last executing test programs: 7.889923264s ago: executing program 3 (id=1841): accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r1 = socket$kcm(0x10, 0x2, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f00000000c0)=0x2c) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/kernel/ftrace_dump_on_oops\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) write$binfmt_script(r6, &(0x7f0000000540)={'#! ', './proc/sys/kernel/ftrace_dump_on_oops', [{}, {0x20, '\x00'}, {0x20, 'GPL\x00'}, {0x20, '}:!['}, {0x20, 'syz1\x00'}, {}, {0x20, '\x00'}, {0x20, 'syz1\x00'}, {0x20, '\x00'}, {0x20, '\x00'}], 0xa, "cf411a4c8a7452d0b5d4c3a8b56a0a7126680151c1b350850c1a97e3feac8c57b96fad7f087c8532549d4483ee515246d0a228139817391e4de3fa6881e358d42c66b3dbcd670ae09037060c4539775a64bfbfc333d0b083f563ed0aeea9814dc071e2066a4a5e9440bbeacb32018daa822d"}, 0xbb) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0/console\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x45, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x5}}, 0x20) 7.085355685s ago: executing program 2 (id=1845): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYRES32, @ANYBLOB], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000020000000000044587a1830e8829b655531e2f7f2a175debb9ce6d870271eb70d3358747572f8d900397cfbab16f7b10a249752b7b5b40734946bc1243805dca440cdbc3150b2440deee13987f46aff9a511a55f3e9ae97e05cb1e1a3123fab7f57fad72f0f22ff8b064808423effadde95dc56adc3e60a14363ecd0af2d505aad0a2170ab7e77c321ae3c25311ee2b6100c7ef72cd2ee156153105cd725cb47f7d0c32be14973f7b64e85bb073b4c8"], 0x50) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0xd) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r4}, 0x38) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r6, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 7.052074186s ago: executing program 1 (id=1846): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x1ff}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xc1f5}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_XOR={0x8, 0x7, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000023ed0000180100002820702500000000002020207b1af8ff0036c398acc5e2a586256625c5da90abe7000000bfa100000000000007010000f8ffffffb702000007000000b7"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0xa, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r4 = syz_io_uring_setup(0x141c, &(0x7f00000000c0)={0x0, 0xf9ee, 0x400, 0x3, 0x212}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) r8 = openat$ublk_ctrl(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_io_uring_submit$UBLK(r5, r6, r7, &(0x7f0000000500)=@ublk_get_queue_affinity_sqe={0x2e, 0x0, 0x0, r8, 0x80207501, 0x0, 0x0, 0x0, 0x1, 0x64, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x8, &(0x7f00000002c0)}}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r10, 0x40107447, &(0x7f0000000040)={0x0, 0x0}) io_uring_enter(r4, 0x20, 0xd9db, 0x8, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) socket$l2tp(0x2, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r11, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000001280)="b9354b27b553aeeee8ae0b0000a4df2a9080f3", 0x0, 