.313996][ T8171] do_fast_syscall_32+0x32/0x80 [ 179.315276][ T8171] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 179.316941][ T8171] RIP: 0023:0xf7f38579 [ 179.318021][ T8171] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 179.323015][ T8171] RSP: 002b:00000000f56b656c EFLAGS: 00000296 ORIG_RAX: 00000000000000e2 [ 179.325251][ T8171] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 0000000020000180 [ 179.327301][ T8171] RDX: 00000000200001c0 RSI: 0000000000000001 RDI: 0000000000000000 [ 179.329366][ T8171] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 179.329398][ T8171] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 179.329404][ T8171] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 179.329417][ T8171] [ 179.329552][ C2] vkms_vblank_simulate: vblank timer overrun [ 179.429309][ T8180] netlink: 20 bytes leftover after parsing attributes in process `syz.0.664'. [ 179.589102][ T8192] PKCS8: Unsupported PKCS#8 version [ 179.614640][ T8191] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 179.616448][ T8191] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 179.621562][ T8191] vhci_hcd vhci_hcd.0: Device attached [ 179.793430][ T5392] vhci_hcd: vhci_device speed not set [ 179.853376][ T5392] usb 13-1: new full-speed USB device number 3 using vhci_hcd [ 180.467146][ T8203] overlayfs: conflicting options: verity=on,redirect_dir=follow [ 180.846637][ T8193] vhci_hcd: connection reset by peer [ 180.849635][ T45] vhci_hcd: stop threads [ 180.850778][ T45] vhci_hcd: release socket [ 180.852614][ T45] vhci_hcd: disconnect device [ 180.867260][ T5364] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 181.224101][ T1289] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 181.384781][ T1289] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 181.387676][ T1289] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 181.390694][ T1289] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 181.394205][ T1289] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 181.396981][ T1289] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.405080][ T1289] usb 7-1: config 0 descriptor?? [ 181.407871][ T8212] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 181.926488][ T1289] usbhid 7-1:0.0: can't add hid device: -71 [ 181.928187][ T1289] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 181.931176][ T1289] usb 7-1: USB disconnect, device number 8 [ 182.015675][ T8215] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 182.023323][ T8215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.673'. [ 182.043843][ T8215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.673'. [ 182.047334][ T8215] FAULT_INJECTION: forcing a failure. [ 182.047334][ T8215] name failslab, interval 1, probability 0, space 0, times 0 [ 182.047403][ T5359] block nbd0: NBD_DISCONNECT [ 182.050652][ T8215] CPU: 2 UID: 0 PID: 8215 Comm: syz.0.673 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 182.054615][ T8215] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 182.057392][ T8215] Call Trace: [ 182.058272][ T8215] [ 182.059050][ T8215] dump_stack_lvl+0x16c/0x1f0 [ 182.060319][ T8215] should_fail_ex+0x497/0x5b0 [ 182.061561][ T8215] ? fs_reclaim_acquire+0xae/0x150 [ 182.062904][ T8215] should_failslab+0xc2/0x120 [ 182.064206][ T8215] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 182.065647][ T8215] ? security_inode_alloc+0x3b/0x2b0 [ 182.067032][ T8215] security_inode_alloc+0x3b/0x2b0 [ 182.068486][ T8215] inode_init_always_gfp+0xc5f/0xfb0 [ 182.069843][ T8215] alloc_inode+0x82/0x230 [ 182.070923][ T8215] new_inode+0x22/0x210 [ 182.072025][ T8215] shmem_get_inode+0x194/0xea0 [ 182.073290][ T8215] shmem_mknod+0x66/0x240 [ 182.074421][ T8215] shmem_mkdir+0x31/0x60 [ 182.075531][ T8215] vfs_mkdir+0x57d/0x860 [ 182.076652][ T8215] ovl_mkdir_real+0xb5/0x380 [ 182.077877][ T8215] ? ovl_lookup_temp+0x1b0/0x240 [ 182.079168][ T8215] ovl_create_real+0x479/0x670 [ 182.080428][ T8215] ? __pfx_ovl_create_real+0x10/0x10 [ 182.081814][ T8215] ovl_copy_up_one+0xc2c/0x35d0 [ 182.083130][ T8215] ? hlock_class+0x4e/0x130 [ 182.084352][ T8215] ? mark_lock+0xb5/0xc60 [ 182.085490][ T8215] ? __pfx_mark_lock+0x10/0x10 [ 182.086746][ T8215] ? __pfx_ovl_copy_up_one+0x10/0x10 [ 182.088127][ T8215] ? __pfx_mark_lock+0x10/0x10 [ 182.089390][ T8215] ? __pfx_mark_lock+0x10/0x10 [ 182.090642][ T8215] ? __lock_acquire+0xbdd/0x3ce0 [ 182.091936][ T8215] ? hlock_class+0x4e/0x130 [ 182.093149][ T8215] ? do_raw_spin_unlock+0x172/0x230 [ 182.094546][ T8215] ovl_copy_up_flags+0x18d/0x200 [ 182.095849][ T8215] ovl_xattr_set+0x3bd/0x530 [ 182.097072][ T8215] ? __pfx_ovl_xattr_set+0x10/0x10 [ 182.098413][ T8215] ? evm_protected_xattr_common+0x155/0x190 [ 182.099948][ T8215] ? xattr_resolve_name+0x27b/0x3f0 [ 182.101327][ T8215] ? __pfx_ovl_other_xattr_set+0x10/0x10 [ 182.102827][ T8215] __vfs_setxattr+0x173/0x1e0 [ 182.104077][ T8215] ? __pfx___vfs_setxattr+0x10/0x10 [ 182.105451][ T8215] ? bpf_lsm_capable+0x9/0x10 [ 182.106681][ T8215] ? security_capable+0x7e/0x260 [ 182.107977][ T8215] __vfs_setxattr_noperm+0x127/0x660 [ 182.109367][ T8215] __vfs_setxattr_locked+0x182/0x260 [ 182.110747][ T8215] vfs_setxattr+0x146/0x360 [ 182.111938][ T8215] ? __pfx_lock_release+0x10/0x10 [ 182.113263][ T8215] ? __pfx_vfs_setxattr+0x10/0x10 [ 182.114578][ T8215] ? mnt_get_write_access+0x6a/0x300 [ 182.115952][ T8215] ? mnt_get_write_access+0x6a/0x300 [ 182.117338][ T8215] do_setxattr+0x146/0x170 [ 182.118509][ T8215] path_setxattr+0x221/0x280 [ 182.119724][ T8215] ? __pfx_path_setxattr+0x10/0x10 [ 182.121045][ T8215] ? __pfx_lock_release+0x10/0x10 [ 182.122411][ T8215] ? fput+0x30/0x390 [ 182.123445][ T8215] ? ksys_write+0x1ad/0x260 [ 182.124650][ T8215] ? __pfx_ksys_write+0x10/0x10 [ 182.125923][ T8215] __ia32_sys_setxattr+0xc0/0x160 [ 182.127235][ T8215] ? lockdep_hardirqs_on+0x7c/0x110 [ 182.128603][ T8215] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 182.130290][ T8215] __do_fast_syscall_32+0x73/0x120 [ 182.131625][ T8215] do_fast_syscall_32+0x32/0x80 [ 182.133012][ T8215] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 182.134656][ T8215] RIP: 0023:0xf748e579 [ 182.135723][ T8215] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 182.140686][ T8215] RSP: 002b:00000000f577656c EFLAGS: 00000296 ORIG_RAX: 00000000000000e2 [ 182.142867][ T8215] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 0000000020000180 [ 182.144970][ T8215] RDX: 00000000200001c0 RSI: 0000000000000001 RDI: 0000000000000000 [ 182.147050][ T8215] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 182.149114][ T8215] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 182.151171][ T8215] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 182.153295][ T8215] [ 182.154239][ C2] vkms_vblank_simulate: vblank timer overrun [ 182.453332][ T1289] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 182.467594][ T8220] netlink: 60 bytes leftover after parsing attributes in process `syz.2.675'. [ 182.469907][ T8220] netlink: 60 bytes leftover after parsing attributes in process `syz.2.675'. [ 182.613383][ T1289] usb 5-1: Using ep0 maxpacket: 8 [ 182.616604][ T1289] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 182.619310][ T1289] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 182.621916][ T1289] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 182.626535][ T1289] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.630042][ T1289] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 182.632383][ T1289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.848651][ T1289] usb 5-1: usb_control_msg returned -71 [ 182.853611][ T1289] usbtmc 5-1:16.0: can't read capabilities [ 182.868885][ T1289] usb 5-1: USB disconnect, device number 16 [ 183.836005][ T8234] nbd: couldn't find a device at index 4096 [ 183.972291][ T8236] netlink: 56 bytes leftover after parsing attributes in process `syz.3.680'. [ 183.986146][ T8236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.680'. [ 184.307598][ T8243] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 184.319586][ T8243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.682'. [ 184.345895][ T8243] nbd: device at index 0 is going down [ 184.361086][ T8243] FAULT_INJECTION: forcing a failure. [ 184.361086][ T8243] name failslab, interval 1, probability 0, space 0, times 0 [ 184.365393][ T8243] CPU: 0 UID: 0 PID: 8243 Comm: syz.0.682 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 184.368179][ T8243] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 184.370987][ T8243] Call Trace: [ 184.371882][ T8243] [ 184.372682][ T8243] dump_stack_lvl+0x16c/0x1f0 [ 184.374097][ T8243] should_fail_ex+0x497/0x5b0 [ 184.375414][ T8243] ? fs_reclaim_acquire+0xae/0x150 [ 184.376787][ T8243] should_failslab+0xc2/0x120 [ 184.378041][ T8243] __kmalloc_noprof+0xcb/0x410 [ 184.379320][ T8243] security_inode_init_security+0x140/0x390 [ 184.380906][ T8243] ? __pfx_shmem_initxattrs+0x10/0x10 [ 184.382339][ T8243] ? __pfx_security_inode_init_security+0x10/0x10 [ 184.384047][ T8243] ? shmem_get_inode+0x703/0xea0 [ 184.385377][ T8243] shmem_mknod+0xe9/0x240 [ 184.386527][ T8243] shmem_mkdir+0x31/0x60 [ 184.387655][ T8243] vfs_mkdir+0x57d/0x860 [ 184.388801][ T8243] ovl_mkdir_real+0xb5/0x380 [ 184.390037][ T8243] ? ovl_lookup_temp+0x1b0/0x240 [ 184.391356][ T8243] ovl_create_real+0x479/0x670 [ 184.392640][ T8243] ? __pfx_ovl_create_real+0x10/0x10 [ 184.394045][ T8243] ovl_copy_up_one+0xc2c/0x35d0 [ 184.395330][ T8243] ? hlock_class+0x4e/0x130 [ 184.396545][ T8243] ? mark_lock+0xb5/0xc60 [ 184.397697][ T8243] ? __pfx_mark_lock+0x10/0x10 [ 184.398969][ T8243] ? __pfx_ovl_copy_up_one+0x10/0x10 [ 184.400363][ T8243] ? __pfx_mark_lock+0x10/0x10 [ 184.401631][ T8243] ? __pfx_mark_lock+0x10/0x10 [ 184.402907][ T8243] ? __lock_acquire+0xbdd/0x3ce0 [ 184.404275][ T8243] ? hlock_class+0x4e/0x130 [ 184.405499][ T8243] ? do_raw_spin_unlock+0x172/0x230 [ 184.406879][ T8243] ovl_copy_up_flags+0x18d/0x200 [ 184.408208][ T8243] ovl_xattr_set+0x3bd/0x530 [ 184.409436][ T8243] ? __pfx_ovl_xattr_set+0x10/0x10 [ 184.410789][ T8243] ? evm_protected_xattr_common+0x155/0x190 [ 184.412352][ T8243] ? xattr_resolve_name+0x27b/0x3f0 [ 184.413726][ T8243] ? __pfx_ovl_other_xattr_set+0x10/0x10 [ 184.415193][ T8243] __vfs_setxattr+0x173/0x1e0 [ 184.416437][ T8243] ? __pfx___vfs_setxattr+0x10/0x10 [ 184.417810][ T8243] ? bpf_lsm_capable+0x9/0x10 [ 184.419050][ T8243] ? security_capable+0x7e/0x260 [ 184.420360][ T8243] __vfs_setxattr_noperm+0x127/0x660 [ 184.421750][ T8243] __vfs_setxattr_locked+0x182/0x260 [ 184.423141][ T8243] vfs_setxattr+0x146/0x360 [ 184.424456][ T8243] ? __pfx_lock_release+0x10/0x10 [ 184.425782][ T8243] ? __pfx_vfs_setxattr+0x10/0x10 [ 184.427109][ T8243] ? mnt_get_write_access+0x6a/0x300 [ 184.428504][ T8243] ? mnt_get_write_access+0x6a/0x300 [ 184.429899][ T8243] do_setxattr+0x146/0x170 [ 184.431081][ T8243] path_setxattr+0x221/0x280 [ 184.432319][ T8243] ? __pfx_path_setxattr+0x10/0x10 [ 184.433664][ T8243] ? __pfx_lock_release+0x10/0x10 [ 184.435008][ T8243] ? fput+0x30/0x390 [ 184.436047][ T8243] ? ksys_write+0x1ad/0x260 [ 184.437258][ T8243] ? __pfx_ksys_write+0x10/0x10 [ 184.438552][ T8243] __ia32_sys_setxattr+0xc0/0x160 [ 184.439882][ T8243] ? lockdep_hardirqs_on+0x7c/0x110 [ 184.441266][ T8243] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 184.442989][ T8243] __do_fast_syscall_32+0x73/0x120 [ 184.444383][ T8243] do_fast_syscall_32+0x32/0x80 [ 184.445675][ T8243] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 184.447337][ T8243] RIP: 0023:0xf748e579 [ 184.448413][ T8243] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 184.453438][ T8243] RSP: 002b:00000000f577656c EFLAGS: 00000296 ORIG_RAX: 00000000000000e2 [ 184.455614][ T8243] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 0000000020000180 [ 184.457688][ T8243] RDX: 00000000200001c0 RSI: 0000000000000001 RDI: 0000000000000000 [ 184.459753][ T8243] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 184.461825][ T8243] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 184.463898][ T8243] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 184.465973][ T8243] [ 184.587390][ T8254] netlink: 16 bytes leftover after parsing attributes in process `syz.2.685'. [ 184.678992][ T8259] 9pnet_fd: Insufficient options for proto=fd [ 184.973343][ T5392] vhci_hcd: vhci_device speed not set [ 185.958365][ T8284] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 185.967190][ T8284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.692'. [ 185.989747][ T8284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.692'. [ 185.992539][ T5442] block nbd2: NBD_DISCONNECT [ 186.068392][ T8289] (syz.2.694,8289,3):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 186.070704][ T8289] (syz.2.694,8289,3):ocfs2_fill_super:1178 ERROR: status = -22 [ 186.326835][ T8301] netlink: 'syz.2.697': attribute type 1 has an invalid length. [ 186.328852][ T8301] netlink: 636 bytes leftover after parsing attributes in process `syz.2.697'. SYZFAIL: posix_spawn failed (errno 5: Input/output error) [ 188.573727][ T7481] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.642528][ T7481] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.755698][ T7481] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.838074][ T7481] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.971636][ T7481] bridge_slave_0: left allmulticast mode [ 188.975936][ T7481] bridge_slave_0: left promiscuous mode [ 188.977485][ T7481] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.153702][ T7481] dvmrp0 (unregistering): left allmulticast mode [ 189.389875][ T7481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.396634][ T7481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.402019][ T7481] bond0 (unregistering): Released all slaves [ 189.475030][ T7481] : left promiscuous mode [ 189.559252][ T7481] IPVS: stopping backup sync thread 6364 ... [ 189.587012][ T7481] IPVS: stopping backup sync thread 6363 ... [ 189.590092][ T7481] IPVS: stopping backup sync thread 6362 ... [ 189.591938][ T7481] IPVS: stopping backup sync thread 6361 ... [ 189.595335][ T7481] IPVS: stopping backup sync thread 6360 ... [ 189.597495][ T7481] IPVS: stopping backup sync thread 6359 ... [ 189.599391][ T7481] IPVS: stopping backup sync thread 6358 ... [ 189.601623][ T7481] IPVS: stopping backup sync thread 6357 ... [ 189.606403][ T7481] IPVS: stopping backup sync thread 6356 ... [ 189.608126][ T7481] IPVS: stopping backup sync thread 6355 ... [ 189.609849][ T7481] IPVS: stopping backup sync thread 6354 ... [ 189.611817][ T7481] IPVS: stopping backup sync thread 6353 ... [ 189.614089][ T7481] IPVS: stopping backup sync thread 6352 ... [ 189.616439][ T7481] IPVS: stopping backup sync thread 6351 ... [ 189.618535][ T7481] IPVS: stopping backup sync thread 6350 ... [ 189.620522][ T7481] IPVS: stopping backup sync thread 6349 ... [ 189.622542][ T7481] IPVS: stopping backup sync thread 6348 ... [ 189.626901][ T7481] IPVS: stopping backup sync thread 6347 ... [ 189.631614][ T7481] IPVS: stopping backup sync thread 6346 ... [ 189.635004][ T7481] IPVS: stopping backup sync thread 6345 ... [ 189.639644][ T7481] IPVS: stopping backup sync thread 6344 ... [ 189.642784][ T7481] IPVS: stopping backup sync thread 6343 ... [ 189.645583][ T7481] IPVS: stopping backup sync thread 6342 ... [ 189.648429][ T7481] IPVS: stopping backup sync thread 6341 ... [ 189.657914][ T7481] IPVS: stopping backup sync thread 6340 ... [ 189.660417][ T7481] IPVS: stopping backup sync thread 6339 ... [ 189.663340][ T7481] IPVS: stopping backup sync thread 6338 ... [ 189.665421][ T7481] IPVS: stopping backup sync thread 6337 ... [ 189.667553][ T7481] IPVS: stopping backup sync thread 6336 ... [ 189.669504][ T7481] IPVS: stopping backup sync thread 6335 ... [ 189.672587][ T7481] IPVS: stopping backup sync thread 6334 ... [ 189.675314][ T7481] IPVS: stopping backup sync thread 6333 ... [ 189.677233][ T7481] IPVS: stopping backup sync thread 6332 ... [ 189.679027][ T7481] IPVS: stopping backup sync thread 6331 ... [ 189.680664][ T7481] IPVS: stopping backup sync thread 6330 ... [ 189.682450][ T7481] IPVS: stopping backup sync thread 6329 ... [ 189.684377][ T7481] IPVS: stopping backup sync thread 6328 ... [ 189.686338][ T7481] IPVS: stopping backup sync thread 6327 ... [ 189.688281][ T7481] IPVS: stopping backup sync thread 6326 ... [ 189.690665][ T7481] IPVS: stopping backup sync thread 6325 ... [ 189.692887][ T7481] IPVS: stopping backup sync thread 6324 ... [ 189.696948][ T7481] IPVS: stopping backup sync thread 6323 ... [ 189.698688][ T7481] IPVS: stopping backup sync thread 6322 ... [ 189.700481][ T7481] IPVS: stopping backup sync thread 6321 ... [ 189.702345][ T7481] IPVS: stopping backup sync thread 6320 ... [ 189.705886][ T7481] IPVS: stopping backup sync thread 6319 ... [ 189.707541][ T7481] IPVS: stopping backup sync thread 6318 ... [ 189.710906][ T7481] IPVS: stopping backup sync thread 6317 ... [ 189.712680][ T7481] IPVS: stopping backup sync thread 6315 ... [ 189.715710][ T7481] IPVS: stopping backup sync thread 6314 ... [ 189.717540][ T7481] IPVS: stopping backup sync thread 6312 ... [ 189.719270][ T7481] IPVS: stopping backup sync thread 6311 ... [ 189.721105][ T7481] IPVS: stopping backup sync thread 6310 ... [ 189.722767][ T7481] IPVS: stopping backup sync thread 6309 ... [ 189.725226][ T7481] IPVS: stopping backup sync thread 6308 ... [ 189.727000][ T7481] IPVS: stopping backup sync thread 6307 ... [ 189.728745][ T7481] IPVS: stopping backup sync thread 6305 ... [ 189.730469][ T7481] IPVS: stopping backup sync thread 6304 ... [ 189.732173][ T7481] IPVS: stopping backup sync thread 6303 ... [ 189.734420][ T7481] IPVS: stopping backup sync thread 6302 ... [ 