last executing test programs: 52.346057492s ago: executing program 0 (id=743): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async, rerun: 32) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x4) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) syz_emit_ethernet(0x0, 0x0, 0x0) (async, rerun: 64) r3 = eventfd2(0x0, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) socket$kcm(0x2, 0x2, 0x73) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, 0x0) (async) sched_getaffinity(r0, 0x0, 0x0) (async) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) (async) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) (async, rerun: 64) socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./bus\x00', &(0x7f0000000180)='jfs\x00', 0x2800080, &(0x7f00000001c0)='discard') (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) 51.99976557s ago: executing program 0 (id=746): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000000000ffffffff00000000", @ANYRES32=0x1, @ANYBLOB="0000007f0000000000000000000000000048ef00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xf, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702020000000000b7060000000000008500000019000000bc09000000000000350901000000000095000000000000003f9800000000000056080000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001e0001000000000000000000ff0200000000400000000000000000010000000000000000fc010000000000000000000000000000000000000000000008000c"], 0x48}}, 0x0) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000040)=@id, 0x10) shutdown(r4, 0x2) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c2"], 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000340)={0x1, 0x66c, 0x0, 'queue1\x00'}) poll(&(0x7f0000000100)=[{}], 0x1, 0x9d) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) openat$mixer(0xffffff9c, &(0x7f0000000200), 0x4c2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r8, 0x0) accept4(r8, 0x0, 0x0, 0x800) shutdown(r8, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090100000003e716000000060000001801001d2020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000000000056000000060000003c32000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = openat$btrfs_control(0xffffff9c, &(0x7f0000000140), 0x8080, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r10, 0x84, 0x74, &(0x7f0000000180)=""/35, &(0x7f00000001c0)=0x42) 51.706374112s ago: executing program 0 (id=751): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47dfffa, 0x362cc0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100), 0x8) chdir(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x1, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f0000000100), 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) (async) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) llistxattr(0x0, &(0x7f0000000280)=""/89, 0x59) r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r7, &(0x7f0000ffd000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r7, 0x0) remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r8, &(0x7f0000000040), 0x10) listen(r8, 0x351b) (async) listen(r8, 0x351b) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000000000002000040cb13987750eb871ffb716a45b2944464ec8f0c4bd11e7c406441cb128999c8d3ae0a377e0213692846eda9e30c643f5267c49c3bac3e63ee7dddb858d413d551c38828f9d44625fa025de00c391a708d7bee939780802c1f95e21333139954cff81720abfc54884fcaaf7ca349a7de3e806f571c33aaad943abec3117aff0c87ab"]) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000240)) (async) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000240)) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x6000, 0x6, 0x4, 0x0, "cd0d05a286a8d9c7b438dd4350274fc803519e3d7d156d943d4034728428556b2b5a97d6203497d63e98ec46bc3116e3930f9b02cdc0f982e0d499db318cb04c", "e39fb4a6d3333aba8405d70d523a5a783847b8bc04869aad25d757c86a08e932", [0xd026, 0x52]}) 50.779111329s ago: executing program 0 (id=755): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) umount2(&(0x7f0000000500)='./bus\x00', 0x9) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) getsockname(r0, &(0x7f00000001c0)=@sco={0x1f, @fixed}, &(0x7f0000000000)=0x80) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 50.77870985s ago: executing program 0 (id=756): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x0, @local, 'bond_slave_0\x00'}}, 0x1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x2, &(0x7f0000000000)={0x0, 0x29, 0x1, @thr={0x0, &(0x7f0000000a40)="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"}}, &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) writev(r2, &(0x7f0000000800)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b4", 0x9}, {0x0}], 0x2) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) gettid() mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8fff8ffffffbfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r3, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000100)="b9ff0331684426", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, 0x0, &(0x7f00000000c0)}, 0x1c) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000001400)={0x0, 0xc182, 0x9, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001800)={0x0, 0xda3b, 0x6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000001c00)={0x0, 0x5, 0x8}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002000)={0x0, 0xe5a7c63b00761233, {0x8, @struct={0x4, 0x437}, r5, 0x5, 0x4, 0x2d, 0x1, 0x8000000000000001, 0xa, @struct={0x6, 0x18}, 0x839, 0x8, [0x2af, 0x4, 0x2, 0x800, 0x401, 0x1d8e]}, {0x3ff, @struct={0x8, 0x570e67d3}, r6, 0x7, 0x0, 0x1f2, 0x2, 0x1, 0x80, @usage=0x10000000000000, 0x0, 0x3, [0x3, 0x67, 0x4, 0xfffffffffffffffb, 0x3, 0x3]}, {0x5f, @usage=0xc, r7, 0x3, 0xffff, 0x8, 0x5, 0x1ff, 0x440, @struct={0x2}, 0x7, 0x5, [0xffffffffffffff81, 0xa120, 0x7, 0x7, 0x6, 0xffffffffffffffff]}, {0x401, 0x0, 0x100}}) 50.520348061s ago: executing program 0 (id=758): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000100)={0x1d, r2}, 0x10) (async) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="050000000609"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="06"], 0x48}}, 0x0) (async) r3 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) (async) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 50.519994778s ago: executing program 32 (id=758): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000100)={0x1d, r2}, 0x10) (async) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="050000000609"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="06"], 0x48}}, 0x0) (async) r3 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) (async) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 4.81661586s ago: executing program 1 (id=1053): r0 = landlock_create_ruleset(&(0x7f0000000040)={0xd351}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = syz_clone(0xc285a00, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r1, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r2 = getpid() syz_usb_connect(0x2, 0x46, &(0x7f0000003900)=ANY=[@ANYBLOB="1296570e8b09020640040904f102031631d00509050500200007070307250180060400090504004000f2080409fa00020800f97f01"], 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x9e212000) prlimit64(0x0, 0x6, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000060000000405000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000004000000000000000000000000010000800000"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hfsplus\x00', 0x8002, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r5}, 0x38) r6 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0x84, 0x0, &(0x7f0000000280)) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f00000000c0)={"000600", 0x4, 0x6, 0x2, 0x0, 0x4, "0000000000f4ff00", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000040)={0x9, 0x8, 0x3, 0x81, 0xfffffffa, 0xd, "edff00", 0x8, 0x9, 0x5, 0xfd, 0x1, 0x0, 0x5}) 4.473276144s ago: executing program 2 (id=1056): request_key(&(0x7f0000000000)='id_resolver\x00', 0x0, &(0x7f0000000080)='N-%*),\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc) (async) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) (async) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @win={{0x6, 0x3ff, 0x9e0b, 0x6}, 0x2, 0x9, 0x0, 0x3, 0x0, 0x4}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0xd9, 0x10022, 0x4}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@private, @in6=@private2}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000000300)=0xe4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000040)={0x1, r5, 0x2d, 0x2000002, 0x40b, 0xba, 0x1}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x14) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001a00000826bd7000fedbdf251c208000fd01fe00000c00000c00090008002002", @ANYRES32=r6, @ANYBLOB="140012001100a90cabf7c1b664b28c69dd0c43ea23"], 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x40010) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001a00000826bd7000fedbdf251c208000fd01fe00000c00000c00090008002002", @ANYRES32=r6, @ANYBLOB="140012001100a90cabf7c1b664b28c69dd0c43ea23"], 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x40010) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) r7 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r7, 0x6b, 0x2, &(0x7f0000001040), &(0x7f0000001080)=0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)='J|', 0x2}], 0x1) sendmsg$nl_route(r0, 0x0, 0x40010) 3.019302904s ago: executing program 2 (id=1060): r0 = socket$inet(0x2, 0x4000000000080001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x82, 0x0, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000000000)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x2}]}, 0x14}], 0x1}, 0x0) (async) r4 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x7, 0x5d9500) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)={0x0, 0xbf, 0x3, [0x1, 0x7, 0x6]}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={r6, @in={{0x2, 0x4e23, @loopback}}, 0x6, 0xff8a, 0x3, 0x3, 0x0, 0x6, 0x8}, 0x9c) (async) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x8, 0x7fff}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x24000080) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x20000000000001ca, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xb}]}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) mbind(&(0x7f000057e000/0x2000)=nil, 0x2000, 0x8000, &(0x7f00000000c0)=0x4, 0x6, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) (async) openat$cdrom(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2.937865119s ago: executing program 2 (id=1061): syz_open_procfs(0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x11000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) futex(&(0x7f0000000300)=0x2, 0x3, 0x1, &(0x7f0000000340), &(0x7f0000000380)=0x1, 0x0) setreuid(0xee01, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "42c59c23cba5509acc1fcb978db9c707"}]}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @broadcast}) 2.879621359s ago: executing program 3 (id=1062): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01) openat$vimc1(0xffffff9c, 0x0, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000000)={0x14, {{0x29, 0x4e20, 0x4000000, @mcast2}}}, 0x88) openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000880}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x10000000, 0xfffffffffffffffe, 0x100, 0x0, 0x0, 0x5]}) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00', @ANYBLOB="01002abd7000fddbdf250a000000080003", @ANYRES32=0x0, @ANYBLOB="08002a606b97"], 0x24}, 0x1, 0x0, 0x0, 0x4004841}, 0x4810) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r4, 0xae80, 0xf00) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r5 = openat$ndctl0(0xffffff9c, &(0x7f0000000480), 0x8a001, 0x0) syz_io_uring_setup(0x102ddd, &(0x7f00000006c0)={0x0, 0xb49e, 0x10100, 0x0, 0x37f, 0x0, r5}, &(0x7f0000000100), &(0x7f0000000140)) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000200)=0x5, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) sendmsg$NFQNL_MSG_CONFIG(r6, 0x0, 0x4004000) syz_init_net_socket$ax25(0x3, 0x2, 0x0) 2.472415448s ago: executing program 4 (id=1063): syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000209c207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) getpid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x9]}, 0x8, 0x80000) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000080)) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r3, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000020601000000000000000000000000000d000300686173683a6e6574000000000900020073797a32000000000c0007800800062a00000000050001000700000005000400dfff00000500050002000000"], 0x54}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r9, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r8, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 2.199784221s ago: executing program 3 (id=1064): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r0, 0x3, 0x0, 0x8001, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0]}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x4) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) syz_emit_vhci(0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000002c0)=0x204000000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000001780)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500140600fe800000000000000000000000e5ffbafe8000000000000000000000000000aa00004e2291cef79599e644ff844da336d8a070d7a67877655493d55d7f519af9349f366ebb4fef408a460d3d4d0df5f32b7a5413bb1809540ce554577e84553769bf000eb8447b2664219dd35a767aa68117ee16f4fabb471eafb4a86b2baf90da7480a81adffd44217439abc2f950b2154e7b1801e67b250017f334f9851871f1d0d7", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) fsetxattr$trusted_overlay_origin(r4, 0x0, 0x0, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000001700)=0x4) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) syz_clone3(&(0x7f0000001540)={0x204000080, &(0x7f0000000400), &(0x7f00000004c0), &(0x7f0000000480), {0x1}, &(0x7f0000001740)=""/60, 0x3c, &(0x7f0000000500)=""/4093, &(0x7f0000001500)=[r5], 0x1, {r0}}, 0x58) getpgrp(0x0) getpid() r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$loop(&(0x7f0000000440), 0x10001, 0x0) 2.048493027s ago: executing program 3 (id=1065): syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000209c207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000000280)=""/95, 0x5f}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f00000009c0)={'\x00', 0x5, 0x5, 0x7, 0x6}) read$FUSE(0xffffffffffffffff, &(0x7f0000000900)={0x2020}, 0x2020) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x549941) ioctl$FS_IOC_SETVERSION(r1, 0x40047602, &(0x7f0000000240)=0x2) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004780), 0x101000, 0x0) readv(r4, &(0x7f0000006c40)=[{&(0x7f00000048c0)=""/242, 0xf2}], 0x1) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffa, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r8, 0x0, 0x8ec3, 0x0) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) prlimit64(0x0, 0x6, &(0x7f0000000340)={0x0, 0x8d}, 0x0) r10 = getpid() r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0) r12 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='tro=\x00'/15, @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r12, @ANYBLOB=',\x00']) sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x2}}, 0x20) readv(r9, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/109, 0x5f}, {&(0x7f0000000400)=""/179, 0xfa}], 0x2) write$binfmt_elf64(r7, 0x0, 0x0) syz_io_uring_submit(r5, r6, 0x0) 1.973657888s ago: executing program 2 (id=1066): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000180)=0x67e, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) request_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000001400)={'syz', 0x1}, &(0x7f0000001440)='/\x00', 0xfffffffffffffffe) add_key(&(0x7f0000000440)='syzkaller\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0x1, 0xfffffffffffffffe) syz_io_uring_setup(0x231, 0x0, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r1], &(0x7f0000000240)=""/171, 0x42, 0xab, 0x3, 0x0, 0x0, @void, @value}, 0x28) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000200000080000000", @ANYRES32=0x1, @ANYBLOB="0000000400"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="00000000020000008200000000ea5e440e19310000652fa4d28d8f73c12f54a36e20"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) ppoll(&(0x7f0000000480)=[{r4, 0x6039}, {r5, 0x4400}], 0x2, 0x0, 0x0, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x2, &(0x7f0000000040)=0xad3, 0x4) setsockopt$sock_int(r8, 0x1, 0x2c, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r8, &(0x7f0000000340)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000000314010000000004fedbdf250900020073797a310000000000736977ea186779c02e266b6b616c6c65dc99002ea4b2e7e7b29019cfcf"], 0x38}}, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xcd) 1.728099676s ago: executing program 1 (id=1067): r0 = socket(0x10, 0x6, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000180), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x9, 0x2, {0x8000}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r2) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000180)=0x680, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f00000037c0)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r6, @ANYBLOB="08001b"], 0x34}}, 0x4004010) socket$inet_udplite(0x2, 0x2, 0x88) socket$can_raw(0x1d, 0x3, 0x1) syz_open_procfs(0x0, &(0x7f00000003c0)='fdinfo\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c85686605e", 0x11}], 0x1}, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r8 = memfd_create(&(0x7f0000003040)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc1&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda\xb5_\x1a\xfc\xe8\xe4\xbc\xbe\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) fcntl$addseals(r8, 0x409, 0x7) r9 = ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000100)={r8, 0x0, 0x0, 0x1000}) r10 = fcntl$dupfd(r9, 0x0, r9) lseek(r10, 0xa720, 0x3) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x1, 0x9, 0x5, 0x9, 0x9, 0x8, 0x5, 0xa, 0x2, 0x1, 0x9, 0x6, 0x2, 0x81}, 0xe) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x0) 1.531808028s ago: executing program 1 (id=1068): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) dup3(r2, r1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x71, &(0x7f0000000440)=@assoc_value, &(0x7f0000000280)=0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x18, 0x32, 0x53b, 0x0, 0x0, {0x9}, [{0x4}]}, 0x18}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@private}}, &(0x7f0000000240)=0xe4) r4 = openat$6lowpan_enable(0xffffff9c, &(0x7f0000003380), 0x2, 0x0) readv(r4, &(0x7f0000004900)=[{&(0x7f00000033c0)=""/86, 0x56}], 0x1) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000200), 0x30098a1, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e733d76697274696f2c6e6f657874656e642c64656275673d3078303030303030303030303030303030392c6d73697a653d3078666666666666666666666666666666662c61755b69742c65643e00007871e03393dab7c957fc6db22b9cc11a623ff44316a58abbbdc25c94f828a72ea8292b6e35ed182e7c2f02cab10fd24d796bf98132f19ec92a1125bd3d1ae2c7b99acd6cadadca21dd8012bdeb1262df9f414cef7823e1eeeace", @ANYRESDEC=r3, @ANYBLOB=',defcontext=user_u,fsmagic=0x0000000000000002,\x00']) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x140) mount$tmpfs(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080), 0x2004c0a, &(0x7f00000000c0)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x39, 0x65]}}]}) 1.509184134s ago: executing program 1 (id=1069): sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040844}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x4a, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000fbff00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="f18c590fd3f9be08965432173e41878f5206e8944e15202f069b4aa83041ca001165723c144fe907a18ae1f2bafb316fe7a076d240a15ed88b3c1b9885db67bca18776e65aa649a494c17626b844347b29955b57c69d4d322ceff4d25e132366ebb224c59c4e93ca11d3d445f5e75a13b46bbbb790cfbd7ab126b08275aa132bc85c9937b52c82782164d2daffd7171fc34f43d887f7bf00658a42"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x4, 0x7fffffff}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x2}) fcntl$lock(r1, 0x5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x81}) creat(&(0x7f0000000000)='./file0\x00', 0x0) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000040)=@sha1={0x1, "ec322332d5e70f3a2311c5e605a0965a93ee8ad7"}, 0x15, 0x0) listen(r0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000000)=""/126, &(0x7f0000000080)=0x7e) 1.448557073s ago: executing program 1 (id=1070): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x9c000000, @dev={0xfe, 0x80, '\x00', 0x30}, 0x1df}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000001fc0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000000)={0x38, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x38}}, 0x0) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000040)={0x1d, r8, 0x1, {0x1, 0xf0, 0x1}, 0x1}, 0x18) sendmmsg(r7, &(0x7f0000003c40)=[{{&(0x7f0000000080)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001800)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}}], 0x2, 0x0) 1.438988355s ago: executing program 4 (id=1071): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f00006db000/0x2000)=nil, 0x2000, 0x2, 0x4000010, r0, 0x1cb7a000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x3, 0x100) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r8, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) syz_io_uring_setup(0xcf, &(0x7f0000000300)={0x0, 0x3, 0x4000, 0xffffffff, 0xa9, 0x0, r2}, &(0x7f0000000040), &(0x7f0000000280)) 1.085068993s ago: executing program 3 (id=1072): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000180)=0x67e, 0x4) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0xffffffffffffffc1, &(0x7f0000000200)}, 0x10) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5202) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000200)=0x5d4b, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x24, 0x4, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x44040}, 0x800) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)}}], 0x2, 0x2000c044) sendto$inet(0xffffffffffffffff, &(0x7f0000000c80), 0x0, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) chown(&(0x7f0000000140)='./file0\x00', 0xee01, 