last executing test programs: 48.410362424s ago: executing program 0 (id=725): socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x8, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(r3, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="a787000000ff000000000b00000404000180", @ANYRESHEX=r1, @ANYRESOCT], 0x18}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) removexattr(0x0, 0x0) sched_setaffinity(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000080)) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) set_mempolicy(0x2, &(0x7f0000000000)=0x3483, 0x3ff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x700, 0x0) 46.983483397s ago: executing program 0 (id=730): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x4, 0x2) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 46.446969457s ago: executing program 0 (id=734): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) setreuid(0x0, 0x0) setreuid(0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r0, &(0x7f0000000980)=[{0x0, 0x1e}, {&(0x7f0000000500)="be81e1310fb465f31a42f6efa58772d291c57be2782f6ff63ea3517e50771580447f7d195ee15e186027d518b2c77a051895fece1dc014c33d6928ab0376cf4077399b51451472f53be50af6897bc0fa353cad9156d19de3665191fdf17a2f07f4286cea5c10fbb81feb85e406524a47b1978139eaa8", 0x76}, {0x0}], 0x3, 0x5, 0xa, 0x14) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000001c40)=@req={0xc, 0x5, 0x8000, 0x4}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r2, &(0x7f0000001b80)=[{{&(0x7f0000000700)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0xe, @loopback, 0x9}}, 0x80, &(0x7f0000000280)=[{&(0x7f00000007c0)="efb926adc88a48b9ef327178387c0ca241de5c7cf882682e5ee5a0ed586783a1571219eaefcac10360452bb1b80dffeb1b9d1ee1936acb5c534f4b03439b70369161a8e31f81a5d069c8e7073806e9bd939273ff358246756d89665e4a17c454427faaec2ce18c0169b6f36291c2439a62d9a17363891186b5a71a8f8969a5dcc13dfff4639d12b2d2ff68851ca0eaef45c68eb0cc762951fb1881076321711520fdb1b6896c32026aa303469ee1850d95b3f124d00b9d3f91b0e842b58fb2b05acb5532905c0bc3a8", 0xc9}, {&(0x7f0000001400)="0f371c4be516633e6e4f63437708a38d3786e2b752fe91ed8a2a647954a51994a7751c70ab38b944fc91e6a1a7c70ec60705df274ce9f6d22bf4c3301686bf8fae0ba041c411ef06e399309a3c1d2b0b4e0045a8ddd058a55858d3f7201802e9a17e1f152cb0e88043a6ec4240ab1a0ceabdfe7e1aa826d60d0dfa4c4d6fceb9aa374b37", 0x84}, {&(0x7f0000000440)="37c896ce951413506beeef8f3edae476", 0x10}, {&(0x7f0000000a80)="df061bff2a16540b672c3b8432839e10f2229db675da4e2dd48c9a3f9070cf44f6295e96ec62ac8eb48b59268b0dc86acda90d1c78092a7c1b62ff91e709670f69154ebc9063c3", 0x47}], 0x4, &(0x7f0000000b00)=[{0xac, 0x117, 0x0, "0a4e9b2206aa6e8b58a8a6f62b6d7527a6e4679178a478c70cb70f86cde5bafb35b86ebea9b6c78a4a1ae49772619785939b393cfa9b0d343d910b0597c825ddcb4965b8fb04b7d533eec09885c84e90a97dcd7784d08de3d1685a2e589f40c5503b410c12aad5d43f154f9bce887d057c5f4b49361a8a03e942ff710aa63c65f6f44fb52329e934623ff04df33010711096d8396a54b5cd89640a3f5c36"}], 0xac}}, {{&(0x7f0000000bc0)=@l2={0x1f, 0xd5c5, @none, 0x4, 0x1}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000c40)="8fdda82531ccb838164027054a1d189c4efb63426da0fa114a84bf36347e5f12159fadbe1166cef24c692246fe595b0d543dd7570f6c678fce7ebf9b0cebbec89669782008b14d53a75d98a2f9c414a4ed339e9bc07872ec44e70fd921fb0e", 0x5f}, {&(0x7f00000003c0)="7ba65eb18a151296292d", 0xa}, {&(0x7f0000000cc0)="eef05db22707d549dc6c4ad96c6f603f33bc4d85889bb9ff790aa031ec2e1f6c18d17c23bbedd97db4907ba3300d2e9514e0f6966f9154447b2cc168f7b250b84e72bf7a4639bcb8fd09ce250807d5b3c7d5c42486b71a6e9469bacd9bac799293a7777a8653c2f93af6e37f79199d7d8e", 0x71}, {&(0x7f0000000d40)="666a63db482b54936a200cfc7cdc4f6b101e838220f1f9765c789aa1798d464c38408ce8b58e48cff7797cbddb8b9b2ca96ad9a98890bc997fd8423d309f389de26182cdabfacac7662277bf0a2c228a6bbd8f807719237730414aa6cbdc0ee70ea24629b19505465569a2b9980f766f932033c8a25f0f8ad3262b48b3b5e0553b513653c01a1873aa18b26bdd4f9434d93c4a1437a4c6218353ac363959be06c04380df735888acd8fd566aa7432663d4452b1dc2afd3f8829d4afc1900c5220ba4717888032b9daadb7cbaedbd87ecc2dd067ceb5f9453e09c2b18c5058145472cf3b7edb678", 0xe7}, {&(0x7f0000000e40)="ce60fee2ba5b96e74f9f022fa2f7c836b9adcf24b27c124e79a0c4845c9c7b7ed173b17c0e8f6c2fb8f385c5f9cc173aaeefcee5367dc4b05e48d25b330689064d6fe08edce11bc1be916515da910511047fa71e8a0c374fa63ea07ddf72bda9c2769f709085901272f4dd42d20432bbd744496f3661e6a2f48aa7c280d7e1ba34195d6909ad333347e56b9ef34e28d627014876b79ba160d96cdee28614d5f03ec897af1923c3dc4c489d44da4ea72978c4817dfd53453f0b3d60a1c60d", 0xbe}, {&(0x7f0000000f00)="ba8a773015162caa10adf21723b9c4bc1e0010bc476c85927ec4204776f247b2eee94c9e60e384165ebc6f1304bea5e98758f8392e4b73671c8f8189c173090e190823b8a84c1c75d024388fe4fc30fe021c4b6842f64fe6c8aaa2618e25e8a2d27e4b476e6aeccc2e303f288caaa913e654a7137e21c1743320462df17f68f3fc628d5f7db680685c52a1813b0d5fba1544a5b36399353052fa1fe2753e7fa397271f981060f949e13584fd598c5a", 0xaf}], 0x6}}, {{&(0x7f0000000fc0)=@isdn={0x22, 0x4, 0xe, 0x4, 0x8}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001040)="dc4f7c5baea6a3b642eebf1bfc74b36debc8a494028ce4a260057a0a62fc9b7b06ed172d6f67d04cfb8546aaf742680c40701fe982f1a30769", 0x39}, {&(0x7f0000001080)="83568418f64e6a837a97985f3fb85d565ca5b3396d8d5b7d552e76804f67a04d34ddd3ab1b9c1e8f65a4caa2dab21ad7d679d4e2be1d7011c6d7ec2c136b95889fc056a20c141f404772c62a78ecccfbe928ace468e2539aa64643af3c87226ca9777e9be32b6fe4bcd3446e5313dc6454315cddd367266301a4dc94d55c283e5f93b4990e8daa80b802e3d2a6aaaa375612ca2e51fadcbfb8f8ff00494ae8d532829c17abacf72c73bbda9cab5fd9990d65922178d75dced7cdd226c426a8", 0xbf}, {&(0x7f0000001140)="feee77d32e853957169ff6deb3f771afa7c2e39dec3c3d8384", 0x19}, {&(0x7f0000001180)="5180114f4573fccd243b2117f0d9b0acb9aadfdc0d39afaf8dcddff856dc0ef73a873a146d3efb486432f22704ee0b055f6745d75bfab18383e0e3a0469272ff43c2fa99026243b45cc6cce61221b0400c2c1764e8800cdbe72715beed65b6fe62751b53088ae795359243d540715277d3e9408663c2e9c4dacbbfa3dc40a597dca9dc40d09d2c9e729bb6028a1bc11aa031cabff48e2bde5ecd0871a451d7293a20c3446115fdce880862a34d", 0xad}], 0x4}}, {{0x0, 0x0, &(0x7f00000013c0), 0x0, &(0x7f0000001c80)=ANY=[@ANYBLOB="0c00000017010000030000ed40cb1e667eb610b7b4cb7d2800840000000e01000006000000d163042384298b2d59e33650053379ecbe09a308730a917f1c9f251fb49cc91905db28fd70c757ad770b9cf02d565be3fb7f39262a6086f186ece8ff13b6ad6fc3fa6fbd549c9828d723d374e63f7f7857b64ccfc844e591e156ab30e2393106dc6782e9b89f717b1f142025f765872b6d07f38150000000c40000001601000000080000703273b954c88baf429749634a6ead086be7e2a30f0c06bbdb81982a13d9009b48f7c4566582e6d5cc1a8425082a474d3ec86ae6e831b94b668fdc0d030b4d3b394956a67a4001c9532f34b14c2211abb05694e0beef1c5f78f1125571c08724580233c83b66e2ecf6e76c94e258c186110255ce251b061830ea14411d5b5ae99743ed49bba38b8747134f0724a2da2c46d910c967e6e3d9103730f2b75627aacf5ee3ba36a5e8f1fff2350c500000000e010000030000007e87c6d9d89f42e5c609f30071b391db8c3362d534ec60ff8e0005029ff3b345ee7ef4c6de70be5a0c72dad263b85b3c6514f533c045cbd2226efefcb205005481a0000080000000c35e82971e50f9df0eaedca80000000002000000d281afcac02aed7e375533373c4c6fb2af8dc59d11c08076646435fc952c5e9426721ce2efb001cb3fce22fd766e9328ed1cf15245955f1c6e60f084776c6136930fc41c4121ea9be5ca7c6d5db10560c0c979a3410adee3437992cfd9bcbf9279728283bfb574cb3c66dbd0bbf5e002e590983457a02b7ec9ca3e1c2ece3cf4bcd6e80000001401000001000000ba7bf9bd634c7203439aacd9bc2d6753a6983add56e77328fc0839747f8e7889c0bdc1e4d6044bc4fc913709e12493c98d799c8b6d32393b1bc382acad790fdebf5aeceadd86d111e88106d264ef25eb0bb77f69d2d4b8b5030000002e1722b105c279f1c1a996bcb8f90f73e27e95dd0ea93bf4d83ee158ad2d6ba2abcbe2bb0079cae1f8326c5d7fe1270dfee424844166214145a9397e7f9d165f2c560ab032af3227e57be9e188c55bf5468ba8c50f98c62d4f8364d868a03dbaed361d9b66f8af1889f845c7e5b52a65c29e529bf75d4b81c7344eb55c40000081f167d01af2b0f317c1ac360d11943dd45b6b13a5e9a8831fc51624780adefe5ec09e"], 0x30c}}, {{&(0x7f0000001740)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x80, &(0x7f00000009c0)}}], 0x5, 0x9200000020000044) recvmmsg$unix(r2, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000056c0)=""/242, 0xf2}], 0x1}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000640)=""/181, 0xb5}, {&(0x7f0000004280)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000780)=""/11, 0xb}, {&(0x7f0000005280)=""/214, 0xd6}, {&(0x7f0000005600)=""/186, 0xba}, {&(0x7f00000002c0)=""/22, 0x16}, {&(0x7f0000005380)=""/172, 0xac}, {&(0x7f0000005440)=""/226, 0xe2}, {&(0x7f0000005540)=""/175, 0xaf}], 0x7}}, {{&(0x7f0000000900)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f00000009c0)=""/79, 0x4f}], 0x1}}, {{0x0, 0x0, &(0x7f00000018c0), 0x0, &(0x7f0000004100)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x90}}, {{&(0x7f0000001980), 0x6e, &(0x7f0000001a80)=[{&(0x7f0000001a00)=""/18, 0x12}, {&(0x7f0000001a40)=""/36, 0x24}], 0x2, &(0x7f0000001ac0)=[@rights={{0xc}}], 0xc}}], 0x6, 0x41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000140)) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = syz_io_uring_setup(0x24fc, &(0x7f0000000080)={0x0, 0x0, 0x4000, 0x2}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_UNLINKAT={0x24, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x1}) io_uring_enter(r7, 0x2d3e, 0x0, 0x56, 0x0, 0xffffffffffffff59) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000080)={[{0x9, 0x3, 0x5, 0x1c, 0x8, 0x2, 0x4, 0x2, 0xfa, 0x2, 0x81, 0xc, 0x8000000000002000}, {0x9, 0xb90a, 0x8, 0xc0, 0x2, 0x6, 0x6, 0x4, 0x4, 0xff, 0x0, 0x7d}, {0x7, 0x7, 0x6, 0x8, 0x2, 0x6, 0x8, 0xb, 0xfd, 0x0, 0x56, 0x3, 0x100}]}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000005c0)={[0xfffffffffffffffd, 0x0, 0x100000024c8, 0x40, 0x0, 0xffffffffffffffff, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x9, 0x2, 0x0, 0x81000000000002, 0x7fffffff], 0x80a0000, 0x100000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 45.890860821s ago: executing program 0 (id=736): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x7, 0x1, 0x306b, 0xb1, {{0x5, 0x4, 0x1, 0x39, 0x14, 0x65, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000340)='L', 0x1}], 0x1, 0x87fffff, 0x7, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x7, 0x1, 0x306b, 0xb1, {{0x5, 0x4, 0x1, 0x39, 0x14, 0x65, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}}) (async) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r0) (async) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async) chdir(&(0x7f0000000300)='./file0\x00') (async) creat(&(0x7f0000000300)='./file0\x00', 0x0) (async) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000340)='L', 0x1}], 0x1, 0x87fffff, 0x7, 0x4) (async) 45.710918225s ago: executing program 0 (id=737): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[]) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0xffffffffffffffff, {0x42, 0x0, 0x5}}, 0x10) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) (async) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) r4 = open(&(0x7f00000001c0)='./file1\x00', 0x0, 0x113) r5 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r5, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, r4, 0x0) 45.254450926s ago: executing program 0 (id=740): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0, 0x0, 0x5}, 0x18) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x0, 0x9200000000000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) vmsplice(r3, 0x0, 0x0, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x50) shutdown(0xffffffffffffffff, 0x1) shutdown(0xffffffffffffffff, 0x0) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x5208}], 0x1, 0x800) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xd8, 0x1403, 0x200, 0x70bd28, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv_slave_1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dvmrp0\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x5}, 0x20040801) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000100)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002c40)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000180)) r6 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) 44.934345698s ago: executing program 32 (id=740): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0, 0x0, 0x5}, 0x18) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x0, 0x9200000000000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) vmsplice(r3, 0x0, 0x0, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x50) shutdown(0xffffffffffffffff, 0x1) shutdown(0xffffffffffffffff, 0x0) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x5208}], 0x1, 0x800) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xd8, 0x1403, 0x200, 0x70bd28, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv_slave_1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dvmrp0\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x5}, 0x20040801) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000100)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002c40)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000180)) r6 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) 7.372098431s ago: executing program 4 (id=942): userfaultfd(0x80001) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0xc4, 0x44, 0x107, 0xfffffffc, 0x0, {0x4, 0x7c}, [@generic="8d197d6f08b02d77c9e65e7c2472f821bf41ed0295975f481e3fbce333d7599da504cbae0594dcf7ea234d74e3b873d13607f01deb6879c08dfb113b8d6d2995f5a2ed51ff964c2b8ca0db4e94834275cb1ad0492f8b11743baac0fa4b3ba48af9b8eab17d06e04154fb8c746427cc079ec7b55f464182ce0b687294bab0b16bacdfaeaac62bf6790f606bb70657e9a2a77caf3a9c771d20131a480525565a24723bb62c72f949d2eadf99893780a4"]}, 0xc4}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000005000000000800040001000000", 0x24) 5.193242039s ago: executing program 4 (id=954): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000300)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x8, 0x4, 0x0, 0x3e, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local, {[@timestamp={0x44, 0xc, 0x67, 0x0, 0x0, [0x4, 0x3]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @eol, @generic={0x0, 0x5, "d58838"}]}}}}}}, 0x4e) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000380)={{0x3, 0x81}, 'port0\x00', 0x41, 0x20010, 0x2, 0x1ff, 0x8000, 0xfffffffe, 0x8, 0x0, 0x4, 0xf4}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000389000/0x4000)=nil) syz_emit_ethernet(0x6a, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500005c0000000000019078ac1e0001ac1414aa05009078e00000e0400000000000000000110000ac14"], 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000c80), 0x7, 0xc82) ioctl$VIDIOC_SUBDEV_G_FMT(r4, 0xc0585604, &(0x7f0000000cc0)={0x0, 0x0, {0xfffff982, 0x8, 0x300f, 0x3, 0x7, 0x0, 0x2, 0x4}}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x4}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000563000/0x2000)=nil) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x100004, 0x220104, 0xe2a3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0, r5}, 0x38) 5.160856892s ago: executing program 2 (id=955): creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) (async) socket(0x0, 0x4, 0x2f82) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x2000480c) (async) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) (async) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)) (async) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f000042d000/0x1000)=nil, 0x1000}, 0x3}) (async) close(r4) (async) openat$vga_arbiter(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xdc8fcdd97aa0993e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r6, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) (async) r7 = socket(0xa, 0x3, 0xff) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r7) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r7, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)={0x230, r8, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xa0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x9c, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6c04}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x20, 0x2, '/proc/sys/vm/compact_memory\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '\'/\'%:-%{!\\:\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '/dev/vga_arbiter\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x138, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8c, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '.]$@-\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0xfffffffffffffdc3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '\'/\'%:\xeb\x05}\a\x15\xdf\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x9f, 0x4, "406b0cff393a1968edb8d9d67c203990e6c45fada8f641efec8c6c7a30428dcc968b3fea4c007f128956daba37976d8ca5af94e3aa3e5325277ddc365079f6012cdda7d11e1fb6df131e67d3623f5fd6b76277680fb83e9c87ce7f2baedf9114c6e337d4f5447b6f4218f6ab4d450a86243a996696c74c6ca67c79d252e46f009facddcd179efb1d428fcaa2fbbc366e377603028cda2edaa485ec"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x10}, 0x14) (async) setsockopt$inet6_int(r7, 0x29, 0x11, &(0x7f0000000000)=0x47f, 0x4) getsockname$packet(r7, &(0x7f0000000040), &(0x7f0000000080)=0x14) (async) r9 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) openat$sysctl(0xffffff9c, &(0x7f0000000200)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) (async) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000433000/0x1000)=nil, 0x1000}, 0x1}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)) 4.703506886s ago: executing program 2 (id=957): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="01afc1fe00000f39281490d110"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f00000001c0)="11", 0x0, 0x0, 0x0, 0x800, r2}, 0x38) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x988, &(0x7f0000000280)={0x0, 0x9bee, 0x8, 0xfffffffd, 0x25d}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000340)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000000400)='V', 0x1}], 0x1}}], 0x2, 0x4000000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) brk(0x4) r8 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) preadv(r8, &(0x7f0000000080)=[{&(0x7f0000000100)=""/192, 0xc0}], 0x9, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000440)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6}}, &(0x7f00000003c0)=0xe4) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000540)=@rnullb, r9, &(0x7f0000000580)={0x2ce, 0x0, 0x1, 0x0, 0xf4e3, 0x7, 0x2, 0x9, 0x10}) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf, r7}, 0x20) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x5, 0x200000000005, 0x0, 0x5, 0x5}) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000140)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) pwritev(r10, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd06000040", 0x6}], 0x1, 0x0, 0x4) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r11, &(0x7f0000000040)="18000000010005", 0x7) socket$alg(0x26, 0x5, 0x0) 4.063063157s ago: executing program 1 (id=960): mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2a}, @mcast1, 0x1, 0x9, 0x0, 0x0, 0x3, 0x867100c0, r5}) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r6, 0x89b1, &(0x7f0000000280)={'gretap0\x00', @ifru_mtu=0x401}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, @private0={0xfc, 0x0, '\x00', 0x3}, 0x1, 0x6, 0x0, 0x100, 0x6, 0x580107, r5}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fanotify_init(0x200, 0x0) r7 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r7, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 3.864855188s ago: executing program 4 (id=962): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) socket(0x10, 0x2, 0x0) mlock2(&(0x7f0000be6000/0x12000)=nil, 0x12000, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x1104, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"db4c1421593cb4d3f8fe6094dc821bbbe06520701fc6de7b0349f34b0f8c556a9e9aff1355aab8d6da26d74608530f150f127f9e3f0a2f1fff0be9774c95d6c007c91903f78616596487bf50017c56b15385ab264cba5b168c62d971e67e6f3e73d60b5a8adbaaf2af8610c6a91c0a116f619adce4aa91d5a68faf8ee98693d32d8d8244381b5720ef596600e39491d216c22d0725904bab7d90fa8afb8fa04b707410aa300ef098609b4fa6dd77b1b7c321b1fc6356564ce3f90826be3a9a5be186ffc48eb13824e9dae77ed212a0f802074ff4f1725c4ad88cf5bbd36e3406bc59d96e82047631d8be9462ee7e54e5b2897c3fff38eabf67e1e160c2b5e18be06457844d89c9a606b7d25fbde713f4759da0bee1fabe3f71dcca63540f113a2b5edc4b327d1f9610377b97265d4aa875b4bc3c44bf8110d5df1beb1fe54794a0aa52dfc80df1caf7d812b4f1cdba1a6836b45ea2180d08439d411ce8e0755868cc839eaeac73e5d28f9f1990584038cf5fa6bee0c4095a27cc8c7b59519bf2a9bf1fedf54cc2dc6aea6c42c32de40c291e5f422f5c7792a08926af160fb379576dd81bac746232fb246817fc3248097914b75e83cc5eb518ce8fb643b34ca69c3b61f0d94e7db62dd480198d41e0862f1ec4429ab637569884a5ba446a0b09edfd986a2b3e15ee35bbd18610dad6271681ed240b0ffab9199b541013c0aadc36484da57511896c14776a41602aa1426edfbb828897d9c218b7936a0572840ebbc796e888a439b24e640324b511deb6ed0b2ce2f7567447826944b4f34101e492e8d20a2deda950e96e78f86d6d4c976f0c99041c94944309e6ce08d84a7c96677d570d9a57ec0506a4321d9e049b55be883ca3648c27772fc5dbaea5e6c2ded2ce72fb68989ae381fe1394cf6966ab04285d5ff8256bc2e85462b8d89aeeebd5432157c945b5dc1960d9282c6cc007fe029325d6078aef94d4954f956c71bcdf846f41392ebe0d3b289438d24ec4bc073617459a6b232445dd636a9f21140e14b162fd5ef1d626b0ff84884fd63d22cc1b05befb77ea937f3045cc15b125479b262c1e32fca75a5468423288c5776efee744b1fccb5e6d661d9d287cfa8582c96ea34a33c1bbc29c0035657da66a87150bbb885be5ee123e431fd793ea179a0fc77aaee66d874c0616cb32324826b36d0e27d14217ad1131cace3bae4ef82dfbc790e78de53a9bfbdb468bf0eb3ff134073b380858965de2d108862daf3fc6b49ad46f20832238aeaa5d010cf08e37938f0bb7bbeaa970c39ce9327a16fe07565708266ce9ef639bfa08538693b456228aa1c370d64ef9795b7cc208a2c528d381a042d149ed5c7f34ed26a7d5a4401b86434f054389e5dac7a4ee896e406d7b27240d925d478e0eb2202797832d3e2c74f4925ad58377b0d6ae9b97034f94"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r6 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./bus\x00', 0x511000, 0x81) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0xc0189436, &(0x7f0000000140)) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2010}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x29}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4080) 3.482920873s ago: executing program 1 (id=963): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) setreuid(0x0, 0x0) setreuid(0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r0, &(0x7f0000000980)=[{0x0, 0x1e}, {&(0x7f0000000500)="be81e1310fb465f31a42f6efa58772d291c57be2782f6ff63ea3517e50771580447f7d195ee15e186027d518b2c77a051895fece1dc014c33d6928ab0376cf4077399b51451472f53be50af6897bc0fa353cad9156d19de3665191fdf17a2f07f4286cea5c10fbb81feb85e406524a47b1978139eaa8", 