last executing test programs: 16m23.769003695s ago: executing program 2 (id=3): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) preadv(0xffffffffffffffff, 0x0, 0x0, 0x39c5, 0x0) inotify_init() syz_open_dev$video4linux(&(0x7f0000000600), 0x4, 0x141080) 16m8.49051462s ago: executing program 32 (id=3): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) preadv(0xffffffffffffffff, 0x0, 0x0, 0x39c5, 0x0) inotify_init() syz_open_dev$video4linux(&(0x7f0000000600), 0x4, 0x141080) 15m41.198731379s ago: executing program 0 (id=79): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) 15m41.188334411s ago: executing program 0 (id=80): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 15m38.15374003s ago: executing program 0 (id=90): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket(0x14, 0x2, 0x4) 15m37.267490588s ago: executing program 0 (id=93): syz_emit_ethernet(0x32, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050000015"], 0x3c}}, 0x0) 15m37.098792364s ago: executing program 0 (id=95): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000740)=0xe) syz_clone(0x2000200, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) 15m36.80873791s ago: executing program 0 (id=96): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x2}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002240)=""/102400, 0x19000) syz_open_procfs(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x39, 0x1, 0x7fffa, 0x4, {0x1}, [@typed={0x9, 0xec, 0x0, 0x0, @str='\x02A+/\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 15m34.577822942s ago: executing program 1 (id=110): r0 = syz_clone(0x24148091, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) 15m34.45791513s ago: executing program 1 (id=112): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket(0x14, 0x2, 0x4) 15m33.398456663s ago: executing program 1 (id=114): socket$caif_stream(0x25, 0x1, 0x4) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100280012800b0001006272696467650000180002800500"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) 15m33.128018911s ago: executing program 1 (id=115): syz_emit_ethernet(0x32, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050000015"], 0x3c}}, 0x0) 15m32.938111206s ago: executing program 1 (id=118): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 15m32.777805042s ago: executing program 1 (id=119): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x2, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x2, 0x2, 0x6, 0x1}, 0x8, 0x74f}}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) 15m21.754080141s ago: executing program 33 (id=96): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x2}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002240)=""/102400, 0x19000) syz_open_procfs(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x39, 0x1, 0x7fffa, 0x4, {0x1}, [@typed={0x9, 0xec, 0x0, 0x0, @str='\x02A+/\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 15m16.991654933s ago: executing program 34 (id=119): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x2, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x2, 0x2, 0x6, 0x1}, 0x8, 0x74f}}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) 14m34.476878325s ago: executing program 3 (id=348): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x44, 0x32, 0x48b, 0x0, 0x0, {}, [{0x30, 0x1, [@m_nat={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) 14m34.307636412s ago: executing program 3 (id=349): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x5, 0xc}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff3, 0xfff2}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xffe0}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) 14m33.623887123s ago: executing program 3 (id=352): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108"], 0x3c}}, 0x0) 14m33.456037652s ago: executing program 3 (id=353): r0 = socket(0x2b, 0x80801, 0x1) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20004054) openat$pidfd(0xffffffffffffff9c, 0x0, 0x141000, 0x0) socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x1e, 0x4, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x16, 0x1}) io_uring_enter(r1, 0xd44, 0x44c1, 0x7, 0x0, 0x0) 14m33.101064689s ago: executing program 3 (id=355): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="3811000043000701fefffffffcdbdf25027c000004"], 0x1138}}, 0xc000) 14m32.996541083s ago: executing program 3 (id=356): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x271f, 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, &(0x7f0000000080)=0x58, 0x40000002) 14m31.758204508s ago: executing program 4 (id=362): r0 = gettid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sched_getscheduler(r0) 14m31.560219573s ago: executing program 4 (id=363): r0 = socket(0xa, 0x5, 0x0) listen(r0, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000008400"], 0x18, 0x4855}, 0x4008850) 14m31.395976938s ago: executing program 4 (id=364): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="3811000043000701fefffffffcdbdf25027c000004"], 0x1138}}, 0xc000) 14m31.208130624s ago: executing program 4 (id=366): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000014"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20008010) dup2(r0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r1, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0xb, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8) 14m30.385110158s ago: executing program 4 (id=370): unshare(0x2c020400) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r1, r0}}, 0x18) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x59}, {&(0x7f0000000100)="0d000000246804003199aee6fdb9291b3091ec1a2d41d2270a00d8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0x682c}, {&(0x7f00000024c0)="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", 0x1001}], 0x3) 14m30.038173505s ago: executing program 4 (id=372): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$kcm(0x15, 0x5, 0x0) socket$kcm(0x2b, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$pid(0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000001e) fcntl$notify(0xffffffffffffffff, 0x402, 0x25) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f00000000c0)="f5c89e1e", 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000}, 0x600) 14m17.936699086s ago: executing program 35 (id=356): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x271f, 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, &(0x7f0000000080)=0x58, 0x40000002) 14m14.486549356s ago: executing program 36 (id=372): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$kcm(0x15, 0x5, 0x0) socket$kcm(0x2b, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$pid(0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000001e) fcntl$notify(0xffffffffffffffff, 0x402, 0x25) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f00000000c0)="f5c89e1e", 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000}, 0x600) 2m17.29494501s ago: executing program 6 (id=3085): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0xf) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) write(r3, &(0x7f0000001340)="89d87df03855", 0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000007c0)=[0x5], 0x0, 0x0, 0x4c}}, 0xa3) 2m12.929020355s ago: executing program 6 (id=3091): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000080)={0x2, r0, 0x1}) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ppoll(&(0x7f0000003340)=[{r2}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x80000000000004, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) 2m12.719485942s ago: executing program 6 (id=3092): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000805}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) keyctl$invalidate(0x15, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0xbf25}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000280)={0x2, 0x40000105, 0x0, 0x0}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) mlockall(0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 2m8.405424157s ago: executing program 6 (id=3104): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x81f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESDEC=r3, @ANYBLOB="10c32900000000dbdf253700000008005700020000000800342b675bd3758e792c34cc5bf858e26599e2cb3688532661feb890f64900270002000000a75f59d89d3639214e59f560db111da535aced570a3768b9995bbd315f65ade2"], 0x2c}, 0x1, 0x0, 0x0, 0x4d019}, 0x20048905) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000005c0)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000c8f30303000000f9ff0000000000a000000000afb7bd548524"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c10e8ff010303000000ae0000000000000000100800010101000000e2d2c4c76960815b12a0d5c83b6a9471a774f93364a8b123c062fb685964e4ad60ab0869672a0994f16371335a315d8d0ef9ec380c13dcd6acad8451fd28f051f84a607599469fd8d44fe8324e8a705a7e0402c0db49055e944b5ba7cdbb86d41fb557ee947cc319dc4fd2299a61971b066986d6757edd8de85cc15dcd589d23fe8ac126379786e6766420e35ab3c871fe77206add49eb9b36b0dc221a8800e77b73fa7bea"], 0x1c}}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0x5}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xf, 0x491, 0x3, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0xffffffffffffff80, &(0x7f0000000000)=[{&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) 2m7.070728183s ago: executing program 6 (id=3108): socket(0x10, 0x803, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@delchain={0x24, 0x65, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xffce, 0xe}, {0x10, 0xfff1}, {0x3}}}, 0x24}}, 0x2) (fail_nth: 3) 2m6.873724309s ago: executing program 6 (id=3109): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$dsp(r1, &(0x7f00000000c0)=""/108, 0x6c) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f00000003c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_off}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x118) r2 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r2, &(0x7f0000000000), 0xd4ba103) unlink(&(0x7f0000000100)='./file0/file1\x00') (fail_nth: 3) link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) 1m51.67665193s ago: executing program 37 (id=3109): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$dsp(r1, &(0x7f00000000c0)=""/108, 0x6c) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f00000003c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_off}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x118) r2 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r2, &(0x7f0000000000), 0xd4ba103) unlink(&(0x7f0000000100)='./file0/file1\x00') (fail_nth: 3) link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) 16.997562509s ago: executing program 8 (id=3426): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x4) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x541b, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="9115463ed87d0180c20000030806000119aaaaaaaabb7f000001aaaaaaaaaa2b7f000001"], 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="79617041bfc9007e000000000040"], 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x1}) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000100)={@hyper}) r9 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) 13.046256341s ago: executing program 9 (id=3439): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$kcm(0x2d, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={0x0, 0xfff, 0x6, 0x82ee}, 0x10) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x6000}}) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000004, 0x1, 0x2, '\x00', 0x8}}, 0x2a) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r6}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, r6}}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7fff, 0x9, 0x7, 'syz0\x00', {0x719}}}}, {{@ipv6={@private0, @private2, [0xff, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'tunl0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x4, 0x9456fff08070a538, 0x70}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x82b, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x8000800000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000570000/0x4000)=nil, 0x4000, 0x9) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x40071, 0x200000009}) 13.045885315s ago: executing program 5 (id=3440): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"1b010007", 0x10, 0x6, 0x3, 0x800, 0x0, "f759e100edc710000000dafc638000", "00000004", '\x00', "e8cc1304", ["8bada11e03411000", "c2fed6e2ffffff6806528640", "000000ff0000000000000020", "0000000000000000009700"]}) 12.514446949s ago: executing program 5 (id=3441): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f00000001c0)=0x5) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) ioctl$CDROMVOLCTRL(r0, 0x31e, 0x0) 12.013144886s ago: executing program 9 (id=3442): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) 11.608908055s ago: executing program 9 (id=3443): socket$nl_generic(0x11, 0x3, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r1, 0xc040aed5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0xffffffffffffffff, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x2b, 0xa, 0x1) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000f82000/0x4000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x4000, 0x0, 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r5 = memfd_secret(0x80000) r6 = userfaultfd(0x801) getdents64(r5, &(0x7f0000000480)=""/231, 0xe7) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f000070d000/0x1000)=nil, 0x1000, 0x15) pipe2$9p(&(0x7f0000000140), 0x80000) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc01c64b9, 0x0) syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) 11.420543636s ago: executing program 8 (id=3444): connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x615e, 0x0, 0x0, 0x1000034f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) mknodat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x11c0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x18}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) get_mempolicy(&(0x7f0000000080), &(0x7f0000000100), 0x60000000, &(0x7f000071a000/0x4000)=nil, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000140)={0x32, @rand_addr=0x64010102, 0x4e23, 0x0, 'sed\x00', 0x0, 0x2, 0xc}, 0x2c) io_uring_enter(r0, 0x200047bc, 0x0, 0x0, 0x0, 0x5e) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) 8.3108314s ago: executing program 7 (id=3446): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x578410eb) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x15) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@setlink={0x28, 0x13, 0x4, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x100, 0x18000}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$sock_SIOCOUTQ(r10, 0x5411, &(0x7f0000001c80)) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xffbe, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x20bbfb2b, 0xf2, 0x45ff, 0x9, 0xfffffffc, 0xb5, 0x10001, 0x2, 0x81}}}}]}, 0x58}}, 0x180c0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_proto_private(r10, 0x89e1, &(0x7f00000004c0)="bc26a881e6a7477a8c600217a6fb122d75d691fcc482588d9c1b02ffaf84e57a1c2f1cd3e5ad40bddc8af5e690ebf686e5668b1e963c67f4a71ffa7217dd7aa9c94bf192674954c4b9ce7cf1070e88b11630336f6a0332e06a9e57cb05d97265bd727bf8ef4dafc22d60fd336ce12b844ee92618730e04f50904b7f64dcb5eb5ad7d24cd74dd7257ba64753aeb55ff1286a9a1a84c6509603aabb71565711a9f0595f60f5a36d74c72a4ec") 5.708105732s ago: executing program 9 (id=3447): socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) openat$snapshot(0xffffffffffffff9c, 0x0, 0x481, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 3.993816519s ago: executing program 5 (id=3448): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000013040000f200000000000000090100005f0000000000010000840700000000000000020000000000000000"], 0x0, 0x4a}, 0x28) sched_rr_get_interval(0x0, &(0x7f0000000340)) 3.993506009s ago: executing program 5 (id=3449): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x40047454, 0x0) 3.90094982s ago: executing program 7 (id=3450): socket$phonet_pipe(0x23, 0x5, 0x2) socket$kcm(0x29, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00') mknod$loop(&(0x7f0000000400)='./file0\x00', 0x10, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtaction={0xd8, 0x30, 0x400, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_ct={0x34, 0x2, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x8c, 0x1, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xb, 0x0, 0x5, 0x10001, 0x2a00000}}}, @TCA_IFE_SMAC={0xa, 0x4, @random="f565a0b30df8"}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0xc, 0x4, 0x240a, 0x5f}, 0x1}}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_SKBMARK={0xfffffffffffffcf9, 0x1, @val=0x7}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x844}, 0x4040040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000003c0)={0x1, 0x0, [{0x1, 0xb5d, 0x7, 0x4, 0x40008, 0x3, 0x9}]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pipe(&(0x7f0000000280)) mmap(&(0x7f00006ad000/0x4000)=nil, 0x4000, 0xb635773f07ebbeef, 0x4045830, 0xffffffffffffffff, 0xda4de000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40046f41, &(0x7f0000000440)=0x1f) kexec_load(0xa, 0x0, &(0x7f0000000000), 0x80000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000011c4f069422e53753f1d0030598040000000000b3ad385a92f68c000000c357da2d", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000900020000000800030005000000"], 0x44}}, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0xfffff9, 0x90, [0x0, 0x0, 0x0, 0x0, 0x80000100, 0x80000130], 0x0, 0x0, 0x0}, 0xe0) syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) 3.747009148s ago: executing program 5 (id=3451): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) 3.695907724s ago: executing program 8 (id=3452): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d39"]) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) 3.574775733s ago: executing program 9 (id=3453): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x46, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) socket$packet(0x11, 0x3, 0x300) syz_usbip_server_init(0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$netlink(0x10, 0x3, 0x15) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x200000, 0x0) r5 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00') openat$binfmt(0xffffff9c, r5, 0x41, 0x1ff) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x23, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x20, &(0x7f00000025c0)=[@in={0x2, 0x4e23, @private=0xa010101}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000000)={r7, 0x10, 0x8, 0x80000003, 0x8}, 0x14) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0x5b23, 0x0) 3.46497873s ago: executing program 5 (id=3454): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsopen(&(0x7f0000000200)='affs\x00', 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000280)={0x3, 0x7}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) 3.464512546s ago: executing program 8 (id=3455): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x578410eb) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x15) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@setlink={0x28, 0x13, 0x4, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x100, 0x18000}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$sock_SIOCOUTQ(r10, 0x5411, &(0x7f0000001c80)) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xffbe, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x20bbfb2b, 0xf2, 0x45ff, 0x9, 0xfffffffc, 0xb5, 0x10001, 0x2, 0x81}}}}]}, 0x58}}, 0x180c0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_proto_private(r10, 0x89e1, &(0x7f00000004c0)="bc26a881e6a7477a8c600217a6fb122d75d691fcc482588d9c1b02ffaf84e57a1c2f1cd3e5ad40bddc8af5e690ebf686e5668b1e963c67f4a71ffa7217dd7aa9c94bf192674954c4b9ce7cf1070e88b11630336f6a0332e06a9e57cb05d97265bd727bf8ef4dafc22d60fd336ce12b844ee92618730e04f50904b7f64dcb5eb5ad7d24cd74dd7257ba64753aeb55ff1286a9a1a84c6509603aabb71565711a9f0595f60f5a36d74c72a4ec") 2.959031746s ago: executing program 8 (id=3456): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4048aecb, &(0x7f00000034c0)=@svm={0x1, 0x1, 