0x0) syz_fuse_handle_req(r1, &(0x7f00000013c0)="da8404704aa19000961e5062be2082fbdff24a6de09961f726eba1ccf4efa4f5c2e18543cc26d12672fd87d2bf893639e0dfde1468c369bcf9a9c9343bff11196208858b1f620541ea3e851fdfe3868386121b26331d95b143889790564de2ed591c6272bc4bcb4b4dc3da1c3b488857857f67f1f5e0cde04a409bfc8206f1b9eadd7f0a072b634f1cb0ad9404c10b1bb89154d6a2dfcb37bb473b27d0d81fe344167d20c53002ecc5cf085c236408bf9ba0680196913281a66abed6c57509e86dcf3cd55700b67ac04a7fe27431b0c6859375c03403f9d116c9c3b565f34aaa7c444482858b3fff60b62a4973c63b47a231c3385ce04d954b2f0b78009c361be3fbc2763702b878ec128a1a5cc047ee933c526cfb2cc96f6b8e9fdf46ef575e8b1ef2e1ce7ba931c572966c4db08ea38f16323fcf1523cddb9fae49041ca421e7a0902fbbd654b61031e52dab7ad62365fa88c7846af15e5b1ab1611759464af04cfdac2d02f3f2ab238c08d206024909ece308c36f41ab07a6f2a06be54cd8ac8b0cfddfbd8d32168d1ca50255cdc2d352a8344b10edbcc38a537c4ad3a85cf957ce14f3b380915981a5a0e56df91049e4c6aa9362747c0ea04c445c1fcb0a9cbf5b48a6bd196a69e432690d05d9e13e5460e5abdd5d74fc75ad362d9d2357ab6890b077dab9d7a6a04890b9d76422852d116e2c7a89df56759f112e035bb9cf500bb75bbee96f69957c30e4489f2c2ceb34ce2b74d3e67d0fc6cab6685e2586d20eca627754813371eb874e5bda3e6b3bf556dc9d1bfa4d927098dffd818e7e9045773fbddcb0cf50bab704fd186a80ec8cc0e954151a5e31a5babc578cb0a86a6ad268146b887cac7c6f829a54263c3abade468efa1add4cf081f776fbc42b8e30af2f9495b3a88f79b129a21f2db88a9f75c0497987dbdfc258a5136f2fca59dec7965051d8fb49aa3260d0572f6f147e01328964c41af112fcedc85a532cab5683f55faec140e8bd888de477508904b15128739e63aa04e1b56fffbec3bfbd5e67100f2d7a25a90ab2f739b8dce9003e328f4311751fe2c81868d9baa939024dd69e2e664eaf5fd2c37537c2f65a3752a2498d408fda286c42a5ed310cfc68c18ccee1ee9431fdf23bfc662fe4b9fc9343cd5b496b4bf627517b99065783b0be7ae11c9c7bb178dbe45f1a4423c041c9a2588d5327dfdac9ba533b18fb664362c4c3a2cc012de94b027a044520edfbd666fe3284d6161c8cc35edaf8e0452f1c8859f0c0c08c74b93d31861a8ada5dceffc55262715356d87dcecec306cd49ba5b4b15008ab8c10d6dd37c37d4295220623287afadf2acabc28ba71b487c6cc1ab04267b10e7a6f9e502f01163400fb419f3360ab5683289286ed9bd24dc9601900eb5a5b4f1c7aae30a3cc2921667f2aa78fecbf00478265586a095b134b71531e50fd46af6c582ad8562ea038d00ade03913ab74effca32ee341415fb5b680f85f62f8a9740c9179477fce6f615d4d6d6a2c56ea09de331fd820bedb4c49ac0a1d8732ef0b9487e128e0bc8c84951feaf56bfcf3f151890ae7bad41474ccf9256041fcbcbd5b0bad02f36844e79b118d3896894a11f3b4026bd92accf2fcc538dd53b4b74801a4da1f3918641b3a85f92675ea0d53fd0c993bb214981b20d50ebca10231c10d0edd7ae73844f25909a3af602f5ebb5e7bcac55f2ddf3e942589779e0f2b596f1b2d5ce0cd5882364b073afe40595dd727f15bfdb43cf270bfe3ae88eab345e1e4b3cb8d0775ae7c0bc1d9883d8194b32050f7796c8debf42f89facad6c739aeaa8626ded005c6b2b947ba4ad3ef5c08c17075e0b616afe384a33fe8d5eb5dac8530125b91cb636608a86cfdc5a2ad56c1007906428d2dbfc55e7c97a67b9414912b5891fda8db8b7b3b4d2efc52d2d4acefbae389f58fd16cbe185bb9ac53c314ff42aab02f4cc66e42b2a0d1d6e4299db09a340065ada927e06f272aba47032fb1689abee3c9853f939426beffae6f531f7425909c14d9b56716c2f19c852fe16bb380d6d5dae5c22d9b10c9e20c8ac8621993e39f88551dcc467c625c480760f6cf0a7f1bda15fa24bbfb742648e5337a0754c013879fbea5f7fabfcdce1615587776888f9ac170843610f93d0a1d5fb3818e94d4be68d857d6da13f543a220f3cd2e4e95e00c576110a977c973e471362e41264c72875ebd6d365abb9656edc4618744f62663fd77d94a9e3d1ee6d5f30ad07f6e6164f7175e12b2b76a583acc3d3b9859f520693d5c4888abf3ba6a17ccee42315ff0bc614b2299f21754813252a4e617f63cb2a6d1c4d0a9a8f7f1f840840966e5ccbfcea5aa4a45e375a3e42f69a361c2fb17920dc51134987b2207d127750a2d758f5d1ac716ca9435507bff30b1143133c4aad212b6e2ed0f3ac82588944aa1d30a226e98cc863d1737cb5581d8cb3a99e35663cfc77350fc09cbd0f9d772179f4ed77770b2bc28ecc052b320b8dc4d0d99e41ae20812cadaaf500b8c0ea4af70d02d253942bb4a18fbda9abad3862ec80c87b70638ce54bf6ce553fa0e8c290595cfff20d5d0398f12cd17fc9aa982bd8f98bcae90b792be4749c215c43767e547ab00c4fee31f0299a08111462deb6d26d19f9b93476a8aa83245a9c8844e24a96407330fc15a9d4190f59cf409e4193877ab1f11f6fbd8c5f71308bb96fa7adff28ea7af2d552e270453d24f6ccded742ccc6b4df79ca5761cea72f7d1208759932ab440a6492aa77b99cecf5196a8b1dd8c1619e89e40250b5e892641e69df1dd068cbe09a6020f7c72d6b7e0111016bdc33f6fb1b0dbc8d2ff55e68575617a527d8d890f777fad72668edda0f75732e2fe3670602c7b0b347844bdcdb60274afa70b7f8e41ab4663d0e162e98a719d6c3def1b4e45127b146d7d595bdc4c9552041a6381d6b5b53cf0d316e8a2232951cb74461eb56c0a1a21d80f2148416287937b7b5ecea717bfbf4ba55ef9d76a7dbcf90108017eb51a2f15e60596c3c4fdabb391d7e98b7d7561933ea890a685ba0e7efc83a6cbd46fd21be9669142d6a6ae05daa74ce99d267f57ffe1f9f8f1b93c2ce5ce142b2132d4d241b1d1c404d33e7e22b850d771b45883ccecf18ac4b5dbb25f3361b341736adc002f42530afcff2609303d207377af45a01c7d9843c3a1d635670097fa4f007b3c9cacd1debb680d85522753bff83ba2b7a9808cf487188ec2228a99877f9adc990a1687b54daa150004967cf70b652a59ee007aad47c25dee6c9d7b746beb652c04bc95940c040a7559667dded196454893f5c0a2f822cb8db37de0808636c8452d88f0fba1c17d316f0a76bfbe3adab45d2fe1267c6a9b8e45397df8224ccef054ceca0490b7feb54c21fc584fd5039c14cda34b7c04e482e5965671d1706f2068ae267585dae34e3512b898eb6c6cc56c2321da93543fbd6d6594335f3c438f66c741a3f17d3a1004d0adcca3441a002c1ef896a46ed2c68d42f809b75d21071a109aeecce8ea74b9d1a344360f5ee5e4487bcab51c111c0509031886806bdc9b965d8ad26a51048b95289c4e2250e8098a21fdaa27b60522f79e70aa6b3273d830da1f1e3b58350b4c3215204e692e2fb3c7644164c4fe9f44bb8755948b6b3f8cf257b3d38167946facf7e642a2453d14d352574c74bc25342f4fdd277dcbbdf56f121f86abda04332b52e71413683c85bbd3fad831de5dea16aa3702f8a76a60a491ce88e929cff17fe1c804aeb77ac66c36417fd34dfa5f9c11c6cd2e5e786062f54f966765589a4c9262a48658c28bd87740f9210104a21cd2bac47b8e0dad85a86d0fd09d8b157c54f3abe1a2883d31bf60eb7f43118386c8fbb82a1f97f0e2f6415700a9b018c06d6a4a9cca97c09654fc4be56d1a84a6131652f9c576261f2279bbf6b969eea72997de7f4cd5938717c7ff4f1f19b6b75b70216301bace8ff43b29496e55f96852c82d371f6462f590fad19b8c96be8ea580fc4e987082bdc464676df43bbfb833379b34a7e9d8d0b5f98a08e8672c6afcf8627e3ff20ff38fbb65d2c6e479f4288b7fde264b49e9f72bae49ce659ebbaaecc3ae1e7fc43a087e0fd83574d9e12110615be6a8e50deb532b7656c74a66ebcc2d30b2740f5a793b4cf52cb4783d6da70b16c25438035b181b241be3381bd2c92ae9b4e0b3877939be2a900c7a61da0d9478d8bdefd40213099d16d7090d9fa0c19b36705242c2765ea0cb640edcd59dff543fed3a3b5efa25d9e53f068a91ded96b0578be361c2fe09a1b80d21c917f831765e89701b276b879641ffd220666da6ee51417367994020f54efc6825b9f8b21901fb26433630defd6b14d021fb0e9355130ff51c279e545545e3902c4b5dfe232e1ec4d73e0768373fe3ed73fb3a277cf3e4663a2204a8e937e90c8b81e484b88c9140c9db6716af4bd82e99f93bef3b6572669083383e4541b97b4dbf856f1ddd246297c6c420d787a306137b59bcd9b739a3dc0bed4930ac674424d2d6f736ec74862b2c5af081a61e4c71a9424d6d3b7c44b23e2c4f6294f0e8b02e6dc93263a9b8781516b9d877b222598dd053ce3396180a28afd336d0856ead6a34f7915fddd89834149ac9b2a011fa2a3cc5dcda050308bf4618b32808b99ec3664312e905035761551e29ebd9da5d756fa1125126e406fc2475604799c5215b1487cf62346d69664134521d7768f7e13caabb88001a8a58b64b69fef72bb6d6a4db4cd12c6534d0d5e535fd8044c1917aea45858000ec72fd62fed62a5686f1d33ef4d62c55d2aa16f69a84936eb39d9824a0556580947c7ffe0c0ee26d5b1cccade58184cb664d9cf107a13a93d35d847ef62608f0a8ee3da364937336398d3ea43b6734350364ac7bcfa3630713aafabae667dbad71d179776ec93560c539a734b221da1bc76d12b925cc80ab978c695fb12ea74a405902aa112615c4435fa39ece4c8464dd4ce0054fbb76e41b704d402ee255856c5d036766113676fc6adb98eb206a3ac48a7197d6e6a9b5d62161f1912e118ca6e3540e2ef191e78b26bced3cf15e7705378605d2d0d873bf3d74d7eed4965084cf504dfa92fb34b2d7d680999f2bc60a2cb6549f6a679049946d6522d8b48e2832ea779d432f595cb9c2f138df059b3857fa83b4eea84acce4a8c180364993ef22cb1c3596ecc918ac4fb1269b7bb8c6c55b7d6920ef146869b021c0e57690e2f491f236eb4166ef215ba79d04eae03ea04674d35880f72173b4aba81fcd7e57080d95b3b8bfee98f83fa34777a89588d8f828c336f7df59f128e29a24886a9f0fab67faef47de6b2ceb872cd5814f011479ea21b42c393fad1c7d55f7f05060ca8610a1a6ff9bb6f267843c936870a1c74d851d745db8104eb848c467651c68e0c9e42cc7df69e443faa4553ae68991cd9d2c85d123eb755b7a8b20c319689fa51accd6683f85edf4251627ccbd3e94996a2a009ab4e55eefadb36a9e9224755045697ca8240653afe7804e37ec0bef8d411453771d7ccecc6ae5526fb30c875ccd6adb4ea3d995e16c6823c4a3a30a30672d39acffe4aa55470b3936b606117d10b56c504ca5eb1d450cf2ed5abb71b8e9d7efb72013086a1b913d1d05d7532c13354afdbf07e904a2a981d475a0187dfea81a5727637c212cd008bd083d11f8d70427b5a442ec16af0e642eeffea83bf0a30935732b2bff9bd1bd35d63a2d4eb7ee7da4fa65b66e5157e49a2d03c50d4655c414be0346b1bd4dec0840da522b3eac5e52e512e1c7736a7aae732c898b99ffa0ad7376e65d93bbc30c8526e2a467ae42aba5674b28fa38d7a527e6a57fba5a785d4c5af63b4453f87d42198b9800d03b3711a1503a8888d3c4d956aee6e82c50266e0a27c59178be6fb482ff439b6005f56e98938ba9a7d6a0d6b8441d62a03bb3c263071ab95b4cca1528726a8e51c024e1b2cc70d5e09a64fcc022c7d1b02fd3f0963a587277d5a76b82fe6c30871b0f008ccccb5b447032b83e2f5dbfc813f3487bfc81c632efdb6864c2e39a344f0710301fcbd2537b7465cf026d66302516ca1cbcac486fe3eacfd2f34a2e279e5aac624c779738d6a81604ea63b39b36fe9c2be97b19f977a208840bc2a2fa1e73f3470b7664f4c584adc9b34a4401e346223f041aaa1d9ef319122c24e394def88bdea3c1e4c081545b964b5c8e99627ed4d50467964020d80598b13b905c0177e8f34d5dbf70f750fde3d0d92d1e5488ef31f008835ce038e1424778cb14e42f90524e2269f6b394f956409c60114129e0d3f41e06ca6ae019766d5eda39087b39b0573c20e117fa08a9c1ec848eec751a40a26a34308f3c99721078315e5843da543621d8b0afb1b35b003f70940e288bdf4937b0ada4233f4f9afcb88b16c7ccee6d68f9f9f7837e72a52a10c3e14eebba8566c71b8a217a774c1322d29071bca529f1a93b4d3ea6319bdd221deebe6da4cc5818c455ec7f7930fda90e98f60685208c14abcdfd5220f20a7abd4135d77f7838566da1cdc1bfb28a4e7bb797991e55b3191e3c7ef1c14e1cd7fcda5213a7ce3fa39206678e78d5033afc4e6cd49b4365bf7ada5ddbcaa5f7815460bf8b3fb50aabab89383b400f1f857b61399bd0f97372fdfb63656acdd1687bc2579676afe1de3d0338cbdbfab84ab2cce6813bfcee46ee7f92d6bee617b9528644c62feb9b80196e6a138431c2bcbfc5fe266a7b2af307f55893485908948184b64e0219d7aa97106434b29eabaf76896cc11f5af2df875e8aeb835cfd9ce43ed92ac3f916c446c40cbbf0dd237bd0e8c301b83b6b47617086e1ad4f1dc342a68107f6fd9c697ee2a8b1949dcc643d2cff4b2a7027ac89070e1a9ec6f0b5bcf1d171f316f6cf0477365215048c3ec9b46165f73b5a8bc1e2079cc42d28ca739271a445ba9e130d090c51e51b7c34764776b4602f65788a3a2c6c78ec98ae71faea88ce066d5f272cd2d1d79d48e19fc8640686b619ff613026f1fe9a532178c19368affb938101f11475919fb16637744e363a4894b26f915ecf07288951bd2191cb9593932e77b6852b87fa8673baca7f48137dab0c777a5c4de46d6ee10148b5301662fe87e340d69adab1241d88b115089c2483de5e2c09ba854efeccf0906a30b52d51cd4a7767f148d23736a56f7889720019f7ec30ccb67ddd51b268460303b4126f9bd6ae09f90225706c1b8670d53e18d65d1930a5f3c1d41e506265a8ce846220d550bc465db58b8f8bdc84cebfdf6c10f0c697e5a9074f15502018a02bfb5e027615f36c8ed8d74ffb6ae54f26ce4763d9504baf3dedc23d9a2334a51b80c84839ce66b995ad6685973777f16fa95a2b092d147ef3c3d217f632c5afd37ecf0c87a13ef1e6b488d8ded9005aa1be6314b1cd80e2d5c3ae77be408987f5f479ec26b8c72fd7a40a6385901a062d1efb431df8c5824fd17f7bdae47a45bf0d1e294685bfb59c5d03e2da523ae4962989d5fc7346a64168ac19afdfe0578bb87e02c0d196f7d5b54d99a189d721963da374303cdd5e26e7608b89ccea3598751d803356464450f8308a1178667c6d8eef0577912f3152520aca01e0d1c472ff15c36d6d7d7558927d8384e9cf26c8198731b823db97c9aaa32873cab5af92a8f62057b4d343e6862acaf648e31a586756a573e6acd509cdf6aa8291ebed36146aa0e2bc090d43dbba266ab7127fdf9bb864d130cc81486cae2c429918e9f486a0193f70537694085010d1aa943b971ed94ace69b8dbc603dd435c615ab4a05c4c7611bac9d2c7e14fe2edf5b74de81569e26660d53398b43cb8e5707a92c4338c5a7a4adba769dd1a611b934870dc65171d8a86bcb1a436b0256b9be5939481cd1ae7ed87bc37d11a1251141e1691c44d3062523055ff0e3eaf46d32ba2c739c0c1fbf6b208e6116de446544c325916102a07bdb28438ce57219b5a2d9692c08d66e8b877ba0c03861852b2f5ea50a782e421897737faa7813a7425440febf57b447c3f9bcce0abe1e9cdd3333f2192c2fe1c888189b1b3d7dd334c4bf6ce6ac6f27c11f095e73f3e52c60912c12b5eeab7ca13620cdf27fa0a98c06fd10431bc8db58d771a36d3ec29f8c757c8b9509790dfc7660c8dd32da030ea5ac026f5214f60c1c637a4ad43c8ae31b07182e7c015d66d6a07c08a1eda0612aad2dea06d93a0dd1a7ae0ff39d3e05d71ea4c1e5e85779ec9cf6b4bf51093e1332bff9b61aebec97893662d1f9f0e7bf68741f7967ed868c06d8fe658c852da9c041b1bb073f9297207fa0971c43f50e948b1c27ceecac17901da559d38c8b099fb4f773f66bfb7735ee13cb12173c63eb3c02ca679da3f6ec922b81d25f8331a81a2deaa43b5b8715cfd484132b45b56ea3d8f69bb71598db2b451376ba6b808cbb43f23065452dce271f24df95599b8a975bd704e93ab5342f7e1f9404397dd95b0312258254788ca9f4cab7ee457f727ea8b7364b1912540c4e9fc6ff4ae76ea71af80ef55a30b5c82a8ae13e92404a3277d9a95360da6d0059b47d66a9a2ef695ed98a2d1df6abde37ab0899128827a6e87153ec47d6e62d78f1b8c6cf9476660fc378e05cb155dc7cb5cc6cb381cca4ac8e6300867953ea743706c00692096e39e6db839923b884ecfd936ce1a288429850e16e4de6d0acc36b25734b9f3ad8c3e2cf7299668d2eef4c6a8cc112176505684c9ed6c791785a1621ccd5959c3358d378e5761fba69a4cda6e4a1659ac55e01f0c95e60e705b2be78815e00e1e140e5165a2336263d412357dbfe2ea61e1c4692ab406e705a0c913d94373304b7a031468f70b656f567e0a4bf349822e3d431543e19c8f836220872f943867d31d65cfff944d5e15eca6d3ca3327ed987d44ad9d67e73ccd106a85d150251ad31dfe7016b736a38e0f33fe0def7d5b5a4580a552b633ec49d5dd854959f0f996bc1b04dacc4b97a546c3b91443b4c200c6f88d17457bd79330f57b9db115f833bf7c0856f1deaf49dbfb1c2e9db0eab37ea3b4341593a9fc126da9ef5968ecf7348718bef3ff494e09f60aa2b4a6943fcbdac39495f365d41ed4155a8a0f4d1111c2054383560fdf4495307088b3d0abbadc0c1ff717cf7b9ce3153d48e62a74b80664083617fe0889dce026e8ff38bfe090fd1c371b354cc9615afe2e59de29d9112b18e22755d84261fa87af7236f078207cfe9865c4882773a4028f1dcb250ce786dafc62e97ccbb3634b7afb229562871141492200126714128a724bf391d7904af1f044d9aebf5e53eb7b18de90808e3d03b20a89ab70088441a5bd131b8b67d8ca9a4efe7b86714c69a15118e4123f8fb66be18c6c9f3323adc2caaf43b057e7e2ca50c85a4bef0954b1b5b92fb15a113e6498aea4d523c176b8cca770a11746861380418d76c2f73b07dbe34b7e49c5ed2c526220cd258267ac0c1d052c0368d96fab513daf7baad09296c997ea08020dbb2894a712c4f130d9b95ab44a188435b222a01e4b6629d347616a53f9b62d48e69322ba3f4c3424e0dcacb4fe0d9826a2affe1431800a171f5fc03e805ddb08755b4eeb79b47ec7d0f9457c8dbfbed460840c6ec4f1d1ee18e8ba11151bf42cc10ad344a8b33b792b890946a3b3ecb374bb95d424ac91c26d6cadd55630cb0ef8d74a8a77c337975eab6448a394f7340f2769d0197a54778b37eb505ea0bbba6729c260ac0da0e0a209242649d22f2403c9f7790362fd66c5a0632c985de54fd9f71dd8b4d1b06989dc98c71e2170c8651826bde8d331a0f41416fd01466a0cb9ffca275afc0c412bf1629f6673148228c3f7a8f48639d62c6e0cd40db91abe45374e92231b095be69ada8903e25ef3ec5a6270922ee39ee1b47cd957fe5ca9d95c2eb28be545734c3468aedb027511483fe12cb039eef8db851c688fc1a22e1a18841ce846ea94165c70e1f095916e6e753a9380aa25078bb1a4f04899cfa5fc200fa951da3f2ac4335d722779242a44bf136d2198ea24685438f9e790c023cea9f85f357f9ab02c4b9676e68149bd365eaf9cec725ad71995abdc6910939f99d3af8143bd7ce395565ce837e57bb81d50969e140f592bdbc49e96ad5b13784603dc6e8d25ed7fb2c9423abce34fe594a395cd3708bd2b72687d19554b2532d2eeb396b66d14e75e072fa264ea11044bb87b5098a765ad9244e584cee6397063b52086ec1823fc90cbb1bd3be5abd50f0d819a712c7fcb11afba9be31520b39c8b0f47a463a59c6b99351de0ae74603a2ae9958573104d5f2f7fd6e890ff9173ba50be4232a18af4f88a487bf89b01d96b46238883277d3aefe45ae9f2a34c86f32c5d5871eafec0d675ef18dcdf81c89c4e4b0f8bbd869c3e97573844c20acd676942a955bdcaf1150936f77fb772c3ccce39ef4f96ba1ffc8a16d4c189cf18853a29415b3a3bd05f02398c17f4f423a642748325ab95cc4f7761f42c123cb2f0953f515f7874a4e51b424a9a0e9823ebe8010b2ee85adc509ea87b87e238ccef2e1d907ea01bd6d6a110be4c8f345a4ccecd011ae4a01f39578e4310a4782e0e19176e499807a6c66b2f66fe0a3d4a6b2e33f9e98ef9acf3e84a0b213575cc2ce6466c21860997aa76c8bd63dd95dbc348e82ad604a9a0728636544aab3e600442449181b44c4ec1bed65a0d2328656b5345348c08ddf8f1dc87f186a6d04917fd693e91ef0e180578e84d38f68fa6f973ce8c3c10dcb33dafdddd7586a8ddf75eca2044fef9baf4dd6269ad560a3abe84298c884e99401d7d9908a99dd18b47d9b670d9d3bd0680de7abc762ff8444318bad36662b5ed855f5ac35bbde124234fa45ec2407fd919c1aeeb285656fbd65dc6c83b73e0c8eddef2e31abddd422c3b2d80a5ef149662d78529c54528876c7c0a8feb45b9a182a31a3141ec191809de028a8dfe7a067c219f63bec8b1c8b49c3d26b76573dc456d188a8a76504116d9bb59d75931b2ef3ea52d4b06ca2961fa2d5f295d086214c3cc13e296b0848f5a0f554fbd62a0d014eb20655ee6e6eb54eaebf73f568124468dcc838d96dd95f24f6d6888a9a9aaaf087dad6bb5eddab26e95be5d00bdc2a16c0d6dfc930ab631182221d88c65e84b807c51e5b0d3c78cd43d40924e193acbc603594ed9c49b6cd65c3e133381da55e98193ab773cc16b6239a8570eacfadbb87d5fc2a6fb70a0713cbe65239c6364783792dd868d626e5f200c48dcae6060f9e3bd2323be6518f71c860664f5d214d662aa9d81aa00562a6d175fff011089bc46b3945dbdc195cd65ca172618b3cc3f3226360fcf5a7e51283623bac98dee25bb75fb8bb26df3fd8caf2c0a58f797a7b299129a3c2917e4ea422225925187ba3d1f73c3a9478f8a9bff3533df132582189316f0fd434c6b1a49ffccac085e680bc4dd8ce50002c324840ed62cfc53ad7bd6c0c8020bc9ec38ec52259d91f4aa29a31327d2d4111e902bb7f4ab249b5ecfdaf3c856539e6bee26cb790efc2eafdb178045b5160c2e65f18cd11fd81125d32671a43517d0a15", 0x2000, &(0x7f00000012c0)={&(0x7f0000000300)={0x50, 0x0, 0x8, {0x7, 0x29, 0x6, 0x400, 0x7, 0x800, 0xffff, 0x6fcefa8e, 0x0, 0x0, 0x8, 0xb}}, &(0x7f0000000280)={0x18, 0xfffffffffffffffe, 0x7, {0x8}}, 0x0, &(0x7f00000003c0)={0x18, 0x0, 0x4, {0xf}}, &(0x7f0000000400)={0x18, 0x0, 0x63d74507, {0x8}}, &(0x7f0000000440)={0x28, 0x0, 0x1, {{0x0, 0x7, 0x1}}}, &(0x7f0000000480)={0x60, 0x0, 0x7e8b, {{0x9, 0x1000, 0x4, 0x32d1, 0x4, 0x4, 0x600, 0x3}}}, &(0x7f0000000500)={0x18, 0x0, 0x915, {0x9}}, &(0x7f00000005c0)=ANY=[@ANYBLOB="1900000000b32f2c5b9f780000000c00000000000000f94028293a2c2a250082988eea48d367d90a23900e3f2ec3ad34ef7de2c7a516ffadb18f2915b4cee83979b9d20283de0112c992fe813e0e17ba963375f5f2b616456fb3c065916976d6848d94ea99e0121c9c9d7b5a392b7020e00103c4ccd8f396da3f646cd3e2bdc9bfcc1798f93e8d864c206a25595fe57dd66f5427f0cd95ec47222e41f117fe3c0e91c82ebad48e7b57b7adedbd5357e161a971bd74e3f49aa753f8ba"], &(0x7f0000000580)={0x20, 0xfffffffffffffff5, 0x1, {0x0, 0x1}}, 0x0, &(0x7f0000000840)={0x90, 0x0, 0x3, {0x2, 0x3, 0x1ff, 0x7fd, 0x0, 0xf4b, {0x3, 0x7, 0x80000000, 0xbe, 0x3, 0x1, 0x10000, 0x375cd43d, 0x7ff, 0x6000, 0x4, 0x0, 0x0, 0x3, 0x1a}}}, &(0x7f0000000900)=ANY=[@ANYBLOB="400000000000000034000000000000040500000000000006ffffffff0000000012000000030000002f64e5762f736e642f6d6964694323"], &(0x7f00000033c0)=ANY=[@ANYBLOB="08040000000000000200000000000000010000000000000002000000000000000000000000000000010000000000000008000000050000000500000000000000035900000000000009000000000000007f910000000000000900000000000000001000000000000000800100090000000600000000a0000007000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="03000000fbffffff000000000400000000000000090000000000000013000000030000002e2f62696e64657266732f62696e646572300000000000000100000000000000030000000000000008000000000000005f0000000000000000000000ff0f000001000000000000001f06000000000000ff0f0000000000000100008000000000400000000000000000000000000000000c00000001000080010000000040000003000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200000009000000000000000200000000000000faffffffffffffff06000000070000003a2ecc5e2528000002000000000000000100000000000000570d000000000000e8010000000000000104000001000000010000000000000003000000000000000300000000000000000800000000000003000000000000000000000000000000ffff0000040000000e0000000060000003000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0600000000000000000000000100000000000000090000000000000013000000040000002e2f62696e64657266732f62696e646572300000000000000000000000000000000000000000000000efcb872651e03c3cffffffffffffff5b74000006000000020000000000000006000000000000000800000000000000fcffffffffffffff0004000000000000bd000000000000", @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="02000000ffffffff00000000000000000000000040000000000000000100000000000000260000000000000002000000000000000300000000000000ff7f000000000000070000000000000000000000d000000006000000000000000900000000000000f8ffffffffffffffff7f00000000000006000000000000000800000000000000090000000800000001000000006000007bec0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0d000000ffffffff00000000030000000000000000020000000000000c000000ff0f00002f6465762f72666b696c6c0000000000030000000000000000000000000000000000000000000000000000000000007506000000020000000400000000000000ffffffffffffff7f06000000000000000b00000000000000ffffffff000000000101000000000000050a000008000000080000000080000000000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="cb3a00000300000000000000060000"], &(0x7f0000001080)={0xa0, 0x0, 0x5, {{0x5, 0x2, 0xfff, 0xffff, 0x380, 0x7f, {0x4, 0x10000, 0x1, 0x10001, 0x1, 0x1, 0x5, 0x8, 0x200, 0x4000, 0xffff1484, 0x0, 0x0, 0x2, 0x1}}, {0x0, 0x4}}}, &(0x7f0000001140)={0x20, 0x0, 0x6, {0xfffffff8, 0x0, 0x100, 0x3f}}, &(0x7f0000001180)={0x130, 0x0, 0x3, {0x4, 0x9, 0x0, '\x00', {0x7ff, 0x7, 0x33, 0x5, 0x0, 0x0, 0xa000, '\x00', 0x1, 0x8, 0x7, 0x7, {0x6, 0x5}, {0x3, 0x8}, {0x914, 0x9}, {0x6, 0x7}, 0xc00, 0x4, 0x6, 0x7fff}}}}) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r3, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 1.044156482s ago: executing program 3 (id=1073): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, 0x0) shmdt(0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xd98a, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x80000002, 0x141100) syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) select(0x20000000, 0x0, 0x0, 0x0, 0x0) 961.151739ms ago: executing program 2 (id=1074): syz_open_procfs(0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x11000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) futex(&(0x7f0000000300)=0x2, 0x3, 0x1, &(0x7f0000000340), &(0x7f0000000380)=0x1, 0x0) setreuid(0xee01, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0xf5) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "42c59c23cba5509acc1fcb978db9c707"}]}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @broadcast}) 549.855413ms ago: executing program 1 (id=1075): r0 = landlock_create_ruleset(&(0x7f0000000040)={0xd351}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = syz_clone(0xc285a00, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r1, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r2 = getpid() syz_usb_connect(0x2, 0x46, &(0x7f0000003900)=ANY=[@ANYBLOB="1296570e8b09020640040904f102031631d00509050500200007070307250180060400090504004000f2080409fa00020800f97f01"], 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x9e212000) prlimit64(0x0, 0x6, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000004000000000000000000000000010000800000"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hfsplus\x00', 0x8002, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r5}, 0x38) r6 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0x84, 0x0, &(0x7f0000000280)) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f00000000c0)={"000600", 0x4, 0x6, 0x2, 0x0, 0x4, "0000000000f4ff00", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000040)={0x9, 0x8, 0x3, 0x81, 0xfffffffa, 0xd, "edff00", 0x8, 0x9, 0x5, 0xfd, 0x1, 0x0, 0x5}) 451.021935ms ago: executing program 4 (id=1076): socket$netlink(0x10, 0x3, 