last executing test programs: 1m6.110593791s ago: executing program 3 (id=2030): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x20}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000240)={0x11, 0x2, 0x0, 0x1, 0x8}, 0x14) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 1m5.96692317s ago: executing program 3 (id=2031): sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) (async) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) socket(0xa, 0x3, 0x3a) (async) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="40c1778b98fc00"/20, @ANYBLOB="7469e8845d4aaacb745af752e83ba9164f596ff93d0231e506a401eeb1f28aad1c13107e14b35bb7e0bd7772536de6083e245c8203c9cbbad52f27bbe5c2faa03f75f82efd93d471d0a154ddce0757feb9707d19e7fc50a78e5b89c8a225ed342b89d1a2b28d8d60b7e9cc796841cc00a447fcc903e196930540399426ca8846a63c0bee56e77641ae4d5e955455ce72cddfb6d7d206fc0fa308a78af7adf78d4230c483e427daf3bbe373e06ec4c2a95d0832f85354188cb8625a385bbef1f28dca0dea3f4032ed4970bec2db3c1dd08c1fd7eb8332956af152", @ANYBLOB="4022000000000000200012800b00010067656e657665000010000280050008000300000004000600"], 0x40}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = syz_open_dev$vim2m(&(0x7f0000000180), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x9, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f00000000c0)=0x2) close(r4) (async) close(r4) fsetxattr$security_capability(r2, 0x0, 0x0, 0xfffffe04, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x141, 0x0, 0x4}, 0x18) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x141, 0x0, 0x4}, 0x18) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) mknod$loop(&(0x7f0000000240)='./file0/file0\x00', 0x100, 0x0) (async) mknod$loop(&(0x7f0000000240)='./file0/file0\x00', 0x100, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) gettid() setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) (async) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) 1m5.733174089s ago: executing program 3 (id=2034): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x60, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1009}}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000880)={0x1c, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x0, 0x2}, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_clone(0x80800000, &(0x7f0000000000)="9aa51debc812ffcd068f96554bf59fea7b38a502ed18c76ee04d40c50248693ebb8a5bc98f", 0x25, &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000240)="ab3fdfa7fb54868808812e8a47ee1d48860f18e312290141b637b105becd907827baf97d5542754c0f8bf3e5442f2eac55f93da27aa60968fc45b15b5da320550ded158eaf8a18077cec84baaee2771aedca0e62c7792547cb047be16fc33d7017de9aeaf3dac6d3612f9f007556e0c4c64ba74ca3e8cf8928dcddddb3206170") write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x0, 0x2, 0x6, 0xfffa}, 0x3a, [0xd, 0xc95a, 0xf, 0x4, 0x80, 0x2, 0x3, 0x8001, 0x20000006, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x8, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0x9b400000, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x7, 0x7fffffff, 0x407, 0x2323, 0xfffffff7, 0x8, 0x4006, 0x6, 0x7, 0x0, 0x4, 0x8, 0x1400, 0x100080, 0x0, 0x5, 0x6, 0x5, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012b, 0x8004, 0x5, 0x6, 0x129432e2, 0x1, 0xf9, 0xe, 0xe, 0x6c7, 0x9, 0xfffffffc, 0x80000003, 0x203, 0x0, 0x3, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xa1, 0x4, 0x7, 0x7fff, 0x5a7c, 0x802, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x401, 0x101, 0x8, 0x9, 0xc, 0x47, 0x8000, 0x1, 0xfdffffff, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0xb, 0x250, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x6, 0x3], [0x7, 0x404, 0x0, 0x5, 0x4dfb, 0x100, 0x6, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x0, 0x8, 0x0, 0x2, 0x9, 0x9, 0x401, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20080008, 0x9, 0x6d01, 0x0, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xdfe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x80bf, 0x2, 0x8, 0x7ff, 0x12b, 0x6, 0x40, 0x4, 0x7ff, 0x5, 0x1c, 0x120000, 0x1, 0x2006, 0x80a2ed, 0x0, 0x25], [0x9, 0xbb33, 0x5, 0xb, 0x5, 0x938, 0x7, 0x8, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0xffffff28, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffff9, 0x80000004, 0x85, 0xfffffff9, 0xc8, 0x9, 0x4, 0x7, 0x3, 0x7e, 0x100, 0x9602, 0x1ff, 0xaf, 0xfffffff6, 0x6, 0x226, 0x8, 0x7, 0x8, 0x30b1d693, 0xaed, 0x1000f40, 0x5, 0x1, 0x6c1b, 0x0, 0x4, 0xffef, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x40fff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m2.662790089s ago: executing program 3 (id=2048): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) setpgid(r0, 0x0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) openat$nvram(0xffffff9c, &(0x7f0000000280), 0x181200, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) 1m2.499699146s ago: executing program 3 (id=2049): r0 = syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x800000) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) setpriority(0x1, r1, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000cbed962f6680a990cdedf03955e68b33b43894dd362b43382d9954b15246410328ba038a31124a596700be392f288ee1da52c9716492a3254fe6c23659643a5cab1d7c475726ef9eceaaaffaae76cc99a213329e01a791aa0c56ac96ef1a18ecf15407033a159125a3db8b80cdd329fd01eb091e7d71cee7b306b9f80463ed2721b0c5d5797d08c734c54d0b7ae0347070fece61235c9a63a82a1f61b7e3c67e46246544b1a90316b1a5182ad81cd2cba0317b08e7a67611c3"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mlock2(&(0x7f0000406000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) bind$can_j1939(r5, &(0x7f0000000040)={0x1d, r6, 0x8000000000000003}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x40f00, 0x1e}, 0x94) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc2c45513, &(0x7f0000002e00)={{0x8, 0x7, 0x3, 0x2, 'syz0\x00', 0x7b}, 0x0, [0x1, 0x200000a, 0x1000, 0xffffffff, 0x1d1, 0x80000000, 0x5, 0x5, 0xbc0, 0x7, 0x15b, 0x7, 0x5944, 0x5, 0x7, 0x8004a7, 0x9, 0x5, 0x4, 0x3, 0x2c, 0x400, 0x2000040, 0x10000002, 0x7, 0x0, 0x2, 0x800, 0x3, 0x1, 0x4, 0x6, 0x6, 0x7ff, 0x3ff, 0x1, 0x5, 0x3, 0x5, 0x6, 0x3, 0x7fff, 0xbfff8007, 0x200000e, 0xe, 0x0, 0x2, 0x5, 0xe, 0x20000004, 0x9, 0x80000001, 0x400, 0x1ff, 0x9, 0xfffff647, 0x408, 0x4, 0x1, 0x9, 0x0, 0x9, 0x1000005, 0x8, 0x98, 0xba, 0x1, 0xa, 0x7, 0x80000000, 0x81, 0x10001, 0x2, 0x80000001, 0x69e, 0xb, 0x7000000, 0x1, 0x8, 0x9, 0x7, 0x8, 0x1, 0x408, 0xfffffffd, 0xfffffa4f, 0x6, 0x8, 0x4, 0x4, 0xef, 0xff, 0x4, 0xffffffff, 0xf8a, 0x58a0, 0x1, 0x9, 0x895, 0x6, 0x7ff, 0x10000089, 0xfffffffe, 0xa1a9, 0x6, 0x9, 0xfffff565, 0x12, 0x3, 0x3, 0xfffffffa, 0x3, 0x2, 0x4, 0x2ba, 0x1, 0xe, 0x7, 0x7ffd, 0x2, 0xf2, 0x8, 0x1ff, 0x7, 0x7, 0x7, 0x6, 0xff]}) 1m1.98941177s ago: executing program 3 (id=2053): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x7c, 0x30, 0x4, 0x0, 0x0, {}, [{0x68, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x38, 0x5f, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e6574"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) unlink(0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a005124deacb12e68d5b042fd94802e899d13e0374769b03ac3273b6ab1188023b587e473253682146a9f24b52e89b42d3c836c1702078fbba099e45a9ddb039922f65e595e5fb3172b8fc94fe9185633ff84974096e32e8d6ce93ad1488698052714e15b7763bfe3d117e145752db35e4553df3a7d153ee8c27ebc9342e6eecf4d1b92e4ac8c64700aec62c72fd06f652ebc960a30868729b4b249183381de3f1879286998f3493e664e810b0c", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) process_madvise(r7, &(0x7f00000015c0)=[{0x0, 0xb3c9de750fa141ee}, {&(0x7f0000001600)="7fe370522d6af6625215f1793293827ec1fbafd2669ec71d6ec4f18aaa71edae948611d70900e80e4116a3c114041430f19bd4f37e3c7238ed6e6d46979c2220bde96ffe55c88d2e697fd133e5733e1bbb159ba81a1e8e2fb2e51596", 0x1}, {&(0x7f0000001300)="0454c96113b0da138a30557b0c026d7c7ba28c5cf82e468ed91537d279936ddcf06ef737e0943554457a28db61aea38a154bf19b456388daf4df61c9febcd9b8a2b14929c6f097f4ff11e686a8a37381b9321ae19dd77be474863e35633dec7003568e91eab8e870a93a73b6dea475547a826b25021aecd727c201c9cea0bfba0122b00573c286b821d43d0b4e38ec90b7d08565bf81862bdf5115e75886e742c51e058d0752982da309d53a7c0d320fdbd38bfaa998ff981d15928f783b2728ecc210898685dfc72398e665b7892024c0ab0dcfe9d3fc", 0xd7}, {&(0x7f0000001400)="3e519bc4eb7b0a55b33bdb22cc7ca76aba33506ebcf89e67b16583e68404bbca008b995a73322a4cc7a3c436e94da49121c4f225ccd342612b46beb2f569a7a0423c0cf79f2d94c015b7b47bc11d5fe599214dbe7f92c8a14b6d254a8daa074ece2708f10e912eb72cb22efc14a0d0cc7cea79311ead3200c7aca0e920d83c8d7b92db", 0x83}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000014c0)="6b553f4de4ed875c9fadc16852f54981bcd646a5262fc3900592194638585e3d2e79f074f796720749ddc1a2661dcb2471a47d963fb4d817dfdb5f52dc8ab642030c2c771646051d08609527b36368b80794b8cb63fe817c3379951a047c5026c2e99eae6dc05c6845529fb603666d78c0e1e5f7bca8f1d8584b7409ccaf0da598af64d7bdd2ae21ac4fb4e07dee96a92a8dddecee7ccbede2d0a7d4f2da90dc3eb4ae8895091f05db58a786519f6fc924a465cc46ae6a9b8705de0705b8bab4f10cddc7756c53eadf4aa6e2379fd85e9c5e7bfc", 0xd4}], 0x6, 0x9, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000140)=0x1000201, 0x4) 1m1.890551186s ago: executing program 32 (id=2053): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x7c, 0x30, 0x4, 0x0, 0x0, {}, [{0x68, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x38, 0x5f, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e6574"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) unlink(0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a005124deacb12e68d5b042fd94802e899d13e0374769b03ac3273b6ab1188023b587e473253682146a9f24b52e89b42d3c836c1702078fbba099e45a9ddb039922f65e595e5fb3172b8fc94fe9185633ff84974096e32e8d6ce93ad1488698052714e15b7763bfe3d117e145752db35e4553df3a7d153ee8c27ebc9342e6eecf4d1b92e4ac8c64700aec62c72fd06f652ebc960a30868729b4b249183381de3f1879286998f3493e664e810b0c", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) process_madvise(r7, &(0x7f00000015c0)=[{0x0, 0xb3c9de750fa141ee}, {&(0x7f0000001600)="7fe370522d6af6625215f1793293827ec1fbafd2669ec71d6ec4f18aaa71edae948611d70900e80e4116a3c114041430f19bd4f37e3c7238ed6e6d46979c2220bde96ffe55c88d2e697fd133e5733e1bbb159ba81a1e8e2fb2e51596", 0x1}, {&(0x7f0000001300)="0454c96113b0da138a30557b0c026d7c7ba28c5cf82e468ed91537d279936ddcf06ef737e0943554457a28db61aea38a154bf19b456388daf4df61c9febcd9b8a2b14929c6f097f4ff11e686a8a37381b9321ae19dd77be474863e35633dec7003568e91eab8e870a93a73b6dea475547a826b25021aecd727c201c9cea0bfba0122b00573c286b821d43d0b4e38ec90b7d08565bf81862bdf5115e75886e742c51e058d0752982da309d53a7c0d320fdbd38bfaa998ff981d15928f783b2728ecc210898685dfc72398e665b7892024c0ab0dcfe9d3fc", 0xd7}, {&(0x7f0000001400)="3e519bc4eb7b0a55b33bdb22cc7ca76aba33506ebcf89e67b16583e68404bbca008b995a73322a4cc7a3c436e94da49121c4f225ccd342612b46beb2f569a7a0423c0cf79f2d94c015b7b47bc11d5fe599214dbe7f92c8a14b6d254a8daa074ece2708f10e912eb72cb22efc14a0d0cc7cea79311ead3200c7aca0e920d83c8d7b92db", 0x83}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000014c0)="6b553f4de4ed875c9fadc16852f54981bcd646a5262fc3900592194638585e3d2e79f074f796720749ddc1a2661dcb2471a47d963fb4d817dfdb5f52dc8ab642030c2c771646051d08609527b36368b80794b8cb63fe817c3379951a047c5026c2e99eae6dc05c6845529fb603666d78c0e1e5f7bca8f1d8584b7409ccaf0da598af64d7bdd2ae21ac4fb4e07dee96a92a8dddecee7ccbede2d0a7d4f2da90dc3eb4ae8895091f05db58a786519f6fc924a465cc46ae6a9b8705de0705b8bab4f10cddc7756c53eadf4aa6e2379fd85e9c5e7bfc", 0xd4}], 0x6, 0x9, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000140)=0x1000201, 0x4) 33.581528943s ago: executing program 1 (id=2184): syz_open_dev$video4linux(&(0x7f0000000000), 0x2000002000000403, 0x400) r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="fe"]) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[]) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$can_bcm(0x1d, 0x2, 0x2) getpeername(r3, 0x0, &(0x7f0000000000)) r4 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x2, 0x156}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_enter(r4, 0x26c8, 0x0, 0x1, 0x0, 0x10) 33.298230117s ago: executing program 1 (id=2188): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xa7e}, 0x94) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000002700)="89", 0x1}], 0x1}}], 0x1, 0x24040040) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x5) (async) r3 = eventfd(0xfffff801) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000000)={0x0, r3}) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001c00070c00200000000000000a000000", @ANYRES32=r6, @ANYBLOB="40000000140001"], 0x3c}}, 0x20024090) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) socket(0x10, 0x3, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x3e4, 0xffffffff, 0x114, 0x114, 0x248, 0xffffffff, 0xffffffff, 0x31c, 0x31c, 0x31c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd4, 0x114, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x1ff], 0x3, 0x10, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x401ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0xec, 0x134, 0x0, {}, [@common=@icmp6={{0x24}, {0x11, "4dd4", 0x1}}, @common=@eui64={{0x24}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xa4, 0xd4}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0xffffffffffffff11) (async) r8 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r9 = openat$binfmt(0xffffffffffffff9c, r8, 0x42, 0x1ff) close(r9) (async) execveat$binfmt(0xffffffffffffff9c, r8, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 33.122461825s ago: executing program 1 (id=2189): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000"], 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) setgid(0xee01) keyctl$setperm(0x5, 0x0, 0x1c243811) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @local}}, 0xe, 0xcfc, 0xffffff79, 0x8001, 0x87, 0x28, 0x5}, 0x9c) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x2002dd9, 0x0, &(0x7f0000000000), &(0x7f0000000380)) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'dt2801\x00', [0x4f3a, 0xffffffff, 0x10000, 0x4, 0x2, 0xcc7, 0x8, 0x7, 0xa, 0x6, 0x401, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x8d, 0x7, 0x0, 0x20001e58, 0xb, 0x9, 0x3d, 0x8, 0x4088, 0x0, 0xfffffff8, 0xfffffffc]}) socket$inet(0x2, 0x800, 0x4) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = epoll_create1(0x80000) io_setup(0xdda, &(0x7f00000000c0)=0x0) r9 = syz_io_uring_setup(0x42ff, &(0x7f00000002c0)={0x0, 0xec27, 0x2, 0x0, 0x40000333, 0x0, r3}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r9, 0x847ba, 0x0, 0xe, 0x0, 0x0) io_submit(r8, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x2, r7, 0x0, 0x0, 0x0, 0x0, 0x2}]) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000140)={0x2016}) sendfile(r5, r5, 0x0, 0x800007) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)='\\', 0x1) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) 31.992539956s ago: executing program 1 (id=2193): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) r1 = dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) socket$inet6_sctp(0xa, 0x1, 0x84) write$UHID_INPUT(r1, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006) 30.168109684s ago: executing program 1 (id=2199): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xf, 0x4, &(0x7f0000000180)=ANY=[@ANYRES8], 0x0, 0x9, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180)) r4 = socket(0x15, 0x5, 0x0) connect$l2tp6(r4, &(0x7f0000000740)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x20) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000000c0)="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", 0x463}], 0x1, 0x0, 0x0, 0x10}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000002300)=ANY=[@ANYBLOB="180000000010000000000000000000001800000004000000000000000700000085100000fbffffff1864000003000000000000000200000095000000000000009721f8f99b9c32b94fa3531ed1fe6ba94a51ebae43e4e02c6702b58f46e33936345a20937f2a96fd56d9437cee57a6a28ddc0fa3e93f72c37140d76fdb2f2dba11bf3e68b3d449ed8a6e259d56194a83c83d8add0ffb3af5414ebd89"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) 29.270774789s ago: executing program 1 (id=2204): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x47) statx(0xffffffffffffffff, &(0x7f00000003c0)='./file0/file0\x00', 0x800, 0x40, &(0x7f0000000180)) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x80, 0x188) name_to_handle_at(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="f41262ed7954525d9e8c20000000620000000002090000000800000007000006000000000000000000000000000039000000000740f537faabf44ecab39441843332645ce8dcbe8f668d9f881756992d57ff90c389be9b945751d70300000031639c95fa304f4790a3335d820c1f3ec8dbc73b0c60c153bee529d59670dcf70fd757efc717b40d172286e836faf839f003f59c74560f172c32b98e000000000000000000"], &(0x7f0000000140), 0x1600) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000200), 0x2, r3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="341d77de120e5110000000f0ff0100a5c73051d2abcdefffffff001a79dac2bcb22a314fcc02781caa5cc3c4bd1bbbeda6ccc88c83410b04e34b8e52f576802c043a1aa400b2f2d717b8b5e503cdb3c1df75aa39cca85d281a40be249946702249e83ff98e7149a11f1e62466c00adb2166cb8f5e105c1db6a1c0b559a544b69182c9a85bbc39d8d00da98a443d1d286f347539e79ae0ba83d91e6d61cc4a72476efd0891b5181dd76d85b7e71e6958b15b0bc8d928c58b87290779d", @ANYRES32=0x0, @ANYBLOB="40c400000000040014001a80100004800c0005800800110000800100"], 0x34}}, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000540)={0x200, 0x1, &(0x7f00000005c0)=[r3], &(0x7f0000000600)=[0x3], &(0x7f00000000c0)=[r4], &(0x7f0000000040), 0x0, 0x200}) setpgid(0x0, 0x0) syz_io_uring_setup(0x2f6c, &(0x7f00000002c0)={0x0, 0xbd84, 0x0, 0x1, 0x77}, &(0x7f0000000340)=0x0, &(0x7f0000000640)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0x7fffffff, 0x0, 0x4) r6 = openat$ipvs(0xffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x0, 0x0, 0x0, @dev, @private=0x10000}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffdf0, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @broadcast}}}}) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, &(0x7f00000000c0)={0x8, 0x6, {0x51, 0x8, 0x7f, {0x1a, 0x277}, {0xc172, 0x9}, @period={0x58, 0x2, 0x3, 0x3ff, 0x1ff, {0x8, 0x0, 0x4, 0xa}, 0x0, 0x0}}, {0x53, 0x7, 0x7e5e, {0x0, 0xe9f}, {0x3, 0x59}, @rumble={0x2, 0x4}}}) r8 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x10886}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}}}]}, 0x38}}, 0x0) ioctl$RTC_PLL_GET(r6, 0x801c7011, &(0x7f0000000380)) 14.242802183s ago: executing program 33 (id=2204): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x47) statx(0xffffffffffffffff, &(0x7f00000003c0)='./file0/file0\x00', 0x800, 0x40, &(0x7f0000000180)) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x80, 0x188) name_to_handle_at(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="f41262ed7954525d9e8c20000000620000000002090000000800000007000006000000000000000000000000000039000000000740f537faabf44ecab39441843332645ce8dcbe8f668d9f881756992d57ff90c389be9b945751d70300000031639c95fa304f4790a3335d820c1f3ec8dbc73b0c60c153bee529d59670dcf70fd757efc717b40d172286e836faf839f003f59c74560f172c32b98e000000000000000000"], &(0x7f0000000140), 0x1600) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000200), 0x2, r3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="341d77de120e5110000000f0ff0100a5c73051d2abcdefffffff001a79dac2bcb22a314fcc02781caa5cc3c4bd1bbbeda6ccc88c83410b04e34b8e52f576802c043a1aa400b2f2d717b8b5e503cdb3c1df75aa39cca85d281a40be249946702249e83ff98e7149a11f1e62466c00adb2166cb8f5e105c1db6a1c0b559a544b69182c9a85bbc39d8d00da98a443d1d286f347539e79ae0ba83d91e6d61cc4a72476efd0891b5181dd76d85b7e71e6958b15b0bc8d928c58b87290779d", @ANYRES32=0x0, @ANYBLOB="40c400000000040014001a80100004800c0005800800110000800100"], 0x34}}, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000540)={0x200, 0x1, &(0x7f00000005c0)=[r3], &(0x7f0000000600)=[0x3], &(0x7f00000000c0)=[r4], &(0x7f0000000040), 0x0, 0x200}) setpgid(0x0, 0x0) syz_io_uring_setup(0x2f6c, &(0x7f00000002c0)={0x0, 0xbd84, 0x0, 0x1, 0x77}, &(0x7f0000000340)=0x0, &(0x7f0000000640)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0x7fffffff, 0x0, 0x4) r6 = openat$ipvs(0xffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x0, 0x0, 0x0, @dev, @private=0x10000}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffdf0, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @broadcast}}}}) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, &(0x7f00000000c0)={0x8, 0x6, {0x51, 0x8, 0x7f, {0x1a, 0x277}, {0xc172, 0x9}, @period={0x58, 0x2, 0x3, 0x3ff, 0x1ff, {0x8, 0x0, 0x4, 0xa}, 0x0, 0x0}}, {0x53, 0x7, 0x7e5e, {0x0, 0xe9f}, {0x3, 0x59}, @rumble={0x2, 0x4}}}) r8 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x10886}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}}}]}, 0x38}}, 0x0) ioctl$RTC_PLL_GET(r6, 0x801c7011, &(0x7f0000000380)) 9.832255306s ago: executing program 0 (id=2313): r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0xfffff5ad, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000002d40)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9c040000", @ANYRES16=r6, @ANYBLOB="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"/1174], 0x49c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r7, 0xffffffffffffffff, 0x0) 8.079905818s ago: executing program 0 (id=2318): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0xa0, 0x30, 0x1, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_ct={0x5c, 0x2, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "85170bff2275278cd37a7e4e15d5c4ec"}, @TCA_CT_MARK={0x8, 0x5, 0xdc}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x40010, 0xffffffffffffffff, 0x83458000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) socket$netlink(0x10, 0x3, 0x15) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0}) syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1001, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x7a, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 7.458554515s ago: executing program 0 (id=2328): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x42800, 0x55007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x2}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000380)=0x4) ioctl$TCFLSH(r5, 0x800455ca, 0x2) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x230404, &(0x7f0000000740)=ANY=[@ANYBLOB="0af9ff", @ANYRESHEX=r6, @ANYRES16=r0, @ANYBLOB="5b1d5e983d58e559ec2e0db9f5f5be7605c79eb3850f0011718f10566f279cbc9143049e04dae8d3388da11b9fc51198ec1201951734742918f648b93583f924b33883b6276ca5092422724d4571b1824da9a1e20f49332fa17b51d0212520f340c304f85061a1687b4973c657d548cb5cc9fb6ae29f5cf5db1bc70ee76b5a3a939ba00540b15e6ec9ad45c52c872d", @ANYBLOB="e9d79ee66c4c088854ade020eb03d3c0494683a541fd3cba0606a68bdc5793c62d20668b492c752602841b4e4f00d6b982b2651dd0ca02a17e488061b6320b7e8d1c4596b016f0591ce4afb38929b7e3db92bf92468b5ffa34643f741f002000008173c1962c33c03b6a6f1e0fe830553ceb3b07afead02e4d246d8fc0afd7dbfdedfbf18d1e0723a0d306f5cb6e2d52b2a944442d15116ba11194a2dc4be83f2853a16133ab5c2ed650a07689ac821c06cdadcdfdbb9d2a01c952300a34d6ed30b65ccae95c4fe85525132d6e8391056725022adbce5b913098026bbcb2722bbb4d16b549a2a956e10fce4ba3f155ffa55ecd2b", @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000080)={0x50, 