0x1080, {0xe000}, {"84f2c49599e576553f76a549774752ab56634f670b21495ed4b18696e4f02d96b358fa3b653326e1f71371659db8b6b20b95d118a51a78a01a141a89c3da1ddbef66c8939e61462438c2f34b58692da40c4efb583c93cf4009cba072b19d2252046bdbeaecaea1b6f741c0097133b0a01da9eb93d0d6e79c2ad9ea87c73e737e52a5860fe07094dde46ab5a8d1f2dbbf345a36b048579ced5d077ecbcccd6ad0c3510200db582d3597cb9d34a206aa443ba3663d376e6a8fc40abe8dc0210f455d72d9b78a8dc2d474e749275a5ffe0737ad3c831f3f94526b8c35200030567204bdbd156317a95c04530927fbf3282632ae26e83ede92d31fde7562e2b2d219d9a77a4845ac91c7793c1a9e057b6ff8eedc4786f8e19182906f0a0a7dcbe53b8252cfe6c3681f419ebe04c18a17b1f564c71ef510b62084838066e68be7e56c3c337ae21bb1726ca6a564457f370d2c8da5b2f74e918f42f79af14162857ad66c61475d7356eb5bd423b535ebfa725d3924c8dd5fbaac38c66a5605423c92a3118b1cbba98e0469abfbc3c6787aee93242f77c2385121f28e998eca48c84b04696badf0a32a05af591db8fde14f8a90b04344dfbd6e5f9a746b0fd4bad74eb856ac33b0ad14304878eb3d6d01a16eca8fdaf82a9172a57d86e15fba665c9c1ad723aa80af80dacff8f155af03eb3fdabc2756e15aca2112a39febece2a2d2ae0dea114675c96907b75e123ef6b5404fe03d0e8f362f5255fc8c402c32a8035294036c9d076731d92556109a6fba014b11d032c9b64a95626fe443456334e5d0111e3dbfee286f6719bc016ad5f0568ed260fbfee9ec70e88a695fa6911e513a4bddc5e7ceb89de46989b431d039bbc9527fbdb5c00d5bba9925189125b633602d11859ba34b38d0f4bef9ef9d39e3a3c1d6212f1f7dc58586a09656def9edc315237f755ab481e5e734766d575264c4e983736a0f7bf9906a9b04a18ffc8b2d318e5f2557db357580076b786c624240048695b15a22627305ac7420c07016e9d99a264f89e73b8a30ad421bd0750ed3f3d84c6d38d677bd217c6dbb022bbf27323a88ff297b2e55b4aa492f28850910e57c54a10a8088f7c8d96d579b688ff8da6d00e3031e787ab05b8b4864e0e48671d397bf08949c52d956ad829e2c7816af28798fcd0a54bd5d630d6977115acd0ef0b011dfcc9dd24acc8e1a447d6a9fd37ff2c27825060eee05d858956d66d7332d6f47773ec3a862346ef0b32208a28dba9eff537f121c45b1d70ef5edd42870e4320a1f23b21f5bdba4652bd1b3c5be73488ed5c4e20b04beaec2e383abe412a7b2c16df4a6c2486cae4cd9b999c2373f6fcf3e33302e7b640d61dab4c5698dec3a97ecc1323bb7bd9a0e8af77efee9928bfe5d55e529ec7f9b0744f0e7d8222abc18dd237605d3f8f946843b22fe771dddfcc6558f749e7007fe6b46709fe5a0992274958b020f8bf90286d4b9b9bdfaac9d19f6bef5f8694738e77661b98a4c127e69e57d33e10cf7a51f878b6536f2ae67b7f9e94c56c595973fc683597079bb291fef1cf85c484fef0c4ac067b71f3626da48d355305d0a84d084cc4adde10e29f2cb7b029b2f320b0098bffadb9fca76afa917e8fe72ceddaab46e1972c083554ae9e1810188f63a42dbbde646aea420328e8bcbdb5d467955825f8626b972317a45ac6c7464643fe134bef7c2d78e817a0ad80f4cfc9e7f869582ec42f5f52fdc99edc95394f633180e14f27b1387dee3249226f9b1ac37476d9b40d50bc1aa7c23da6cca82d5790031b4fdfca1a016cd5f095d3a49655098e9ff0b82eb87ec77bfe5fa0fa31296faf773a12d45c6f0fea90b0c0a7b036564c915bd4053ab07bf7c6ac3a26d8908a8fd603a54b19c9c65a46faee12328c71a2d5a7e3d835fe63e2fb60ac8c48098b2ffeeb593f978e4a44d44d0a2a6787775165aa6e30cc041a762409b2e9eb5a6ed607da6b8dec512476b462b5d267796ebe41f31cd725ed30a4cfcf13eacf56d0a23cb1d42ec4f51609ea63ee40ff16d4c9da8cbd7f7bf83ecd060d6986a788af6bf223205187cea5780549a714dbcfaad470cf124311f06bf3db23a43baed51a28f3710a6e0f448afeeb6327a2aa3eb20ed3784d7ad1da6029543ee029d16d808fb3359b41d99976e5e2edf2a7844b8fcac16c6a4ae630d0b732251cae9963f0a32ab374bf1bac61fa8ee615e1d04ed4abf60008e68dcb2b230e4c2c9a5898d5de3c7fe4fcb51085da4a556423d74cef890d6826510ca7ac0dbaa42a6da69ad033c2cd29b1b80263bcea3557bcfc2ebde229ed4562c1bec7a2f50545b9ba8ff4c2ed018a090a9da386558380576d69d1d4f1908f3cb5c2ef7c49e273855cc971d764a55237cda16cdf39852b6d43435348e7c3c97fd156f407c96038634fffeb70c0460eb0e1e99ccbf259133a2ef490fc30a001414416fb5d282efc9a358bc926d41e791efa7ceb0d626b1ad1297970610a9aad02a363e32916fb7ba7165e6c7ddd37e337bcd50358e611f4b48176c5b68815913264f13dd1bcaa3438fb825edbba3d89d3230dd18e3836e4e68681cd48d1eed2c4021965f0d7142f655501dfc5eb2dc141547c0d74457dd7376ddd1faf8249c0a1175cd2b371070d817b67500ac8dd224062797d9c939e48b0c2b02960248aebd2308f8e621c8b3f88e66bde351c4cb191c1c1a96853b5bcf5f010dc861ec106b4c976857a228faa58e7e7f9a7d896eb98f68c2d267727f4b601de6c578f587d98362184684fe6016366ce734224410350fe2b9bc854d39a9ffab751512b3e86cac4fc5fc0c5b542fe849dca98d69c3ded92789dafcfee016413944a1b19f0f5af0c2b21aacc7655ea380a2bbd12eeb961f7c97ddd8cf54c7acdfb1836fa9aa75f2ffba209564f989c3d20d2c7d9a87729011a79331b63cf00089656df9adc70abd39ef1bca1ec6283bba0aac0c9dc5ce2089d085153fec6c9941710a33e38a8931bc4a551a32597b8a4fe6cd2e51d8baa3a9e42c5a173be81dcfb321167332818713320bfb1b03cd224c3535423a93a077e928a0d48327d1fd7bb07d43525334f6cfcf4a7b48050059ec5ef08f603bdbbc55f40dfdf86a371a5d771071ffef7f830a289e7caa195ab50d2023f24a90a359aa9ee7e9d97930d9224a0ad3f69a3d51fc5de90dd9a9d452fef7a3e52a54791686882a554560cb0685662bc3955d8e3b071f4d79243635e2d957bbeb07c38b340790a5b3ff7d3992d8b430370dc5e9ac8ebd1373dc5688c6ab96be88cf94b9938ccc7a4627979c780de2d0377eaf9bb4ffc77a162180df49bd1bd3aee13eb7b28ce9c6427ccbd9c0d3c01b55b76def055fbb62f5cdf95ed27f084fdeb116055781f1d8b6397da192f7aa4e4e8765ff0ab68600f6fd5bcaa043bc6ec4ef1164b1652b168e69696c363e20c2533066d3c10e48351216797c221a780f2f1f66697cb6a613a159bc7bdd2be756152b6a4d518a812c1e6dd182ee905d239e4323f5a61be3f2d760352685b8a3226ca007b4ab5290c0af9dd2079696059ccf9e0fb75a6b93e22569a908d65fc65990f695a0107edd2a534feb14b8e4f3e3b5314eedf7fed986c0f96f9652c99fcfb073e146ed4d4d14a31316b4a6790dd7754742d5cc664b4261ac8555343bc0a871713c40085988d9d59b5680e555b66f3afa5d88c23ddac378f638c2198e5fcd72bd3b2e7a64a6958ea7da6f5a628e914a414e8c6b9c3c94314994a63d840277f88927090511a2873cafc24174a02328e8d5faf510b14ab8b732ee5b5306b0b61b8cface9ea181f6345592a52741ea2d5f19fe875d92935e74fe8313bd9325abf3b9a99825c60bc145fbd447cac3f815a8ede60df636b6db435955ee52a1b17496d0c5ab09d926df0ddb2e5872baede65cff417e9dd3f26543d66ed083471449ef22d3068729b50e2a2b6a02f5345056b9cbd152f6058cdb23bd87064cc19691e3a5b0d1f71f9c5630da5325a472ed911941163af18c3437ee1d44efd7f083e0cd0f8593d2294f591c0a81d7542cdfa5d3c5ea52c79184de1e36665c054c8179049889998fe18b53e7af2b1a9b71494ad4354970360a0a5a950ce16d470f93c69f102afa1b29b0b07088d25b51d4428b478d42bb95d28be9aed44b3b4e57715aa69771aef5d72b60da371237196fd95e975a43ac5a8767c372002f5278e75d40e4cc0804e618f4882c6e5d5592c5e3045d0abf001a179ec2fac39c673e7512469d0dedf0c47d37add89f24f6310e0f7664a735761034efb54977486596937c4116c3d3028ce608047cbc5390ebfb564369568b4fbc2e3c5767e7a6482edd8b6581231923dd7731ab48f4407596aae534d5079a57ecdb1273b76600d8dd4895593220f5c28d824ce4d4c125da86dc8d527fddc7dffe650b75c2c51258371a856f9b6966fad1a5bbd72e0a25b0e2263036ab5385809769684b4d57457ee43a40f9beb57c36bd831eae6dabc088e655e6080ee1e6f760666b115df6de0697117cb4fc84ce4b141eab61850554319005c6ac55032034ebcf9aa45612f92cc5783c4b1cd389bd11011df66b4d6f8ab40779a781325974a023ad26d2c1149ad9953ddc8d8413c512bc9fdb72bd051107619dfa1c9703fda20e35eee0c7fa77fce2c52b035e76d318912a240bdb1c6fa681c0dc5a154a309520457d0300cf112411a74afd12eeb015c8ef82533b2e710c26f334536830105a945375049ee39216471e7c049bb2a33013ba1f4fe6be7393ca2ef259739f93967fe88fbb4391a8219a267c7453e34f08b47336a02dc8088c87703e3b6dbc5cff5e80df95b510727278b814db5c247ca033c09826a07ceaf0d1cc5a3bd5f06dc3f2ba05ccb29a98786a36b3189375b820b0bf871bdecd323276b7507ae6d696dc98fcca98eb615a7e117fcb44de9cb01677238153822d959d0fc211816543bfc81c5bb2024dbab79948cd18b8ac2d749d51d31eafa41c666e1c218569cf3fa9979ea64dafbef9546878bc44928e46f8d4ce6f1025f3fe13e7d6405d85460bd05b80559d253b2e955703c1a5a9631931498aa971eb605662d707150455bd1308c8b48bea46f0a26ce71e6d91424058f58d91422c14289414a126be82243a11c3d820c90497974b5506100b44926c762c799f84644c0fd47da478de8fd2ffa2a07d440cda1d4775f6e518edf261559199d33109c9d3d52ba71d57ac8e1b76b31158b2a777ff26795932862bfe7a30987def0fd78fcef18c217405bcb591e072731e2c25824d2e36054cb7e653b9e1e1a83c98702ad4be9c4480ae482b1ec95e341a7ec370d9990011cfde0981c6fe9c0143e6cbc95dc3d5a10d7f50dbfa9ea38ddb096230148daab378ebd11d09381b54c742ff2b5303ef8a5a2f241148b2c231c76e72c6221f1fc48c23225d300e041dd17876c0eb95c5e39cd0ab43d802d7ba55f7b07b3300fb30f814e3a289688225c5678ffda84c01aace84198a28453dfa03c37f22f30fa091f66651c1e19a0d2a540345d4e0b407f1d6c7ec6659005e0b4cbf1c88641b20f88e4bc2dca1c0b0b8696dc75f164cb8811cd84d415a9265eb2e27a60d67b66742ee3bd3b129ce1ae42513d2f65dbd9a0d23607884711ac42efdd70092d35f99aebb9a823108742f7a289263c5af1536c38cbdf621c1753de006bc7705e0e5300ebc38c324874346ff67da17e9115583f1e39b384457b76b5ff3fdf3977bf85b4d0b4333696e6f57c43d9b907e0fe2c0dd2a2f3b4b00"}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000200)) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000040)=0x0) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) tkill(0x0, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000000)={0x1}) close(r3) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r9 = dup(r7) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x1410, 0x1, 0x3, 0x1, 0x0, r9}, &(0x7f0000000080), &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, r11, &(0x7f0000000040)=@IORING_OP_STATX={0x15, 0x44, 0x0, r9, &(0x7f0000000380), &(0x7f0000000480)='./file2\x00', 0x200, 0x0, 0x1}) io_uring_enter(r10, 0x2ded, 0x4000, 0x0, 0x0, 0x0) futex_waitv(&(0x7f00000001c0)=[{0x6, &(0x7f0000000180)=0x6, 0x2}], 0x1, 0x0, &(0x7f0000000240)={0x77359400}, 0x0) bind$packet(r7, &(0x7f0000000300)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @random="597a45d26584"}, 0x14) syz_emit_ethernet(0x15d, &(0x7f0000000000)=ANY=[], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000eb2000/0x3000)=nil, &(0x7f00006a4000/0x3000)=nil, &(0x7f0000fbd000/0x3000)=nil, &(0x7f00004ba000/0x3000)=nil, &(0x7f0000cd9000/0x1000)=nil, &(0x7f000054f000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ecc000/0x4000)=nil, &(0x7f0000b04000/0x1000)=nil, &(0x7f0000c9a000/0x1000)=nil, &(0x7f00006f0000/0x1000)=nil, &(0x7f0000000000)="b4734e2ceaf80fb2a69da582e1f665953125e871f29fe218acb1d1f3a56258faa6c532c8e77042fa0fa4dcc8ad977250e37c89811dc250f680997af03e0ba6a0d101c711c96f433849afbe89084e84aafd403f55c75ca4636f7a3b708af770965f83bc60f820457bd726e712915874be885127f8841349811d27bae5da813c913bced862f2b1702b5a3e8f9a4f374f7dd228bf65e0a80d6a3455f9d6f73af986a1154c5fdc4334a0ecd7dc9994b891e6a4b2ddc46723", 0xb6, r7}, 0x64) ioctl$KVM_SET_NESTED_STATE(r2, 0x4048aecb, &(0x7f0000005540)=@svm={0x2, 0x1, 0x1080, {0x2000}, {"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"}}) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x12, 0xffffffffffffffff, 0x0) 2.033438027s ago: executing program 7 (id=3457): prlimit64(0x0, 0xf, &(0x7f0000000140)={0x29, 0x8b}, 0x0) r0 = fsopen(&(0x7f0000000200)='affs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 32) r1 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) io_uring_setup(0x5f8, &(0x7f00000003c0)={0x0, 0x91e1, 0x100, 0x0, 0x14e}) (async) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x48898) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async, rerun: 32) r4 = semget$private(0x0, 0x6, 0x3b1) (async, rerun: 32) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x150) ftruncate(r5, 0x8800000) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) sendfile(r6, r5, 0x0, 0x558410e9) semctl$SETVAL(r4, 0xff7f0000, 0x10, 0x0) (async, rerun: 32) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) (rerun: 32) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x2, 0xfffff00c}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) 1.886816281s ago: executing program 7 (id=3458): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x578410eb) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x15) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@setlink={0x28, 0x13, 0x4, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x100, 0x18000}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$sock_SIOCOUTQ(r10, 0x5411, &(0x7f0000001c80)) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xffbe, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x20bbfb2b, 0xf2, 0x45ff, 0x9, 0xfffffffc, 0xb5, 0x10001, 0x2, 0x81}}}}]}, 0x58}}, 0x180c0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_proto_private(r10, 0x89e1, &(0x7f00000004c0)="bc26a881e6a7477a8c600217a6fb122d75d691fcc482588d9c1b02ffaf84e57a1c2f1cd3e5ad40bddc8af5e690ebf686e5668b1e963c67f4a71ffa7217dd7aa9c94bf192674954c4b9ce7cf1070e88b11630336f6a0332e06a9e57cb05d97265bd727bf8ef4dafc22d60fd336ce12b844ee92618730e04f50904b7f64dcb5eb5ad7d24cd74dd7257ba64753aeb55ff1286a9a1a84c6509603aabb71565711a9f0595f60f5a36d74c72a4ec") 1.827001834s ago: executing program 8 (id=3459): r0 = syz_open_dev$swradio(&(0x7f0000000a00), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000a40)={0x0, 0x5, 0x3, 0x40, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) capget(0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_io_uring_setup(0x892, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r4, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000d40), 0xffffffffffffffff) r7 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000600)={0x2, @pix={0x80000000, 0xbb46, 0x34324142, 0x0, 0x0, 0x2c9, 0x0, 0xfffffffd}}) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) read$FUSE(r8, &(0x7f00000021c0)={0x2020}, 0x2020) 1.516626096s ago: executing program 7 (id=3460): r0 = syz_open_dev$video4linux(&(0x7f0000000200), 0x4, 0x228080) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f00000001c0)={0x980917, 0x8081, @value=0x63}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40042, 0x21) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0xa0031718561b10dc}}, 0x50) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x100) syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x78, 0x0, 0x3, {0x8000, 0xcd, 0x0, {0x2, 0x0, 0x9ef1, 0xffc, 0x5, 0x9b, 0xf79c000, 0x2339fdf8, 0x3, 0x8000, 0x538, 0x0, 0xffffffffffffffff, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$vbi(&(0x7f00000001c0), 0x2, 0x2) syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_AUDIO(r4, 0x40345622, &(0x7f0000003640)={0x0, "45ee5b5df4bf409af30639042ad9234d746d4220894e9e34673882f53a403c50", 0x2, 0x1}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000002000010300000000fedbdf250200000000000000"], 0x30}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x1000, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x4040014) r5 = socket$inet(0x2, 0x1, 0x2e) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) socket$pppoe(0x18, 0x1, 0x0) 1.122829312s ago: executing program 7 (id=3461): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, &(0x7f0000000100)={0xc, &(0x7f0000000000)={0x0, 0x16, 0x40, {0x40, 0x8, "cc9a243f1aef6a360f9cb268cebd1e083b3719f6c0db27364fec2381b3a1b94edba08ec6d0ed0c5c970d46286ef591c622a8c39e916bb5074a9e92783cd1"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}}, &(0x7f0000000300)={0x18, &(0x7f0000000140)={0x20, 0x10, 0x7a, "506f00aed9d5319d00e7602aa1b266812279dc4c514169c515f7fb62960d95c49cdb0befe6280972b74b6fd697cbdfe8898301e59dd10802b387e6d6e89ceea01db03f7ba96f88262123e8b0b57537777996b3e8be1e4592bee26d5a47ea93d5e4df1966af3a2ee1f8b389b9414c5616b558943ef3abe3c59286"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000280)={0xc0, 0x5, 0x4, "72fedf74"}, &(0x7f00000002c0)={0x40, 0x5, 0x1, "d6"}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b01, 0x0) 0s ago: executing program 9 (id=3462): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e79"]) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) kernel console output (not intermixed with test programs): 8.3055" name="memory.events" dev="9p" ino=72614241 res=0 errno=0 [ 964.066551][ T40] audit: type=1804 audit(1769522375.680:185): pid=17650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.3055" name="/newroot/58/file0/memory.events" dev="9p" ino=72614241 res=1 errno=0 [ 964.976449][T17601] usbtmc 12-1:16.0: usb_control_msg returned -110 [ 964.990951][T15163] usb 12-1: USB disconnect, device number 126 [ 965.027953][T17645] vhci_hcd: connection closed [ 965.028208][ T56] vhci_hcd vhci_hcd.5: stop threads [ 965.032432][ T56] vhci_hcd vhci_hcd.5: release socket [ 965.045031][ T56] vhci_hcd vhci_hcd.5: disconnect device [ 965.056217][ T7616] usb 10-1: USB disconnect, device number 102 [ 965.066616][ T6010] usb 48-1: device descriptor read/8, error -110 [ 965.177542][ T6010] usb usb48-port1: unable to enumerate USB device [ 965.250444][ T40] audit: type=1800 audit(1769522376.869:186): pid=17673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3061" name="memory.events" dev="9p" ino=72614241 res=0 errno=0 [ 965.261006][T17677] 9pnet_virtio: no channels available for device syz [ 965.278655][ T40] audit: type=1804 audit(1769522376.889:187): pid=17673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.3061" name="/newroot/55/file0/memory.events" dev="9p" ino=72614241 res=1 errno=0 [ 965.768495][ T6010] usb 11-1: new high-speed USB device number 114 using dummy_hcd [ 965.926498][ T6010] usb 11-1: Using ep0 maxpacket: 8 [ 965.979297][ T6010] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 965.982924][ T6010] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 965.987396][ T6010] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 965.992109][ T6010] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 965.996325][ T6010] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 966.001944][ T6010] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 966.006229][ T6010] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.237426][ T6010] usb 11-1: GET_CAPABILITIES returned 50 [ 966.239395][ T6010] usbtmc 11-1:16.0: can't read capabilities [ 966.327651][T17696] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 966.330470][T17696] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 966.557099][T17696] vhci_hcd vhci_hcd.0: Device attached [ 966.745430][T17695] random: crng reseeded on system resumption [ 966.838424][T15163] usb 48-1: SetAddress Request (123) to port 0 [ 966.841105][T15163] usb 48-1: new SuperSpeed USB device number 123 using vhci_hcd [ 967.007786][T17697] vhci_hcd: connection reset by peer [ 967.010218][ T1148] vhci_hcd vhci_hcd.5: stop threads [ 967.012366][ T1148] vhci_hcd vhci_hcd.5: release socket [ 967.014547][ T1148] vhci_hcd vhci_hcd.5: disconnect device [ 967.625217][T12585] bridge_slave_1: left allmulticast mode [ 967.629946][T12585] bridge_slave_1: left promiscuous mode [ 967.634164][T12585] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.639523][T12585] bridge_slave_0: left allmulticast mode [ 967.642044][T12585] bridge_slave_0: left promiscuous mode [ 967.644392][T17709] kvm: MWAIT instruction emulated as NOP! [ 967.644870][T12585] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.197948][T12585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 968.201701][T12585] bond_slave_0: left promiscuous mode [ 968.204725][T12585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 968.209072][T12585] bond_slave_1: left promiscuous mode [ 968.211119][T12585] bond0 (unregistering): Released all slaves [ 968.217941][T12585] bond1 (unregistering): Released all slaves [ 968.337377][T12585] bond2 (unregistering): Released all slaves [ 968.475130][T12585] tipc: Left network mode [ 968.716609][T12585] hsr_slave_0: left promiscuous mode [ 968.722346][T12585] hsr_slave_1: left promiscuous mode [ 968.724750][T12585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 969.210967][T12585] team0 (unregistering): Port device team_slave_1 removed [ 969.245980][T12585] team0 (unregistering): Port device team_slave_0 removed [ 971.195510][T17739] block device autoloading is deprecated and will be removed. [ 971.541776][T17690] usbtmc 11-1:16.0: usb_control_msg returned -110 [ 971.558736][ T6010] usb 11-1: USB disconnect, device number 114 [ 971.878121][T17754] batman_adv: batadv0: Adding interface: gretap1 [ 971.880187][T17754] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 971.888297][T17754] batman_adv: batadv0: Interface activated: gretap1 [ 971.941937][T15163] usb 48-1: device descriptor read/8, error -110 [ 972.344040][T15163] usb usb48-port1: attempt power cycle [ 972.923113][T15163] usb usb48-port1: unable to enumerate USB device [ 973.753758][T17766] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3084'. [ 974.664348][T17754] /dev/sr0: Can't open blockdev [ 976.499889][ T40] audit: type=1326 audit(1769522388.109:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17785 comm="syz.7.3089" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf747d579 code=0x0 [ 976.836766][T17788] netlink: 'syz.7.3089': attribute type 1 has an invalid length. [ 976.839877][T17788] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3089'. [ 978.157111][T17804] batman_adv: batadv0: Adding interface: gretap1 [ 978.159644][T17804] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 978.168753][T17804] batman_adv: batadv0: Interface activated: gretap1 [ 979.118911][T17804] /dev/sr0: Can't open blockdev [ 980.156877][T17827] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3098'. [ 981.614883][T17838] FAULT_INJECTION: forcing a failure. [ 981.614883][T17838] name failslab, interval 1, probability 0, space 0, times 0 [ 981.619855][T17838] CPU: 0 UID: 0 PID: 17838 Comm: syz.5.3102 Tainted: G L syzkaller #0 PREEMPT(full) [ 981.619894][T17838] Tainted: [L]=SOFTLOCKUP [ 981.619902][T17838] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 981.619911][T17838] Call Trace: [ 981.619918][T17838] [ 981.619925][T17838] dump_stack_lvl+0x100/0x190 [ 981.619948][T17838] should_fail_ex.cold+0x5/0xa [ 981.619967][T17838] should_failslab+0xc2/0x120 [ 981.619985][T17838] __kmalloc_cache_noprof+0x80/0x810 [ 981.619998][T17838] ? rtnl_newlink+0x126/0x2380 [ 981.620018][T17838] ? __pfx_rtnl_newlink+0x10/0x10 [ 981.620034][T17838] ? rtnl_newlink+0x126/0x2380 [ 981.620050][T17838] rtnl_newlink+0x126/0x2380 [ 981.620067][T17838] ? is_bpf_text_address+0x8a/0x1a0 [ 981.620086][T17838] ? bpf_ksym_find+0x124/0x1c0 [ 981.620101][T17838] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 981.620115][T17838] ? is_bpf_text_address+0x94/0x1a0 [ 981.620134][T17838] ? __pfx_rtnl_newlink+0x10/0x10 [ 981.620151][T17838] ? __kernel_text_address+0xd/0x30 [ 981.620181][T17838] ? unwind_get_return_address+0x59/0xa0 [ 981.620197][T17838] ? arch_stack_walk+0xa6/0xf0 [ 981.620217][T17838] ? __lock_acquire+0x4a5/0x2630 [ 981.620232][T17838] ? stack_trace_save+0x8e/0xc0 [ 981.620244][T17838] ? __pfx_stack_trace_save+0x10/0x10 [ 981.620262][T17838] ? find_held_lock+0x2b/0x80 [ 981.620273][T17838] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 981.620290][T17838] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 981.620309][T17838] ? __pfx_rtnl_newlink+0x10/0x10 [ 981.620327][T17838] rtnetlink_rcv_msg+0x95e/0xe90 [ 981.620346][T17838] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 981.620366][T17838] ? __lock_acquire+0x4a5/0x2630 [ 981.620384][T17838] netlink_rcv_skb+0x159/0x420 [ 