0x76}, {0x0}], 0x3, 0x5, 0xa, 0x14) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000001c40)=@req={0xc, 0x5, 0x8000, 0x4}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r2, &(0x7f0000001b80)=[{{&(0x7f0000000700)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0xe, @loopback, 0x9}}, 0x80, &(0x7f0000000280)=[{&(0x7f00000007c0)="efb926adc88a48b9ef327178387c0ca241de5c7cf882682e5ee5a0ed586783a1571219eaefcac10360452bb1b80dffeb1b9d1ee1936acb5c534f4b03439b70369161a8e31f81a5d069c8e7073806e9bd939273ff358246756d89665e4a17c454427faaec2ce18c0169b6f36291c2439a62d9a17363891186b5a71a8f8969a5dcc13dfff4639d12b2d2ff68851ca0eaef45c68eb0cc762951fb1881076321711520fdb1b6896c32026aa303469ee1850d95b3f124d00b9d3f91b0e842b58fb2b05acb5532905c0bc3a8", 0xc9}, {&(0x7f0000001400)="0f371c4be516633e6e4f63437708a38d3786e2b752fe91ed8a2a647954a51994a7751c70ab38b944fc91e6a1a7c70ec60705df274ce9f6d22bf4c3301686bf8fae0ba041c411ef06e399309a3c1d2b0b4e0045a8ddd058a55858d3f7201802e9a17e1f152cb0e88043a6ec4240ab1a0ceabdfe7e1aa826d60d0dfa4c4d6fceb9aa374b37", 0x84}, {&(0x7f0000000440)="37c896ce951413506beeef8f3edae476", 0x10}, {&(0x7f0000000a80)="df061bff2a16540b672c3b8432839e10f2229db675da4e2dd48c9a3f9070cf44f6295e96ec62ac8eb48b59268b0dc86acda90d1c78092a7c1b62ff91e709670f69154ebc9063c3", 0x47}], 0x4, &(0x7f0000000b00)=[{0xac, 0x117, 0x0, "0a4e9b2206aa6e8b58a8a6f62b6d7527a6e4679178a478c70cb70f86cde5bafb35b86ebea9b6c78a4a1ae49772619785939b393cfa9b0d343d910b0597c825ddcb4965b8fb04b7d533eec09885c84e90a97dcd7784d08de3d1685a2e589f40c5503b410c12aad5d43f154f9bce887d057c5f4b49361a8a03e942ff710aa63c65f6f44fb52329e934623ff04df33010711096d8396a54b5cd89640a3f5c36"}], 0xac}}, {{&(0x7f0000000bc0)=@l2={0x1f, 0xd5c5, @none, 0x4, 0x1}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000c40)="8fdda82531ccb838164027054a1d189c4efb63426da0fa114a84bf36347e5f12159fadbe1166cef24c692246fe595b0d543dd7570f6c678fce7ebf9b0cebbec89669782008b14d53a75d98a2f9c414a4ed339e9bc07872ec44e70fd921fb0e", 0x5f}, {&(0x7f00000003c0)="7ba65eb18a151296292d", 0xa}, {&(0x7f0000000cc0)="eef05db22707d549dc6c4ad96c6f603f33bc4d85889bb9ff790aa031ec2e1f6c18d17c23bbedd97db4907ba3300d2e9514e0f6966f9154447b2cc168f7b250b84e72bf7a4639bcb8fd09ce250807d5b3c7d5c42486b71a6e9469bacd9bac799293a7777a8653c2f93af6e37f79199d7d8e", 0x71}, {&(0x7f0000000d40)="666a63db482b54936a200cfc7cdc4f6b101e838220f1f9765c789aa1798d464c38408ce8b58e48cff7797cbddb8b9b2ca96ad9a98890bc997fd8423d309f389de26182cdabfacac7662277bf0a2c228a6bbd8f807719237730414aa6cbdc0ee70ea24629b19505465569a2b9980f766f932033c8a25f0f8ad3262b48b3b5e0553b513653c01a1873aa18b26bdd4f9434d93c4a1437a4c6218353ac363959be06c04380df735888acd8fd566aa7432663d4452b1dc2afd3f8829d4afc1900c5220ba4717888032b9daadb7cbaedbd87ecc2dd067ceb5f9453e09c2b18c5058145472cf3b7edb678", 0xe7}, {&(0x7f0000000e40)="ce60fee2ba5b96e74f9f022fa2f7c836b9adcf24b27c124e79a0c4845c9c7b7ed173b17c0e8f6c2fb8f385c5f9cc173aaeefcee5367dc4b05e48d25b330689064d6fe08edce11bc1be916515da910511047fa71e8a0c374fa63ea07ddf72bda9c2769f709085901272f4dd42d20432bbd744496f3661e6a2f48aa7c280d7e1ba34195d6909ad333347e56b9ef34e28d627014876b79ba160d96cdee28614d5f03ec897af1923c3dc4c489d44da4ea72978c4817dfd53453f0b3d60a1c60d", 0xbe}, {&(0x7f0000000f00)="ba8a773015162caa10adf21723b9c4bc1e0010bc476c85927ec4204776f247b2eee94c9e60e384165ebc6f1304bea5e98758f8392e4b73671c8f8189c173090e190823b8a84c1c75d024388fe4fc30fe021c4b6842f64fe6c8aaa2618e25e8a2d27e4b476e6aeccc2e303f288caaa913e654a7137e21c1743320462df17f68f3fc628d5f7db680685c52a1813b0d5fba1544a5b36399353052fa1fe2753e7fa397271f981060f949e13584fd598c5a", 0xaf}], 0x6}}, {{&(0x7f0000000fc0)=@isdn={0x22, 0x4, 0xe, 0x4, 0x8}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001040)="dc4f7c5baea6a3b642eebf1bfc74b36debc8a494028ce4a260057a0a62fc9b7b06ed172d6f67d04cfb8546aaf742680c40701fe982f1a30769", 0x39}, {&(0x7f0000001080)="83568418f64e6a837a97985f3fb85d565ca5b3396d8d5b7d552e76804f67a04d34ddd3ab1b9c1e8f65a4caa2dab21ad7d679d4e2be1d7011c6d7ec2c136b95889fc056a20c141f404772c62a78ecccfbe928ace468e2539aa64643af3c87226ca9777e9be32b6fe4bcd3446e5313dc6454315cddd367266301a4dc94d55c283e5f93b4990e8daa80b802e3d2a6aaaa375612ca2e51fadcbfb8f8ff00494ae8d532829c17abacf72c73bbda9cab5fd9990d65922178d75dced7cdd226c426a8", 0xbf}, {&(0x7f0000001140)="feee77d32e853957169ff6deb3f771afa7c2e39dec3c3d8384", 0x19}, {&(0x7f0000001180)="5180114f4573fccd243b2117f0d9b0acb9aadfdc0d39afaf8dcddff856dc0ef73a873a146d3efb486432f22704ee0b055f6745d75bfab18383e0e3a0469272ff43c2fa99026243b45cc6cce61221b0400c2c1764e8800cdbe72715beed65b6fe62751b53088ae795359243d540715277d3e9408663c2e9c4dacbbfa3dc40a597dca9dc40d09d2c9e729bb6028a1bc11aa031cabff48e2bde5ecd0871a451d7293a20c3446115fdce880862a34d", 0xad}], 0x4}}, {{0x0, 0x0, &(0x7f00000013c0), 0x0, &(0x7f0000001c80)=ANY=[@ANYBLOB="0c00000017010000030000ed40cb1e667eb610b7b4cb7d2800840000000e01000006000000d163042384298b2d59e33650053379ecbe09a308730a917f1c9f251fb49cc91905db28fd70c757ad770b9cf02d565be3fb7f39262a6086f186ece8ff13b6ad6fc3fa6fbd549c9828d723d374e63f7f7857b64ccfc844e591e156ab30e2393106dc6782e9b89f717b1f142025f765872b6d07f38150000000c40000001601000000080000703273b954c88baf429749634a6ead086be7e2a30f0c06bbdb81982a13d9009b48f7c4566582e6d5cc1a8425082a474d3ec86ae6e831b94b668fdc0d030b4d3b394956a67a4001c9532f34b14c2211abb05694e0beef1c5f78f1125571c08724580233c83b66e2ecf6e76c94e258c186110255ce251b061830ea14411d5b5ae99743ed49bba38b8747134f0724a2da2c46d910c967e6e3d9103730f2b75627aacf5ee3ba36a5e8f1fff2350c500000000e010000030000007e87c6d9d89f42e5c609f30071b391db8c3362d534ec60ff8e0005029ff3b345ee7ef4c6de70be5a0c72dad263b85b3c6514f533c045cbd2226efefcb205005481a0000080000000c35e82971e50f9df0eaedca80000000002000000d281afcac02aed7e375533373c4c6fb2af8dc59d11c08076646435fc952c5e9426721ce2efb001cb3fce22fd766e9328ed1cf15245955f1c6e60f084776c6136930fc41c4121ea9be5ca7c6d5db10560c0c979a3410adee3437992cfd9bcbf9279728283bfb574cb3c66dbd0bbf5e002e590983457a02b7ec9ca3e1c2ece3cf4bcd6e80000001401000001000000ba7bf9bd634c7203439aacd9bc2d6753a6983add56e77328fc0839747f8e7889c0bdc1e4d6044bc4fc913709e12493c98d799c8b6d32393b1bc382acad790fdebf5aeceadd86d111e88106d264ef25eb0bb77f69d2d4b8b5030000002e1722b105c279f1c1a996bcb8f90f73e27e95dd0ea93bf4d83ee158ad2d6ba2abcbe2bb0079cae1f8326c5d7fe1270dfee424844166214145a9397e7f9d165f2c560ab032af3227e57be9e188c55bf5468ba8c50f98c62d4f8364d868a03dbaed361d9b66f8af1889f845c7e5b52a65c29e529bf75d4b81c7344eb55c40000081f167d01af2b0f317c1ac360d11943dd45b6b13a5e9a8831fc51624780adefe5ec09e"], 0x30c}}, {{&(0x7f0000001740)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x80, &(0x7f00000009c0)}}], 0x5, 0x9200000020000044) recvmmsg$unix(r2, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000056c0)=""/242, 0xf2}], 0x1}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000640)=""/181, 0xb5}, {&(0x7f0000004280)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000780)=""/11, 0xb}, {&(0x7f0000005280)=""/214, 0xd6}, {&(0x7f0000005600)=""/186, 0xba}, {&(0x7f00000002c0)=""/22, 0x16}, {&(0x7f0000005380)=""/172, 0xac}, {&(0x7f0000005440)=""/226, 0xe2}, {&(0x7f0000005540)=""/175, 0xaf}], 0x7}}, {{&(0x7f0000000900)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f00000009c0)=""/79, 0x4f}], 0x1}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000001280)=""/225, 0xe1}, {&(0x7f00000014c0)=""/230, 0xe6}, {&(0x7f0000001380)=""/71, 0x47}, {&(0x7f00000015c0)=""/196, 0xc4}, {&(0x7f0000002000)=""/4093, 0xffd}, {0x0}, {&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/85, 0x55}], 0x8, &(0x7f0000004100)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x90}}, {{&(0x7f0000001980), 0x6e, &(0x7f0000001a80)=[{&(0x7f0000001a00)=""/18, 0x12}, {&(0x7f0000001a40)=""/36, 0x24}], 0x2, &(0x7f0000001ac0)=[@rights={{0xc}}], 0xc}}], 0x6, 0x41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000140)) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = syz_io_uring_setup(0x24fc, &(0x7f0000000080)={0x0, 0x0, 0x4000, 0x2}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_UNLINKAT={0x24, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x1}) io_uring_enter(r7, 0x2d3e, 0x0, 0x56, 0x0, 0xffffffffffffff59) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000080)={[{0x9, 0x3, 0x5, 0x1c, 0x8, 0x2, 0x4, 0x2, 0xfa, 0x2, 0x81, 0xc, 0x8000000000002000}, {0x9, 0xb90a, 0x8, 0xc0, 0x2, 0x6, 0x6, 0x4, 0x4, 0xff, 0x0, 0x7d}, {0x7, 0x7, 0x6, 0x8, 0x2, 0x6, 0x8, 0xb, 0xfd, 0x0, 0x56, 0x3, 0x100}]}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000005c0)={[0xfffffffffffffffd, 0x0, 0x100000024c8, 0x40, 0x0, 0xffffffffffffffff, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x9, 0x2, 0x0, 0x81000000000002, 0x7fffffff], 0x80a0000, 0x100000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.412918904s ago: executing program 2 (id=964): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000340)={'pim6reg\x00', 0x2}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x3}, 0xc) syz_emit_ethernet(0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f610100039108"], 0x7) shmctl$SHM_INFO(0x0, 0xe, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f00000001c0), 0xa00, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x10000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x4004804) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000740)={'#! ', './file0', [], 0xa, "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"}, 0x13d) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) epoll_create(0x8) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001100010029bd7000fffffffffc0200000000000000000000000000006401010200000000000000000000000000000000000000020a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000008000000000306fbcbd059804669492d40d76c05ba19e19321f6b7e32d34acf4b41de480782ba0f8ceb268cd972063529df15168a33176ef7410000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) 3.032989783s ago: executing program 3 (id=965): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80, 0x23456}) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) fchdir(r6) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x44) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003b80)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xb}, {0x3, 0x10}, {0xfff3}}}, 0x24}}, 0x4) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) r9 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000080)="3303120081fd140000007ef52f55", 0xe, 0x40408c0, &(0x7f00000000c0)={0x11, 0x0, r10, 0x1, 0x62, 0x6, @broadcast}, 0x14) r11 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) r13 = socket(0x10, 0x803, 0x0) getpeername$unix(r13, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) sendmsg$IPVS_CMD_SET_INFO(r13, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) 2.643027625s ago: executing program 1 (id=966): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x1}}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.311250284s ago: executing program 4 (id=967): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @loopback, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff1348286e280a9c0f4eb5"}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)={0x80000018}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000040)=@x86={0x7b, 0xf7, 0x2, 0x0, 0xffff, 0xc8, 0x3, 0x0, 0x0, 0x9, 0xba, 0x0, 0x0, 0x6, 0x4, 0xe8, 0x3, 0x15, 0x7, '\x00', 0x9}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000440)=0xff, 0x4) bind$inet(r7, 0x0, 0x0) sendmmsg$inet(r7, &(0x7f0000004980), 0x0, 0x20008000) setsockopt$inet_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "e49e951bfb0c065a", "0ee52035783e8665be4f0298d525dfbff20b621fb95fa5c2df2922bedea9e057", "04deb67f", "bd131d021da991c3"}, 0x38) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c0000001c00110c0000001400000f00070000000a48036311d2305924e00cd6b561fa47bfce4ec1d654cc1414f6e71d82539a406db196092581c78e94977a85b9464fd68fe559b7754f6de9a869d0a75562e2611f45ffb5b96822987f545cf1901783c2cbf44cc326bc82185da68507f58671cd9c33f5e206032316defe67500124ada92b21be8d4374bd2786be406060f103b334a76ae306dbdbf08491b8f1584ae47ec30d9bd5740c6c1769790a1825e4f0bfe3", @ANYRES32=r9, @ANYBLOB="2ddef3bcb1109fc6c5c10baac7b93b4dd85a8716a7b57e6ab23e1ae8fde8d77b3d8862c842b4ac5de2003b4895183e94eabed366874ee54e3cba1bfdb9bc5d40ccc8fcbcee0b78fefcd1a1aaea0412c7c332f4144d1a6da83cede8fc78fb0223db0dae7398776bb51feca2dc5a4ae88bb6a24c5beb866971eb27aa748b892645d780c1b9aa029241467be0ef787ebea3d4203b75260627ff252447d3d394940b38a329"], 0x48}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 2.293262527s ago: executing program 1 (id=968): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = syz_open_dev$sndpcmc(&(0x7f0000004c40), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc25c4110, &(0x7f0000000000)={0x0, [[0xc6c], [0x200], [0x8]], '\x00', [{}, {}, {}, {0xffffffff, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0xfffff3a5}], '\x00', 0x0, 0x0, 0x0, 0x1000000}) (async) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_usbip_server_init(0x6) (async) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) (async) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f0000000300), 0x5005) (async) socket$netlink(0x10, 0x3, 0x15) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (async) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) r5 = memfd_secret(0x80000) getsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r6, 0x0, 0x1}, 0x18) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') lseek(r7, 0x289e0cb5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 1.913424317s ago: executing program 1 (id=969): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x56c, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000380)="09000000e700140000007e7bfbf788a83baa9900d6f18f8e0000000008009900", 0x20, 0x8004, &(0x7f00000000c0)={0x11, 0x8100, r2, 0x1, 0xc, 0x6, @remote}, 0x14) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="640100001900010000000000040000001d0100001500040001000080fe02000031171e44b2b50e8f040000001e01060000f8"], 0x164}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={[0xffffffffffff8518]}, &(0x7f0000000100), 0x0, 0x8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f0000001340)=""/4097, 0x1001}], 0x1, 0x300, 0x0) 1.850715201s ago: executing program 4 (id=970): r0 = epoll_create(0x80f04) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000300)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x4, 0xfe, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0xd931d3864d39ddce) socket$phonet_pipe(0x23, 0x5, 0x2) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, 0x0, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x87}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x1) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f046}) 1.663353646s ago: executing program 2 (id=971): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000300)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x8, 0x4, 0x0, 0x3e, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local, {[@timestamp={0x44, 0xc, 0x67, 0x0, 0x0, [0x4, 0x3]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @eol, @generic={0x0, 0x5, "d58838"}]}}}}}}, 0x4e) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000380)={{0x3, 0x81}, 'port0\x00', 0x41, 0x20010, 0x2, 0x1ff, 0x8000, 0xfffffffe, 0x8, 0x0, 0x4, 0xf4}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000389000/0x4000)=nil) syz_emit_ethernet(0x6a, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500005c0000000000019078ac1e0001ac1414aa05009078e00000e0400000000000000000110000ac14"], 0x0) syz_open_dev$video4linux(&(0x7f0000000c80), 0x7, 0xc82) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x4}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000563000/0x2000)=nil) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x100004, 0x220104, 0xe2a3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0, r4}, 0x38) 1.635703513s ago: executing program 3 (id=972): sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000010}, 0x40) (async) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000010}, 0x40) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x80000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, ':'}}, {@access_any}], [{@appraise_type}, {@fsmagic={'fsmagic', 0x3d, 0x231353f2}}, {@permit_directio}, {@uid_lt={'uid<', 0xee00}}, {@seclabel}]}}) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x80000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, ':'}}, {@access_any}], [{@appraise_type}, {@fsmagic={'fsmagic', 0x3d, 0x231353f2}}, {@permit_directio}, {@uid_lt={'uid<', 0xee00}}, {@seclabel}]}}) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket(0x2b, 0x80801, 0x1) setsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, &(0x7f0000000480)=0x1, 0x4) getsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, 0x0, &(0x7f00000005c0)) connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) r7 = accept4(r2, 0x0, &(0x7f0000000040), 0x800) ioctl$FS_IOC_RESVSP(r7, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0xa}) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r9, 0x80, 0x4c, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f00000004c0)=0x5, 0x4) (async) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f00000004c0)=0x5, 0x4) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[], 0x10) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}]}}) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x0, r10) 1.582990498s ago: executing program 1 (id=973): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x2]}, 0x6) socket(0x1, 0x3, 0xfffffffc) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) ioctl$sock_proto_private(r4, 0x89e9, &(0x7f00000004c0)="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") sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_open_dev$sg(0x0, 0x0, 0x38dd80) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) 1.454060722s ago: executing program 3 (id=974): r0 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mlockall(0x2) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(0x0, 0xc) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file4\x00', &(0x7f0000000380)={0x40440, 0x15c, 0x12}, 0x18) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES64=0x0], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000380), &(0x7f0000000140)=0x8) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, 0x2, 0x0, 0x0, 0xfffffffc}}, 0x2e) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="9f", 0x1}], 0x1) 602.155648ms ago: executing program 3 (id=975): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000a80)=0x0) (async) fstat(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (async) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0xa0031718561b10dc}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x78, 0x0, 0x3, {0x8000, 0xcd, 0x0, {0x2, 0x0, 0x9ef1, 0x1000, 0x5, 0x9b, 0xf79c000, 0x2339fdf8, 0x5, 0x8000, 0x538, 0x0, 0xffffffffffffffff, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) sendmmsg$unix(r1, &(0x7f000000bf40)=[{{&(0x7f0000000140)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000300)="9e9bade1c4e874c80bf08c9c91e8ba9d3bf5279cf0adc3d2585fda18106e60fab96c18c15eaa5e1fd3c90159839c924c91eaeb6bcd2eb5b5d18eaf797177f83a8f79e853de26e5ef20601a94928363bc6969e5846873171952e0070f2636c890e8ec448a4d004e07572b2f", 0x6b}, {&(0x7f0000000380)="b63dffb9a4e02d910ad3a68d100b1df1e1e8d28b02b51ccfbb89abaa999cf333356c94e1cbd8beefaf3f1116b336afba0e7eca32898ea1b1a30492bd87892e23c3d729638107ffe81fe6b6fd8dfa46956acb7ffbffb590d8085a", 0x5a}, {&(0x7f0000000600)="388a300312ea61a7ca0c4b8707d028218e0c5fc58da98208f4d4ac245d37cd851913c4026c9d6546912a07ceac991a52d9a8ca4b4283b255233198f563068580e32429aaf1b985a4538a656b27a94f94d0e46b4070e856bfea150dc248d1c71812e3d6842ce437d28bcd617f254a26330d079ab321e9d079bc76d21e78c69bcacf2e75894a25290960520f914966e8dc171fc15ccf2531c6d71c3758c7d4796ae3919a224da40c6aaad4599d4901eb3c98f3d2b869bf", 0xb6}, {&(0x7f0000000800)="65df60174e72942a3aa10203ab0c3dfe928c94aab41d450688b4b4131bfbe921f58f74c9f8f576a42c2859ddf8e71641cd0ccd3e1fe40aaf84697ecebe4111b77d2624f52503a5b494c2ae7c9f5fd78b19fac3b537eaa56d7d1deccd73ba06b69bb2f3cb19744a2589c69355b6c3bfed9bfde090ec292022c8584cba65e044697c51", 0x82}, {&(0x7f00000001c0)="625fa16dd7", 0x5}, {&(0x7f0000000440)="891ca1512f12cc86e5b9ff2f4034acb40a975bd4349d68cadfa8183d7f178b9ee083bbde8dc3838e8590592b13c5b5369c1981b92d66b5f52a7d40a40e5c6b19f3b2e68fb8299a8e043be6e0cde127e5d30acd49c6d79c39f3846dffd9", 0x5d}, {&(0x7f00000008c0)="4dceb685e009b026af927a52f195dcbabdcdc955327970120244bf34851f4a54abde24b11a9432a5feec06a232dc917c945f1c24787cb40bcfb2d789eb701e7c007f52950da8c6a9ff059ddaf4b941c93d7164421b1425694fbb6f093ba77d8862213f4888facb82350fc2a676aa8007a214f45bd4836e5fd08698a0b38980ae3f93c5a54bf104e2cdaaf9df98455e873f51619e3f01724d74b24f458b2f751ee7e844519b382f8f935da536d7a3239c5c3ead7a5a8a96dc3d1d433033531f0d5bd5a3a6", 0xc4}, {&(0x7f00000009c0)="90eb6eb577030dc00da7d5586802ebfb50139fa31d2d80621b7c2d438888da00d04704260bf050e01e6e16e37f841b301f0fe75f108bbf9bad89269532b4ee81eccdc369d8404a47ee8338e3c44828da773ec17551d61e79138d489b2ad458c39745104c5ae8a6081acd6855f6d0", 0x6e}], 0x8, &(0x7f0000002140)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r1, r1]}}, @rights={{0x14, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {r2, r3, r7}}}, @rights={{0x10, 0x1, 0x1, [r0]}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r0, 0xffffffffffffffff, r1]}}, @cred={{0x18}}, @cred={{0x18}}], 0xbc, 0xc}}, {{&(0x7f00000082c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000009440)=[{&(0x7f0000004280)="19180f83b542eac4710be57a554c33f058a490043e2e795c5540c1dbfc4218", 0x1f}, {&(0x7f0000008340)="cc3d8b783a684e", 0x7}, {&(0x7f0000008380)="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", 0x1000}, {&(0x7f0000009380)="56fc8ca7f5029b88c26ac7e88d05b8275183fbecdd125f303e572e6bb74b2f97300e0dbfaa4e8d643c7ca171b8c25a0b878f278d77b4c0f105aba0399ba3f7464f3f636182daee06c8778e065cebc9dcd55884afd2c8bcc6a0d552cfda9dccb250d5e6c7dca443ae54bb57c37de306866eede6a3410010153b545e7c83c8586063e9f6d8c55615255703eaacd2435565f09ef7a8474082494a678edfb8945163c7ceb017", 0xa4}], 0x4, &(0x7f0000009500)=[@rights={{0x10, 0x1, 0x1, [r0]}}, @cred={{0x18, 0x1, 0x2, {0x0, r6}}}, @cred={{0x18}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r0, r1, r0, r1, r4, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0x0, r3, r7}}}, @cred={{0x18, 0x1, 0x2, {r8}}}], 0xa4, 0x44041}}, {{0x0, 0x0, &(0x7f0000009740)=[{&(0x7f00000095c0)="334a20edacc582c6c8e721769b3d5729796c9ba06970901462468b528ffac6fec46ea31f625c47bc1aee5fc49a3c5501148c4362f6f190aeddbc211765c00f27290215196e33a0862de3cdfa045b5a6dd0e0dbce3b0657284c03e4be88f62c4a2e7118bb425fbb949c6bcb6f15b245fbebacc433b6cbaf5327ecc220e38271b4fe9f4ef73a6dcb21ad98a5f2d1aca156c42796bd8949627201", 