0x0, r7, {0x7, 0x2b, 0x0, 0x10010800, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x1}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) syz_fuse_handle_req(r6, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f000000a200)="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", 0x2000, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x90, 0x0, 0x80000005, {0x3, 0x2000, 0x1000000, 0x80000001, 0x3fe, 0x3, {0x5, 0x3, 0x0, 0xfe2b25f, 0x770, 0x101, 0x0, 0x84, 0x0, 0x6000, 0x7, 0x0, 0x0, 0x8, 0xdffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) io_setup(0x2007, &(0x7f0000000040)=0x0) r9 = eventfd2(0x8, 0x80801) io_submit(r8, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x1, r9}]) write(r9, &(0x7f0000000080)="ac04615c92ebbe03", 0x8) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000240)={0x1}) 7.33254795s ago: executing program 0 (id=2332): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket(0x11, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) connect$l2tp6(r1, &(0x7f0000000240)={0xa, 0x0, 0x3, @private1={0xfc, 0x1, '\x00', 0x20}, 0xa}, 0x20) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8918, &(0x7f0000000480)={'veth1_macvtap\x00', {0x2, 0x0, @empty=0xcf050000}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80202, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000000104010200000000000000000200000105000100040000000800034040000007080003400000d0ac0600064000020000060006400001000006000629000100001b9d064000020000"], 0x4c}, 0x1, 0x0, 0x0, 0x4004800}, 0x40000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a"], 0x7c}, 0x1, 0x0, 0x0, 0x4048000}, 0x44450) sendmsg$NFT_BATCH(r5, 0x0, 0x4048010) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket(0x2, 0x80805, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f00000003c0)=ANY=[], 0x0) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 5.322631489s ago: executing program 5 (id=2344): gettid() timer_settime(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_io_uring_setup(0x2b26, &(0x7f0000000040)={0x0, 0xacff, 0x80ffff, 0x0, 0x21}, &(0x7f0000ffd000), 0x0) 4.422517591s ago: executing program 5 (id=2345): r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_MM_MAP(0x41, 0x3, 0x0, 0x40d5213120fe70bb) syz_usbip_server_init(0x1) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000002200), 0x206040, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x8, @remote}, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x10048405}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="c01800002000010a00000000000000000a0000002c01018028014880ed00a90013466820cd76bb221fbb4acd690c6a8b9c760a61eeec7793b579aefdb936d00f403d3f04637cdb9ac7", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) socket(0x10, 0x3, 0x0) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6001, 0x0, 0xdf, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0xfdf8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000000000)={0x2, 0xe25, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0xc7) 4.311123773s ago: executing program 0 (id=2346): r0 = fsopen(&(0x7f0000000080)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xb) r1 = openat$hpet(0xffffff9c, &(0x7f0000000240), 0x101200, 0x0) pread64(r1, 0x0, 0x0, 0x4) ioctl$SNDCTL_TMR_SOURCE(0xffffffffffffffff, 0xc0045406) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e04fd0a20"], 0x7) 4.270999894s ago: executing program 2 (id=2347): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 4.269734771s ago: executing program 0 (id=2348): socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x6a040000) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r3, 0x2, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r2, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10}]) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x6) accept4(r4, 0x0, 0x0, 0x80800) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = socket$caif_stream(0x25, 0x1, 0x2) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f0000000240)) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xea) shutdown(r4, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0) r9 = socket(0x23, 0x2, 0xb7e) socket(0x8, 0x80000, 0x8003) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xd084}, 0xc010) r10 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r10, 0x29, 0x40, &(0x7f00000000c0)={'nat\x00', 0x0, [0x4, 0x5, 0x8, 0x4, 0x9]}, &(0x7f0000000200)=0x54) 4.222729765s ago: executing program 2 (id=2349): sched_setattr(0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=ANY=[]) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x26642) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000080)) fsetxattr$security_capability(r1, &(0x7f0000000280), &(0x7f0000000380)=@v3={0x3000000, [{0x5, 0x82}, {0x80000000, 0xffffaf0a}]}, 0x18, 0x0) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x13, 0x7, 0x2, {0xa, '/dev/ptp0\x00'}}, 0x13) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getgid() 4.146070715s ago: executing program 2 (id=2351): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=@setlink={0x28, 0x13, 0xbaa23f3d13f2d1f5, 0x3, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_CARRIER={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbb0000bbbb8adeeccb6f5908060001080006040002aaaaaaaaaa1de0000002"], 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x6, 0x7}}, './file0\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000033c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x50) close(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x1) r4 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r8, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$MRT6_DEL_MIF(r9, 0x29, 0xcb, &(0x7f0000000040), 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r10}, 0x10) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000040)={0x2}) 2.99877764s ago: executing program 5 (id=2354): syz_clone(0x2000211, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffff9c, &(0x7f0000000200), 0x64c400, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, 0x0, 0x0) r2 = openat$vimc0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000100)={0x3, 0x3, 0x45, &(0x7f0000000080)=""/69}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x600, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x4008010) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x300) openat$uinput(0xffffffffffffff9c, &(0x7f0000001600), 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300, {[@end]}}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x1c, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0xa4ffffff, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x60000000000, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/128, 0x80}], 0x1, 0x12e, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e00, 0x0) 2.922225189s ago: executing program 4 (id=2356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="fc01000019000100000000000000000000000000000000000000ffff00000000ac14144200000000000000000000000000000000000080000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044010500ff010000000000000000000000000001"], 0x1fc}}, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)={0x14, 0x6a, 0xfcdfa0f79c183163, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d61737100000000140002800800024000000008080003"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="fc01000019000100000000000000000000000000000000000000ffff00000000ac14144200000000000000000000000000000000000080000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044010500ff010000000000000000000000000001"], 0x1fc}}, 0x4000) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)={0x14, 0x6a, 0xfcdfa0f79c183163, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d61737100000000140002800800024000000008080003"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) (async) 2.769630597s ago: executing program 4 (id=2357): r0 = syz_open_dev$mouse(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(0xffffffffffffffff, 0x3e79, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x4000800) socket$inet_icmp_raw(0x2, 0x3, 0x1) setuid(0xee01) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0xfffffffd) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0xfffffffd) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x1) r7 = socket$netlink(0x10, 0x3, 0x4) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r8, 0x3) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r9, &(0x7f0000000140)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r7) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000640)="f3", 0xf000}], 0x1) 2.684447112s ago: executing program 4 (id=2358): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x163c80, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000840)={r2}, 0x4) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r4 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) statx(0xffffffffffffff9c, 0x0, 0x4000, 0x4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r4, 0xffffffff80000702, r5, &(0x7f0000000400)) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r6}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r7}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x4000, r7}, 0xa) (fail_nth: 1) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b81000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000bc0)='./file0\x00', r8}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r3}, 0x14) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r9, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) socket$qrtr(0x2a, 0x2, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000840)={r10}, 0x4) r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r2}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r11, 0x0, 0x7f, 0x80, &(0x7f0000000100)="d26c62a6028a232a5793b2f09f2491130bf14773f9f02f03054f28b800a3e9f28efa9da37238e9c620bc1f95df11edca4907cb678b9c8d1f27af56617851f30e90481dd8fda507b22dfba361ff9046302eb6b137913454b46545f2bf5ff6d13243b0fd5dd8932f30dc7c394823e1109242fc14452ad6cdc57e06599b1a5df9", &(0x7f0000000180)=""/128, 0x7fffffff, 0x0, 0x93, 0x1f, &(0x7f0000000200)="35c8ff42d1232f69f9cf03ab59588723dbc5e7b2f6a3c38a1d26fcad0c6a69b65b5f688333ed3e09ef46d39528a96526665d83c0ae30cc2e354f325cddefb7b756aa0ea18fa834762cc0ff1c52ce51004b4630e93b6f764d24a8e96af98d09a40a88cc00a6e971d19778cd5d065955c40503b3dc6b1ae74b0a50fa2601fbe92b77f2d67984ce411b21d88e758f7f7ade7e7233", &(0x7f00000002c0)="554757db00cd5017f480fafe3c4316558b0bb14e73758046b3d4f27549d227", 0x1, 0x0, 0x4}, 0x4c) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, '.\x00'}) 2.6691318s ago: executing program 5 (id=2359): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000002300), 0x1, 0x14a042) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$HIDIOCGRDESC(r1, 0x4030582a, &(0x7f0000000200)={0xd, "7954bbc8e80000000000000001"}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYRES64=r2, @ANYRES32=r3, @ANYBLOB="1f434aeae232995d626744fbe49817bb003300d0000000080211000001480211000000c3ef505050500000", @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0xc40d5) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) (async) syz_open_dev$hidraw(&(0x7f0000002300), 0x1, 0x14a042) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$HIDIOCGRDESC(r1, 0x4030582a, &(0x7f0000000200)={0xd, "7954bbc8e80000000000000001"}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYRES64=r2, @ANYRES32=r3, @ANYBLOB="1f434aeae232995d626744fbe49817bb003300d0000000080211000001480211000000c3ef505050500000", @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0xc40d5) (async) 2.592902983s ago: executing program 5 (id=2360): socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x6a040000) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r3, 0x2, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r2, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10}]) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x6) accept4(r4, 0x0, 0x0, 0x80800) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = socket$caif_stream(0x25, 0x1, 0x2) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f0000000240)) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xea) shutdown(r4, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0) r9 = socket(0x23, 0x2, 0xb7e) socket(0x8, 0x80000, 0x8003) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xd084}, 0xc010) r10 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r10, 0x29, 0x40, &(0x7f00000000c0)={'nat\x00', 0x0, [0x4, 0x5, 0x8, 0x4, 0x9]}, &(0x7f0000000200)=0x54) 2.575739807s ago: executing program 2 (id=2361): r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_MM_MAP(0x41, 0x3, 0x0, 0x40d5213120fe70bb) syz_usbip_server_init(0x1) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000002200), 0x206040, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x8, @remote}, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x10048405}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="c01800002000010a00000000000000000a0000002c01018028014880ed00a90013466820cd", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) socket(0x10, 0x3, 0x0) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6001, 0x0, 0xdf, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0xfdf8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000000000)={0x2, 0xe25, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0xc7) 2.513523497s ago: executing program 4 (id=2362): r0 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x4000, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e00ecfffbff94020000000000004000000000000000e503000000000000000000002c8f380049"], 0x178) close(r3) r4 = openat$fb1(0xffffff9c, &(0x7f0000000000), 0x602, 0x0) preadv(r4, &(0x7f0000000080), 0x0, 0xfffff800, 0x7) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 2.481904506s ago: executing program 4 (id=2363): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x400000000010, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@private2, @in6=@ipv4={""/10, ""/2, @broadcast}}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, 0x0) ioperm(0x284, 0x7f, 0xe3) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r2) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, r3, 0x926fdb2c68a18847, 0x1000, 0x0, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x24044815}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000000000000800c00000008000400010000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, {}, 0x1}) r9 = socket(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x21dfdbff, {0x60, 0x0, 0x0, r11, {0x0, 0x3}, {0xd, 0xffff}, {0x2, 0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x47d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000c40)=[{&(0x7f00000003c0)=""/7, 0x7}], 0x1) r12 = memfd_create(&(0x7f0000001240)='[\v\xdbX\xae[\x1a\xad\xd1md\xc8\x85HX\xa9%\f\x1a,\xe2\x9c\xb4\xd7\xbc\xf1\xb3\x86\xe2/Op\xd0\xa2\x82\x1eb;(\xb5\xe1j\xc8\f\xe5\x89\x17\xee|J\x90=5\xed\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q%\x8a\xda\x05\x00f\xe3j%\x00\x00\x1c#\xc6\xd8\xdbD\x92P\xe16W\x10\xdau\xc7\x8f\xaa\x8d\xa9\x97\x9d\xcb\x1e\x80\xe7\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\xbdD\xcc\'\xa2\xaf`\xf6L\x0e\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecM\xe4H\xb7\xaf\xa8\x96dh\xa9\xab > \xac\x00O^\x14\xcbv\x17Hkb\xe7\xcb\x9d;\xd2\x9f\x05\xd1\x00\x8b\xd3\x9f\a\x99^v\xf7\xfa\xe5\xf0h\x87l\xd9\x15\xd2\x87~?\xb1\x9d\xc1\x92`\x8a\r\xfc\xeb\x14\xd1\x94\fv\x8a\xe3\x1d\x0fj}\x9f\xedsc\xd3\xee\xe6cXw\xa1\xbc\xd0o\xf9\x9cJ\b\x00\xd8;\\ik0+\xc8\xf2\x87\xdf\t\x97\x9dB\xc1\xa0\xa71\xf25GU|]A\x1eel \x8ff\xc6\nt\xd0\x91\x9d\x8c\xa4\xe5\xde\x06\x00\xffE\xf4\x96#\x92-9\xe5\xa7\xf8%\xb0I\xd4\x91r\xbf\x1bOS\xee}\x16\x87\x05\xf2\xb9\x81\x14\xe2NZ\\I\xd0[\xc4\xf2\"\x87\xf5\xb8\x95.M\xb1S\xbd\xe4i\x00\xc1b\t]?}0\t\xebV\xbci\xa5\x05\xca\xb6\xc22\x7fL\x89&\xa0\xcfMULr0rs\xb4\n\xa6)\xe23\xf0\x8d\x9dO\xb9\xc9\x83\xabS\x013\"\x1b\x97K\x17\x16\x89\a\xee\xc903\xad\x15\x1cH\xd2\x95\x91\xb4$\x1b\xbf\xaf\xf5\x9b\xc2\x85\xe7[\xe5\xfb}\x1d@f2\x11\x13Y\x98\xa4\xecWEE\x9eI\x05\v\x11\xad\x93!^T\xe5N\xf6LI\x9a6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x1a\xc9(a\x06>g\xe5\x00:\x9au\xef\x14\t\x1f8E\x86\xcb\xd0e\x17\xfb\xc1', 0x1) fsetxattr$security_ima(r12, &(0x7f0000000080), 0x0, 0x0, 0x0) write$binfmt_script(r12, &(0x7f0000003b80)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) mmap(&(0x7f0000fef000/0x10000)=nil, 0x10000, 0xb, 0x110, r1, 0xd92fe000) execveat(r12, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) fchmod(0xffffffffffffffff, 0x134) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@timeout}]}}) unshare(0x68040200) 1.13890688s ago: executing program 2 (id=2364): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) r1 = dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$UHID_INPUT(r1, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006) 224.134218ms ago: executing program 2 (id=2365): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000070000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$igmp6(0xa, 0x3, 0x2) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) creat(&(0x7f00000001c0)='./file0\x00', 0x102) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x94, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x85494000) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x10) chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000005c0)='sys_exit\x00', r0, 0x0, 0x8}, 0x18) migrate_pages(0x0, 0x4, 0x0, 0x0) 126.327638ms ago: executing program 5 (id=2366): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_ADV_SET_RAND_ADDR={{0x99}, 0x5}}}, 0x7) syz_open_dev$hiddev(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x40000004, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0x6, 0x5d}, 0x10, 0x0, 0xffffffffffffffff, 0x9, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x0, 0x3}, {0x0, 0x5, 0xd, 0x2}, {0x5, 0x4, 0xd, 0xa}, {0x4, 0x4, 0xf, 0xb}, {0x1, 0x4, 0x5, 0x1}, {0x5, 0x3, 0xc, 0x9}, {0x4, 0x1, 0x2}, {0x4, 0x5, 0x9, 0x3}, {0x5, 0x5, 0x9, 0x8}], 0x10, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000ef0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getrusage(0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$tun(0xffffffffffffff9c, 0x0, 0x4e002, 0x0) socket(0x1, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) (fail_nth: 2) 0s ago: executing program 4 (id=2367): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="00001000010700000000000000000a0000000c0024006e6c383032313100"], 0x20}}, 0x0) kernel console output (not intermixed with test programs): 0.1741" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 386.865554][ T40] audit: type=1326 audit(1759905282.915:4308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12558 comm="syz.0.1741" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 387.410157][ T6067] usb usb40-port1: unable to enumerate USB device [ 387.714804][T12589] netlink: 'syz.0.1747': attribute type 10 has an invalid length. [ 387.793442][T12593] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 387.796066][T12593] syzkaller0: owner set to 0 [ 387.932807][T12595] netlink: 'syz.3.1750': attribute type 10 has an invalid length. [ 388.020694][T12598] C: renamed from team_slave_0 [ 388.026511][T12598] netlink: 'syz.0.1751': attribute type 3 has an invalid length. [ 388.031734][T12598] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1751'. [ 388.040470][T12598] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 388.207800][T12604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1752'. [ 388.405219][T12607] comedi comedi0: Minor 26 could not be opened [ 389.341217][T12629] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1760'. [ 389.383164][T12631] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 389.387162][T12631] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 389.399856][T12631] vhci_hcd vhci_hcd.0: Device attached [ 389.597622][ T6301] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 389.668007][ T6067] usb 44-1: SetAddress Request (31) to port 0 [ 389.670927][ T6067] usb 44-1: new SuperSpeed USB device number 31 using vhci_hcd [ 389.767808][ T6301] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 389.771667][ T6301] usb 6-1: can't read configurations, error -22 [ 389.897137][ T6301] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 390.106392][ T6301] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 390.113077][ T6301] usb 6-1: can't read configurations, error -22 [ 390.117461][ T6301] usb usb6-port1: attempt power cycle [ 390.149085][T12632] vhci_hcd: connection reset by peer [ 390.152171][ T1149] vhci_hcd: stop threads [ 390.154239][ T1149] vhci_hcd: release socket [ 390.156570][ T1149] vhci_hcd: disconnect device [ 390.218303][T12652] netlink: 'syz.0.1766': attribute type 4 has an invalid length. [ 390.456639][ T6301] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 390.493726][ T6301] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 390.497246][ T6301] usb 6-1: can't read configurations, error -22 [ 390.626540][ T6301] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 390.649545][ T6301] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 390.653043][ T6301] usb 6-1: can't read configurations, error -22 [ 390.657141][ T6301] usb usb6-port1: unable to enumerate USB device [ 390.788551][ T5956] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 390.811744][T12668] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 390.815314][T12668] block device autoloading is deprecated and will be removed. [ 390.822190][T12672] loop0: detected capacity change from 0 to 2560 [ 390.828772][ T8555] buffer_io_error: 25 callbacks suppressed [ 390.828783][ T8555] Buffer I/O error on dev loop0, logical block 0, async page read [ 390.853294][T12668] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 390.857417][T12668] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 390.860771][T12668] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 390.864185][T12668] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 390.869019][T12668] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 390.873531][T12668] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 390.879536][T12668] Buffer I/O error on dev loop0, logical block 6, lost async page write [ 390.883985][T12668] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 390.890105][T12668] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 391.302125][T12681] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 391.304766][T12681] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 391.309337][T12681] vhci_hcd vhci_hcd.0: Device attached [ 391.629790][T12682] vhci_hcd: connection closed [ 391.630199][T11479] vhci_hcd: stop threads [ 391.633648][T11479] vhci_hcd: release socket [ 391.636186][T11479] vhci_hcd: disconnect device [ 392.178653][T12695] MPI: mpi too large (130952 bits) [ 392.555258][ T10] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 392.705651][ T10] usb 7-1: device descriptor read/64, error -71 [ 392.761692][T12708] dlm: Unknown command passed to DLM device : 3 [ 392.761692][T12708] [ 392.911282][T12712] loop6: detected capacity change from 0 to 1 [ 392.915173][T12712] Dev loop6: unable to read RDB block 1 [ 392.917465][T12712] loop6: AHDI p1 p3 [ 392.918617][T12712] loop6: partition table partially beyond EOD, truncated [ 392.920928][T12712] loop6: p3 start 1182187664 is beyond EOD, truncated [ 392.964411][ T10] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 393.144290][ T10] usb 7-1: device descriptor read/64, error -71 [ 393.210784][T12719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1781'. [ 393.254700][ T10] usb usb7-port1: attempt power cycle [ 393.535631][T12729] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 393.538287][T12729] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 393.541618][T12729] vhci_hcd vhci_hcd.0: Device attached [ 393.558948][T12729] netlink: 356 bytes leftover after parsing attributes in process `syz.1.1784'. [ 393.840025][ T6058] usb 39-1: new low-speed USB device number 19 using vhci_hcd [ 393.917406][ T10] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 394.357793][ T10] usb 7-1: device descriptor read/8, error -71 [ 394.494934][T12730] vhci_hcd: connection reset by peer [ 394.510503][ T72] vhci_hcd: stop threads [ 394.511875][ T72] vhci_hcd: release socket [ 394.513484][ T72] vhci_hcd: disconnect device [ 394.584381][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 394.584394][ T40] audit: type=1400 audit(1759905290.711:4324): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=12745 comm="syz.3.1789" [ 394.618994][ T40] audit: type=1804 audit(1759905290.741:4325): pid=12749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1789" name="/newroot/470/bus/bus" dev="tmpfs" ino=2596 res=1 errno=0 [ 394.785641][ T6067] usb 44-1: device descriptor read/8, error -110 [ 395.112632][ T10] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 395.174455][ T10] usb 7-1: device descriptor read/8, error -71 [ 395.183086][ T6067] usb usb44-port1: attempt power cycle [ 395.210904][T12756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1792'. [ 395.283282][ T10] usb usb7-port1: unable to enumerate USB device [ 395.749305][T12768] tipc: Can't bind to reserved service type 1 [ 395.762469][ T6067] usb usb44-port1: unable to enumerate USB device [ 396.094480][T12774] netlink: 356 bytes leftover after parsing attributes in process `syz.3.1795'. [ 396.507163][T12773] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 396.509859][T12773] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 396.513561][T12773] vhci_hcd vhci_hcd.0: Device attached [ 396.793321][T12782] netlink: 'syz.0.1797': attribute type 1 has an invalid length. [ 396.873203][ T6015] usb 43-1: new low-speed USB device number 15 using vhci_hcd [ 396.952450][T12778] vhci_hcd: connection reset by peer [ 396.956516][T11488] vhci_hcd: stop threads [ 396.958563][T11488] vhci_hcd: release socket [ 396.961286][T11488] vhci_hcd: disconnect device [ 397.203802][T12787] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 397.206188][T12787] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 397.209204][T12787] vhci_hcd vhci_hcd.0: Device attached [ 397.219846][T12787] netlink: 356 bytes leftover after parsing attributes in process `syz.0.1798'. [ 397.480649][ T6067] usb 37-1: new low-speed USB device number 21 using vhci_hcd [ 397.687197][T12797] netlink: 356 bytes leftover after parsing attributes in process `syz.3.1800'. [ 398.509830][T12789] vhci_hcd: connection reset by peer [ 398.512528][T11488] vhci_hcd: stop threads [ 398.514477][T11488] vhci_hcd: release socket [ 398.516618][T11488] vhci_hcd: disconnect device [ 398.529888][T12794] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 398.532846][T12794] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 398.536242][T12794] vhci_hcd vhci_hcd.0: Device attached [ 398.538689][T12796] vhci_hcd: connection closed [ 398.598216][T11488] vhci_hcd: stop threads [ 398.601485][T11488] vhci_hcd: release socket [ 398.603173][T11488] vhci_hcd: disconnect device [ 398.843750][T12802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1803'. [ 398.848093][T12802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1803'. [ 398.852123][T12802] netlink: 'syz.2.1803': attribute type 14 has an invalid length. [ 398.877768][T12804] netlink: 'syz.0.1802': attribute type 1 has an invalid length. [ 398.978881][T12806] can: request_module (can-proto-0) failed. [ 398.981855][ T6058] vhci_hcd: vhci_device speed not set [ 399.022240][T12804] 8021q: adding VLAN 0 to HW filter on device bond2 [ 399.270860][T12821] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 399.272932][T12821] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 399.275250][T12821] vhci_hcd vhci_hcd.0: Device attached [ 399.278380][T12821] netlink: 356 bytes leftover after parsing attributes in process `syz.0.1807'. [ 399.864097][T12822] vhci_hcd: connection closed [ 399.864240][T11479] vhci_hcd: stop threads [ 399.868173][T11479] vhci_hcd: release socket [ 399.874195][T11479] vhci_hcd: disconnect device [ 399.923981][T12832] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 399.926058][T12832] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 399.929723][T12832] vhci_hcd vhci_hcd.0: Device attached [ 399.929805][ T5956] Bluetooth: hci3: unexpected event for opcode 0x0c1a [ 399.933858][T12827] netlink: 'syz.2.1808': attribute type 1 has an invalid length. [ 400.112877][T12833] vhci_hcd: connection closed [ 400.113159][T11488] vhci_hcd: stop threads [ 400.117256][T11488] vhci_hcd: release socket [ 400.119419][T11488] vhci_hcd: disconnect device [ 400.151283][ T24] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 400.298376][ T24] usb 6-1: device descriptor read/64, error -71 [ 400.387118][T12839] comedi comedi0: Minor 26 could not be opened [ 400.537844][ T24] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 400.665873][T12843] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1810'. [ 400.678036][ T24] usb 6-1: device descriptor read/64, error -71 [ 400.701108][T12843] batadv2: entered allmulticast mode [ 400.785514][T12844] input: syz1 as /devices/virtual/input/input25 [ 400.803531][ T24] usb usb6-port1: attempt power cycle [ 401.157468][ T24] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 401.177958][ T24] usb 6-1: device descriptor read/8, error -71 [ 401.437282][ T24] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 401.467961][ T24] usb 6-1: device descriptor read/8, error -71 [ 401.572040][T12855] netlink: 356 bytes leftover after parsing attributes in process `syz.2.1811'. [ 401.577519][ T24] usb usb6-port1: unable to enumerate USB device [ 401.585605][T12850] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 401.587814][T12850] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 401.591288][T12850] vhci_hcd vhci_hcd.0: Device attached [ 401.826766][ T24] usb 41-1: new low-speed USB device number 20 using vhci_hcd [ 402.016592][ T6015] vhci_hcd: vhci_device speed not set [ 402.498818][T12853] vhci_hcd: connection reset by peer [ 402.501576][ T1144] vhci_hcd: stop threads [ 402.503550][ T1144] vhci_hcd: release socket [ 402.505713][ T1144] vhci_hcd: disconnect device [ 402.636664][ T6067] vhci_hcd: vhci_device speed not set [ 402.739016][T12858] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 402.741470][T12858] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 402.788314][T12858] vhci_hcd vhci_hcd.0: Device attached [ 403.359078][T12866] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1812'. [ 403.557117][T12866] batadv1: entered allmulticast mode [ 403.581877][ T40] audit: type=1400 audit(1759905299.719:4326): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=12869 comm="syz.2.1813" [ 403.582075][T12859] vhci_hcd: connection closed [ 403.607253][ T40] audit: type=1804 audit(1759905299.749:4327): pid=12874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1813" name="/newroot/416/bus/bus" dev="tmpfs" ino=2298 res=1 errno=0 [ 403.627385][T11479] vhci_hcd: stop threads [ 403.629175][T11479] vhci_hcd: release socket [ 403.631192][T11479] vhci_hcd: disconnect device [ 403.667011][T12877] input: syz1 as /devices/virtual/input/input26 [ 403.676312][ T6058] usb usb44-port1: attempt power cycle [ 404.261151][ T6058] usb usb44-port1: unable to enumerate USB device [ 404.375587][ T3243] usb usb38-port1: attempt power cycle [ 404.475061][T12896] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 404.478586][T12896] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 404.482283][T12896] vhci_hcd vhci_hcd.0: Device attached [ 404.513561][T12896] netlink: 356 bytes leftover after parsing attributes in process `syz.2.1819'. [ 404.727183][ T40] audit: type=1400 audit(1759905300.870:4328): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=12893 comm="syz.0.1822" [ 404.735144][ T40] audit: type=1804 audit(1759905300.870:4329): pid=12899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1822" name="/newroot/480/bus/bus" dev="tmpfs" ino=2579 res=1 errno=0 [ 405.134285][ T3243] usb usb38-port1: unable to enumerate USB device [ 405.266094][T12897] vhci_hcd: connection closed [ 405.266829][ T72] vhci_hcd: stop threads [ 405.270440][ T72] vhci_hcd: release socket [ 405.272584][ T72] vhci_hcd: disconnect device [ 405.815250][ T5956] Bluetooth: hci3: unexpected event for opcode 0x9552 [ 405.947781][T12914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1825'. [ 405.952825][T12914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1825'. [ 406.022293][ T5954] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 406.614235][T12919] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1827'. [ 406.618427][T12919] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 406.901876][T12925] create_pit_timer: 16 callbacks suppressed [ 406.901888][T12925] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 406.928316][T12925] netlink: 'syz.3.1828': attribute type 2 has an invalid length. [ 406.931703][T12925] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 406.972284][ T24] vhci_hcd: vhci_device speed not set [ 408.013570][T12954] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 408.015795][T12954] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 408.019099][T12954] vhci_hcd vhci_hcd.0: Device attached [ 408.030201][T12954] netlink: 356 bytes leftover after parsing attributes in process `syz.0.1834'. [ 408.240140][T12963] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1837'. [ 408.295216][T12967] overlayfs: conflicting lowerdir path [ 408.310558][T12967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1838'. [ 408.316595][T12967] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1838'. [ 408.321472][T12967] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1838'. [ 408.334512][T12967] binder: 12966:12967 ioctl 4018620d 0 returned -22 [ 408.562432][ T10] usb 37-1: new low-speed USB device number 22 using vhci_hcd [ 408.796302][T12955] vhci_hcd: connection reset by peer [ 408.798426][ T1149] vhci_hcd: stop threads [ 408.799955][ T1149] vhci_hcd: release socket [ 408.802006][ T1149] vhci_hcd: disconnect device [ 409.191709][T12987] overlay: ./file0 is not a directory [ 409.292995][T12988] comedi comedi0: Minor 26 could not be opened [ 409.521786][T12996] vxfs: unable to read disk superblock at 1 [ 409.526862][T12996] vxfs: unable to read disk superblock at 8 [ 409.529417][T12996] vxfs: can't find superblock. [ 409.559353][T12996] batman_adv: batadv0: Adding interface: dummy0 [ 409.566819][T12996] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.578808][T12996] batman_adv: batadv0: Interface activated: dummy0 [ 409.595788][T13000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1845'. [ 409.859894][T13011] comedi comedi0: Minor 26 could not be opened [ 409.865583][ T40] audit: type=1326 audit(1759905306.005:4330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13009 comm="syz.1.1848" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 409.875483][ T40] audit: type=1326 audit(1759905306.005:4331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13009 comm="syz.1.1848" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 409.885744][ T40] audit: type=1326 audit(1759905306.005:4332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13009 comm="syz.1.1848" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 409.895490][ T40] audit: type=1326 audit(1759905306.005:4333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13009 comm="syz.1.1848" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 409.898247][ T1149] Bluetooth: hci4: Frame reassembly failed (-84) [ 409.904188][ T40] audit: type=1326 audit(1759905306.005:4334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13009 comm="syz.1.1848" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 409.917563][ T40] audit: type=1326 audit(1759905306.005:4335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13009 comm="syz.1.1848" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 409.926875][ T40] audit: type=1326 audit(1759905306.005:4336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13009 comm="syz.1.1848" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 409.936566][ T40] audit: type=1326 audit(1759905306.005:4337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13009 comm="syz.1.1848" exe="/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 409.936617][ T40] audit: type=1326 audit(1759905306.005:4338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13009 comm="syz.1.1848" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 409.936658][ T40] audit: type=1326 audit(1759905306.005:4339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13009 comm="syz.1.1848" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 410.135623][T13023] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 410.138416][T13023] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 410.143600][T13023] vhci_hcd vhci_hcd.0: Device attached [ 410.160187][T13023] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1850'. [ 410.194303][T13023] wireguard0: entered promiscuous mode [ 410.196243][T13023] wireguard0: entered allmulticast mode [ 410.937693][T13024] vhci_hcd: connection closed [ 410.938264][ T72] vhci_hcd: stop threads [ 410.943059][ T72] vhci_hcd: release socket [ 410.945241][ T72] vhci_hcd: disconnect device [ 411.458896][T13056] kAFS: unable to lookup cell 'Þ({^ú@' [ 411.939439][ T5956] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 412.188016][T13083] comedi comedi0: Minor 26 could not be opened [ 412.232521][T13087] vivid-003: ================= START STATUS ================= [ 412.237903][T13087] vivid-003: RDS Tx I/O Mode: Controls [ 412.241198][T13087] vivid-003: RDS Program ID: 32904 [ 412.242942][T13087] vivid-003: RDS Program Type: 3 [ 412.244738][T13087] vivid-003: RDS PS Name: VIVID-TX [ 412.246596][T13087] vivid-003: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 412.250849][T13087] vivid-003: RDS Stereo: true [ 412.252579][T13087] vivid-003: RDS Artificial Head: false [ 412.254438][T13087] vivid-003: RDS Compressed: false [ 412.256303][T13087] vivid-003: RDS Dynamic PTY: false [ 412.258658][T13087] vivid-003: RDS Traffic Announcement: false [ 412.260646][T13087] vivid-003: RDS Traffic Program: true [ 412.262425][T13087] vivid-003: RDS Music: true [ 412.264167][T13087] vivid-003: ================== END STATUS ================== [ 412.317507][T13091] syzkaller0: entered promiscuous mode [ 412.319358][T13091] syzkaller0: entered allmulticast mode [ 412.732130][T13108] binder: 13107:13108 ioctl c00c64b5 80000300 returned -22 [ 412.810206][T13116] netlink: 'syz.3.1877': attribute type 5 has an invalid length. [ 412.813627][T13116] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1877'. [ 412.825418][T13116] 9pnet_fd: Insufficient options for proto=fd [ 412.934538][T13124] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 412.936818][T13124] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 412.939433][T13124] vhci_hcd vhci_hcd.0: Device attached [ 412.949783][T13124] netlink: 356 bytes leftover after parsing attributes in process `syz.3.1880'. [ 413.187548][ T6013] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 413.206981][ T1133] usb 43-1: new low-speed USB device number 16 using vhci_hcd [ 413.347194][ T6013] usb 7-1: Using ep0 maxpacket: 16 [ 413.365444][ T6013] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 413.390789][ T6013] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 413.395542][ T6013] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.402091][ T6013] usb 7-1: Product: syz [ 413.404142][ T6013] usb 7-1: Manufacturer: syz [ 413.406303][ T6013] usb 7-1: SerialNumber: syz [ 413.434920][ T6013] usb 7-1: config 0 descriptor?? [ 413.463138][ T6013] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 413.473088][ T6013] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 413.689562][ T10] vhci_hcd: vhci_device speed not set [ 413.699549][ T6013] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 413.730010][T13125] vhci_hcd: connection reset by peer [ 413.733631][ T1144] vhci_hcd: stop threads [ 413.735125][ T1144] vhci_hcd: release socket [ 413.737185][ T1144] vhci_hcd: disconnect device [ 413.825075][ T6013] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 413.829563][ T6013] em28xx 7-1:0.0: board has no eeprom [ 413.848343][T13123] em28xx 7-1:0.0: writing to i2c device at 0xc failed (error=-5) [ 413.956425][ T6013] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 413.964216][ T6013] em28xx 7-1:0.0: dvb set to bulk mode. [ 413.969633][ T6000] em28xx 7-1:0.0: Binding DVB extension [ 414.085404][ T6013] usb 7-1: USB disconnect, device number 24 [ 414.114080][ T6013] em28xx 7-1:0.0: Disconnecting em28xx [ 414.135479][ T6000] em28xx 7-1:0.0: Registering input extension [ 414.142432][ T6013] em28xx 7-1:0.0: Closing input extension [ 414.520160][T13137] orangefs_mount: mount request failed with -4 [ 414.789507][T13148] comedi comedi0: Minor 26 could not be opened [ 414.833821][T13151] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 414.835966][T13151] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 414.838766][T13151] vhci_hcd vhci_hcd.0: Device attached [ 414.876505][T13151] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1886'. [ 415.052215][ T6013] em28xx 7-1:0.0: Freeing device [ 415.063685][T13150] wireguard0: entered promiscuous mode [ 415.065713][T13150] wireguard0: entered allmulticast mode [ 415.095389][ T24] usb 39-1: new low-speed USB device number 20 using vhci_hcd [ 415.244948][T13152] vhci_hcd: connection reset by peer [ 415.253140][T11479] vhci_hcd: stop threads [ 415.255623][T11479] vhci_hcd: release socket [ 415.257835][T11479] vhci_hcd: disconnect device [ 415.566192][T13139] syz.2.1881 (13139) used greatest stack depth: 19688 bytes left [ 415.685667][T13168] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 415.688425][T13168] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 415.692593][T13168] vhci_hcd vhci_hcd.0: Device attached [ 415.705181][T13168] netlink: 328 bytes leftover after parsing attributes in process `syz.0.1892'. [ 415.934663][ T6301] usb 37-1: new low-speed USB device number 23 using vhci_hcd [ 416.238227][T13183] tipc: Enabled bearer , priority 0 [ 416.238906][T13181] comedi comedi0: Minor 26 could not be opened [ 416.241063][T13183] syzkaller0: entered promiscuous mode [ 416.245904][T13183] syzkaller0: entered allmulticast mode [ 416.274084][T13183] overlayfs: workdir and upperdir must reside under the same mount [ 416.439771][T13183] tipc: Resetting bearer [ 416.445974][T13182] tipc: Resetting bearer [ 416.459319][T13182] tipc: Disabling bearer [ 416.481958][T13169] vhci_hcd: connection reset by peer [ 416.483985][ T91] vhci_hcd: stop threads [ 416.485398][ T91] vhci_hcd: release socket [ 416.487235][ T91] vhci_hcd: disconnect device [ 417.282427][T13203] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 417.285559][T13203] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 417.289488][T13203] vhci_hcd vhci_hcd.0: Device attached [ 417.309579][T13203] netlink: 328 bytes leftover after parsing attributes in process `syz.0.1909'. [ 417.978944][T13211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1904'. [ 418.122196][T13204] vhci_hcd: connection closed [ 418.124642][ T1149] vhci_hcd: stop threads [ 418.127741][ T1149] vhci_hcd: release socket [ 418.129398][ T1149] vhci_hcd: disconnect device [ 418.322622][ T1133] vhci_hcd: vhci_device speed not set [ 419.668017][T13245] comedi comedi0: Minor 26 could not be opened [ 420.241056][ T24] vhci_hcd: vhci_device speed not set [ 420.331588][T13253] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 420.808860][ T40] kauditd_printk_skb: 467 callbacks suppressed [ 420.808879][ T40] audit: type=1400 audit(1759905316.954:4807): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=13260 comm="syz.0.1914" [ 420.830775][ T40] audit: type=1804 audit(1759905316.974:4808): pid=13265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1914" name="/newroot/506/bus/bus" dev="tmpfs" ino=2716 res=1 errno=0 [ 421.060432][ T6301] vhci_hcd: vhci_device speed not set [ 421.065526][T13266] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1916'. [ 421.651100][T13286] netlink: 356 bytes leftover after parsing attributes in process `syz.2.1926'. [ 422.602387][T13285] vhci_hcd vhci_hcd.0: failed to lookup sock [ 422.635299][T13288] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 422.702675][T13290] netlink: 'syz.3.1918': attribute type 10 has an invalid length. [ 422.709135][T13290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1918'. [ 422.714226][T13290] netlink: 'syz.3.1918': attribute type 10 has an invalid length. [ 423.121057][T13294] usb usb5: usbfs: process 13294 (syz.0.1919) did not claim interface 0 before use [ 423.991065][T13307] comedi comedi0: Minor 26 could not be opened [ 424.745413][T13329] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 424.747768][T13329] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 424.750772][T13329] vhci_hcd vhci_hcd.0: Device attached [ 424.762479][T13329] netlink: 356 bytes leftover after parsing attributes in process `syz.3.1929'. [ 425.018792][ T24] usb 43-1: new low-speed USB device number 17 using vhci_hcd [ 425.724212][T13330] vhci_hcd: connection reset by peer [ 425.728423][ T1144] vhci_hcd: stop threads [ 425.730376][ T1144] vhci_hcd: release socket [ 425.733426][ T1144] vhci_hcd: disconnect device [ 425.888904][T13336] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 426.388732][ T40] audit: type=1326 audit(1759905322.549:4809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13350 comm="syz.2.1936" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 426.400563][ T40] audit: type=1326 audit(1759905322.559:4810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13350 comm="syz.2.1936" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 426.410349][ T40] audit: type=1326 audit(1759905322.569:4811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13350 