981.620403][T17838] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 981.620422][T17838] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 981.620445][T17838] ? netlink_deliver_tap+0x1ae/0xcc0 [ 981.620465][T17838] netlink_unicast+0x5aa/0x870 [ 981.620485][T17838] ? __pfx_netlink_unicast+0x10/0x10 [ 981.620508][T17838] netlink_sendmsg+0x8b0/0xda0 [ 981.620534][T17838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 981.620561][T17838] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 981.620588][T17838] ____sys_sendmsg+0xa54/0xc30 [ 981.620610][T17838] ? __pfx_____sys_sendmsg+0x10/0x10 [ 981.620639][T17838] ___sys_sendmsg+0x190/0x1e0 [ 981.620660][T17838] ? __pfx____sys_sendmsg+0x10/0x10 [ 981.620689][T17838] __sys_sendmsg+0x170/0x220 [ 981.620706][T17838] ? __pfx___sys_sendmsg+0x10/0x10 [ 981.620727][T17838] ? __pfx_ksys_write+0x10/0x10 [ 981.620743][T17838] __do_fast_syscall_32+0xde/0x660 [ 981.620761][T17838] do_fast_syscall_32+0x32/0x70 [ 981.620775][T17838] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 981.620789][T17838] RIP: 0023:0xf7f36579 [ 981.620799][T17838] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 981.620810][T17838] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 981.620821][T17838] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 981.620828][T17838] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 981.620834][T17838] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 981.620840][T17838] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 981.620847][T17838] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 981.620861][T17838] [ 982.687970][ T40] audit: type=1326 audit(1769522394.284:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17849 comm="syz.6.3104" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f52579 code=0x0 [ 982.787774][ T40] audit: type=1326 audit(1769522394.384:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17848 comm="syz.5.3105" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f36579 code=0x0 [ 983.157887][T17857] netlink: 'syz.6.3104': attribute type 5 has an invalid length. [ 983.166980][T17857] netlink: 'syz.6.3104': attribute type 1 has an invalid length. [ 983.169925][T17857] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3104'. [ 983.321436][T17858] netlink: 'syz.5.3105': attribute type 1 has an invalid length. [ 983.324280][T17858] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3105'. [ 983.537370][T17864] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 983.755491][T17873] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 983.761856][T17870] FAULT_INJECTION: forcing a failure. [ 983.761856][T17870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 983.766930][T17870] CPU: 0 UID: 0 PID: 17870 Comm: syz.6.3109 Tainted: G L syzkaller #0 PREEMPT(full) [ 983.766957][T17870] Tainted: [L]=SOFTLOCKUP [ 983.766964][T17870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 983.766973][T17870] Call Trace: [ 983.766979][T17870] [ 983.766986][T17870] dump_stack_lvl+0x100/0x190 [ 983.767013][T17870] should_fail_ex.cold+0x5/0xa [ 983.767040][T17870] _copy_to_user+0x32/0xd0 [ 983.767066][T17870] simple_read_from_buffer+0xcb/0x170 [ 983.767081][T17870] proc_fail_nth_read+0x1af/0x230 [ 983.767095][T17870] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 983.767109][T17870] ? rw_verify_area+0xce/0x6d0 [ 983.767120][T17870] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 983.767133][T17870] vfs_read+0x1e4/0xb30 [ 983.767147][T17870] ? __pfx_vfs_read+0x10/0x10 [ 983.767158][T17870] ? find_held_lock+0x2b/0x80 [ 983.767174][T17870] ? __fget_files+0x215/0x3d0 [ 983.767189][T17870] ? __fget_files+0x21f/0x3d0 [ 983.767204][T17870] ksys_read+0x12a/0x250 [ 983.767216][T17870] ? __pfx_ksys_read+0x10/0x10 [ 983.767232][T17870] do_int80_emulation+0x101/0x470 [ 983.767248][T17870] asm_int80_emulation+0x1a/0x20 [ 983.767260][T17870] RIP: 0023:0xf715572b [ 983.767269][T17870] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 983.767281][T17870] RSP: 002b:00000000f53f54bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 983.767292][T17870] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53f55d0 [ 983.767299][T17870] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 983.767306][T17870] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 983.767312][T17870] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 983.767318][T17870] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 983.767332][T17870] [ 983.842369][T15163] usb 13-1: new high-speed USB device number 104 using dummy_hcd [ 984.082417][T15163] usb 13-1: Using ep0 maxpacket: 32 [ 984.095743][T15163] usb 13-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 984.099758][T15163] usb 13-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 984.112396][T15163] usb 13-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 984.116916][T15163] usb 13-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 984.132531][T15163] usb 13-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 984.136321][T15163] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.139645][T15163] usb 13-1: Product: syz [ 984.141463][T15163] usb 13-1: Manufacturer: syz [ 984.152446][T15163] usb 13-1: SerialNumber: syz [ 984.174359][ C3] imon 13-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 984.179022][T15163] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/input/input242 [ 984.392659][T15163] imon 13-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 984.395968][T15163] (id 0x00) [ 984.452823][T15163] rc_core: IR keymap rc-imon-pad not found [ 984.457522][T15163] Registered IR keymap rc-empty [ 984.461954][T15163] imon 13-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 984.470069][T15163] imon 13-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 984.594142][T15163] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/rc/rc0 [ 984.599467][T15163] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/rc/rc0/input243 [ 984.606669][T15163] imon 13-1:155.0: iMON device (15c2:ffdc, intf0) on usb<13:104> initialized [ 984.776479][T17864] imon:display_open: display port is already open [ 984.779261][T12350] usb 13-1: USB disconnect, device number 104 [ 985.733069][ T40] audit: type=1326 audit(1769522397.321:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17897 comm="syz.5.3117" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f36579 code=0x0 [ 985.813721][T17901] netlink: 'syz.5.3117': attribute type 5 has an invalid length. [ 985.831954][T17899] netlink: 'syz.5.3117': attribute type 1 has an invalid length. [ 985.854337][T17899] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3117'. [ 985.903908][ C2] hpet: Lost 1 RTC interrupts [ 986.557682][T17903] binder: 17902:17903 ioctl c0306201 80000080 returned -14 [ 986.936732][T17907] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 986.939531][T17907] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 986.943233][T17907] vhci_hcd vhci_hcd.0: Device attached [ 986.963474][T17907] random: crng reseeded on system resumption [ 987.054189][T17907] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 987.194298][ T40] audit: type=1326 audit(1769522398.790:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17910 comm="syz.5.3120" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f36579 code=0x0 [ 987.215409][T15163] usb 54-1: SetAddress Request (90) to port 0 [ 987.218704][T15163] usb 54-1: new SuperSpeed USB device number 90 using vhci_hcd [ 987.260624][T17914] netlink: 'syz.5.3120': attribute type 5 has an invalid length. [ 987.266506][T17914] netlink: 'syz.5.3120': attribute type 1 has an invalid length. [ 987.270445][T17914] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3120'. [ 987.430904][ T40] audit: type=1800 audit(1769522399.030:193): pid=17915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3121" name="memory.events" dev="9p" ino=72614241 res=0 errno=0 [ 987.551006][ T40] audit: type=1804 audit(1769522399.150:194): pid=17915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.3121" name="/newroot/72/file0/memory.events" dev="9p" ino=72614241 res=1 errno=0 [ 987.641039][T17908] vhci_hcd: connection reset by peer [ 987.645754][ T547] vhci_hcd vhci_hcd.8: stop threads [ 987.651530][ T547] vhci_hcd vhci_hcd.8: release socket [ 987.701799][ T547] vhci_hcd vhci_hcd.8: disconnect device [ 987.964704][T17919] comedi comedi0: Minor 5 could not be opened [ 989.386661][T17935] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3125'. [ 991.776006][ T40] audit: type=1800 audit(1769522403.366:195): pid=17978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3136" name="memory.events" dev="9p" ino=72614241 res=0 errno=0 [ 991.820940][ T40] audit: type=1804 audit(1769522403.416:196): pid=17973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.3136" name="/newroot/81/file0/memory.events" dev="9p" ino=72614241 res=1 errno=0 [ 992.047265][T17982] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3139'. [ 992.170303][T17984] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 992.173119][T17984] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 992.177166][T17984] vhci_hcd vhci_hcd.0: Device attached [ 992.195937][T17984] random: crng reseeded on system resumption [ 992.289553][T15163] usb 54-1: device descriptor read/8, error -110 [ 992.301743][T17984] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 992.337579][T17990] netlink: 'syz.8.3140': attribute type 5 has an invalid length. [ 992.343039][T17990] batman_adv: batadv0: Interface deactivated: gretap1 [ 992.361454][T17990] netlink: 'syz.8.3140': attribute type 1 has an invalid length. [ 992.364267][T17990] netlink: 224 bytes leftover after parsing attributes in process `syz.8.3140'. [ 992.459661][ T6054] usb 52-1: SetAddress Request (94) to port 0 [ 992.461979][ T6054] usb 52-1: new SuperSpeed USB device number 94 using vhci_hcd [ 992.700668][T15163] usb usb54-port1: attempt power cycle [ 993.208460][T17985] vhci_hcd: connection reset by peer [ 993.263494][ T56] vhci_hcd vhci_hcd.7: stop threads [ 993.265696][ T56] vhci_hcd vhci_hcd.7: release socket [ 993.267939][ T56] vhci_hcd vhci_hcd.7: disconnect device [ 993.654399][T15163] usb usb54-port1: unable to enumerate USB device [ 994.238202][T18010] FAULT_INJECTION: forcing a failure. [ 994.238202][T18010] name failslab, interval 1, probability 0, space 0, times 0 [ 994.244156][T18010] CPU: 0 UID: 0 PID: 18010 Comm: syz.7.3146 Tainted: G L syzkaller #0 PREEMPT(full) [ 994.244200][T18010] Tainted: [L]=SOFTLOCKUP [ 994.244207][T18010] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 994.244218][T18010] Call Trace: [ 994.244225][T18010] [ 994.244234][T18010] dump_stack_lvl+0x100/0x190 [ 994.244262][T18010] should_fail_ex.cold+0x5/0xa [ 994.244299][T18010] should_failslab+0xc2/0x120 [ 994.244323][T18010] ? tomoyo_realpath_from_path+0xb6/0x690 [ 994.244342][T18010] __kmalloc_noprof+0xf6/0x9c0 [ 994.244359][T18010] ? kfree+0x2a9/0x690 [ 994.244382][T18010] ? tomoyo_realpath_from_path+0xb6/0x690 [ 994.244400][T18010] tomoyo_realpath_from_path+0xb6/0x690 [ 994.244423][T18010] tomoyo_check_open_permission+0x2af/0x3c0 [ 994.244450][T18010] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 994.244474][T18010] ? __do_fast_syscall_32+0xde/0x660 [ 994.244522][T18010] ? do_raw_spin_lock+0x128/0x260 [ 994.244551][T18010] ? path_get+0x61/0x80 [ 994.244576][T18010] tomoyo_file_open+0x6b/0x90 [ 994.244599][T18010] security_file_open+0xb5/0x1e0 [ 994.244617][T18010] do_dentry_open+0x58c/0x1570 [ 994.244640][T18010] ? security_inode_permission+0xbf/0x250 [ 994.244670][T18010] vfs_open+0x82/0x3f0 [ 994.244703][T18010] path_openat+0x21dc/0x3120 [ 994.244734][T18010] ? __pfx_path_openat+0x10/0x10 [ 994.244765][T18010] do_filp_open+0x1f7/0x420 [ 994.244789][T18010] ? __pfx_do_filp_open+0x10/0x10 [ 994.244828][T18010] ? alloc_fd+0x476/0x790 [ 994.244856][T18010] do_sys_openat2+0x12e/0x220 [ 994.244882][T18010] ? __pfx_do_sys_openat2+0x10/0x10 [ 994.244907][T18010] ? __fget_files+0x215/0x3d0 [ 994.244930][T18010] ? __fget_files+0x21f/0x3d0 [ 994.244952][T18010] __ia32_compat_sys_openat+0x12d/0x210 [ 994.244981][T18010] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 994.245011][T18010] ? __pfx_ksys_write+0x10/0x10 [ 994.245037][T18010] __do_fast_syscall_32+0xde/0x660 [ 994.245061][T18010] do_fast_syscall_32+0x32/0x70 [ 994.245082][T18010] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 994.245134][T18010] RIP: 0023:0xf747d579 [ 994.245149][T18010] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 994.245168][T18010] RSP: 002b:00000000f548550c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 994.245186][T18010] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000280 [ 994.245198][T18010] RDX: 00000000000c0000 RSI: 0000000000000004 RDI: 0000000000000000 [ 994.245208][T18010] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 994.245219][T18010] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 994.245229][T18010] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 994.245253][T18010] [ 994.245379][T18010] ERROR: Out of memory at tomoyo_realpath_from_path. [ 995.096483][T18015] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3148'. [ 996.995788][ T40] audit: type=1800 audit(1769522408.582:197): pid=18039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3155" name="memory.events" dev="9p" ino=72614241 res=0 errno=0 [ 997.435254][ T40] audit: type=1326 audit(1769522409.021:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18043 comm="syz.7.3157" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf747d579 code=0x0 [ 997.491824][T18046] netlink: 'syz.7.3157': attribute type 5 has an invalid length. [ 997.495552][T18046] batman_adv: batadv0: Interface deactivated: gretap1 [ 997.506962][T18046] netlink: 'syz.7.3157': attribute type 1 has an invalid length. [ 997.510232][T18046] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3157'. [ 997.564173][ T6054] usb 52-1: device descriptor read/8, error -110 [ 997.645204][T18048] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 997.647393][T18048] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 997.887241][T18048] vhci_hcd vhci_hcd.0: Device attached [ 997.911872][T18048] random: crng reseeded on system resumption [ 997.965128][ T6054] usb usb52-port1: attempt power cycle [ 998.159838][T18049] vhci_hcd: connection closed [ 998.160092][ T46] vhci_hcd vhci_hcd.8: stop threads [ 998.163595][ T46] vhci_hcd vhci_hcd.8: release socket [ 998.166510][ T46] vhci_hcd vhci_hcd.8: disconnect device [ 998.168899][T15163] usb 54-1: enqueue for inactive port 0 [ 998.249799][T18057] comedi comedi0: Minor 5 could not be opened [ 998.525164][ T6054] usb usb52-port1: unable to enumerate USB device [ 998.666289][T15163] usb usb54-port1: attempt power cycle [ 998.852117][ T5954] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 998.858464][ T5954] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 998.863498][ T5954] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 998.868566][ T5954] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 998.872181][ T5954] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 998.883284][T16814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 998.886321][T16814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 998.888704][T16814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 998.891887][T16814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 998.896639][T16814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 999.137488][T18063] chnl_net:caif_netlink_parms(): no params data found [ 999.237556][T15163] usb usb54-port1: unable to enumerate USB device [ 999.302507][ T40] audit: type=1800 audit(1769522410.890:199): pid=18069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3163" name="memory.events" dev="9p" ino=72614241 res=0 errno=0 [ 999.321095][T18063] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.324179][T18063] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.327326][T18063] bridge_slave_0: entered allmulticast mode [ 999.332418][T18063] bridge_slave_0: entered promiscuous mode [ 999.336589][T18063] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.339574][T18063] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.342186][T18063] bridge_slave_1: entered allmulticast mode [ 999.345934][T18063] bridge_slave_1: entered promiscuous mode [ 999.369712][T18063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 999.375250][T18063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 999.397434][T18063] team0: Port device team_slave_0 added [ 999.401289][T18063] team0: Port device team_slave_1 added [ 999.427764][T18063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 999.430334][T18063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 999.438799][T18063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 999.447084][T18063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 999.450202][T18063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 999.462059][T18063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 999.523412][T18082] Cache volume key already in use (9p,syz,) [ 999.525271][T18063] hsr_slave_0: entered promiscuous mode [ 999.530217][T18063] hsr_slave_1: entered promiscuous mode [ 999.670305][ T40] audit: type=1800 audit(1769522411.259:200): pid=18085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3165" name="memory.events" dev="9p" ino=72614241 res=0 errno=0 [ 999.770963][T18089] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3168'. [ 999.866136][T18063] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 999.916148][T18063] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 999.958015][T18063] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 999.962517][T18063] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1000.016920][T18063] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.019970][T18063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1000.023442][T18063] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.025747][T18063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1000.088644][T18063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1000.099177][T18063] 8021q: adding VLAN 0 to HW filter on device team0 [ 1000.946560][T16814] Bluetooth: hci0: command tx timeout [ 1000.957189][T12585] bridge_slave_1: left allmulticast mode [ 1000.959665][T12585] bridge_slave_1: left promiscuous mode [ 1000.962225][T12585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.981306][T12585] bridge_slave_0: left allmulticast mode [ 1000.986995][T12585] bridge_slave_0: left promiscuous mode [ 1000.990046][T12585] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.417202][T16821] usb 12-1: new high-speed USB device number 127 using dummy_hcd [ 1001.511208][T12585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1001.515146][T12585] bond_slave_0: left promiscuous mode [ 1001.519434][T12585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1001.523421][T12585] bond_slave_1: left promiscuous mode [ 1001.526274][T12585] bond0 (unregistering): Released all slaves [ 1001.552422][T18063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1001.577606][T16821] usb 12-1: Using ep0 maxpacket: 8 [ 1001.584438][T16821] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1001.598933][T16821] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1001.602984][T16821] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1001.607088][T12585] tipc: Left network mode [ 1001.609375][T16821] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1001.614636][T16821] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1001.619427][T16821] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.834638][T16821] usb 12-1: GET_CAPABILITIES returned 0 [ 1001.837066][T16821] usbtmc 12-1:16.0: can't read capabilities [ 1002.094337][T18063] veth0_vlan: entered promiscuous mode [ 1002.110934][T18063] veth1_vlan: entered promiscuous mode [ 1002.139566][T18063] veth0_macvtap: entered promiscuous mode [ 1002.170446][T18063] veth1_macvtap: entered promiscuous mode [ 1002.193633][T18063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1002.201621][T18063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1002.304805][ T84] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.318144][ T84] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.321848][ T84] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.325378][ T84] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.406613][T18157] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 1002.408734][T18157] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1002.430814][T18157] vhci_hcd vhci_hcd.0: Device attached [ 1002.539891][ T40] audit: type=1800 audit(1769522414.127:201): pid=18148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3176" name="memory.events" dev="9p" ino=72614241 res=0 errno=0 [ 1002.558517][T12585] hsr_slave_0: left promiscuous mode [ 1002.588382][T12585] hsr_slave_1: left promiscuous mode [ 1002.598914][T12585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1002.603257][T12585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1002.639787][ T40] audit: type=1804 audit(1769522414.227:202): pid=18148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.3176" name="/newroot/199/file0/memory.events" dev="9p" ino=72614241 res=1 errno=0 [ 1002.799063][ T40] audit: type=1326 audit(1769522414.387:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18154 comm="syz.8.3177" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73ad579 code=0x0 [ 1002.947546][T18165] netlink: 'syz.8.3177': attribute type 5 has an invalid length. [ 1003.019977][T16814] Bluetooth: hci0: command tx timeout [ 1003.068928][T16821] usb 52-1: SetAddress Request (98) to port 0 [ 1003.081702][T16821] usb 52-1: new SuperSpeed USB device number 98 using vhci_hcd [ 1003.308335][T12585] team0 (unregistering): Port device team_slave_1 removed [ 1003.346691][T12585] team0 (unregistering): Port device team_slave_0 removed [ 1003.627607][T18169] netlink: 'syz.8.3177': attribute type 1 has an invalid length. [ 1003.630151][T18169] netlink: 224 bytes leftover after parsing attributes in process `syz.8.3177'. [ 1003.635609][T18172] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3178'. [ 1003.641403][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.644195][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.670628][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.673169][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.867928][T18190] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3180'. [ 1003.877028][ T40] audit: type=1326 audit(1769522415.456:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18189 comm="syz.8.3180" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73ad579 code=0x0 [ 1004.034561][T18185] netlink: 'syz.9.3160': attribute type 5 has an invalid length. [ 1004.085103][T18188] netlink: 'syz.9.3160': attribute type 1 has an invalid length. [ 1004.087772][T18188] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3160'. [ 1004.184586][ T40] audit: type=1326 audit(1769522415.766:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18192 comm="syz.5.3181" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f36579 code=0x0 [ 1004.242024][T18196] netlink: 'syz.5.3181': attribute type 5 has an invalid length. [ 1004.301136][T18198] netlink: 'syz.5.3181': attribute type 1 has an invalid length. [ 1004.304464][T18198] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3181'. [ 1004.457772][T18185] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.460400][T18185] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.558104][T18158] vhci_hcd: connection reset by peer [ 1004.562158][ T46] vhci_hcd vhci_hcd.7: stop threads [ 1004.564206][ T46] vhci_hcd vhci_hcd.7: release socket [ 1004.564396][T15585] usb 12-1: USB disconnect, device number 127 [ 1004.566057][ T46] vhci_hcd vhci_hcd.7: disconnect device [ 1004.620511][T18185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1004.647691][T18185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1005.069227][ T1148] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.088680][ T1148] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.092659][T16814] Bluetooth: hci0: command tx timeout [ 1005.102843][ T1148] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.113107][ T1148] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.400911][ T40] audit: type=1800 audit(1769522416.975:206): pid=18215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3185" name="memory.events" dev="9p" ino=72614241 res=0 errno=0 [ 1005.444040][ T40] audit: type=1804 audit(1769522417.025:207): pid=18215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.3185" name="/newroot/104/file0/memory.events" dev="9p" ino=72614241 res=1 errno=0 [ 1006.774868][T18231] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3189'. [ 1007.024415][ T40] audit: type=1326 audit(1769522418.603:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18233 comm="syz.9.3190" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73cd579 code=0x0 [ 1007.118271][T18236] netlink: 'syz.9.3190': attribute type 5 has an invalid length. [ 1007.132500][T18236] netlink: 'syz.9.3190': attribute type 1 has an invalid length. [ 1007.135099][T18236] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3190'. [ 1007.156458][ T40] audit: type=1800 audit(1769522418.733:209): pid=18238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3191" name="memory.events" dev="9p" ino=72614241 res=0 errno=0 [ 1007.182096][ T40] audit: type=1804 audit(1769522418.753:210): pid=18238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.3191" name="/newroot/106/file0/memory.events" dev="9p" ino=72614241 res=1 errno=0 [ 1007.182450][T16814] Bluetooth: hci0: command tx timeout [ 1007.693335][T18241] netlink: 'syz.8.3192': attribute type 5 has an invalid length. [ 1007.710111][T18241] netlink: 'syz.8.3192': attribute type 1 has an invalid length. [ 1007.713688][T18241] netlink: 224 bytes leftover after parsing attributes in process `syz.8.3192'. [ 1008.212841][T16821] usb 52-1: device descriptor read/8, error -110 [ 1008.298479][T18252] comedi comedi0: Minor 5 could not be opened [ 1008.366249][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 1008.366262][ T40] audit: type=1800 audit(1769522419.942:212): pid=18254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3195" name="memory.events" dev="9p" ino=72614241 res=0 errno=0 [ 1008.377217][ T40] audit: type=1804 audit(1769522419.952:213): pid=18250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.3195" name="/newroot/108/file0/memory.events" dev="9p" ino=72614241 res=1 errno=0 [ 1008.633945][T16821] usb usb52-port1: attempt power cycle [ 1008.787880][ C2] hpet: Lost 1 RTC interrupts [ 1008.816675][ T5625] usb 13-1: new high-speed USB device number 105 using dummy_hcd [ 1008.963460][ T5625] usb 13-1: device descriptor read/64, error -71 [ 1009.203711][ T5625] usb 13-1: new high-speed USB device number 106 using dummy_hcd [ 1009.248842][T16821] usb usb52-port1: unable to enumerate USB device [ 1009.334005][ T5625] usb 13-1: device descriptor read/64, error -71 [ 1009.468169][ T5625] usb usb13-port1: attempt power cycle [ 1009.723768][ C2] hpet: Lost 1 RTC interrupts [ 1009.849233][ T5625] usb 13-1: new high-speed USB device number 107 using dummy_hcd [ 1009.906216][ T5625] usb 13-1: device descriptor read/8, error -71 [ 1010.144935][ T5625] usb 13-1: new high-speed USB device number 108 using dummy_hcd [ 1010.201333][ T5625] usb 13-1: device descriptor read/8, error -71 [ 1010.231593][T18279] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 1010.243274][T18279] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1010.317009][T18279] vhci_hcd vhci_hcd.0: Device attached [ 1010.326320][ T5625] usb usb13-port1: unable to enumerate USB device [ 1010.334296][T18277] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1010.356497][T18279] random: crng reseeded on system resumption [ 1010.378459][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1010.416021][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1010.467857][T18282] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1010.609896][T17043] usb 52-1: SetAddress Request (102) to port 0 [ 1010.612437][T17043] usb 52-1: new SuperSpeed USB device number 102 using vhci_hcd [ 1010.616669][ T6010] usb 10-1: new high-speed USB device number 103 using dummy_hcd [ 1010.720349][T18280] vhci_hcd: connection reset by peer [ 1010.722578][ T46] vhci_hcd vhci_hcd.7: stop threads [ 1010.728897][ T46] vhci_hcd vhci_hcd.7: release socket [ 1010.733888][ T46] vhci_hcd vhci_hcd.7: disconnect device [ 1010.788755][ T6010] usb 10-1: Using ep0 maxpacket: 32 [ 1010.792552][ T6010] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.797844][ T6010] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1010.805381][ T6010] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1010.811575][ T6010] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1010.841325][ T6010] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1010.846669][ T6010] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.862263][ T6010] usb 10-1: Product: syz [ 1010.865998][ T6010] usb 10-1: Manufacturer: syz [ 1010.867995][ T6010] usb 10-1: SerialNumber: syz [ 1010.876511][ C2] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1010.882466][ T6010] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/input/input245 [ 1011.116428][ T6010] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1011.120468][ T6010] (id 0x00) [ 1011.215826][ T6010] rc_core: IR keymap rc-imon-pad not found [ 1011.219642][ T6010] Registered IR keymap rc-empty [ 1011.225107][ T6010] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1011.231808][ T6010] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1011.260458][ C2] hpet: Lost 1 RTC interrupts [ 1011.310333][ T6010] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/rc/rc0 [ 1011.325179][ T6010] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/rc/rc0/input246 [ 1011.340331][ T6010] imon 10-1:155.0: iMON device (15c2:ffdc, intf0) on usb<10:103> initialized [ 1011.365638][ C2] hpet: Lost 1 RTC interrupts [ 1011.514226][T18277] imon:display_open: display port is already open [ 1011.520857][ T5741] usb 10-1: USB disconnect, device number 103 [ 1011.840098][ C2] hpet: Lost 1 RTC interrupts [ 1012.006716][ C2] hpet: Lost 1 RTC interrupts [ 1012.084061][ C2] hpet: Lost 1 RTC interrupts [ 1012.129679][ C2] hpet: Lost 1 RTC interrupts [ 1012.300166][T18295] netlink: 'syz.7.3203': attribute type 5 has an invalid length. [ 1012.382056][T18295] netlink: 'syz.7.3203': attribute type 1 has an invalid length. [ 1012.396905][T18295] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3203'. [ 1012.854259][T18301] netlink: 'syz.9.3204': attribute type 5 has an invalid length. [ 1012.876072][T18301] netlink: 'syz.9.3204': attribute type 1 has an invalid length. [ 1012.914157][T18301] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3204'. [ 1013.741266][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1014.051933][ C2] hpet_rtc_timer_reinit: 6 callbacks suppressed [ 1014.051954][ C2] hpet: Lost 1 RTC interrupts [ 1015.399919][ C2] hpet: Lost 1 RTC interrupts [ 1015.669165][T17043] usb 52-1: device descriptor read/8, error -110 [ 1015.719982][ C2] hpet: Lost 1 RTC interrupts [ 1015.789305][ C2] hpet: Lost 1 RTC interrupts [ 1015.948050][ C2] hpet: Lost 1 RTC interrupts [ 1016.131369][T17043] usb usb52-port1: attempt power cycle [ 1016.311544][T18319] comedi comedi0: Minor 5 could not be opened [ 1016.461292][ C2] hpet: Lost 1 RTC interrupts [ 1016.710780][ C2] hpet: Lost 1 RTC interrupts [ 1016.793309][T17043] usb usb52-port1: unable to enumerate USB device [ 1016.895950][ C2] hpet: Lost 1 RTC interrupts [ 1017.060027][ C2] hpet: Lost 2 RTC interrupts [ 1017.179881][ C2] hpet: Lost 1 RTC interrupts [ 1018.447831][T18331] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 1018.450423][T18331] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1018.454183][T18331] vhci_hcd vhci_hcd.0: Device attached [ 1018.490730][T18350] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1018.493219][T18350] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1018.809276][T18350] vhci_hcd vhci_hcd.0: Device attached [ 1018.824897][T18356] random: crng reseeded on system resumption [ 1018.838825][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1018.843753][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1018.845031][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.848083][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.881117][T18331] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1018.932682][T18345] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1018.935408][T18345] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1018.939854][T18345] vhci_hcd vhci_hcd.0: Device attached [ 1018.947734][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1018.950616][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.976584][T18357] vhci_hcd: connection closed [ 1018.980295][ T56] vhci_hcd vhci_hcd.9: stop threads [ 1018.985179][ T56] vhci_hcd vhci_hcd.9: release socket [ 1018.989159][ T56] vhci_hcd vhci_hcd.9: disconnect device [ 1019.010395][T18341] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1019.021915][T18303] usb 54-1: SetAddress Request (98) to port 0 [ 1019.021973][T18303] usb 54-1: new SuperSpeed USB device number 98 using vhci_hcd [ 1019.087183][ C2] hpet_rtc_timer_reinit: 5 callbacks suppressed [ 1019.087200][ C2] hpet: Lost 1 RTC interrupts [ 1019.108672][ T24] usb 48-1: SetAddress Request (127) to port 0 [ 1019.121376][ T24] usb 48-1: new SuperSpeed USB device number 127 using vhci_hcd [ 1019.143359][T18352] vhci_hcd: connection reset by peer [ 1019.157554][T18351] vhci_hcd: connection closed [ 1019.167523][ T46] vhci_hcd vhci_hcd.8: stop threads [ 1019.171863][T18355] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1019.214154][ T46] vhci_hcd vhci_hcd.8: release socket [ 1019.216574][ T46] vhci_hcd vhci_hcd.8: disconnect device [ 1019.218974][ T46] vhci_hcd vhci_hcd.5: stop threads [ 1019.221000][ T46] vhci_hcd vhci_hcd.5: release socket [ 1019.223279][ T46] vhci_hcd vhci_hcd.5: disconnect device [ 1019.803958][ C2] hpet: Lost 1 RTC interrupts [ 1020.143944][T18370] comedi comedi0: Minor 5 could not be opened [ 1021.179914][ C2] hpet: Lost 1 RTC interrupts [ 1021.636822][ C2] hpet: Lost 1 RTC interrupts [ 1021.700254][ C2] hpet: Lost 2 RTC interrupts [ 1021.774671][ T40] audit: type=1800 audit(1769522433.341:216): pid=18386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3219" name="memory.events" dev="9p" ino=72614241 res=0 errno=0 [ 1021.860701][ T40] audit: type=1804 audit(1769522433.341:217): pid=18386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.3219" name="/newroot/12/file0/memory.events" dev="9p" ino=72614241 res=1 errno=0 [ 1022.424433][T17043] usb 13-1: new high-speed USB device number 109 using dummy_hcd [ 1022.576806][T17043] usb 13-1: config index 0 descriptor too short (expected 39, got 27) [ 1022.580881][T17043] usb 13-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1022.594487][T17043] usb 13-1: config 0 interface 0 has no altsetting 0 [ 1022.620373][ C2] hpet: Lost 1 RTC interrupts [ 1022.654087][T17043] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1022.675306][T17043] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1022.687731][T17043] usb 13-1: Product: syz [ 1022.706230][T17043] usb 13-1: Manufacturer: syz [ 1022.710054][T17043] usb 13-1: SerialNumber: syz [ 1022.725051][T17043] usb 13-1: config 0 descriptor?? [ 1022.752326][T17043] hub 13-1:0.0: bad descriptor, ignoring hub [ 1022.775705][ C2] hpet: Lost 1 RTC interrupts [ 1022.780822][T17043] hub 13-1:0.0: probe with driver hub failed with error -5 [ 1022.803982][ C2] hpet: Lost 1 RTC interrupts [ 1022.818478][T17043] usb 13-1: selecting invalid altsetting 0 [ 1023.313916][T18390] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1023.319631][T18390] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1023.336456][T18390] vhci_hcd vhci_hcd.0: Device attached [ 1023.416888][T18390] random: crng reseeded on system resumption [ 1023.452569][T18390] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1023.597158][T18402] vhci_hcd: connection closed [ 1023.598282][ T46] vhci_hcd vhci_hcd.5: stop threads [ 1023.602654][ T46] vhci_hcd vhci_hcd.5: release socket [ 1023.604973][ T46] vhci_hcd vhci_hcd.5: disconnect device [ 1024.146044][T18303] usb 54-1: device descriptor read/8, error -110 [ 1024.228925][ T24] usb 48-1: device descriptor read/8, error -110 [ 1024.339958][ C2] hpet_rtc_timer_reinit: 6 callbacks suppressed [ 1024.339977][ C2] hpet: Lost 1 RTC interrupts [ 1024.368654][ C2] hpet: Lost 1 RTC interrupts [ 1024.419837][ C2] hpet: Lost 1 RTC interrupts [ 1024.585295][T18303] usb usb54-port1: attempt power cycle [ 1024.630841][T18423] FAULT_INJECTION: forcing a failure. [ 1024.630841][T18423] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.647796][ C2] hpet: Lost 1 RTC interrupts [ 1024.656380][T18423] CPU: 1 UID: 0 PID: 18423 Comm: syz.5.3224 Tainted: G L syzkaller #0 PREEMPT(full) [ 1024.656408][T18423] Tainted: [L]=SOFTLOCKUP [ 1024.656414][T18423] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1024.656423][T18423] Call Trace: [ 1024.656428][T18423] [ 1024.656435][T18423] dump_stack_lvl+0x100/0x190 [ 1024.656459][T18423] should_fail_ex.cold+0x5/0xa [ 1024.656484][T18423] should_failslab+0xc2/0x120 [ 1024.656505][T18423] ? tomoyo_encode2+0xfb/0x3c0 [ 1024.656519][T18423] __kmalloc_noprof+0xf6/0x9c0 [ 1024.656541][T18423] ? tomoyo_encode2+0xfb/0x3c0 [ 1024.656555][T18423] tomoyo_encode2+0xfb/0x3c0 [ 1024.656574][T18423] tomoyo_encode+0x29/0x50 [ 1024.656589][T18423] tomoyo_realpath_from_path+0x18c/0x690 [ 1024.656612][T18423] tomoyo_path_number_perm+0x23c/0x580 [ 1024.656635][T18423] ? tomoyo_path_number_perm+0x22e/0x580 [ 1024.656659][T18423] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1024.656707][T18423] ? find_held_lock+0x2b/0x80 [ 1024.656725][T18423] ? hook_file_ioctl_common+0x146/0x410 [ 1024.656748][T18423] ? __fget_files+0x215/0x3d0 [ 1024.656771][T18423] ? __fget_files+0x21f/0x3d0 [ 1024.656792][T18423] security_file_ioctl_compat+0xd3/0x230 [ 1024.656827][T18423] __ia32_compat_sys_ioctl+0xc2/0x360 [ 1024.656857][T18423] __do_fast_syscall_32+0xde/0x660 [ 1024.656881][T18423] do_fast_syscall_32+0x32/0x70 [ 1024.656901][T18423] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1024.656921][T18423] RIP: 0023:0xf7f36579 [ 1024.656935][T18423] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 1024.656952][T18423] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1024.656970][T18423] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004b72 [ 1024.656980][T18423] RDX: 00000000800004c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1024.656990][T18423] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1024.656999][T18423] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1024.657008][T18423] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1024.657031][T18423] [ 1024.657052][T18423] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1024.680244][ T24] usb usb48-port1: attempt power cycle [ 1024.811340][ C2] hpet: Lost 1 RTC interrupts [ 1024.943779][T18431] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3226'. [ 1025.215874][ C2] hpet: Lost 1 RTC interrupts [ 1025.373231][T18303] usb usb54-port1: unable to enumerate USB device [ 1025.453506][ T24] usb usb48-port1: unable to enumerate USB device [ 1025.503882][ C2] hpet: Lost 1 RTC interrupts [ 1025.628779][T18448] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3229'. [ 1025.743841][ C2] hpet: Lost 1 RTC interrupts [ 1025.929572][ C2] hpet: Lost 1 RTC interrupts [ 1026.383737][ C2] hpet: Lost 1 RTC interrupts [ 1026.866656][ T846] usb 13-1: USB disconnect, device number 109 [ 1026.977543][T18468] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3231'. [ 1027.610049][T18474] 9pnet_virtio: no channels available for device syz [ 1028.489478][T18488] random: crng reseeded on system resumption [ 1028.592235][T18486] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 1028.595852][T18486] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1028.637603][T18486] vhci_hcd vhci_hcd.0: Device attached [ 1028.953179][T18487] vhci_hcd: connection closed [ 1028.955428][ T84] vhci_hcd vhci_hcd.8: stop threads [ 1028.968481][ T84] vhci_hcd vhci_hcd.8: release socket [ 1028.972386][ T24] usb 54-1: SetAddress Request (102) to port 0 [ 1028.981672][ T24] usb 54-1: new SuperSpeed USB device number 102 using vhci_hcd [ 1028.988709][ T84] vhci_hcd vhci_hcd.8: disconnect device [ 1029.144711][ T24] usb 54-1: enqueue for inactive port 0 [ 1029.363961][ C2] hpet_rtc_timer_reinit: 14 callbacks suppressed [ 1029.363981][ C2] hpet: Lost 2 RTC interrupts [ 1029.475769][ C2] hpet: Lost 2 RTC interrupts [ 1029.546003][ T24] usb usb54-port1: attempt power cycle [ 1030.003931][ C2] hpet: Lost 1 RTC interrupts [ 1030.177960][ T24] usb usb54-port1: unable to enumerate USB device [ 1030.223752][ C2] hpet: Lost 1 RTC interrupts [ 1030.402701][ C2] hpet: Lost 1 RTC interrupts [ 1030.492913][T18507] netlink: 'syz.8.3240': attribute type 10 has an invalid length. [ 1030.498555][T18507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1030.504943][T18507] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1030.618354][T18512] FAULT_INJECTION: forcing a failure. [ 1030.618354][T18512] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.641933][T18512] CPU: 0 UID: 0 PID: 18512 Comm: syz.7.3241 Tainted: G L syzkaller #0 PREEMPT(full) [ 1030.641963][T18512] Tainted: [L]=SOFTLOCKUP [ 1030.641970][T18512] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1030.641980][T18512] Call Trace: [ 1030.641986][T18512] [ 1030.641994][T18512] dump_stack_lvl+0x100/0x190 [ 1030.642020][T18512] should_fail_ex.cold+0x5/0xa [ 1030.642048][T18512] should_failslab+0xc2/0x120 [ 1030.642073][T18512] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290 [ 1030.642094][T18512] __kmalloc_noprof+0xf6/0x9c0 [ 1030.642111][T18512] ? unwind_get_return_address+0x59/0xa0 [ 1030.642133][T18512] ? arch_stack_walk+0xa6/0xf0 [ 1030.642158][T18512] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290 [ 1030.642178][T18512] genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290 [ 1030.642203][T18512] genl_family_rcv_msg_doit+0xc7/0x300 [ 1030.642225][T18512] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1030.642244][T18512] ? genl_get_cmd+0x3ef/0x720 [ 1030.642268][T18512] ? bpf_lsm_capable+0x9/0x10 [ 