0xf) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) 389.748883ms ago: executing program 4 (id=1077): r0 = socket(0x10, 0x6, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000180), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x9, 0x2, {0x8000}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r2) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000180)=0x680, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f00000037c0)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r6, @ANYBLOB="08001b"], 0x34}}, 0x4004010) socket$inet_udplite(0x2, 0x2, 0x88) socket$can_raw(0x1d, 0x3, 0x1) syz_open_procfs(0x0, &(0x7f00000003c0)='fdinfo\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c85686605e", 0x11}], 0x1}, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r8 = memfd_create(&(0x7f0000003040)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc1&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda\xb5_\x1a\xfc\xe8\xe4\xbc\xbe\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) fcntl$addseals(r8, 0x409, 0x7) r9 = ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000100)={r8, 0x0, 0x0, 0x1000}) r10 = fcntl$dupfd(r9, 0x0, r9) lseek(r10, 0xa720, 0x3) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x1, 0x9, 0x5, 0x9, 0x9, 0x8, 0x5, 0xa, 0x2, 0x1, 0x9, 0x6, 0x2, 0x81}, 0xe) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x0) 197.795107ms ago: executing program 4 (id=1078): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xa2, &(0x7f0000000140)=""/162, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) (async) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0xffffffff, @empty}, 0x1c) (async) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f00000000c0)=0x7, 0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="58000000020601080000000000000000000000000c00078008000b00fffff8000500010006000000050005000a00000005000400000000000900020073797a320000000011000300686173683a69702c6d61726b"], 0x58}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) (async) acct(&(0x7f0000000100)='./file0/bus\x00') (async) chroot(&(0x7f0000000040)='./file0\x00') (async) umount2(&(0x7f0000000280)='./file0\x00', 0x0) r5 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x0, 0x0}) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) socket(0x10, 0x803, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) 180.987377ms ago: executing program 3 (id=1079): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01) openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000000)={0x14, {{0x29, 0x4e20, 0x4000000, @mcast2}}}, 0x88) openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000880}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x10000000, 0xfffffffffffffffe, 0x100, 0x0, 0x0, 0x5]}) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB="01002abd7000fddbdf250a000000080003", @ANYBLOB="08002a606b97"], 0x24}, 0x1, 0x0, 0x0, 0x4004841}, 0x4810) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000000000006040000000004000001000085950600000000000003000000000000000000119b7119db05bee79dfd17f82d7f"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat$ndctl0(0xffffff9c, &(0x7f0000000480), 0x8a001, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000200)=0x5, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="74000000000905000009000000000000030000050c0004800800014000000e9a0c00048008000140000000060900010073797a0080000000000000400000000f0800064000000001080004400000009d08000640028005000100110000000c00048008000140000000019a3372e76b9e9b9657cbd0f11363b9863a41679253b5883561d184d2eeb91fb67f004157ba5938c01c8baba570d69ecb5493ad73dfde4b1db5e966a938afda0926de3f769ee41158a33db8c8aa8b36b56e3e17394253559e85f83f81"], 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000000203010400000000000000000000000009000200000000013000e6ff0700010001000009"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004000) syz_init_net_socket$ax25(0x3, 0x2, 0x0) 129.727285ms ago: executing program 4 (id=1080): syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000209c207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$FS_IOC_SETVERSION(r1, 0x40047602, &(0x7f0000000240)=0x2) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004780), 0x101000, 0x0) readv(r5, &(0x7f0000006c40)=[{&(0x7f00000048c0)=""/242, 0xf2}], 0x1) r6 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffa, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, 0x0) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$ptp1(0xffffff9c, &(0x7f0000000000), 0x500, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000400)=0x0) bind$nfc_llcp(r6, &(0x7f0000000440)={0x27, r9, 0x1, 0x5, 0x2, 0x7, "250aa9302b1815a81b3d570c77e2489711075911d8be6b9b15bf2302bd92d8746b769f6b8e9f9829e811efec7304802a35d8582f7139334e1675b6782aa567", 0x32}, 0x58) socket$inet6(0xa, 0x4, 0x6) syz_open_dev$usbmon(&(0x7f00000008c0), 0x0, 0x0) timer_create(0x2, &(0x7f0000000280)={0x0, 0x1d, 0x4, @tid=r2}, &(0x7f0000000340)) syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x80000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x400002, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3fe, 0x0, 0x0, 0x20000000}, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000bda000/0x4000)=nil, 0x4000, 0x0, 0x0) 0s ago: executing program 2 (id=1081): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000000)={0x18, 0x1, 0x0, {0x45}}, 0x18) fcntl$setstatus(r0, 0x4, 0x46d00) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000280)={0x1, 0x8}, 0x2) (fail_nth: 2) kernel console output (not intermixed with test programs): 58.205184][ T6300] netlink: 60 bytes leftover after parsing attributes in process `syz.3.60'. [ 58.300576][ T6304] infiniband syz0: set active [ 58.302215][ T6304] infiniband syz0: added bond0 [ 58.476103][ T6304] RDS/IB: syz0: added [ 58.479264][ T6304] smc: adding ib device syz0 with port count 1 [ 58.489103][ T6304] smc: ib device syz0 port 1 has pnetid [ 58.949665][ T6316] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.952647][ T6316] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.955792][ T6316] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.958464][ T6316] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.700847][ T35] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 59.835832][ T6352] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 59.880086][ T35] usb 7-1: Using ep0 maxpacket: 8 [ 59.883020][ T35] usb 7-1: config 0 has no interfaces? [ 59.885933][ T35] usb 7-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 59.888625][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.892539][ T35] usb 7-1: Product: syz [ 59.893782][ T35] usb 7-1: Manufacturer: syz [ 59.895134][ T35] usb 7-1: SerialNumber: syz [ 59.897029][ T35] usb 7-1: config 0 descriptor?? [ 60.103992][ T5982] usb 7-1: USB disconnect, device number 2 [ 60.142316][ T6374] netlink: 60 bytes leftover after parsing attributes in process `syz.1.74'. [ 60.765747][ T6390] netlink: 60 bytes leftover after parsing attributes in process `syz.1.78'. [ 60.794142][ T6399] FAULT_INJECTION: forcing a failure. [ 60.794142][ T6399] name failslab, interval 1, probability 0, space 0, times 1 [ 60.798000][ T6399] CPU: 1 UID: 0 PID: 6399 Comm: syz.3.81 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 60.800989][ T6399] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 60.804049][ T6399] Call Trace: [ 60.805044][ T6399] [ 60.805895][ T6399] dump_stack_lvl+0x16c/0x1f0 [ 60.807267][ T6399] should_fail_ex+0x497/0x5b0 [ 60.808633][ T6399] ? fs_reclaim_acquire+0xae/0x150 [ 60.810101][ T6399] should_failslab+0xc2/0x120 [ 60.811457][ T6399] __kmalloc_noprof+0xce/0x4f0 [ 60.813066][ T6399] ? tomoyo_encode2+0x100/0x3e0 [ 60.814467][ T6399] tomoyo_encode2+0x100/0x3e0 [ 60.815814][ T6399] tomoyo_realpath_from_path+0x1a7/0x710 [ 60.817423][ T6399] ? tomoyo_path_number_perm+0x235/0x5b0 [ 60.819023][ T6399] tomoyo_path_number_perm+0x248/0x5b0 [ 60.820632][ T6399] ? tomoyo_path_number_perm+0x235/0x5b0 [ 60.822240][ T6399] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 60.823954][ T6399] ? rcu_is_watching+0x12/0xc0 [ 60.825378][ T6399] ? preempt_count_add+0x76/0x150 [ 60.826955][ T6399] ? __pfx_lock_release+0x10/0x10 [ 60.828462][ T6399] ? trace_lock_acquire+0x14e/0x1f0 [ 60.829954][ T6399] ? __fget_files+0x40/0x3a0 [ 60.831287][ T6399] ? lock_acquire+0x2f/0xb0 [ 60.832618][ T6399] ? __fget_files+0x40/0x3a0 [ 60.833952][ T6399] ? __fget_files+0x206/0x3a0 [ 60.835312][ T6399] security_file_ioctl_compat+0x9b/0x240 [ 60.836921][ T6399] __do_compat_sys_ioctl+0x4e/0x2c0 [ 60.838413][ T6399] __do_fast_syscall_32+0x73/0x120 [ 60.839880][ T6399] do_fast_syscall_32+0x32/0x80 [ 60.841499][ T6399] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 60.843318][ T6399] RIP: 0023:0xf7fe5579 [ 60.844510][ T6399] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 60.849980][ T6399] RSP: 002b:00000000f513655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 60.852356][ T6399] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008912 [ 60.854613][ T6399] RDX: 0000000020000480 RSI: 0000000000000000 RDI: 0000000000000000 [ 60.856867][ T6399] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 60.859120][ T6399] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 60.861375][ T6399] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 60.863619][ T6399] [ 60.872053][ T6399] ERROR: Out of memory at tomoyo_realpath_from_path. [ 61.904503][ T6432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.89'. [ 61.944185][ T6431] netlink: 60 bytes leftover after parsing attributes in process `syz.3.87'. [ 61.952562][ T6432] syzkaller1: entered promiscuous mode [ 61.954046][ T6432] syzkaller1: entered allmulticast mode [ 62.821192][ T6445] netlink: 60 bytes leftover after parsing attributes in process `syz.3.92'. [ 62.843705][ T6449] netlink: 60 bytes leftover after parsing attributes in process `syz.0.94'. [ 63.193874][ T6468] netlink: 60 bytes leftover after parsing attributes in process `syz.0.99'. [ 63.894413][ T6476] FAULT_INJECTION: forcing a failure. [ 63.894413][ T6476] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 63.898243][ T6476] CPU: 1 UID: 0 PID: 6476 Comm: syz.2.101 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 63.901256][ T6476] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 63.904297][ T6476] Call Trace: [ 63.905295][ T6476] [ 63.906160][ T6476] dump_stack_lvl+0x16c/0x1f0 [ 63.907545][ T6476] should_fail_ex+0x497/0x5b0 [ 63.908919][ T6476] _copy_to_user+0x32/0xd0 [ 63.910199][ T6476] inet_gifconf+0x28e/0x520 [ 63.911506][ T6476] ? __pfx_inet_gifconf+0x10/0x10 [ 63.912954][ T6476] ? __might_fault+0xe3/0x190 [ 63.914315][ T6476] dev_ifconf+0x1f8/0x390 [ 63.915561][ T6476] ? __pfx_dev_ifconf+0x10/0x10 [ 63.916985][ T6476] ? tomoyo_path_number_perm+0x190/0x5b0 [ 63.918591][ T6476] sock_ioctl+0x38d/0x6c0 [ 63.919834][ T6476] ? __pfx_sock_ioctl+0x10/0x10 [ 63.921239][ T6476] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 63.922685][ T6476] compat_sock_ioctl+0x505/0x7e0 [ 63.924104][ T6476] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 63.925671][ T6476] ? __fget_files+0x206/0x3a0 [ 63.927048][ T6476] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 63.928613][ T6476] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 63.930127][ T6476] __do_fast_syscall_32+0x73/0x120 [ 63.931601][ T6476] do_fast_syscall_32+0x32/0x80 [ 63.933021][ T6476] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 63.934831][ T6476] RIP: 0023:0xf714e579 [ 63.936011][ T6476] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 63.941513][ T6476] RSP: 002b:00000000f514055c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 63.943883][ T6476] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008912 [ 63.946140][ T6476] RDX: 0000000020000480 RSI: 0000000000000000 RDI: 0000000000000000 [ 63.948413][ T6476] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 63.950665][ T6476] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 63.953199][ T6476] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 63.955474][ T6476] [ 63.956474][ C1] vkms_vblank_simulate: vblank timer overrun [ 64.024817][ T6482] Illegal XDP return value 4294967262 on prog (id 31) dev N/A, expect packet loss! [ 64.177535][ T6484] netlink: 60 bytes leftover after parsing attributes in process `syz.1.105'. [ 64.200067][ T35] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.360016][ T35] usb 5-1: Using ep0 maxpacket: 32 [ 64.362744][ T35] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 64.365666][ T35] usb 5-1: config 7 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.370158][ T35] usb 5-1: config 7 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.373046][ T35] usb 5-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 64.376806][ T35] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 64.379500][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.412592][ T6499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.106'. [ 64.437969][ T6499] syzkaller1: entered promiscuous mode [ 64.440182][ T6499] syzkaller1: entered allmulticast mode [ 64.794005][ T35] usbhid 5-1:7.0: can't add hid device: -71 [ 64.795836][ T35] usbhid 5-1:7.0: probe with driver usbhid failed with error -71 [ 64.800558][ T35] usb 5-1: USB disconnect, device number 2 [ 64.977862][ T6520] FAULT_INJECTION: forcing a failure. [ 64.977862][ T6520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.981684][ T6520] CPU: 0 UID: 0 PID: 6520 Comm: syz.2.112 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 64.984674][ T6520] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 64.987768][ T6520] Call Trace: [ 64.988745][ T6520] [ 64.989606][ T6520] dump_stack_lvl+0x16c/0x1f0 [ 64.990969][ T6520] should_fail_ex+0x497/0x5b0 [ 64.992334][ T6520] _copy_to_user+0x32/0xd0 [ 64.993620][ T6520] inet_gifconf+0x28e/0x520 [ 64.994927][ T6520] ? __pfx_inet_gifconf+0x10/0x10 [ 64.996383][ T6520] ? __might_fault+0xe3/0x190 [ 64.997735][ T6520] dev_ifconf+0x1f8/0x390 [ 64.998982][ T6520] ? __pfx_dev_ifconf+0x10/0x10 [ 65.000380][ T6520] ? tomoyo_path_number_perm+0x190/0x5b0 [ 65.002067][ T6520] sock_ioctl+0x38d/0x6c0 [ 65.003237][ T6520] ? __pfx_sock_ioctl+0x10/0x10 [ 65.004645][ T6520] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 65.006091][ T6520] ? preempt_count_add+0x76/0x150 [ 65.007591][ T6520] compat_sock_ioctl+0x505/0x7e0 [ 65.009025][ T6520] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 65.010675][ T6520] ? __fget_files+0x206/0x3a0 [ 65.012219][ T6520] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 65.013808][ T6520] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 65.015317][ T6520] __do_fast_syscall_32+0x73/0x120 [ 65.016806][ T6520] do_fast_syscall_32+0x32/0x80 [ 65.018223][ T6520] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 65.020039][ T6520] RIP: 0023:0xf714e579 [ 65.021231][ T6520] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 65.026692][ T6520] RSP: 002b:00000000f514055c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 65.029088][ T6520] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008912 [ 65.031352][ T6520] RDX: 0000000020000480 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.033615][ T6520] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 65.035867][ T6520] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 65.038145][ T6520] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 65.040416][ T6520] [ 65.354719][ T6526] netlink: 60 bytes leftover after parsing attributes in process `syz.1.114'. [ 65.599484][ T6540] netlink: 132 bytes leftover after parsing attributes in process `syz.1.117'. [ 68.089344][ T6581] overlay: Unknown parameter '/' [ 68.927042][ T6610] netlink: 60 bytes leftover after parsing attributes in process `syz.3.133'. [ 69.431754][ T1452] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 69.638694][ T1452] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 69.650111][ T1452] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 69.653537][ T1452] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 69.658550][ T1452] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 69.752120][ T1452] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 69.754770][ T1452] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 69.757061][ T1452] usb 8-1: Product: syz [ 69.758276][ T1452] usb 8-1: Manufacturer: syz [ 69.761497][ T1452] cdc_wdm 8-1:1.0: skipping garbage [ 69.763068][ T1452] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 69.966483][ T6632] syzkaller1: entered promiscuous mode [ 69.968229][ T6632] syzkaller1: entered allmulticast mode [ 69.980639][ T6632] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 69.984786][ T6632] batman_adv: batadv0: Adding interface: gretap1 [ 69.987138][ T6632] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.996375][ T6632] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 70.027674][ T5983] usb 8-1: USB disconnect, device number 2 [ 70.198601][ T6636] Zero length message leads to an empty skb [ 70.935605][ T1412] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.937623][ T1412] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.136489][ T6657] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 71.670730][ T6665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.147'. [ 71.748554][ T6665] syzkaller1: entered promiscuous mode [ 71.750350][ T6665] syzkaller1: entered allmulticast mode [ 73.023001][ T6700] netlink: 60 bytes leftover after parsing attributes in process `syz.1.157'. [ 75.512107][ T6778] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.620195][ T6815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.187'. [ 76.652962][ T6815] syzkaller1: entered promiscuous mode [ 76.654859][ T6815] syzkaller1: entered allmulticast mode [ 76.662931][ T6814] netlink: 60 bytes leftover after parsing attributes in process `syz.2.188'. [ 77.111908][ T6821] netlink: 60 bytes leftover after parsing attributes in process `syz.3.190'. [ 77.857258][ T6852] netlink: 60 bytes leftover after parsing attributes in process `syz.0.197'. [ 78.125431][ T6858] fuse: Unknown parameter '0x0000000000000003' [ 78.220121][ T6001] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 78.230292][ T6863] warning: `syz.2.200' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 78.371981][ T6001] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 78.374476][ T6001] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 78.377389][ T6001] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 78.380003][ T6001] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 78.385733][ T6001] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 78.388345][ T6001] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 78.390747][ T6001] usb 6-1: Product: syz [ 78.391950][ T6001] usb 6-1: Manufacturer: syz [ 78.395843][ T6001] cdc_wdm 6-1:1.0: skipping garbage [ 78.397388][ T6001] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 78.420156][ T6873] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.436979][ T6873] raw_sendmsg: syz.2.203 forgot to set AF_INET. Fix it! [ 78.520386][ T5969] kernel write not supported for file [eventfd] (pid: 5969 comm: kworker/2:3) [ 78.648804][ T6001] usb 6-1: USB disconnect, device number 2 [ 79.537453][ T6899] netlink: 60 bytes leftover after parsing attributes in process `syz.3.210'. [ 79.631866][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.211'. [ 79.775535][ T6906] syzkaller1: entered promiscuous mode [ 79.777292][ T6906] syzkaller1: entered allmulticast mode [ 80.037306][ T6921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.212'. [ 80.056015][ T6921] syzkaller1: entered promiscuous mode [ 80.057691][ T6921] syzkaller1: entered allmulticast mode [ 80.685485][ T6924] netlink: 60 bytes leftover after parsing attributes in process `syz.0.216'. [ 81.013121][ T57] cfg80211: failed to load regulatory.db [ 81.080755][ T6948] netlink: 60 bytes leftover after parsing attributes in process `syz.3.222'. [ 81.770858][ T6959] can0: slcan on ttyS3. [ 82.138086][ T6969] netlink: 60 bytes leftover after parsing attributes in process `syz.0.227'. [ 82.350429][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.228'. [ 82.372013][ T6988] syzkaller1: entered promiscuous mode [ 82.373652][ T6988] syzkaller1: entered allmulticast mode [ 82.390643][ T6956] can0 (unregistered): slcan off ttyS3. [ 84.412514][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.244'. [ 84.418999][ T7038] syzkaller1: entered promiscuous mode [ 84.420622][ T7038] syzkaller1: entered allmulticast mode [ 84.482060][ T7040] FAULT_INJECTION: forcing a failure. [ 84.482060][ T7040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.487242][ T7040] CPU: 2 UID: 0 PID: 7040 Comm: syz.3.243 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 84.491336][ T7040] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.495462][ T7040] Call Trace: [ 84.496704][ T7040] [ 84.497577][ T7040] dump_stack_lvl+0x16c/0x1f0 [ 84.499295][ T7040] should_fail_ex+0x497/0x5b0 [ 84.501036][ T7040] _copy_from_user+0x2e/0xd0 [ 84.502352][ T7040] get_compat_msghdr+0xa8/0x170 [ 84.503770][ T7040] ? __pfx_get_compat_msghdr+0x10/0x10 [ 84.505785][ T7040] ? __pfx__kstrtoull+0x10/0x10 [ 84.507667][ T7040] ? lock_release+0x4e2/0x6f0 [ 84.509483][ T7040] ___sys_sendmsg+0x1b0/0x1e0 [ 84.511301][ T7040] ? __pfx____sys_sendmsg+0x10/0x10 [ 84.513349][ T7040] ? __pfx_kstrtouint+0x10/0x10 [ 84.515183][ T7040] ? trace_lock_acquire+0x14e/0x1f0 [ 84.516709][ T7040] __sys_sendmmsg+0x2fa/0x420 [ 84.518102][ T7040] ? __pfx___sys_sendmmsg+0x10/0x10 [ 84.520008][ T7040] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 84.522308][ T7040] ? fput+0x67/0x440 [ 84.523882][ T7040] ? ksys_write+0x1ba/0x250 [ 84.525662][ T7040] ? __pfx_ksys_write+0x10/0x10 [ 84.527591][ T7040] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 84.529811][ T7040] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 84.532361][ T7040] __do_fast_syscall_32+0x73/0x120 [ 84.534372][ T7040] do_fast_syscall_32+0x32/0x80 [ 84.536280][ T7040] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 84.538598][ T7040] RIP: 0023:0xf7fe5579 [ 84.539987][ T7040] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 84.547003][ T7040] RSP: 002b:00000000f50f455c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 84.550254][ T7040] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020001600 [ 84.552544][ T7040] RDX: 0000000000000003 RSI: 0000000000040014 RDI: 0000000000000000 [ 