comm="syz.2.1936" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 426.416241][ T5956] Bluetooth: hci2: command 0x0406 tx timeout [ 426.416443][ T5954] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 426.446953][T13359] overlay: ./file0 is not a directory [ 426.448224][ T40] audit: type=1326 audit(1759905322.609:4812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13350 comm="syz.2.1936" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 426.461943][ T40] audit: type=1326 audit(1759905322.619:4813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13350 comm="syz.2.1936" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 426.474279][ T40] audit: type=1326 audit(1759905322.629:4814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13350 comm="syz.2.1936" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 426.484403][ T40] audit: type=1326 audit(1759905322.639:4815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13350 comm="syz.2.1936" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 426.493653][ T40] audit: type=1326 audit(1759905322.649:4816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13350 comm="syz.2.1936" exe="/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 426.501147][ T40] audit: type=1326 audit(1759905322.659:4817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13350 comm="syz.2.1936" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 426.510587][ T40] audit: type=1326 audit(1759905322.669:4818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13350 comm="syz.2.1936" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 426.647914][ T5956] Bluetooth: hci4: sending frame failed (-49) [ 426.654737][ T5954] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 427.282082][T13375] comedi comedi0: Minor 26 could not be opened [ 427.458188][T13382] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1939'. [ 427.481825][T13382] batadv2: entered allmulticast mode [ 427.539815][T13383] input: syz1 as /devices/virtual/input/input31 [ 428.283519][T13394] usb usb5: usbfs: process 13394 (syz.3.1942) did not claim interface 0 before use [ 428.867824][T13405] netlink: 'syz.2.1945': attribute type 1 has an invalid length. [ 428.884188][T13405] 8021q: adding VLAN 0 to HW filter on device bond4 [ 428.945089][T13405] bond4: (slave veth3): Enslaving as an active interface with a down link [ 428.983430][T13405] bond4: (slave dummy0): making interface the new active one [ 428.986893][T13405] dummy0: entered promiscuous mode [ 428.989071][T13405] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 429.137498][T13405] bond4 (unregistering): (slave veth3): Releasing active interface [ 429.142011][T13405] bond4 (unregistering): (slave dummy0): Releasing active interface [ 429.146088][T13405] bond4 (unregistering): Released all slaves [ 429.397645][T13425] vlan2: entered promiscuous mode [ 429.399395][T13425] macvtap0: entered promiscuous mode [ 430.089084][T13432] netdevsim netdevsim1: Direct firmware load for @ failed with error -2 [ 430.094285][T13432] netdevsim netdevsim1: Falling back to sysfs fallback for: @ [ 430.152822][ T24] vhci_hcd: vhci_device speed not set [ 430.181620][T13429] fuse: Bad value for 'fd' [ 431.226648][T13451] bond0: entered promiscuous mode [ 431.228552][T13451] bond_slave_0: entered promiscuous mode [ 431.230727][T13451] bond_slave_1: entered promiscuous mode [ 431.239582][T13451] trusted_key: syz.0.1955 sent an empty control message without MSG_MORE. [ 431.490814][T13459] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 431.494325][T13459] block device autoloading is deprecated and will be removed. [ 431.497583][T13457] md: md2 stopped. [ 431.515691][T13460] fuse: Bad value for 'fd' [ 431.520083][T13460] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1957'. [ 431.874078][T13480] tipc: Enabled bearer , priority 0 [ 431.875133][T13480] syzkaller0: entered promiscuous mode [ 431.875160][T13480] syzkaller0: entered allmulticast mode [ 431.884620][T13480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1963'. [ 431.897641][T13480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1963'. [ 431.971463][T13479] tipc: Resetting bearer [ 431.985663][T13479] tipc: Disabling bearer [ 432.212511][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 432.212526][ T40] audit: type=1400 audit(1759905328.373:4836): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=13481 comm="syz.0.1965" [ 432.219532][ T40] audit: type=1804 audit(1759905328.373:4837): pid=13486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1965" name="/newroot/516/bus/bus" dev="tmpfs" ino=2771 res=1 errno=0 [ 432.341003][ T2294] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 432.490871][ T2294] usb 6-1: Using ep0 maxpacket: 16 [ 432.494095][ T2294] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 432.498620][ T2294] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 432.501840][ T2294] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.504476][ T2294] usb 6-1: Product: syz [ 432.505786][ T2294] usb 6-1: Manufacturer: syz [ 432.507216][ T2294] usb 6-1: SerialNumber: syz [ 432.510050][ T2294] usb 6-1: config 0 descriptor?? [ 432.513973][ T2294] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 432.516792][ T2294] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 432.784555][ T2294] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 432.826328][T13492] usb usb5: usbfs: process 13492 (syz.3.1967) did not claim interface 0 before use [ 432.844469][ T2294] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 432.847244][ T2294] em28xx 6-1:0.0: board has no eeprom [ 432.910756][ T2294] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 432.915015][ T2294] em28xx 6-1:0.0: dvb set to bulk mode. [ 432.926867][T13484] em28xx 6-1:0.0: writing to i2c device at 0xc failed (error=-5) [ 432.930235][ T6301] em28xx 6-1:0.0: Binding DVB extension [ 432.940702][ T2294] usb 6-1: USB disconnect, device number 27 [ 432.953873][ T2294] em28xx 6-1:0.0: Disconnecting em28xx [ 432.993026][ T6301] em28xx 6-1:0.0: Registering input extension [ 432.999152][ T2294] em28xx 6-1:0.0: Closing input extension [ 434.180403][ T2294] em28xx 6-1:0.0: Freeing device [ 434.204320][ T5954] block nbd0: Receive control failed (result -32) [ 434.221900][T13511] block nbd0: shutting down sockets [ 434.549640][T13528] syz_tun: left allmulticast mode [ 434.551300][T13528] syz_tun: left promiscuous mode [ 434.553708][T13528] bridge0: port 3(syz_tun) entered disabled state [ 434.563743][T13528] team0: Port device bond0 removed [ 434.566954][T13528] batman_adv: batadv0: Interface deactivated: dummy0 [ 434.569880][T13528] batman_adv: batadv0: Removing interface: dummy0 [ 434.577093][T13528] bridge_slave_0: left allmulticast mode [ 434.580206][T13528] bridge_slave_0: left promiscuous mode [ 434.583009][T13528] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.588730][T13528] bridge_slave_1: left allmulticast mode [ 434.591594][T13528] bridge_slave_1: left promiscuous mode [ 434.593954][T13528] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.600938][T13528] bond0: (slave bond_slave_0): Releasing backup interface [ 434.605019][T13528] bond_slave_0: left promiscuous mode [ 434.610968][T13528] bond0: (slave bond_slave_1): Releasing backup interface [ 434.614643][T13528] bond_slave_1: left promiscuous mode [ 434.620545][T13528] team0: Port device C removed [ 434.624734][T13528] team0: Port device team_slave_1 removed [ 434.628322][T13528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.634022][T13528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.641887][T13528] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 434.657630][T13529] team0: Mode changed to "loadbalance" [ 434.750532][T13528] netlink: 'syz.0.1976': attribute type 10 has an invalid length. [ 434.753312][T13528] bond0: left promiscuous mode [ 434.755850][T13528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.772523][T13528] team0: Port device bond0 added [ 434.783281][T13528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1976'. [ 434.883955][ T40] audit: type=1400 audit(1759905331.046:4838): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=13530 comm="syz.1.1977" [ 434.893815][ T40] audit: type=1804 audit(1759905331.056:4839): pid=13533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1977" name="/newroot/479/bus/bus" dev="tmpfs" ino=2616 res=1 errno=0 [ 434.904729][T13527] netlink: 'syz.0.1976': attribute type 10 has an invalid length. [ 434.956799][T13528] team0 (unregistering): Port device bond0 removed [ 434.979727][T13527] bridge0: port 1(netdevsim0) entered blocking state [ 434.982793][T13527] bridge0: port 1(netdevsim0) entered disabled state [ 434.985877][T13527] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 434.991452][T13527] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 435.486521][T13543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1979'. [ 435.532861][T13543] xt_CT: You must specify a L4 protocol and not use inversions on it [ 435.981639][T13560] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 435.983904][T13560] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 435.989592][T13560] vhci_hcd vhci_hcd.0: Device attached [ 436.267865][ T6058] usb 44-1: SetAddress Request (39) to port 0 [ 436.271449][ T6058] usb 44-1: new SuperSpeed USB device number 39 using vhci_hcd [ 436.395333][T13574] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 436.397423][T13574] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 436.400733][T13574] vhci_hcd vhci_hcd.0: Device attached [ 436.428620][T13574] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.1987'. [ 436.667773][ T6013] usb 41-1: new low-speed USB device number 21 using vhci_hcd [ 437.226992][ T40] audit: type=1400 audit(1759905333.367:4840): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=13581 comm="syz.1.1989" [ 437.235245][ T40] audit: type=1804 audit(1759905333.367:4841): pid=13584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1989" name="/newroot/483/bus/bus" dev="tmpfs" ino=2642 res=1 errno=0 [ 437.356957][T13575] vhci_hcd: connection reset by peer [ 437.371192][ T1144] vhci_hcd: stop threads [ 437.374593][ T1144] vhci_hcd: release socket [ 437.386988][ T1144] vhci_hcd: disconnect device [ 437.846626][ T5954] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 437.846916][ T5956] Bluetooth: hci2: command 0x0406 tx timeout [ 437.951429][T13562] vhci_hcd: connection reset by peer [ 437.975671][T11479] vhci_hcd: stop threads [ 437.977638][T11479] vhci_hcd: release socket [ 437.987273][T11479] vhci_hcd: disconnect device [ 438.214815][T13607] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 438.217506][T13607] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 438.221236][T13607] vhci_hcd vhci_hcd.0: Device attached [ 438.955233][T13615] netlink: 'syz.3.1995': attribute type 3 has an invalid length. [ 438.958698][T13615] netlink: 'syz.3.1995': attribute type 3 has an invalid length. [ 439.005321][T13608] vhci_hcd: connection closed [ 439.005753][T11480] vhci_hcd: stop threads [ 439.008671][T11480] vhci_hcd: release socket [ 439.010208][T11480] vhci_hcd: disconnect device [ 439.037808][T13621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1998'. [ 439.084489][T13627] syz_tun: entered allmulticast mode [ 439.497133][T13661] loop8: detected capacity change from 0 to 16384 [ 440.473654][ T40] audit: type=1800 audit(1759905336.640:4842): pid=13686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2015" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 440.613349][T13691] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 440.616232][T13691] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 440.621936][T13691] vhci_hcd vhci_hcd.0: Device attached [ 440.639494][T13691] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.2017'. [ 440.765975][T13697] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.2018'. [ 440.777271][T13696] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 440.780183][T13696] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 440.802199][T13696] vhci_hcd vhci_hcd.0: Device attached [ 441.354067][ T6058] usb 44-1: device descriptor read/8, error -110 [ 441.382260][T13692] vhci_hcd: connection closed [ 441.384494][ T72] vhci_hcd: stop threads [ 441.397235][ T72] vhci_hcd: release socket [ 441.399868][ T72] vhci_hcd: disconnect device [ 441.543640][ T2294] vhci_hcd: vhci_device speed not set [ 441.551102][T13698] vhci_hcd: connection closed [ 441.551849][ T1144] vhci_hcd: stop threads [ 441.556234][ T1144] vhci_hcd: release socket [ 441.558629][ T1144] vhci_hcd: disconnect device [ 441.744597][ T6013] vhci_hcd: vhci_device speed not set [ 442.192353][T13704] random: crng reseeded on system resumption [ 442.854544][ T40] audit: type=1400 audit(1759905339.022:4843): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=13715 comm="syz.0.2023" [ 442.892783][ T40] audit: type=1804 audit(1759905339.062:4844): pid=13719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2023" name="/newroot/531/bus/bus" dev="tmpfs" ino=2851 res=1 errno=0 [ 443.083376][ T6058] usb usb44-port1: attempt power cycle [ 443.143658][ T3243] usb usb42-port1: attempt power cycle [ 443.360193][ T40] audit: type=1400 audit(1759905339.522:4845): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=13732 comm="syz.3.2026" [ 443.453173][ T2294] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 443.601972][ T2294] usb 6-1: Using ep0 maxpacket: 32 [ 443.605141][ T2294] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 443.610029][ T2294] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 443.613294][ T2294] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 443.616135][ T2294] usb 6-1: Product: syz [ 443.617594][ T2294] usb 6-1: Manufacturer: syz [ 443.619388][ T2294] usb 6-1: SerialNumber: syz [ 443.623496][ T2294] usb 6-1: config 0 descriptor?? [ 443.626572][T13728] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 443.682714][ T6058] usb usb44-port1: unable to enumerate USB device [ 443.712861][ T3243] usb usb42-port1: unable to enumerate USB device [ 443.856936][T13743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2027'. [ 443.860804][T13743] netlink: 'syz.3.2027': attribute type 5 has an invalid length. [ 443.864578][T13743] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2027'. [ 443.900651][ T6013] usb 6-1: USB disconnect, device number 28 [ 444.873147][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.875413][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.996208][ T40] audit: type=1400 audit(1759905341.164:4846): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=13766 comm="syz.2.2035" [ 445.139084][T13771] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 445.141934][T13771] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 445.146150][T13771] vhci_hcd vhci_hcd.0: Device attached [ 445.460424][ T3243] usb 38-1: SetAddress Request (18) to port 0 [ 445.463398][ T3243] usb 38-1: new SuperSpeed USB device number 18 using vhci_hcd [ 445.633828][T13772] vhci_hcd: connection reset by peer [ 445.636150][ T1144] vhci_hcd: stop threads [ 445.637499][ T1144] vhci_hcd: release socket [ 445.639007][ T1144] vhci_hcd: disconnect device [ 445.685804][T13782] 9pnet_fd: Insufficient options for proto=fd [ 445.954653][T13794] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 445.957482][T13794] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 445.960975][T13794] vhci_hcd vhci_hcd.0: Device attached [ 445.976390][T13794] netlink: 6040 bytes leftover after parsing attributes in process `syz.1.2041'. [ 446.230468][ T6058] usb 39-1: new low-speed USB device number 21 using vhci_hcd [ 446.306616][T13801] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 446.309439][T13801] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 446.313688][T13801] vhci_hcd vhci_hcd.0: Device attached [ 446.343716][T13801] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.2043'. [ 446.747915][T13795] vhci_hcd: connection reset by peer [ 446.754213][ T1149] vhci_hcd: stop threads [ 446.758979][ T1149] vhci_hcd: release socket [ 446.769050][ T1149] vhci_hcd: disconnect device [ 447.148861][T13802] vhci_hcd: connection closed [ 447.153551][ T1149] vhci_hcd: stop threads [ 447.177433][ T1149] vhci_hcd: release socket [ 447.190809][ T1149] vhci_hcd: disconnect device [ 447.336439][T13808] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2045'. [ 447.418403][ T40] audit: type=1400 audit(1759905343.586:4847): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=13810 comm="syz.1.2044" [ 448.028759][T13821] syz_tun (unregistering): left allmulticast mode [ 448.033494][T11480] smc: removing ib device syz1 [ 448.705343][T13835] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2062'. [ 448.948223][ T5954] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 448.952259][ T5954] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 448.953188][ T5954] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 448.954280][ T5954] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 448.955066][ T5954] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 449.659896][ T1144] bond0 (unregistering): Released all slaves [ 449.672969][ T1144] bond1 (unregistering): Released all slaves [ 449.855722][ T1144] bond2 (unregistering): Released all slaves [ 449.962422][ T1144] tipc: Left network mode [ 450.075368][T13875] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2065'. [ 450.183878][T13839] chnl_net:caif_netlink_parms(): no params data found [ 450.374135][T13839] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.377763][T13839] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.380016][T13839] bridge_slave_0: entered allmulticast mode [ 450.382634][T13839] bridge_slave_0: entered promiscuous mode [ 450.397295][ T1144] hsr_slave_0: left promiscuous mode [ 450.400876][ T1144] hsr_slave_1: left promiscuous mode [ 450.696386][ T3243] usb 38-1: device descriptor read/8, error -110 [ 450.891223][ T40] audit: type=1400 audit(1759905347.028:4848): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=13892 comm="syz.1.2068" [ 450.897072][ T40] audit: type=1804 audit(1759905347.028:4849): pid=13899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2068" name="/newroot/500/bus/bus" dev="tmpfs" ino=2734 res=1 errno=0 [ 450.976166][ T2294] vhci_hcd: vhci_device speed not set [ 451.033666][ T5954] Bluetooth: hci2: command tx timeout [ 451.345824][ T6058] vhci_hcd: vhci_device speed not set [ 452.254844][ T1144] dummy0 (unregistering): left allmulticast mode [ 452.269092][T13839] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.272743][T13839] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.276004][T13839] bridge_slave_1: entered allmulticast mode [ 452.280140][T13839] bridge_slave_1: entered promiscuous mode [ 452.353925][T13839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.362667][T13839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.424997][T13839] team0: Port device team_slave_0 added [ 452.427267][ T3243] usb usb38-port1: attempt power cycle [ 452.429251][T13839] team0: Port device team_slave_1 added [ 452.501130][T13839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.503677][T13839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.513070][T13839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.519614][T13839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.522491][T13839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.532585][T13839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.620314][T13839] hsr_slave_0: entered promiscuous mode [ 452.622932][T13839] hsr_slave_1: entered promiscuous mode [ 452.627538][T13839] debugfs: 'hsr0' already exists in 'hsr' [ 452.630428][T13839] Cannot create hsr debugfs directory [ 452.738077][ T1144] IPVS: stop unused estimator thread 0... [ 452.839304][T13839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 452.845563][T13839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 452.851586][T13839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 452.858764][T13839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 452.959460][T13839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.001018][T13839] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.020155][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.022834][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.038408][ T91] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.041442][ T91] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.052618][ T3243] usb usb38-port1: unable to enumerate USB device [ 453.079609][T13942] overlayfs: failed to resolve './bus': -2 [ 453.114653][ T5954] Bluetooth: hci2: command tx timeout [ 453.158924][T13945] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2077'. [ 454.047916][T13839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.298199][T13839] veth0_vlan: entered promiscuous mode [ 454.307987][T13839] veth1_vlan: entered promiscuous mode [ 454.332668][T13839] veth0_macvtap: entered promiscuous mode [ 454.345004][T13839] veth1_macvtap: entered promiscuous mode [ 454.362191][T13839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.371343][T13839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.391590][ T1144] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.395647][ T1144] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.395721][ T1144] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.395757][ T1144] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.461754][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.461789][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.488772][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.488796][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.594239][T13984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2084'. [ 454.664734][T13987] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 454.664848][T13987] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 454.665051][T13987] vhci_hcd vhci_hcd.0: Device attached [ 454.671107][T13987] netlink: 6040 bytes leftover after parsing attributes in process `syz.4.2054'. [ 455.183019][ T5954] Bluetooth: hci2: command tx timeout [ 455.448589][T13989] vhci_hcd: connection closed [ 455.460596][ T41] vhci_hcd: stop threads [ 455.471003][ T41] vhci_hcd: release socket [ 455.474063][ T41] vhci_hcd: disconnect device [ 456.065658][T14006] netlink: 129704 bytes leftover after parsing attributes in process `syz.1.2086'. [ 456.341667][ T40] audit: type=1400 audit(1759905352.513:4850): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=14010 comm="syz.1.2090" [ 456.353036][ T40] audit: type=1804 audit(1759905352.533:4851): pid=14016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2090" name="/newroot/508/bus/bus" dev="tmpfs" ino=2782 res=1 errno=0 [ 456.451693][ T1133] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 456.603804][ T1133] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 456.607881][ T1133] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 456.611424][ T1133] usb 