1030.642283][T18512] ? security_capable+0x80/0x260 [ 1030.642305][T18512] ? ns_capable+0xd2/0xf0 [ 1030.642326][T18512] genl_rcv_msg+0x560/0x800 [ 1030.642348][T18512] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1030.642365][T18512] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1030.642386][T18512] ? __pfx_nl80211_set_interface+0x10/0x10 [ 1030.642408][T18512] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1030.642430][T18512] ? __lock_acquire+0x4a5/0x2630 [ 1030.655536][T18512] netlink_rcv_skb+0x159/0x420 [ 1030.655568][T18512] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1030.655587][T18512] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1030.655622][T18512] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1030.655650][T18512] genl_rcv+0x28/0x40 [ 1030.655665][T18512] netlink_unicast+0x5aa/0x870 [ 1030.655694][T18512] ? __pfx_netlink_unicast+0x10/0x10 [ 1030.655728][T18512] netlink_sendmsg+0x8b0/0xda0 [ 1030.655764][T18512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1030.655792][T18512] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1030.655818][T18512] ____sys_sendmsg+0xa54/0xc30 [ 1030.655840][T18512] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1030.655868][T18512] ___sys_sendmsg+0x190/0x1e0 [ 1030.655890][T18512] ? __pfx____sys_sendmsg+0x10/0x10 [ 1030.655938][T18512] __sys_sendmsg+0x170/0x220 [ 1030.655961][T18512] ? __pfx___sys_sendmsg+0x10/0x10 [ 1030.655987][T18512] ? __pfx_ksys_write+0x10/0x10 [ 1030.656010][T18512] __do_fast_syscall_32+0xde/0x660 [ 1030.656032][T18512] do_fast_syscall_32+0x32/0x70 [ 1030.656052][T18512] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1030.656072][T18512] RIP: 0023:0xf747d579 [ 1030.656085][T18512] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 1030.656101][T18512] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1030.656118][T18512] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 1030.656128][T18512] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1030.656137][T18512] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1030.656147][T18512] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1030.656157][T18512] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1030.656179][T18512] [ 1030.871767][ C2] hpet: Lost 1 RTC interrupts [ 1030.902823][ C2] hpet: Lost 1 RTC interrupts [ 1030.930066][ C2] hpet: Lost 1 RTC interrupts [ 1030.951288][ T40] audit: type=1326 audit(1769522442.504:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18513 comm="syz.8.3242" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73ad579 code=0x0 [ 1031.055005][T18516] netlink: 'syz.8.3242': attribute type 5 has an invalid length. [ 1031.106366][T18516] netlink: 'syz.8.3242': attribute type 1 has an invalid length. [ 1031.132039][T18516] netlink: 224 bytes leftover after parsing attributes in process `syz.8.3242'. [ 1031.947674][ C2] hpet: Lost 1 RTC interrupts [ 1031.963189][ T5741] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 1032.107777][ T5741] usb 12-1: device descriptor read/64, error -71 [ 1032.166116][T18533] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1032.175731][T18533] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1032.180083][T18533] vhci_hcd vhci_hcd.0: Device attached [ 1032.200722][T18533] random: crng reseeded on system resumption [ 1032.412318][ T5741] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 1032.487897][ T24] usb 48-1: SetAddress Request (5) to port 0 [ 1032.511246][ T24] usb 48-1: new SuperSpeed USB device number 5 using vhci_hcd [ 1032.568086][T18534] vhci_hcd: connection closed [ 1032.568846][ T74] vhci_hcd vhci_hcd.5: stop threads [ 1032.574077][ T74] vhci_hcd vhci_hcd.5: release socket [ 1032.577698][ T74] vhci_hcd vhci_hcd.5: disconnect device [ 1032.594704][ T24] usb 48-1: enqueue for inactive port 0 [ 1032.622889][ T5741] usb 12-1: device descriptor read/64, error -71 [ 1032.808948][ T5741] usb usb12-port1: attempt power cycle [ 1032.983723][ T24] usb usb48-port1: attempt power cycle [ 1033.145129][ T5741] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 1033.165241][ T5741] usb 12-1: device descriptor read/8, error -71 [ 1033.494273][ T5741] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 1033.564254][ T24] usb usb48-port1: unable to enumerate USB device [ 1033.656091][ T5741] usb 12-1: device descriptor read/8, error -71 [ 1033.763990][ T5741] usb usb12-port1: unable to enumerate USB device [ 1034.043645][ T24] usb 10-1: new high-speed USB device number 104 using dummy_hcd [ 1034.205618][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 1034.255328][ T24] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1034.261322][ T24] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1034.284238][ T24] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1034.292274][ T24] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1034.302470][ T24] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1034.331693][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.407369][T18556] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3254'. [ 1034.411911][ C2] hpet_rtc_timer_reinit: 6 callbacks suppressed [ 1034.411929][ C2] hpet: Lost 1 RTC interrupts [ 1034.575461][ T24] usb 10-1: GET_CAPABILITIES returned 0 [ 1034.579303][ T24] usbtmc 10-1:16.0: can't read capabilities [ 1034.897081][ C2] hpet: Lost 1 RTC interrupts [ 1035.083749][ C2] hpet: Lost 1 RTC interrupts [ 1035.215062][T18564] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1035.217862][T18564] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1035.429245][ C2] hpet: Lost 1 RTC interrupts [ 1035.540691][ C2] hpet: Lost 1 RTC interrupts [ 1035.559263][T18564] vhci_hcd vhci_hcd.0: Device attached [ 1035.647647][ T7518] usb 48-1: SetAddress Request (9) to port 0 [ 1035.650448][ T7518] usb 48-1: new SuperSpeed USB device number 9 using vhci_hcd [ 1036.036621][ C2] hpet: Lost 1 RTC interrupts [ 1036.077309][ C2] hpet: Lost 1 RTC interrupts [ 1036.244301][ C2] hpet: Lost 1 RTC interrupts [ 1036.273781][ C2] hpet: Lost 1 RTC interrupts [ 1036.515751][T18583] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1036.519413][T18583] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1036.599340][ C2] hpet: Lost 1 RTC interrupts [ 1036.608808][T18586] random: crng reseeded on system resumption [ 1036.612623][T18583] vhci_hcd vhci_hcd.0: Device attached [ 1036.789452][ T84] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 1036.919780][T16821] usb 52-1: SetAddress Request (106) to port 0 [ 1036.923447][T16821] usb 52-1: new SuperSpeed USB device number 106 using vhci_hcd [ 1037.016104][T18584] vhci_hcd: connection reset by peer [ 1037.018894][T12585] vhci_hcd vhci_hcd.7: stop threads [ 1037.026054][T12585] vhci_hcd vhci_hcd.7: release socket [ 1037.028018][T12585] vhci_hcd vhci_hcd.7: disconnect device [ 1037.123644][T18565] vhci_hcd: connection reset by peer [ 1037.128831][ T1148] vhci_hcd vhci_hcd.5: stop threads [ 1037.132013][ T1148] vhci_hcd vhci_hcd.5: release socket [ 1037.134555][ T1148] vhci_hcd vhci_hcd.5: disconnect device [ 1037.201386][ T6035] usb 10-1: USB disconnect, device number 104 [ 1037.988353][ T6035] usb 13-1: new high-speed USB device number 110 using dummy_hcd [ 1038.153532][ T6035] usb 13-1: Using ep0 maxpacket: 8 [ 1038.162710][ T6035] usb 13-1: config index 0 descriptor too short (expected 301, got 45) [ 1038.182080][ T6035] usb 13-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.189457][ T6035] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1038.198045][ T6035] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.419726][ C2] hpet_rtc_timer_reinit: 14 callbacks suppressed [ 1039.419744][ C2] hpet: Lost 1 RTC interrupts [ 1039.442849][ C2] hpet: Lost 1 RTC interrupts [ 1039.493498][ T1148] bridge_slave_1: left allmulticast mode [ 1039.496911][ T1148] bridge_slave_1: left promiscuous mode [ 1039.514456][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.599753][ C2] hpet: Lost 1 RTC interrupts [ 1039.679413][ T1148] bridge_slave_0: left allmulticast mode [ 1039.681642][ T1148] bridge_slave_0: left promiscuous mode [ 1039.684107][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.727416][ C2] hpet: Lost 1 RTC interrupts [ 1039.859619][ C2] hpet: Lost 1 RTC interrupts [ 1039.900344][ C2] hpet: Lost 2 RTC interrupts [ 1039.991413][T18624] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1040.119668][ C2] hpet: Lost 1 RTC interrupts [ 1040.241586][ C2] hpet: Lost 1 RTC interrupts [ 1040.395822][ C2] hpet: Lost 1 RTC interrupts [ 1040.539855][ C2] hpet: Lost 1 RTC interrupts [ 1040.729657][ T7518] usb 48-1: device descriptor read/8, error -110 [ 1040.784118][T18444] usb 13-1: USB disconnect, device number 110 [ 1041.150021][ T7518] usb usb48-port1: attempt power cycle [ 1041.187899][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1041.289423][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1041.314298][ T1148] bond0 (unregistering): Released all slaves [ 1041.351980][ T1148] bond1 (unregistering): Released all slaves [ 1041.451269][ T1148] bond2 (unregistering): Released all slaves [ 1041.483433][ T1148] bond3 (unregistering): Released all slaves [ 1041.780613][ T7518] usb usb48-port1: unable to enumerate USB device [ 1041.933934][T18653] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1042.015739][T16821] usb 52-1: device descriptor read/8, error -110 [ 1042.295033][ T7518] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 1042.436653][T16821] usb usb52-port1: attempt power cycle [ 1042.479024][ T7518] usb 14-1: Using ep0 maxpacket: 32 [ 1042.494864][ T7518] usb 14-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.517489][ T7518] usb 14-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1042.609066][ T7518] usb 14-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1042.702272][ T7518] usb 14-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1042.714770][ T7518] usb 14-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1042.729718][ T7518] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.743749][ T7518] usb 14-1: Product: syz [ 1042.765392][ T7518] usb 14-1: Manufacturer: syz [ 1042.772774][ T7518] usb 14-1: SerialNumber: syz [ 1042.805757][ C0] imon 14-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1042.812247][ T7518] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:155.0/input/input248 [ 1043.020972][ T7518] imon 14-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1043.027995][T16821] usb usb52-port1: unable to enumerate USB device [ 1043.030683][ T1148] hsr_slave_0: left promiscuous mode [ 1043.031974][ T7518] (id 0x00) [ 1043.091043][ T1148] hsr_slave_1: left promiscuous mode [ 1043.094789][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1043.101471][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1043.231279][ T7518] rc_core: IR keymap rc-imon-pad not found [ 1043.234297][ T7518] Registered IR keymap rc-empty [ 1043.239873][ T7518] imon 14-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1043.272476][ T7518] imon 14-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1043.356478][ T7518] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:155.0/rc/rc0 [ 1043.408526][ T7518] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:155.0/rc/rc0/input249 [ 1043.473681][ T7518] imon 14-1:155.0: iMON device (15c2:ffdc, intf0) on usb<14:2> initialized [ 1043.512698][ T5741] usb 14-1: USB disconnect, device number 2 [ 1043.562852][T16821] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 1043.754086][T16821] usb 12-1: Using ep0 maxpacket: 8 [ 1043.763910][T16821] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 1043.768743][T16821] usb 12-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1043.774659][T16821] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1043.781769][T16821] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.375830][T18686] 9pnet_virtio: no channels available for device syz [ 1044.492135][ C2] hpet_rtc_timer_reinit: 17 callbacks suppressed [ 1044.492155][ C2] hpet: Lost 1 RTC interrupts [ 1044.975489][ C2] hpet: Lost 1 RTC interrupts [ 1045.355626][ C2] hpet: Lost 1 RTC interrupts [ 1045.357347][ T40] audit: type=1800 audit(1769522456.903:221): pid=18698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3283" name="memory.events" dev="9p" ino=72614241 res=0 errno=0 [ 1045.386781][ T40] audit: type=1804 audit(1769522456.933:222): pid=18698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.3283" name="/newroot/29/file0/memory.events" dev="9p" ino=72614241 res=1 errno=0 [ 1045.653224][ C2] hpet: Lost 1 RTC interrupts [ 1045.867628][ C2] hpet: Lost 1 RTC interrupts [ 1045.968349][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 1046.147599][ C2] hpet: Lost 1 RTC interrupts [ 1046.185045][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 1046.378985][T16821] usb 12-1: USB disconnect, device number 6 [ 1046.727787][ C2] hpet: Lost 2 RTC interrupts [ 1046.775653][ C2] hpet: Lost 1 RTC interrupts [ 1046.835571][T18715] 9pnet_virtio: no channels available for device syz [ 1049.715414][ C2] hpet_rtc_timer_reinit: 21 callbacks suppressed [ 1049.715432][ C2] hpet: Lost 1 RTC interrupts [ 1050.027482][ C2] hpet: Lost 3 RTC interrupts [ 1050.067313][T18743] 9pnet_virtio: no channels available for device syz [ 1050.083593][ C2] hpet: Lost 1 RTC interrupts [ 1050.109968][ T40] audit: type=1804 audit(1769522461.659:226): pid=18739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3293" name="/newroot/224/file0/memory.events" dev="9p" ino=72614241 res=1 errno=0 [ 1050.140196][ T40] audit: type=1800 audit(1769522461.659:227): pid=18739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3293" name="memory.events" dev="9p" ino=72614241 res=0 errno=0 [ 1050.207719][ C2] hpet: Lost 2 RTC interrupts [ 1050.799413][T18748] loop3: detected capacity change from 0 to 128 [ 1050.960540][ C2] hpet: Lost 1 RTC interrupts [ 1051.147494][ C2] hpet: Lost 1 RTC interrupts [ 1051.283331][ C2] hpet: Lost 1 RTC interrupts [ 1051.831538][ C2] hpet: Lost 1 RTC interrupts [ 1052.220435][T18772] overlayfs: overlapping lowerdir path [ 1052.289520][ T846] usb 13-1: new high-speed USB device number 111 using dummy_hcd [ 1052.544394][ T846] usb 13-1: Using ep0 maxpacket: 8 [ 1052.599536][ T846] usb 13-1: config 0 has an invalid interface number: 55 but max is 0 [ 1052.603105][ T846] usb 13-1: config 0 has no interface number 0 [ 1052.605944][ T846] usb 13-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1052.618795][T10644] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 1052.636369][ T846] usb 13-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1052.683453][ T846] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1052.715450][ T846] usb 13-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1052.726807][ T846] usb 13-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1052.779379][ T846] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.795164][ T846] usb 13-1: config 0 descriptor?? [ 1052.804400][ T846] ldusb 13-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1052.873893][T18779] 9pnet_virtio: no channels available for device syz [ 1052.896787][T10644] usb 12-1: Using ep0 maxpacket: 32 [ 1053.138153][T10644] usb 12-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1053.180585][T10644] usb 12-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1053.201528][T10644] usb 12-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1053.212198][T10644] usb 12-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1053.300582][T10644] usb 12-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1053.320616][T10644] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.330092][T10644] usb 12-1: Product: syz [ 1053.337834][T10644] usb 12-1: Manufacturer: syz [ 1053.373983][T18782] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1053.376325][T18782] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1053.379612][T10644] usb 12-1: SerialNumber: syz [ 1053.380319][T18782] vhci_hcd vhci_hcd.0: Device attached [ 1053.404436][T18786] random: crng reseeded on system resumption [ 1053.438973][ C3] imon 12-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1053.443978][T10644] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/input/input250 [ 1053.600469][T18787] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1053.605725][T18787] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1053.616565][T18787] vhci_hcd vhci_hcd.0: Device attached [ 1053.648728][ T5741] usb 48-1: SetAddress Request (13) to port 0 [ 1053.675696][ T5741] usb 48-1: new SuperSpeed USB device number 13 using vhci_hcd [ 1053.696334][T10644] imon 12-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1053.696746][T18784] vhci_hcd: connection closed [ 1053.725953][T18785] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1053.759450][T10644] (id 0x00) [ 1053.782602][ T1148] vhci_hcd vhci_hcd.5: stop threads [ 1053.785028][ T1148] vhci_hcd vhci_hcd.5: release socket [ 1053.787954][ T1148] vhci_hcd vhci_hcd.5: disconnect device [ 1053.909295][T10644] rc_core: IR keymap rc-imon-pad not found [ 1053.913495][T10644] Registered IR keymap rc-empty [ 1053.916378][T10644] imon 12-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1053.922267][T10644] imon 12-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1053.935341][T15585] usb 56-1: SetAddress Request (2) to port 0 [ 1053.940922][T15585] usb 56-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1053.980494][T10644] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/rc/rc0 [ 1053.999029][T10644] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/rc/rc0/input251 [ 1054.044417][T10644] imon 12-1:155.0: iMON device (15c2:ffdc, intf0) on usb<12:7> initialized [ 1054.360779][T12350] usb 12-1: USB disconnect, device number 7 [ 1054.602425][T18788] vhci_hcd: connection reset by peer [ 1054.605888][ T12] vhci_hcd vhci_hcd.9: stop threads [ 1054.608321][ T12] vhci_hcd vhci_hcd.9: release socket [ 1054.650095][ T12] vhci_hcd vhci_hcd.9: disconnect device [ 1054.951558][T10644] usb 13-1: USB disconnect, device number 111 [ 1054.975457][T18770] ldusb 13-1:0.55: Couldn't submit interrupt_in_urb -19 [ 1054.978825][T18772] ldusb 13-1:0.55: Couldn't submit interrupt_in_urb -19 [ 1054.985460][T10644] ldusb 13-1:0.55: LD USB Device #0 now disconnected [ 1055.057237][ C2] hpet_rtc_timer_reinit: 16 callbacks suppressed [ 1055.057257][ C2] hpet: Lost 1 RTC interrupts [ 1055.219508][ T40] audit: type=1326 audit(1769522466.755:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18796 comm="syz.8.3309" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73ad579 code=0x0 [ 1055.243614][ C2] hpet: Lost 1 RTC interrupts [ 1055.770695][ C2] hpet: Lost 1 RTC interrupts [ 1056.035577][ C2] hpet: Lost 1 RTC interrupts [ 1056.179357][ C2] hpet: Lost 2 RTC interrupts [ 1056.282458][T18811] comedi comedi0: Minor 5 could not be opened [ 1056.349312][ C2] hpet: Lost 1 RTC interrupts [ 1056.898903][ C2] hpet: Lost 1 RTC interrupts [ 1056.929017][ C2] hpet: Lost 1 RTC interrupts [ 1057.021796][T18820] 9pnet_virtio: no channels available for device syz [ 1057.145264][T18822] 9pnet_virtio: no channels available for device syz [ 1058.030766][T18830] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3316'. [ 1058.104678][ T40] audit: type=1326 audit(1769522469.643:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18834 comm="syz.7.3319" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf747d579 code=0x0 [ 1058.733341][ T5741] usb 48-1: device descriptor read/8, error -110 [ 1058.982754][T15585] usb 56-1: device descriptor read/8, error -110 [ 1059.179607][T18854] comedi comedi0: Minor 5 could not be opened [ 1059.272066][ T5741] usb usb48-port1: attempt power cycle [ 1059.384035][T15585] usb usb56-port1: attempt power cycle [ 1059.638236][T18855] netlink: 'syz.5.3324': attribute type 5 has an invalid length. [ 1059.688539][T18855] netlink: 'syz.5.3324': attribute type 1 has an invalid length. [ 1059.699573][T18855] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3324'. [ 1059.939818][ T5741] usb usb48-port1: unable to enumerate USB device [ 1060.319450][ C2] hpet_rtc_timer_reinit: 12 callbacks suppressed [ 1060.319474][ C2] hpet: Lost 1 RTC interrupts [ 1060.355421][ C2] hpet: Lost 1 RTC interrupts [ 1060.466354][T15585] usb usb56-port1: unable to enumerate USB device [ 1061.037851][ C2] hpet: Lost 1 RTC interrupts [ 1061.571425][ C2] hpet: Lost 1 RTC interrupts [ 1061.915419][ C2] hpet: Lost 1 RTC interrupts [ 1062.100454][ C2] hpet: Lost 2 RTC interrupts [ 1062.337689][T18862] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1062.342101][T18862] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1062.378826][T18862] vhci_hcd vhci_hcd.0: Device attached [ 1062.687392][ C2] hpet: Lost 1 RTC interrupts [ 1062.692460][T18444] usb 52-1: SetAddress Request (110) to port 0 [ 1062.700296][T18444] usb 52-1: new SuperSpeed USB device number 110 using vhci_hcd [ 1062.729852][ C2] hpet: Lost 1 RTC interrupts [ 1062.919539][T18862] random: crng reseeded on system resumption [ 1063.107491][ T40] audit: type=1326 audit(1769522474.649:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18866 comm="syz.8.3326" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73ad579 code=0x0 [ 1063.275874][T18864] vhci_hcd: connection reset by peer [ 1063.280354][ T1148] vhci_hcd vhci_hcd.7: stop threads [ 1063.283577][ T1148] vhci_hcd vhci_hcd.7: release socket [ 1063.293371][ T1148] vhci_hcd vhci_hcd.7: disconnect device [ 1063.310104][T18869] netlink: 'syz.8.3326': attribute type 5 has an invalid length. [ 1063.321344][T18869] netlink: 'syz.8.3326': attribute type 1 has an invalid length. [ 1063.368659][T18869] netlink: 224 bytes leftover after parsing attributes in process `syz.8.3326'. [ 1063.849147][ C2] hpet: Lost 1 RTC interrupts [ 1064.076592][T18880] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3329'. [ 1064.851206][T18896] comedi comedi0: Minor 5 could not be opened [ 1065.550999][ C2] hpet_rtc_timer_reinit: 4 callbacks suppressed [ 1065.551026][ C2] hpet: Lost 1 RTC interrupts [ 1065.571191][ C2] hpet: Lost 1 RTC interrupts [ 1065.674513][ C2] hpet: Lost 1 RTC interrupts [ 1065.807365][ C2] hpet: Lost 1 RTC interrupts [ 1065.834106][ C2] hpet: Lost 1 RTC interrupts [ 1065.864098][ C2] hpet: Lost 1 RTC interrupts [ 1066.041520][ C2] hpet: Lost 1 RTC interrupts [ 1066.147355][ C2] hpet: Lost 1 RTC interrupts [ 1066.375684][ C2] hpet: Lost 3 RTC interrupts [ 1066.390785][T16814] Bluetooth: hci0: ISO packet too small [ 1066.848003][ C2] hpet: Lost 1 RTC interrupts [ 1067.142805][T18924] FAULT_INJECTION: forcing a failure. [ 1067.142805][T18924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1067.149782][T18924] CPU: 2 UID: 0 PID: 18924 Comm: syz.9.3340 Tainted: G L syzkaller #0 PREEMPT(full) [ 1067.149812][T18924] Tainted: [L]=SOFTLOCKUP [ 1067.149818][T18924] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1067.149828][T18924] Call Trace: [ 1067.149834][T18924] [ 1067.149842][T18924] dump_stack_lvl+0x100/0x190 [ 1067.149868][T18924] should_fail_ex.cold+0x5/0xa [ 1067.149896][T18924] _copy_to_user+0x32/0xd0 [ 1067.149925][T18924] simple_read_from_buffer+0xcb/0x170 [ 1067.149946][T18924] proc_fail_nth_read+0x1af/0x230 [ 1067.149968][T18924] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1067.149990][T18924] ? rw_verify_area+0xce/0x6d0 [ 1067.150006][T18924] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1067.150026][T18924] vfs_read+0x1e4/0xb30 [ 1067.150047][T18924] ? __pfx_vfs_read+0x10/0x10 [ 1067.150063][T18924] ? find_held_lock+0x2b/0x80 [ 1067.150082][T18924] ? __fget_files+0x215/0x3d0 [ 1067.150104][T18924] ? __fget_files+0x21f/0x3d0 [ 1067.150129][T18924] ksys_read+0x12a/0x250 [ 1067.150148][T18924] ? __pfx_ksys_read+0x10/0x10 [ 1067.150165][T18924] ? fput+0x79/0x100 [ 1067.150191][T18924] do_int80_emulation+0x101/0x470 [ 1067.150217][T18924] asm_int80_emulation+0x1a/0x20 [ 1067.150234][T18924] RIP: 0023:0xf713572b [ 1067.150247][T18924] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1067.150264][T18924] RSP: 002b:00000000f53f64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1067.150281][T18924] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53f65d0 [ 1067.150292][T18924] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1067.150301][T18924] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1067.150311][T18924] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1067.150321][T18924] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1067.150344][T18924] [ 1067.605022][T18934] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3342'. [ 1067.652185][T18934] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1067.711239][T18934] bond1: (slave ip6tnl1): refused to change device type [ 1067.759185][T18937] input: syz0 as /devices/virtual/input/input252 [ 1067.779668][T18444] usb 52-1: device descriptor read/8, error -110 [ 1068.200600][T18444] usb usb52-port1: attempt power cycle [ 1068.312503][T18945] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1068.874802][ T24] usb 13-1: new high-speed USB device number 112 using dummy_hcd [ 1069.086056][ T24] usb 13-1: Using ep0 maxpacket: 32 [ 1069.113344][T18444] usb usb52-port1: unable to enumerate USB device [ 1069.150807][ T24] usb 13-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.169259][ T24] usb 13-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1069.251020][ T24] usb 13-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1069.271026][ T24] usb 13-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1069.307461][ T24] usb 13-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1069.311292][ T24] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.314469][ T24] usb 13-1: Product: syz [ 1069.316400][ T24] usb 13-1: Manufacturer: syz [ 1069.319320][ T24] usb 13-1: SerialNumber: syz [ 1069.379181][ C2] imon 13-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1069.383469][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/input/input253 [ 1069.668004][ T24] imon 13-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1069.691258][ T24] (id 0x00) [ 1069.820860][ T24] rc_core: IR keymap rc-imon-pad not found [ 1069.839600][ T24] Registered IR keymap rc-empty [ 1069.909091][ T24] imon 13-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1069.922414][ T24] imon 13-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1069.969744][ T24] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/rc/rc0 [ 1070.065336][ T24] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/rc/rc0/input254 [ 1070.067579][T18972] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3350'. [ 1070.073324][ T24] imon 13-1:155.0: iMON device (15c2:ffdc, intf0) on usb<13:112> initialized [ 1070.158360][T15585] usb 13-1: USB disconnect, device number 112 [ 1070.165008][T18971] netlink: 'syz.7.3354': attribute type 5 has an invalid length. [ 1070.229572][T18978] netlink: 'syz.7.3354': attribute type 1 has an invalid length. [ 1070.233032][T18978] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3354'. [ 1070.747404][ C2] hpet_rtc_timer_reinit: 12 callbacks suppressed [ 1070.747422][ C2] hpet: Lost 1 RTC interrupts [ 1070.771680][ C2] hpet: Lost 1 RTC interrupts [ 1070.818728][ C2] hpet: Lost 1 RTC interrupts [ 1071.022057][ C2] hpet: Lost 1 RTC interrupts [ 1071.115501][ C2] hpet: Lost 2 RTC interrupts [ 1071.383294][ C2] hpet: Lost 1 RTC interrupts [ 1071.428837][ C2] hpet: Lost 1 RTC interrupts [ 1072.495420][ C2] hpet: Lost 1 RTC interrupts [ 1072.539280][ C2] hpet: Lost 1 RTC interrupts [ 1072.639384][ C2] hpet: Lost 2 RTC interrupts [ 1073.234065][T19003] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3363'. [ 1074.034847][T19022] syzkaller0: entered promiscuous mode [ 1074.037730][T19022] syzkaller0: entered allmulticast mode [ 1074.211857][T19026] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1074.216974][T19026] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1074.321395][T19026] vhci_hcd vhci_hcd.0: Device attached [ 1074.350747][T19026] random: crng reseeded on system resumption [ 1074.352043][T19025] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1074.503554][T19030] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1074.630213][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1074.633324][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1074.660498][ T7518] usb 48-1: SetAddress Request (17) to port 0 [ 1074.662993][ T7518] usb 48-1: new SuperSpeed USB device number 17 using vhci_hcd [ 1074.666665][T10644] usb 13-1: new high-speed USB device number 113 using dummy_hcd [ 1074.698639][T19027] vhci_hcd: connection reset by peer [ 1074.787276][ T84] vhci_hcd vhci_hcd.5: stop threads [ 1074.789905][ T84] vhci_hcd vhci_hcd.5: release socket [ 1074.792357][ T84] vhci_hcd vhci_hcd.5: disconnect device [ 1074.834455][T10644] usb 13-1: Using ep0 maxpacket: 32 [ 1074.846038][T10644] usb 13-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1074.856383][T10644] usb 13-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1074.867658][T10644] usb 13-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1074.883316][T10644] usb 13-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1074.904020][T10644] usb 13-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1074.908133][T10644] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.914965][T10644] usb 13-1: Product: syz [ 1074.932846][T10644] usb 13-1: Manufacturer: syz [ 1074.944385][T10644] usb 13-1: SerialNumber: syz [ 1074.979908][ C3] imon 13-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1074.993092][T10644] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/input/input255 [ 1075.285839][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1075.291675][T10644] imon 13-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1075.344715][T10644] (id 0x00) [ 1075.444970][T10644] rc_core: IR keymap rc-imon-pad not found [ 1075.447432][T10644] Registered IR keymap rc-empty [ 1075.449549][T10644] imon 13-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1075.475327][T10644] imon 13-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1075.567003][T10644] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/rc/rc0 [ 1075.606731][T10644] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/rc/rc0/input256 [ 1075.625591][T10644] imon 13-1:155.0: iMON device (15c2:ffdc, intf0) on usb<13:113> initialized [ 1075.723396][T19025] imon:display_open: display port is already open [ 1075.731318][T15585] usb 13-1: USB disconnect, device number 113 [ 1075.824148][T19042] 9pnet_virtio: no channels available for device syz [ 1075.835323][ C2] hpet_rtc_timer_reinit: 16 callbacks suppressed [ 1075.835340][ C2] hpet: Lost 1 RTC interrupts [ 1075.895448][ C2] hpet: Lost 1 RTC interrupts [ 1076.199376][ C2] hpet: Lost 1 RTC interrupts [ 1076.383616][ C2] hpet: Lost 2 RTC interrupts [ 1076.471717][ C2] hpet: Lost 1 RTC interrupts [ 1076.979340][ C2] hpet: Lost 1 RTC interrupts [ 1077.204825][ C2] hpet: Lost 1 RTC interrupts [ 1077.319163][T16821] libceph: connect (1)[c::]:6789 error -101 [ 1077.324679][T16821] libceph: mon0 (1)[c::]:6789 connect error [ 1077.381955][T19064] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3379'. [ 1077.397479][T19064] FAULT_INJECTION: forcing a failure. [ 1077.397479][T19064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1077.420839][T19064] CPU: 0 UID: 0 PID: 19064 Comm: syz.9.3379 Tainted: G L syzkaller #0 PREEMPT(full) [ 1077.420868][T19064] Tainted: [L]=SOFTLOCKUP [ 1077.420875][T19064] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1077.420884][T19064] Call Trace: [ 1077.420891][T19064] [ 1077.420897][T19064] dump_stack_lvl+0x100/0x190 [ 1077.420923][T19064] should_fail_ex.cold+0x5/0xa [ 1077.420950][T19064] _copy_from_user+0x2e/0xd0 [ 1077.420976][T19064] move_addr_to_kernel+0x65/0x170 [ 1077.420997][T19064] get_compat_msghdr+0x3ee/0x4b0 [ 1077.421021][T19064] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1077.421051][T19064] ___sys_sendmsg+0x1b6/0x1e0 [ 1077.421072][T19064] ? __pfx____sys_sendmsg+0x10/0x10 [ 1077.421118][T19064] __sys_sendmsg+0x170/0x220 [ 1077.421143][T19064] ? __pfx___sys_sendmsg+0x10/0x10 [ 1077.421175][T19064] ? __pfx_ksys_write+0x10/0x10 [ 1077.421200][T19064] __do_fast_syscall_32+0xde/0x660 [ 1077.421225][T19064] do_fast_syscall_32+0x32/0x70 [ 1077.421246][T19064] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1077.421267][T19064] RIP: 0023:0xf73cd579 [ 1077.421281][T19064] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 1077.421306][T19064] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1077.421324][T19064] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1077.421336][T19064] RDX: 0000000024000052 RSI: 0000000000000000 RDI: 0000000000000000 [ 1077.421346][T19064] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1077.421356][T19064] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1077.421365][T19064] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1077.421388][T19064] [ 1077.629785][T16821] libceph: connect (1)[c::]:6789 error -101 [ 1077.634246][T16821] libceph: mon0 (1)[c::]:6789 connect error [ 1077.780548][T19060] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1077.895452][ C2] hpet: Lost 1 RTC interrupts [ 1078.139145][T16821] libceph: connect (1)[c::]:6789 error -101 [ 1078.142226][T16821] libceph: mon0 (1)[c::]:6789 connect error [ 1078.155305][T19051] ceph: No mds server is up or the cluster is laggy [ 1078.527352][T19077] 9pnet_virtio: no channels available for device syz [ 1078.569548][ C2] hpet: Lost 1 RTC interrupts [ 1078.694378][ T40] audit: type=1326 audit(1769522490.218:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19076 comm="syz.7.3384" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf747d579 code=0x0 [ 1078.765815][T19079] netlink: 'syz.7.3384': attribute type 5 has an invalid length. [ 1078.773371][T19079] netlink: 'syz.7.3384': attribute type 1 has an invalid length. [ 1078.795399][T19079] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3384'. [ 1079.680565][T19089] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 1079.684478][T19089] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1079.689183][T19089] vhci_hcd vhci_hcd.0: Device attached [ 1079.695778][T19089] random: crng reseeded on system resumption [ 1079.707939][ T7518] usb 48-1: device descriptor read/8, error -110 [ 1079.766606][T12585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1079.786040][T12585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1079.821498][T19089] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1079.972638][T19095] vhci_hcd: connection closed [ 1079.997020][ T24] usb 54-1: SetAddress Request (106) to port 0 [ 1080.002050][ T24] usb 54-1: new SuperSpeed USB device number 106 using vhci_hcd [ 1080.015009][ T1199] vhci_hcd vhci_hcd.8: stop threads [ 1080.037793][ T1199] vhci_hcd vhci_hcd.8: release socket [ 1080.040926][ T1199] vhci_hcd vhci_hcd.8: disconnect device [ 1080.144461][ T7518] usb usb48-port1: attempt power cycle [ 1080.780057][ T7518] usb usb48-port1: unable to enumerate USB device [ 1080.911279][ C2] hpet_rtc_timer_reinit: 7 callbacks suppressed [ 1080.911296][ C2] hpet: Lost 1 RTC interrupts [ 1080.991406][ C2] hpet: Lost 2 RTC interrupts [ 1081.195045][T19111] netlink: 'syz.8.3391': attribute type 10 has an invalid length. [ 1081.207628][T19111] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1081.295276][T19103] orangefs_mount: mount request failed with -4 [ 1081.582139][T19116] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3393'. [ 1081.631324][T19120] FAULT_INJECTION: forcing a failure. [ 1081.631324][T19120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1081.657747][T19120] CPU: 0 UID: 0 PID: 19120 Comm: syz.8.3395 Tainted: G L syzkaller #0 PREEMPT(full) [ 1081.657777][T19120] Tainted: [L]=SOFTLOCKUP [ 1081.657784][T19120] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1081.657794][T19120] Call Trace: [ 1081.657800][T19120] [ 1081.657809][T19120] dump_stack_lvl+0x100/0x190 [ 1081.657834][T19120] should_fail_ex.cold+0x5/0xa [ 1081.657861][T19120] _copy_to_user+0x32/0xd0 [ 1081.657886][T19120] simple_read_from_buffer+0xcb/0x170 [ 1081.657907][T19120] proc_fail_nth_read+0x1af/0x230 [ 1081.657927][T19120] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1081.657947][T19120] ? rw_verify_area+0xce/0x6d0 [ 1081.657961][T19120] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1081.657980][T19120] vfs_read+0x1e4/0xb30 [ 1081.658002][T19120] ? __pfx_vfs_read+0x10/0x10 [ 1081.658018][T19120] ? find_held_lock+0x2b/0x80 [ 1081.658036][T19120] ? __fget_files+0x215/0x3d0 [ 1081.658067][T19120] ? __fget_files+0x21f/0x3d0 [ 1081.658090][T19120] ksys_read+0x12a/0x250 [ 1081.658108][T19120] ? __pfx_ksys_read+0x10/0x10 [ 1081.658133][T19120] do_int80_emulation+0x101/0x470 [ 1081.658158][T19120] asm_int80_emulation+0x1a/0x20 [ 1081.658174][T19120] RIP: 0023:0xf711572b [ 1081.658188][T19120] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1081.658203][T19120] RSP: 002b:00000000f53d64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1081.658218][T19120] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53d65d0 [ 1081.658229][T19120] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1081.658238][T19120] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1081.658247][T19120] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1081.658256][T19120] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1081.658279][T19120] [ 1081.659195][ C2] hpet: Lost 1 RTC interrupts [ 1081.849581][ C2] hpet: Lost 12 RTC interrupts [ 1082.239482][ C2] hpet: Lost 1 RTC interrupts [ 1082.349108][ C2] hpet: Lost 2 RTC interrupts [ 1082.442777][ C2] hpet: Lost 1 RTC interrupts [ 1082.475048][ C2] hpet: Lost 1 RTC interrupts [ 1082.515423][ C2] hpet: Lost 1 RTC interrupts [ 1083.215214][ C2] hpet: Lost 1 RTC interrupts [ 1083.907881][T19135] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1083.910851][T19135] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1083.932298][T19135] vhci_hcd vhci_hcd.0: Device attached [ 1083.969486][T19135] random: crng reseeded on system resumption [ 1084.096699][T19135] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1084.146578][T19147] netlink: 'syz.8.3402': attribute type 30 has an invalid length. [ 1084.205781][T19149] netlink: 'syz.8.3402': attribute type 30 has an invalid length. [ 1084.221345][T18444] usb 48-1: SetAddress Request (21) to port 0 [ 1084.227628][T18444] usb 48-1: new SuperSpeed USB device number 21 using vhci_hcd [ 1084.461430][T19142] vhci_hcd: connection reset by peer [ 1084.463720][T12585] vhci_hcd vhci_hcd.5: stop threads [ 1084.465813][T12585] vhci_hcd vhci_hcd.5: release socket [ 1084.473408][T12585] vhci_hcd vhci_hcd.5: disconnect device [ 1085.018264][T19160] binder: 19159:19160 ioctl c0306201 80000300 returned -14 [ 1085.073514][ T24] usb 54-1: device descriptor read/8, error -110 [ 1085.463102][ T24] usb usb54-port1: attempt power cycle [ 1085.917751][T19170] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3405'. [ 1086.055312][ C2] hpet_rtc_timer_reinit: 5 callbacks suppressed [ 1086.055330][ C2] hpet: Lost 1 RTC interrupts [ 1086.061859][ T24] usb usb54-port1: unable to enumerate USB device [ 1086.192027][ C2] hpet: Lost 1 RTC interrupts [ 1086.223287][ C2] hpet: Lost 1 RTC interrupts [ 1086.898732][ C2] hpet: Lost 1 RTC interrupts [ 1087.345507][ T40] audit: type=1326 audit(1769522498.862:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19187 comm="syz.9.3411" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73cd579 code=0x0 [ 1087.431683][T19188] netlink: 'syz.9.3411': attribute type 5 has an invalid length. [ 1087.494832][T19193] netlink: 'syz.9.3411': attribute type 1 has an invalid length. [ 1087.499351][T19193] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3411'. [ 1087.778088][T19198] Mount JFS Failure: -5 [ 1087.781249][T19198] jfs_mount failed w/return code = -5 [ 1087.787287][ C2] hpet: Lost 1 RTC interrupts [ 1088.203912][ T24] usb 13-1: new high-speed USB device number 114 using dummy_hcd [ 1088.364066][ T24] usb 13-1: Using ep0 maxpacket: 8 [ 1088.373180][ T24] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1088.405424][ T24] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1088.433793][ C2] hpet: Lost 1 RTC interrupts [ 1088.453649][ T24] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1088.462066][ T24] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1088.471479][ T24] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1088.496524][ C2] hpet: Lost 1 RTC interrupts [ 1088.500875][ T24] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.515823][T19202] FAULT_INJECTION: forcing a failure. [ 1088.515823][T19202] name failslab, interval 1, probability 0, space 0, times 0 [ 1088.569465][T19202] CPU: 0 UID: 0 PID: 19202 Comm: syz.5.3415 Tainted: G L syzkaller #0 PREEMPT(full) [ 1088.569525][T19202] Tainted: [L]=SOFTLOCKUP [ 1088.569532][T19202] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1088.569543][T19202] Call Trace: [ 1088.569550][T19202] [ 1088.569558][T19202] dump_stack_lvl+0x100/0x190 [ 1088.569586][T19202] should_fail_ex.cold+0x5/0xa [ 1088.569616][T19202] should_failslab+0xc2/0x120 [ 1088.569640][T19202] ? tomoyo_encode2+0xfb/0x3c0 [ 1088.569657][T19202] __kmalloc_noprof+0xf6/0x9c0 [ 1088.569682][T19202] ? tomoyo_encode2+0xfb/0x3c0 [ 1088.569697][T19202] tomoyo_encode2+0xfb/0x3c0 [ 1088.569719][T19202] tomoyo_encode+0x29/0x50 [ 1088.569735][T19202] tomoyo_realpath_from_path+0x18c/0x690 [ 1088.569758][T19202] tomoyo_path_number_perm+0x23c/0x580 [ 1088.569782][T19202] ? tomoyo_path_number_perm+0x22e/0x580 [ 1088.569808][T19202] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1088.569857][T19202] ? find_held_lock+0x2b/0x80 [ 1088.569876][T19202] ? hook_file_ioctl_common+0x146/0x410 [ 1088.569901][T19202] ? __fget_files+0x215/0x3d0 [ 1088.569934][T19202] ? __fget_files+0x21f/0x3d0 [ 1088.569958][T19202] security_file_ioctl_compat+0xd3/0x230 [ 1088.569987][T19202] __ia32_compat_sys_ioctl+0xc2/0x360 [ 1088.570018][T19202] __do_fast_syscall_32+0xde/0x660 [ 1088.570044][T19202] do_fast_syscall_32+0x32/0x70 [ 1088.570066][T19202] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1088.570089][T19202] RIP: 0023:0xf7f36579 [ 1088.570104][T19202] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 1088.570121][T19202] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1088.570139][T19202] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c0306201 [ 1088.570151][T19202] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 1088.570162][T19202] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1088.570172][T19202] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1088.570182][T19202] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1088.570207][T19202] [ 