0x99}, {&(0x7f0000009680)="16c67a87639792185c28fdb9b7aea0d92bb79b8a95d3ba7bd0c9dd4faa9164f2d3c5e47788e91194e2b3a6db5325251fd99b04b869dc93e05829988343e0287fa32ae58648e371715568190149d674b8aedc9ea5ebe8b0658a93434a6141342ed7f5344104460796b69bd43263e55082bb5da73c6cfb06e78d811752a066b4d3c771241f051db04af525c85392464d11c1", 0x91}], 0x2, &(0x7f000000ba00)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r4, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0x0, r3}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, r7}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0x0, r3}}}, @cred={{0x18, 0x1, 0x2, {0x0, r3}}}], 0x11c, 0x8c1}}, {{&(0x7f000000bb40)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f000000bc40)=[{&(0x7f000000bbc0)="6982cb60c25f12cfdd51b87af1f598d5d7b6316226e0dab9c44366a91904a8e74f4bd208cec95dcfba5553865071f13c041752e9ba1f2f86c579fe", 0x3b}, {&(0x7f000000bc00)="42181d7e82c9f93541233c11efe32839c3aba0a57882b40222d16464d27cb179bf19f676c3a67d2b8e", 0x29}], 0x2, &(0x7f000000bd80)=[@cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0x0, r3}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {r8}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x124, 0x24080881}}, {{0x0, 0x0, &(0x7f000000bf00)=[{&(0x7f000000bec0)="49259ee3124438c5fa509f2bb510fb56597df9409cada42b3250edb823053207a14a85587b", 0x25}], 0x1, 0x0, 0x0, 0x4000000}}], 0x5, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000000)) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) unlink(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a2010203010902240001000000000904000002923350000905f402ff030000000905ba"], 0x0) (async) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r10, 0x0) (async) setpgid(0x0, r10) mount$tmpfs(0x0, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000810, 0x0) (async) gettid() (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) (async, rerun: 64) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$UFFDIO_COPY(r9, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 392.646555ms ago: executing program 2 (id=976): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x1}}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 183.069925ms ago: executing program 3 (id=977): sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@bridge_newvlan={0x50, 0x70, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x1, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x80}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0xc, 0x3}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000030}, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@bridge_newvlan={0x50, 0x70, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x1, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x80}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0xc, 0x3}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000030}, 0x0) (async) socket(0x10, 0x2, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) (async) 182.666214ms ago: executing program 3 (id=978): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r1, &(0x7f00000007c0)={0x10, 0x0, 0x25dfdbfa, 0x400000}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESDEC=r0, @ANYBLOB="eeeaffff616d250b50c83b2a6a3400", @ANYRES32=0x0], 0x50) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x800) syz_open_dev$vim2m(0x0, 0x0, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x10b121) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x11) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000700)="1a589880094221163118c20ba67edecc8e404446a08a220bc228fdded14097f1bccd9ad61925bf16c950493dcbfa6ab0c9b15be904473944ae117dc771d96adb8d73784dfe7e94e74e3174a167769327c0d80ba8284629876a30092ed1a239694a89b84b0e057116bce4937d0f2b278462dba4d09bef9ee19a611b9da53fc371d514278562c24ebdcef5464924a301983232d7b3a5095fae5db44de0b2cb8c", 0x9f}], 0x1) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x49be, &(0x7f0000000300)={0x0, 0x37ad, 0x7dc0071a664f01a8, 0xfffffffe, 0x122}, &(0x7f00000001c0), &(0x7f00000003c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newqdisc={0x2c, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd, 0x3}, {0xc, 0xe}, {0x8, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x6c, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000030a01030000000000000000010000090a000700726f75746500000070000000160a010100000000000000000a0000020800074000000001300003802c0003801400010070696d367265673000000000000000001400010070696d367265670000000000faffffff0800010073797a30000000000900010073797a30000000000c0005400000000000000004140000001100010000000000000000000300000a"], 0xb8}, 0x1, 0x0, 0x0, 0x90}, 0x10) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f50000000000000000020000000900020073797a31000000"], 0x34}, 0x1, 0x0, 0x0, 0x66df5cfbe53006d1}, 0x0) connect$llc(r4, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @remote}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0xf000000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000035090100000000009500000000000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfebe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r7 = socket$nl_generic(0x11, 0x3, 0x10) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) 81.314014ms ago: executing program 4 (id=979): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x4}]}]}, 0x80}}, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc04f01f56bb6e284f5fab5c66", 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x431, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x7453c}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004805}, 0xc080) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x1, 0x8001, 0x8, 0x3e41ad80, {{0x25, 0x4, 0x3, 0x31, 0x94, 0x68, 0x0, 0xd, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x14}, {[@end, @timestamp_addr={0x44, 0x2c, 0x70, 0x1, 0x0, [{@private=0xa010101, 0x9}, {@loopback, 0xfffffff8}, {@remote, 0xff}, {@multicast1, 0x9}, {@remote, 0x7}]}, @lsrr={0x83, 0x1b, 0x61, [@broadcast, @rand_addr=0x64010102, @empty, @multicast2, @broadcast, @remote]}, @timestamp_addr={0x44, 0x24, 0x60, 0x1, 0x9, [{@local, 0x8}, {@private=0xa010100, 0x5}, {@empty}, {@rand_addr=0x64010100, 0x9}]}, @lsrr={0x83, 0xf, 0x13, [@loopback, @multicast2, @empty]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0x11c, r5, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4008001}, 0x40c0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r9) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd7000fedbdf45893673000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000000000039fd0b000000000006001100070000000800150005000000"], 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x4800) r11 = getpid() sched_setscheduler(r11, 0x1, &(0x7f0000000240)=0x5) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x800, 0x0, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f00000014c0)={0x2020, 0x0, 0x0}, 0x2020) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x225}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r5, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0xffffdc93}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x81}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000844}, 0x8000) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000400)={0x8, 0x9, {r11}, {0xee01}, 0x0, 0x2}) write$FUSE_LK(r12, &(0x7f0000000440)={0x28, 0x0, r13, {{0x923a, 0x1, 0x1, r14}}}, 0x28) r15 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r16 = dup(r15) write$6lowpan_enable(r16, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_SIOCGSKNS(r16, 0x894c, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) 0s ago: executing program 2 (id=980): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000080), 0x3001, 0x0) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000180)={0x1}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) (async) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000380)={{0x3, 0x81}, 'port0\x00', 0x41, 0x20010, 0x2, 0x1ff, 0x8000, 0xfffffffe, 0x8, 0x0, 0x4, 0xf4}) (async) fallocate(r1, 0x10, 0x5, 0x3ff) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_emit_ethernet(0x6a, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500005c0000000000019078ac1e0001ac1414aa05009078e00000e0400000000000000000110000ac14"], 0x0) (async) r3 = openat$cdrom(0xffffff9c, &(0x7f0000000040), 0x900, 0x0) ioctl$CDROM_NEXT_WRITABLE(r3, 0x5394, &(0x7f00000000c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000563000/0x2000)=nil) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000400100004012200a3e2000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000001c00000000000000000000000800000000000005000000e41a2fcb3985cbc2f6a386b9b8e54ddf2de467e2aa3ba7c4f7193e53b6d5c544999aa3a85145720d7fea47fce47587565a24dd01fa2aa0940820a8191939a33284704e79cefcbbc2229a3311655d6aefb682c61e3f87ab61768c9734f0d12715a9bbc06fa70e60ff6fe88a0356208ce6f08415701bfb56420f198312dccb4916d3273acfeac041fa876f79fba24397f2a535129a05c7c18358f769966a95447e42984253e79a36663cc7f5b1bc4ce2f001975a6d0c3a19df1fd9c09982845c85a29d2856577f98a494c2b4e44a539f83b84300c47dff8e33"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0, r4}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000000440)=""/30, &(0x7f0000000380), &(0x7f0000000280), 0x1, r4}, 0x38) kernel console output (not intermixed with test programs): S: lc: UDP 224.0.0.2:0 - no destination available [ 186.944250][ T5335] Bluetooth: hci4: command 0x1003 tx timeout [ 186.944264][ T5992] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 187.036680][ T7247] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 187.102645][ T7250] netlink: 'syz.2.255': attribute type 1 has an invalid length. [ 187.894665][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 188.539823][ T7271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.261'. [ 188.908717][ T7283] loop2: detected capacity change from 0 to 7 [ 188.916189][ T7059] Dev loop2: unable to read RDB block 7 [ 188.918639][ T7059] loop2: unable to read partition table [ 188.921279][ T7059] loop2: partition table beyond EOD, truncated [ 188.927319][ T7283] Dev loop2: unable to read RDB block 7 [ 188.929489][ T7283] loop2: unable to read partition table [ 188.932030][ T7283] loop2: partition table beyond EOD, truncated [ 188.934995][ T7283] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 188.944287][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 189.672406][ T40] audit: type=1326 audit(1757509342.157:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7306 comm="syz.0.270" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff2579 code=0x0 [ 189.974162][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 190.220754][ T7324] netfs: Couldn't get user pages (rc=-14) [ 190.261472][ T7324] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 190.792543][ T7338] /dev/sr0: Can't open blockdev [ 190.833800][ T7347] loop2: detected capacity change from 0 to 7 [ 190.838591][ T7347] Dev loop2: unable to read RDB block 7 [ 190.840768][ T7347] loop2: unable to read partition table [ 190.843013][ T7347] loop2: partition table beyond EOD, truncated [ 190.850376][ T7347] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 191.024158][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 191.123256][ T7356] netlink: 20 bytes leftover after parsing attributes in process `syz.0.276'. [ 191.223559][ T7349] fuseblk: Unknown parameter 'rootlode' [ 191.842806][ T7362] fuse: Bad value for 'user_id' [ 191.845789][ T7362] fuse: Bad value for 'user_id' [ 191.934961][ T7369] netfs: Couldn't get user pages (rc=-14) [ 191.994503][ T7369] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 192.054174][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 192.544008][ T7385] loop6: detected capacity change from 0 to 7 [ 192.546595][ T7385] Dev loop6: unable to read RDB block 7 [ 192.548408][ T7385] loop6: unable to read partition table [ 192.551208][ T7385] loop6: partition table beyond EOD, truncated [ 192.553793][ T7385] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 193.092871][ T7393] netlink: 20 bytes leftover after parsing attributes in process `syz.1.286'. [ 193.094202][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 193.902678][ C3] vcan0: j1939_tp_rxtimer: 0xffff88801e474800: rx timeout, send abort [ 194.144126][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 194.403307][ C3] vcan0: j1939_tp_rxtimer: 0xffff88801e475800: rx timeout, send abort [ 194.407653][ C3] vcan0: j1939_tp_rxtimer: 0xffff88801e474800: abort rx timeout. Force session deactivation [ 194.906479][ C3] vcan0: j1939_tp_rxtimer: 0xffff88801e475800: abort rx timeout. Force session deactivation [ 195.184196][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 195.701823][ T7436] binder: 7434:7436 ioctl 8008f512 80000340 returned -22 [ 195.945850][ T7442] netlink: 20 bytes leftover after parsing attributes in process `syz.3.297'. [ 196.214947][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 196.649704][ T7446] evm: overlay not supported [ 196.836283][ T7452] netlink: 'syz.3.302': attribute type 1 has an invalid length. [ 196.839677][ T7452] netlink: 224 bytes leftover after parsing attributes in process `syz.3.302'. [ 196.889338][ T7455] netlink: 24 bytes leftover after parsing attributes in process `syz.0.303'. [ 196.917009][ T7455] bond1: entered promiscuous mode [ 196.919228][ T7456] netfs: Couldn't get user pages (rc=-14) [ 196.920459][ T7455] 8021q: adding VLAN 0 to HW filter on device bond1 [ 196.962952][ T7456] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 197.249877][ T7469] netlink: 20 bytes leftover after parsing attributes in process `syz.0.306'. [ 197.264145][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 197.657027][ T7476] cgroup: subsys name conflicts with all [ 198.083668][ T7500] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 198.085816][ T7500] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 198.088817][ T7500] vhci_hcd vhci_hcd.0: Device attached [ 198.182300][ T7505] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.294141][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 198.423682][ T7501] vhci_hcd: connection closed [ 198.432871][ T61] vhci_hcd: stop threads [ 198.434226][ T6074] usb 40-1: SetAddress Request (6) to port 0 [ 198.439406][ T61] vhci_hcd: release socket [ 198.441901][ T61] vhci_hcd: disconnect device [ 198.467441][ T7505] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.473672][ T6074] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 198.515613][ T6074] usb 40-1: enqueue for inactive port 0 [ 198.590177][ T7505] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.707362][ T7505] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.800660][ T7518] netlink: 212 bytes leftover after parsing attributes in process `syz.0.318'. [ 198.943997][ T6074] usb usb40-port1: attempt power cycle [ 199.009235][ T1244] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.033659][ T628] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.041896][ T628] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.067383][ T628] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.344256][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 199.515166][ T6074] usb usb40-port1: unable to enumerate USB device [ 199.986824][ T7534] CUSE: info not properly terminated [ 200.285906][ T7545] binder: BINDER_SET_CONTEXT_MGR already set [ 200.290978][ T7545] binder: 7541:7545 ioctl 4018620d 80000080 returned -16 [ 200.374165][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 200.639242][ T7577] netlink: 'syz.0.333': attribute type 5 has an invalid length. [ 200.642606][ T7577] netlink: 'syz.0.333': attribute type 7 has an invalid length. [ 200.789487][ T7570] netlink: 168 bytes leftover after parsing attributes in process `syz.1.331'. [ 200.792257][ T7570] netlink: 168 bytes leftover after parsing attributes in process `syz.1.331'. [ 201.414189][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 201.678168][ T7601] netlink: 48 bytes leftover after parsing attributes in process `syz.1.335'. [ 202.084895][ T7608] Unsupported ieee802154 address type: 0 [ 202.455501][ T7621] binder: 7618:7621 ioctl c0306201 80000240 returned -14 [ 202.464216][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 203.044518][ T6056] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 203.206048][ T6056] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 203.209755][ T6056] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 203.213488][ T6056] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 203.216931][ T6056] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 203.220918][ T6056] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 203.228587][ T6056] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 203.232543][ T6056] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 203.236052][ T6056] usb 8-1: Product: syz [ 203.237459][ T6056] usb 8-1: Manufacturer: syz [ 203.246049][ T6056] cdc_wdm 8-1:1.0: skipping garbage [ 203.247909][ T6056] cdc_wdm 8-1:1.0: skipping garbage [ 203.253046][ T6056] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 203.255798][ T6056] cdc_wdm 8-1:1.0: Unknown control protocol [ 203.454764][ T6055] usb 8-1: USB disconnect, device number 2 [ 203.494160][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 203.858029][ T7645] netlink: 'syz.0.349': attribute type 10 has an invalid length. [ 203.861882][ T7645] macvlan0: entered promiscuous mode [ 203.871874][ T7645] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 204.457109][ T7657] tmpfs: Unknown parameter 'hash' [ 204.534164][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 204.679075][ T7673] netfs: Couldn't get user pages (rc=-14) [ 204.720966][ T7673] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 205.024473][ T7687] capability: warning: `syz.0.356' uses 32-bit capabilities (legacy support in use) [ 205.028921][ T7687] netlink: 'syz.0.356': attribute type 25 has an invalid length. [ 205.031475][ T7687] netlink: 'syz.0.356': attribute type 7 has an invalid length. [ 205.584185][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 206.153731][ T7703] netlink: 64 bytes leftover after parsing attributes in process `syz.1.360'. [ 206.158124][ T7703] netlink: 60 bytes leftover after parsing attributes in process `syz.1.360'. [ 206.163523][ T7703] unsupported nlmsg_type 40 [ 206.290373][ T7708] loop2: detected capacity change from 0 to 7 [ 206.293638][ T7708] Dev loop2: unable to read RDB block 7 [ 206.313916][ T7708] loop2: unable to read partition table [ 206.316908][ T7708] loop2: partition table beyond EOD, truncated [ 206.319709][ T7708] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 206.367907][ T7710] loop6: detected capacity change from 0 to 7 [ 206.371287][ T7710] Dev loop6: unable to read RDB block 7 [ 206.373453][ T7710] loop6: unable to read partition table [ 206.377093][ T7710] loop6: partition table beyond EOD, truncated [ 206.379199][ T7710] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 206.456225][ T7714] netfs: Couldn't get user pages (rc=-14) [ 206.481685][ T7714] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 206.860060][ T7718] loop2: detected capacity change from 0 to 7 [ 206.863919][ T7718] Dev loop2: unable to read RDB block 7 [ 206.866459][ T7718] loop2: unable to read partition table [ 206.869051][ T7718] loop2: partition table beyond EOD, truncated [ 206.871834][ T7718] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 208.402562][ T7740] loop2: detected capacity change from 0 to 7 [ 208.410122][ T7059] Dev loop2: unable to read RDB block 7 [ 208.412153][ T7059] loop2: unable to read partition table [ 208.414445][ T7059] loop2: partition table beyond EOD, truncated [ 208.434782][ T7740] Dev loop2: unable to read RDB block 7 [ 208.437394][ T7740] loop2: unable to read partition table [ 208.440981][ T7740] loop2: partition table beyond EOD, truncated [ 208.443459][ T7740] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 208.536317][ T7742] loop6: detected capacity change from 0 to 7 [ 208.545639][ T7742] Dev loop6: unable to read RDB block 7 [ 208.548550][ T7742] loop6: unable to read partition table [ 208.564511][ T7742] loop6: partition table beyond EOD, truncated [ 208.597315][ T7742] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 209.584214][ T40] audit: type=1326 audit(1757509362.057:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7746 comm="syz.1.375" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x0 [ 209.983829][ T7774] netlink: 20 bytes leftover after parsing attributes in process `syz.0.377'. [ 210.166480][ T7782] input: syz1 as /devices/virtual/input/input8 [ 210.633640][ T7793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.381'. [ 210.636868][ T7793] netlink: 16 bytes leftover after parsing attributes in process `syz.0.381'. [ 210.835305][ T7800] loop6: detected capacity change from 0 to 7 [ 210.842638][ T7059] Dev loop6: unable to read RDB block 7 [ 210.846006][ T7059] loop6: unable to read partition table [ 210.848073][ T7059] loop6: partition table beyond EOD, truncated [ 210.902872][ T7800] Dev loop6: unable to read RDB block 7 [ 210.906291][ T7800] loop6: unable to read partition table [ 210.909914][ T7800] loop6: partition table beyond EOD, truncated [ 210.913253][ T7800] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 210.939675][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 210.942577][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 212.300259][ T7814] netlink: 200 bytes leftover after parsing attributes in process `syz.0.387'. [ 212.999239][ T7828] FAULT_INJECTION: forcing a failure. [ 212.999239][ T7828] name failslab, interval 1, probability 0, space 0, times 1 [ 213.003400][ T7828] CPU: 0 UID: 0 PID: 7828 Comm: syz.0.390 Not tainted syzkaller #0 PREEMPT(full) [ 213.003415][ T7828] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 213.003422][ T7828] Call Trace: [ 213.003426][ T7828] [ 213.003441][ T7828] dump_stack_lvl+0x16c/0x1f0 [ 213.003463][ T7828] should_fail_ex+0x512/0x640 [ 213.003481][ T7828] ? fs_reclaim_acquire+0xae/0x150 [ 213.003498][ T7828] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 213.003518][ T7828] should_failslab+0xc2/0x120 [ 213.003533][ T7828] __kmalloc_noprof+0xd2/0x510 [ 213.003549][ T7828] tomoyo_realpath_from_path+0xc2/0x6e0 [ 213.003566][ T7828] ? tomoyo_profile+0x47/0x60 [ 213.003578][ T7828] tomoyo_path_number_perm+0x245/0x580 [ 213.003591][ T7828] ? tomoyo_path_number_perm+0x237/0x580 [ 213.003606][ T7828] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 213.003634][ T7828] ? find_held_lock+0x2b/0x80 [ 213.003646][ T7828] ? hook_file_ioctl_common+0x145/0x410 [ 213.003664][ T7828] ? __fget_files+0x20e/0x3c0 [ 213.003678][ T7828] security_file_ioctl_compat+0x9b/0x240 [ 213.003694][ T7828] __ia32_compat_sys_ioctl+0xc3/0x370 [ 213.003714][ T7828] __do_fast_syscall_32+0x7c/0x3a0 [ 213.003732][ T7828] do_fast_syscall_32+0x32/0x80 [ 213.003749][ T7828] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 213.003762][ T7828] RIP: 0023:0xf7ff2579 [ 213.003771][ T7828] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 213.003781][ T7828] RSP: 002b:00000000f54f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 213.003792][ T7828] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000008b05 [ 213.003798][ T7828] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 213.003804][ T7828] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 213.003810][ T7828] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 213.003816][ T7828] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 213.003830][ T7828] [ 213.003971][ T7828] ERROR: Out of memory at tomoyo_realpath_from_path. [ 214.275571][ T7846] block device autoloading is deprecated and will be removed. [ 214.597255][ T7852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.398'. [ 214.601976][ T7852] bridge_slave_1: left allmulticast mode [ 214.605720][ T7852] bridge_slave_1: left promiscuous mode [ 214.608145][ T7852] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.616757][ T7852] bridge_slave_0: left allmulticast mode [ 214.618818][ T7852] bridge_slave_0: left promiscuous mode [ 214.620982][ T7852] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.661152][ T7854] netlink: 28 bytes leftover after parsing attributes in process `syz.1.398'. [ 214.664777][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.398'. [ 214.714727][ T7854] raw_sendmsg: syz.1.398 forgot to set AF_INET. Fix it! [ 215.293471][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.399'. [ 215.297554][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.399'. [ 215.315071][ T7857] netlink: 332 bytes leftover after parsing attributes in process `syz.0.399'. [ 215.386382][ T7858] binder: 7856:7858 ioctl c0306201 80000540 returned -14 [ 215.453684][ T7862] FAULT_INJECTION: forcing a failure. [ 215.453684][ T7862] name failslab, interval 1, probability 0, space 0, times 0 [ 215.459172][ T7862] CPU: 0 UID: 0 PID: 7862 Comm: syz.1.400 Not tainted syzkaller #0 PREEMPT(full) [ 215.459196][ T7862] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 215.459208][ T7862] Call Trace: [ 215.459214][ T7862] [ 215.459222][ T7862] dump_stack_lvl+0x16c/0x1f0 [ 215.459254][ T7862] should_fail_ex+0x512/0x640 [ 215.459283][ T7862] ? fs_reclaim_acquire+0xae/0x150 [ 215.459312][ T7862] ? tomoyo_encode2+0x100/0x3e0 [ 215.459337][ T7862] should_failslab+0xc2/0x120 [ 215.459370][ T7862] __kmalloc_noprof+0xd2/0x510 [ 215.459400][ T7862] tomoyo_encode2+0x100/0x3e0 [ 215.459430][ T7862] tomoyo_encode+0x29/0x50 [ 215.459455][ T7862] tomoyo_realpath_from_path+0x18f/0x6e0 [ 215.459484][ T7862] ? tomoyo_profile+0x47/0x60 [ 215.459505][ T7862] tomoyo_path_number_perm+0x245/0x580 [ 215.459526][ T7862] ? tomoyo_path_number_perm+0x237/0x580 [ 215.459551][ T7862] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 215.459603][ T7862] ? find_held_lock+0x2b/0x80 [ 215.459619][ T7862] ? hook_file_ioctl_common+0x145/0x410 [ 215.459652][ T7862] ? __fget_files+0x20e/0x3c0 [ 215.459678][ T7862] security_file_ioctl_compat+0x9b/0x240 [ 215.459707][ T7862] __ia32_compat_sys_ioctl+0xc3/0x370 [ 215.459740][ T7862] __do_fast_syscall_32+0x7c/0x3a0 [ 215.459773][ T7862] do_fast_syscall_32+0x32/0x80 [ 215.459801][ T7862] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 215.459822][ T7862] RIP: 0023:0xf70be579 [ 215.459837][ T7862] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 215.459852][ T7862] RSP: 002b:00000000f54ae55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 215.459870][ T7862] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000008b05 [ 215.459882][ T7862] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 215.459893][ T7862] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 215.459903][ T7862] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 215.459914][ T7862] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 215.459940][ T7862] [ 215.459958][ T7862] ERROR: Out of memory at tomoyo_realpath_from_path. [ 215.658158][ T7876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.403'. [ 215.846537][ T7883] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 215.848760][ T7883] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 215.851583][ T7883] vhci_hcd vhci_hcd.0: Device attached [ 215.961527][ T7888] netlink: 168 bytes leftover after parsing attributes in process `syz.3.406'. [ 215.964909][ T7887] FAULT_INJECTION: forcing a failure. [ 215.964909][ T7887] name failslab, interval 1, probability 0, space 0, times 0 [ 215.966051][ T7888] netlink: 168 bytes leftover after parsing attributes in process `syz.3.406'. [ 215.969955][ T7887] CPU: 1 UID: 0 PID: 7887 Comm: syz.1.405 Not tainted syzkaller #0 PREEMPT(full) [ 215.969982][ T7887] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 215.969988][ T7887] Call Trace: [ 215.969993][ T7887] [ 215.969998][ T7887] dump_stack_lvl+0x16c/0x1f0 [ 215.970020][ T7887] should_fail_ex+0x512/0x640 [ 215.970039][ T7887] ? copy_splice_read+0x1a8/0xc20 [ 215.970050][ T7887] should_failslab+0xc2/0x120 [ 215.970066][ T7887] __kmalloc_noprof+0xd2/0x510 [ 215.970092][ T7887] copy_splice_read+0x1a8/0xc20 [ 215.970107][ T7887] ? __pfx___might_resched+0x10/0x10 [ 215.970127][ T7887] ? trace_contention_end+0xdd/0x130 [ 215.970147][ T7887] ? __pfx_copy_splice_read+0x10/0x10 [ 215.970165][ T7887] ? __pfx___schedule+0x10/0x10 [ 215.970198][ T7887] sock_splice_read+0xe9/0x110 [ 215.970215][ T7887] ? __pfx_sock_splice_read+0x10/0x10 [ 215.970249][ T7887] do_splice_read+0x282/0x370 [ 215.970265][ T7887] splice_file_to_pipe+0x109/0x120 [ 215.970286][ T7887] do_splice+0x118c/0x1fc0 [ 215.970303][ T7887] ? __lock_acquire+0x62e/0x1ce0 [ 215.970332][ T7887] ? __pfx_do_splice+0x10/0x10 [ 215.970347][ T7887] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 215.970360][ T7887] ? find_held_lock+0x2b/0x80 [ 215.970379][ T7887] __do_splice+0x15d/0x360 [ 215.970398][ T7887] ? __pfx___do_splice+0x10/0x10 [ 215.970422][ T7887] __ia32_sys_splice+0x189/0x250 [ 215.970442][ T7887] __do_fast_syscall_32+0x7c/0x3a0 [ 215.970465][ T7887] do_fast_syscall_32+0x32/0x80 [ 215.970490][ T7887] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 215.970509][ T7887] RIP: 0023:0xf70be579 [ 215.970523][ T7887] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 215.970538][ T7887] RSP: 002b:00000000f546c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000139 [ 215.970553][ T7887] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 215.970562][ T7887] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000039011 [ 215.970571][ T7887] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 215.970577][ T7887] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 215.970584][ T7887] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 215.970606][ T7887] [ 216.124631][ T47] usb 42-1: SetAddress Request (6) to port 0 [ 216.134144][ T47] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 216.327853][ T7884] vhci_hcd: connection reset by peer [ 216.330662][ T72] vhci_hcd: stop threads [ 216.332694][ T72] vhci_hcd: release socket [ 216.338175][ T72] vhci_hcd: disconnect device [ 216.739556][ T7900] loop6: detected capacity change from 0 to 7 [ 216.746454][ T7900] Dev loop6: unable to read RDB block 7 [ 216.748683][ T7900] loop6: unable to read partition table [ 216.751006][ T7900] loop6: partition table beyond EOD, truncated [ 216.762834][ T7900] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 217.118537][ T7917] FAULT_INJECTION: forcing a failure. [ 217.118537][ T7917] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 217.123687][ T7917] CPU: 1 UID: 0 PID: 7917 Comm: syz.3.412 Not tainted syzkaller #0 PREEMPT(full) [ 217.123707][ T7917] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 217.123729][ T7917] Call Trace: [ 217.123734][ T7917] [ 217.123741][ T7917] dump_stack_lvl+0x16c/0x1f0 [ 217.123767][ T7917] should_fail_ex+0x512/0x640 [ 217.123793][ T7917] _copy_from_user+0x2e/0xd0 [ 217.123810][ T7917] compat_wext_handle_ioctl+0xc0/0x310 [ 217.123834][ T7917] ? __pfx_compat_wext_handle_ioctl+0x10/0x10 [ 217.123855][ T7917] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 217.123881][ T7917] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 217.123908][ T7917] compat_sock_ioctl+0x320/0x730 [ 217.123929][ T7917] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 217.123946][ T7917] ? hook_file_ioctl_common+0x145/0x410 [ 217.123969][ T7917] ? __fget_files+0x20e/0x3c0 [ 217.123990][ T7917] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 217.124006][ T7917] __ia32_compat_sys_ioctl+0x23f/0x370 [ 217.124031][ T7917] __do_fast_syscall_32+0x7c/0x3a0 [ 217.124071][ T7917] do_fast_syscall_32+0x32/0x80 [ 217.124093][ T7917] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 217.124112][ T7917] RIP: 0023:0xf7f87579 [ 217.124124][ T7917] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 217.124137][ T7917] RSP: 002b:00000000f548655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 217.124152][ T7917] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000008b05 [ 217.124161][ T7917] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 217.124170][ T7917] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 217.124178][ T7917] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 217.124186][ T7917] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 217.124205][ T7917] [ 219.379759][ T7956] FAULT_INJECTION: forcing a failure. [ 219.379759][ T7956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.384156][ T7956] CPU: 0 UID: 0 PID: 7956 Comm: syz.0.423 Not tainted syzkaller #0 PREEMPT(full) [ 219.384178][ T7956] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 219.384188][ T7956] Call Trace: [ 219.384195][ T7956] [ 219.384202][ T7956] dump_stack_lvl+0x16c/0x1f0 [ 219.384238][ T7956] should_fail_ex+0x512/0x640 [ 219.384261][ T7956] _copy_to_user+0x32/0xd0 [ 219.384275][ T7956] simple_read_from_buffer+0xcb/0x170 [ 219.384287][ T7956] proc_fail_nth_read+0x197/0x240 [ 219.384300][ T7956] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 219.384313][ T7956] ? rw_verify_area+0xcf/0x6c0 [ 219.384324][ T7956] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 219.384335][ T7956] vfs_read+0x1e4/0xcf0 [ 219.384350][ T7956] ? __pfx_vfs_read+0x10/0x10 [ 219.384360][ T7956] ? find_held_lock+0x2b/0x80 [ 219.384375][ T7956] ? __fget_files+0x20e/0x3c0 [ 219.384391][ T7956] ksys_read+0x12a/0x250 [ 219.384403][ T7956] ? __pfx_ksys_read+0x10/0x10 [ 219.384415][ T7956] ? fput+0x9b/0xd0 [ 219.384429][ T7956] ? rcu_is_watching+0x12/0xc0 [ 219.384443][ T7956] __do_fast_syscall_32+0x7c/0x3a0 [ 219.384461][ T7956] do_fast_syscall_32+0x32/0x80 [ 219.384478][ T7956] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 219.384491][ T7956] RIP: 0023:0xf7ff2579 [ 219.384500][ T7956] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 219.384510][ T7956] RSP: 002b:00000000f54f6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 219.384520][ T7956] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f54f6620 [ 219.384527][ T7956] RDX: 000000000000000f RSI: 00000000f7484ff4 RDI: 0000000000000000 [ 219.384533][ T7956] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 219.384539][ T7956] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 219.384544][ T7956] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 219.384558][ T7956] [ 219.525616][ T7961] netfs: Couldn't get user pages (rc=-14) [ 219.546860][ T7961] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 219.639850][ T7965] loop2: detected capacity change from 0 to 7 [ 219.644894][ T7059] Dev loop2: unable to read RDB block 7 [ 219.647307][ T7059] loop2: unable to read partition table [ 219.649841][ T7059] loop2: partition table beyond EOD, truncated [ 219.655202][ T7965] Dev loop2: unable to read RDB block 7 [ 219.657030][ T7965] loop2: unable to read partition table [ 219.658902][ T7965] loop2: partition table beyond EOD, truncated [ 219.669122][ T7965] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 219.961515][ T7976] atomic_op ffff8880426aa998 conn xmit_atomic 0000000000000000 [ 221.134868][ T7999] loop2: detected capacity change from 0 to 7 [ 221.141153][ T7059] Dev loop2: unable to read RDB block 7 [ 221.143729][ T7059] loop2: unable to read partition table [ 221.147087][ T7059] loop2: partition table beyond EOD, truncated [ 221.328475][ T47] usb 42-1: device descriptor read/8, error -110 [ 221.399479][ T7999] Dev loop2: unable to read RDB block 7 [ 221.402191][ T7999] loop2: unable to read partition table [ 221.404694][ T7999] loop2: partition table beyond EOD, truncated [ 221.407048][ T7999] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 221.452969][ T7997] netlink: 168 bytes leftover after parsing attributes in process `syz.1.437'. [ 221.456956][ T7997] netlink: 168 bytes leftover after parsing attributes in process `syz.1.437'. [ 221.676997][ T8011] FAULT_INJECTION: forcing a failure. [ 221.676997][ T8011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.682452][ T8011] CPU: 1 UID: 0 PID: 8011 Comm: syz.0.438 Not tainted syzkaller #0 PREEMPT(full) [ 221.682475][ T8011] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 221.682485][ T8011] Call Trace: [ 221.682492][ T8011] [ 221.682499][ T8011] dump_stack_lvl+0x16c/0x1f0 [ 221.682529][ T8011] should_fail_ex+0x512/0x640 [ 221.682559][ T8011] strncpy_from_user+0x3b/0x2e0 [ 221.682585][ T8011] strncpy_from_user_nofault+0x7f/0x180 [ 221.682610][ T8011] bpf_bprintf_prepare+0xe90/0x13f0 [ 221.682633][ T8011] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 221.682650][ T8011] ? __lock_acquire+0xb97/0x1ce0 [ 221.682679][ T8011] ? bpf_trace_run2+0x3e1/0x590 [ 221.682718][ T8011] bpf_trace_printk+0xda/0x190 [ 221.682740][ T8011] ? __pfx_bpf_trace_printk+0x10/0x10 [ 221.682767][ T8011] ? bpf_trace_run2+0x3e1/0x590 [ 221.682820][ T8011] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 221.682837][ T8011] bpf_trace_run2+0x236/0x590 [ 221.682860][ T8011] ? __pfx_bpf_trace_run2+0x10/0x10 [ 221.682883][ T8011] ? __scm_destroy+0x104/0x150 [ 221.682905][ T8011] ? refcount_dec_and_lock_irqsave+0x3b/0x120 [ 221.682928][ T8011] kfree+0x233/0x4d0 [ 221.682944][ T8011] ? __pfx___schedule+0x10/0x10 [ 221.682968][ T8011] __scm_destroy+0x104/0x150 [ 221.682990][ T8011] __scm_recv_common.constprop.0+0x3f1/0x520 [ 221.683013][ T8011] ? __pfx___scm_recv_common.constprop.0+0x10/0x10 [ 221.683037][ T8011] ? bpf_trace_run2+0x2ab/0x590 [ 221.683059][ T8011] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 221.683084][ T8011] ? preempt_schedule_notrace+0x62/0xe0 [ 221.683110][ T8011] scm_recv_unix+0x99/0x400 [ 221.683132][ T8011] ? __pfx_scm_recv_unix+0x10/0x10 [ 221.683153][ T8011] ? rcu_is_watching+0x12/0xc0 [ 221.683171][ T8011] ? kfree+0x24f/0x4d0 [ 221.683194][ T8011] ? unix_free_vertices+0x1a/0x230 [ 221.683215][ T8011] __unix_dgram_recvmsg+0x769/0xc30 [ 221.683236][ T8011] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 221.683250][ T8011] ? __do_splice+0x15d/0x360 [ 221.683286][ T8011] unix_seqpacket_recvmsg+0x11c/0x170 [ 221.683304][ T8011] sock_recvmsg+0x1f9/0x250 [ 221.683325][ T8011] sock_read_iter+0x2b9/0x3b0 [ 221.683344][ T8011] ? __pfx_sock_read_iter+0x10/0x10 [ 221.683371][ T8011] ? trace_kmalloc+0x2b/0xd0 [ 221.683393][ T8011] ? __kmalloc_noprof+0x242/0x510 [ 221.683412][ T8011] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 221.683442][ T8011] copy_splice_read+0x618/0xc20 [ 221.683464][ T8011] ? trace_contention_end+0xdd/0x130 [ 221.683488][ T8011] ? __pfx_copy_splice_read+0x10/0x10 [ 221.683508][ T8011] ? __lock_acquire+0xb97/0x1ce0 [ 221.683542][ T8011] sock_splice_read+0xe9/0x110 [ 221.683559][ T8011] ? __pfx_sock_splice_read+0x10/0x10 [ 221.683575][ T8011] do_splice_read+0x282/0x370 [ 221.683595][ T8011] splice_file_to_pipe+0x109/0x120 [ 221.683617][ T8011] do_splice+0x118c/0x1fc0 [ 221.683635][ T8011] ? __lock_acquire+0x62e/0x1ce0 [ 221.683667][ T8011] ? __pfx_do_splice+0x10/0x10 [ 221.683684][ T8011] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 221.683703][ T8011] ? find_held_lock+0x2b/0x80 [ 221.683721][ T8011] __do_splice+0x15d/0x360 [ 221.683742][ T8011] ? __pfx___do_splice+0x10/0x10 [ 221.683767][ T8011] __ia32_sys_splice+0x189/0x250 [ 221.683789][ T8011] __do_fast_syscall_32+0x7c/0x3a0 [ 221.683818][ T8011] do_fast_syscall_32+0x32/0x80 [ 221.683844][ T8011] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 221.683865][ T8011] RIP: 0023:0xf7ff2579 [ 221.683880][ T8011] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 221.683897][ T8011] RSP: 002b:00000000f54b455c EFLAGS: 00000296 ORIG_RAX: 0000000000000139 [ 221.683914][ T8011] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 221.683925][ T8011] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000039011 [ 221.683934][ T8011] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 221.683945][ T8011] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 221.683955][ T8011] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 221.683978][ T8011] [ 221.836364][ T47] usb usb42-port1: attempt power cycle [ 222.137123][ T8014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.439'. [ 222.141451][ T8014] bridge_slave_1: left allmulticast mode [ 222.143844][ T8014] bridge_slave_1: left promiscuous mode [ 222.187536][ T8014] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.482142][ T47] usb usb42-port1: unable to enumerate USB device [ 222.504239][ T8014] bridge_slave_0: left allmulticast mode [ 222.506591][ T8014] bridge_slave_0: left promiscuous mode [ 222.509660][ T8014] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.833130][ T8034] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 222.836173][ T8034] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 222.840570][ T8034] vhci_hcd vhci_hcd.0: Device attached [ 222.930763][ T8038] netlink: 20 bytes leftover after parsing attributes in process `syz.3.443'. [ 223.014182][ T6074] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 223.084202][ T841] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 223.084278][ T842] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 223.264376][ T842] usb 7-1: Using ep0 maxpacket: 16 [ 223.268837][ T842] usb 7-1: config 0 has no interfaces? [ 223.271103][ T842] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 223.274935][ T842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.280361][ T842] usb 7-1: config 0 descriptor?? [ 223.498819][ T842] usb 7-1: USB disconnect, device number 3 [ 223.503353][ T8035] vhci_hcd: connection closed [ 223.503591][ T1143] vhci_hcd: stop threads [ 223.507091][ T1143] vhci_hcd: release socket [ 223.510751][ T1143] vhci_hcd: disconnect device [ 223.544172][ T6074] usb 5-1: Using ep0 maxpacket: 8 [ 223.550069][ T6074] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 223.553978][ T6074] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 223.558214][ T6074] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 223.562335][ T6074] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.564349][ T841] vhci_hcd: vhci_device speed not set [ 223.568438][ T6074] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 223.573602][ T6074] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.786702][ T6074] usb 5-1: GET_CAPABILITIES returned 0 [ 223.789066][ T6074] usbtmc 5-1:16.0: can't read capabilities [ 224.203073][ T8020] ======================================================= [ 224.203073][ T8020] WARNING: The mand mount option has been deprecated and [ 224.203073][ T8020] and is ignored by this kernel. Remove the mand [ 224.203073][ T8020] option from the mount to silence this warning. [ 224.203073][ T8020] ======================================================= [ 224.228566][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 224.234649][ T6056] usb 5-1: USB disconnect, device number 4 [ 224.297162][ T8056] FAULT_INJECTION: forcing a failure. [ 224.297162][ T8056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.302646][ T8056] CPU: 1 UID: 0 PID: 8056 Comm: syz.2.451 Not tainted syzkaller #0 PREEMPT(full) [ 224.302670][ T8056] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 224.302681][ T8056] Call Trace: [ 224.302689][ T8056] [ 224.302696][ T8056] dump_stack_lvl+0x16c/0x1f0 [ 224.302729][ T8056] should_fail_ex+0x512/0x640 [ 224.302757][ T8056] ? __pfx_stack_trace_save+0x10/0x10 [ 224.302801][ T8056] strncpy_from_user+0x3b/0x2e0 [ 224.302831][ T8056] strncpy_from_user_nofault+0x7f/0x180 [ 224.302858][ T8056] bpf_bprintf_prepare+0xe90/0x13f0 [ 224.302882][ T8056] ? splice_file_to_pipe+0x109/0x120 [ 224.302902][ T8056] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 224.302920][ T8056] ? __do_fast_syscall_32+0x7c/0x3a0 [ 224.302946][ T8056] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 224.302979][ T8056] ? bpf_trace_run2+0x3e1/0x590 [ 224.303004][ T8056] bpf_trace_printk+0xda/0x190 [ 224.303027][ T8056] ? __pfx_bpf_trace_printk+0x10/0x10 [ 224.303054][ T8056] ? bpf_trace_run2+0x3e1/0x590 [ 224.303080][ T8056] ? kasan_quarantine_put+0x10a/0x240 [ 224.303106][ T8056] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 224.303123][ T8056] bpf_trace_run2+0x236/0x590 [ 224.303148][ T8056] ? __pfx_bpf_trace_run2+0x10/0x10 [ 224.303173][ T8056] ? unix_write_space+0xc9/0x510 [ 224.303196][ T8056] ? skb_free_head+0x114/0x210 [ 224.303227][ T8056] kfree+0x233/0x4d0 [ 224.303250][ T8056] skb_free_head+0x114/0x210 [ 224.303275][ T8056] skb_release_data+0x795/0x9e0 [ 224.303308][ T8056] consume_skb+0xbf/0x100 [ 224.303326][ T8056] __unix_dgram_recvmsg+0x779/0xc30 [ 224.303349][ T8056] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 224.303364][ T8056] ? __do_splice+0x15d/0x360 [ 224.303400][ T8056] unix_seqpacket_recvmsg+0x11c/0x170 [ 224.303420][ T8056] sock_recvmsg+0x1f9/0x250 [ 224.303442][ T8056] sock_read_iter+0x2b9/0x3b0 [ 224.303468][ T8056] ? __pfx_sock_read_iter+0x10/0x10 [ 224.303496][ T8056] ? trace_kmalloc+0x2b/0xd0 [ 224.303519][ T8056] ? __kmalloc_noprof+0x242/0x510 [ 224.303547][ T8056] copy_splice_read+0x618/0xc20 [ 224.303569][ T8056] ? trace_contention_end+0xdd/0x130 [ 224.303596][ T8056] ? __pfx_copy_splice_read+0x10/0x10 [ 224.303632][ T8056] sock_splice_read+0xe9/0x110 [ 224.303650][ T8056] ? __pfx_sock_splice_read+0x10/0x10 [ 224.303666][ T8056] do_splice_read+0x282/0x370 [ 224.303687][ T8056] splice_file_to_pipe+0x109/0x120 [ 224.303710][ T8056] do_splice+0x118c/0x1fc0 [ 224.303730][ T8056] ? __lock_acquire+0x62e/0x1ce0 [ 224.303763][ T8056] ? __pfx_do_splice+0x10/0x10 [ 224.303780][ T8056] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 224.303799][ T8056] ? find_held_lock+0x2b/0x80 [ 224.303819][ T8056] __do_splice+0x15d/0x360 [ 224.303841][ T8056] ? __pfx___do_splice+0x10/0x10 [ 224.303868][ T8056] __ia32_sys_splice+0x189/0x250 [ 224.303892][ T8056] __do_fast_syscall_32+0x7c/0x3a0 [ 224.303921][ T8056] do_fast_syscall_32+0x32/0x80 [ 224.303948][ T8056] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 224.303969][ T8056] RIP: 0023:0xf7f61579 [ 224.303982][ T8056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 224.303998][ T8056] RSP: 002b:00000000f542455c EFLAGS: 00000296 ORIG_RAX: 0000000000000139 [ 224.304015][ T8056] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 224.304025][ T8056] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000039011 [ 224.304035][ T8056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 224.304061][ T8056] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 224.304071][ T8056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 224.304097][ T8056] [ 225.604173][ T49] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 225.669097][ T5992] Bluetooth: hci2: unexpected event for opcode 0x0008 [ 225.758337][ T49] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 225.763723][ T49] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.768820][ T49] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.776054][ T49] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 225.781451][ T49] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 225.784518][ T49] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 225.787342][ T49] usb 7-1: Manufacturer: syz [ 225.791952][ T49] usb 7-1: config 0 descriptor?? [ 226.005720][ T49] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 226.030236][ T49] appleir 0003:05AC:8243.0005: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 226.065263][ T8085] netlink: 20 bytes leftover after parsing attributes in process `syz.0.458'. [ 227.618691][ T8107] FAULT_INJECTION: forcing a failure. [ 227.618691][ T8107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.624286][ T8107] CPU: 1 UID: 0 PID: 8107 Comm: syz.3.463 Not tainted syzkaller #0 PREEMPT(full) [ 227.624310][ T8107] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 227.624320][ T8107] Call Trace: [ 227.624326][ T8107] [ 227.624334][ T8107] dump_stack_lvl+0x16c/0x1f0 [ 227.624365][ T8107] should_fail_ex+0x512/0x640 [ 227.624395][ T8107] strncpy_from_user+0x3b/0x2e0 [ 227.624424][ T8107] strncpy_from_user_nofault+0x7f/0x180 [ 227.624450][ T8107] bpf_bprintf_prepare+0xe90/0x13f0 [ 227.624474][ T8107] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 227.624493][ T8107] ? __unix_dgram_recvmsg+0x78b/0xc30 [ 227.624520][ T8107] ? bpf_trace_run2+0x3e1/0x590 [ 227.624542][ T8107] bpf_trace_printk+0xda/0x190 [ 227.624564][ T8107] ? __pfx_bpf_trace_printk+0x10/0x10 [ 227.624591][ T8107] ? bpf_trace_run2+0x3e1/0x590 [ 227.624623][ T8107] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 227.624640][ T8107] bpf_trace_run2+0x236/0x590 [ 227.624663][ T8107] ? __pfx_bpf_trace_run2+0x10/0x10 [ 227.624688][ T8107] ? copy_splice_read+0x897/0xc20 [ 227.624712][ T8107] kfree+0x233/0x4d0 [ 227.624735][ T8107] copy_splice_read+0x897/0xc20 [ 227.624758][ T8107] ? trace_contention_end+0xdd/0x130 [ 227.624783][ T8107] ? __pfx_copy_splice_read+0x10/0x10 [ 227.624803][ T8107] ? __lock_acquire+0xb97/0x1ce0 [ 227.624835][ T8107] sock_splice_read+0xe9/0x110 [ 227.624853][ T8107] ? __pfx_sock_splice_read+0x10/0x10 [ 227.624868][ T8107] do_splice_read+0x282/0x370 [ 227.624888][ T8107] splice_file_to_pipe+0x109/0x120 [ 227.624910][ T8107] do_splice+0x118c/0x1fc0 [ 227.624929][ T8107] ? __lock_acquire+0x62e/0x1ce0 [ 227.624959][ T8107] ? __pfx_do_splice+0x10/0x10 [ 227.624975][ T8107] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 227.624994][ T8107] ? find_held_lock+0x2b/0x80 [ 227.625013][ T8107] __do_splice+0x15d/0x360 [ 227.625033][ T8107] ? __pfx___do_splice+0x10/0x10 [ 227.625058][ T8107] __ia32_sys_splice+0x189/0x250 [ 227.625081][ T8107] __do_fast_syscall_32+0x7c/0x3a0 [ 227.625109][ T8107] do_fast_syscall_32+0x32/0x80 [ 227.625134][ T8107] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 227.625156][ T8107] RIP: 0023:0xf7f87579 [ 227.625169][ T8107] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 227.625197][ T8107] RSP: 002b:00000000f544455c EFLAGS: 00000296 ORIG_RAX: 0000000000000139 [ 227.625214][ T8107] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 227.625223][ T8107] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000039011 [ 227.625233][ T8107] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 227.625243][ T8107] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 227.625253][ T8107] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 227.625276][ T8107] [ 228.344333][ T6074] usb 7-1: USB disconnect, device number 4 [ 228.482170][ T8118] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 228.485024][ T8118] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 228.490013][ T8118] vhci_hcd vhci_hcd.0: Device attached [ 228.505809][ T8118] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(15) [ 228.508541][ T8118] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 228.514536][ T8118] vhci_hcd vhci_hcd.0: Device attached [ 228.525379][ T8118] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 228.540013][ T8118] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(20) [ 228.542802][ T8118] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 228.550241][ T8118] vhci_hcd vhci_hcd.0: Device attached [ 228.556376][ T8123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.466'. [ 228.570511][ T8118] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(22) [ 228.573310][ T8118] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 228.576924][ T8118] vhci_hcd vhci_hcd.0: Device attached [ 228.600453][ T8118] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(24) [ 228.603247][ T8118] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 228.606880][ T8118] vhci_hcd vhci_hcd.0: Device attached [ 228.610532][ T8118] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 228.615031][ T8118] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 228.625879][ T8118] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(32) [ 228.628750][ T8118] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 228.666003][ T8118] vhci_hcd vhci_hcd.0: Device attached [ 228.674176][ T29] vhci_hcd: vhci_device speed not set [ 228.738348][ T8124] vhci_hcd: connection closed [ 228.739078][ T61] vhci_hcd: stop threads [ 228.741071][ T8127] vhci_hcd: connection closed [ 228.741335][ T61] vhci_hcd: release socket [ 228.747577][ T8121] vhci_hcd: connection closed [ 228.749927][ T29] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 228.750537][ T8131] vhci_hcd: connection closed [ 228.755502][ T61] vhci_hcd: disconnect device [ 228.756814][ T8119] vhci_hcd: connection reset by peer [ 228.762046][ T61] vhci_hcd: stop threads [ 228.763841][ T61] vhci_hcd: release socket [ 228.768919][ T8109] netlink: 168 bytes leftover after parsing attributes in process `syz.2.464'. [ 228.769296][ T61] vhci_hcd: disconnect device [ 228.779100][ T8109] netlink: 168 bytes leftover after parsing attributes in process `syz.2.464'. [ 228.792258][ T61] vhci_hcd: stop threads [ 228.793929][ T61] vhci_hcd: release socket [ 228.795983][ T61] vhci_hcd: disconnect device [ 228.798008][ T61] vhci_hcd: stop threads [ 228.799588][ T61] vhci_hcd: release socket [ 228.801247][ T61] vhci_hcd: disconnect device [ 228.803276][ T61] vhci_hcd: stop threads [ 228.805729][ T61] vhci_hcd: release socket [ 228.807458][ T61] vhci_hcd: disconnect device [ 229.431426][ T8138] netlink: 168 bytes leftover after parsing attributes in process `syz.2.468'. [ 229.434588][ T8138] netlink: 168 bytes leftover after parsing attributes in process `syz.2.468'. [ 229.440304][ T8134] vhci_hcd: connection closed [ 229.454366][ T1144] vhci_hcd: stop threads [ 229.458064][ T1144] vhci_hcd: release socket [ 229.459946][ T1144] vhci_hcd: disconnect device [ 229.564231][ T841] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 230.234374][ T841] usb 8-1: Using ep0 maxpacket: 8 [ 230.245871][ T841] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 230.249964][ T841] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 230.254649][ T841] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 230.258120][ T841] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.263679][ T841] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 230.274153][ T841] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.492394][ T841] usb 8-1: GET_CAPABILITIES returned 0 [ 230.495358][ T841] usbtmc 8-1:16.0: can't read capabilities [ 230.695604][ T6055] usb 8-1: USB disconnect, device number 3 [ 231.594090][ T8182] netlink: 20 bytes leftover after parsing attributes in process `syz.3.476'. [ 231.824362][ T8178] netlink: 168 bytes leftover after parsing attributes in process `syz.0.479'. [ 231.834209][ T8178] netlink: 168 bytes leftover after parsing attributes in process `syz.0.479'. [ 232.144958][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.481'. [ 232.148614][ T8187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.481'. [ 232.213525][ T8191] KVM: debugfs: duplicate directory 8191-15 [ 232.395892][ T8195] infiniband syz1: set active [ 232.398623][ T8195] infiniband syz1: added syz_tun [ 232.439002][ T8195] RDS/IB: syz1: added [ 232.441146][ T8195] smc: adding ib device syz1 with port count 1 [ 232.443571][ T8195] smc: ib device syz1 port 1 has pnetid [ 233.027686][ T8193] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 233.032151][ T8193] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 233.034476][ T8193] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 233.403615][ T8209] overlay: Unknown parameter 'smackfshat' [ 234.014280][ T29] vhci_hcd: vhci_device speed not set [ 234.080791][ T8214] __nla_validate_parse: 2 callbacks suppressed [ 234.080834][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.486'. [ 234.296074][ T5992] Bluetooth: hci2: command 0x0c1a tx timeout [ 234.333031][ T8219] loop2: detected capacity change from 0 to 7 [ 234.337548][ T7059] Dev loop2: unable to read RDB block 7 [ 234.339645][ T7059] loop2: unable to read partition table [ 234.342315][ T7059] loop2: partition table beyond EOD, truncated [ 234.347736][ T8219] Dev loop2: unable to read RDB block 7 [ 234.350523][ T8219] loop2: unable to read partition table [ 234.357756][ T8219] loop2: partition table beyond EOD, truncated [ 234.364287][ T8219] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 234.555015][ T8221] loop6: detected capacity change from 0 to 7 [ 234.574668][ T8221] Dev loop6: unable to read RDB block 7 [ 234.584061][ T8221] loop6: unable to read partition table [ 234.594399][ T8221] loop6: partition table beyond EOD, truncated [ 234.596723][ T8221] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 235.189827][ T8243] netlink: 20 bytes leftover after parsing attributes in process `syz.0.495'. [ 235.274046][ T5992] Bluetooth: hci3: command 0x0c1a tx timeout [ 235.278556][ T5992] Bluetooth: hci1: command 0x0c1a tx timeout [ 235.433789][ T8225] netlink: 168 bytes leftover after parsing attributes in process `syz.2.491'. [ 235.451329][ T8225] netlink: 168 bytes leftover after parsing attributes in process `syz.2.491'. [ 235.550570][ T49] usb usb38-port1: attempt power cycle [ 235.969266][ T8252] lo speed is unknown, defaulting to 1000 [ 235.972141][ T8252] lo speed is unknown, defaulting to 1000 [ 235.979298][ T8252] lo speed is unknown, defaulting to 1000 [ 235.999129][ T8252] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 236.061017][ T8254] netlink: 76 bytes leftover after parsing attributes in process `syz.3.498'. [ 236.071225][ T8252] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 236.123976][ T8252] lo speed is unknown, defaulting to 1000 [ 236.128045][ T8252] lo speed is unknown, defaulting to 1000 [ 236.132356][ T8252] lo speed is unknown, defaulting to 1000 [ 236.138829][ T8252] lo speed is unknown, defaulting to 1000 [ 236.144768][ T8255] smc: removing ib device syz1 [ 236.175102][ T49] usb usb38-port1: unable to enumerate USB device [ 236.210758][ T8262] loop6: detected capacity change from 0 to 7 [ 236.213971][ T8262] Dev loop6: unable to read RDB block 7 [ 236.218280][ T8262] loop6: unable to read partition table [ 236.221233][ T8262] loop6: partition table beyond EOD, truncated [ 236.225235][ T8262] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 236.235187][ T8260] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 236.335079][ T8264] block device autoloading is deprecated and will be removed. [ 236.424430][ T8267] loop0: detected capacity change from 0 to 2560 [ 236.456473][ T8267] buffer_io_error: 373 callbacks suppressed [ 236.456491][ T8267] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 236.463345][ T8267] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 236.481151][ T8267] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 236.490425][ T8267] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 236.500569][ T8267] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 236.507086][ T8267] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 236.513929][ T8267] Buffer I/O error on dev loop0, logical block 6, lost async page write [ 236.522543][ T8267] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 236.526720][ T8267] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 236.530342][ T8267] Buffer I/O error on dev loop0, logical block 9, lost async page write [ 237.874996][ T8280] fuse: Unknown parameter '0x0000000000000003' [ 238.021761][ T8286] netlink: 48 bytes leftover after parsing attributes in process `syz.1.509'. [ 238.140902][ T8289] netfs: Couldn't get user pages (rc=-14) [ 238.242798][ T8289] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 238.821077][ T8300] lo speed is unknown, defaulting to 1000 [ 239.150933][ T8302] netlink: 168 bytes leftover after parsing attributes in process `syz.3.513'. [ 239.161684][ T8302] netlink: 168 bytes leftover after parsing attributes in process `syz.3.513'. [ 239.496568][ T8315] lo speed is unknown, defaulting to 1000 [ 239.527029][ T8317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.515'. [ 239.582524][ T29] libceph: connect (1)[c::]:6789 error -101 [ 239.595960][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 239.908343][ T29] libceph: connect (1)[c::]:6789 error -101 [ 239.912083][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 239.934404][ T842] e1000 0000:00:06.0 eth0: Reset adapter [ 240.427604][ T29] libceph: connect (1)[c::]:6789 error -101 [ 240.441383][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 240.775468][ T8311] ceph: No mds server is up or the cluster is laggy [ 240.854101][ T8338] usb usb8: usbfs: process 8338 (syz.3.518) did not claim interface 0 before use [ 240.858240][ T8337] usb usb8: usbfs: process 8337 (syz.3.518) did not claim interface 0 before use [ 241.251300][ T8356] netfs: Couldn't get user pages (rc=-14) [ 241.359101][ T8356] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 241.373770][ T842] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 241.384621][ T40] audit: type=1326 audit(2000000009.020:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.3.522" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 241.395717][ T40] audit: type=1326 audit(2000000009.030:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.3.522" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 241.416714][ T40] audit: type=1326 audit(2000000009.050:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.3.522" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 241.424495][ T40] audit: type=1326 audit(2000000009.050:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.3.522" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 241.434219][ T40] audit: type=1326 audit(2000000009.050:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.3.522" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 241.442743][ T40] audit: type=1326 audit(2000000009.050:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.3.522" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 241.449889][ T40] audit: type=1326 audit(2000000009.050:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.3.522" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 241.458176][ T40] audit: type=1326 audit(2000000009.050:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.3.522" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 241.464978][ T40] audit: type=1326 audit(2000000009.050:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.3.522" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 241.472505][ T40] audit: type=1326 audit(2000000009.050:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.3.522" exe="/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 241.570990][ T842] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 241.583740][ T842] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023 [ 241.600197][ T842] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 241.611924][ T842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 241.636241][ T842] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 241.640119][ T842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.643646][ T842] usb 5-1: Product: syz [ 241.646043][ T842] usb 5-1: Manufacturer: syz [ 241.649950][ T842] usb 5-1: SerialNumber: syz [ 241.658511][ T842] usb 5-1: config 0 descriptor?? [ 241.661523][ T8343] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 241.668802][ T842] usb 5-1: ucan: probing device on interface #0 [ 241.672650][ T842] usb 5-1: ucan: invalid endpoint configuration [ 241.680765][ T842] usb 5-1: ucan: probe failed; try to update the device firmware [ 242.061637][ T842] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 243.786014][ T841] usb 5-1: USB disconnect, device number 5 [ 249.014268][ T8394] netlink: 'syz.3.528': attribute type 1 has an invalid length. [ 249.045322][ T8396] input: syz1 as /devices/virtual/input/input12 [ 249.056863][ T8394] 8021q: adding VLAN 0 to HW filter on device bond2 [ 249.075111][ T8382] netlink: 168 bytes leftover after parsing attributes in process `syz.1.525'. [ 249.077977][ T8382] netlink: 168 bytes leftover after parsing attributes in process `syz.1.525'. [ 249.120187][ T8394] veth3: entered promiscuous mode [ 249.211770][ T8405] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 249.214535][ T8405] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 249.218395][ T8405] vhci_hcd vhci_hcd.0: Device attached [ 249.230386][ T8405] netlink: 'syz.2.526': attribute type 14 has an invalid length. [ 249.593287][ T47] usb 42-1: SetAddress Request (10) to port 0 [ 249.595766][ T47] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 249.756740][ T8406] vhci_hcd: connection reset by peer [ 249.758797][ T8416] netfs: Couldn't get user pages (rc=-14) [ 249.764341][ T628] vhci_hcd: stop threads [ 249.766134][ T628] vhci_hcd: release socket [ 249.769104][ T628] vhci_hcd: disconnect device [ 249.860675][ T8425] netlink: 24 bytes leftover after parsing attributes in process `syz.3.533'. [ 249.877710][ T8416] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 250.025165][ T8430] loop6: detected capacity change from 0 to 7 [ 250.029378][ T8430] Dev loop6: unable to read RDB block 7 [ 250.031891][ T8430] loop6: unable to read partition table [ 250.035515][ T8430] loop6: partition table beyond EOD, truncated [ 250.037850][ T8430] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 250.253169][ T841] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 250.408030][ T841] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 250.411692][ T841] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.415071][ T841] usb 8-1: Product: syz [ 250.416822][ T841] usb 8-1: Manufacturer: syz [ 250.418730][ T841] usb 8-1: SerialNumber: syz [ 251.538807][ T841] rtl8150 8-1:1.0: couldn't reset the device [ 251.540936][ T841] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 252.592132][ T8489] netfs: Couldn't get user pages (rc=-14) [ 252.762652][ T841] usb 8-1: USB disconnect, device number 4 [ 252.770041][ T8489] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 252.863181][ T8504] 9pnet_virtio: no channels available for device syz [ 253.259861][ T8510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.551'. [ 253.639764][ T8520] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 253.642574][ T8520] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 253.646701][ T8520] vhci_hcd vhci_hcd.0: Device attached [ 254.034678][ T8527] netlink: 168 bytes leftover after parsing attributes in process `syz.3.553'. [ 254.039235][ T8527] netlink: 168 bytes leftover after parsing attributes in process `syz.3.553'. [ 254.905940][ T8540] macsec1: entered allmulticast mode [ 254.907504][ T8540] macsec0: entered allmulticast mode [ 254.908999][ T8540] veth1_macvtap: entered allmulticast mode [ 255.358405][ T8551] block nbd3: Send control failed (result -107) [ 255.360529][ T8551] block nbd3: Request send failed, requeueing [ 255.364458][ T118] block nbd3: Dead connection, failed to find a fallback [ 255.366981][ T118] block nbd3: shutting down sockets [ 255.368878][ T118] blk_print_req_error: 43 callbacks suppressed [ 255.368888][ T118] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 255.384215][ T8553] netfs: Couldn't get user pages (rc=-14) [ 255.413613][ T8553] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 255.474041][ T8556] netlink: 3 bytes leftover after parsing attributes in process `syz.0.558'. [ 255.489663][ T8556] batadv1: entered allmulticast mode [ 255.550683][ T8557] input: syz1 as /devices/virtual/input/input13 [ 255.804934][ T8521] vhci_hcd: connection reset by peer [ 255.807740][ T1144] vhci_hcd: stop threads [ 