7-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 456.615313][ T1133] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.621790][ T1133] usb 7-1: config 0 descriptor?? [ 456.830108][T14009] vlan3: entered promiscuous mode [ 456.832476][T14009] vlan3: entered allmulticast mode [ 456.834584][T14009] hsr_slave_1: entered allmulticast mode [ 456.846540][ T53] usb 7-1: USB disconnect, device number 25 [ 457.261236][ T5954] Bluetooth: hci2: command tx timeout [ 457.329357][T14025] binfmt_misc: register: failed to install interpreter file ./file0 [ 457.720200][T14034] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 457.723537][T14034] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 457.727206][T14034] vhci_hcd vhci_hcd.0: Device attached [ 457.749191][T14034] netlink: 6040 bytes leftover after parsing attributes in process `syz.0.2096'. [ 458.000553][ T2294] usb 37-1: new low-speed USB device number 25 using vhci_hcd [ 458.111982][T14035] vhci_hcd: connection reset by peer [ 458.114369][T11479] vhci_hcd: stop threads [ 458.115931][T11479] vhci_hcd: release socket [ 458.118616][T11479] vhci_hcd: disconnect device [ 458.500504][ T91] Bluetooth: hci4: Frame reassembly failed (-84) [ 458.515258][T14044] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 458.768266][T14050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.963187][ T40] audit: type=1400 audit(1759905356.135:4852): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=14055 comm="syz.4.2101" [ 459.971608][ T40] audit: type=1804 audit(1759905356.155:4853): pid=14058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2101" name="/newroot/5/bus/bus" dev="tmpfs" ino=56 res=1 errno=0 [ 460.544212][ T5954] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 460.555599][ T5956] Bluetooth: hci4: command 0x1003 tx timeout [ 461.251686][T14084] ipvlan1: left promiscuous mode [ 461.254348][T14084] ipvlan1: left allmulticast mode [ 461.256571][T14084] veth0_vlan: left allmulticast mode [ 462.155457][T14069] Process accounting resumed [ 462.262253][T14090] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2111'. [ 462.299021][T14098] syzkaller0: entered promiscuous mode [ 462.301570][T14098] syzkaller0: entered allmulticast mode [ 462.316585][T14098] syzkaller0: create flow: hash 2363405310 index 1 [ 462.394243][T14104] 9p: Unknown uid 00000000004294967295 [ 462.492679][T14097] syzkaller0: delete flow: hash 2363405310 index 1 [ 462.587890][T14109] sctp: [Deprecated]: syz.4.2116 (pid 14109) Use of int in maxseg socket option. [ 462.587890][T14109] Use struct sctp_assoc_value instead [ 463.100812][ T2294] vhci_hcd: vhci_device speed not set [ 463.153334][T14125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2120'. [ 464.707729][T14137] ieee802154 phy0 wpan0: encryption failed: -22 [ 464.979918][T14149] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2122'. [ 466.684016][T14174] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 466.686788][T14174] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 466.690593][T14174] vhci_hcd vhci_hcd.0: Device attached [ 466.697130][T14174] netlink: 356 bytes leftover after parsing attributes in process `syz.0.2127'. [ 466.963671][ T6301] usb 37-1: new low-speed USB device number 26 using vhci_hcd [ 467.023107][T14180] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 467.026185][T14180] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 467.030054][T14180] vhci_hcd vhci_hcd.0: Device attached [ 467.045579][T14180] netlink: 6040 bytes leftover after parsing attributes in process `syz.4.2128'. [ 467.313816][ T53] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 467.411900][T14175] vhci_hcd: connection reset by peer [ 467.416981][ T1149] vhci_hcd: stop threads [ 467.428958][ T1149] vhci_hcd: release socket [ 467.437865][ T1149] vhci_hcd: disconnect device [ 467.603654][ T2294] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 467.784627][T14181] vhci_hcd: connection reset by peer [ 467.791211][ T1144] vhci_hcd: stop threads [ 467.797129][ T1144] vhci_hcd: release socket [ 467.799900][ T1144] vhci_hcd: disconnect device [ 467.803207][ T2294] usb 6-1: Using ep0 maxpacket: 8 [ 467.834248][ T2294] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 467.837533][ T2294] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 467.843675][ T2294] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 467.852893][ T2294] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 467.857449][ T2294] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 467.866185][ T2294] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 467.870304][ T2294] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 467.881077][ T2294] usb 6-1: config 168 interface 0 has no altsetting 0 [ 467.895899][ T2294] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 467.913312][ T2294] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 467.929641][ T2294] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 467.936753][ T2294] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 467.942313][ T2294] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 467.947928][ T2294] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 467.953798][ T2294] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 467.959008][ T2294] usb 6-1: config 168 interface 0 has no altsetting 0 [ 467.964181][ T2294] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 467.967350][ T2294] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 467.971909][ T2294] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 467.978110][ T2294] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 467.984681][ T2294] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 467.989265][ T2294] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 467.993692][ T2294] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 467.999080][ T2294] usb 6-1: config 168 interface 0 has no altsetting 0 [ 468.014574][ T2294] usb 6-1: string descriptor 0 read error: -22 [ 468.017503][ T2294] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 468.021431][ T2294] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.038066][ T2294] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 468.064816][T14187] comedi: valid board names for 8255 driver are: [ 468.067149][T14187] 8255 [ 468.068082][T14187] comedi: valid board names for vmk80xx driver are: [ 468.070430][T14187] vmk80xx [ 468.071592][T14187] comedi: valid board names for usbduxsigma driver are: [ 468.075761][T14187] usbduxsigma [ 468.078747][T14187] comedi: valid board names for usbduxfast driver are: [ 468.081901][T14187] usbduxfast [ 468.086517][T14187] comedi: valid board names for usbdux driver are: [ 468.089215][T14187] usbdux [ 468.090464][T14187] comedi: valid board names for ni6501 driver are: [ 468.092522][T14187] ni6501 [ 468.095603][T14187] comedi: valid board names for dt9812 driver are: [ 468.097935][T14187] dt9812 [ 468.099263][T14187] comedi: valid board names for ni_labpc_cs driver are: [ 468.102036][T14187] ni_labpc_cs [ 468.106161][T14187] comedi: valid board names for ni_daq_700 driver are: [ 468.110305][T14187] ni_daq_700 [ 468.111770][T14187] comedi: valid board names for labpc_pci driver are: [ 468.118688][T14187] labpc_pci [ 468.120855][T14187] comedi: valid board names for adl_pci9118 driver are: [ 468.127195][T14187] pci9118dg [ 468.128378][T14187] pci9118hg [ 468.129704][T14187] pci9118hr [ 468.131022][T14187] comedi: valid board names for 8255_pci driver are: [ 468.141176][T14187] 8255_pci [ 468.143181][T14187] comedi: valid board names for s526 driver are: [ 468.145416][T14187] s526 [ 468.146312][T14187] comedi: valid board names for multiq3 driver are: [ 468.148809][T14187] multiq3 [ 468.150254][T14187] comedi: valid board names for pcmuio driver are: [ 468.156372][T14187] pcmuio48 [ 468.158990][T14187] pcmuio96 [ 468.160180][T14187] comedi: valid board names for pcmmio driver are: [ 468.162239][T14187] pcmmio [ 468.176084][T14187] comedi: valid board names for pcmda12 driver are: [ 468.178378][T14187] pcmda12 [ 468.180286][T14187] comedi: valid board names for pcmad driver are: [ 468.184007][T14187] pcmad12 [ 468.185057][T14187] pcmad16 [ 468.186335][T14187] comedi: valid board names for ni_labpc driver are: [ 468.188844][T14187] lab-pc-1200 [ 468.190612][T14187] lab-pc-1200ai [ 468.192080][T14187] lab-pc+ [ 468.197192][T14187] comedi: valid board names for atmio16 driver are: [ 468.200950][T14187] atmio16 [ 468.201943][T14187] atmio16d [ 468.204194][T14187] comedi: valid board names for ni_at_ao driver are: [ 468.206318][T14187] at-ao-6 [ 468.208043][T14187] at-ao-10 [ 468.209152][T14187] comedi: valid board names for ni_at_a2150 driver are: [ 468.211393][T14187] ni_at_a2150 [ 468.212483][T14187] comedi: valid board names for adq12b driver are: [ 468.219758][T14187] adq12b [ 468.221426][T14187] comedi: valid board names for mpc624 driver are: [ 468.221674][T14190] random: crng reseeded on system resumption [ 468.225381][T14187] mpc624 [ 468.227529][T14187] comedi: valid board names for c6xdigio driver are: [ 468.230534][T14187] c6xdigio [ 468.232715][T14187] comedi: valid board names for aio_iiro_16 driver are: [ 468.237406][T14187] aio_iiro_16 [ 468.238990][T14187] comedi: valid board names for aio_aio12_8 driver are: [ 468.242410][T14187] aio_aio12_8 [ 468.244362][T14187] aio_ai12_8 [ 468.253305][T14187] aio_ao12_4 [ 468.255397][T14187] comedi: valid board names for fl512 driver are: [ 468.258890][T14187] fl512 [ 468.260088][T14187] comedi: valid board names for dmm32at driver are: [ 468.265205][T14187] dmm32at [ 468.266255][T14187] comedi: valid board names for dt282x driver are: [ 468.268658][T14187] dt2821 [ 468.269999][T14187] dt2821-f [ 468.271557][T14187] dt2821-g [ 468.280060][T14187] dt2823 [ 468.290287][T14187] dt2824-pgh [ 468.307579][T14187] dt2824-pgl [ 468.308830][T14187] dt2825 [ 468.310112][T14187] dt2827 [ 468.311335][T14187] dt2828 [ 468.312731][T14187] dt2829 [ 468.316865][T14187] dt21-ez [ 468.318639][T14187] dt23-ez [ 468.320213][T14187] dt24-ez [ 468.321587][T14187] dt24-ez-pgl [ 468.324314][T14187] comedi: valid board names for dt2817 driver are: [ 468.327000][T14187] dt2817 [ 468.328000][T14187] comedi: valid board names for dt2815 driver are: [ 468.330149][T14187] dt2815 [ 468.331162][T14187] comedi: valid board names for dt2814 driver are: [ 468.333907][T14187] dt2814 [ 468.335642][T14187] comedi: valid board names for dt2811 driver are: [ 468.339076][T14187] dt2811-pgh [ 468.340514][T14187] dt2811-pgl [ 468.342020][T14187] comedi: valid board names for dt2801 driver are: [ 468.344610][T14187] dt2801 [ 468.345601][T14187] comedi: valid board names for das6402 driver are: [ 468.348222][T14187] das6402-12 [ 468.349372][T14187] das6402-16 [ 468.350550][T14187] comedi: valid board names for das1800 driver are: [ 468.353038][T14187] das-1701st [ 468.355202][T14187] das-1701st-da [ 468.359847][T14187] das-1702st [ 468.361530][T14187] das-1702st-da [ 468.363609][T14187] das-1702hr [ 468.365520][T14187] das-1702hr-da [ 468.368955][T14187] das-1701ao [ 468.370588][T14187] das-1702ao [ 468.372186][T14187] das-1801st [ 468.374240][T14187] das-1801st-da [ 468.378351][T14187] das-1802st [ 468.379965][T14187] das-1802st-da [ 468.381713][T14187] das-1802hr [ 468.396675][T14187] das-1802hr-da [ 468.398678][T14187] das-1801hc [ 468.400321][T14187] das-1802hc [ 468.402208][T14187] das-1801ao [ 468.404845][T14187] das-1802ao [ 468.409906][T14187] comedi: valid board names for das800 driver are: [ 468.420036][T14187] das-800 [ 468.460858][T14187] cio-das800 [ 468.536027][T14187] das-801 [ 468.537393][T14187] cio-das801 [ 468.538837][T14187] das-802 [ 468.540195][T14187] cio-das802 [ 468.541605][T14187] cio-das802/16 [ 468.544260][T14187] comedi: valid board names for isa-das08 driver are: [ 468.547083][T14187] isa-das08 [ 468.548637][T14187] das08-pgm [ 468.550054][T14187] das08-pgh [ 468.551623][T14187] das08-pgl [ 468.555621][ T2294] usb 6-1: USB disconnect, device number 29 [ 468.559323][T14187] das08-aoh [ 468.560998][T14187] das08-aol [ 468.563073][T14187] das08-aom [ 468.565565][T14187] das08/jr-ao [ 468.567108][T14187] das08jr-16-ao [ 468.569140][T14187] pc104-das08 [ 468.570790][T14187] das08jr/16 [ 468.572229][T14187] comedi: valid board names for das16m1 driver are: [ 468.575987][T14187] das16m1 [ 468.577315][T14187] comedi: valid board names for dac02 driver are: [ 468.580116][T14187] dac02 [ 468.581458][T14187] comedi: valid board names for rti802 driver are: [ 468.589588][T14187] rti802 [ 468.591010][T14187] comedi: valid board names for rti800 driver are: [ 468.594310][T14187] rti800 [ 468.595719][T14187] rti815 [ 468.597000][T14187] comedi: valid board names for pcm3724 driver are: [ 468.599707][T14187] pcm3724 [ 468.601020][T14187] comedi: valid board names for pcl818 driver are: [ 468.604627][T14187] pcl818l [ 468.606176][T14187] pcl818h [ 468.607783][T14187] pcl818hd [ 468.609575][T14187] pcl818hg [ 468.611367][T14187] pcl818 [ 468.613513][T14187] pcl718 [ 468.614777][T14187] pcm3718 [ 468.618494][T14187] comedi: valid board names for pcl816 driver are: [ 468.621315][T14187] pcl816 [ 468.628258][T14187] pcl814b [ 468.630156][T14187] comedi: valid board names for pcl812 driver are: [ 468.634433][T14187] pcl812 [ 468.636219][T14187] pcl812pg [ 468.637964][T14187] acl8112pg [ 468.639860][T14187] acl8112dg [ 468.641444][T14187] acl8112hg [ 468.643018][T14187] a821pgl [ 468.644100][T14187] a821pglnda [ 468.645419][T14187] a821pgh [ 468.647227][T14187] a822pgl [ 468.648785][T14187] a822pgh [ 468.650275][T14187] a823pgl [ 468.651684][T14187] a823pgh [ 468.653413][T14187] pcl813 [ 468.654749][T14187] pcl813b [ 468.656203][T14187] acl8113 [ 468.657856][T14187] iso813 [ 468.659188][T14187] acl8216 [ 468.660468][T14187] a826pg [ 468.661846][T14187] comedi: valid board names for pcl730 driver are: [ 468.667142][T14187] pcl730 [ 468.668413][T14187] iso730 [ 468.669664][T14187] acl7130 [ 468.671012][T14187] pcm3730 [ 468.672435][T14187] pcl725 [ 468.674753][T14187] p8r8dio [ 468.676041][T14187] acl7225b [ 468.677136][T14187] p16r16dio [ 468.678358][T14187] pcl733 [ 468.679511][T14187] pcl734 [ 468.680644][T14187] opmm-1616-xt [ 468.682282][T14187] pearl-mm-p [ 468.683466][T14187] ir104-pbf [ 468.685056][T14187] comedi: valid board names for pcl726 driver are: [ 468.687128][T14187] pcl726 [ 468.688076][T14187] pcl727 [ 468.689026][T14187] pcl728 [ 468.690017][T14187] acl6126 [ 468.691303][T14187] acl6128 [ 468.692498][T14187] comedi: valid board names for pcl724 driver are: [ 468.694872][T14187] pcl724 [ 468.695969][T14187] pcl722 [ 468.697215][T14187] pcl731 [ 468.698330][T14187] acl7122 [ 468.699778][T14187] acl7124 [ 468.701013][T14187] pet48dio [ 468.702484][T14187] pcmio48 [ 468.703579][T14187] onyx-mm-dio [ 468.704739][T14187] comedi: valid board names for pcl711 driver are: [ 468.706929][T14187] pcl711 [ 468.707890][T14187] pcl711b [ 468.708875][T14187] acl8112hg [ 468.709958][T14187] acl8112dg [ 468.711023][T14187] comedi: valid board names for amplc_pc263 driver are: [ 468.711031][T14187] pc263 [ 468.711035][T14187] comedi: valid board names for amplc_pc236 driver are: [ 468.711041][T14187] pc36at [ 468.711045][T14187] comedi: valid board names for amplc_dio200 driver are: [ 468.711051][T14187] pc212e [ 468.711055][T14187] pc214e [ 468.711059][T14187] pc215e [ 468.711064][T14187] pc218e [ 468.711068][T14187] pc272e [ 468.711072][T14187] comedi: valid board names for comedi_parport driver are: [ 468.711079][T14187] comedi_parport [ 468.711084][T14187] comedi: valid board names for comedi_test driver are: [ 468.711089][T14187] comedi_test [ 468.735239][T14187] comedi: valid board names for comedi_bond driver are: [ 468.737403][T14187] comedi_bond [ 469.002198][ T6013] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 469.152000][ T6013] usb 9-1: Using ep0 maxpacket: 16 [ 469.153846][ T6013] usb 9-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 469.153863][ T6013] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 469.155862][ T6013] usb 9-1: New USB device found, idVendor=1199, idProduct=b400, bcdDevice=a8.98 [ 469.155881][ T6013] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.155894][ T6013] usb 9-1: Product: syz [ 469.155903][ T6013] usb 9-1: Manufacturer: syz [ 469.155912][ T6013] usb 9-1: SerialNumber: syz [ 469.159269][ T6013] usb 9-1: config 0 descriptor?? [ 469.374687][T14199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.376141][T14199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.378028][ T24] usb 9-1: USB disconnect, device number 2 [ 469.976537][T14218] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 469.976555][T14218] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 469.976692][T14218] vhci_hcd vhci_hcd.0: Device attached [ 469.979656][T14218] netlink: 356 bytes leftover after parsing attributes in process `syz.4.2139'. [ 470.773518][T14219] vhci_hcd: connection closed [ 470.784597][T11480] vhci_hcd: stop threads [ 470.789004][T11480] vhci_hcd: release socket [ 470.997949][ T40] audit: type=1326 audit(1759905367.184:4854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.2.2141" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 471.060655][ T40] audit: type=1326 audit(1759905367.184:4855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.2.2141" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 471.123601][ T40] audit: type=1326 audit(1759905367.194:4856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.2.2141" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 471.256048][ T40] audit: type=1326 audit(1759905367.194:4857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.2.2141" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 471.288765][ T40] audit: type=1326 audit(1759905367.194:4858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.2.2141" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 471.297778][ T40] audit: type=1326 audit(1759905367.204:4859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.2.2141" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 471.315517][ T40] audit: type=1326 audit(1759905367.204:4860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.2.2141" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 471.322448][ T40] audit: type=1326 audit(1759905367.204:4861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.2.2141" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 471.329411][ T40] audit: type=1326 audit(1759905367.214:4862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.2.2141" exe="/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 471.337419][ T40] audit: type=1326 audit(1759905367.214:4863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.2.2141" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 471.353899][T11480] vhci_hcd: disconnect device [ 472.119871][ T6301] vhci_hcd: vhci_device speed not set [ 472.268352][T14258] overlay: Unknown parameter 'fowner>00000000000000000000' [ 472.415225][ T24] kernel write not supported for file /ppp (pid: 24 comm: kworker/2:0) [ 472.469487][ T53] vhci_hcd: vhci_device speed not set [ 473.028072][T14287] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2159'. [ 473.036873][T14287] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2159'. [ 473.097232][T14303] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2164'. [ 473.101749][T14303] hsr_slave_0: left promiscuous mode [ 473.106161][T14303] hsr_slave_1: left promiscuous mode [ 473.357805][T14312] No control pipe specified [ 473.498762][ T6301] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 473.628566][ T6301] usb 9-1: device descriptor read/64, error -71 [ 473.797582][T14316] 9pnet_fd: Insufficient options for proto=fd [ 473.878647][ T6301] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 474.298810][ T6301] usb 9-1: device descriptor read/64, error -71 [ 474.408247][ T6301] usb usb9-port1: attempt power cycle [ 474.616127][T14346] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 474.618528][T14346] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 474.622533][T14346] vhci_hcd vhci_hcd.0: Device attached [ 474.636845][T14346] netlink: 356 bytes leftover after parsing attributes in process `syz.2.2175'. [ 474.768160][ T6301] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 474.788723][ T6301] usb 9-1: device descriptor read/8, error -71 [ 474.877947][ T2294] usb 41-1: new low-speed USB device number 22 using vhci_hcd [ 475.037670][ T6301] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 475.059168][ T6301] usb 9-1: device descriptor read/8, error -71 [ 475.186974][ T6301] usb usb9-port1: unable to enumerate USB device [ 475.484992][T14347] vhci_hcd: connection reset by peer [ 475.493081][ T1149] vhci_hcd: stop threads [ 475.494600][ T1149] vhci_hcd: release socket [ 475.496648][ T1149] vhci_hcd: disconnect device [ 476.077552][T14359] fuse: Bad value for 'group_id' [ 476.079291][T14359] fuse: Bad value for 'group_id' [ 476.909951][T14359] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 476.913071][T14359] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 476.915885][T14359] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 476.934354][T14359] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 477.121690][T14379] No control pipe specified [ 477.210581][T14383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2188'. [ 477.453313][T14391] comedi comedi3: comedi_config --init_data is deprecated [ 478.268245][ T5956] Bluetooth: hci3: command 0x0c1a tx timeout [ 478.933130][ T5956] Bluetooth: hci2: command 0x0c1a tx timeout [ 479.963966][ T2294] vhci_hcd: vhci_device speed not set [ 480.053395][T14430] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2198'. [ 480.463918][T14435] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 480.466930][T14435] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 480.470724][T14435] vhci_hcd vhci_hcd.0: Device attached [ 480.665499][T14438] vhci_hcd: connection closed [ 480.665809][ T1149] vhci_hcd: stop threads [ 480.668597][ T1149] vhci_hcd: release socket [ 480.670290][ T1149] vhci_hcd: disconnect device [ 480.897628][T14441] FAULT_INJECTION: forcing a failure. [ 480.897628][T14441] name failslab, interval 1, probability 0, space 0, times 0 [ 480.904119][T14441] CPU: 3 UID: 0 PID: 14441 Comm: syz.0.2200 Not tainted syzkaller #0 PREEMPT(full) [ 480.904143][T14441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 480.904154][T14441] Call Trace: [ 480.904162][T14441] [ 480.904171][T14441] dump_stack_lvl+0x16c/0x1f0 [ 480.904196][T14441] should_fail_ex+0x512/0x640 [ 480.904218][T14441] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 480.904236][T14441] should_failslab+0xc2/0x120 [ 480.904256][T14441] kmem_cache_alloc_node_noprof+0x78/0x770 [ 480.904274][T14441] ? __alloc_skb+0x2b2/0x380 [ 480.904296][T14441] ? __alloc_skb+0x2b2/0x380 [ 480.904315][T14441] ? __pfx_netlink_insert+0x10/0x10 [ 480.904333][T14441] __alloc_skb+0x2b2/0x380 [ 480.904348][T14441] ? __pfx___alloc_skb+0x10/0x10 [ 480.904365][T14441] ? netlink_autobind.isra.0+0x158/0x370 [ 480.904389][T14441] netlink_alloc_large_skb+0x69/0x140 [ 480.904410][T14441] netlink_sendmsg+0x698/0xdd0 [ 480.904434][T14441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.904458][T14441] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 480.904483][T14441] ____sys_sendmsg+0xa98/0xc70 [ 480.904509][T14441] ? __pfx_____sys_sendmsg+0x10/0x10 [ 480.904532][T14441] ? get_compat_msghdr+0x11a/0x170 [ 480.904561][T14441] ___sys_sendmsg+0x134/0x1d0 [ 480.904582][T14441] ? __pfx____sys_sendmsg+0x10/0x10 [ 480.904613][T14441] ? find_held_lock+0x2b/0x80 [ 480.904647][T14441] __sys_sendmsg+0x16d/0x220 [ 480.904667][T14441] ? __pfx___sys_sendmsg+0x10/0x10 [ 480.904699][T14441] ? rcu_is_watching+0x12/0xc0 [ 480.904721][T14441] __do_fast_syscall_32+0x7c/0x300 [ 480.904744][T14441] do_fast_syscall_32+0x32/0x80 [ 480.904763][T14441] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 480.904785][T14441] RIP: 0023:0xf70fd579 [ 480.904799][T14441] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 480.904815][T14441] RSP: 002b:00000000f54ed55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 480.904832][T14441] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800003c0 [ 480.904844][T14441] RDX: 0000000000000840 RSI: 0000000000000000 RDI: 0000000000000000 [ 480.904853][T14441] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 480.904863][T14441] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 480.904873][T14441] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 480.904897][T14441] [ 481.024000][ T5956] Bluetooth: hci2: command 0x0c1a tx timeout [ 482.828195][T14459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2206'. [ 482.991640][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 482.991660][ T40] audit: type=1326 audit(1759905378.973:4868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14457 comm="syz.4.2206" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700d579 code=0x0 [ 483.083024][ T5956] Bluetooth: hci2: command 0x0c1a tx timeout [ 483.673912][T14469] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 483.677075][T14469] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 483.682020][T14469] vhci_hcd vhci_hcd.0: Device attached [ 483.853869][T14475] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 483.856035][T14475] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 483.858899][T14475] vhci_hcd vhci_hcd.0: Device attached [ 483.981356][ T6058] usb 41-1: new low-speed USB device number 23 using vhci_hcd [ 484.111689][ T6015] usb 45-1: new low-speed USB device number 3 using vhci_hcd [ 484.542281][T14470] vhci_hcd: connection reset by peer [ 484.548182][ T1149] vhci_hcd: stop threads [ 484.559910][ T1149] vhci_hcd: release socket [ 484.563358][ T1149] vhci_hcd: disconnect device [ 484.593429][T14482] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2211'. [ 484.607489][T14476] vhci_hcd: connection reset by peer [ 484.613782][ T1149] vhci_hcd: stop threads [ 484.616637][ T1149] vhci_hcd: release socket [ 484.619212][ T1149] vhci_hcd: disconnect device [ 485.744866][T14499] fuse: Bad value for 'fd' [ 486.153845][T14504] IPVS: length: 228 != 24 [ 486.270792][T14513] FAULT_INJECTION: forcing a failure. [ 486.270792][T14513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.275897][T14513] CPU: 0 UID: 0 PID: 14513 Comm: syz.4.2221 Not tainted syzkaller #0 PREEMPT(full) [ 486.275920][T14513] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 486.275931][T14513] Call Trace: [ 486.275939][T14513] [ 486.275946][T14513] dump_stack_lvl+0x16c/0x1f0 [ 486.275971][T14513] should_fail_ex+0x512/0x640 [ 486.275995][T14513] _copy_from_user+0x2e/0xd0 [ 486.276018][T14513] move_addr_to_kernel+0x65/0x170 [ 486.276045][T14513] __get_compat_msghdr+0x3f1/0x4d0 [ 486.276065][T14513] get_compat_msghdr+0xd2/0x170 [ 486.276082][T14513] ? __pfx_get_compat_msghdr+0x10/0x10 [ 486.276102][T14513] ? __pfx__kstrtoull+0x10/0x10 [ 486.276132][T14513] ___sys_sendmsg+0x1ae/0x1d0 [ 486.276153][T14513] ? __pfx____sys_sendmsg+0x10/0x10 [ 486.276205][T14513] __sys_sendmmsg+0x2f9/0x420 [ 486.276227][T14513] ? __pfx___sys_sendmmsg+0x10/0x10 [ 486.276256][T14513] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 486.276294][T14513] ? fput+0x9b/0xd0 [ 486.276317][T14513] ? ksys_write+0x1ac/0x250 [ 486.276335][T14513] ? __pfx_ksys_write+0x10/0x10 [ 486.276357][T14513] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 486.276378][T14513] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 486.276398][T14513] __do_fast_syscall_32+0x7c/0x300 [ 486.276416][T14513] do_fast_syscall_32+0x32/0x80 [ 486.276429][T14513] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 486.276444][T14513] RIP: 0023:0xf700d579 [ 486.276454][T14513] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 486.276466][T14513] RSP: 002b:00000000f53fd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 486.276477][T14513] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080004f00 [ 486.276485][T14513] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 486.276491][T14513] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 486.276498][T14513] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 486.276504][T14513] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 486.276518][T14513] [ 486.287742][ T40] audit: type=1804 audit(1759905382.485:4869): pid=14514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2220" name="file0" dev="ramfs" ino=64061 res=1 errno=0 [ 486.357904][T14517] 9pnet: p9_errstr2errno: server reported unknown error [ 486.630799][T14522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2222'. [ 486.654756][T14522] wireguard0: entered promiscuous mode [ 486.656987][T14522] wireguard0: entered allmulticast mode [ 486.941810][T14531] overlayfs: workdir and upperdir must be separate subtrees [ 488.340321][T14568] batman_adv: batadv0: Adding interface: ipvlan2 [ 488.342436][T14568] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.370581][T14568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.376078][T14568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.383686][T14573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2235'. [ 488.383727][T14573] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2235'. [ 488.394753][T14568] batman_adv: batadv0: Interface activated: ipvlan2 [ 488.407285][T14573] ip6gretap1: entered allmulticast mode [ 488.611409][T14580] mkiss: ax0: crc mode is auto. [ 489.133574][ T6058] vhci_hcd: vhci_device speed not set [ 489.247174][ T6015] vhci_hcd: vhci_device speed not set [ 489.972529][T14602] Unsupported ieee802154 address type: 0 [ 490.117916][T14607] mkiss: ax0: crc mode is auto. [ 490.121232][T14607] FAULT_INJECTION: forcing a failure. [ 490.121232][T14607] name failslab, interval 1, probability 0, space 0, times 0 [ 490.126071][T14607] CPU: 2 UID: 0 PID: 14607 Comm: syz.4.2243 Not tainted syzkaller #0 PREEMPT(full) [ 490.126088][T14607] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 490.126096][T14607] Call Trace: [ 490.126100][T14607] [ 490.126105][T14607] dump_stack_lvl+0x16c/0x1f0 [ 490.126123][T14607] should_fail_ex+0x512/0x640 [ 490.126137][T14607] ? fs_reclaim_acquire+0xae/0x150 [ 490.126154][T14607] should_failslab+0xc2/0x120 [ 490.126183][T14607] __kmalloc_noprof+0xdd/0x880 [ 490.126206][T14607] ? tomoyo_encode2+0x100/0x3e0 [ 490.126220][T14607] ? tomoyo_encode2+0x100/0x3e0 [ 490.126230][T14607] tomoyo_encode2+0x100/0x3e0 [ 490.126243][T14607] tomoyo_encode+0x29/0x50 [ 490.126254][T14607] tomoyo_realpath_from_path+0x18f/0x6e0 [ 490.126270][T14607] tomoyo_path_number_perm+0x245/0x580 [ 490.126287][T14607] ? tomoyo_path_number_perm+0x237/0x580 [ 490.126305][T14607] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 490.126338][T14607] ? find_held_lock+0x2b/0x80 [ 490.126350][T14607] ? hook_file_ioctl_common+0x145/0x410 [ 490.126372][T14607] ? __fget_files+0x20e/0x3c0 [ 490.126385][T14607] security_file_ioctl_compat+0x9b/0x240 [ 490.126404][T14607] __ia32_compat_sys_ioctl+0xc3/0x370 [ 490.126425][T14607] __do_fast_syscall_32+0x7c/0x300 [ 490.126446][T14607] do_fast_syscall_32+0x32/0x80 [ 490.126465][T14607] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 490.126486][T14607] RIP: 0023:0xf700d579 [ 490.126502][T14607] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 490.126541][T14607] RSP: 002b:00000000f53fd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 490.126557][T14607] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005412 [ 490.126570][T14607] RDX: 0000000080000500 RSI: 0000000000000000 RDI: 0000000000000000 [ 490.126581][T14607] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 490.126593][T14607] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 490.126602][T14607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 490.126627][T14607] [ 490.211042][T14607] ERROR: Out of memory at tomoyo_realpath_from_path. [ 490.389007][T14613] netlink: 'syz.4.2245': attribute type 1 has an invalid length. [ 490.403557][T14613] 8021q: adding VLAN 0 to HW filter on device bond1 [ 491.621518][T14641] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2254'. [ 491.737380][T14647] FAULT_INJECTION: forcing a failure. [ 491.737380][T14647] name failslab, interval 1, probability 0, space 0, times 0 [ 491.741672][T14647] CPU: 3 UID: 0 PID: 14647 Comm: syz.4.2257 Not tainted syzkaller #0 PREEMPT(full) [ 491.741691][T14647] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 491.741700][T14647] Call Trace: [ 491.741706][T14647] [ 491.741712][T14647] dump_stack_lvl+0x16c/0x1f0 [ 491.741733][T14647] should_fail_ex+0x512/0x640 [ 491.741751][T14647] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 491.741767][T14647] should_failslab+0xc2/0x120 [ 491.741785][T14647] kmem_cache_alloc_node_noprof+0x78/0x770 [ 491.741799][T14647] ? __alloc_skb+0x2b2/0x380 [ 491.741817][T14647] ? __alloc_skb+0x2b2/0x380 [ 491.741829][T14647] ? __pfx_netlink_insert+0x10/0x10 [ 491.741844][T14647] __alloc_skb+0x2b2/0x380 [ 491.741858][T14647] ? __pfx___alloc_skb+0x10/0x10 [ 491.741873][T14647] ? netlink_autobind.isra.0+0x158/0x370 [ 491.741913][T14647] netlink_alloc_large_skb+0x69/0x140 [ 491.741931][T14647] netlink_sendmsg+0x698/0xdd0 [ 491.741950][T14647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.741969][T14647] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 491.741991][T14647] ____sys_sendmsg+0xa98/0xc70 [ 491.742013][T14647] ? __pfx_____sys_sendmsg+0x10/0x10 [ 491.742031][T14647] ? get_compat_msghdr+0x11a/0x170 [ 491.742053][T14647] ___sys_sendmsg+0x134/0x1d0 [ 491.742070][T14647] ? __pfx____sys_sendmsg+0x10/0x10 [ 491.742093][T14647] ? find_held_lock+0x2b/0x80 [ 491.742119][T14647] __sys_sendmsg+0x16d/0x220 [ 491.742135][T14647] ? __pfx___sys_sendmsg+0x10/0x10 [ 491.742162][T14647] ? rcu_is_watching+0x12/0xc0 [ 491.742180][T14647] __do_fast_syscall_32+0x7c/0x300 [ 491.742199][T14647] do_fast_syscall_32+0x32/0x80 [ 491.742215][T14647] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 491.742232][T14647] RIP: 0023:0xf700d579 [ 491.742243][T14647] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 491.742257][T14647] RSP: 002b:00000000f53fd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 491.742270][T14647] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 491.742278][T14647] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 491.742286][T14647] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 491.742293][T14647] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 491.742301][T14647] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 491.742318][T14647] [ 492.214050][T14667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2264'. [ 493.305907][T14708] FAULT_INJECTION: forcing a failure. [ 493.305907][T14708] name failslab, interval 1, probability 0, space 0, times 0 [ 493.311437][T14708] CPU: 0 UID: 0 PID: 14708 Comm: syz.2.2277 Not tainted syzkaller #0 PREEMPT(full) [ 493.311462][T14708] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 493.311473][T14708] Call Trace: [ 493.311480][T14708] [ 493.311488][T14708] dump_stack_lvl+0x16c/0x1f0 [ 493.311513][T14708] should_fail_ex+0x512/0x640 [ 493.311533][T14708] ? fs_reclaim_acquire+0xae/0x150 [ 493.311557][T14708] should_failslab+0xc2/0x120 [ 493.311578][T14708] __kmalloc_noprof+0xdd/0x880 [ 493.311605][T14708] ? tomoyo_encode2+0x100/0x3e0 [ 493.311627][T14708] ? tomoyo_encode2+0x100/0x3e0 [ 493.311642][T14708] tomoyo_encode2+0x100/0x3e0 [ 493.311662][T14708] tomoyo_encode+0x29/0x50 [ 493.311677][T14708] tomoyo_realpath_from_path+0x18f/0x6e0 [ 493.311698][T14708] ? tomoyo_profile+0x47/0x60 [ 493.311721][T14708] tomoyo_path_number_perm+0x245/0x580 [ 493.311744][T14708] ? tomoyo_path_number_perm+0x237/0x580 [ 493.311771][T14708] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 493.311824][T14708] ? find_held_lock+0x2b/0x80 [ 493.311843][T14708] ? hook_file_ioctl_common+0x145/0x410 [ 493.311875][T14708] ? __fget_files+0x20e/0x3c0 [ 493.311904][T14708] security_file_ioctl_compat+0x9b/0x240 [ 493.311934][T14708] __ia32_compat_sys_ioctl+0xc3/0x370 [ 493.311962][T14708] __do_fast_syscall_32+0x7c/0x300 [ 493.311984][T14708] do_fast_syscall_32+0x32/0x80 [ 493.312004][T14708] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 493.312025][T14708] RIP: 0023:0xf707d579 [ 493.312039][T14708] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 493.312054][T14708] RSP: 002b:00000000f546d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 493.312071][T14708] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004008ae89 [ 493.312082][T14708] RDX: 0000000080000380 RSI: 0000000000000000 RDI: 0000000000000000 [ 493.312093][T14708] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 493.312101][T14708] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 493.312111][T14708] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 493.312136][T14708] [ 493.312156][T14708] ERROR: Out of memory at tomoyo_realpath_from_path. [ 493.447031][T14719] fuse: Bad value for 'group_id' [ 493.449024][T14719] fuse: Bad value for 'group_id' [ 494.157705][T14743] usb usb9: usbfs: process 14743 (syz.4.2287) did not claim interface 0 before use [ 494.373263][ T6015] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 494.524491][ T6015] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 494.529244][ T6015] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 494.533366][ T6015] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 494.538461][ T6015] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 494.543761][ T6015] usb 7-1: config 0 interface 0 has no altsetting 0 [ 494.549237][ T6015] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 494.552645][ T6015] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 494.558005][ T6015] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 494.562296][ T6015] usb 7-1: config 0 interface 0 has no altsetting 0 [ 494.573534][ T6015] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 494.579665][ T6015] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 494.585487][ T6015] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 494.589573][ T6015] usb 7-1: config 0 interface 0 has no altsetting 0 [ 494.593884][ T6015] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 494.596744][ T6015] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 494.600579][ T6015] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 494.605377][ T6015] usb 7-1: config 0 interface 0 has no altsetting 0 [ 494.609859][ T6015] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 494.613423][ T6015] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 494.617937][ T6015] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 494.621685][ T6015] usb 7-1: config 0 interface 0 has no altsetting 0 [ 494.627122][ T6015] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 494.630939][ T6015] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 494.635942][ T6015] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 494.639906][ T6015] usb 7-1: config 0 interface 0 has no altsetting 0 [ 494.643697][ T6015] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 494.648286][ T6015] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 494.653505][ T6015] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 494.657723][ T6015] usb 7-1: config 0 interface 0 has no altsetting 0 [ 494.661827][ T6015] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 494.666446][ T6015] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 494.671533][ T6015] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 494.676620][ T6015] usb 7-1: config 0 interface 0 has no altsetting 0 [ 494.682142][ T6015] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 494.686177][ T6015] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 494.690056][ T6015] usb 7-1: Product: syz [ 494.690831][T14760] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 494.692269][ T6015] usb 7-1: Manufacturer: syz [ 494.695653][T14760] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 494.697887][T14760] vhci_hcd vhci_hcd.0: Device attached [ 494.700989][ T6015] usb 7-1: SerialNumber: syz [ 494.707284][ T6015] usb 7-1: config 0 descriptor?? [ 494.713714][ T6015] yurex 7-1:0.0: Could not submitting URB [ 494.716375][ T6015] yurex 7-1:0.0: probe with driver yurex failed with error -5 [ 494.920828][ T6015] usb 7-1: USB disconnect, device number 26 [ 494.942839][ T3243] usb 45-1: new low-speed USB device number 4 using vhci_hcd [ 495.120923][T14761] vhci_hcd: connection reset by peer [ 495.123578][ T91] vhci_hcd: stop threads [ 495.124919][ T91] vhci_hcd: release socket [ 495.126254][ T91] vhci_hcd: disconnect device [ 496.554433][ T5954] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 496.557075][ T5954] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 496.565758][ T5954] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 496.567518][ T5954] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 496.577677][ T5954] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 496.767407][T14783] chnl_net:caif_netlink_parms(): no params data found [ 496.949383][T14783] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.949740][T14783] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.950192][T14783] bridge_slave_0: entered allmulticast mode [ 496.963521][T14783] bridge_slave_0: entered promiscuous mode [ 496.969586][T14783] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.969787][T14783] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.970072][T14783] bridge_slave_1: entered allmulticast mode [ 496.974095][T14783] bridge_slave_1: entered promiscuous mode [ 497.026170][T14783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.029787][T14783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.084112][ T5941] bond0: (slave syz_tun): Releasing backup interface [ 497.127982][T14783] team0: Port device team_slave_0 added [ 497.130385][T14783] team0: Port device team_slave_1 added [ 497.189390][T14783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.189414][T14783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.189445][T14783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.191856][T14783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.191873][T14783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.191898][T14783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.248330][T14783] hsr_slave_0: entered promiscuous mode [ 497.248836][T14783] hsr_slave_1: entered promiscuous mode [ 497.249161][T14783] debugfs: 'hsr0' already exists in 'hsr' [ 497.249173][T14783] Cannot create hsr debugfs directory [ 497.427024][T14783] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 497.436828][T14783] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 497.440587][T14783] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 497.444862][T14783] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 497.467883][T14783] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.468065][T14783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.468456][T14783] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.468611][T14783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.560054][T14783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.588711][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.593634][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.616402][T14783] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.627448][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.627511][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.635454][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.635546][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.791986][T14783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.005859][T14783] veth0_vlan: entered promiscuous mode [ 498.014812][T14783] veth1_vlan: entered promiscuous mode [ 498.033926][T14783] veth0_macvtap: entered promiscuous mode [ 498.037917][T14783] veth1_macvtap: entered promiscuous mode [ 498.051653][T14783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.060146][T14783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.063195][T14817] vivid-000: ================= START STATUS ================= [ 498.067424][T14817] vivid-000: Test Pattern: 100% Color Squares [ 498.069789][T14817] vivid-000: Fill Percentage of Frame: 100 [ 498.070274][ T1149] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.072144][T14817] vivid-000: Horizontal Movement: Move Left Fast [ 498.075023][ T1149] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.076732][T14817] vivid-000: Vertical Movement: Move Up Slow [ 498.081261][ T1149] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.082237][T14817] vivid-000: OSD Text Mode: All [ 498.087004][T14817] vivid-000: Show Border: false [ 498.087981][ T1149] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.089156][T14817] vivid-000: Show Square: false [ 498.094954][T14817] vivid-000: Sensor Flipped Horizontally: false [ 498.096959][T14817] vivid-000: Sensor Flipped Vertically: false [ 498.098908][T14817] vivid-000: Insert SAV Code in Image: false [ 498.101033][T14817] vivid-000: Insert EAV Code in Image: false [ 498.104811][T14817] vivid-000: Insert Video Guard Band: false [ 498.106765][T14817] vivid-000: Reduced Framerate: false [ 498.109958][T14817] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 498.112981][T14817] vivid-000: S-Video 000-0 Is Connected To: Output S-Video 023-0 [ 498.115699][T14817] vivid-000: Enable Capture Cropping: true grabbed [ 498.118005][T14817] vivid-000: Enable Capture Composing: true grabbed [ 498.120634][T14817] vivid-000: Enable Capture Scaler: true grabbed [ 498.122828][T14817] vivid-000: Timestamp Source: End of Frame [ 498.125416][T14817] vivid-000: Colorspace: Rec. 709 [ 498.127055][T14817] vivid-000: Transfer Function: Default [ 498.128849][T14817] vivid-000: Y'CbCr Encoding: Default [ 498.130820][T14817] vivid-000: HSV Encoding: Hue 0-179 [ 498.138021][T14817] vivid-000: Quantization: Default [ 498.140907][T14817] vivid-000: Apply Alpha To Red Only: false [ 498.142836][T14817] vivid-000: Standard Aspect Ratio: 4x3 [ 498.144367][ T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.144574][T14817] vivid-000: DV Timings Signal Mode: Current DV Timings [ 498.147535][ T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.152789][T14817] [ 498.153584][T14817] vivid-000: DV Timings: 640x480p59 inactive [ 498.155527][T14817] vivid-000: DV Timings Aspect Ratio: 4x3 [ 498.157328][T14817] vivid-000: Maximum EDID Blocks: 1 [ 498.159032][T14817] vivid-000: Limited RGB Range (16-235): true [ 498.161592][T14817] vivid-000: Rx RGB Quantization Range: Automatic [ 498.163832][T14817] vivid-000: Power Present: 0x00000001 [ 498.165868][T14817] tpg source WxH: 1280x720 (Y'CbCr) [ 498.167604][T14817] tpg field: 1 [ 498.168667][T14817] tpg crop: (0,0)/1024x720 [ 498.170144][T14817] tpg compose: (0,0)/256x720 [ 498.172051][T14817] tpg colorspace: 3 [ 498.172804][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.173259][T14817] tpg transfer function: 0/1 [ 498.175919][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.179477][T14817] tpg Y'CbCr encoding: 0/2 [ 498.184153][T14817] tpg quantization: 0/2 [ 498.185928][T14817] tpg RGB range: 0/1 [ 498.187663][T14817] vivid-000: ================== END STATUS ================== [ 498.367974][T14823] syzkaller1: entered promiscuous mode [ 498.370468][T14823] syzkaller1: entered allmulticast mode [ 498.670558][ T5954] Bluetooth: hci4: command tx timeout [ 499.642449][T14841] 9pnet_fd: Insufficient options for proto=fd [ 500.019134][ T3243] vhci_hcd: vhci_device speed not set [ 500.751613][ T5954] Bluetooth: hci4: command tx timeout [ 501.918811][T14865] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2313'. [ 502.449998][T14882] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 502.452413][T14882] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 502.457007][T14882] vhci_hcd vhci_hcd.0: Device attached [ 502.478961][T14883] vhci_hcd: connection closed [ 502.479368][ T72] vhci_hcd: stop threads [ 502.484278][ T72] vhci_hcd: release socket [ 502.486512][ T72] vhci_hcd: disconnect device [ 502.709610][T14890] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2321'. [ 502.827702][ T5954] Bluetooth: hci4: command tx timeout [ 502.838172][T14898] FAULT_INJECTION: forcing a failure. [ 502.838172][T14898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 502.847439][T14898] CPU: 0 UID: 0 PID: 14898 Comm: syz.5.2323 Not tainted syzkaller #0 PREEMPT(full) [ 502.847466][T14898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 502.847477][T14898] Call Trace: [ 502.847484][T14898] [ 502.847492][T14898] dump_stack_lvl+0x16c/0x1f0 [ 502.847519][T14898] should_fail_ex+0x512/0x640 [ 502.847545][T14898] _copy_to_user+0x32/0xd0 [ 502.847571][T14898] simple_read_from_buffer+0xcb/0x170 [ 502.847601][T14898] proc_fail_nth_read+0x197/0x240 [ 502.847622][T14898] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 502.847644][T14898] ? rw_verify_area+0xcf/0x6c0 [ 502.847671][T14898] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 502.847690][T14898] vfs_read+0x1e4/0xcf0 [ 502.847715][T14898] ? __pfx_vfs_read+0x10/0x10 [ 502.847731][T14898] ? find_held_lock+0x2b/0x80 [ 502.847758][T14898] ? __fget_files+0x20e/0x3c0 [ 502.847785][T14898] ksys_read+0x12a/0x250 [ 502.847810][T14898] ? __pfx_ksys_read+0x10/0x10 [ 502.847827][T14898] ? syscall_trace_enter+0x1cb/0x240 [ 502.847859][T14898] ? rcu_is_watching+0x12/0xc0 [ 502.847881][T14898] __do_fast_syscall_32+0x7c/0x300 [ 502.847906][T14898] do_fast_syscall_32+0x32/0x80 [ 502.847927][T14898] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 502.847949][T14898] RIP: 0023:0xf70ed579 [ 502.847964][T14898] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 502.847982][T14898] RSP: 002b:00000000f54dd590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 502.847999][T14898] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54dd620 [ 502.848011][T14898] RDX: 000000000000000f RSI: 00000000f7485ff4 RDI: 0000000000000000 [ 502.848022][T14898] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 502.848033][T14898] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 502.848044][T14898] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 502.848069][T14898] [ 502.934954][ C0] vkms_vblank_simulate: vblank timer overrun [ 502.952585][T14901] FAULT_INJECTION: forcing a failure. [ 502.952585][T14901] name failslab, interval 1, probability 0, space 0, times 0 [ 502.956592][T14901] CPU: 1 UID: 0 PID: 14901 Comm: syz.4.2326 Not tainted syzkaller #0 PREEMPT(full) [ 502.956609][T14901] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 502.956616][T14901] Call Trace: [ 502.956621][T14901] [ 502.956626][T14901] dump_stack_lvl+0x16c/0x1f0 [ 502.956644][T14901] should_fail_ex+0x512/0x640 [ 502.956658][T14901] ? fs_reclaim_acquire+0xae/0x150 [ 502.956675][T14901] should_failslab+0xc2/0x120 [ 502.956692][T14901] __kmalloc_noprof+0xdd/0x880 [ 502.956710][T14901] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 502.956726][T14901] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 502.956737][T14901] tomoyo_realpath_from_path+0xc2/0x6e0 [ 502.956751][T14901] ? tomoyo_profile+0x47/0x60 [ 502.956766][T14901] tomoyo_path_number_perm+0x245/0x580 [ 502.956782][T14901] ? tomoyo_path_number_perm+0x237/0x580 [ 502.956799][T14901] ? irq_work_sync+0x2a4/0x310 [ 502.956810][T14901] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 502.956842][T14901] ? find_held_lock+0x2b/0x80 [ 502.956854][T14901] ? hook_file_ioctl_common+0x145/0x410 [ 502.956875][T14901] ? __fget_files+0x20e/0x3c0 [ 502.956899][T14901] security_file_ioctl_compat+0x9b/0x240 [ 502.956922][T14901] __ia32_compat_sys_ioctl+0xc3/0x370 [ 502.956941][T14901] __do_fast_syscall_32+0x7c/0x300 [ 502.956957][T14901] do_fast_syscall_32+0x32/0x80 [ 502.956971][T14901] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 502.956985][T14901] RIP: 0023:0xf700d579 [ 502.956995][T14901] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 502.957006][T14901] RSP: 002b:00000000f53fd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 502.957019][T14901] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c018620c [ 502.957026][T14901] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 502.957033][T14901] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 502.957039][T14901] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 502.957046][T14901] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 502.957065][T14901] [ 503.057088][T14901] ERROR: Out of memory at tomoyo_realpath_from_path. [ 503.111796][ T5954] Bluetooth: hci2: unexpected event for opcode 0x291a [ 503.141766][T14912] xt_hashlimit: size too large, truncated to 1048576 [ 503.145361][T14912] xt_hashlimit: max too large, truncated to 1048576 [ 503.172488][T14912] cgroup: subsys name conflicts with all [ 503.298140][T14924] FAULT_INJECTION: forcing a failure. [ 503.298140][T14924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.302773][T14924] CPU: 1 UID: 0 PID: 14924 Comm: syz.2.2331 Not tainted syzkaller #0 PREEMPT(full) [ 503.302791][T14924] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 503.302798][T14924] Call Trace: [ 503.302803][T14924] [ 503.302808][T14924] dump_stack_lvl+0x16c/0x1f0 [ 503.302825][T14924] should_fail_ex+0x512/0x640 [ 503.302843][T14924] _copy_from_user+0x2e/0xd0 [ 503.302858][T14924] get_compat_msghdr+0xa7/0x170 [ 503.302873][T14924] ? __pfx_get_compat_msghdr+0x10/0x10 [ 503.302891][T14924] ___sys_sendmsg+0x1ae/0x1d0 [ 503.302906][T14924] ? __pfx____sys_sendmsg+0x10/0x10 [ 503.302926][T14924] ? find_held_lock+0x2b/0x80 [ 503.302947][T14924] __sys_sendmsg+0x16d/0x220 [ 503.302960][T14924] ? __pfx___sys_sendmsg+0x10/0x10 [ 503.302980][T14924] ? rcu_is_watching+0x12/0xc0 [ 503.303010][T14924] __do_fast_syscall_32+0x7c/0x300 [ 503.303026][T14924] do_fast_syscall_32+0x32/0x80 [ 503.303040][T14924] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 503.303055][T14924] RIP: 0023:0xf707d579 [ 503.303064][T14924] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 503.303075][T14924] RSP: 002b:00000000f542b55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 503.303087][T14924] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000300 [ 503.303094][T14924] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 503.303101][T14924] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 503.303108][T14924] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 503.303114][T14924] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 503.303134][T14924] [ 503.347230][T14925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2332'. [ 503.370175][T14928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2334'. [ 503.431470][T14930] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2336'. [ 503.438078][T14931] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2336'. [ 503.666598][ T3243] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 503.669808][ T6058] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 503.796659][ T6058] usb 7-1: device descriptor read/64, error -71 [ 503.799473][ T3243] usb 9-1: device descriptor read/64, error -71 [ 504.036351][ T3243] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 504.039638][ T6058] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 504.186260][ T6058] usb 7-1: device descriptor read/64, error -71 [ 504.189579][ T3243] usb 9-1: device descriptor read/64, error -71 [ 504.306422][ T3243] usb usb9-port1: attempt power cycle [ 504.309233][ T6058] usb usb7-port1: attempt power cycle [ 504.660966][ T3243] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 504.663782][ T6058] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 504.728743][ T3243] usb 9-1: device descriptor read/8, error -71 [ 504.753547][ T6058] usb 7-1: device descriptor read/8, error -71 [ 504.870731][T14943] syzkaller1: entered promiscuous mode [ 504.873278][T14943] syzkaller1: entered allmulticast mode [ 504.915818][ T5954] Bluetooth: hci4: command tx timeout [ 504.985624][ T3243] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 504.995786][ T6058] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 505.016661][ T6058] usb 7-1: device descriptor read/8, error -71 [ 505.020064][ T3243] usb 9-1: device descriptor read/8, error -71 [ 505.031817][T14945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2342'. [ 505.038804][T14945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2342'. [ 505.043027][T14945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2342'. [ 505.135689][ T3243] usb usb9-port1: unable to enumerate USB device [ 505.139543][ T6058] usb usb7-port1: unable to enumerate USB device [ 506.128596][T14952] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 506.132110][T14952] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 506.136888][T14952] vhci_hcd vhci_hcd.0: Device attached [ 506.149065][T14952] netlink: 6068 bytes leftover after parsing attributes in process `syz.5.2345'. [ 506.267631][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.269757][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.414718][ T1133] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 506.915812][T14953] vhci_hcd: connection closed [ 507.434479][T14954] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 507.445004][ T91] vhci_hcd: stop threads [ 507.446560][ T91] vhci_hcd: release socket [ 507.448168][ T91] vhci_hcd: disconnect device [ 507.504203][T14977] syz_tun: entered allmulticast mode [ 507.509010][ T5956] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 507.519448][ T5956] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 507.523253][ T5956] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 507.529514][ T5956] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 507.532016][ T5956] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 507.617777][T14982] pim6reg: entered allmulticast mode [ 507.653471][T14977] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 507.656057][T14987] pim6reg: left allmulticast mode [ 507.661475][T14977] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 507.664760][T14977] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 507.667012][T14977] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 507.676673][T14977] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 507.702992][T14977] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 507.705603][T14977] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 507.724865][T14977] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 507.792161][T14976] syz_tun: left allmulticast mode [ 507.874750][T14995] FAULT_INJECTION: forcing a failure. [ 507.874750][T14995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.881595][T14995] CPU: 0 UID: 0 PID: 14995 Comm: syz.4.2358 Not tainted syzkaller #0 PREEMPT(full) [ 507.881629][T14995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 507.881645][T14995] Call Trace: [ 507.881654][T14995] [ 507.881665][T14995] dump_stack_lvl+0x16c/0x1f0 [ 507.881699][T14995] should_fail_ex+0x512/0x640 [ 507.881758][T14995] _copy_from_user+0x2e/0xd0 [ 507.881793][T14995] __sys_bpf+0x248/0x4980 [ 507.881827][T14995] ? __pfx___sys_bpf+0x10/0x10 [ 507.881852][T14995] ? find_held_lock+0x2b/0x80 [ 507.881887][T14995] ? find_held_lock+0x2b/0x80 [ 507.881924][T14995] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 507.881976][T14995] ? fput+0x9b/0xd0 [ 507.882010][T14995] ? ksys_write+0x1ac/0x250 [ 507.882036][T14995] ? __pfx_ksys_write+0x10/0x10 [ 507.882077][T14995] __ia32_sys_bpf+0x76/0xe0 [ 507.882106][T14995] __do_fast_syscall_32+0x7c/0x300 [ 507.882139][T14995] do_fast_syscall_32+0x32/0x80 [ 507.882170][T14995] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 507.882201][T14995] RIP: 0023:0xf700d579 [ 507.882222][T14995] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 507.882246][T14995] RSP: 002b:00000000f53fd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 507.882272][T14995] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000280 [ 507.882290][T14995] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000000000 [ 507.882305][T14995] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 507.882319][T14995] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 507.882335][T14995] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 507.882403][T14995] [ 507.919158][T14980] chnl_net:caif_netlink_parms(): no params data found [ 508.035050][T15010] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 508.037618][T15010] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 508.041055][T15010] vhci_hcd vhci_hcd.0: Device attached [ 508.080221][T15010] netlink: 6068 bytes leftover after parsing attributes in process `syz.2.2361'. [ 508.293783][ T6015] usb 41-1: new low-speed USB device number 24 using vhci_hcd [ 508.824256][T15011] vhci_hcd: connection reset by peer [ 508.866893][ T72] vhci_hcd: stop threads [ 508.868407][ T72] vhci_hcd: release socket [ 508.885473][ T72] vhci_hcd: disconnect device [ 508.961185][ T1149] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 508.964484][ T1149] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 508.969134][ T1149] bridge0: port 1(netdevsim0) entered disabled state [ 509.029039][T14980] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.032394][T14980] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.035900][T14980] bridge_slave_0: entered allmulticast mode [ 509.039907][T14980] bridge_slave_0: entered promiscuous mode [ 509.065229][T14980] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.068034][T14980] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.071133][T14980] bridge_slave_1: entered allmulticast mode [ 509.075916][T14980] bridge_slave_1: entered promiscuous mode [ 509.178622][T14980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.190736][T14980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.259142][T14980] team0: Port device team_slave_0 added [ 509.266158][T14980] team0: Port device team_slave_1 added [ 509.344408][T14980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.347197][T14980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.356958][T14980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.368717][T14980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.371377][T14980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.380083][T14980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.402629][ T1149] batman_adv: batadv0: Interface deactivated: gretap1 [ 509.577786][ T1149] batman_adv: batadv0: Removing interface: gretap1 [ 509.622564][ T5956] Bluetooth: hci3: command 0x0c1a tx timeout [ 509.702749][ T5954] Bluetooth: hci2: command 0x0c1a tx timeout [ 509.702826][ T5952] Bluetooth: hci4: command 0x0c1a tx timeout [ 509.703698][ T5956] Bluetooth: hci0: command 0x041b tx timeout [ 509.923900][ T1149] bond0 (unregistering): Released all slaves [ 510.052269][ T1149] bond1 (unregistering): Released all slaves [ 510.178544][ T1149] bond2 (unregistering): Released all slaves [ 510.329778][ T1149] : left promiscuous mode [ 510.360771][T14980] hsr_slave_0: entered promiscuous mode [ 510.367581][T14980] hsr_slave_1: entered promiscuous mode [ 510.371505][T14980] debugfs: 'hsr0' already exists in 'hsr' [ 510.372212][ T5952] Bluetooth: hci4: unexpected event for opcode 0x2035 [ 510.374684][T14980] Cannot create hsr debugfs directory [ 510.419975][ T1149] tipc: Left network mode [ 510.500593][T15036] FAULT_INJECTION: forcing a failure. [ 510.500593][T15036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.502512][T15036] [ 510.502523][T15036] ====================================================== [ 510.502527][T15036] WARNING: possible circular locking dependency detected [ 510.502534][T15036] syzkaller #0 Not tainted [ 510.502540][T15036] ------------------------------------------------------ [ 510.502545][T15036] syz.5.2366/15036 is trying to acquire lock: [ 510.502552][T15036] ffffffff8e2d1540 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 510.502586][T15036] [ 510.502586][T15036] but task is already holding lock: [ 510.502590][T15036] ffff88802b23a4d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 510.502617][T15036] [ 510.502617][T15036] which lock already depends on the new lock. [ 510.502617][T15036] [ 510.502621][T15036] [ 510.502621][T15036] the existing dependency chain (in reverse order) is: [ 510.502625][T15036] [ 510.502625][T15036] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 510.502641][T15036] _raw_spin_lock_nested+0x31/0x40 [ 510.502664][T15036] raw_spin_rq_lock_nested+0x29/0x130 [ 510.502676][T15036] task_rq_lock+0xcf/0x490 [ 510.502687][T15036] cgroup_move_task+0x81/0x2a0 [ 510.502702][T15036] css_set_move_task+0x288/0x5f0 [ 510.502720][T15036] cgroup_post_fork+0x201/0x9d0 [ 510.502738][T15036] copy_process+0x602d/0x76a0 [ 510.502753][T15036] kernel_clone+0xfc/0x930 [ 510.502768][T15036] user_mode_thread+0xc8/0x110 [ 510.502783][T15036] rest_init+0x23/0x2b0 [ 510.502800][T15036] start_kernel+0x3f3/0x4e0 [ 510.502819][T15036] x86_64_start_reservations+0x18/0x30 [ 510.502840][T15036] x86_64_start_kernel+0x130/0x190 [ 510.502859][T15036] common_startup_64+0x13e/0x148 [ 510.502872][T15036] [ 510.502872][T15036] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 510.502888][T15036] _raw_spin_lock_irqsave+0x3a/0x60 [ 510.502899][T15036] try_to_wake_up+0xb7/0x1870 [ 510.502911][T15036] __wake_up_common+0x135/0x1f0 [ 510.502927][T15036] __wake_up+0x31/0x60 [ 510.502940][T15036] tty_port_default_wakeup+0x47/0x60 [ 510.502961][T15036] serial8250_tx_chars+0x68e/0x860 [ 510.502973][T15036] serial8250_handle_irq+0x761/0xcb0 [ 510.502986][T15036] serial8250_default_handle_irq+0x9e/0x270 [ 510.502999][T15036] serial8250_interrupt+0xf5/0x1d0 [ 510.503013][T15036] __handle_irq_event_percpu+0x236/0x920 [ 510.503026][T15036] handle_irq_event+0xab/0x1e0 [ 510.503038][T15036] handle_edge_irq+0x3ca/0x9e0 [ 510.503049][T15036] __common_interrupt+0xcd/0x2f0 [ 510.503065][T15036] common_interrupt+0xba/0xe0 [ 510.503083][T15036] asm_common_interrupt+0x26/0x40 [ 510.503096][T15036] pv_native_safe_halt+0xf/0x20 [ 510.503108][T15036] default_idle+0x13/0x20 [ 510.503123][T15036] default_idle_call+0x6c/0xb0 [ 510.503139][T15036] do_idle+0x38d/0x500 [ 510.503151][T15036] cpu_startup_entry+0x4f/0x60 [ 510.503163][T15036] start_secondary+0x21d/0x2b0 [ 510.503181][T15036] common_startup_64+0x13e/0x148 [ 510.503193][T15036] [ 510.503193][T15036] -> #2 (&tty->write_wait){-...}-{3:3}: [ 510.503210][T15036] _raw_spin_lock_irqsave+0x3a/0x60 [ 510.503221][T15036] __wake_up+0x1c/0x60 [ 510.503234][T15036] tty_port_default_wakeup+0x47/0x60 [ 510.503254][T15036] serial8250_tx_chars+0x68e/0x860 [ 510.503265][T15036] __start_tx+0x3df/0x490 [ 510.503275][T15036] serial8250_start_tx+0x368/0x530 [ 510.503286][T15036] __uart_start+0x295/0x500 [ 510.503301][T15036] uart_write+0x218/0xb30 [ 510.503320][T15036] n_tty_write+0x41b/0x11e0 [ 510.503331][T15036] file_tty_write.constprop.0+0x500/0x9b0 [ 510.503350][T15036] redirected_tty_write+0xd4/0x150 [ 510.503369][T15036] vfs_write+0x7d0/0x11d0 [ 510.503382][T15036] ksys_write+0x12a/0x250 [ 510.503394][T15036] do_syscall_64+0xcd/0xfa0 [ 510.503407][T15036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.503419][T15036] [ 510.503419][T15036] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 510.503435][T15036] _raw_spin_lock_irqsave+0x3a/0x60 [ 510.503446][T15036] serial8250_console_write+0x181/0x1890 [ 510.503460][T15036] console_flush_all+0x801/0xc60 [ 510.503472][T15036] console_unlock+0xd8/0x210 [ 510.503483][T15036] vprintk_emit+0x3d7/0x680 [ 510.503497][T15036] _printk+0xc7/0x100 [ 510.503514][T15036] register_console+0xc2d/0x11b0 [ 510.503526][T15036] univ8250_console_init+0x5f/0x90 [ 510.503539][T15036] console_init+0x14f/0x680 [ 510.503550][T15036] start_kernel+0x29f/0x4e0 [ 510.503568][T15036] x86_64_start_reservations+0x18/0x30 [ 510.503588][T15036] x86_64_start_kernel+0x130/0x190 [ 510.503610][T15036] common_startup_64+0x13e/0x148 [ 510.503622][T15036] [ 510.503622][T15036] -> #0 (console_owner){-.-.