1088.570334][T19202] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1088.743039][ C2] hpet: Lost 1 RTC interrupts [ 1088.760771][T19202] binder: 19201:19202 ioctl c0306201 80000300 returned -14 [ 1088.776220][ C2] hpet: Lost 1 RTC interrupts [ 1088.782316][ T24] usb 13-1: GET_CAPABILITIES returned 0 [ 1088.782351][ T24] usbtmc 13-1:16.0: can't read capabilities [ 1089.030888][T19206] Unsupported ieee802154 address type: 0 [ 1089.322028][T18444] usb 48-1: device descriptor read/8, error -110 [ 1089.742709][T18444] usb usb48-port1: attempt power cycle [ 1090.333452][T18444] usb usb48-port1: unable to enumerate USB device [ 1091.036354][ T29] usb 13-1: USB disconnect, device number 114 [ 1091.477541][T19215] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3418'. [ 1091.508002][ C2] hpet_rtc_timer_reinit: 7 callbacks suppressed [ 1091.508021][ C2] hpet: Lost 1 RTC interrupts [ 1092.186761][T19223] netlink: 'syz.8.3422': attribute type 1 has an invalid length. [ 1092.261361][T19226] comedi comedi0: Minor 5 could not be opened [ 1092.275256][T19221] 9pnet_virtio: no channels available for device syz [ 1092.495069][ C2] hpet: Lost 1 RTC interrupts [ 1092.517002][ T40] audit: type=1800 audit(1769522504.018:240): pid=19225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3420" name="memory.events" dev="9p" ino=72614241 res=0 errno=0 [ 1092.944866][ T40] audit: type=1804 audit(1769522504.458:241): pid=19225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.3420" name="/newroot/257/file0/memory.events" dev="9p" ino=72614241 res=1 errno=0 [ 1092.991190][ C2] hpet: Lost 1 RTC interrupts [ 1093.203188][ C2] hpet: Lost 1 RTC interrupts [ 1093.387612][T10644] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 1093.571141][T10644] usb 12-1: Using ep0 maxpacket: 16 [ 1093.578475][T10644] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.582391][T10644] usb 12-1: config 0 has no interfaces? [ 1093.587349][ C2] hpet: Lost 1 RTC interrupts [ 1093.613067][T10644] usb 12-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1093.621347][T10644] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.655163][T10644] usb 12-1: Product: syz [ 1093.656990][T10644] usb 12-1: Manufacturer: syz [ 1093.660136][T10644] usb 12-1: SerialNumber: syz [ 1093.697142][T10644] usb 12-1: config 0 descriptor?? [ 1093.826894][ C2] hpet: Lost 1 RTC interrupts [ 1093.900826][ C2] hpet: Lost 1 RTC interrupts [ 1094.040600][ C2] hpet: Lost 1 RTC interrupts [ 1094.171624][T10644] usb 12-1: USB disconnect, device number 8 [ 1094.944828][T19255] FAULT_INJECTION: forcing a failure. [ 1094.944828][T19255] name failslab, interval 1, probability 0, space 0, times 0 [ 1094.955029][T19255] CPU: 3 UID: 0 PID: 19255 Comm: syz.5.3429 Tainted: G L syzkaller #0 PREEMPT(full) [ 1094.955057][T19255] Tainted: [L]=SOFTLOCKUP [ 1094.955064][T19255] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1094.955074][T19255] Call Trace: [ 1094.955081][T19255] [ 1094.955087][T19255] dump_stack_lvl+0x100/0x190 [ 1094.955113][T19255] should_fail_ex.cold+0x5/0xa [ 1094.955140][T19255] should_failslab+0xc2/0x120 [ 1094.955164][T19255] ? lsm_blob_alloc+0x68/0x90 [ 1094.955183][T19255] __kmalloc_noprof+0xf6/0x9c0 [ 1094.955198][T19255] ? sk_prot_alloc+0x10b/0x2a0 [ 1094.955218][T19255] ? rcu_is_watching+0x12/0xc0 [ 1094.955235][T19255] ? sk_prot_alloc+0x10b/0x2a0 [ 1094.955258][T19255] ? lsm_blob_alloc+0x68/0x90 [ 1094.955276][T19255] lsm_blob_alloc+0x68/0x90 [ 1094.955296][T19255] security_sk_alloc+0x2d/0x290 [ 1094.955320][T19255] sk_prot_alloc+0x12a/0x2a0 [ 1094.955340][T19255] sk_alloc+0x36/0xe80 [ 1094.955363][T19255] bpf_prog_test_run_skb+0x4cd/0x3140 [ 1094.955395][T19255] ? find_held_lock+0x2b/0x80 [ 1094.955412][T19255] ? __fget_files+0x215/0x3d0 [ 1094.955436][T19255] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1094.955464][T19255] ? fput+0x79/0x100 [ 1094.955489][T19255] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1094.955516][T19255] __sys_bpf+0x1e56/0x5050 [ 1094.955540][T19255] ? __pfx___sys_bpf+0x10/0x10 [ 1094.955560][T19255] ? proc_fail_nth_write+0x9f/0x220 [ 1094.955581][T19255] ? find_held_lock+0x2b/0x80 [ 1094.955602][T19255] ? find_held_lock+0x2b/0x80 [ 1094.955621][T19255] ? ksys_write+0x190/0x250 [ 1094.955645][T19255] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1094.955682][T19255] ? fput+0x79/0x100 [ 1094.955704][T19255] ? ksys_write+0x1ac/0x250 [ 1094.955726][T19255] __ia32_sys_bpf+0x79/0xf0 [ 1094.955747][T19255] ? lockdep_hardirqs_on+0x78/0x100 [ 1094.955768][T19255] __do_fast_syscall_32+0xde/0x660 [ 1094.955792][T19255] do_fast_syscall_32+0x32/0x70 [ 1094.955814][T19255] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1094.955836][T19255] RIP: 0023:0xf7f36579 [ 1094.955850][T19255] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 1094.955868][T19255] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 1094.955885][T19255] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000240 [ 1094.955897][T19255] RDX: 000000000000004c RSI: 0000000000000000 RDI: 0000000000000000 [ 1094.955907][T19255] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1094.955916][T19255] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1094.955926][T19255] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1094.955957][T19255] [ 1095.168830][T16821] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 1095.266185][T19259] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 1095.449253][T16821] usb 12-1: Using ep0 maxpacket: 8 [ 1095.529070][T16821] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1095.560850][T16821] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1095.567745][T16821] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1095.582406][T16821] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1095.600766][T16821] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1095.616176][T16821] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.907426][T16821] usb 12-1: GET_CAPABILITIES returned 0 [ 1095.910990][T16821] usbtmc 12-1:16.0: can't read capabilities [ 1096.214186][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1096.233818][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1097.355133][ C2] hpet_rtc_timer_reinit: 16 callbacks suppressed [ 1097.355160][ C2] hpet: Lost 1 RTC interrupts [ 1097.538983][ C2] hpet: Lost 2 RTC interrupts [ 1097.600281][ C2] hpet: Lost 1 RTC interrupts [ 1097.707211][ C2] hpet: Lost 1 RTC interrupts [ 1098.051609][T19292] syzkaller0: create flow: hash 3387769909 index 1 [ 1098.437943][T19292] syzkaller0: delete flow: hash 3387769909 index 1 [ 1098.568411][ C2] hpet: Lost 1 RTC interrupts [ 1098.584486][ T40] audit: type=1800 audit(1769522510.094:242): pid=19295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3442" name="memory.events" dev="9p" ino=72614241 res=0 errno=0 [ 1098.637994][ T40] audit: type=1804 audit(1769522510.144:243): pid=19295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.3442" name="/newroot/82/file0/memory.events" dev="9p" ino=72614241 res=1 errno=0 [ 1098.868644][ C2] hpet: Lost 1 RTC interrupts [ 1099.051216][ C2] hpet: Lost 1 RTC interrupts [ 1099.073954][T15585] usb 12-1: USB disconnect, device number 9 [ 1099.135175][ C2] hpet: Lost 1 RTC interrupts [ 1099.859464][T19304] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1100.142487][T16821] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 1100.351809][T16821] usb 12-1: Using ep0 maxpacket: 32 [ 1100.367005][T16821] usb 12-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.379929][T16821] usb 12-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1100.401782][T16821] usb 12-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1100.409725][T16821] usb 12-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1100.463389][T16821] usb 12-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1100.474414][T16821] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.479621][T16821] usb 12-1: Product: syz [ 1100.489220][T16821] usb 12-1: Manufacturer: syz [ 1100.492712][T16821] usb 12-1: SerialNumber: syz [ 1100.547783][ C0] imon 12-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1100.559051][T16821] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/input/input257 [ 1100.762634][T16821] imon 12-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1100.768521][T16821] (id 0x00) [ 1100.982898][T16821] rc_core: IR keymap rc-imon-pad not found [ 1100.986577][T16821] Registered IR keymap rc-empty [ 1101.000309][T16821] imon 12-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1101.042180][T16821] imon 12-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1101.073733][T16821] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/rc/rc0 [ 1101.114957][T16821] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/rc/rc0/input258 [ 1101.179582][T16821] imon 12-1:155.0: iMON device (15c2:ffdc, intf0) on usb<12:10> initialized [ 1101.260221][T19304] imon:display_open: display port is already open [ 1101.264652][T15585] usb 12-1: USB disconnect, device number 10 [ 1102.759281][ C2] hpet_rtc_timer_reinit: 16 callbacks suppressed [ 1102.759302][ C2] hpet: Lost 1 RTC interrupts [ 1102.895338][ C2] hpet: Lost 1 RTC interrupts [ 1103.056479][ C2] hpet: Lost 1 RTC interrupts [ 1103.088681][ C2] hpet: Lost 1 RTC interrupts [ 1103.406276][ C2] hpet: Lost 1 RTC interrupts [ 1103.441420][ C2] hpet: Lost 1 RTC interrupts [ 1103.504400][ C2] hpet: Lost 1 RTC interrupts [ 1103.835174][ C2] hpet: Lost 1 RTC interrupts [ 1103.975926][ C2] hpet: Lost 1 RTC interrupts [ 1104.131248][ C2] hpet: Lost 3 RTC interrupts [ 1105.629761][T19320] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 1105.632348][T19320] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1105.641192][T19320] vhci_hcd vhci_hcd.0: Device attached [ 1105.724760][T19324] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1105.897352][T19322] vhci_hcd: connection closed [ 1105.901256][ T84] vhci_hcd vhci_hcd.9: stop threads [ 1105.905862][ T84] vhci_hcd vhci_hcd.9: release socket [ 1105.919830][ T84] vhci_hcd vhci_hcd.9: disconnect device [ 1105.945164][T10644] usb 56-1: enqueue for inactive port 0 [ 1106.307209][T19315] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3446'. [ 1106.452428][T10644] usb usb56-port1: attempt power cycle [ 1106.892576][T19341] 9p: Bad value for 'version' [ 1107.021811][T19343] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3455'. [ 1107.100795][T10644] usb usb56-port1: unable to enumerate USB device [ 1107.118589][ T846] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 1107.232797][T19333] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3450'. [ 1107.240065][T19333] syz.7.3450: vmalloc error: size 2147483264, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1107.251018][T19333] CPU: 3 UID: 0 PID: 19333 Comm: syz.7.3450 Tainted: G L syzkaller #0 PREEMPT(full) [ 1107.251065][T19333] Tainted: [L]=SOFTLOCKUP [ 1107.251072][T19333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1107.251084][T19333] Call Trace: [ 1107.251091][T19333] [ 1107.251099][T19333] dump_stack_lvl+0x100/0x190 [ 1107.251124][T19333] warn_alloc.cold+0x95/0x1c1 [ 1107.251155][T19333] ? __pfx_warn_alloc+0x10/0x10 [ 1107.251183][T19333] ? __lock_acquire+0x4a5/0x2630 [ 1107.251207][T19333] ? lock_acquire+0x17c/0x330 [ 1107.251231][T19333] ? find_held_lock+0x2b/0x80 [ 1107.251248][T19333] ? finish_task_switch.isra.0+0x1ff/0xb70 [ 1107.251274][T19333] __vmalloc_node_range_noprof+0x1252/0x1530 [ 1107.251295][T19333] ? find_held_lock+0x2b/0x80 [ 1107.251312][T19333] ? __might_fault+0xc5/0x140 [ 1107.251332][T19333] ? __might_fault+0xc5/0x140 [ 1107.251350][T19333] ? compat_do_replace+0x1b1/0x7a0 [ 1107.251373][T19333] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1107.251391][T19333] ? compat_copy_ebt_replace_from_user+0x299/0x3b0 [ 1107.251411][T19333] ? __pfx_compat_copy_ebt_replace_from_user+0x10/0x10 [ 1107.251430][T19333] ? __lock_acquire+0x4a5/0x2630 [ 1107.251458][T19333] ? compat_do_replace+0x1b1/0x7a0 [ 1107.251475][T19333] __vmalloc_node_noprof+0xad/0xf0 [ 1107.251493][T19333] ? compat_do_replace+0x1b1/0x7a0 [ 1107.251513][T19333] compat_do_replace+0x1b1/0x7a0 [ 1107.251532][T19333] ? lock_acquire+0x17c/0x330 [ 1107.251555][T19333] ? __pfx_compat_do_replace+0x10/0x10 [ 1107.251577][T19333] ? rcu_is_watching+0x12/0xc0 [ 1107.251605][T19333] ? bpf_lsm_capable+0x9/0x10 [ 1107.251620][T19333] ? security_capable+0x80/0x260 [ 1107.251646][T19333] do_ebt_set_ctl+0x2f5/0x3f0 [ 1107.251666][T19333] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 1107.251693][T19333] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1107.251715][T19333] nf_setsockopt+0x8d/0xf0 [ 1107.251735][T19333] ip_setsockopt+0xcb/0xf0 [ 1107.251757][T19333] raw_setsockopt+0x60/0x1b0 [ 1107.251776][T19333] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1107.251807][T19333] do_sock_setsockopt+0xf3/0x1d0 [ 1107.251830][T19333] __sys_setsockopt+0x119/0x190 [ 1107.251855][T19333] __ia32_sys_setsockopt+0xbc/0x160 [ 1107.251876][T19333] ? __do_fast_syscall_32+0x97/0x660 [ 1107.251897][T19333] ? lockdep_hardirqs_on+0x78/0x100 [ 1107.251917][T19333] __do_fast_syscall_32+0xde/0x660 [ 1107.251940][T19333] do_fast_syscall_32+0x32/0x70 [ 1107.251961][T19333] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1107.251984][T19333] RIP: 0023:0xf747d579 [ 1107.251999][T19333] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 1107.252017][T19333] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 1107.252035][T19333] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 0000000000000000 [ 1107.252046][T19333] RDX: 0000000000000080 RSI: 0000000080000000 RDI: 00000000000000e0 [ 1107.252058][T19333] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1107.252067][T19333] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1107.252078][T19333] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1107.252100][T19333] [ 1107.252137][T19333] Mem-Info: [ 1107.344305][T19348] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1107.433523][ T846] usb 14-1: Using ep0 maxpacket: 8 [ 1107.444357][T19348] overlayfs: overlapping lowerdir path [ 1107.482141][T19333] active_anon:5292 inactive_anon:6652 isolated_anon:0 [ 1107.482141][T19333] active_file:2112 inactive_file:19568 isolated_file:0 [ 1107.482141][T19333] unevictable:1768 dirty:199 writeback:0 [ 1107.482141][T19333] slab_reclaimable:7143 slab_unreclaimable:57203 [ 1107.482141][T19333] mapped:26975 shmem:5252 pagetables:2227 [ 1107.482141][T19333] sec_pagetables:325 bounce:0 [ 1107.482141][T19333] kernel_misc_reclaimable:0 [ 1107.482141][T19333] free:63581 free_pcp:11411 free_cma:0 [ 1107.524607][ T846] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1107.529700][T19333] Node 0 active_anon:496kB inactive_anon:16kB active_file:316kB inactive_file:60kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:108kB dirty:12kB writeback:0kB shmem:4452kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9216kB pagetables:1488kB sec_pagetables:1164kB all_unreclaimable? yes Balloon:0kB [ 1107.531311][ T846] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1107.533329][T19333] Node 1 active_anon:20672kB inactive_anon:26592kB active_file:8132kB inactive_file:78212kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:107792kB dirty:784kB writeback:0kB shmem:16556kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5848kB pagetables:7420kB sec_pagetables:136kB all_unreclaimable? no Balloon:0kB [ 1107.533378][T19333] Node 0 DMA free:2080kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:324kB local_pcp:12kB free_cma:0kB [ 1107.539529][ T846] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1107.539552][ T846] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1107.539582][ T846] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1107.539597][ T846] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.757600][T10644] usb 10-1: new high-speed USB device number 105 using dummy_hcd [ 1107.770301][T19333] lowmem_reserve[]: 0 288 288 288 288 [ 1107.770353][T19333] Node 0 DMA32 free:24620kB boost:8192kB min:21412kB low:24716kB high:28020kB reserved_highatomic:0KB free_highatomic:0KB active_anon:496kB inactive_anon:16kB active_file:316kB inactive_file:60kB unevictable:3536kB writepending:12kB zspages:28kB present:1032196kB managed:295108kB mlocked:0kB bounce:0kB free_pcp:14132kB local_pcp:4104kB free_cma:0kB [ 1107.770412][T19333] lowmem_reserve[]: 0 0 0 0 0 [ 1107.770449][T19333] Node 1 DMA32 free:227560kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20672kB inactive_anon:26592kB active_file:8132kB inactive_file:78212kB unevictable:3536kB writepending:784kB zspages:2448kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:30256kB local_pcp:3404kB free_cma:0kB [ 1107.770501][T19333] lowmem_reserve[]: 0 0 0 0 0 [ 1107.770535][T19333] Node 0 DMA: 2*4kB (UM) 3*8kB (U) 4*16kB (UM) 4*32kB (UM) 3*64kB (UM) 1*128kB (M) 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2080kB [ 1107.770673][T19333] Node 0 DMA32: 685*4kB (UME) 213*8kB (UME) 347*16kB (UME) 209*32kB (UME) 72*64kB (UME) 12*128kB (UME) 3*256kB (UM) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 24620kB [ 1107.771174][T19333] Node 1 DMA32: 2924*4kB (UE) 3117*8kB (UME) 2517*16kB (UME) 729*32kB (UME) 292*64kB (UME) 96*128kB (UME) 42*256kB (UME) 15*512kB (UME) 30*1024kB (UME) 9*2048kB (UM) 7*4096kB (UM) = 227464kB [ 1107.771318][T19333] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1107.771333][T19333] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1107.844271][ T846] usb 14-1: GET_CAPABILITIES returned 0 [ 1107.860401][T19333] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1107.860430][T19333] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1107.860447][T19333] 27345 total pagecache pages [ 1107.860456][T19333] 417 pages in swap cache [ 1107.860465][T19333] Free swap = 119564kB [ 1107.860473][T19333] Total swap = 124996kB [ 1107.860523][T19333] 524155 pages RAM [ 1107.860532][T19333] 0 pages HighMem/MovableOnly [ 1107.860539][T19333] 209485 pages reserved [ 1107.860547][T19333] 0 pages cma reserved [ 1108.138526][ T846] usbtmc 14-1:16.0: can't read capabilities [ 1108.207095][ C2] hpet_rtc_timer_reinit: 19 callbacks suppressed [ 1108.207114][ C2] hpet: Lost 1 RTC interrupts [ 1108.239375][T10644] usb 10-1: Using ep0 maxpacket: 32 [ 1108.246279][T10644] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.255042][T10644] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1108.263182][T10644] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1108.272208][T10644] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1108.283842][T10644] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1108.290054][T10644] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.294304][T10644] usb 10-1: Product: syz [ 1108.318689][T10644] usb 10-1: Manufacturer: syz [ 1108.321692][T10644] usb 10-1: SerialNumber: syz [ 1108.338544][ C3] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1108.345010][T10644] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/input/input259 [ 1108.459048][T19353] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7) [ 1108.461405][T19353] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1108.464759][T19353] vhci_hcd vhci_hcd.0: Device attached [ 1108.633516][T10644] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1108.638475][T19362] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3458'. [ 1108.658556][T10644] (id 0x00) [ 1108.707262][ C2] hpet: Lost 1 RTC interrupts [ 1108.758196][T10644] rc_core: IR keymap rc-imon-pad not found [ 1108.760149][T10644] Registered IR keymap rc-empty [ 1108.761779][T10644] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1108.765049][T10644] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1108.769169][T16821] usb 56-1: SetAddress Request (10) to port 0 [ 1108.802271][T16821] usb 56-1: new SuperSpeed USB device number 10 using vhci_hcd [ 1108.891027][T10644] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/rc/rc0 [ 1108.901642][T10644] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/rc/rc0/input260 [ 1108.931084][T10644] imon 10-1:155.0: iMON device (15c2:ffdc, intf0) on usb<10:105> initialized [ 1109.000185][T19367] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3460'. [ 1109.039394][T18444] usb 10-1: USB disconnect, device number 105 [ 1109.558367][ C2] hpet: Lost 3 RTC interrupts [ 1109.648725][T10644] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 1109.655003][ C2] hpet: Lost 1 RTC interrupts [ 1109.830255][T10644] usb 12-1: Using ep0 maxpacket: 8 [ 1109.858916][ C2] hpet: Lost 1 RTC interrupts [ 1109.883672][T10644] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 1109.886817][T10644] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1109.891670][T10644] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1109.902110][T10644] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1109.907314][T10644] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1109.920303][T10644] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1109.925850][T10644] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1109.927062][ C2] hpet: Lost 1 RTC interrupts [ 1109.954273][T10644] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.959948][T10644] usbtmc 