255.809794][ T1144] vhci_hcd: release socket [ 255.812248][ T1144] vhci_hcd: disconnect device [ 255.812383][ T47] usb 42-1: device descriptor read/8, error -110 [ 256.220261][ T8559] netem: incorrect ge model size [ 256.223565][ T8559] netem: change failed [ 256.247924][ T8561] netem: incorrect ge model size [ 256.250473][ T8561] netem: change failed [ 256.398032][ T47] usb usb42-port1: attempt power cycle [ 256.974037][ T47] usb usb42-port1: unable to enumerate USB device [ 257.439446][ T8577] FAULT_INJECTION: forcing a failure. [ 257.439446][ T8577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.445376][ T8577] CPU: 1 UID: 0 PID: 8577 Comm: syz.0.565 Not tainted syzkaller #0 PREEMPT(full) [ 257.445402][ T8577] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 257.445414][ T8577] Call Trace: [ 257.445421][ T8577] [ 257.445429][ T8577] dump_stack_lvl+0x16c/0x1f0 [ 257.445463][ T8577] should_fail_ex+0x512/0x640 [ 257.445496][ T8577] strncpy_from_user+0x3b/0x2e0 [ 257.445526][ T8577] strncpy_from_user_nofault+0x7f/0x180 [ 257.445554][ T8577] bpf_bprintf_prepare+0xe90/0x13f0 [ 257.445581][ T8577] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 257.445599][ T8577] ? lock_acquire+0x179/0x350 [ 257.445623][ T8577] ? find_held_lock+0x2b/0x80 [ 257.445652][ T8577] ? sched_clock+0x2e/0x60 [ 257.445677][ T8577] bpf_trace_printk+0xda/0x190 [ 257.445703][ T8577] ? __pfx_bpf_trace_printk+0x10/0x10 [ 257.445734][ T8577] ? sched_clock+0x2e/0x60 [ 257.445770][ T8577] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 257.445789][ T8577] bpf_trace_run2+0x353/0x590 [ 257.445818][ T8577] ? __pfx_bpf_trace_run2+0x10/0x10 [ 257.445854][ T8577] ? tomoyo_realpath_from_path+0xb5/0x6e0 [ 257.445890][ T8577] kfree+0x233/0x4d0 [ 257.445913][ T8577] tomoyo_realpath_from_path+0xb5/0x6e0 [ 257.445941][ T8577] ? tomoyo_profile+0x47/0x60 [ 257.445960][ T8577] tomoyo_path_number_perm+0x245/0x580 [ 257.445983][ T8577] ? tomoyo_path_number_perm+0x237/0x580 [ 257.446007][ T8577] ? finish_task_switch.isra.0+0x1f4/0xc10 [ 257.446029][ T8577] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 257.446051][ T8577] ? rcu_is_watching+0x12/0xc0 [ 257.446072][ T8577] ? lockdep_hardirqs_on+0x7c/0x110 [ 257.446126][ T8577] ? find_held_lock+0x2b/0x80 [ 257.446145][ T8577] ? hook_file_ioctl_common+0x145/0x410 [ 257.446178][ T8577] ? __fget_files+0x20e/0x3c0 [ 257.446205][ T8577] security_file_ioctl_compat+0x9b/0x240 [ 257.446235][ T8577] __ia32_compat_sys_ioctl+0xc3/0x370 [ 257.446270][ T8577] __do_fast_syscall_32+0x7c/0x3a0 [ 257.446302][ T8577] do_fast_syscall_32+0x32/0x80 [ 257.446332][ T8577] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 257.446356][ T8577] RIP: 0023:0xf7ff2579 [ 257.446373][ T8577] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 257.446392][ T8577] RSP: 002b:00000000f54b455c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 257.446410][ T8577] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000005441 [ 257.446423][ T8577] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 257.446434][ T8577] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 257.446445][ T8577] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 257.446456][ T8577] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 257.446516][ T8577] [ 258.566665][ T8589] input: syz1 as /devices/virtual/input/input14 [ 259.500857][ T8601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.571'. [ 259.521084][ T8601] 8021q: adding VLAN 0 to HW filter on device bond3 [ 259.957557][ T8612] netlink: 168 bytes leftover after parsing attributes in process `syz.3.572'. [ 259.961153][ T8612] netlink: 168 bytes leftover after parsing attributes in process `syz.3.572'. [ 260.525606][ T8636] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 261.091880][ T8651] PKCS8: Unsupported PKCS#8 version [ 262.185377][ T8677] FAULT_INJECTION: forcing a failure. [ 262.185377][ T8677] name failslab, interval 1, probability 0, space 0, times 0 [ 262.191578][ T8677] CPU: 1 UID: 0 PID: 8677 Comm: syz.2.586 Not tainted syzkaller #0 PREEMPT(full) [ 262.191593][ T8677] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 262.191600][ T8677] Call Trace: [ 262.191605][ T8677] [ 262.191609][ T8677] dump_stack_lvl+0x16c/0x1f0 [ 262.191629][ T8677] should_fail_ex+0x512/0x640 [ 262.191647][ T8677] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 262.191661][ T8677] should_failslab+0xc2/0x120 [ 262.191676][ T8677] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 262.191688][ T8677] ? devpts_mntget+0x2fd/0x410 [ 262.191700][ T8677] ? alloc_empty_file+0x55/0x1e0 [ 262.191718][ T8677] alloc_empty_file+0x55/0x1e0 [ 262.191734][ T8677] dentry_open+0x46/0xd0 [ 262.191750][ T8677] ptm_open_peer+0x1bf/0x290 [ 262.191765][ T8677] ? __pfx_ptm_open_peer+0x10/0x10 [ 262.191782][ T8677] tty_ioctl+0x1174/0x1680 [ 262.191800][ T8677] ? __pfx_tty_ioctl+0x10/0x10 [ 262.191815][ T8677] ? do_vfs_ioctl+0x128/0x14f0 [ 262.191832][ T8677] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 262.191853][ T8677] ? find_held_lock+0x2b/0x80 [ 262.191864][ T8677] ? hook_file_ioctl_common+0x145/0x410 [ 262.191887][ T8677] ? __fget_files+0x20e/0x3c0 [ 262.191901][ T8677] tty_compat_ioctl+0xb9/0x4d0 [ 262.191917][ T8677] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 262.191933][ T8677] __ia32_compat_sys_ioctl+0x23f/0x370 [ 262.191952][ T8677] __do_fast_syscall_32+0x7c/0x3a0 [ 262.191971][ T8677] do_fast_syscall_32+0x32/0x80 [ 262.191987][ T8677] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 262.192001][ T8677] RIP: 0023:0xf7f61579 [ 262.192010][ T8677] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 262.192021][ T8677] RSP: 002b:00000000f542455c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 262.192031][ T8677] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000005441 [ 262.192038][ T8677] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 262.192044][ T8677] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 262.192050][ T8677] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 262.192056][ T8677] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 262.192069][ T8677] [ 262.543870][ T8664] syz.1.583 (8664) used greatest stack depth: 19736 bytes left [ 262.742830][ T47] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 262.914886][ T47] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 262.917911][ T47] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 262.921013][ T47] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 262.950143][ T47] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 262.961953][ T47] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 262.969982][ T47] usb 8-1: Product: syz [ 262.971916][ T47] usb 8-1: Manufacturer: syz [ 262.977062][ T47] usb 8-1: SerialNumber: syz [ 263.029078][ T8694] lo speed is unknown, defaulting to 1000 [ 263.202567][ T47] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 263.312607][ T34] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 263.494165][ T34] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 263.499475][ T34] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 263.505924][ T34] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 263.509832][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.524405][ T8695] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 263.533484][ T34] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 264.040664][ T8705] netlink: 28 bytes leftover after parsing attributes in process `syz.1.593'. [ 264.244234][ T8708] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 264.247119][ T8708] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 264.250880][ T8708] vhci_hcd vhci_hcd.0: Device attached [ 264.271175][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 264.271191][ T40] audit: type=1800 audit(2000000031.901:91): pid=8708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.594" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 264.349241][ T8711] netlink: 20 bytes leftover after parsing attributes in process `syz.1.593'. [ 264.352492][ T6056] page_pool_release_retry() stalled pool shutdown: id 26, 1 inflight 60 sec [ 264.522585][ T47] usb 38-1: SetAddress Request (6) to port 0 [ 264.524804][ T47] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 265.272604][ T6027] usb 8-1: USB disconnect, device number 5 [ 265.278189][ T6027] usblp0: removed [ 266.196906][ T8709] vhci_hcd: connection reset by peer [ 266.201172][ T628] vhci_hcd: stop threads [ 266.204015][ T628] vhci_hcd: release socket [ 266.205856][ T628] vhci_hcd: disconnect device [ 266.397267][ T6056] usb 7-1: USB disconnect, device number 5 [ 266.440915][ T8727] misc userio: No port type given on /dev/userio [ 267.285796][ T6048] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 267.295022][ T6048] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz1] on syz0 [ 267.539297][ T8761] netlink: 'syz.1.605': attribute type 1 has an invalid length. [ 268.655488][ T8775] ubi31: attaching mtd0 [ 268.666947][ T8775] ubi31: scanning is finished [ 268.670931][ T8775] ubi31: empty MTD device detected [ 268.765424][ T8775] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 268.768324][ T8775] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 268.771156][ T8775] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 268.784519][ T8775] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 268.787642][ T8775] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 268.789843][ T8775] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 268.792768][ T8775] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1467447828 [ 268.795975][ T8775] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 268.800922][ T8777] ubi31: background thread "ubi_bgt31d" started, PID 8777 [ 268.908776][ T8785] netlink: 28 bytes leftover after parsing attributes in process `syz.3.611'. [ 269.001322][ T8789] netfs: Couldn't get user pages (rc=-14) [ 269.042690][ T8789] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 269.572096][ T47] usb 38-1: device descriptor read/8, error -110 [ 269.926376][ T8810] sctp: [Deprecated]: syz.2.614 (pid 8810) Use of struct sctp_assoc_value in delayed_ack socket option. [ 269.926376][ T8810] Use struct sctp_sack_info instead [ 269.972666][ T47] usb usb38-port1: attempt power cycle [ 270.555485][ T47] usb usb38-port1: unable to enumerate USB device [ 271.033419][ T8822] block device autoloading is deprecated and will be removed. [ 271.038164][ T8822] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 272.378823][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 272.381617][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 273.141206][ T8863] netlink: 168 bytes leftover after parsing attributes in process `syz.0.629'. [ 273.144381][ T8863] netlink: 168 bytes leftover after parsing attributes in process `syz.0.629'. [ 273.173764][ T8874] /dev/sr0: Can't open blockdev [ 273.394402][ T8880] netlink: 168 bytes leftover after parsing attributes in process `syz.2.633'. [ 273.397354][ T8880] netlink: 168 bytes leftover after parsing attributes in process `syz.2.633'. [ 273.718737][ T8904] netlink: 20 bytes leftover after parsing attributes in process `syz.3.639'. [ 273.724613][ T8905] netlink: 20 bytes leftover after parsing attributes in process `syz.3.639'. [ 274.806520][ T8922] netlink: 168 bytes leftover after parsing attributes in process `syz.0.644'. [ 274.810601][ T8922] netlink: 168 bytes leftover after parsing attributes in process `syz.0.644'. [ 276.082449][ T8954] netlink: 'syz.2.648': attribute type 4 has an invalid length. [ 276.751298][ T8961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.654'. [ 277.578878][ T8975] netlink: 168 bytes leftover after parsing attributes in process `syz.0.658'. [ 277.876752][ T8989] lo speed is unknown, defaulting to 1000 [ 277.972324][ T9000] netlink: 'syz.2.664': attribute type 10 has an invalid length. [ 277.988013][ T8996] 8021q: adding VLAN 0 to HW filter on device bond2 [ 278.033043][ T9000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.037676][ T9000] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 278.205021][ T8993] __nla_validate_parse: 2 callbacks suppressed [ 278.205036][ T8993] netlink: 168 bytes leftover after parsing attributes in process `syz.1.663'. [ 278.211093][ T8993] netlink: 168 bytes leftover after parsing attributes in process `syz.1.663'. [ 278.248228][ T9008] netfs: Couldn't get user pages (rc=-14) [ 278.266660][ T9008] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 278.482019][ T9016] input: syz1 as /devices/virtual/input/input15 [ 278.583083][ T9020] netlink: 168 bytes leftover after parsing attributes in process `syz.2.667'. [ 278.586668][ T9020] netlink: 168 bytes leftover after parsing attributes in process `syz.2.667'. [ 278.642396][ T9022] input: syz1 as /devices/virtual/input/input16 [ 278.664180][ T9016] /dev/sr0: Can't open blockdev [ 279.765766][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.674'. [ 280.117383][ T9065] netlink: 168 bytes leftover after parsing attributes in process `syz.0.680'. [ 280.120267][ T9065] netlink: 168 bytes leftover after parsing attributes in process `syz.0.680'. [ 281.526346][ T9094] sctp: [Deprecated]: syz.0.688 (pid 9094) Use of int in max_burst socket option deprecated. [ 281.526346][ T9094] Use struct sctp_assoc_value instead [ 281.558508][ T9094] netlink: 24 bytes leftover after parsing attributes in process `syz.0.688'. [ 281.605864][ T9094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.688'. [ 282.612164][ T9112] random: crng reseeded on system resumption [ 282.900344][ T9121] 9pnet_fd: Insufficient options for proto=fd [ 283.674492][ T9131] netlink: 20 bytes leftover after parsing attributes in process `syz.1.698'. [ 283.770411][ T9133] FAULT_INJECTION: forcing a failure. [ 283.770411][ T9133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.779762][ T9133] CPU: 3 UID: 0 PID: 9133 Comm: syz.0.699 Not tainted syzkaller #0 PREEMPT(full) [ 283.779790][ T9133] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 283.779817][ T9133] Call Trace: [ 283.779825][ T9133] [ 283.779833][ T9133] dump_stack_lvl+0x16c/0x1f0 [ 283.779865][ T9133] should_fail_ex+0x512/0x640 [ 283.779900][ T9133] _copy_to_user+0x32/0xd0 [ 283.779924][ T9133] simple_read_from_buffer+0xcb/0x170 [ 283.779951][ T9133] proc_fail_nth_read+0x197/0x240 [ 283.779973][ T9133] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 283.779995][ T9133] ? rw_verify_area+0xcf/0x6c0 [ 283.780015][ T9133] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 283.780038][ T9133] vfs_read+0x1e4/0xcf0 [ 283.780063][ T9133] ? __pfx_vfs_read+0x10/0x10 [ 283.780079][ T9133] ? find_held_lock+0x2b/0x80 [ 283.780107][ T9133] ? __fget_files+0x20e/0x3c0 [ 283.780135][ T9133] ksys_read+0x12a/0x250 [ 283.780156][ T9133] ? __pfx_ksys_read+0x10/0x10 [ 283.780175][ T9133] ? __pfx___ia32_sys_umount+0x10/0x10 [ 283.780199][ T9133] ? rcu_is_watching+0x12/0xc0 [ 283.780223][ T9133] __do_fast_syscall_32+0x7c/0x3a0 [ 283.780254][ T9133] do_fast_syscall_32+0x32/0x80 [ 283.780282][ T9133] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 283.780305][ T9133] RIP: 0023:0xf7ff2579 [ 283.780320][ T9133] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 283.780337][ T9133] RSP: 002b:00000000f54f6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 283.780355][ T9133] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54f6620 [ 283.780366][ T9133] RDX: 000000000000000f RSI: 00000000f7484ff4 RDI: 0000000000000000 [ 283.780377][ T9133] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 283.780387][ T9133] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 283.780397][ T9133] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 283.780421][ T9133] [ 283.924885][ T9136] lo speed is unknown, defaulting to 1000 [ 283.972774][ T9137] lo speed is unknown, defaulting to 1000 [ 285.800157][ T9181] mkiss: ax0: crc mode is auto. [ 285.834723][ T9178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.707'. [ 286.562445][ T9191] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 286.564968][ T9191] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 286.568892][ T9191] vhci_hcd vhci_hcd.0: Device attached [ 286.800275][ T9192] nvme_fabrics: missing parameter 'transport=%s' [ 286.803308][ T9192] nvme_fabrics: missing parameter 'nqn=%s' [ 286.965765][ T9207] lo speed is unknown, defaulting to 1000 [ 287.269190][ T9197] vhci_hcd: connection closed [ 287.269800][ T6075] usb 38-1: SetAddress Request (10) to port 0 [ 287.274362][ T6075] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 287.278927][ T61] vhci_hcd: stop threads [ 287.280941][ T61] vhci_hcd: release socket [ 287.283107][ T61] vhci_hcd: disconnect device [ 287.292587][ T6075] usb 38-1: enqueue for inactive port 0 [ 287.408917][ T9205] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 287.761633][ T6075] usb usb38-port1: attempt power cycle [ 287.830780][ T9207] netlink: 28 bytes leftover after parsing attributes in process `syz.1.715'. [ 287.835643][ T9207] netlink: 'syz.1.715': attribute type 13 has an invalid length. [ 287.838155][ T9207] netlink: 'syz.1.715': attribute type 17 has an invalid length. [ 287.844690][ T9207] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 288.016252][ T9222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.718'. [ 288.073153][ T9225] netfs: Couldn't get user pages (rc=-14) [ 288.079265][ T9219] lo speed is unknown, defaulting to 1000 [ 288.107454][ T9225] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 288.107562][ T9228] usb usb3: usbfs: process 9228 (syz.2.720) did not claim interface 0 before use [ 288.117399][ T9230] usb usb3: usbfs: process 9230 (syz.2.720) did not claim interface 0 before use [ 288.196513][ T9233] loop2: detected capacity change from 0 to 7 [ 288.197672][ T9235] loop6: detected capacity change from 0 to 7 [ 288.207244][ T9235] Dev loop6: unable to read RDB block 7 [ 288.211297][ T9233] Dev loop2: unable to read RDB block 7 [ 288.213890][ T9235] loop6: unable to read partition table [ 288.215333][ T9233] loop2: unable to read partition table [ 288.216520][ T9235] loop6: partition table beyond EOD, truncated [ 288.222052][ T9233] loop2: partition table beyond EOD, truncated [ 288.223208][ T9235] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 288.240044][ T9233] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 288.323384][ T6075] usb usb38-port1: unable to enumerate USB device [ 288.479597][ T9246] netlink: 20 bytes leftover after parsing attributes in process `syz.3.723'. [ 289.440412][ T9262] lo speed is unknown, defaulting to 1000 [ 289.443282][ T9262] lo speed is unknown, defaulting to 1000 [ 289.448303][ T9262] lo speed is unknown, defaulting to 1000 [ 289.472663][ T9262] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 289.812870][ T9265] netlink: 'syz.0.730': attribute type 1 has an invalid length. [ 289.911627][ T9265] 8021q: adding VLAN 0 to HW filter on device bond2 [ 289.952291][ T9267] bond2: (slave veth5): Enslaving as an active interface with a down link [ 289.991091][ T9265] bond2: (slave veth0_to_bond): making interface the new active one [ 289.996805][ T9265] veth0_to_bond: entered promiscuous mode [ 290.000641][ T9265] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 290.033641][ T9269] overlayfs: missing 'workdir' [ 290.034357][ T9265] vlan2: entered allmulticast mode [ 290.038905][ T9265] bond2: entered allmulticast mode [ 290.041115][ T9265] veth0_to_bond: entered allmulticast mode [ 290.045043][ T9265] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 290.172873][ T9262] lo speed is unknown, defaulting to 1000 [ 290.176575][ T9262] lo speed is unknown, defaulting to 1000 [ 290.179850][ T9262] lo speed is unknown, defaulting to 1000 [ 290.187984][ T9262] lo speed is unknown, defaulting to 1000 [ 290.301685][ T9275] 9pnet_virtio: no channels available for device syz [ 290.351121][ T9275] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 290.476302][ T9279] bridge0: port 1(syz_tun) entered blocking state [ 290.485646][ T9279] bridge0: port 1(syz_tun) entered disabled state [ 290.491441][ T9279] syz_tun: entered allmulticast mode [ 290.497797][ T9279] syz_tun: entered promiscuous mode [ 290.504741][ T9279] bridge0: port 1(syz_tun) entered blocking state [ 290.507949][ T9279] bridge0: port 1(syz_tun) entered forwarding state [ 290.519182][ T9279] netlink: 'syz.1.732': attribute type 10 has an invalid length. [ 290.881925][ T9289] 9pnet_virtio: no channels available for device syz [ 290.908768][ T9281] nvme_fabrics: missing parameter 'transport=%s' [ 290.911788][ T9281] nvme_fabrics: missing parameter 'nqn=%s' [ 290.967548][ T9293] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 291.333651][ T9297] netlink: 20 bytes leftover after parsing attributes in process `syz.3.738'. [ 292.074873][ T9309] netfs: Couldn't get user pages (rc=-14) [ 292.075694][ T5992] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 292.084916][ T5992] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 292.090874][ T5992] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 292.102693][ T5992] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 292.107176][ T5992] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 292.131593][ T9309] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 292.146054][ T9310] lo speed is unknown, defaulting to 1000 [ 292.150006][ T9310] lo speed is unknown, defaulting to 1000 [ 292.239768][ T9307] netlink: 168 bytes leftover after parsing attributes in process `syz.2.743'. [ 292.251123][ T9307] netlink: 168 bytes leftover after parsing attributes in process `syz.2.743'. [ 292.365701][ T9310] chnl_net:caif_netlink_parms(): no params data found [ 292.722671][ T9310] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.725339][ T9310] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.729015][ T9310] bridge_slave_0: entered allmulticast mode [ 292.737226][ T9310] bridge_slave_0: entered promiscuous mode [ 292.742067][ T9310] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.744526][ T9310] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.747061][ T9310] bridge_slave_1: entered allmulticast mode [ 292.750272][ T9310] bridge_slave_1: entered promiscuous mode [ 292.786822][ T9329] mmap: syz.3.746 (9329): VmData 45764608 exceed data ulimit 32768. Update limits or use boot option ignore_rlimit_data. [ 292.818074][ T9310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.825348][ T9310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.873100][ T9310] team0: Port device team_slave_0 added [ 292.877283][ T9310] team0: Port device team_slave_1 added [ 292.922970][ T9310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.926193][ T9310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.936280][ T9310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.945696][ T9310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.948821][ T9310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.961937][ T9310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.197466][ T9310] hsr_slave_0: entered promiscuous mode [ 293.201467][ T9310] hsr_slave_1: entered promiscuous mode [ 293.203717][ T9310] debugfs: 'hsr0' already exists in 'hsr' [ 293.205543][ T9310] Cannot create hsr debugfs directory [ 294.141308][ T5992] Bluetooth: hci2: command tx timeout [ 294.246424][ T9310] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 294.255068][ T9310] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 294.264069][ T9310] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 294.269752][ T9310] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 294.379507][ T9310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.397725][ T9310] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.408251][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.411370][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.422103][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.425312][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.684408][ T9364] netlink: 168 bytes leftover after parsing attributes in process `syz.1.752'. [ 294.688644][ T9364] netlink: 168 bytes leftover after parsing attributes in process `syz.1.752'. [ 294.855569][ T9310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.075373][ T9310] veth0_vlan: entered promiscuous mode [ 295.083004][ T9310] veth1_vlan: entered promiscuous mode [ 295.104017][ T9310] veth0_macvtap: entered promiscuous mode [ 295.110196][ T9310] veth1_macvtap: entered promiscuous mode [ 295.139283][ T9310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.150913][ T9310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.159488][ T628] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.164327][ T628] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.168715][ T628] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.173234][ T628] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.246821][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.254659][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.279530][ T628] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.283487][ T628] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.360216][ T9383] loop6: detected capacity change from 0 to 7 [ 295.366274][ T9383] Dev loop6: unable to read RDB block 7 [ 295.368542][ T9383] loop6: unable to read partition table [ 295.371249][ T9383] loop6: partition table beyond EOD, truncated [ 295.372926][ T9382] lo speed is unknown, defaulting to 1000 [ 295.376847][ T9383] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 295.377814][ T9382] lo speed is unknown, defaulting to 1000 [ 295.425074][ T9386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.754'. [ 295.444657][ T9385] netfs: Couldn't get user pages (rc=-14) [ 295.491875][ T9385] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 295.957394][ T9404] loop2: detected capacity change from 0 to 7 [ 295.963747][ T9404] Dev loop2: unable to read RDB block 7 [ 295.965644][ T9404] loop2: unable to read partition table [ 295.967730][ T9404] loop2: partition table beyond EOD, truncated [ 295.977553][ T9404] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 296.073899][ T9406] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 296.076335][ T9406] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 296.080005][ T9406] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 296.083292][ T9406] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 296.087281][ T9406] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 296.089281][ T9406] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 296.113338][ T9416] loop6: detected capacity change from 0 to 7 [ 296.118851][ T8697] Dev loop6: unable to read RDB block 7 [ 296.121580][ T8697] loop6: unable to read partition table [ 296.124125][ T8697] loop6: partition table beyond EOD, truncated [ 296.133528][ T9416] Dev loop6: unable to read RDB block 7 [ 296.135477][ T9416] loop6: unable to read partition table [ 296.137342][ T9416] loop6: partition table beyond EOD, truncated [ 296.144725][ T9416] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 296.296108][ T40] audit: type=1326 audit(2000000063.933:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9417 comm="syz.1.765" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 296.315685][ T40] audit: type=1326 audit(2000000063.933:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9417 comm="syz.1.765" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 296.315989][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 296.330576][ T40] audit: type=1326 audit(2000000063.943:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9417 comm="syz.1.765" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 296.350593][ T40] audit: type=1326 audit(2000000063.943:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9417 comm="syz.1.765" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 296.357331][ T40] audit: type=1326 audit(2000000063.943:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9417 comm="syz.1.765" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 296.370725][ T40] audit: type=1326 audit(2000000063.943:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9417 comm="syz.1.765" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 296.377524][ T40] audit: type=1326 audit(2000000063.943:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9417 comm="syz.1.765" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 296.401580][ T40] audit: type=1326 audit(2000000063.943:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9417 comm="syz.1.765" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 296.408638][ T40] audit: type=1326 audit(2000000063.943:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9417 comm="syz.1.765" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 296.416652][ T40] audit: type=1326 audit(2000000063.943:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9417 comm="syz.1.765" exe="/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 296.513123][ T9] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 296.515758][ T9] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 296.519381][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 296.533417][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 296.536907][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 296.543735][ T9] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 296.548732][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.575320][ T9] usb 8-1: config 0 descriptor?? [ 296.577362][ T9413] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 296.590709][ T9430] netfs: Couldn't get user pages (rc=-14) [ 296.635000][ T9430] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 296.665471][ T9435] lo speed is unknown, defaulting to 1000 [ 296.669016][ T9435] lo speed is unknown, defaulting to 1000 [ 296.846334][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 296.848502][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 296.860572][ T9] usb 8-1: USB disconnect, device number 6 [ 296.928172][ T9446] loop2: detected capacity change from 0 to 7 [ 296.931841][ T9446] Dev loop2: unable to read RDB block 7 [ 296.933949][ T9446] loop2: unable to read partition table [ 296.936219][ T9446] loop2: partition table beyond EOD, truncated [ 296.938782][ T9446] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 297.009240][ T9450] netlink: 'syz.2.773': attribute type 13 has an invalid length. [ 297.013553][ T9450] netlink: 'syz.2.773': attribute type 17 has an invalid length. [ 297.038544][ T9448] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.118159][ T9450] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 297.185892][ T9448] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.213768][ T9461] loop6: detected capacity change from 0 to 7 [ 297.218816][ T8697] Dev loop6: unable to read RDB block 7 [ 297.224836][ T8697] loop6: unable to read partition table [ 297.227159][ T8697] loop6: partition table beyond EOD, truncated [ 297.230311][ T9461] Dev loop6: unable to read RDB block 7 [ 297.233309][ T9461] loop6: unable to read partition table [ 297.235678][ T9461] loop6: partition table beyond EOD, truncated [ 297.238139][ T9461] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 297.288124][ T9448] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.394638][ T9448] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.615038][ T72] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.662656][ T1144] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.666197][ T1144] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.681960][ T72] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.200463][ T6048] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 298.291678][ T9482] loop2: detected capacity change from 0 to 7 [ 298.298688][ T9482] Dev loop2: unable to read RDB block 7 [ 298.302148][ T9482] loop2: unable to read partition table [ 298.303910][ T9482] loop2: partition table beyond EOD, truncated [ 298.310478][ T9482] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 298.349654][ T9484] netfs: Couldn't get user pages (rc=-14) [ 298.350622][ T6048] usb 8-1: Using ep0 maxpacket: 8 [ 298.354793][ T6048] usb 8-1: unable to get BOS descriptor or descriptor too short [ 298.357778][ T6048] usb 8-1: config 4 has an invalid interface number: 116 but max is 0 [ 298.360116][ T6048] usb 8-1: config 4 has no interface number 0 [ 298.362754][ T6048] usb 8-1: config 4 interface 116 has no altsetting 0 [ 298.370685][ T6048] usb 8-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=a9.28 [ 298.373218][ T6048] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.375510][ T6048] usb 8-1: Product: syz [ 298.376712][ T6048] usb 8-1: Manufacturer: syz [ 298.378111][ T6048] usb 8-1: SerialNumber: syz [ 298.395835][ T9484] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 298.591816][ T9478] netlink: 'syz.3.780': attribute type 1 has an invalid length. [ 298.602503][ T6048] esd_usb 8-1:4.116: sending version message failed [ 298.604544][ T6048] esd_usb 8-1:4.116: probe with driver esd_usb failed with error -22 [ 298.620589][ T6048] usb 8-1: USB disconnect, device number 7 [ 298.676493][ T9492] netlink: 168 bytes leftover after parsing attributes in process `syz.4.783'. [ 298.680227][ T9492] netlink: 168 bytes leftover after parsing attributes in process `syz.4.783'. [ 299.101917][ T9498] netlink: 168 bytes leftover after parsing attributes in process `syz.2.785'. [ 299.105994][ T9498] netlink: 168 bytes leftover after parsing attributes in process `syz.2.785'. [ 299.479276][ T9519] loop6: detected capacity change from 0 to 7 [ 299.490242][ T9519] Dev loop6: unable to read RDB block 7 [ 299.493071][ T9519] loop6: unable to read partition table [ 299.495107][ T9519] loop6: partition table beyond EOD, truncated [ 299.497561][ T9519] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 300.571912][ T9545] netlink: 20 bytes leftover after parsing attributes in process `syz.2.797'. [ 301.019632][ T9556] loop6: detected capacity change from 0 to 7 [ 301.028222][ T9556] Dev loop6: unable to read RDB block 7 [ 301.030758][ T9556] loop6: unable to read partition table [ 301.033072][ T9556] loop6: partition table beyond EOD, truncated [ 301.035217][ T9556] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 301.782345][ T1144] veth0_to_bond: left promiscuous mode [ 301.911167][ T9589] Driver unsupported XDP return value 0 on prog (id 203) dev N/A, expect packet loss! [ 301.995413][ T9595] loop6: detected capacity change from 0 to 7 [ 301.999689][ T8697] Dev loop6: unable to read RDB block 7 [ 302.003911][ T8697] loop6: unable to read partition table [ 302.006509][ T8697] loop6: partition table beyond EOD, truncated [ 302.023647][ T9595] Dev loop6: unable to read RDB block 7 [ 302.025884][ T9595] loop6: unable to read partition table [ 302.028538][ T9595] loop6: partition table beyond EOD, truncated [ 302.031788][ T9595] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 302.108017][ T9602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.810'. [ 302.112022][ T9602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.186796][ T9602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.469730][ T9620] netlink: 20 bytes leftover after parsing attributes in process `syz.4.811'. [ 302.719413][ T9619] loop2: detected capacity change from 0 to 7 [ 302.727233][ T9619] Dev loop2: unable to read RDB block 7 [ 302.732246][ T9619] loop2: unable to read partition table [ 302.734799][ T9619] loop2: partition table beyond EOD, truncated [ 302.737404][ T9619] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 302.764053][ T9622] lo speed is unknown, defaulting to 1000 [ 302.783514][ T9622] lo speed is unknown, defaulting to 1000 [ 303.267594][ T9653] fuse: Unknown parameter '000000000000000000030x0000000000000004' [ 303.342881][ T9655] overlay: ./file0 is not a directory [ 303.581655][ T9659] syzkaller0: entered promiscuous mode [ 303.598322][ T9661] comedi comedi3: comedi_config --init_data is deprecated [ 303.884861][ T9669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.823'. [ 305.815710][ T9678] netlink: 20 bytes leftover after parsing attributes in process `syz.1.825'. [ 306.507508][ T9694] ubi: mtd0 is already attached to ubi31 [ 307.276362][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 307.276615][ T40] audit: type=1326 audit(2000000074.914:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9712 comm="syz.4.834" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 307.289739][ T40] audit: type=1326 audit(2000000074.914:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9712 comm="syz.4.834" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 307.300748][ T40] audit: type=1326 audit(2000000074.914:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9712 comm="syz.4.834" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 308.250419][ T9737] netlink: 88 bytes leftover after parsing attributes in process `syz.3.839'. [ 308.260062][ T9737] netlink: 36 bytes leftover after parsing attributes in process `syz.3.839'. [ 308.387749][ T9747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.839'. [ 308.393078][ T9747] netlink: 'syz.3.839': attribute type 10 has an invalid length. [ 308.400494][ T9747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.404126][ T9747] team0: Port device bond0 added [ 308.472178][ T9747] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.598062][ T9747] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.727275][ T9747] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.882428][ T9747] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.217383][ T61] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.294326][ T61] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.296984][ T61] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.312512][ T61] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.461190][ T9] libceph: connect (1)[c::]:6789 error -101 [ 309.463262][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 309.502429][ T40] audit: type=1326 audit(2000000077.144:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9782 comm="syz.2.841" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x0 [ 309.608101][ T9783] ceph: No mds server is up or the cluster is laggy [ 309.650776][ T9789] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.814241][ T9824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.845'. [ 311.701849][ T9830] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 311.706774][ T34] lo speed is unknown, defaulting to 1000 [ 312.145154][ T40] audit: type=1326 audit(2000000079.764:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9835 comm="syz.4.851" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 312.155267][ T40] audit: type=1326 audit(2000000079.764:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9835 comm="syz.4.851" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 312.165804][ T40] audit: type=1326 audit(2000000079.764:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9835 comm="syz.4.851" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 312.176768][ T40] audit: type=1326 audit(2000000079.764:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9835 comm="syz.4.851" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 312.187851][ T40] audit: type=1326 audit(2000000079.764:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9835 comm="syz.4.851" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 312.198176][ T40] audit: type=1326 audit(2000000079.764:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9835 comm="syz.4.851" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 312.364550][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 312.364562][ T40] audit: type=1326 audit(2000000079.994:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9835 comm="syz.4.851" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 312.373616][ T40] audit: type=1326 audit(2000000079.994:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9835 comm="syz.4.851" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 312.751962][ T9846] infiniband syz1: set active [ 312.753521][ T9846] infiniband syz1: added syz_tun [ 312.774733][ T9846] RDS/IB: syz1: added [ 312.776064][ T9846] smc: adding ib device syz1 with port count 1 [ 312.778037][ T9846] smc: ib device syz1 port 1 has pnetid [ 312.853308][ T9847] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.882157][ T9849] netlink: 16 bytes leftover after parsing attributes in process `syz.1.853'. [ 312.891535][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.853'. [ 312.980432][ T9847] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.127250][ T9847] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.280811][ T9847] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.337780][ T9855] netlink: 168 bytes leftover after parsing attributes in process `syz.4.854'. [ 313.341411][ T9855] netlink: 168 bytes leftover after parsing attributes in process `syz.4.854'. [ 313.550321][ T72] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.559311][ T1143] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.583773][ T1143] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.586922][ T1143] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.003415][ T9879] loop2: detected capacity change from 0 to 7 [ 314.008544][ T9879] Dev loop2: unable to read RDB block 7 [ 314.008575][ T9879] loop2: unable to read partition table [ 314.008670][ T9879] loop2: partition table beyond EOD, truncated [ 314.015518][ T9879] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 314.188378][ T9883] netlink: 'syz.1.862': attribute type 13 has an invalid length. [ 314.188428][ T9883] netlink: 'syz.1.862': attribute type 27 has an invalid length. [ 315.366230][ T9908] loop2: detected capacity change from 0 to 7 [ 315.369702][ T9908] Dev loop2: unable to read RDB block 7 [ 315.371630][ T9908] loop2: unable to read partition table [ 315.373890][ T9908] loop2: partition table beyond EOD, truncated [ 315.377524][ T9908] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 315.481159][ T9906] netlink: 168 bytes leftover after parsing attributes in process `syz.2.865'. [ 315.520611][ T9906] netlink: 168 bytes leftover after parsing attributes in process `syz.2.865'. [ 315.784719][ T9919] Invalid source name [ 315.786044][ T9919] UBIFS error (pid: 9919): cannot open "usrquota", error -22 [ 316.364299][ T9933] bridge_slave_0: entered promiscuous mode [ 316.508887][ T9936] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.609020][ T9936] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.686916][ T9945] loop2: detected capacity change from 0 to 7 [ 316.694020][ T9945] Dev loop2: unable to read RDB block 7 [ 316.695855][ T9945] loop2: unable to read partition table [ 316.697707][ T9945] loop2: partition table beyond EOD, truncated [ 316.700751][ T9945] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 316.805039][ T9936] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.873814][ T9936] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.043795][ T9952] netlink: 'syz.2.883': attribute type 11 has an invalid length. [ 317.046931][ T9952] netlink: 'syz.2.883': attribute type 10 has an invalid length. [ 317.053330][ T9952] netlink: 224 bytes leftover after parsing attributes in process `syz.2.883'. [ 318.106235][ T9962] lo speed is unknown, defaulting to 1000 [ 318.115462][ T9962] lo speed is unknown, defaulting to 1000 [ 318.707569][ T1244] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.764821][ T72] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.767932][ T72] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.803416][ T1144] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.186100][ T9987] loop2: detected capacity change from 0 to 7 [ 320.191922][ T8697] Dev loop2: unable to read RDB block 7 [ 320.193796][ T8697] loop2: unable to read partition table [ 320.198411][ T8697] loop2: partition table beyond EOD, truncated [ 320.215399][ T9987] Dev loop2: unable to read RDB block 7 [ 320.217842][ T9987] loop2: unable to read partition table [ 320.224866][ T9987] loop2: partition table beyond EOD, truncated [ 320.228194][ T9987] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 320.545011][T10002] netlink: 20 bytes leftover after parsing attributes in process `syz.4.892'. [ 321.019614][ T6027] page_pool_release_retry() stalled pool shutdown: id 27, 1 inflight 60 sec [ 323.173567][T10046] loop2: detected capacity change from 0 to 7 [ 323.179596][ T8697] Dev loop2: unable to read RDB block 7 [ 323.181777][ T8697] loop2: unable to read partition table [ 323.184522][ T8697] loop2: partition table beyond EOD, truncated [ 323.189150][T10046] Dev loop2: unable to read RDB block 7 [ 323.191468][T10046] loop2: unable to read partition table [ 323.193707][T10046] loop2: partition table beyond EOD, truncated [ 323.195769][T10046] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 