189.737919][ T7481] IPVS: stopping backup sync thread 6301 ... [ 189.748481][ T7481] IPVS: stopping backup sync thread 6300 ... [ 189.751712][ T7481] IPVS: stopping backup sync thread 6299 ... [ 189.759880][ T7481] IPVS: stopping backup sync thread 6298 ... [ 190.031143][ T7481] hsr_slave_0: left promiscuous mode [ 190.040970][ T7481] hsr_slave_1: left promiscuous mode [ 190.043061][ T7481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.050221][ T7481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.053600][ T7481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.055569][ T7481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.083604][ T7481] veth1_macvtap: left promiscuous mode [ 190.085233][ T7481] veth0_macvtap: left promiscuous mode [ 190.086783][ T7481] veth1_vlan: left promiscuous mode [ 190.088377][ T7481] veth0_vlan: left promiscuous mode [ 190.931589][ T7481] team0 (unregistering): Port device team_slave_1 removed [ 191.036646][ T7481] team0 (unregistering): Port device team_slave_0 removed [ 192.343092][ T7481] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.467262][ T7481] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.579121][ T7481] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.674205][ T7481] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.044439][ T1374] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.112461][ T7481] bond0 (unregistering): Released all slaves [ 193.118294][ T7481] bond1 (unregistering): Released all slaves [ 193.205113][ T7481] : left promiscuous mode [ 193.294296][ T7481] Κό: left promiscuous mode [ 193.595708][ T7481] veth1_macvtap: left promiscuous mode [ 193.597224][ T7481] veth0_macvtap: left promiscuous mode [ 193.598690][ T7481] veth1_vlan: left allmulticast mode [ 193.600093][ T7481] veth1_vlan: left promiscuous mode [ 193.601509][ T7481] veth0_vlan: left promiscuous mode [ 193.771116][ T7481] macvlan0 (unregistering): left allmulticast mode [ 195.416681][ T1289] lo speed is unknown, defaulting to 1000 [ 195.750666][ T7481] IPVS: stop unused estimator thread 0... VM DIAGNOSIS: 00:19:26 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010004 RBX=0000000000000000 RCX=ffffffff8180a494 RDX=ffffffff8da957c0 RSI=0000000000000007 RDI=0000000000000005 RBP=000000000003dbcc RSP=ffffc90000007df8 R8 =0000000000000005 R9 =0000000000000007 R10=0000000000000000 R11=0000000000000000 R12=ffffffff815c212d R13=0000000000000001 R14=ffff88802b53ee80 R15=ffff88802100cc01 RIP=ffffffff818cb8e1 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f71f18e0 CR3=000000005e1d2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000d41037 RBX=0000000000000001 RCX=ffffffff8b139ef9 RDX=0000000000000000 RSI=ffffffff8b4cc960 RDI=ffffffff8bb12d60 RBP=ffffed10036ed910 RSP=ffffc90000477e08 R8 =0000000000000001 R9 =ffffed10056a7025 R10=ffff88802b53812b R11=0000000000000000 R12=0000000000000001 R13=ffff88801b76c880 R14=ffffffff901ce608 R15=0000000000000000 RIP=ffffffff8b13b2df RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002002f000 CR3=0000000065bc2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 36aefa7351f097c6 eba9950159811364 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 821253b9e7e1ca91 0b3ff3eaf291dd40 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f97f55ab6ee004b4 0d648ef0bc3b794c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1d20ec894d3a93cd d9d4049ff8428aef ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000005780 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ea21c49cfd9e2a72 0000007100000072 