12-1:16.0: probe with driver usbtmc failed with error -22 [ 1109.985679][ C2] hpet: Lost 2 RTC interrupts [ 1110.092897][T19359] vhci_hcd: connection reset by peer [ 1110.109252][T15585] usb 14-1: USB disconnect, device number 3 [ 1110.189765][ T13] vhci_hcd vhci_hcd.9: stop threads [ 1110.192264][ T13] vhci_hcd vhci_hcd.9: release socket [ 1110.194480][ T13] vhci_hcd vhci_hcd.9: disconnect device [ 1110.486777][ C0] ================================================================== [ 1110.492302][ C0] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 [ 1110.496430][ C0] Read of size 1 at addr ffff8880611cb818 by task syz.8.3459/19371 [ 1110.505450][ C0] [ 1110.506367][ C0] CPU: 0 UID: 0 PID: 19371 Comm: syz.8.3459 Tainted: G L syzkaller #0 PREEMPT(full) [ 1110.506389][ C0] Tainted: [L]=SOFTLOCKUP [ 1110.506396][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1110.506406][ C0] Call Trace: [ 1110.506414][ C0] [ 1110.506421][ C0] dump_stack_lvl+0x100/0x190 [ 1110.506445][ C0] print_report+0x156/0x4c9 [ 1110.506466][ C0] ? __virt_addr_valid+0x81/0x620 [ 1110.506485][ C0] ? __phys_addr+0xe8/0x180 [ 1110.506506][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 1110.506521][ C0] kasan_report+0xdf/0x1a0 [ 1110.506542][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 1110.506559][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 1110.506574][ C0] __kasan_check_byte+0x36/0x50 [ 1110.506594][ C0] lock_acquire+0xf5/0x330 [ 1110.506611][ C0] ? do_raw_spin_unlock+0x53/0x1e0 [ 1110.506631][ C0] ? .slowpath+0x9/0x18 [ 1110.506647][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 1110.506663][ C0] ? p9_req_put+0xaf/0x250 [ 1110.506681][ C0] p9_req_put+0xaf/0x250 [ 1110.506701][ C0] req_done+0x1dc/0x2e0 [ 1110.506738][ C0] ? __pfx_req_done+0x10/0x10 [ 1110.506754][ C0] ? debug_object_activate+0x331/0x490 [ 1110.506773][ C0] ? debug_object_activate+0x331/0x490 [ 1110.506790][ C0] ? __pfx_req_done+0x10/0x10 [ 1110.506808][ C0] vring_interrupt+0x33b/0x430 [ 1110.506825][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 1110.506844][ C0] __handle_irq_event_percpu+0x232/0x800 [ 1110.506862][ C0] handle_irq_event+0xab/0x1e0 [ 1110.506877][ C0] handle_edge_irq+0x375/0x970 [ 1110.506901][ C0] __common_interrupt+0xd8/0x2f0 [ 1110.506922][ C0] common_interrupt+0x60/0xe0 [ 1110.506943][ C0] asm_common_interrupt+0x26/0x40 [ 1110.506959][ C0] RIP: 0010:handle_softirqs+0x1ad/0x910 [ 1110.506979][ C0] Code: 20 44 88 74 24 1e 45 89 ee 48 c7 c7 e0 6f 8d 8b e8 f8 e5 ac 09 31 d2 65 66 89 15 d6 a8 1c 12 e8 d9 0a 47 00 fb bb ff ff ff ff <49> c7 c4 c0 c0 20 8e 41 0f bc de 83 c3 01 0f 85 a4 00 00 00 e9 ab [ 1110.506993][ C0] RSP: 0000:ffffc90000007f30 EFLAGS: 00000206 [ 1110.507008][ C0] RAX: 000000000002ee88 RBX: 00000000ffffffff RCX: 0000000000000004 [ 1110.507018][ C0] RDX: 0000000000000000 RSI: ffffffff8dc413ca RDI: ffffffff8bfa32a0 [ 1110.507028][ C0] RBP: 0000000100013bc3 R08: 0000000000000001 R09: 0000000000000000 [ 1110.507038][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 000000000000000a [ 1110.507052][ C0] R13: 0000000000000200 R14: 0000000000000200 R15: 1ffff92000000fed [ 1110.507071][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1110.507090][ C0] __irq_exit_rcu+0xef/0x150 [ 1110.507108][ C0] irq_exit_rcu+0x9/0x30 [ 1110.507123][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1110.507141][ C0] [ 1110.507146][ C0] [ 1110.507152][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1110.507169][ C0] RIP: 0010:__mutex_lock+0x1a2/0x1b90 [ 1110.507186][ C0] Code: f6 48 8d 43 68 31 c9 31 d2 4d 89 e9 48 89 85 88 fe ff ff 48 89 c7 41 b8 01 00 00 00 44 89 e6 ff b5 a8 fe ff ff e8 9e d6 6c f6 21 00 00 00 48 89 df e8 61 d6 6b f6 be 08 00 00 00 48 89 df 48 [ 1110.507201][ C0] RSP: 0000:ffffc9000e1f7668 EFLAGS: 00000296 [ 1110.507212][ C0] RAX: 0000000000000000 RBX: ffff888025df5d10 RCX: 0000000000000000 [ 1110.507221][ C0] RDX: 0000000000000000 RSI: ffffffff8dc1b439 RDI: ffffffff8bfa32a0 [ 1110.507232][ C0] RBP: ffffc9000e1f77f0 R08: 00000000c565a97f R09: 000000000000067a [ 1110.507242][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000000 [ 1110.507251][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 1110.507267][ C0] ? __mutex_lock+0x1a2/0x1b90 [ 1110.507283][ C0] ? __unix_dgram_recvmsg+0x255/0xc30 [ 1110.507301][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1110.507320][ C0] ? __unix_dgram_recvmsg+0x255/0xc30 [ 1110.507337][ C0] ? __unix_dgram_recvmsg+0x75c/0xc30 [ 1110.507351][ C0] ? __unix_dgram_recvmsg+0x75c/0xc30 [ 1110.507369][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1110.507385][ C0] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1110.507405][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1110.507424][ C0] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 1110.507446][ C0] ? __unix_dgram_recvmsg+0x255/0xc30 [ 1110.507462][ C0] __unix_dgram_recvmsg+0x255/0xc30 [ 1110.507481][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 1110.507496][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1110.507515][ C0] ? __perf_event_task_sched_in+0x27a/0xa10 [ 1110.507537][ C0] unix_dgram_recvmsg+0xd0/0x110 [ 1110.507555][ C0] ____sys_recvmsg+0x5f7/0x6b0 [ 1110.507571][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1110.507594][ C0] ___sys_recvmsg+0x16a/0x1a0 [ 1110.507611][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 1110.507627][ C0] ? rcu_is_watching+0x12/0xc0 [ 1110.507643][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1110.507662][ C0] ? __pfx___might_resched+0x10/0x10 [ 1110.507685][ C0] ? do_recvmmsg+0x356/0x760 [ 1110.507700][ C0] do_recvmmsg+0x563/0x760 [ 1110.507719][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 1110.507737][ C0] ? kfree+0x2a9/0x690 [ 1110.507754][ C0] ? sched_setaffinity+0xe0/0x400 [ 1110.507771][ C0] ? __pfx_sched_setaffinity+0x10/0x10 [ 1110.507786][ C0] ? fd_install+0x24f/0x580 [ 1110.507804][ C0] __sys_recvmmsg+0x21f/0x270 [ 1110.507826][ C0] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1110.507850][ C0] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 1110.507873][ C0] ? __do_fast_syscall_32+0x97/0x660 [ 1110.507889][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1110.507906][ C0] __do_fast_syscall_32+0xde/0x660 [ 1110.507927][ C0] do_fast_syscall_32+0x32/0x70 [ 1110.507941][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1110.507963][ C0] RIP: 0023:0xf73ad579 [ 1110.507976][ C0] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 1110.507988][ C0] RSP: 002b:00000000f53b550c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 1110.508001][ C0] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 1110.508012][ C0] RDX: 00000000080002c1 RSI: 0000000000000002 RDI: 0000000000000000 [ 1110.508020][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1110.508028][ C0] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1110.508037][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1110.508057][ C0] [ 1110.508065][ C0] [ 1110.542897][ C2] hpet: Lost 1 RTC interrupts [ 1110.563510][ C0] Allocated by task 19378: [ 1110.563529][ C0] kasan_save_stack+0x30/0x50 [ 1110.563555][ C0] kasan_save_track+0x14/0x30 [ 1110.563572][ C0] __kasan_kmalloc+0xaa/0xb0 [ 1110.563589][ C0] p9_client_create+0xaf/0xd40 [ 1110.563610][ C0] v9fs_session_init+0x40/0xce0 [ 1110.563633][ C0] v9fs_get_tree+0xb8/0xb50 [ 1110.563648][ C0] vfs_get_tree+0x92/0x320 [ 1110.563669][ C0] path_mount+0x7d0/0x23c0 [ 1110.563689][ C0] __ia32_sys_mount+0x292/0x310 [ 1110.563707][ C0] __do_fast_syscall_32+0xde/0x660 [ 1110.563725][ C0] do_fast_syscall_32+0x32/0x70 [ 1110.563743][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1110.563762][ C0] [ 1110.563766][ C0] Freed by task 19378: [ 1110.563774][ C0] kasan_save_stack+0x30/0x50 [ 1110.563792][ C0] kasan_save_track+0x14/0x30 [ 1110.563816][ C0] kasan_save_free_info+0x3b/0x70 [ 1110.563830][ C0] __kasan_slab_free+0x5f/0x80 [ 1110.563849][ C0] kfree+0x1c7/0x690 [ 1110.563863][ C0] p9_client_create+0x72d/0xd40 [ 1110.563882][ C0] v9fs_session_init+0x40/0xce0 [ 1110.563904][ C0] v9fs_get_tree+0xb8/0xb50 [ 1110.563918][ C0] vfs_get_tree+0x92/0x320 [ 1110.563938][ C0] path_mount+0x7d0/0x23c0 [ 1110.563956][ C0] __ia32_sys_mount+0x292/0x310 [ 1110.563975][ C0] __do_fast_syscall_32+0xde/0x660 [ 1110.563991][ C0] do_fast_syscall_32+0x32/0x70 [ 1110.564009][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1110.564027][ C0] [ 1110.564031][ C0] The buggy address belongs to the object at ffff8880611cb800 [ 1110.564031][ C0] which belongs to the cache kmalloc-512 of size 512 [ 1110.564044][ C0] The buggy address is located 24 bytes inside of [ 1110.564044][ C0] freed 512-byte region [ffff8880611cb800, ffff8880611cba00) [ 1110.564059][ C0] [ 1110.564064][ C0] The buggy address belongs to the physical page: [ 1110.564073][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x611c8 [ 1110.564088][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1110.564102][ C0] ksm flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 1110.564117][ C0] page_type: f5(slab) [ 1110.564132][ C0] raw: 04fff00000000040 ffff88801b842c80 ffffea0000967200 dead000000000003 [ 1110.564147][ C0] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 1110.564162][ C0] head: 04fff00000000040 ffff88801b842c80 ffffea0000967200 dead000000000003 [ 1110.564177][ C0] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 1110.564192][ C0] head: 04fff00000000002 ffffea0001847201 00000000ffffffff 00000000ffffffff [ 1110.564205][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 1110.564212][ C0] page dumped because: kasan: bad access detected [ 1110.564219][ C0] page_owner tracks the page as allocated [ 1110.564223][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5955, tgid 5955 (syz-executor), ts 119499456738, free_ts 119492596131 [ 1110.564246][ C0] post_alloc_hook+0x1e1/0x250 [ 1110.564259][ C0] get_page_from_freelist+0xe3d/0x2e10 [ 1110.564275][ C0] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 1110.564290][ C0] alloc_pages_mpol+0x1fb/0x550 [ 1110.564309][ C0] new_slab+0x2c4/0x440 [ 1110.564322][ C0] ___slab_alloc+0xda3/0x1ca0 [ 1110.564335][ C0] __slab_alloc.isra.0+0x63/0x110 [ 1110.564349][ C0] __kmalloc_cache_noprof+0x531/0x810 [ 1110.564365][ C0] inetdev_init+0x66/0x570 [ 1110.564379][ C0] inetdev_event+0x7fa/0x17f0 [ 1110.564392][ C0] notifier_call_chain+0x99/0x3b0 [ 1110.564412][ C0] call_netdevice_notifiers_info+0xbe/0x110 [ 1110.564429][ C0] register_netdevice+0x16b9/0x21d0 [ 1110.564451][ C0] team_newlink+0xb4/0x190 [ 1110.564471][ C0] rtnl_newlink+0x1494/0x2380 [ 1110.564493][ C0] rtnetlink_rcv_msg+0x95e/0xe90 [ 1110.564514][ C0] page last free pid 5955 tgid 5955 stack trace: [ 1110.564523][ C0] __free_frozen_pages+0x822/0x1130 [ 1110.564537][ C0] stack_depot_save_flags+0x412/0x9c0 [ 1110.564559][ C0] kasan_save_stack+0x3f/0x50 [ 1110.564576][ C0] kasan_save_track+0x14/0x30 [ 1110.564594][ C0] __kasan_kmalloc+0xaa/0xb0 [ 1110.564611][ C0] register_netdevice+0x50c/0x21d0 [ 1110.564633][ C0] team_newlink+0xb4/0x190 [ 1110.564651][ C0] rtnl_newlink+0x1494/0x2380 [ 1110.564671][ C0] rtnetlink_rcv_msg+0x95e/0xe90 [ 1110.564717][ C0] netlink_rcv_skb+0x159/0x420 [ 1110.564740][ C0] netlink_unicast+0x5aa/0x870 [ 1110.564761][ C0] netlink_sendmsg+0x8b0/0xda0 [ 1110.564782][ C0] __sys_sendto+0x4aa/0x520 [ 1110.564806][ C0] __ia32_compat_sys_socketcall+0x59a/0x770 [ 1110.564828][ C0] do_int80_emulation+0x101/0x470 [ 1110.564846][ C0] asm_int80_emulation+0x1a/0x20 [ 1110.564862][ C0] [ 1110.564866][ C0] Memory state around the buggy address: [ 1110.564875][ C0] ffff8880611cb700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1110.564887][ C0] ffff8880611cb780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1110.564899][ C0] >ffff8880611cb800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1110.564908][ C0] ^ [ 1110.564917][ C0] ffff8880611cb880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1110.564928][ C0] ffff8880611cb900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1110.564938][ C0] ================================================================== [ 1110.564947][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1110.564962][ C0] CPU: 0 UID: 0 PID: 19371 Comm: syz.8.3459 Tainted: G L syzkaller #0 PREEMPT(full) [ 1110.565047][ C0] Tainted: [L]=SOFTLOCKUP [ 1110.565054][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1110.565064][ C0] Call Trace: [ 1110.565072][ C0] [ 1110.565079][ C0] dump_stack_lvl+0x100/0x190 [ 1110.565100][ C0] vpanic+0x20d/0x630 [ 1110.565116][ C0] panic+0xd1/0xd1 [ 1110.565131][ C0] ? __pfx_panic+0x10/0x10 [ 1110.565147][ C0] ? end_report.part.0+0x23/0x90 [ 1110.565168][ C0] ? rcu_is_watching+0x12/0xc0 [ 1110.565184][ C0] ? end_report.part.0+0x23/0x90 [ 1110.565201][ C0] ? check_panic_on_warn+0x1f/0x90 [ 1110.565223][ C0] check_panic_on_warn.cold+0x19/0x34 [ 1110.565240][ C0] end_report.part.0+0x3a/0x90 [ 1110.565259][ C0] kasan_report.cold+0xe/0x18 [ 1110.565281][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 1110.565301][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 1110.565316][ C0] __kasan_check_byte+0x36/0x50 [ 1110.565333][ C0] lock_acquire+0xf5/0x330 [ 1110.565353][ C0] ? do_raw_spin_unlock+0x53/0x1e0 [ 1110.565372][ C0] ? .slowpath+0x9/0x18 [ 1110.565387][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 1110.565401][ C0] ? p9_req_put+0xaf/0x250 [ 1110.565417][ C0] p9_req_put+0xaf/0x250 [ 1110.565432][ C0] req_done+0x1dc/0x2e0 [ 1110.565448][ C0] ? __pfx_req_done+0x10/0x10 [ 1110.565464][ C0] ? debug_object_activate+0x331/0x490 [ 1110.565482][ C0] ? debug_object_activate+0x331/0x490 [ 1110.565501][ C0] ? __pfx_req_done+0x10/0x10 [ 1110.565519][ C0] vring_interrupt+0x33b/0x430 [ 1110.565537][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 1110.565556][ C0] __handle_irq_event_percpu+0x232/0x800 [ 1110.565575][ C0] handle_irq_event+0xab/0x1e0 [ 1110.565592][ C0] handle_edge_irq+0x375/0x970 [ 1110.565614][ C0] __common_interrupt+0xd8/0x2f0 [ 1110.565634][ C0] common_interrupt+0x60/0xe0 [ 1110.565656][ C0] asm_common_interrupt+0x26/0x40 [ 1110.565671][ C0] RIP: 0010:handle_softirqs+0x1ad/0x910 [ 1110.565691][ C0] Code: 20 44 88 74 24 1e 45 89 ee 48 c7 c7 e0 6f 8d 8b e8 f8 e5 ac 09 31 d2 65 66 89 15 d6 a8 1c 12 e8 d9 0a 47 00 fb bb ff ff ff ff <49> c7 c4 c0 c0 20 8e 41 0f bc de 83 c3 01 0f 85 a4 00 00 00 e9 ab [ 1110.565704][ C0] RSP: 0000:ffffc90000007f30 EFLAGS: 00000206 [ 1110.565717][ C0] RAX: 000000000002ee88 RBX: 00000000ffffffff RCX: 0000000000000004 [ 1110.565727][ C0] RDX: 0000000000000000 RSI: ffffffff8dc413ca RDI: ffffffff8bfa32a0 [ 1110.565736][ C0] RBP: 0000000100013bc3 R08: 0000000000000001 R09: 0000000000000000 [ 1110.565745][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 000000000000000a [ 1110.565754][ C0] R13: 0000000000000200 R14: 0000000000000200 R15: 1ffff92000000fed [ 1110.565772][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1110.565791][ C0] __irq_exit_rcu+0xef/0x150 [ 1110.565816][ C0] irq_exit_rcu+0x9/0x30 [ 1110.565830][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1110.565850][ C0] [ 1110.565856][ C0] [ 1110.565863][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1110.565881][ C0] RIP: 0010:__mutex_lock+0x1a2/0x1b90 [ 1110.565901][ C0] Code: f6 48 8d 43 68 31 c9 31 d2 4d 89 e9 48 89 85 88 fe ff ff 48 89 c7 41 b8 01 00 00 00 44 89 e6 ff b5 a8 fe ff ff e8 9e d6 6c f6 21 00 00 00 48 89 df e8 61 d6 6b f6 be 08 00 00 00 48 89 df 48 [ 1110.565917][ C0] RSP: 0000:ffffc9000e1f7668 EFLAGS: 00000296 [ 1110.565931][ C0] RAX: 0000000000000000 RBX: ffff888025df5d10 RCX: 0000000000000000 [ 1110.565942][ C0] RDX: 0000000000000000 RSI: ffffffff8dc1b439 RDI: ffffffff8bfa32a0 [ 1110.565953][ C0] RBP: ffffc9000e1f77f0 R08: 00000000c565a97f R09: 000000000000067a [ 1110.565965][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000000 [ 1110.565975][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 1110.565992][ C0] ? __mutex_lock+0x1a2/0x1b90 [ 1110.566010][ C0] ? __unix_dgram_recvmsg+0x255/0xc30 [ 1110.566028][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1110.566051][ C0] ? __unix_dgram_recvmsg+0x255/0xc30 [ 1110.566069][ C0] ? __unix_dgram_recvmsg+0x75c/0xc30 [ 1110.566086][ C0] ? __unix_dgram_recvmsg+0x75c/0xc30 [ 1110.566106][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1110.566125][ C0] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1110.566146][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1110.566168][ C0] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 1110.566194][ C0] ? __unix_dgram_recvmsg+0x255/0xc30 [ 1110.566211][ C0] __unix_dgram_recvmsg+0x255/0xc30 [ 1110.566232][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 1110.566252][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1110.566272][ C0] ? __perf_event_task_sched_in+0x27a/0xa10 [ 1110.566298][ C0] unix_dgram_recvmsg+0xd0/0x110 [ 1110.566317][ C0] ____sys_recvmsg+0x5f7/0x6b0 [ 1110.566336][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1110.566361][ C0] ___sys_recvmsg+0x16a/0x1a0 [ 1110.566380][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 1110.566399][ C0] ? rcu_is_watching+0x12/0xc0 [ 1110.566414][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1110.566432][ C0] ? __pfx___might_resched+0x10/0x10 [ 1110.566452][ C0] ? do_recvmmsg+0x356/0x760 [ 1110.566469][ C0] do_recvmmsg+0x563/0x760 [ 1110.566489][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 1110.566510][ C0] ? kfree+0x2a9/0x690 [ 1110.566530][ C0] ? sched_setaffinity+0xe0/0x400 [ 1110.566547][ C0] ? __pfx_sched_setaffinity+0x10/0x10 [ 1110.566565][ C0] ? fd_install+0x24f/0x580 [ 1110.566585][ C0] __sys_recvmmsg+0x21f/0x270 [ 1110.566609][ C0] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1110.566635][ C0] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 1110.566660][ C0] ? __do_fast_syscall_32+0x97/0x660 [ 1110.566680][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1110.566699][ C0] __do_fast_syscall_32+0xde/0x660 [ 1110.566745][ C0] do_fast_syscall_32+0x32/0x70 [ 1110.566766][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1110.566786][ C0] RIP: 0023:0xf73ad579 [ 1110.566806][ C0] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 1110.566822][ C0] RSP: 002b:00000000f53b550c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 1110.566838][ C0] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 1110.566849][ C0] RDX: 00000000080002c1 RSI: 0000000000000002 RDI: 0000000000000000 [ 1110.566860][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1110.566870][ C0] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1110.566881][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1110.566898][ C0] [ 1111.800789][ C0] Kernel Offset: disabled [ 1111.803512][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:53:31 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85673665 RDI=ffffffff9b1f2260 RBP=ffffffff9b1f2220 RSP=ffffc90000007578 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3630383838666666 R12=0000000000000000 R13=0000000000000061 R14=0000000000000010 R15=ffffffff85673600 RIP=ffffffff8567368f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880973e3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000057c1321c CR3=0000000066d57000 CR4=00352ef0 DR0=000000006000003f DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000002ed75f1 RBX=ffff88801dada4c0 RCX=ffffffff8b7404b5 RDX=0000000000000000 RSI=ffffffff8dc413ca RDI=ffffffff8bfa32a0 RBP=0000000000000001 RSP=ffffc9000046fdf0 R8 =0000000000000001 R9 =ffffed100566673d R10=ffff88802b3339eb R11=0000000000000000 R12=ffffed1003b5b498 R13=0000000000000001 R14=ffffffff90b771d0 R15=0000000000000000 RIP=ffffffff8b73ee1f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00000000 FS =0000 0000000000000000 ffffffff 00000000 GS =0000 ffff8880974e3000 ffffffff 00000000 LDT=0000 0000000000000000 ffffffff 00000000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080001000 CR3=0000000061c5f000 CR4=00352ef0 DR0=000000006000003f DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81f9faba RDX=ffff8880280ca4c0 RSI=ffffffff81f9fa94 RDI=ffff8880280ca4c0 RBP=ffff88802b242ea0 RSP=ffffc90006c27808 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed10056485d5 R14=0000000000000001 R15=ffff88802b43c040 RIP=ffffffff81f9fa96 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975e3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f2a190 CR3=000000000e392000 CR4=00352ef0 DR0=000000006000003f DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003800000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000bf0507 RBX=ffff88801dea0000 RCX=ffffffff8b7404b5 RDX=0000000000000000 RSI=ffffffff8dc413ca RDI=ffffffff8bfa32a0 RBP=0000000000000003 RSP=ffffc9000048fdf0 R8 =0000000000000001 R9 =ffffed10056a673d R10=ffff88802b5339eb R11=0000000000000000 R12=ffffed1003bd4000 R13=0000000000000003 R14=ffffffff90b771d0 R15=0000000000000000 RIP=ffffffff8b73ee1f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00000000 DS =0000 0000000000000000 ffffffff 00000000 FS =0000 0000000000000000 ffffffff 00000000 GS =0000 ffff8880976e3000 ffffffff 00000000 LDT=0000 0000000000000000 ffffffff 00000000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002dc21ff8 CR3=000000005710c000 CR4=00352ef0 DR0=000000006000003f DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000