323.235412][T10048] input: syz1 as /devices/virtual/input/input18 [ 323.350761][ T40] audit: type=1326 audit(2000000090.985:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10052 comm="syz.4.906" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 323.357754][ T40] audit: type=1326 audit(2000000090.985:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10052 comm="syz.4.906" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 323.366841][ T40] audit: type=1326 audit(2000000090.985:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10052 comm="syz.4.906" exe="/syz-executor" sig=0 arch=40000003 syscall=262 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 323.376506][ T40] audit: type=1326 audit(2000000090.985:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10052 comm="syz.4.906" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 323.385126][ T40] audit: type=1326 audit(2000000090.985:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10052 comm="syz.4.906" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 323.401186][ T40] audit: type=1326 audit(2000000090.985:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10052 comm="syz.4.906" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 323.410268][ T40] audit: type=1326 audit(2000000090.985:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10052 comm="syz.4.906" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 323.419906][ T40] audit: type=1326 audit(2000000090.985:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10052 comm="syz.4.906" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 323.430088][ T40] audit: type=1326 audit(2000000090.985:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10052 comm="syz.4.906" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 323.438881][ T40] audit: type=1326 audit(2000000090.985:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10052 comm="syz.4.906" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 323.462194][T10058] netlink: 36 bytes leftover after parsing attributes in process `syz.2.905'. [ 323.582586][T10060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.908'. [ 324.314953][T10080] netfs: Couldn't get user pages (rc=-14) [ 324.347915][T10080] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 324.430053][T10092] 9pnet_virtio: no channels available for device syz [ 326.473516][T10138] netlink: 20 bytes leftover after parsing attributes in process `syz.3.925'. [ 326.938079][T10144] fuse: Bad value for 'fd' [ 328.492768][T10178] netlink: 'syz.4.935': attribute type 1 has an invalid length. [ 328.823508][T10191] netlink: 20 bytes leftover after parsing attributes in process `syz.3.937'. [ 329.518527][ T9] Process accounting resumed [ 329.534130][T10206] input: syz0 as /devices/virtual/input/input19 [ 329.538878][ T6075] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 329.576595][ T8697] udevd[8697]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 329.624054][ T40] kauditd_printk_skb: 63 callbacks suppressed [ 329.624066][ T40] audit: type=1800 audit(2000000097.255:219): pid=10208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.943" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 329.699692][ T6075] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 329.703979][ T6075] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 329.707663][ T6075] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 329.711778][ T6075] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 329.715100][ T6075] usb 9-1: config 0 interface 0 has no altsetting 0 [ 329.719907][ T6075] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 329.723293][ T6075] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 329.726893][ T6075] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 329.730128][ T6075] usb 9-1: config 0 interface 0 has no altsetting 0 [ 329.736014][ T6075] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 329.740999][ T6075] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 329.746658][ T6075] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 329.751890][ T6075] usb 9-1: config 0 interface 0 has no altsetting 0 [ 329.759956][ T6075] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 329.763952][ T6075] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 329.769102][ T6075] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 329.772985][ T6075] usb 9-1: config 0 interface 0 has no altsetting 0 [ 329.776890][ T6075] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 329.781074][ T6075] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 329.786576][ T6075] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 329.792003][ T6075] usb 9-1: config 0 interface 0 has no altsetting 0 [ 329.801690][ T6075] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 329.805666][ T6075] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 329.810868][ T6075] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 329.815362][ T6075] usb 9-1: config 0 interface 0 has no altsetting 0 [ 329.819851][ T6075] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 329.823276][ T6075] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 329.827494][ T6075] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 329.831032][ T6075] usb 9-1: config 0 interface 0 has no altsetting 0 [ 329.853703][ T6075] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 329.856580][ T6075] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 329.860292][ T6075] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 329.864409][ T6075] usb 9-1: config 0 interface 0 has no altsetting 0 [ 329.871648][ T6075] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 329.928868][ T6075] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 329.940300][ T6075] usb 9-1: Product: syz [ 329.942249][ T6075] usb 9-1: Manufacturer: syz [ 329.947620][ T6075] usb 9-1: SerialNumber: syz [ 329.964234][ T6075] usb 9-1: config 0 descriptor?? [ 329.995030][ T6075] yurex 9-1:0.0: Could not submitting URB [ 329.998303][ T6075] yurex 9-1:0.0: probe with driver yurex failed with error -5 [ 330.174837][T10201] netlink: 176 bytes leftover after parsing attributes in process `syz.4.942'. [ 330.430254][T10224] wireguard0: entered promiscuous mode [ 330.434161][T10224] wireguard0: entered allmulticast mode [ 330.485669][T10226] lo speed is unknown, defaulting to 1000 [ 330.494470][T10226] lo speed is unknown, defaulting to 1000 [ 330.508443][T10228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.948'. [ 330.532893][ T6075] page_pool_release_retry() stalled pool shutdown: id 30, 1 inflight 60 sec [ 330.546921][ T9] usb 9-1: USB disconnect, device number 2 [ 330.815869][T10232] loop2: detected capacity change from 0 to 7 [ 330.819788][ T8697] Dev loop2: unable to read RDB block 7 [ 330.821691][ T8697] loop2: unable to read partition table [ 330.823696][ T8697] loop2: partition table beyond EOD, truncated [ 330.826879][T10232] Dev loop2: unable to read RDB block 7 [ 330.828734][T10232] loop2: unable to read partition table [ 330.830622][T10232] loop2: partition table beyond EOD, truncated [ 330.832546][T10232] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 331.198622][T10242] netlink: 20 bytes leftover after parsing attributes in process `syz.1.952'. [ 332.416787][T10262] loop6: detected capacity change from 0 to 7 [ 332.420344][T10262] Dev loop6: unable to read RDB block 7 [ 332.422834][T10262] loop6: unable to read partition table [ 332.425138][T10262] loop6: partition table beyond EOD, truncated [ 332.427761][T10262] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 333.402412][T10286] pim6reg: entered allmulticast mode [ 333.453485][T10287] netfs: Couldn't get user pages (rc=-14) [ 333.512443][T10287] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 333.751395][T10289] netlink: 40 bytes leftover after parsing attributes in process `syz.2.964'. [ 333.756579][T10289] netlink: 40 bytes leftover after parsing attributes in process `syz.2.964'. [ 333.906742][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 333.909782][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 334.044679][ T40] audit: type=1804 audit(2000000101.675:220): pid=10296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.965" name="file0" dev="ramfs" ino=38859 res=1 errno=0 [ 334.325026][T10279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.775156][T10310] netlink: 24 bytes leftover after parsing attributes in process `syz.1.969'. [ 334.863579][T10312] GUP no longer grows the stack in syz.1.969 (10312): 80004000-8000a000 (80002000) [ 334.867264][T10312] CPU: 1 UID: 0 PID: 10312 Comm: syz.1.969 Not tainted syzkaller #0 PREEMPT(full) [ 334.867289][T10312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 334.867300][T10312] Call Trace: [ 334.867307][T10312] [ 334.867314][T10312] dump_stack_lvl+0x16c/0x1f0 [ 334.867352][T10312] gup_vma_lookup+0x1d2/0x220 [ 334.867375][T10312] __get_user_pages+0x243/0x34a0 [ 334.867397][T10312] ? find_held_lock+0x2b/0x80 [ 334.867413][T10312] ? __pfx___get_user_pages+0x10/0x10 [ 334.867433][T10312] get_user_pages_remote+0x243/0xab0 [ 334.867450][T10312] ? mas_parent_gap+0x6f0/0x7b0 [ 334.867469][T10312] ? __pfx_get_user_pages_remote+0x10/0x10 [ 334.867497][T10312] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 334.867528][T10312] __access_remote_vm+0x24d/0x850 [ 334.867553][T10312] ? do_raw_spin_lock+0x12c/0x2b0 [ 334.867578][T10312] ? __pfx___access_remote_vm+0x10/0x10 [ 334.867608][T10312] proc_pid_cmdline_read+0x4de/0x8e0 [ 334.867627][T10312] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 334.867641][T10312] ? rw_verify_area+0xcf/0x6c0 [ 334.867653][T10312] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 334.867668][T10312] vfs_readv+0x5be/0x8b0 [ 334.867682][T10312] ? __pfx_vfs_readv+0x10/0x10 [ 334.867716][T10312] ? __fget_files+0x20e/0x3c0 [ 334.867742][T10312] ? do_preadv+0x1a6/0x270 [ 334.867757][T10312] do_preadv+0x1a6/0x270 [ 334.867773][T10312] ? __pfx_do_preadv+0x10/0x10 [ 334.867786][T10312] ? rcu_is_watching+0x12/0xc0 [ 334.867800][T10312] __do_fast_syscall_32+0x7c/0x3a0 [ 334.867822][T10312] do_fast_syscall_32+0x32/0x80 [ 334.867847][T10312] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 334.867868][T10312] RIP: 0023:0xf70be579 [ 334.867882][T10312] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 334.867896][T10312] RSP: 002b:00000000f548d55c EFLAGS: 00000296 ORIG_RAX: 000000000000014d [ 334.867907][T10312] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000040 [ 334.867914][T10312] RDX: 0000000000000001 RSI: 0000000000000300 RDI: 0000000000000000 [ 334.867920][T10312] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 334.867926][T10312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.867932][T10312] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 334.867946][T10312] [ 336.589953][T10364] netlink: 20 bytes leftover after parsing attributes in process `syz.3.978'. [ 336.657374][T10366] netlink: 'syz.4.979': attribute type 3 has an invalid length. [ 336.686241][T10366] veth3: entered promiscuous mode [ 336.777391][T10374] ================================================================== [ 336.777405][T10374] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 336.777432][T10374] Write of size 8 at addr ffffc90004631000 by task syz.2.980/10374 [ 336.777447][T10374] [ 336.777456][T10374] CPU: 1 UID: 0 PID: 10374 Comm: syz.2.980 Not tainted syzkaller #0 PREEMPT(full) [ 336.777475][T10374] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 336.777486][T10374] Call Trace: [ 336.777492][T10374] [ 336.777498][T10374] dump_stack_lvl+0x116/0x1f0 [ 336.777545][T10374] print_report+0xcd/0x630 [ 336.777565][T10374] ? __virt_addr_valid+0x81/0x610 [ 336.777587][T10374] ? sys_imageblit+0x1a6f/0x1e60 [ 336.777604][T10374] kasan_report+0xe0/0x110 [ 336.777626][T10374] ? sys_imageblit+0x1a6f/0x1e60 [ 336.777646][T10374] sys_imageblit+0x1a6f/0x1e60 [ 336.777668][T10374] ? __pfx_sys_imageblit+0x10/0x10 [ 336.777687][T10374] ? do_raw_spin_lock+0x12c/0x2b0 [ 336.777712][T10374] ? find_held_lock+0x2b/0x80 [ 336.777755][T10374] ? queue_work_on+0x12a/0x1f0 [ 336.777772][T10374] ? lockdep_hardirqs_on+0x7c/0x110 [ 336.777795][T10374] ? queue_work_on+0x8b/0x1f0 [ 336.777811][T10374] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 336.777836][T10374] bit_putcs+0x90f/0xde0 [ 336.777865][T10374] ? __pfx_bit_putcs+0x10/0x10 [ 336.777891][T10374] ? fb_get_color_depth+0x120/0x250 [ 336.777914][T10374] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 336.777939][T10374] ? __pfx_bit_putcs+0x10/0x10 [ 336.777962][T10374] fbcon_putcs+0x384/0x4a0 [ 336.777985][T10374] do_update_region+0x2e6/0x3f0 [ 336.778005][T10374] invert_screen+0x1e4/0x590 [ 336.778028][T10374] ? __pfx_invert_screen+0x10/0x10 [ 336.778050][T10374] ? __pfx_complement_pos+0x10/0x10 [ 336.778074][T10374] ? vc_do_resize+0x24d/0x10e0 [ 336.778094][T10374] ? __vmalloc_node_noprof+0xad/0xf0 [ 336.778111][T10374] clear_selection+0x59/0x70 [ 336.778132][T10374] vc_do_resize+0xd9b/0x10e0 [ 336.778159][T10374] ? __pfx_vc_do_resize+0x10/0x10 [ 336.778184][T10374] fbcon_set_disp+0x7ad/0xe50 [ 336.778224][T10374] set_con2fb_map+0x703/0x1080 [ 336.778250][T10374] fbcon_set_con2fb_map_ioctl+0x16c/0x220 [ 336.778274][T10374] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 336.778301][T10374] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 336.778325][T10374] do_fb_ioctl+0x328/0x7e0 [ 336.778342][T10374] ? __pfx_do_fb_ioctl+0x10/0x10 [ 336.778359][T10374] ? lockdep_hardirqs_on+0x7c/0x110 [ 336.778388][T10374] ? find_held_lock+0x2b/0x80 [ 336.778421][T10374] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 336.778451][T10374] fb_compat_ioctl+0x55e/0x670 [ 336.778468][T10374] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 336.778485][T10374] ? hook_file_ioctl_common+0x145/0x410 [ 336.778511][T10374] ? __fget_files+0x20e/0x3c0 [ 336.778528][T10374] ? __ia32_compat_sys_openat+0xf0/0x210 [ 336.778548][T10374] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 336.778564][T10374] __ia32_compat_sys_ioctl+0x23f/0x370 [ 336.778591][T10374] __do_fast_syscall_32+0x7c/0x3a0 [ 336.778617][T10374] do_fast_syscall_32+0x32/0x80 [ 336.778643][T10374] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 336.778663][T10374] RIP: 0023:0xf7f61579 [ 336.778677][T10374] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 336.778694][T10374] RSP: 002b:00000000f542455c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 336.778711][T10374] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000004610 [ 336.778723][T10374] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 336.778733][T10374] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 336.778742][T10374] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 336.778753][T10374] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 336.778768][T10374] [ 336.778774][T10374] [ 336.778779][T10374] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90004331000 allocated at drm_gem_shmem_vmap_locked+0x561/0x7e0 [ 336.778815][T10374] Memory state around the buggy address: [ 336.778824][T10374] ffffc90004630f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 336.778835][T10374] ffffc90004630f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 336.778846][T10374] >ffffc90004631000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 336.778856][T10374] ^ [ 336.778864][T10374] ffffc90004631080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 336.778876][T10374] ffffc90004631100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 336.778885][T10374] ================================================================== [ 336.785956][T10374] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 336.785973][T10374] CPU: 1 UID: 0 PID: 10374 Comm: syz.2.980 Not tainted syzkaller #0 PREEMPT(full) [ 336.785993][T10374] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 336.786004][T10374] Call Trace: [ 336.786009][T10374] [ 336.786017][T10374] dump_stack_lvl+0x3d/0x1f0 [ 336.786045][T10374] vpanic+0x6e8/0x7a0 [ 336.786070][T10374] ? __pfx_vpanic+0x10/0x10 [ 336.786096][T10374] ? sys_imageblit+0x1a6f/0x1e60 [ 336.786115][T10374] panic+0xca/0xd0 [ 336.786137][T10374] ? __pfx_panic+0x10/0x10 [ 336.786160][T10374] ? sys_imageblit+0x1a6f/0x1e60 [ 336.786177][T10374] ? preempt_schedule_common+0x44/0xc0 [ 336.786226][T10374] ? preempt_schedule_thunk+0x16/0x30 [ 336.786250][T10374] ? check_panic_on_warn+0x1f/0xb0 [ 336.786275][T10374] check_panic_on_warn+0xab/0xb0 [ 336.786300][T10374] end_report+0x107/0x170 [ 336.786321][T10374] kasan_report+0xee/0x110 [ 336.786343][T10374] ? sys_imageblit+0x1a6f/0x1e60 [ 336.786364][T10374] sys_imageblit+0x1a6f/0x1e60 [ 336.786391][T10374] ? __pfx_sys_imageblit+0x10/0x10 [ 336.786410][T10374] ? do_raw_spin_lock+0x12c/0x2b0 [ 336.786435][T10374] ? find_held_lock+0x2b/0x80 [ 336.786454][T10374] ? queue_work_on+0x12a/0x1f0 [ 336.786469][T10374] ? lockdep_hardirqs_on+0x7c/0x110 [ 336.786500][T10374] ? queue_work_on+0x8b/0x1f0 [ 336.786515][T10374] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 336.786541][T10374] bit_putcs+0x90f/0xde0 [ 336.786572][T10374] ? __pfx_bit_putcs+0x10/0x10 [ 336.786598][T10374] ? fb_get_color_depth+0x120/0x250 [ 336.786620][T10374] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 336.786646][T10374] ? __pfx_bit_putcs+0x10/0x10 [ 336.786670][T10374] fbcon_putcs+0x384/0x4a0 [ 336.786694][T10374] do_update_region+0x2e6/0x3f0 [ 336.786716][T10374] invert_screen+0x1e4/0x590 [ 336.786743][T10374] ? __pfx_invert_screen+0x10/0x10 [ 336.786769][T10374] ? __pfx_complement_pos+0x10/0x10 [ 336.786792][T10374] ? vc_do_resize+0x24d/0x10e0 [ 336.786813][T10374] ? __vmalloc_node_noprof+0xad/0xf0 [ 336.786830][T10374] clear_selection+0x59/0x70 [ 336.786851][T10374] vc_do_resize+0xd9b/0x10e0 [ 336.786879][T10374] ? __pfx_vc_do_resize+0x10/0x10 [ 336.786906][T10374] fbcon_set_disp+0x7ad/0xe50 [ 336.786929][T10374] set_con2fb_map+0x703/0x1080 [ 336.786954][T10374] fbcon_set_con2fb_map_ioctl+0x16c/0x220 [ 336.786980][T10374] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 336.787006][T10374] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 336.787030][T10374] do_fb_ioctl+0x328/0x7e0 [ 336.787047][T10374] ? __pfx_do_fb_ioctl+0x10/0x10 [ 336.787063][T10374] ? lockdep_hardirqs_on+0x7c/0x110 [ 336.787087][T10374] ? find_held_lock+0x2b/0x80 [ 336.787116][T10374] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 336.787152][T10374] fb_compat_ioctl+0x55e/0x670 [ 336.787169][T10374] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 336.787185][T10374] ? hook_file_ioctl_common+0x145/0x410 [ 336.787211][T10374] ? __fget_files+0x20e/0x3c0 [ 336.787228][T10374] ? __ia32_compat_sys_openat+0xf0/0x210 [ 336.787248][T10374] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 336.787264][T10374] __ia32_compat_sys_ioctl+0x23f/0x370 [ 336.787292][T10374] __do_fast_syscall_32+0x7c/0x3a0 [ 336.787319][T10374] do_fast_syscall_32+0x32/0x80 [ 336.787344][T10374] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 336.787365][T10374] RIP: 0023:0xf7f61579 [ 336.787378][T10374] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 336.787400][T10374] RSP: 002b:00000000f542455c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 336.787420][T10374] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000004610 [ 336.787434][T10374] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 336.787444][T10374] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 336.787454][T10374] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 336.787465][T10374] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 336.787481][T10374] [ 336.788251][T10374] Kernel Offset: disabled VM DIAGNOSIS: 13:04:50 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81605750 RDX=ffff88806d61c880 RSI=ffffffff81605798 RDI=ffffffff93db4fe0 RBP=0000000000000000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff27b69fc R10=ffffffff93db4fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81605799 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880974bd000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000806c1000 CR3=000000006d1a3000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000000d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8561a2b5 RDI=ffffffff9b0ff700 RBP=ffffffff9b0ff6c0 RSP=ffffc900065cee30 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3030396366666666 R12=0000000000000000 R13=000000000000000d R14=ffffffff9b0ff6c0 R15=ffffffff8561a250 RIP=ffffffff8561a2df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880975bd000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000805c3000 CR3=0000000056fa8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080010003 RBX=0000000000000000 RCX=ffffffff81605750 RDX=ffff888027c78000 RSI=ffffffff81605798 RDI=ffffffff93db4fe0 RBP=0000000000000002 RSP=ffffc90000538fd0 R8 =0000000000000001 R9 =fffffbfff27b69fc R10=ffffffff93db4fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81605799 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880976bd000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008003c018 CR3=0000000056fa8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7238044fa51e5b89 e262ceff078a8190 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 dca79385f88082c5 56ba2bded9531968 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f54fb6953723ea25 97a328419bd3a68f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 25f5660aa3da4225 e851c5bc9d6402b0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000006d40 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8e9c00000794b9f1 00ce961f00ce97a7 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 082c0000668c0000 c7af000055720000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8e64bba23cefe3cd d5bd509e00ce911b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ce980f00ce9818 79ea000000ce8f9a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cf4d027ed5757ee6 8cf18ba2f179ba67 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bdc692650879918c fd0bb309ccecf028 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81605750 RDX=ffff88801c308000 RSI=ffffffff81605798 RDI=ffffffff93db4fe0 RBP=0000000000000003 RSP=ffffc900005e8fd0 R8 =0000000000000001 R9 =fffffbfff27b69fc R10=ffffffff93db4fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81605799 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977bd000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000081000000 CR3=000000007939a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000