84.554897][ T7040] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 84.557855][ T7040] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 84.560017][ T7040] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 84.562720][ T7040] [ 85.483173][ T7056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.296002][ T7081] netlink: 60 bytes leftover after parsing attributes in process `syz.2.250'. [ 86.521784][ T7090] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 86.587527][ T7093] netlink: 'syz.0.255': attribute type 4 has an invalid length. [ 86.788320][ T7109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.260'. [ 86.829532][ T7100] netlink: 60 bytes leftover after parsing attributes in process `syz.0.257'. [ 87.658861][ T7124] ntfs3: Unknown parameter '…¬FÑgÛmSØóMö„æ¶ì fLWVTà' [ 87.771804][ T7143] serio: Serial port ptm0 [ 87.810099][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 87.963592][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 87.966886][ T9] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 87.970904][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 87.974027][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 87.982126][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 87.984740][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 87.987230][ T9] usb 5-1: Product: syz [ 87.989184][ T9] usb 5-1: Manufacturer: syz [ 87.998088][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 87.999915][ T9] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 88.208179][ T9] usb 5-1: USB disconnect, device number 3 [ 88.681519][ T7163] mmap: syz.1.275 (7163) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 88.963079][ T7172] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 88.964997][ T7172] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 88.968124][ T7172] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 88.971433][ T7172] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 88.973503][ T7172] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 88.986860][ T7172] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 88.989336][ T7172] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 88.991330][ T7172] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 88.993462][ T7172] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 88.995802][ T7172] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 88.997665][ T7172] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 88.999729][ T7172] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 89.590115][ T835] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 89.773720][ T835] usb 6-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 89.777415][ T835] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.780690][ T835] usb 6-1: Product: syz [ 89.782052][ T835] usb 6-1: Manufacturer: syz [ 89.783658][ T835] usb 6-1: SerialNumber: syz [ 89.786931][ T835] usb 6-1: config 0 descriptor?? [ 89.791087][ T835] go7007 6-1:0.0: Sensoray 2250 found [ 89.792607][ T835] go7007 6-1:0.0: probe with driver go7007 failed with error -12 [ 89.975593][ T7198] netlink: 20 bytes leftover after parsing attributes in process `syz.0.291'. [ 90.137788][ T835] usb 6-1: USB disconnect, device number 3 [ 90.510961][ T7205] netlink: 60 bytes leftover after parsing attributes in process `syz.3.284'. [ 90.575198][ T7209] netlink: 60 bytes leftover after parsing attributes in process `syz.0.293'. [ 90.620979][ T7215] netfs: Couldn't get user pages (rc=-14) [ 90.930049][ T5953] Bluetooth: hci0: command 0x0c1a tx timeout [ 91.010095][ T5953] Bluetooth: hci3: command 0x0c1a tx timeout [ 91.011903][ T5953] Bluetooth: hci2: command 0x0c1a tx timeout [ 91.013725][ T5953] Bluetooth: hci1: command 0x0c1a tx timeout [ 91.246588][ T7235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.290'. [ 91.362417][ T7235] syzkaller1: entered promiscuous mode [ 91.364704][ T7235] syzkaller1: entered allmulticast mode [ 91.959572][ T98] Bluetooth: hci4: Frame reassembly failed (-84) [ 92.147200][ T7241] netlink: 60 bytes leftover after parsing attributes in process `syz.0.295'. [ 92.212831][ T7248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.294'. [ 92.315618][ T7248] syzkaller1: entered promiscuous mode [ 92.320207][ T7248] syzkaller1: entered allmulticast mode [ 92.331123][ T7251] dlm: non-version read from control device 506832391 [ 92.477777][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.479891][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.482032][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.484064][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.486117][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.490112][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.492154][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.494189][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.496248][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.498317][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.501871][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.503995][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.506083][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.508227][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.510581][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.512647][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.514659][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.516742][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.518820][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.521112][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.523184][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.525235][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.527252][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.529384][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.531597][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.533757][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.535796][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.537904][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.540075][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.542857][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.545002][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.547192][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.635867][ T9] hid-generic 0000:0000:0000.0002: hidraw1: HID vffffff.ff Device [syz0] on syz0 [ 92.727365][ T35] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 92.894863][ T35] usb 7-1: config 0 has no interfaces? [ 92.896537][ T35] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 92.899211][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.902320][ T35] usb 7-1: config 0 descriptor?? [ 93.010132][ T5953] Bluetooth: hci0: command 0x0c1a tx timeout [ 93.090203][ T5953] Bluetooth: hci1: command 0x0c1a tx timeout [ 93.090260][ T5948] Bluetooth: hci2: command 0x0c1a tx timeout [ 93.090317][ T5952] Bluetooth: hci3: command 0x0c1a tx timeout [ 93.328643][ T35] usb 7-1: string descriptor 0 read error: -71 [ 93.333764][ T35] usb 7-1: USB disconnect, device number 3 [ 93.940805][ T7284] netlink: 'syz.0.303': attribute type 5 has an invalid length. [ 93.980041][ T5948] Bluetooth: hci4: command 0x1003 tx timeout [ 93.980069][ T5944] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 94.144747][ T7291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.305'. [ 94.220577][ T7291] syzkaller1: entered promiscuous mode [ 94.222346][ T7291] syzkaller1: entered allmulticast mode [ 94.867498][ T7293] netlink: 60 bytes leftover after parsing attributes in process `syz.2.306'. [ 94.964118][ T6001] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 95.090161][ T5944] Bluetooth: hci0: command 0x0c1a tx timeout [ 95.112016][ T6001] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 95.114180][ T6001] usb 5-1: can't read configurations, error -61 [ 95.170128][ T5944] Bluetooth: hci2: command 0x0c1a tx timeout [ 95.170365][ T5948] Bluetooth: hci3: command 0x0c1a tx timeout [ 95.170696][ T5953] Bluetooth: hci1: command 0x0c1a tx timeout [ 95.240063][ T6001] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 95.403603][ T6001] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 95.405959][ T6001] usb 5-1: can't read configurations, error -61 [ 95.407960][ T6001] usb usb5-port1: attempt power cycle [ 95.771082][ T6001] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 95.849379][ T6001] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 95.851666][ T6001] usb 5-1: can't read configurations, error -61 [ 96.000039][ T6001] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 96.044631][ T6001] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 96.047896][ T6001] usb 5-1: can't read configurations, error -61 [ 96.051162][ T6001] usb usb5-port1: unable to enumerate USB device [ 97.981411][ T835] libceph: connect (1)[c::]:6789 error -101 [ 97.984229][ T835] libceph: mon0 (1)[c::]:6789 connect error [ 97.987391][ T7356] ceph: No mds server is up or the cluster is laggy [ 97.992058][ T835] libceph: connect (1)[c::]:6789 error -101 [ 97.995088][ T835] libceph: mon0 (1)[c::]:6789 connect error [ 98.090099][ T5969] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 98.251497][ T5969] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 98.254508][ T5969] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 98.257540][ T5969] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 98.260166][ T5969] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 98.265144][ T5969] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 98.267888][ T5969] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 98.270398][ T5969] usb 5-1: Product: syz [ 98.271853][ T5969] usb 5-1: Manufacturer: syz [ 98.302243][ T5969] cdc_wdm 5-1:1.0: skipping garbage [ 98.316022][ T5969] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 98.693734][ T7362] netlink: 60 bytes leftover after parsing attributes in process `syz.2.321'. [ 98.736355][ T5982] usb 5-1: USB disconnect, device number 8 [ 99.120558][ T7375] netlink: 60 bytes leftover after parsing attributes in process `syz.2.323'. [ 99.370385][ T7389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.325'. [ 99.411213][ T7389] syzkaller1: entered promiscuous mode [ 99.412948][ T7389] syzkaller1: entered allmulticast mode [ 99.805882][ T7394] syzkaller1: entered promiscuous mode [ 99.808000][ T7394] syzkaller1: entered allmulticast mode [ 100.035066][ T7401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.328'. [ 100.047522][ T7401] syzkaller1: entered promiscuous mode [ 100.049237][ T7401] syzkaller1: entered allmulticast mode [ 100.673432][ T7417] Cannot find add_set index 0 as target [ 101.046828][ T7421] netlink: 60 bytes leftover after parsing attributes in process `syz.2.335'. [ 101.569952][ T7439] syz.1.330[7439] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.570111][ T7439] syz.1.330[7439] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.574072][ T7439] syz.1.330[7439] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.776546][ T7438] netlink: 60 bytes leftover after parsing attributes in process `syz.0.337'. [ 101.905861][ T7449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.338'. [ 101.941026][ T7449] syzkaller1: entered promiscuous mode [ 101.942710][ T7449] syzkaller1: entered allmulticast mode [ 102.816796][ T7474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.344'. [ 102.866969][ T7474] syzkaller1: entered promiscuous mode [ 102.868839][ T7474] syzkaller1: entered allmulticast mode [ 102.898271][ T7470] netlink: 60 bytes leftover after parsing attributes in process `syz.0.346'. [ 103.197905][ T7478] netlink: 60 bytes leftover after parsing attributes in process `syz.0.347'. [ 103.510090][ T7466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.530685][ T94] Bluetooth: hci4: Frame reassembly failed (-84) [ 103.532713][ T94] Bluetooth: hci4: Frame reassembly failed (-84) [ 103.534628][ T94] Bluetooth: hci4: Frame reassembly failed (-84) [ 103.536597][ T94] Bluetooth: hci4: Frame reassembly failed (-84) [ 103.538672][ T94] Bluetooth: hci4: Frame reassembly failed (-84) [ 103.542647][ T94] Bluetooth: hci4: Frame reassembly failed (-84) [ 104.176793][ T7497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.351'. [ 104.199604][ T7497] syzkaller1: entered promiscuous mode [ 104.201773][ T7497] syzkaller1: entered allmulticast mode [ 104.310138][ T834] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 104.460078][ T834] usb 7-1: Using ep0 maxpacket: 8 [ 104.462143][ T834] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 104.462160][ T834] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 104.462172][ T834] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 104.462183][ T834] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 104.462194][ T834] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 104.463287][ T834] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 104.463302][ T834] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 104.463313][ T834] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 104.463324][ T834] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 104.463335][ T834] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 104.463983][ T834] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 104.463997][ T834] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 104.464008][ T834] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 104.464019][ T834] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 104.464030][ T834] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 104.465974][ T834] usb 7-1: string descriptor 0 read error: -22 [ 104.466000][ T834] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 104.466010][ T834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.469924][ T834] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 104.726888][ T835] usb 7-1: USB disconnect, device number 4 [ 105.570055][ T5944] Bluetooth: hci4: command 0x1003 tx timeout [ 105.570355][ T5948] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 105.678595][ T7507] netlink: 28 bytes leftover after parsing attributes in process `syz.1.354'. [ 105.722577][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 105.942351][ T7524] syzkaller1: entered promiscuous mode [ 105.943981][ T7524] syzkaller1: entered allmulticast mode [ 106.470042][ T5982] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 106.621627][ T5982] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 106.621652][ T5982] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 106.621666][ T5982] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 106.621689][ T5982] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 106.622849][ T5982] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 106.622870][ T5982] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 106.622885][ T5982] usb 8-1: Product: syz [ 106.622896][ T5982] usb 8-1: Manufacturer: syz [ 106.626142][ T5982] cdc_wdm 8-1:1.0: skipping garbage [ 106.626160][ T5982] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 106.892605][ T9] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 106.895979][ T9] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 106.899162][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 106.902428][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 106.909413][ T9] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 106.912966][ T9] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 106.915487][ T9] usb 7-1: Product: syz [ 106.917200][ T9] usb 7-1: Manufacturer: syz [ 106.922015][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 106.923907][ T9] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 107.104214][ T64] usb 8-1: USB disconnect, device number 3 [ 107.128618][ T5982] usb 7-1: USB disconnect, device number 5 [ 107.200293][ T7555] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 107.954019][ T7568] netlink: 60 bytes leftover after parsing attributes in process `syz.3.364'. [ 108.302421][ T7563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.519404][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.369'. [ 108.574838][ T7578] syzkaller1: entered promiscuous mode [ 108.576601][ T7578] syzkaller1: entered allmulticast mode [ 109.368669][ T7600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.373'. [ 109.379907][ T7600] syzkaller1: entered promiscuous mode [ 109.381665][ T7600] syzkaller1: entered allmulticast mode [ 109.992610][ T7602] netlink: 60 bytes leftover after parsing attributes in process `syz.1.374'. [ 110.055557][ T7609] netlink: 'syz.2.375': attribute type 1 has an invalid length. [ 110.058387][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.375'. [ 110.236419][ T7617] netlink: 20 bytes leftover after parsing attributes in process `syz.0.377'. [ 110.282521][ T7612] netlink: 60 bytes leftover after parsing attributes in process `syz.1.376'. [ 110.290309][ T5969] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 110.440102][ T5969] usb 7-1: Using ep0 maxpacket: 32 [ 110.442928][ T5969] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 110.446373][ T5969] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 110.449905][ T5969] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 110.453201][ T5969] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.458270][ T5969] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 110.460965][ T5969] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 110.463545][ T5969] usb 7-1: Product: syz [ 110.464901][ T5969] usb 7-1: Manufacturer: syz [ 110.466321][ T5969] usb 7-1: SerialNumber: syz [ 110.470946][ T7607] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 110.474354][ T5969] input: appletouch as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/input/input5 [ 110.509770][ T7621] ebtables: wrong size: *len 120, entries_size 48, replsz 48 [ 110.674899][ T64] usb 7-1: USB disconnect, device number 6 [ 110.700842][ T64] appletouch 7-1:1.0: input: appletouch disconnected [ 111.331842][ T7649] netlink: 60 bytes leftover after parsing attributes in process `syz.3.382'. [ 111.533994][ T7657] netlink: 60 bytes leftover after parsing attributes in process `syz.2.383'. [ 111.537427][ T7664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.384'. [ 111.618721][ T7664] syzkaller1: entered promiscuous mode [ 111.620674][ T7664] syzkaller1: entered allmulticast mode [ 111.865569][ T7671] netlink: 48 bytes leftover after parsing attributes in process `syz.2.387'. [ 112.119995][ T64] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 112.282929][ T64] usb 7-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 112.286457][ T64] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.289464][ T64] usb 7-1: Product: syz [ 112.291534][ T64] usb 7-1: Manufacturer: syz [ 112.293342][ T64] usb 7-1: SerialNumber: syz [ 112.295963][ T64] usb 7-1: config 0 descriptor?? [ 112.504205][ T64] cx82310_eth 7-1:0.0: probe with driver cx82310_eth failed with error -22 [ 112.507844][ T64] cxacru 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 112.510756][ T64] usb 7-1: USB disconnect, device number 7 [ 112.867875][ T7689] netlink: 60 bytes leftover after parsing attributes in process `syz.0.390'. [ 113.661495][ T7742] netlink: 'syz.3.404': attribute type 10 has an invalid length. [ 113.947586][ T7759] netlink: 'syz.2.409': attribute type 10 has an invalid length. [ 114.199946][ T7777] @ÿ: renamed from veth0_vlan (while UP) [ 114.423453][ T7794] __nla_validate_parse: 3 callbacks suppressed [ 114.423485][ T7794] netlink: 60 bytes leftover after parsing attributes in process `syz.0.419'. [ 114.674236][ T7804] netlink: 32 bytes leftover after parsing attributes in process `syz.1.423'. [ 115.246794][ T7810] netlink: 60 bytes leftover after parsing attributes in process `syz.0.425'. [ 115.284771][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.427'. [ 117.449015][ T7897] netlink: 60 bytes leftover after parsing attributes in process `syz.3.444'. [ 118.544877][ T7945] netlink: 60 bytes leftover after parsing attributes in process `syz.1.455'. [ 118.820934][ T7950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.456'. [ 118.841694][ T7928] netlink: 60 bytes leftover after parsing attributes in process `syz.3.452'. [ 118.851264][ T7950] syzkaller1: entered promiscuous mode [ 118.852922][ T7950] syzkaller1: entered allmulticast mode [ 119.785771][ T7954] netlink: 60 bytes leftover after parsing attributes in process `syz.0.457'. [ 119.922507][ T7967] rdma_rxe: rxe_newlink: failed to add bond0 [ 119.964167][ T7969] overlayfs: failed to resolve './file1': -2 [ 119.967068][ T7969] tipc: Started in network mode [ 119.969125][ T7969] tipc: Node identity 10000, cluster identity 4711 [ 119.971546][ T7969] tipc: Node number set to 65536 [ 120.950548][ T7995] netlink: 60 bytes leftover after parsing attributes in process `syz.1.465'. [ 121.295934][ T8001] netlink: 60 bytes leftover after parsing attributes in process `syz.0.464'. [ 121.525208][ T8007] netlink: 'syz.3.467': attribute type 2 has an invalid length. [ 121.527504][ T8007] netlink: 'syz.3.467': attribute type 1 has an invalid length. [ 121.739951][ T8020] netlink: 60 bytes leftover after parsing attributes in process `syz.1.477'. [ 121.758784][ T8015] netlink: 60 bytes leftover after parsing attributes in process `syz.3.468'. [ 122.817510][ T8038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.820891][ T8038] bond0: (slave rose0): Enslaving as an active interface with an up link [ 123.278367][ T8060] netlink: 60 bytes leftover after parsing attributes in process `syz.2.476'. [ 123.310214][ T8041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.474'. [ 123.318078][ T8041] syzkaller1: entered promiscuous mode [ 123.321459][ T8041] syzkaller1: entered allmulticast mode [ 123.494167][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'. [ 123.623730][ T8068] netlink: 60 bytes leftover after parsing attributes in process `syz.0.479'. [ 124.529626][ T8106] pim6reg: entered allmulticast mode [ 124.770456][ T8115] block nbd1: shutting down sockets [ 124.783715][ T8113] block nbd1: server does not support multiple connections per device. [ 124.786409][ T8113] block nbd1: NBD_DISCONNECT [ 124.787738][ T8113] block nbd1: Send disconnect failed -32 [ 124.789335][ T8113] block nbd1: Send disconnect failed -32 [ 124.800099][ T6001] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 124.998025][ T6001] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.001554][ T6001] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.004662][ T6001] usb 7-1: New USB device found, idVendor=056a, idProduct=00bc, bcdDevice= 0.00 [ 125.007786][ T6001] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.030347][ T6001] usb 7-1: config 0 descriptor?? [ 125.515256][ T6001] usbhid 7-1:0.0: can't add hid device: -71 [ 125.517151][ T6001] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 125.520458][ T6001] usb 7-1: USB disconnect, device number 8 [ 125.804543][ T8122] netlink: 60 bytes leftover after parsing attributes in process `syz.1.492'. [ 125.932515][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.494'. [ 125.935055][ T8128] netlink: 20 bytes leftover after parsing attributes in process `syz.3.494'. [ 126.826616][ T8147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.498'. [ 126.829185][ T8147] bridge_slave_1: left allmulticast mode [ 126.830849][ T8147] bridge_slave_1: left promiscuous mode [ 126.832607][ T8147] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.835849][ T8147] bridge_slave_0: left allmulticast mode [ 126.837539][ T8147] bridge_slave_0: left promiscuous mode [ 126.839449][ T8147] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.969103][ T8148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.497'. [ 127.211295][ T8163] netlink: 60 bytes leftover after parsing attributes in process `syz.1.501'. [ 127.740957][ T8170] netlink: 60 bytes leftover after parsing attributes in process `syz.3.502'. [ 128.067357][ T8180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.505'. [ 128.334445][ T8186] netlink: 60 bytes leftover after parsing attributes in process `syz.3.506'. [ 129.622033][ T8219] netlink: 60 bytes leftover after parsing attributes in process `syz.1.516'. [ 130.025112][ T8239] capability: warning: `syz.1.519' uses 32-bit capabilities (legacy support in use) [ 131.207698][ T8275] __nla_validate_parse: 1 callbacks suppressed [ 131.208142][ T8275] netlink: 60 bytes leftover after parsing attributes in process `syz.0.526'. [ 131.300639][ T8283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.532'. [ 131.313296][ T8283] syzkaller1: entered promiscuous mode [ 131.315491][ T8283] syzkaller1: entered allmulticast mode [ 132.104840][ T8288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.534'. [ 132.211442][ T1412] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.213806][ T1412] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.245617][ T8294] netlink: 'syz.2.536': attribute type 4 has an invalid length. [ 132.245796][ T8295] netlink: 'syz.2.536': attribute type 4 has an invalid length. [ 132.469713][ T8301] /dev/nullb0: Can't open blockdev [ 133.268667][ T8307] netlink: 60 bytes leftover after parsing attributes in process `syz.2.539'. [ 133.630673][ T8324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.543'. [ 133.689855][ T8324] syzkaller1: entered promiscuous mode [ 133.691513][ T8324] syzkaller1: entered allmulticast mode [ 134.029085][ T8331] autofs: Unknown parameter 'fo' [ 134.558746][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.548'. [ 134.757053][ T8352] syzkaller1: entered promiscuous mode [ 134.759031][ T8352] syzkaller1: entered allmulticast mode [ 135.559187][ T8361] netlink: 60 bytes leftover after parsing attributes in process `syz.0.550'. [ 135.698283][ T8377] netlink: 60 bytes leftover after parsing attributes in process `syz.1.552'. [ 136.619601][ T8391] netlink: 60 bytes leftover after parsing attributes in process `syz.1.558'. [ 136.998942][ T8403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.560'. [ 137.027911][ T8403] syzkaller1: entered promiscuous mode [ 137.030589][ T8403] syzkaller1: entered allmulticast mode [ 137.050134][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 137.430922][ T9] usb 6-1: config 8 has an invalid interface number: 175 but max is 3 [ 137.434966][ T9] usb 6-1: config 8 has an invalid interface number: 118 but max is 3 [ 137.437502][ T9] usb 6-1: config 8 has an invalid interface number: 172 but max is 3 [ 137.440123][ T9] usb 6-1: config 8 has an invalid interface number: 212 but max is 3 [ 137.442557][ T9] usb 6-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 137.445221][ T9] usb 6-1: config 8 has no interface number 0 [ 137.447135][ T9] usb 6-1: config 8 has no interface number 1 [ 137.448999][ T9] usb 6-1: config 8 has no interface number 2 [ 137.451273][ T9] usb 6-1: config 8 has no interface number 3 [ 137.453068][ T9] usb 6-1: config 8 interface 175 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 137.456242][ T9] usb 6-1: config 8 interface 175 altsetting 0 endpoint 0x4 has invalid maxpacket 1015, setting to 64 [ 137.459580][ T9] usb 6-1: config 8 interface 175 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 137.462904][ T9] usb 6-1: config 8 interface 175 altsetting 0 endpoint 0x3 has invalid maxpacket 1527, setting to 64 [ 137.466120][ T9] usb 6-1: config 8 interface 175 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 137.469159][ T9] usb 6-1: config 8 interface 118 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 137.472552][ T9] usb 6-1: config 8 interface 118 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 137.475861][ T9] usb 6-1: config 8 interface 172 altsetting 255 has a duplicate endpoint with address 0x3, skipping [ 137.478968][ T9] usb 6-1: config 8 interface 172 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 137.482231][ T9] usb 6-1: config 8 interface 172 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 137.485391][ T9] usb 6-1: config 8 interface 172 altsetting 255 has a duplicate endpoint with address 0x8, skipping [ 137.488662][ T9] usb 6-1: config 8 interface 172 altsetting 255 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 137.510068][ T9] usb 6-1: config 8 interface 172 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 137.513191][ T9] usb 6-1: config 8 interface 172 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 137.516300][ T9] usb 6-1: config 8 interface 172 altsetting 255 has a duplicate endpoint with address 0xA, skipping [ 137.519171][ T9] usb 6-1: config 8 interface 172 altsetting 255 bulk endpoint 0xE has invalid maxpacket 1023 [ 137.540098][ T9] usb 6-1: config 8 interface 172 altsetting 255 has a duplicate endpoint with address 0x2, skipping [ 137.543190][ T9] usb 6-1: config 8 interface 212 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 137.546286][ T9] usb 6-1: config 8 interface 212 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 137.549447][ T9] usb 6-1: config 8 interface 212 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 137.556346][ T9] usb 6-1: config 8 interface 212 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 137.559429][ T9] usb 6-1: config 8 interface 212 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 137.562566][ T9] usb 6-1: config 8 interface 212 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 137.565582][ T9] usb 6-1: config 8 interface 212 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 137.568694][ T9] usb 6-1: config 8 interface 212 altsetting 1 has an endpoint descriptor with address 0x99, changing to 0x89 [ 137.572211][ T9] usb 6-1: config 8 interface 212 altsetting 1 has a duplicate endpoint with address 0x89, skipping [ 137.575255][ T9] usb 6-1: config 8 interface 118 has no altsetting 0 [ 137.577260][ T9] usb 6-1: config 8 interface 172 has no altsetting 0 [ 137.579203][ T9] usb 6-1: config 8 interface 212 has no altsetting 0 [ 137.582645][ T9] usb 6-1: New USB device found, idVendor=066b, idProduct=2204, bcdDevice=8a.6d [ 137.585298][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.587630][ T9] usb 6-1: Product: 袠ୋ䕃玵乓ṋ쮕â”ጌ㕄䔱憪䈈⛞蓲â‡ì±ä¾²ç’£á¸Œã“椮䰎러箲燚窖謾您䂉ଵ䫇棻㮬笿Ώí‘⣓ïªíš–Ö©à¦ï¯çŠ€å¥¦ì˜•æ«®æ»†æ’ì«ìƒ¹å¹Šé¾«ì®¬ê‰á¬­î‚ᬭ [ 137.593212][ T9] usb 6-1: Manufacturer: á›îœµå„“Þ’ì‚鸭æ¡çž²ëµ©å…¿î‡¦ï¼¼æŒ´ç¼‚馃妟콮䡢㗦쟃ሩç±ì¯Ÿè¦“噳暗屄ï¿î°•é“žã¡ªäº©å¢–縓ฉã±æ¥® [ 137.597321][ T9] usb 6-1: SerialNumber: Я [ 137.860753][ T8412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.562'. [ 137.873865][ T8412] syzkaller1: entered promiscuous mode [ 137.876276][ T8412] syzkaller1: entered allmulticast mode [ 137.929406][ T9] pegasus 6-1:8.175: probe with driver pegasus failed with error -71 [ 137.991460][ T9] pegasus 6-1:8.118: probe with driver pegasus failed with error -71 [ 138.007298][ T9] pegasus 6-1:8.172: probe with driver pegasus failed with error -71 [ 138.038175][ T9] pegasus 6-1:8.212: probe with driver pegasus failed with error -71 [ 138.192367][ T9] usb 6-1: USB disconnect, device number 4 [ 138.271178][ T8416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.563'. [ 138.294423][ T8416] syzkaller1: entered promiscuous mode [ 138.296286][ T8416] syzkaller1: entered allmulticast mode [ 139.330039][ T5969] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 139.511482][ T5969] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 139.514675][ T5969] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 139.518775][ T5969] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 139.522801][ T5969] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 139.528915][ T5969] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 139.531691][ T5969] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 139.533990][ T5969] usb 7-1: Product: syz [ 139.535202][ T5969] usb 7-1: Manufacturer: syz [ 139.539473][ T5969] cdc_wdm 7-1:1.0: skipping garbage [ 139.541301][ T5969] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 139.845884][ T9] usb 7-1: USB disconnect, device number 9 [ 140.024563][ T8438] netlink: 60 bytes leftover after parsing attributes in process `syz.0.567'. [ 141.232346][ T8452] netlink: 60 bytes leftover after parsing attributes in process `syz.0.570'. [ 141.451326][ T8464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.575'. [ 141.465192][ T8464] syzkaller1: entered promiscuous mode [ 141.466687][ T8464] syzkaller1: entered allmulticast mode [ 141.706092][ T8469] block nbd2: not configured, cannot reconfigure [ 142.274230][ T8479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.578'. [ 142.332422][ T8479] syzkaller1: entered promiscuous mode [ 142.334274][ T8479] syzkaller1: entered allmulticast mode [ 142.622965][ T8481] netlink: 60 bytes leftover after parsing attributes in process `syz.0.579'. [ 142.923408][ T8490] @: renamed from vlan0 (while UP) [ 143.015138][ T8489] netlink: 60 bytes leftover after parsing attributes in process `syz.1.582'. [ 143.783355][ T8515] netlink: 60 bytes leftover after parsing attributes in process `syz.2.588'. [ 143.903358][ T8524] tmpfs: Unknown parameter 'mpol*defa•lt:' [ 144.043500][ T8530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.592'. [ 144.056714][ T8530] syzkaller1: entered promiscuous mode [ 144.058439][ T8530] syzkaller1: entered allmulticast mode [ 144.618254][ T8532] netlink: 60 bytes leftover after parsing attributes in process `syz.0.593'. [ 145.586402][ T8553] netlink: 'syz.1.598': attribute type 12 has an invalid length. [ 146.290934][ T8584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.601'. [ 146.299780][ T8584] syzkaller1: entered promiscuous mode [ 146.301550][ T8584] syzkaller1: entered allmulticast mode [ 146.802324][ T8596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.602'. [ 146.819740][ T8596] syzkaller1: entered promiscuous mode [ 146.821657][ T8596] syzkaller1: entered allmulticast mode [ 146.863680][ T8590] netlink: 60 bytes leftover after parsing attributes in process `syz.2.604'. [ 147.261783][ T39] audit: type=1804 audit(1736067721.354:36): pid=8613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.608" name="/newroot/139/bus/bus" dev="overlay" ino=777 res=1 errno=0 [ 147.350362][ T834] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 147.437018][ T8621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.610'. [ 147.518180][ T8621] syzkaller1: entered promiscuous mode [ 147.519905][ T8621] syzkaller1: entered allmulticast mode [ 147.535931][ T834] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 147.538412][ T834] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 147.546606][ T834] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 147.549424][ T834] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 147.580168][ T834] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 147.584019][ T834] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 147.586304][ T834] usb 7-1: Product: syz [ 147.587498][ T834] usb 7-1: Manufacturer: syz [ 147.591233][ T834] cdc_wdm 7-1:1.0: skipping garbage [ 147.592862][ T834] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 147.999134][ T5969] usb 7-1: USB disconnect, device number 10 [ 179.397162][ T8638] netlink: 'syz.3.616': attribute type 10 has an invalid length. [ 179.405209][ T8638] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 179.439873][ T8638] netlink: 164 bytes leftover after parsing attributes in process `syz.3.616'. [ 179.639880][ T8659] netlink: 60 bytes leftover after parsing attributes in process `syz.3.617'. [ 179.640245][ T8647] netlink: 60 bytes leftover after parsing attributes in process `syz.1.614'. [ 179.687321][ T8655] netlink: 60 bytes leftover after parsing attributes in process `syz.2.615'. [ 180.151483][ T8670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.621'. [ 180.326349][ T8677] futex_wake_op: syz.3.623 tries to shift op by -1; fix this program [ 180.388633][ T8677] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.442595][ T8677] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.484980][ T8677] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.523306][ T8678] netlink: 60 bytes leftover after parsing attributes in process `syz.2.624'. [ 180.536083][ T8677] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.589776][ T8677] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.593889][ T8677] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.598057][ T8677] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.602531][ T8677] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.710045][ T8] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 180.927841][ T8690] netlink: 60 bytes leftover after parsing attributes in process `syz.2.627'. [ 180.931272][ T8683] netlink: 60 bytes leftover after parsing attributes in process `syz.0.625'. [ 181.174101][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 181.231651][ T8] usb 6-1: config 0 has no interfaces? [ 181.234829][ T8] usb 6-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 181.238025][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.240906][ T8] usb 6-1: Product: syz [ 181.242534][ T8] usb 6-1: Manufacturer: syz [ 181.244345][ T8] usb 6-1: SerialNumber: syz [ 181.260168][ T8] usb 6-1: config 0 descriptor?? [ 181.700674][ T8] usb 6-1: USB disconnect, device number 5 [ 181.719660][ T8703] netlink: 60 bytes leftover after parsing attributes in process `syz.3.630'. [ 182.404743][ T8714] netlink: 60 bytes leftover after parsing attributes in process `syz.0.632'. [ 183.238599][ T8739] netlink: 'syz.1.637': attribute type 1 has an invalid length. [ 183.285922][ T8739] team0 (unregistering): Port device team_slave_0 removed [ 183.289362][ T8739] team0 (unregistering): Port device team_slave_1 removed [ 183.748468][ T8761] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 183.750869][ T8761] overlayfs: failed to set xattr on upper [ 183.752782][ T8761] overlayfs: ...falling back to redirect_dir=nofollow. [ 183.754941][ T8761] overlayfs: ...falling back to index=off. [ 183.756683][ T8761] overlayfs: ...falling back to uuid=null. [ 183.999069][ T8769] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 184.267790][ T8774] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 184.271579][ T8774] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 184.945288][ T8786] __nla_validate_parse: 6 callbacks suppressed [ 184.945300][ T8786] netlink: 60 bytes leftover after parsing attributes in process `syz.3.646'. [ 185.009554][ T8791] netlink: 60 bytes leftover after parsing attributes in process `syz.1.648'. [ 185.242928][ T8800] netlink: 60 bytes leftover after parsing attributes in process `syz.0.649'. [ 185.643667][ T8803] netlink: 20 bytes leftover after parsing attributes in process `syz.3.650'. [ 185.699752][ T8809] netlink: 60 bytes leftover after parsing attributes in process `syz.1.651'. [ 186.460120][ T834] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 186.532362][ T8829] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 186.534435][ T8829] overlayfs: failed to set xattr on upper [ 186.536229][ T8829] overlayfs: ...falling back to redirect_dir=nofollow. [ 186.538288][ T8829] overlayfs: ...falling back to index=off. [ 186.543664][ T8829] overlayfs: ...falling back to uuid=null. [ 186.610145][ T834] usb 5-1: Using ep0 maxpacket: 8 [ 186.613785][ T834] usb 5-1: config 0 has no interfaces? [ 186.617701][ T834] usb 5-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 186.621443][ T834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.624202][ T834] usb 5-1: Product: syz [ 186.625923][ T834] usb 5-1: Manufacturer: syz [ 186.627667][ T834] usb 5-1: SerialNumber: syz [ 186.629783][ T834] usb 5-1: config 0 descriptor?? [ 186.693011][ T8834] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 186.727664][ T8834] netlink: 28 bytes leftover after parsing attributes in process `syz.3.656'. [ 187.166801][ T8839] netlink: 60 bytes leftover after parsing attributes in process `syz.3.657'. [ 187.281617][ T8844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.658'. [ 187.319833][ T8844] syzkaller1: entered promiscuous mode [ 187.322601][ T8844] syzkaller1: entered allmulticast mode [ 187.595151][ T8848] netlink: 60 bytes leftover after parsing attributes in process `syz.2.660'. [ 187.889515][ T8856] netlink: 60 bytes leftover after parsing attributes in process `syz.2.663'. [ 188.143389][ T8868] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 188.680101][ T5983] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 188.770148][ T5969] usb 5-1: USB disconnect, device number 9 [ 188.831322][ T5983] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 188.835335][ T5983] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 188.842712][ T5983] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 188.845386][ T5983] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 188.852419][ T5983] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 188.857164][ T5983] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 188.859513][ T5983] usb 7-1: Product: syz [ 188.861583][ T5983] usb 7-1: Manufacturer: syz [ 188.865067][ T5983] cdc_wdm 7-1:1.0: skipping garbage [ 188.867073][ T5983] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 189.203743][ T57] usb 7-1: USB disconnect, device number 11 [ 189.277643][ T8900] syzkaller1: entered promiscuous mode [ 189.279314][ T8900] syzkaller1: entered allmulticast mode [ 189.881575][ T8906] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 189.884186][ T8906] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 189.890296][ T8906] vhci_hcd vhci_hcd.0: Device attached [ 189.994168][ T8910] __nla_validate_parse: 4 callbacks suppressed [ 189.994192][ T8910] netlink: 36 bytes leftover after parsing attributes in process `syz.1.675'. [ 190.180077][ T5983] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 190.210037][ T9] vhci_hcd: vhci_device speed not set [ 190.270011][ T9] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 190.331780][ T5983] usb 7-1: config 0 has no interfaces? [ 190.333523][ T5983] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 190.336101][ T5983] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.344573][ T5983] usb 7-1: config 0 descriptor?? [ 190.551470][ T8907] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 190.554842][ T1135] vhci_hcd: stop threads [ 190.556247][ T1135] vhci_hcd: release socket [ 190.557659][ T1135] vhci_hcd: disconnect device [ 191.183964][ T39] audit: type=1326 audit(1736067765.274:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8928 comm="syz.1.682" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f60579 code=0x0 [ 191.286388][ T8930] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 191.288746][ T8930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.638363][ T8942] netlink: 20 bytes leftover after parsing attributes in process `syz.1.684'. [ 192.393859][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.689'. [ 192.529338][ T8960] netlink: 'syz.1.690': attribute type 10 has an invalid length. [ 192.534153][ T8960] bond0: (slave wlan1): Opening slave failed [ 192.753626][ T64] usb 7-1: USB disconnect, device number 12 [ 192.836287][ T8989] syzkaller0: entered promiscuous mode [ 192.840708][ T8989] syzkaller0: entered allmulticast mode [ 193.188713][ T9028] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 193.206608][ T39] audit: type=1800 audit(1736067767.294:38): pid=9026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.699" name="file0" dev="overlay" ino=1002 res=0 errno=0 [ 193.423244][ T9064] cgroup: Bad value for 'name' [ 193.631819][ T9087] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 193.651299][ T1412] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.711420][ T9109] binder: 9101:9109 ioctl c0306201 20000680 returned -14 [ 194.150504][ T9134] netlink: 28 bytes leftover after parsing attributes in process `syz.3.709'. [ 194.239187][ T39] audit: type=1800 audit(1736067768.324:39): pid=9138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.710" name="file0" dev="overlay" ino=952 res=0 errno=0 [ 194.245314][ T9139] program syz.0.708 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.418910][ T9141] netlink: 60 bytes leftover after parsing attributes in process `syz.3.711'. [ 194.533549][ T39] audit: type=1326 audit(1736067768.624:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.3.713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 194.540049][ T39] audit: type=1326 audit(1736067768.624:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.3.713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 194.545487][ T39] audit: type=1326 audit(1736067768.624:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.3.713" exe="/syz-executor" sig=0 arch=40000003 syscall=97 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 