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ea6a1116563df9c4 000be6fd77a3e54e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f2c0ee4800000071 0000007100000071 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000072 0094b11b00000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ed65fa451bd0ef4a be6359dfaccd0f50 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 486199a23a743627 3573239fecf2c3bb ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000076e183 RBX=0000000000000002 RCX=ffffffff8b139ef9 RDX=0000000000000000 RSI=ffffffff8b4cc960 RDI=ffffffff8bb12d60 RBP=ffffed100376e000 RSP=ffffc90000487e08 R8 =0000000000000001 R9 =ffffed10056c7025 R10=ffff88802b63812b R11=0000000000000000 R12=0000000000000002 R13=ffff88801bb70000 R14=ffffffff901ce608 R15=0000000000000000 RIP=ffffffff8b13b2df RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f08cdff0 CR3=0000000066bda000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1b523a21e2dc5df1 029e614d13ba1f80 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 83d85fbff48eaead e8d796ad348f2501 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e6b6e8c01d5f229e 1022b97c3f78a5e8 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c16a7c201d47491b fef47b9a63fd4c40 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000057c0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 77f9ad24056b19db 0000000000000072 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 019e512989532d2c 31797228000791c8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8931206e00000072 0000000000000072 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000007200000000 89c9b03000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 36aefa7351f097c6 eba9950159811364 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 821253b9e7e1ca91 0b3ff3eaf291dd40 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=1ffffffff2d37866 RBX=ffffffff969bc330 RCX=1ffffffff2ba4195 RDX=00000000000003dc RSI=ffffc900005effc0 RDI=ffffffff969bc360 RBP=ffffffff96b98928 RSP=ffffc900005efed0 R8 =0000000000000000 R9 =ffffffff969bc330 R10=0000000000000003 R11=000000000000005c R12=ffffffff816939d0 R13=ffffffff96b98948 R14=dffffc0000000000 R15=ffffffff96b98918 RIP=ffffffff81698815 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffd37782ff8 CR3=000000000010a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=772d658d772d658d 772d658d772d658d 772d658d772d658d 772d658d772d658d 772d658d772d658d 772d658d772d658d 772d658d772d658d 772d658d772d658d ZMM22=9dcb36369dcb3636 9dcb36369dcb3636 9dcb36369dcb3636 9dcb36369dcb3636 9dcb36369dcb3636 9dcb36369dcb3636 9dcb36369dcb3636 9dcb36369dcb3636 ZMM23=2cd988792cd98879 2cd988792cd98879 2cd988792cd98879 2cd988792cd98879 2cd988792cd98879 2cd988792cd98879 2cd988792cd98879 2cd988792cd98879 ZMM24=2e8316b72e8316b7 2e8316b72e8316b7 2e8316b72e8316b7 2e8316b72e8316b7 2e8316b72e8316b7 2e8316b72e8316b7 2e8316b72e8316b7 2e8316b72e8316b7 ZMM25=46c43bfe46c43bfe 46c43bfe46c43bfe 46c43bfe46c43bfe 46c43bfe46c43bfe 46c43bfe46c43bfe 46c43bfe46c43bfe 46c43bfe46c43bfe 46c43bfe46c43bfe ZMM26=df015cd8df015cd8 df015cd8df015cd8 df015cd8df015cd8 df015cd8df015cd8 df015cd8df015cd8 df015cd8df015cd8 df015cd8df015cd8 df015cd8df015cd8 ZMM27=6104c2166104c216 6104c2166104c216 6104c2166104c216 6104c2166104c216 6104c2166104c216 6104c2166104c216 6104c2166104c216 6104c2166104c216 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=3909000039090000 3909000039090000 3909000039090000 3909000039090000 3909000039090000 3909000039090000 3909000039090000 3909000039090000