}-{0:0}: [ 510.503638][T15036] __lock_acquire+0x12a6/0x1ce0 [ 510.503656][T15036] lock_acquire+0x179/0x350 [ 510.503672][T15036] console_lock_spinning_enable+0x72/0x80 [ 510.503683][T15036] console_flush_all+0x7aa/0xc60 [ 510.503695][T15036] console_unlock+0xd8/0x210 [ 510.503706][T15036] vprintk_emit+0x3d7/0x680 [ 510.503718][T15036] _printk+0xc7/0x100 [ 510.503739][T15036] should_fail_ex+0x4e7/0x640 [ 510.503754][T15036] strncpy_from_user+0x3b/0x2e0 [ 510.503766][T15036] strncpy_from_user_nofault+0x7f/0x180 [ 510.503781][T15036] bpf_probe_read_user_str+0x26/0x70 [ 510.503798][T15036] bpf_prog_4049cf28f0ebfcec+0x64/0x6c [ 510.503809][T15036] bpf_trace_run2+0x236/0x590 [ 510.503829][T15036] __bpf_trace_tlb_flush+0xd1/0x110 [ 510.503845][T15036] trace_tlb_flush+0xe4/0x160 [ 510.503862][T15036] switch_mm_irqs_off+0x2b1/0x7f0 [ 510.503880][T15036] __schedule+0xf70/0x5de0 [ 510.503891][T15036] preempt_schedule_irq+0x51/0x90 [ 510.503903][T15036] irqentry_exit+0x36/0x90 [ 510.503916][T15036] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 510.503929][T15036] rmd160_transform+0xa10/0x1e10 [ 510.503943][T15036] rmd160_update+0xd9/0x160 [ 510.503955][T15036] crypto_shash_finup+0x459/0x6d0 [ 510.503968][T15036] shash_ahash_update+0x19a/0x240 [ 510.503987][T15036] crypto_ahash_update+0x111/0x850 [ 510.504006][T15036] hash_sendmsg+0x2a9/0xfa0 [ 510.504021][T15036] ____sys_sendmsg+0xa98/0xc70 [ 510.504040][T15036] ___sys_sendmsg+0x134/0x1d0 [ 510.504053][T15036] __sys_sendmsg+0x16d/0x220 [ 510.504136][T15036] __do_fast_syscall_32+0x7c/0x300 [ 510.504160][T15036] do_fast_syscall_32+0x32/0x80 [ 510.504172][T15036] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 510.504187][T15036] [ 510.504187][T15036] other info that might help us debug this: [ 510.504187][T15036] [ 510.504191][T15036] Chain exists of: [ 510.504191][T15036] console_owner --> &p->pi_lock --> &rq->__lock [ 510.504191][T15036] [ 510.504211][T15036] Possible unsafe locking scenario: [ 510.504211][T15036] [ 510.504215][T15036] CPU0 CPU1 [ 510.504218][T15036] ---- ---- [ 510.504221][T15036] lock(&rq->__lock); [ 510.504228][T15036] lock(&p->pi_lock); [ 510.504237][T15036] lock(&rq->__lock); [ 510.504245][T15036] lock(console_owner); [ 510.504252][T15036] [ 510.504252][T15036] *** DEADLOCK *** [ 510.504252][T15036] [ 510.504255][T15036] 5 locks held by syz.5.2366/15036: [ 510.504262][T15036] #0: ffff888041bf9258 (sk_lock-AF_ALG){+.+.}-{0:0}, at: hash_sendmsg+0xae/0xfa0 [ 510.504291][T15036] #1: ffff88802b23a4d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 510.504317][T15036] #2: ffffffff8e3c4320 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1bc/0x590 [ 510.504350][T15036] #3: ffffffff8e3b1980 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 510.504379][T15036] #4: ffffffff8e3b19f0 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60 [ 510.504403][T15036] [ 510.504403][T15036] stack backtrace: [ 510.504411][T15036] CPU: 0 UID: 0 PID: 15036 Comm: syz.5.2366 Not tainted syzkaller #0 PREEMPT(full) [ 510.504426][T15036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 510.504435][T15036] Call Trace: [ 510.504441][T15036] [ 510.504447][T15036] dump_stack_lvl+0x116/0x1f0 [ 510.504461][T15036] print_circular_bug+0x275/0x350 [ 510.504477][T15036] check_noncircular+0x14c/0x170 [ 510.504494][T15036] __lock_acquire+0x12a6/0x1ce0 [ 510.504512][T15036] lock_acquire+0x179/0x350 [ 510.504527][T15036] ? console_lock_spinning_enable+0x61/0x80 [ 510.504538][T15036] ? console_lock_spinning_enable+0x4a/0x80 [ 510.504550][T15036] console_lock_spinning_enable+0x72/0x80 [ 510.504560][T15036] ? console_lock_spinning_enable+0x61/0x80 [ 510.504571][T15036] console_flush_all+0x7aa/0xc60 [ 510.504583][T15036] ? __pfx_console_flush_all+0x10/0x10 [ 510.504597][T15036] ? is_printk_cpu_sync_owner+0x32/0x40 [ 510.504611][T15036] console_unlock+0xd8/0x210 [ 510.504621][T15036] ? __pfx_console_unlock+0x10/0x10 [ 510.504632][T15036] ? do_raw_spin_unlock+0xe0/0x230 [ 510.504650][T15036] ? _printk+0xc7/0x100 [ 510.504664][T15036] ? __down_trylock_console_sem+0xb0/0x140 [ 510.504682][T15036] vprintk_emit+0x3d7/0x680 [ 510.504693][T15036] ? __pfx_vprintk_emit+0x10/0x10 [ 510.504705][T15036] ? do_raw_spin_lock+0x12c/0x2b0 [ 510.504723][T15036] _printk+0xc7/0x100 [ 510.504738][T15036] ? __pfx__printk+0x10/0x10 [ 510.504753][T15036] ? const_folio_flags+0x5b/0x100 [ 510.504766][T15036] ? __pfx____ratelimit+0x10/0x10 [ 510.504778][T15036] should_fail_ex+0x4e7/0x640 [ 510.504795][T15036] strncpy_from_user+0x3b/0x2e0 [ 510.504808][T15036] strncpy_from_user_nofault+0x7f/0x180 [ 510.504821][T15036] bpf_probe_read_user_str+0x26/0x70 [ 510.504837][T15036] bpf_prog_4049cf28f0ebfcec+0x64/0x6c [ 510.504847][T15036] bpf_trace_run2+0x236/0x590 [ 510.504864][T15036] ? __pfx_bpf_trace_run2+0x10/0x10 [ 510.504898][T15036] ? __lock_acquire+0xb97/0x1ce0 [ 510.504914][T15036] __bpf_trace_tlb_flush+0xd1/0x110 [ 510.504930][T15036] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 510.504945][T15036] ? find_held_lock+0x2b/0x80 [ 510.504957][T15036] ? __schedule+0x1861/0x5de0 [ 510.504969][T15036] trace_tlb_flush+0xe4/0x160 [ 510.504984][T15036] switch_mm_irqs_off+0x2b1/0x7f0 [ 510.505001][T15036] __schedule+0xf70/0x5de0 [ 510.505012][T15036] ? sanity_check_pinned_pages+0x23/0x11d0 [ 510.505031][T15036] ? __pfx___schedule+0x10/0x10 [ 510.505044][T15036] ? mark_held_locks+0x49/0x80 [ 510.505059][T15036] preempt_schedule_irq+0x51/0x90 [ 510.505071][T15036] irqentry_exit+0x36/0x90 [ 510.505083][T15036] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 510.505095][T15036] RIP: 0010:rmd160_transform+0xa10/0x1e10 [ 510.505109][T15036] Code: 8d 9c 3b a1 eb d9 6e 41 f7 d2 45 09 da 45 31 e2 41 01 da 44 89 cb 45 89 d9 41 c1 c3 0a 41 c1 c2 0f 41 f7 d1 c1 c3 0a 41 01 ea <42> 8d ac 05 a1 eb d9 6e 44 8b 44 24 48 45 09 d1 41 31 d9 41 01 e9 [ 510.505122][T15036] RSP: 0018:ffffc900039c76c8 EFLAGS: 00000202 [ 510.505132][T15036] RAX: ffff888065cd3b50 RBX: 00000000a30d9ee5 RCX: 0000000000000000 [ 510.505140][T15036] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 510.505146][T15036] RBP: 00000000601cf1b1 R08: 0000000000000000 R09: 000000004d84fb0e [ 510.505153][T15036] R10: 0000000071a63a46 R11: 00000000ec13c6c9 R12: 0000000073bd4827 [ 510.505160][T15036] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 510.505171][T15036] ? rmd160_transform+0x1d/0x1e10 [ 510.505185][T15036] rmd160_update+0xd9/0x160 [ 510.505197][T15036] ? __pfx_rmd160_update+0x10/0x10 [ 510.505209][T15036] ? kasan_check_range+0x32/0x1b0 [ 510.505228][T15036] crypto_shash_finup+0x459/0x6d0 [ 510.505242][T15036] shash_ahash_update+0x19a/0x240 [ 510.505261][T15036] ? __pfx_shash_ahash_update+0x10/0x10 [ 510.505278][T15036] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 510.505292][T15036] ? __pfx_unpin_user_page+0x10/0x10 [ 510.505307][T15036] crypto_ahash_update+0x111/0x850 [ 510.505326][T15036] hash_sendmsg+0x2a9/0xfa0 [ 510.505342][T15036] ____sys_sendmsg+0xa98/0xc70 [ 510.505361][T15036] ? __pfx_____sys_sendmsg+0x10/0x10 [ 510.505376][T15036] ? get_compat_msghdr+0x11a/0x170 [ 510.505392][T15036] ___sys_sendmsg+0x134/0x1d0 [ 510.505405][T15036] ? __pfx____sys_sendmsg+0x10/0x10 [ 510.505421][T15036] ? find_held_lock+0x2b/0x80 [ 510.505436][T15036] __sys_sendmsg+0x16d/0x220 [ 510.505448][T15036] ? __pfx___sys_sendmsg+0x10/0x10 [ 510.505464][T15036] ? rcu_is_watching+0x12/0xc0 [ 510.505478][T15036] __do_fast_syscall_32+0x7c/0x300 [ 510.505491][T15036] do_fast_syscall_32+0x32/0x80 [ 510.505504][T15036] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 510.505518][T15036] RIP: 0023:0xf70ed579 [ 510.505526][T15036] Code: Unable to access opcode bytes at 0xf70ed54f. [ 510.505531][T15036] RSP: 002b:00000000f54bc55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 510.505541][T15036] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080008dc0 [ 510.505548][T15036] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 510.505555][T15036] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 510.505561][T15036] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 510.505567][T15036] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 510.505578][T15036] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 510.975938][T15036] CPU: 0 UID: 0 PID: 15036 Comm: syz.5.2366 Not tainted syzkaller #0 PREEMPT(full) [ 510.975957][T15036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 510.975966][T15036] Call Trace: [ 510.975973][T15036] [ 510.975979][T15036] dump_stack_lvl+0x116/0x1f0 [ 510.976001][T15036] should_fail_ex+0x512/0x640 [ 510.976022][T15036] strncpy_from_user+0x3b/0x2e0 [ 510.976039][T15036] strncpy_from_user_nofault+0x7f/0x180 [ 510.976057][T15036] bpf_probe_read_user_str+0x26/0x70 [ 510.976079][T15036] bpf_prog_4049cf28f0ebfcec+0x64/0x6c [ 510.976092][T15036] bpf_trace_run2+0x236/0x590 [ 510.976115][T15036] ? __pfx_bpf_trace_run2+0x10/0x10 [ 510.976138][T15036] ? __lock_acquire+0xb97/0x1ce0 [ 510.976161][T15036] __bpf_trace_tlb_flush+0xd1/0x110 [ 510.976180][T15036] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 510.976200][T15036] ? find_held_lock+0x2b/0x80 [ 510.976214][T15036] ? __schedule+0x1861/0x5de0 [ 510.976229][T15036] trace_tlb_flush+0xe4/0x160 [ 510.976249][T15036] switch_mm_irqs_off+0x2b1/0x7f0 [ 510.976271][T15036] __schedule+0xf70/0x5de0 [ 510.976284][T15036] ? sanity_check_pinned_pages+0x23/0x11d0 [ 510.976309][T15036] ? __pfx___schedule+0x10/0x10 [ 510.976326][T15036] ? mark_held_locks+0x49/0x80 [ 510.976345][T15036] preempt_schedule_irq+0x51/0x90 [ 510.976360][T15036] irqentry_exit+0x36/0x90 [ 510.976375][T15036] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 510.976392][T15036] RIP: 0010:rmd160_transform+0xa10/0x1e10 [ 510.976409][T15036] Code: 8d 9c 3b a1 eb d9 6e 41 f7 d2 45 09 da 45 31 e2 41 01 da 44 89 cb 45 89 d9 41 c1 c3 0a 41 c1 c2 0f 41 f7 d1 c1 c3 0a 41 01 ea <42> 8d ac 05 a1 eb d9 6e 44 8b 44 24 48 45 09 d1 41 31 d9 41 01 e9 [ 510.976423][T15036] RSP: 0018:ffffc900039c76c8 EFLAGS: 00000202 [ 510.976436][T15036] RAX: ffff888065cd3b50 RBX: 00000000a30d9ee5 RCX: 0000000000000000 [ 510.976445][T15036] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 510.976454][T15036] RBP: 00000000601cf1b1 R08: 0000000000000000 R09: 000000004d84fb0e [ 510.976463][T15036] R10: 0000000071a63a46 R11: 00000000ec13c6c9 R12: 0000000073bd4827 [ 510.976471][T15036] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 510.976487][T15036] ? rmd160_transform+0x1d/0x1e10 [ 510.976506][T15036] rmd160_update+0xd9/0x160 [ 510.976521][T15036] ? __pfx_rmd160_update+0x10/0x10 [ 510.976537][T15036] ? kasan_check_range+0x32/0x1b0 [ 510.976561][T15036] crypto_shash_finup+0x459/0x6d0 [ 510.976579][T15036] shash_ahash_update+0x19a/0x240 [ 510.976601][T15036] ? __pfx_shash_ahash_update+0x10/0x10 [ 510.976623][T15036] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 510.976640][T15036] ? __pfx_unpin_user_page+0x10/0x10 [ 510.976660][T15036] crypto_ahash_update+0x111/0x850 [ 510.976684][T15036] hash_sendmsg+0x2a9/0xfa0 [ 510.976706][T15036] ____sys_sendmsg+0xa98/0xc70 [ 510.976728][T15036] ? __pfx_____sys_sendmsg+0x10/0x10 [ 510.976748][T15036] ? get_compat_msghdr+0x11a/0x170 [ 510.976768][T15036] ___sys_sendmsg+0x134/0x1d0 [ 510.976784][T15036] ? __pfx____sys_sendmsg+0x10/0x10 [ 510.976809][T15036] ? find_held_lock+0x2b/0x80 [ 510.976828][T15036] __sys_sendmsg+0x16d/0x220 [ 510.976844][T15036] ? __pfx___sys_sendmsg+0x10/0x10 [ 510.976864][T15036] ? rcu_is_watching+0x12/0xc0 [ 510.976882][T15036] __do_fast_syscall_32+0x7c/0x300 [ 510.976900][T15036] do_fast_syscall_32+0x32/0x80 [ 510.976917][T15036] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 510.976935][T15036] RIP: 0023:0xf70ed579 [ 510.976945][T15036] Code: Unable to access opcode bytes at 0xf70ed54f. [ 510.976951][T15036] RSP: 002b:00000000f54bc55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 510.976964][T15036] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080008dc0 [ 510.976973][T15036] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 510.976982][T15036] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 510.976990][T15036] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 510.976999][T15036] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 510.977012][T15036] [ 511.203213][ T40] audit: type=1326 audit(1759905407.423:4870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15028 comm="syz.2.2365" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7fc00000 [ 511.543099][ T1133] vhci_hcd: vhci_device speed not set [ 511.675322][ T1149] hsr_slave_0: left promiscuous mode [ 511.677332][ T1149] hsr_slave_1: left promiscuous mode [ 511.683343][ T1149] pim6reg (unregistering): left allmulticast mode [ 513.469722][ T6015] vhci_hcd: vhci_device speed not set [ 513.683210][ T1149] IPVS: stop unused estimator thread 0... [ 513.877612][ T1149] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.964083][ T1149] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.001991][ T1149] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.094906][ T1149] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.190489][ T1149] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.256301][ T1149] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.322600][ T1149] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.403146][ T1149] bridge0: port 1(netdevsim0) entered disabled state [ 514.407483][ T1149] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 514.411217][ T1149] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 514.414635][ T1149] bridge0: port 1(netdevsim0) entered disabled state [ 514.418871][ T1149] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.495687][ T1149] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.582996][ T1149] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.628021][ T1149] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.684861][ T1149] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.778270][ T1149] bridge_slave_1: left allmulticast mode [ 514.780783][ T1149] bridge_slave_1: left promiscuous mode [ 514.783864][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.789444][ T1149] bridge_slave_0: left allmulticast mode [ 514.791438][ T1149] bridge_slave_0: left promiscuous mode [ 514.793466][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.799679][ T1149] bridge_slave_1: left allmulticast mode [ 514.802057][ T1149] bridge_slave_1: left promiscuous mode [ 514.804480][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.808301][ T1149] bridge_slave_0: left allmulticast mode [ 514.810656][ T1149] bridge_slave_0: left promiscuous mode [ 514.812731][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.817051][ T1149] bridge_slave_1: left allmulticast mode [ 514.820374][ T1149] bridge_slave_1: left promiscuous mode [ 514.822357][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.825834][ T1149] bridge_slave_0: left allmulticast mode [ 514.827992][ T1149] bridge_slave_0: left promiscuous mode [ 514.831557][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.005487][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.009428][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.013269][ T1149] bond0 (unregistering): Released all slaves [ 515.113311][ T1149] bond1 (unregistering): Released all slaves [ 515.149511][ T1149] dvmrp8 (unregistering): left allmulticast mode [ 515.506336][ T1149] bond0 (unregistering): Released all slaves [ 515.510562][ T1149] bond1 (unregistering): (slave bond2): Releasing backup interface [ 515.513291][ T1149] bond1 (unregistering): Released all slaves [ 515.607624][ T1149] bond2 (unregistering): Released all slaves [ 515.709567][ T1149] bond3 (unregistering): Released all slaves [ 515.791425][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.795307][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.799307][ T1149] bond0 (unregistering): Released all slaves [ 515.891935][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.895805][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.900171][ T1149] bond0 (unregistering): Released all slaves [ 516.014738][ T1149] : left promiscuous mode [ 516.059666][ T1149] tipc: Left network mode [ 516.605092][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.609009][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.613964][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.617079][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.620621][ T1149] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 516.622959][ T1149] batman_adv: batadv0: Removing interface: ipvlan2 [ 516.628326][ T1149] hsr_slave_0: left promiscuous mode [ 516.631266][ T1149] hsr_slave_0: left promiscuous mode [ 516.633280][ T1149] hsr_slave_1: left promiscuous mode [ 516.635331][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.639816][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.645653][ T1149] hsr_slave_0: left promiscuous mode [ 516.648235][ T1149] hsr_slave_1: left promiscuous mode [ 516.650581][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.652968][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.656605][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.659754][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.667868][ T1149] veth1_macvtap: left promiscuous mode [ 516.669780][ T1149] veth0_macvtap: left promiscuous mode [ 516.672185][ T1149] veth1_vlan: left promiscuous mode [ 516.674025][ T1149] veth0_vlan: left promiscuous mode [ 516.677034][ T1149] veth1_macvtap: left promiscuous mode [ 516.679469][ T1149] veth0_macvtap: left promiscuous mode [ 516.681673][ T1149] veth1_vlan: left promiscuous mode [ 516.683439][ T1149] veth0_vlan: left promiscuous mode [ 516.687521][ T1149] veth1_macvtap: left promiscuous mode [ 516.689381][ T1149] veth0_macvtap: left promiscuous mode [ 516.691491][ T1149] veth1_vlan: left promiscuous mode [ 516.693517][ T1149] veth0_vlan: left promiscuous mode [ 516.963634][ T1149] team0 (unregistering): Port device team_slave_1 removed [ 517.027307][ T1149] team0 (unregistering): Port device team_slave_0 removed [ 517.774935][ T1149] team0 (unregistering): Port device team_slave_1 removed [ 517.825418][ T1149] team0 (unregistering): Port device team_slave_0 removed [ 518.199899][ T1149] team0 (unregistering): Port device team_slave_1 removed [ 518.246841][ T1149] team0 (unregistering): Port device team_slave_0 removed [ 519.849329][ T1149] IPVS: stop unused estimator thread 0... VM DIAGNOSIS: 06:32:30 Registers: info registers vcpu 0 CPU#0 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff852ca3d5 RDI=ffffffff9adeae20 RBP=ffffffff9adeade0 RSP=ffffc900039c6cb0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff9adeade0 R15=ffffffff852ca370 RIP=ffffffff852ca3ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977e7000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000064cf5000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000002e400000000 0000000500000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff816a6146 RDX=ffff88801fe8a480 RSI=ffffffff816a917c RDI=0000000000000000 RBP=ffff88802b23a4c0 RSP=ffffc9000d4cf788 R8 =0000000000000000 R9 =0000000000000003 R10=0000000000000003 R11=0000000000000000 R12=0000000000000003 R13=0000000000000003 R14=ffff88802b33b400 R15=ffffed1005647498 RIP=ffffffff816a917d RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978e7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080383000 CR3=0000000064cd1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ae400000 Opmask01=0000000000003fff Opmask02=00000000bfffbfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 524d0b8776f405f1 cf39f8c0bb7d1157 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1af1daf3061f01f5 59f374f970652a16 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fc964b6a4d5a0893 11bd392de4711eae ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c365e4adf59f3869 94f682021642b0bd ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000008088c0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3200800112008001 365560a122008001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000001 365894ff00024042 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3654692300000001 600080013654146b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3b00000196000000 36586c1500000001 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f90025dacf2f32a 05e58c70447ba3da ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 34512542454b06b0 62425902b4caf31d ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 70002f74656e2f73 73616c632f737973 2f002f74656e2f73 79732f636f72702f ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ead4a3b6b0 0000000000000000 300000303d73656d 616e66692e74656e ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d7d49e8b8d 0000000000000000 0d00000d004e5850 5c535b5413495853 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6474656e0001000e 803e002c0000006d 697376656474656e 0039000e0000306d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8041000400000003 000300080000306d 697376656474656e 0002000f0000006d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 697376656474656e 0001000e803e002c 0000006d69737665 6474656e0039000e ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000306d69737665 6474656e0038000f 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000e002400000000 0008000500000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3620206461626520 0a32642032202032 2036206465622064 0a31320000336e20 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000008 RCX=000000000000003b RDX=1ffff92000706e65 RSI=0000000000000008 RDI=0000000000000007 RBP=ffffc90003837320 RSP=ffffc90003837190 R8 =0000000000000007 R9 =0000000000000040 R10=000000000000003b R11=0000000000000000 R12=000000000000001f R13=ffffc90003837260 R14=ffff888023ec0239 R15=000000000000092f RIP=ffffffff84b0b08b RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f78df73f300 ffffffff 00c00000 GS =0000 ffff8880979e7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055f03991e000 CR3=000000004a4f5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000003000000012 0004000000080024 0000000000280034 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000946 0000001800000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03e6020800060800 040800060170f638 000007cd0000001b 0000000100000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0611a80300001118 0000000000000000 0000000000000018 2808118003118004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2990031808002988 0306080029800301 9008001980020008 00060002a8ff0000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000000000000 00171a0819800308 8002000800040175 e6006e6572646c69 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 68635f726f665f64 69702f736e01ffff ffffffffffffd708 0880030808000201 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d8030a080003d003 08080003c8030008 0003c00300000000 0000000000000000 ZMM25=602e29b3602e29b3 602e29b3602e29b3 602e29b3602e29b3 602e29b3602e29b3 602e29b3602e29b3 602e29b3602e29b3 602e29b3602e29b3 602e29b3602e29b3 ZMM26=2580a41a2580a41a 2580a41a2580a41a 2580a41a2580a41a 2580a41a2580a41a 2580a41a2580a41a 2580a41a2580a41a 2580a41a2580a41a 2580a41a2580a41a ZMM27=7128cbaf7128cbaf 7128cbaf7128cbaf 7128cbaf7128cbaf 7128cbaf7128cbaf 7128cbaf7128cbaf 7128cbaf7128cbaf 7128cbaf7128cbaf 7128cbaf7128cbaf ZMM28=000000300000002f 0000002e0000002d 0000002c0000002b 0000002a00000029 0000002800000027 0000002600000025 0000002400000023 0000002200000021 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=b4100000b4100000 b4100000b4100000 b4100000b4100000 b4100000b4100000 b4100000b4100000 b4100000b4100000 b4100000b4100000 b4100000b4100000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88802b242540 RCX=ffffffff81afd021 RDX=ffff8880249c4900 RSI=ffffffff81afcffb RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900038a7650 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=ffffed10056484a9 R14=0000000000000001 R15=0000000000000000 RIP=ffffffff81afcffd RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097ae7000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000005dd2c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000024000000000 0000000500000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000