194.551170][ T39] audit: type=1326 audit(1736067768.634:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.3.713" exe="/syz-executor" sig=0 arch=40000003 syscall=97 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 194.556618][ T39] audit: type=1326 audit(1736067768.634:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.3.713" exe="/syz-executor" sig=0 arch=40000003 syscall=97 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 194.562204][ T39] audit: type=1326 audit(1736067768.634:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.3.713" exe="/syz-executor" sig=0 arch=40000003 syscall=97 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 194.569856][ T39] audit: type=1326 audit(1736067768.634:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.3.713" exe="/syz-executor" sig=0 arch=40000003 syscall=97 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 194.593413][ T9156] ntfs3(nullb0): Primary boot signature is not NTFS. [ 194.595910][ T9156] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 194.736528][ T9158] netlink: 60 bytes leftover after parsing attributes in process `syz.3.714'. [ 194.817189][ T9166] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 194.997614][ T8] kernel read not supported for file /video7 (pid: 8 comm: kworker/0:0) [ 195.156676][ T9197] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 195.360463][ T9204] block device autoloading is deprecated and will be removed. [ 195.363571][ T9204] syz.0.724: attempt to access beyond end of device [ 195.363571][ T9204] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 195.410318][ T9] vhci_hcd: vhci_device speed not set [ 195.662915][ T9212] netlink: 60 bytes leftover after parsing attributes in process `syz.1.726'. [ 196.038400][ T9224] x_tables: duplicate underflow at hook 3 [ 196.331694][ T9240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.734'. [ 196.407352][ T9239] netlink: 60 bytes leftover after parsing attributes in process `syz.0.732'. [ 196.742350][ T9246] netlink: 'syz.1.736': attribute type 1 has an invalid length. [ 196.750188][ T9246] netlink: 224 bytes leftover after parsing attributes in process `syz.1.736'. [ 196.890094][ T57] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 196.975781][ T9237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.190057][ T57] usb 5-1: Using ep0 maxpacket: 8 [ 197.192630][ T57] usb 5-1: config 7 has an invalid interface number: 161 but max is 0 [ 197.194781][ T57] usb 5-1: config 7 has no interface number 0 [ 197.196488][ T57] usb 5-1: config 7 interface 161 has no altsetting 0 [ 197.202641][ T57] usb 5-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=4e.59 [ 197.206091][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.209109][ T57] usb 5-1: Product: syz [ 197.210635][ T57] usb 5-1: Manufacturer: syz [ 197.212421][ T57] usb 5-1: SerialNumber: syz [ 197.450754][ T57] hub 5-1:7.161: bad descriptor, ignoring hub [ 197.452953][ T57] hub 5-1:7.161: probe with driver hub failed with error -5 [ 197.455843][ T57] cypress_m8 5-1:7.161: HID->COM RS232 Adapter converter detected [ 197.458645][ T57] cyphidcom ttyUSB0: required endpoint is missing [ 197.480253][ T57] usb 5-1: USB disconnect, device number 10 [ 197.482176][ T57] cypress_m8 5-1:7.161: device disconnected [ 198.135843][ T39] kauditd_printk_skb: 65 callbacks suppressed [ 198.135853][ T39] audit: type=1326 audit(1736067772.224:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9268 comm="syz.0.743" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 198.144317][ T39] audit: type=1326 audit(1736067772.224:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9268 comm="syz.0.743" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 198.151443][ T39] audit: type=1326 audit(1736067772.224:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9268 comm="syz.0.743" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 198.158673][ T39] audit: type=1326 audit(1736067772.224:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9268 comm="syz.0.743" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 198.166340][ T39] audit: type=1326 audit(1736067772.224:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9268 comm="syz.0.743" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 198.172666][ T39] audit: type=1326 audit(1736067772.224:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9268 comm="syz.0.743" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 198.178767][ T39] audit: type=1326 audit(1736067772.224:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9268 comm="syz.0.743" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 198.185135][ T39] audit: type=1326 audit(1736067772.224:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9268 comm="syz.0.743" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 198.191279][ T39] audit: type=1326 audit(1736067772.234:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9268 comm="syz.0.743" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 198.197214][ T39] audit: type=1326 audit(1736067772.234:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9268 comm="syz.0.743" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 198.753342][ T9302] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 199.569586][ T9311] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 199.701528][ T9318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.757'. [ 199.714528][ T9318] syzkaller1: entered promiscuous mode [ 199.716254][ T9318] syzkaller1: entered allmulticast mode [ 199.922972][ T5944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 199.925105][ T5944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 199.927197][ T5944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 199.929386][ T5944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 199.931696][ T5944] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 199.934172][ T5944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 200.039543][ T9320] chnl_net:caif_netlink_parms(): no params data found [ 200.106349][ T9320] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.108559][ T9320] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.111497][ T9320] bridge_slave_0: entered allmulticast mode [ 200.122694][ T9320] bridge_slave_0: entered promiscuous mode [ 200.135397][ T9320] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.137912][ T9320] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.140629][ T9320] bridge_slave_1: entered allmulticast mode [ 200.142777][ T9320] bridge_slave_1: entered promiscuous mode [ 200.159503][ T9320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.163360][ T9320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.178218][ T9320] team0: Port device team_slave_0 added [ 200.181134][ T9320] team0: Port device team_slave_1 added [ 200.194689][ T9320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.196747][ T9320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.205030][ T9320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.208911][ T9320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.211309][ T9320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.219140][ T9320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.237358][ T9320] hsr_slave_0: entered promiscuous mode [ 200.240293][ T9320] hsr_slave_1: entered promiscuous mode [ 200.242235][ T9320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.244530][ T9320] Cannot create hsr debugfs directory [ 200.285851][ T9320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 200.288845][ T9320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 200.292344][ T9320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 200.296101][ T9320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 200.305644][ T9320] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.307738][ T9320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.309854][ T9320] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.311931][ T9320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.328189][ T9320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.333402][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.336183][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.342367][ T9320] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.346048][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.348078][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.352366][ T1239] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.354392][ T1239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.405369][ T9320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.467201][ T9320] veth0_vlan: entered promiscuous mode [ 200.471001][ T9320] veth1_vlan: entered promiscuous mode [ 200.479479][ T9320] veth0_macvtap: entered promiscuous mode [ 200.482552][ T9320] veth1_macvtap: entered promiscuous mode [ 200.487363][ T9320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.490627][ T9320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.493413][ T9320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.496428][ T9320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.499183][ T9320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.502720][ T9320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.505535][ T9320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.508454][ T9320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.511985][ T9320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.515761][ T9320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.518691][ T9320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.521644][ T9320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.524575][ T9320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.527387][ T9320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.530373][ T9320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.533198][ T9320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.536140][ T9320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.540590][ T9320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.547795][ T9320] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.555527][ T9320] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.558003][ T9320] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.560682][ T9320] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.578727][ T9341] syzkaller0: entered promiscuous mode [ 200.580457][ T9341] syzkaller0: entered allmulticast mode [ 200.595839][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.598924][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.609767][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.612238][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.400128][ T64] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 201.552203][ T64] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 201.555037][ T64] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 201.557924][ T64] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 201.561022][ T64] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 201.622620][ T64] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 201.625140][ T64] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 201.630045][ T64] usb 7-1: Product: syz [ 201.631319][ T64] usb 7-1: Manufacturer: syz [ 201.634151][ T64] cdc_wdm 7-1:1.0: skipping garbage [ 201.635694][ T64] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 201.851670][ T9379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.768'. [ 201.883718][ T64] usb 7-1: USB disconnect, device number 13 [ 201.927979][ T9380] netlink: 'syz.1.765': attribute type 21 has an invalid length. [ 201.932226][ T9380] netlink: 144 bytes leftover after parsing attributes in process `syz.1.765'. [ 201.946306][ T9379] syzkaller1: entered promiscuous mode [ 201.948137][ T9379] syzkaller1: entered allmulticast mode [ 201.967233][ T9380] mkiss: ax0: crc mode is auto. [ 201.970867][ T5944] Bluetooth: hci0: command tx timeout [ 202.433035][ T9383] netlink: 1268 bytes leftover after parsing attributes in process `syz.2.769'. [ 202.436477][ T9383] openvswitch: netlink: Message has 12 unknown bytes. [ 202.654708][ T9402] capability: warning: `syz.1.771' uses deprecated v2 capabilities in a way that may be insecure [ 202.659629][ T9401] : entered promiscuous mode [ 202.866820][ T9424] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 203.089445][ T9438] syz.4.777: attempt to access beyond end of device [ 203.089445][ T9438] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 203.236228][ T9447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.781'. [ 203.290094][ T9447] syzkaller1: entered promiscuous mode [ 203.291734][ T9447] syzkaller1: entered allmulticast mode [ 203.773837][ T9451] netlink: 'syz.4.782': attribute type 10 has an invalid length. [ 203.777498][ T9451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.050085][ T5944] Bluetooth: hci0: command tx timeout [ 204.152150][ T9479] input: syz1 as /devices/virtual/input/input7 [ 205.531995][ T9518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.797'. [ 205.539663][ T9518] syzkaller1: entered promiscuous mode [ 205.541375][ T9518] syzkaller1: entered allmulticast mode [ 206.130080][ T5944] Bluetooth: hci0: command tx timeout [ 206.310658][ T9538] veth0_to_bridge: entered promiscuous mode [ 206.463401][ T9548] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 206.490071][ T6002] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 207.141102][ T9537] veth0_to_bridge: left promiscuous mode [ 207.490185][ T6002] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 207.570160][ T9572] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.572590][ T9572] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.574949][ T9572] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.577229][ T9572] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.579777][ T9572] vxlan0: entered promiscuous mode [ 207.584492][ T9572] vxlan0: entered allmulticast mode [ 207.588032][ T9572] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.591203][ T9572] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.594186][ T9572] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.597227][ T9572] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.874782][ T9578] syzkaller1: entered promiscuous mode [ 207.876487][ T9578] syzkaller1: entered allmulticast mode [ 208.210043][ T5944] Bluetooth: hci0: command tx timeout [ 209.150060][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 209.320037][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 209.322668][ T9] usb 9-1: config 0 has no interfaces? [ 209.325789][ T9] usb 9-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=ec.89 [ 209.328325][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.330695][ T9] usb 9-1: Product: syz [ 209.332092][ T9] usb 9-1: Manufacturer: syz [ 209.333429][ T9] usb 9-1: SerialNumber: syz [ 209.335530][ T9] usb 9-1: config 0 descriptor?? [ 209.583140][ T9597] vivid-000: ================= START STATUS ================= [ 209.585449][ T9597] vivid-000: Test Pattern: 75% Colorbar [ 209.587145][ T9597] vivid-000: Fill Percentage of Frame: 100 [ 209.588876][ T9597] vivid-000: Horizontal Movement: No Movement [ 209.591014][ T9597] vivid-000: Vertical Movement: No Movement [ 209.592816][ T9597] vivid-000: OSD Text Mode: All [ 209.594285][ T9597] vivid-000: Show Border: false [ 209.595735][ T9597] vivid-000: Show Square: false [ 209.597188][ T9597] vivid-000: Sensor Flipped Horizontally: false [ 209.599041][ T9597] vivid-000: Sensor Flipped Vertically: false [ 209.601061][ T9597] vivid-000: Insert SAV Code in Image: false [ 209.602826][ T9597] vivid-000: Insert EAV Code in Image: false [ 209.604940][ T9597] vivid-000: Insert Video Guard Band: false [ 209.606745][ T9597] vivid-000: Reduced Framerate: false [ 209.608404][ T9597] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 209.611007][ T9597] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 209.613426][ T9597] vivid-000: Enable Capture Cropping: true grabbed [ 209.615517][ T9597] vivid-000: Enable Capture Composing: true grabbed [ 209.617508][ T9597] vivid-000: Enable Capture Scaler: true grabbed [ 209.619582][ T9597] vivid-000: Timestamp Source: End of Frame [ 209.621749][ T9597] vivid-000: Colorspace: sRGB [ 209.623159][ T9597] vivid-000: Transfer Function: Default [ 209.624755][ T9597] vivid-000: Y'CbCr Encoding: Default [ 209.625043][ T9624] netlink: 'syz.1.823': attribute type 10 has an invalid length. [ 209.626512][ T9597] vivid-000: HSV Encoding: Hue 0-179 [ 209.626526][ T9597] vivid-000: Quantization: Default [ 209.632181][ T9597] vivid-000: Apply Alpha To Red Only: false [ 209.634225][ T9597] vivid-000: Standard Aspect Ratio: 4x3 [ 209.635973][ T9597] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 209.638176][ T9597] vivid-000: DV Timings: 640x480p59 inactive [ 209.638909][ T9624] bond0: (slave wlan1): Opening slave failed [ 209.640671][ T9597] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 209.644461][ T9597] vivid-000: Maximum EDID Blocks: 2 [ 209.645978][ T9597] vivid-000: Limited RGB Range (16-235): false [ 209.647886][ T9597] vivid-000: Rx RGB Quantization Range: Automatic [ 209.649791][ T9597] vivid-000: Power Present: 0x00000001 [ 209.657932][ T9597] tpg source WxH: 320x180 (Y'CbCr) [ 209.660827][ T9597] tpg field: 1 [ 209.661813][ T9597] tpg crop: 320x180@0x0 [ 209.667556][ T9597] tpg compose: 320x180@0x0 [ 209.671579][ T9597] tpg colorspace: 8 [ 209.674706][ T9597] tpg transfer function: 0/2 [ 209.677022][ T9597] tpg Y'CbCr encoding: 0/1 [ 209.681589][ T9597] tpg quantization: 0/2 [ 209.685927][ T9597] tpg RGB range: 0/2 [ 209.689236][ T9597] vivid-000: ================== END STATUS ================== [ 209.701771][ T9] usb 9-1: USB disconnect, device number 2 [ 209.871053][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.824'. [ 209.884082][ T9638] syzkaller1: entered promiscuous mode [ 209.885744][ T9638] syzkaller1: entered allmulticast mode [ 210.444383][ T9641] netlink: 60 bytes leftover after parsing attributes in process `syz.3.825'. [ 210.537711][ T9668] 9pnet_virtio: no channels available for device syz [ 210.554290][ T9662] netfs: Couldn't get user pages (rc=-14) [ 210.556399][ T9670] 9pnet_fd: Insufficient options for proto=fd [ 210.887383][ T9678] netlink: 60 bytes leftover after parsing attributes in process `syz.3.834'. [ 211.070021][ T5982] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 211.261681][ T5982] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 211.264355][ T5982] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 211.267339][ T5982] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 211.269946][ T5982] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 211.274949][ T5982] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 211.277630][ T5982] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 211.280245][ T5982] usb 9-1: Product: syz [ 211.281516][ T5982] usb 9-1: Manufacturer: syz [ 211.284599][ T5982] cdc_wdm 9-1:1.0: skipping garbage [ 211.286335][ T5982] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 211.553698][ T9692] kAFS: No cell specified [ 211.556748][ T9692] overlayfs: failed to resolve './file1': -2 [ 211.934869][ T39] kauditd_printk_skb: 91 callbacks suppressed [ 211.934880][ T39] audit: type=1800 audit(1736067786.024:213): pid=9704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.839" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 212.123387][ T9710] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.125927][ T9710] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.128478][ T9710] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.131121][ T9710] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.132245][ T8] usb 9-1: USB disconnect, device number 3 [ 212.133708][ T9710] vxlan0: entered promiscuous mode [ 212.136961][ T9710] vxlan0: entered allmulticast mode [ 212.144903][ T9710] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.147509][ T9710] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.150075][ T9710] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.152618][ T9710] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.698331][ T9721] netlink: 16 bytes leftover after parsing attributes in process `syz.3.844'. [ 212.794883][ T9736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.842'. [ 212.820995][ T9736] syzkaller1: entered promiscuous mode [ 212.822677][ T9736] syzkaller1: entered allmulticast mode [ 214.153075][ T9776] netlink: 'syz.2.854': attribute type 10 has an invalid length. [ 214.156905][ T9776] bond0: (slave wlan1): Opening slave failed [ 214.571489][ T9783] syzkaller1: entered promiscuous mode [ 214.573400][ T9783] syzkaller1: entered allmulticast mode [ 214.580076][ T5983] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 215.001566][ T5983] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 215.005779][ T5983] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 215.009862][ T5983] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 215.014564][ T5983] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 215.022582][ T5983] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 215.025983][ T5983] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 215.028944][ T5983] usb 9-1: Product: syz [ 215.031083][ T5983] usb 9-1: Manufacturer: syz [ 215.038523][ T5983] cdc_wdm 9-1:1.0: skipping garbage [ 215.040638][ T5983] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 215.262013][ T5983] usb 9-1: USB disconnect, device number 4 [ 215.578999][ T9806] syzkaller1: entered promiscuous mode [ 215.580873][ T9806] syzkaller1: entered allmulticast mode [ 215.747604][ T9807] syz.1.862 (9807): drop_caches: 2 [ 216.145129][ T9819] xt_SECMARK: invalid mode: 0 [ 216.630063][ T5982] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 216.781451][ T5982] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 216.784689][ T5982] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 216.787758][ T5982] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 216.790651][ T5982] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 216.794386][ T5982] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 216.796963][ T5982] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.821300][ T5982] usb 8-1: config 0 descriptor?? [ 217.227148][ T5982] plantronics 0003:047F:FFFF.0003: ignoring exceeding usage max [ 217.234943][ T5982] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 217.238024][ T5982] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 217.778150][ T9845] ptrace attach of "/syz-executor exec"[9320] was attempted by "/syz-executor exec"[9845] [ 217.805830][ T9849] 9pnet: Unknown protocol version 9 [ 217.890132][ T8] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 217.944470][ T64] usb 8-1: USB disconnect, device number 4 [ 218.201311][ T8] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 218.204369][ T8] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 218.207309][ T8] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 218.216823][ T8] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 218.441622][ T8] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 218.447994][ T8] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 218.456836][ T8] usb 6-1: Product: syz [ 218.459163][ T8] usb 6-1: Manufacturer: syz [ 218.531026][ T8] cdc_wdm 6-1:1.0: skipping garbage [ 218.533050][ T8] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 218.533547][ T9861] syzkaller1: entered promiscuous mode [ 218.537483][ T9861] syzkaller1: entered allmulticast mode [ 218.583296][ T9866] smc: removing ib device syz0 [ 218.708294][ T5982] usb 6-1: USB disconnect, device number 6 [ 219.230220][ T9873] fuse: Bad value for 'fd' [ 219.248706][ T9873] netdevsim netdevsim4: Direct firmware load for . [ 219.248706][ T9873] failed with error -2 [ 219.252320][ T9873] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 219.252320][ T9873] [ 219.317142][ T9880] 9pnet: Unknown protocol version 9 [ 219.357423][ T9882] netlink: 'syz.3.886': attribute type 4 has an invalid length. [ 219.362395][ T9882] netlink: 'syz.3.886': attribute type 4 has an invalid length. [ 219.362686][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.366915][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.369040][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.371342][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.373493][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.375655][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.377773][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.379898][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.382388][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.384524][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.386636][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.388798][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.391048][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.393529][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.395664][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.397772][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.399901][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.402157][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.404318][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.406446][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.409070][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.411829][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.413954][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.416130][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.418394][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.420954][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.423196][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.425917][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.428077][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.430584][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.432741][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.434856][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.437001][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.439635][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.441905][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.445032][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.447156][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.449788][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.452006][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.454275][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.456438][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.458622][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.461038][ T5983] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.470513][ T5983] hid-generic 0001:0000:0000.0004: hidraw1: HID v7.f7 Device [syz1] on syz1 [ 220.108427][ T9899] netlink: 16 bytes leftover after parsing attributes in process `syz.3.888'. [ 220.284849][ T9908] netlink: 'syz.4.891': attribute type 3 has an invalid length. [ 220.830095][ T5983] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 220.982950][ T5983] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 220.985818][ T5983] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 220.988751][ T5983] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 220.991535][ T5983] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 221.002854][ T5983] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 221.005560][ T5983] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 221.007927][ T5983] usb 6-1: Product: syz [ 221.009185][ T5983] usb 6-1: Manufacturer: syz [ 221.018781][ T5983] cdc_wdm 6-1:1.0: skipping garbage [ 221.020476][ T5983] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 221.068303][ T9919] 9pnet: Unknown protocol version 9p200 [ 221.320011][ T9922] syz.3.896 (9922): drop_caches: 2 [ 221.689492][ T9935] syzkaller1: entered promiscuous mode [ 221.691367][ T9935] syzkaller1: entered allmulticast mode [ 222.139193][ T834] usb 6-1: USB disconnect, device number 7 [ 222.140301][ T5948] Bluetooth: hci0: command 0x0405 tx timeout [ 222.412647][ T9951] netlink: 84 bytes leftover after parsing attributes in process `syz.4.903'. [ 222.661423][ T9958] block nbd4: shutting down sockets [ 223.327137][ T9977] syzkaller1: entered promiscuous mode [ 223.329444][ T9977] syzkaller1: entered allmulticast mode [ 224.099791][ T9994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.916'. [ 224.180027][ T8] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 224.341430][ T8] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 224.344104][ T8] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 224.346962][ T8] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 224.349518][ T8] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 224.361449][ T8] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 224.364526][ T8] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 224.367234][ T8] usb 6-1: Product: syz [ 224.368665][ T8] usb 6-1: Manufacturer: syz [ 224.402607][ T8] cdc_wdm 6-1:1.0: skipping garbage [ 224.404652][ T8] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 224.601268][ T6002] usb 6-1: USB disconnect, device number 8 [ 225.216074][ T8] hid-generic 0005:7FFF:0008.0005: hidraw1: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 225.484072][T10033] netlink: 16 bytes leftover after parsing attributes in process `syz.2.920'. [ 226.465050][T10058] syzkaller1: entered promiscuous mode [ 226.466959][T10058] syzkaller1: entered allmulticast mode [ 226.828542][T10063] syzkaller1: entered promiscuous mode [ 226.830926][T10063] syzkaller1: entered allmulticast mode [ 226.893151][T10065] netlink: 256 bytes leftover after parsing attributes in process `syz.3.931'. [ 227.496233][T10094] 9pnet: Unknown protocol version 9p2000. [ 227.521149][T10096] can0: slcan on ttyprintk. [ 228.088468][T10111] netlink: 60 bytes leftover after parsing attributes in process `syz.3.940'. [ 228.420954][T10095] can0 (unregistered): slcan off ttyprintk. [ 228.653583][T10131] syzkaller1: entered promiscuous mode [ 228.655344][T10131] syzkaller1: entered allmulticast mode [ 228.954780][T10137] FAULT_INJECTION: forcing a failure. [ 228.954780][T10137] name failslab, interval 1, probability 0, space 0, times 0 [ 228.963064][T10137] CPU: 2 UID: 0 PID: 10137 Comm: syz.3.943 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 228.966562][T10137] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 228.969651][T10137] Call Trace: [ 228.970718][T10137] [ 228.971862][T10137] dump_stack_lvl+0x16c/0x1f0 [ 228.973622][T10137] should_fail_ex+0x497/0x5b0 [ 228.975003][T10137] ? fs_reclaim_acquire+0xae/0x150 [ 228.976393][T10137] should_failslab+0xc2/0x120 [ 228.977914][T10137] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 228.979450][T10137] ? getname_flags.part.0+0x4c/0x550 [ 228.981043][T10137] getname_flags.part.0+0x4c/0x550 [ 228.983018][T10137] getname+0x8d/0xe0 [ 228.984527][T10137] do_sys_openat2+0x104/0x1e0 [ 228.986343][T10137] ? __pfx_do_sys_openat2+0x10/0x10 [ 228.988317][T10137] ? __pfx___schedule+0x10/0x10 [ 228.990179][T10137] ? __fget_files+0x206/0x3a0 [ 228.991664][T10137] __ia32_compat_sys_openat+0x16e/0x210 [ 228.993219][T10137] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 228.994898][T10137] ? ksys_write+0x1ba/0x250 [ 228.996168][T10137] ? rcu_is_watching+0x12/0xc0 [ 228.997502][T10137] __do_fast_syscall_32+0x73/0x120 [ 228.998905][T10137] do_fast_syscall_32+0x32/0x80 [ 229.000267][T10137] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 229.002006][T10137] RIP: 0023:0xf7fe5579 [ 229.003118][T10137] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 229.008428][T10137] RSP: 002b:00000000f50f455c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 229.010778][T10137] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020004780 [ 229.012965][T10137] RDX: 0000000000101000 RSI: 0000000000000000 RDI: 0000000000000000 [ 229.015143][T10137] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 229.017301][T10137] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 229.019563][T10137] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 229.021815][T10137] [ 229.150024][T10141] syzkaller1: entered promiscuous mode [ 229.151698][T10141] syzkaller1: entered allmulticast mode [ 229.406931][T10145] syzkaller1: entered promiscuous mode [ 229.409173][T10145] syzkaller1: entered allmulticast mode [ 229.599241][T10148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.946'. [ 229.602641][T10148] openvswitch: netlink: Flow actions attr not present in new flow. [ 230.088226][T10160] netlink: 'syz.1.948': attribute type 4 has an invalid length. [ 230.123439][T10160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.948'. [ 230.187719][T10164] syzkaller1: entered promiscuous mode [ 230.190027][T10164] syzkaller1: entered allmulticast mode [ 230.420097][ T64] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 230.577979][ T64] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 230.591791][ T64] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.595338][ T64] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.598721][ T64] usb 9-1: config 0 interface 0 has no altsetting 0 [ 230.601452][ T64] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.604054][ T64] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.607170][ T64] usb 9-1: config 0 interface 0 has no altsetting 0 [ 230.609867][ T64] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.612597][ T64] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.615520][ T64] usb 9-1: config 0 interface 0 has no altsetting 0 [ 230.618073][ T64] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.620679][ T64] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.623702][ T64] usb 9-1: config 0 interface 0 has no altsetting 0 [ 230.629338][ T64] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.631952][ T64] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.634946][ T64] usb 9-1: config 0 interface 0 has no altsetting 0 [ 230.637474][ T64] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.640113][ T64] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.643185][ T64] usb 9-1: config 0 interface 0 has no altsetting 0 [ 230.645767][ T64] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.648600][ T64] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.651865][ T64] usb 9-1: config 0 interface 0 has no altsetting 0 [ 230.654385][ T64] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.657017][ T64] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.660143][ T64] usb 9-1: config 0 interface 0 has no altsetting 0 [ 230.663542][ T64] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 230.666073][ T64] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 230.668329][ T64] usb 9-1: Product: syz [ 230.669524][ T64] usb 9-1: Manufacturer: syz [ 230.670887][ T64] usb 9-1: SerialNumber: syz [ 230.673091][ T64] usb 9-1: config 0 descriptor?? [ 230.675832][ T64] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 230.939919][T10171] netlink: 60 bytes leftover after parsing attributes in process `syz.3.951'. [ 230.995642][ C3] usb 9-1: yurex_control_callback - control failed: -71 [ 230.996586][ T5983] usb 9-1: USB disconnect, device number 5 [ 231.000033][ T5983] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 232.039343][T10210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.961'. [ 232.080101][ T57] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 232.100825][T10211] syzkaller1: entered promiscuous mode [ 232.102529][T10211] syzkaller1: entered allmulticast mode [ 232.241172][ T57] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 232.243852][ T57] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 232.247203][ T57] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 232.250423][ T57] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 232.255127][ T57] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 232.258192][ T57] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 232.264204][ T57] usb 8-1: Product: syz [ 232.265839][ T57] usb 8-1: Manufacturer: syz [ 232.276074][ T57] cdc_wdm 8-1:1.0: skipping garbage [ 232.277643][ T57] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 232.588719][ T8] usb 8-1: USB disconnect, device number 5 [ 233.129707][T10237] netlink: 'syz.3.969': attribute type 10 has an invalid length. [ 233.132695][T10237] bond0: (slave wlan1): Releasing backup interface [ 233.320443][T10247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.971'. [ 233.351094][T10247] syzkaller1: entered promiscuous mode [ 233.353088][T10247] syzkaller1: entered allmulticast mode [ 233.483931][ T39] audit: type=1326 audit(1736067807.574:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10245 comm="syz.2.972" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf714e579 code=0x0 [ 234.685393][T10275] netlink: 72 bytes leftover after parsing attributes in process `syz.4.986'. [ 235.360246][T10285] syzkaller1: entered promiscuous mode [ 235.361838][T10285] syzkaller1: entered allmulticast mode [ 236.083357][T10310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.985'. [ 236.091702][T10310] syzkaller1: entered promiscuous mode [ 236.093708][T10310] syzkaller1: entered allmulticast mode [ 236.189698][T10314] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 236.192003][T10314] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 236.524474][T10325] netlink: 72 bytes leftover after parsing attributes in process `syz.2.990'. [ 237.100244][T10337] netlink: 10 bytes leftover after parsing attributes in process `syz.3.994'. [ 237.180063][ T5983] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 237.310089][ T5983] usb 9-1: device descriptor read/64, error -71 [ 237.318106][T10343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.996'. [ 237.488968][T10357] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 237.560017][ T5983] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 237.700162][ T5983] usb 9-1: device descriptor read/64, error -71 [ 237.820370][ T5983] usb usb9-port1: attempt power cycle [ 237.837799][T10363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1001'. [ 237.846837][T10363] syzkaller1: entered promiscuous mode [ 237.848986][T10363] syzkaller1: entered allmulticast mode [ 237.923512][ T5944] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 238.170085][ T5983] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 238.190791][ T5983] usb 9-1: device descriptor read/8, error -71 [ 238.440035][ T5983] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 238.460388][ T5983] usb 9-1: device descriptor read/8, error -71 [ 238.580143][ T5983] usb usb9-port1: unable to enumerate USB device [ 238.714802][T10385] program syz.3.1008 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 238.874523][T10389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1009'. [ 238.887524][T10389] syzkaller1: entered promiscuous mode [ 238.889302][T10389] syzkaller1: entered allmulticast mode [ 240.073293][T10402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1014'. [ 240.084127][T10402] syzkaller1: entered promiscuous mode [ 240.085961][T10402] syzkaller1: entered allmulticast mode [ 241.430728][T10439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1020'. [ 241.470319][T10439] syzkaller1: entered promiscuous mode [ 241.473375][T10439] syzkaller1: entered allmulticast mode [ 241.970092][ T5944] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 241.973424][ T5944] Bluetooth: hci3: Injecting HCI hardware error event [ 241.976167][ T5948] Bluetooth: hci3: hardware error 0x00 [ 242.137410][T10446] Sensor A: ================= START STATUS ================= [ 242.139776][T10446] Sensor A: Test Pattern: 75% Colorbar [ 242.141570][T10446] Sensor A: Show Information: All [ 242.143340][T10446] Sensor A: Vertical Flip: false [ 242.145207][T10446] Sensor A: Horizontal Flip: false [ 242.147141][T10446] Sensor A: Brightness: 128 [ 242.148864][T10446] Sensor A: Contrast: 128 [ 242.150866][T10446] Sensor A: Hue: 0 [ 242.152466][T10446] Sensor A: Saturation: 128 [ 242.154226][T10446] Sensor A: ================== END STATUS ================== [ 242.409384][T10458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1023'. [ 242.437920][T10459] bond_slave_1: entered promiscuous mode [ 242.439714][T10459] bond_slave_1: entered allmulticast mode [ 242.684427][T10468] program syz.1.1029 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 242.731903][T10474] Only authenc() type AEADs are supported by ESSIV [ 242.846609][T10466] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1036'. [ 243.274422][ T39] audit: type=1800 audit(1736067817.364:215): pid=10485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1032" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 243.564064][T10507] binder: 10506:10507 ioctl 40046205 0 returned -22 [ 244.050125][ T5948] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 244.456659][T10534] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 244.646920][T10539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1048'. [ 244.696784][T10539] syzkaller1: entered promiscuous mode [ 244.698505][T10539] syzkaller1: entered allmulticast mode [ 245.276694][T10551] FAULT_INJECTION: forcing a failure. [ 245.276694][T10551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.280637][T10551] CPU: 3 UID: 0 PID: 10551 Comm: syz.2.1050 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 245.283797][T10551] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 245.286911][T10551] Call Trace: [ 245.287893][T10551] [ 245.288760][T10551] dump_stack_lvl+0x16c/0x1f0 [ 245.290162][T10551] should_fail_ex+0x497/0x5b0 [ 245.291590][T10551] __kvm_read_guest_page+0x16b/0x210 [ 245.293151][T10551] kvm_fetch_guest_virt+0x128/0x1a0 [ 245.294680][T10551] __do_insn_fetch_bytes+0x506/0x730 [ 245.296249][T10551] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 245.297968][T10551] ? __pfx_kvm_tdp_mmu_map+0x10/0x10 [ 245.299518][T10551] x86_decode_insn+0x1888/0x55d0 [ 245.301273][T10551] ? __pfx_lock_release+0x10/0x10 [ 245.302909][T10551] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 245.304621][T10551] ? __pfx_x86_decode_insn+0x10/0x10 [ 245.306207][T10551] ? init_decode_cache+0xd/0x210 [ 245.307692][T10551] ? kvm_vm_ioctl_set_msr_filter+0x2c0/0x990 [ 245.309419][T10551] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 245.310997][T10551] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 245.312746][T10551] ? rcu_is_watching+0x12/0xc0 [ 245.314143][T10551] x86_emulate_instruction+0x975/0x1a50 [ 245.315754][T10551] ? is_bpf_text_address+0x30/0x1a0 [ 245.317291][T10551] ? lock_acquire+0x2f/0xb0 [ 245.318624][T10551] kvm_mmu_page_fault+0xb44/0x1bb0 [ 245.320094][T10551] ? __kernel_text_address+0xd/0x40 [ 245.321671][T10551] ? unwind_get_return_address+0x59/0xa0 [ 245.323354][T10551] ? kvm_multiple_exception+0x57c/0xb40 [ 245.325078][T10551] ? __pfx_kvm_mmu_page_fault+0x10/0x10 [ 245.326727][T10551] ? kvm_requeue_exception+0x26/0x30 [ 245.328268][T10551] ? __vmx_complete_interrupts+0x496/0x4e0 [ 245.329952][T10551] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 245.331820][T10551] ? vmx_vcpu_run+0x14b7/0x2a50 [ 245.333415][T10551] handle_ept_violation+0x25a/0x640 [ 245.334794][T10551] ? __pfx_handle_ept_violation+0x10/0x10 [ 245.336372][T10551] vmx_handle_exit+0x733/0x1f70 [ 245.337804][T10551] vcpu_run+0x2aaf/0x4c00 [ 245.339073][T10551] ? __pfx_vcpu_run+0x10/0x10 [ 245.340440][T10551] ? rcu_is_watching+0x12/0xc0 [ 245.342389][T10551] ? trace_lock_acquire+0x14e/0x1f0 [ 245.343908][T10551] ? trace_irq_enable.constprop.0+0xea/0x140 [ 245.345660][T10551] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 245.347346][T10551] ? lock_acquire+0x2f/0xb0 [ 245.348663][T10551] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 245.350303][T10551] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 245.351974][T10551] kvm_vcpu_ioctl+0x6ce/0x1520 [ 245.353371][T10551] ? tomoyo_path_number_perm+0x46d/0x5b0 [ 245.355030][T10551] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 245.356575][T10551] ? tomoyo_path_number_perm+0x190/0x5b0 [ 245.358204][T10551] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 245.359956][T10551] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 245.361761][T10551] ? do_vfs_ioctl+0x513/0x1950 [ 245.363167][T10551] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 245.364628][T10551] ? preempt_count_add+0x76/0x150 [ 245.366132][T10551] ? __pfx_lock_release+0x10/0x10 [ 245.367642][T10551] ? trace_lock_acquire+0x14e/0x1f0 [ 245.369148][T10551] kvm_vcpu_compat_ioctl+0x210/0x3f0 [ 245.370683][T10551] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 245.372380][T10551] ? __fget_files+0x206/0x3a0 [ 245.373749][T10551] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 245.375476][T10551] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 245.377041][T10551] __do_fast_syscall_32+0x73/0x120 [ 245.378543][T10551] do_fast_syscall_32+0x32/0x80 [ 245.379952][T10551] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 245.381777][T10551] RIP: 0023:0xf714e579 [ 245.382969][T10551] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 245.388804][T10551] RSP: 002b:00000000f50fe55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 245.391189][T10551] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000000000ae80 [ 245.393597][T10551] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 245.395908][T10551] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 245.398251][T10551] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 245.400563][T10551] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 245.402846][T10551] [ 246.780308][T10570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.329618][T10591] openvswitch: netlink: Missing valid actions attribute. [ 247.331758][T10591] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.385658][T10597] binder: 10590:10597 ioctl 4c02 200002c0 returned -22 [ 247.387839][T10597] binder: 10590:10597 ioctl 40045201 20000040 returned -22 [ 247.600093][T10603] syzkaller1: entered promiscuous mode [ 247.601768][T10603] syzkaller1: entered allmulticast mode [ 248.860432][T10627] tc_dump_action: action bad kind [ 249.549311][T10652] syzkaller1: entered promiscuous mode [ 249.551132][T10652] syzkaller1: entered allmulticast mode [ 250.350336][T10676] FAULT_INJECTION: forcing a failure. [ 250.350336][T10676] name failslab, interval 1, probability 0, space 0, times 0 [ 250.355009][T10676] CPU: 3 UID: 0 PID: 10676 Comm: syz.2.1081 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 250.358972][T10676] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 250.363235][T10676] Call Trace: [ 250.364494][T10676] [ 250.365629][T10676] dump_stack_lvl+0x16c/0x1f0 [ 250.367430][T10676] should_fail_ex+0x497/0x5b0 [ 250.369208][T10676] ? fs_reclaim_acquire+0xae/0x150 [ 250.370816][T10676] should_failslab+0xc2/0x120 [ 250.372188][T10676] __kmalloc_cache_noprof+0x68/0x420 [ 250.373718][T10676] ? __pfx___folio_start_writeback+0x10/0x10 [ 250.375609][T10676] ? do_raw_spin_lock+0x12d/0x2c0 [ 250.377053][T10676] netfs_buffer_make_space+0x432/0x6b0 [ 250.378664][T10676] netfs_buffer_append_folio+0x298/0x360 [ 250.380308][T10676] netfs_write_folio+0x540/0x1930 [ 250.381874][T10676] netfs_writepages+0x29a/0x8f0 [ 250.383223][T10676] ? __pfx_netfs_writepages+0x10/0x10 [ 250.384794][T10676] ? should_fail_alloc_page+0xee/0x130 [ 250.386420][T10676] ? prepare_alloc_pages.constprop.0+0x16f/0x560 [ 250.388271][T10676] ? rcu_is_watching+0x12/0xc0 [ 250.389804][T10676] ? lock_release+0x4e2/0x6f0 [ 250.391199][T10676] ? __pfx_netfs_writepages+0x10/0x10 [ 250.392759][T10676] do_writepages+0x1b3/0x820 [ 250.394113][T10676] ? __pfx_do_writepages+0x10/0x10 [ 250.395611][T10676] ? wbc_attach_fdatawrite_inode+0x13a/0x190 [ 250.397405][T10676] ? __pfx_lock_release+0x10/0x10 [ 250.398882][T10676] ? do_raw_spin_lock+0x12d/0x2c0 [ 250.400383][T10676] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 250.401946][T10676] ? lock_acquire+0x2f/0xb0 [ 250.403286][T10676] ? wbc_attach_fdatawrite_inode+0x24/0x190 [ 250.405011][T10676] ? do_raw_spin_unlock+0x172/0x230 [ 250.406682][T10676] filemap_fdatawrite_wbc+0x104/0x160 [ 250.408237][T10676] __filemap_fdatawrite_range+0xb3/0xf0 [ 250.409838][T10676] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 250.411672][T10676] ? generic_write_checks+0x312/0x480 [ 250.413230][T10676] ? inode_needs_update_time.part.0+0x191/0x270 [ 250.415061][T10676] filemap_write_and_wait_range+0xa3/0x130 [ 250.416791][T10676] netfs_unbuffered_write_iter+0x272/0x6d0 [ 250.418497][T10676] netfs_file_write_iter+0x1c3/0x4f0 [ 250.420035][T10676] v9fs_file_write_iter+0x9b/0x100 [ 250.421532][T10676] vfs_write+0x5ae/0x1150 [ 250.422933][T10676] ? __pfx_v9fs_file_write_iter+0x10/0x10 [ 250.424583][T10676] ? __pfx___mutex_lock+0x10/0x10 [ 250.426075][T10676] ? __pfx_vfs_write+0x10/0x10 [ 250.427518][T10676] ksys_write+0x12b/0x250 [ 250.428856][T10676] ? __pfx_ksys_write+0x10/0x10 [ 250.430305][T10676] ? rcu_is_watching+0x12/0xc0 [ 250.431713][T10676] __do_fast_syscall_32+0x73/0x120 [ 250.433199][T10676] do_fast_syscall_32+0x32/0x80 [ 250.434623][T10676] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 250.436498][T10676] RIP: 0023:0xf714e579 [ 250.437686][T10676] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 250.443430][T10676] RSP: 002b:00000000f514055c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 250.445863][T10676] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000280 [ 250.448179][T10676] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 250.450454][T10676] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 250.452733][T10676] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 250.455027][T10676] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 250.457320][T10676] [ 250.459532][T10676] ------------[ cut here ]------------ [ 250.461543][T10676] WARNING: CPU: 2 PID: 10676 at lib/iov_iter.c:255 _copy_from_iter+0x39b/0x1400 [ 250.464242][T10676] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 250.466009][T10676] CPU: 2 UID: 0 PID: 10676 Comm: syz.2.1081 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 250.470585][T10676] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 250.473580][T10676] RIP: 0010:_copy_from_iter+0x39b/0x1400 [ 250.475296][T10676] Code: 64 fd 0f 01 cb 4c 89 f9 4c 89 f7 48 89 de f3 a4 0f 1f 00 48 89 cb 0f 01 ca 4d 89 fc 49 29 cc e9 1d ff ff ff e8 36 4f 02 fd 90 <0f> 0b 90 e9 ae fd ff ff e8 28 4f 02 fd 89 de bf 01 00 00 00 e8 fc [ 250.481320][T10676] RSP: 0018:ffffc9000d136ff8 EFLAGS: 00010293 [ 250.483138][T10676] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8496fd98 [ 250.485482][T10676] RDX: ffff88801fa0a440 RSI: ffffffff8497007a RDI: 0000000000000001 [ 250.487777][T10676] RBP: 0000000000000018 R08: 0000000000000001 R09: 0000000000000000 [ 250.490131][T10676] R10: 0000000000000000 R11: 00000000000a201e R12: ffff8880692abaa0 [ 250.492814][T10676] R13: ffff888067d04f40 R14: ffff8880692abaa0 R15: 0000000000000018 [ 250.495122][T10676] FS: 0000000000000000(0000) GS:ffff88802b600000(0063) knlGS:00000000f5140b40 [ 250.497703][T10676] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 250.499677][T10676] CR2: 0000000000000000 CR3: 000000004cf10000 CR4: 0000000000352ef0 [ 250.502423][T10676] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 250.504728][T10676] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 250.507027][T10676] Call Trace: [ 250.507999][T10676] [ 250.508873][T10676] ? __warn+0xea/0x3c0 [ 250.510117][T10676] ? _copy_from_iter+0x39b/0x1400 [ 250.511599][T10676] ? report_bug+0x3c0/0x580 [ 250.512932][T10676] ? handle_bug+0x54/0xa0 [ 250.514202][T10676] ? exc_invalid_op+0x17/0x50 [ 250.515540][T10676] ? asm_exc_invalid_op+0x1a/0x20 [ 250.517004][T10676] ? _copy_from_iter+0xb8/0x1400 [ 250.518390][T10676] ? _copy_from_iter+0x39a/0x1400 [ 250.519749][T10676] ? _copy_from_iter+0x39b/0x1400 [ 250.521205][T10676] ? _copy_from_iter+0x39a/0x1400 [ 250.522639][T10676] ? __pfx_lock_release+0x10/0x10 [ 250.524203][T10676] ? trace_lock_acquire+0x14e/0x1f0 [ 250.525680][T10676] ? __virt_addr_valid+0x1a4/0x590 [ 250.527141][T10676] ? __pfx__copy_from_iter+0x10/0x10 [ 250.528591][T10676] ? __virt_addr_valid+0x1a4/0x590 [ 250.530108][T10676] ? __virt_addr_valid+0x5e/0x590 [ 250.531580][T10676] ? __phys_addr_symbol+0x30/0x80 [ 250.533053][T10676] ? __check_object_size+0x488/0x710 [ 250.534577][T10676] p9pdu_vwritef+0x2cb/0x21d0 [ 250.535883][T10676] ? p9pdu_writef+0xc4/0x100 [ 250.537180][T10676] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 250.538685][T10676] ? __pfx_p9_tag_alloc+0x10/0x10 [ 250.540216][T10676] ? stack_depot_save_flags+0x28/0x9e0 [ 250.541793][T10676] ? __pfx_lock_release+0x10/0x10 [ 250.543186][T10676] p9_client_prepare_req+0x244/0x4d0 [ 250.544675][T10676] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 250.546467][T10676] ? netfs_alloc_subrequest+0xc1/0x3c0 [ 250.548024][T10676] ? do_writepages+0x1b3/0x820 [ 250.549359][T10676] ? filemap_fdatawrite_wbc+0x104/0x160 [ 250.551013][T10676] ? __filemap_fdatawrite_range+0xb3/0xf0 [ 250.552606][T10676] ? filemap_write_and_wait_range+0xa3/0x130 [ 250.554355][T10676] ? netfs_unbuffered_write_iter+0x272/0x6d0 [ 250.556098][T10676] ? netfs_file_write_iter+0x1c3/0x4f0 [ 250.557648][T10676] ? v9fs_file_write_iter+0x9b/0x100 [ 250.559115][T10676] ? vfs_write+0x5ae/0x1150 [ 250.560434][T10676] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 250.562000][T10676] p9_client_rpc+0x1c3/0xc10 [ 250.563359][T10676] ? rcu_is_watching+0x12/0xc0 [ 250.564796][T10676] ? local_lock_acquire+0x10/0x150 [ 250.566332][T10676] ? __pfx_p9_client_rpc+0x10/0x10 [ 250.567874][T10676] ? lock_acquire+0x2f/0xb0 [ 250.569332][T10676] ? local_lock_acquire+0x10/0x150 [ 250.571095][T10676] ? rcu_is_watching+0x12/0xc0 [ 250.572508][T10676] ? trace_irq_enable.constprop.0+0xea/0x140 [ 250.574267][T10676] ? rcu_is_watching+0x12/0xc0 [ 250.575715][T10676] ? lock_release+0x4e2/0x6f0 [ 250.577116][T10676] ? __debug_object_init+0x2dd/0x3e0 [ 250.578679][T10676] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 250.580411][T10676] p9_client_write+0x31f/0x680 [ 250.581838][T10676] ? __pfx_p9_client_write+0x10/0x10 [ 250.583447][T10676] ? __pfx___debug_object_init+0x10/0x10 [ 250.585146][T10676] ? rcu_is_watching+0x12/0xc0 [ 250.586602][T10676] v9fs_issue_write+0xe2/0x180 [ 250.588020][T10676] ? __pfx_v9fs_issue_write+0x10/0x10 [ 250.589609][T10676] ? rcu_is_watching+0x12/0xc0 [ 250.591120][T10676] ? trace_netfs_sreq+0x198/0x220 [ 250.592664][T10676] netfs_do_issue_write+0x92/0x110 [ 250.594196][T10676] netfs_advance_write+0x384/0xc80 [ 250.595873][T10676] netfs_write_folio+0xc19/0x1930 [ 250.597389][T10676] netfs_writepages+0x29a/0x8f0 [ 250.598769][T10676] ? __pfx_netfs_writepages+0x10/0x10 [ 250.600380][T10676] ? should_fail_alloc_page+0xee/0x130 [ 250.601991][T10676] ? prepare_alloc_pages.constprop.0+0x16f/0x560 [ 250.603861][T10676] ? rcu_is_watching+0x12/0xc0 [ 250.605326][T10676] ? lock_release+0x4e2/0x6f0 [ 250.606728][T10676] ? __pfx_netfs_writepages+0x10/0x10 [ 250.608325][T10676] do_writepages+0x1b3/0x820 [ 250.609696][T10676] ? __pfx_do_writepages+0x10/0x10 [ 250.611296][T10676] ? wbc_attach_fdatawrite_inode+0x13a/0x190 [ 250.613057][T10676] ? __pfx_lock_release+0x10/0x10 [ 250.614557][T10676] ? do_raw_spin_lock+0x12d/0x2c0 [ 250.616033][T10676] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 250.617647][T10676] ? lock_acquire+0x2f/0xb0 [ 250.618993][T10676] ? wbc_attach_fdatawrite_inode+0x24/0x190 [ 250.620855][T10676] ? do_raw_spin_unlock+0x172/0x230 [ 250.622614][T10676] filemap_fdatawrite_wbc+0x104/0x160 [ 250.624189][T10676] __filemap_fdatawrite_range+0xb3/0xf0 [ 250.625817][T10676] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 250.627678][T10676] ? generic_write_checks+0x312/0x480 [ 250.629263][T10676] ? inode_needs_update_time.part.0+0x191/0x270 [ 250.631190][T10676] filemap_write_and_wait_range+0xa3/0x130 [ 250.632911][T10676] netfs_unbuffered_write_iter+0x272/0x6d0 [ 250.634650][T10676] netfs_file_write_iter+0x1c3/0x4f0 [ 250.636180][T10676] v9fs_file_write_iter+0x9b/0x100 [ 250.637697][T10676] vfs_write+0x5ae/0x1150 [ 250.638985][T10676] ? __pfx_v9fs_file_write_iter+0x10/0x10 [ 250.640727][T10676] ? __pfx___mutex_lock+0x10/0x10 [ 250.642241][T10676] ? __pfx_vfs_write+0x10/0x10 [ 250.643741][T10676] ksys_write+0x12b/0x250 [ 250.645028][T10676] ? __pfx_ksys_write+0x10/0x10 [ 250.646468][T10676] ? rcu_is_watching+0x12/0xc0 [ 250.648097][T10676] __do_fast_syscall_32+0x73/0x120 [ 250.649613][T10676] do_fast_syscall_32+0x32/0x80 [ 250.651148][T10676] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 250.653008][T10676] RIP: 0023:0xf714e579 [ 250.654235][T10676] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 250.659894][T10676] RSP: 002b:00000000f514055c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 250.662393][T10676] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000280 [ 250.664743][T10676] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 250.667100][T10676] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 250.669418][T10676] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 250.671745][T10676] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 250.674055][T10676] [ 250.674986][T10676] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 250.677285][T10676] CPU: 2 UID: 0 PID: 10676 Comm: syz.2.1081 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 250.680410][T10676] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 250.683516][T10676] Call Trace: [ 250.684496][T10676] [ 250.685388][T10676] dump_stack_lvl+0x3d/0x1f0 [ 250.686788][T10676] panic+0x71d/0x800 [ 250.687956][T10676] ? __pfx_panic+0x10/0x10 [ 250.689274][T10676] ? show_trace_log_lvl+0x29d/0x3d0 [ 250.690804][T10676] ? check_panic_on_warn+0x1f/0xb0 [ 250.692315][T10676] ? _copy_from_iter+0x39b/0x1400 [ 250.693794][T10676] check_panic_on_warn+0xab/0xb0 [ 250.695265][T10676] __warn+0xf6/0x3c0 [ 250.696429][T10676] ? _copy_from_iter+0x39b/0x1400 [ 250.697898][T10676] report_bug+0x3c0/0x580 [ 250.699177][T10676] handle_bug+0x54/0xa0 [ 250.700408][T10676] exc_invalid_op+0x17/0x50 [ 250.701746][T10676] asm_exc_invalid_op+0x1a/0x20 [ 250.703187][T10676] RIP: 0010:_copy_from_iter+0x39b/0x1400 [ 250.704851][T10676] Code: 64 fd 0f 01 cb 4c 89 f9 4c 89 f7 48 89 de f3 a4 0f 1f 00 48 89 cb 0f 01 ca 4d 89 fc 49 29 cc e9 1d ff ff ff e8 36 4f 02 fd 90 <0f> 0b 90 e9 ae fd ff ff e8 28 4f 02 fd 89 de bf 01 00 00 00 e8 fc [ 250.710609][T10676] RSP: 0018:ffffc9000d136ff8 EFLAGS: 00010293 [ 250.712387][T10676] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8496fd98 [ 250.714696][T10676] RDX: ffff88801fa0a440 RSI: ffffffff8497007a RDI: 0000000000000001 [ 250.717004][T10676] RBP: 0000000000000018 R08: 0000000000000001 R09: 0000000000000000 [ 250.719318][T10676] R10: 0000000000000000 R11: 00000000000a201e R12: ffff8880692abaa0 [ 250.721638][T10676] R13: ffff888067d04f40 R14: ffff8880692abaa0 R15: 0000000000000018 [ 250.723949][T10676] ? _copy_from_iter+0xb8/0x1400 [ 250.725434][T10676] ? _copy_from_iter+0x39a/0x1400 [ 250.726936][T10676] ? _copy_from_iter+0x39a/0x1400 [ 250.728415][T10676] ? __pfx_lock_release+0x10/0x10 [ 250.729890][T10676] ? trace_lock_acquire+0x14e/0x1f0 [ 250.731429][T10676] ? __virt_addr_valid+0x1a4/0x590 [ 250.732930][T10676] ? __pfx__copy_from_iter+0x10/0x10 [ 250.734488][T10676] ? __virt_addr_valid+0x1a4/0x590 [ 250.736217][T10676] ? __virt_addr_valid+0x5e/0x590 [ 250.737696][T10676] ? __phys_addr_symbol+0x30/0x80 [ 250.739179][T10676] ? __check_object_size+0x488/0x710 [ 250.740726][T10676] p9pdu_vwritef+0x2cb/0x21d0 [ 250.742114][T10676] ? p9pdu_writef+0xc4/0x100 [ 250.743496][T10676] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 250.745009][T10676] ? __pfx_p9_tag_alloc+0x10/0x10 [ 250.746501][T10676] ? stack_depot_save_flags+0x28/0x9e0 [ 250.748093][T10676] ? __pfx_lock_release+0x10/0x10 [ 250.749573][T10676] p9_client_prepare_req+0x244/0x4d0 [ 250.751133][T10676] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 250.752841][T10676] ? netfs_alloc_subrequest+0xc1/0x3c0 [ 250.754454][T10676] ? do_writepages+0x1b3/0x820 [ 250.755879][T10676] ? filemap_fdatawrite_wbc+0x104/0x160 [ 250.757496][T10676] ? __filemap_fdatawrite_range+0xb3/0xf0 [ 250.759171][T10676] ? filemap_write_and_wait_range+0xa3/0x130 [ 250.760928][T10676] ? netfs_unbuffered_write_iter+0x272/0x6d0 [ 250.762687][T10676] ? netfs_file_write_iter+0x1c3/0x4f0 [ 250.764295][T10676] ? v9fs_file_write_iter+0x9b/0x100 [ 250.765855][T10676] ? vfs_write+0x5ae/0x1150 [ 250.767414][T10676] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 250.769073][T10676] p9_client_rpc+0x1c3/0xc10 [ 250.770442][T10676] ? rcu_is_watching+0x12/0xc0 [ 250.771862][T10676] ? local_lock_acquire+0x10/0x150 [ 250.773286][T10676] ? __pfx_p9_client_rpc+0x10/0x10 [ 250.774710][T10676] ? lock_acquire+0x2f/0xb0 [ 250.776045][T10676] ? local_lock_acquire+0x10/0x150 [ 250.777555][T10676] ? rcu_is_watching+0x12/0xc0 [ 250.778972][T10676] ? trace_irq_enable.constprop.0+0xea/0x140 [ 250.780729][T10676] ? rcu_is_watching+0x12/0xc0 [ 250.782165][T10676] ? lock_release+0x4e2/0x6f0 [ 250.783559][T10676] ? __debug_object_init+0x2dd/0x3e0 [ 250.785120][T10676] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 250.786787][T10676] p9_client_write+0x31f/0x680 [ 250.788196][T10676] ? __pfx_p9_client_write+0x10/0x10 [ 250.789740][T10676] ? __pfx___debug_object_init+0x10/0x10 [ 250.791393][T10676] ? rcu_is_watching+0x12/0xc0 [ 250.792806][T10676] v9fs_issue_write+0xe2/0x180 [ 250.794220][T10676] ? __pfx_v9fs_issue_write+0x10/0x10 [ 250.795826][T10676] ? rcu_is_watching+0x12/0xc0 [ 250.797244][T10676] ? trace_netfs_sreq+0x198/0x220 [ 250.798953][T10676] netfs_do_issue_write+0x92/0x110 [ 250.800459][T10676] netfs_advance_write+0x384/0xc80 [ 250.801963][T10676] netfs_write_folio+0xc19/0x1930 [ 250.803452][T10676] netfs_writepages+0x29a/0x8f0 [ 250.804910][T10676] ? __pfx_netfs_writepages+0x10/0x10 [ 250.806509][T10676] ? should_fail_alloc_page+0xee/0x130 [ 250.808213][T10676] ? prepare_alloc_pages.constprop.0+0x16f/0x560 [ 250.810062][T10676] ? rcu_is_watching+0x12/0xc0 [ 250.811490][T10676] ? lock_release+0x4e2/0x6f0 [ 250.812864][T10676] ? __pfx_netfs_writepages+0x10/0x10 [ 250.814431][T10676] do_writepages+0x1b3/0x820 [ 250.815807][T10676] ? __pfx_do_writepages+0x10/0x10 [ 250.817306][T10676] ? wbc_attach_fdatawrite_inode+0x13a/0x190 [ 250.819071][T10676] ? __pfx_lock_release+0x10/0x10 [ 250.820547][T10676] ? do_raw_spin_lock+0x12d/0x2c0 [ 250.822014][T10676] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 250.823579][T10676] ? lock_acquire+0x2f/0xb0 [ 250.824957][T10676] ? wbc_attach_fdatawrite_inode+0x24/0x190 [ 250.827158][T10676] ? do_raw_spin_unlock+0x172/0x230 [ 250.828681][T10676] filemap_fdatawrite_wbc+0x104/0x160 [ 250.830212][T10676] __filemap_fdatawrite_range+0xb3/0xf0 [ 250.832324][T10676] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 250.834131][T10676] ? generic_write_checks+0x312/0x480 [ 250.835735][T10676] ? inode_needs_update_time.part.0+0x191/0x270 [ 250.837563][T10676] filemap_write_and_wait_range+0xa3/0x130 [ 250.839272][T10676] netfs_unbuffered_write_iter+0x272/0x6d0 [ 250.840965][T10676] netfs_file_write_iter+0x1c3/0x4f0 [ 250.842670][T10676] v9fs_file_write_iter+0x9b/0x100 [ 250.844163][T10676] vfs_write+0x5ae/0x1150 [ 250.845457][T10676] ? __pfx_v9fs_file_write_iter+0x10/0x10 [ 250.847119][T10676] ? __pfx___mutex_lock+0x10/0x10 [ 250.848619][T10676] ? __pfx_vfs_write+0x10/0x10 [ 250.850017][T10676] ksys_write+0x12b/0x250 [ 250.851316][T10676] ? __pfx_ksys_write+0x10/0x10 [ 250.853303][T10676] ? rcu_is_watching+0x12/0xc0 [ 250.854775][T10676] __do_fast_syscall_32+0x73/0x120 [ 250.856296][T10676] do_fast_syscall_32+0x32/0x80 [ 250.857719][T10676] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 250.859563][T10676] RIP: 0023:0xf714e579 [ 250.860768][T10676] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 250.866829][T10676] RSP: 002b:00000000f514055c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 250.869249][T10676] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000280 [ 250.871775][T10676] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 250.875039][T10676] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 250.877508][T10676] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 250.879800][T10676] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 250.882078][T10676] [ 250.883608][T10676] Kernel Offset: disabled [ 250.884866][T10676] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:03:44 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=ffff88802b43ed00 RCX=ffffffff8176c743 RDX=0000000000000000 RSI=0000000000000004 RDI=ffff88802b43ed00 RBP=ffff88802b43ed08 RSP=ffffc900067bfbc0 R8 =0000000000000000 R9 =ffffed1005687da0 R10=ffff88802b43ed03 R11=0000000000000001 R12=ffff88802b43ed10 R13=ffff88806f048000 R14=0000000000000000 R15=ffff88802b43ed00 RIP=ffffffff8b1ce040 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f935bb9d440 CR3=0000000059486000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000084000 Opmask01=0000000000000001 Opmask02=00000000ffff3f01 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb3982060 0000003000000008 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb3982060 0000003000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3235303731353762 61672d3336313030 2d72656c6c616b7a 79732d3563722d30 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 20726f20656c6966 2068637573206f4e ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0079726f74636572 696420726f20656c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000007 RBX=0000000000000000 RCX=1ffffffff203a35a RDX=0000000000000000 RSI=ffffffff8bb17080 RDI=ffffffff81699bc1 RBP=ffff88802b43ed00 RSP=ffffc9000047fb08 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff901ce7d7 R11=ffff88802b43fb10 R12=0000000000000000 R13=ffff88802b43ed00 R14=ffff88802b53ed00 R15=dffffc0000000000 RIP=ffffffff8b2014f0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3ee1e4 CR3=0000000059486000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85143ef5 RDI=ffffffff9a667200 RBP=ffffffff9a6671c0 RSP=ffffc9000d136958 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=7973203a6d6d6f43 R12=0000000000000000 R13=0000000000000037 R14=ffffffff85143e90 R15=0000000000000000 RIP=ffffffff85143f1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000004cf10000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffff00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff888041011848 RCX=ffffffff82074ed6 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000005 RBP=ffff888041011800 RSP=ffffc90003c3f798 R8 =0000000000000000 R9 =ffffed1008202309 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000001 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff81995033 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f36e40 CR3=000000000db7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73d3ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000