0x603, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x4d) r12 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_DIRTY_TLB(r12, 0x400caeaa, &(0x7f0000000000)={0x9, 0x6}) r13 = openat$ttyprintk(0xffffff9c, &(0x7f0000000400), 0x40c02, 0x0) ioctl$PIO_UNIMAP(r13, 0x4b67, &(0x7f0000000480)={0x9, &(0x7f0000000440)=[{0x1, 0xef63}, {0x6, 0x7}, {0x7, 0x8ca}, {0x9, 0x6}, {0x0, 0x6}, {0x50}, {0x1000, 0x80}, {0x4, 0x8}, {0xfea, 0x268}]}) 6.969493869s ago: executing program 3 (id=1847): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000380)=@newchain={0x1500, 0x64, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x1, 0x9}, {0xc, 0x2}}, [@f_rsvp={{0x9}, {0x4c, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x8}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x7, 0xc}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x700000, 0xd5ff, 0x7f}, {0x7fb, 0x7ff}, 0x84, 0x5, 0xb7}}, @TCA_RSVP_DST={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_RSVP_SRC={0x8, 0x3, @empty}]}}, @f_rsvp6={{0xa}, {0xf2c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xe, 0x10, 0x3d3c, 0x2, 0x401, 0x7, 0x0, 0xdcfe, 0x5d1f, 0x9, 0xd81, 0x0, 0xffff1557, 0xef72, 0x8, 0x372a, 0x2, 0xa, 0x323e, 0x5, 0x10, 0x9, 0x47, 0x3, 0x9, 0x5, 0x40fd17, 0x9, 0x3, 0xdcc7, 0x80, 0x1, 0xffff0001, 0x7, 0xa2cd, 0xfff, 0x7ff, 0xb4b, 0x1, 0x9, 0x5, 0x0, 0x7ff, 0x0, 0xe, 0x8, 0x9, 0x101, 0x3744, 0xffffffff, 0x5, 0xd3, 0x7, 0x5, 0x0, 0xe000000, 0x9, 0xb32c, 0x1, 0xffff, 0x9, 0x8, 0x401, 0x1, 0x80000001, 0xcb9, 0x3, 0xfffffff7, 0x3, 0x80000001, 0x8, 0x5, 0x2, 0x7ff, 0xfc0, 0x5, 0x5, 0x3, 0x7, 0x7ff, 0x8, 0xd, 0x20, 0x4, 0x6, 0x800, 0x7, 0x3ff, 0xfffffffb, 0x8, 0xfffffffa, 0x200, 0x3ff, 0xffffff81, 0x7, 0x3ff, 0x1, 0xffff61a9, 0x1000, 0x2, 0x3, 0x0, 0x1000, 0x808, 0x10001, 0x7fffffff, 0x0, 0x8, 0x7, 0x0, 0x6, 0x7, 0x0, 0x400, 0x4, 0x3, 0x5, 0x4, 0x0, 0x9, 0xa, 0x6, 0x8, 0x1000, 0x4, 0x0, 0xc058, 0x8001, 0xffff, 0x83, 0x3, 0x2, 0xffffff60, 0x6, 0x2, 0x0, 0x0, 0x10, 0x1, 0xffffffff, 0x2, 0x9, 0x224871c5, 0x7, 0x4, 0xfff, 0x67, 0x2, 0x3, 0x146, 0x2, 0x101, 0x4, 0x4a, 0x6, 0xd, 0x2, 0xfad8, 0x6, 0x1, 0xe09e, 0x7, 0x5, 0x61cf, 0x8, 0x4, 0x8, 0xfffffffe, 0x80000000, 0xa, 0x100, 0x1, 0x101, 0x7b18, 0x1, 0x10, 0x5, 0xffffff1f, 0x0, 0x9, 0x7fff, 0x8001, 0x0, 0x2, 0x800, 0xdc4, 0x9, 0x6b8, 0x7, 0x7, 0x2, 0x4, 0x0, 0x0, 0x88, 0x1, 0x7f, 0x3, 0x9, 0x2, 0x8ac, 0x3, 0xc8da7d2, 0x800, 0x6, 0x6, 0xffff, 0x5, 0x7, 0x1ffc00, 0xffffffff, 0xed6, 0xc, 0xaf, 0xc000, 0x4, 0x6a3973c8, 0x3, 0x9, 0x5, 0x7, 0x6, 0x2, 0x1, 0x7, 0x6, 0xfff, 0x0, 0xbc1d2524, 0xfffffffe, 0x400, 0x80, 0x40, 0x6, 0x5, 0x7, 0x1, 0x370, 0x2, 0x4, 0x3ff, 0x5, 0xd, 0xffffffff, 0xb425, 0xa80, 0xf9, 0xfffffff9, 0x7, 0x4008, 0x0, 0x7f, 0x6, 0xffffff81, 0x3929, 0x8001]}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xf, 0x9}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x1, 0x4, 0x1}, {0x200, 0x37, 0x459}, 0x0, 0x1}}, @TCA_RSVP_POLICE={0x8b4, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffa}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x40, 0x4, 0xffffffff, 0x32f, 0x9, 0xbcb9, 0x2, 0x1, 0x9, 0x800, 0x7856, 0x2, 0x2e2, 0x2, 0x7, 0x1, 0xffff, 0x30f, 0x5, 0x1, 0x5, 0x9, 0x1, 0x3, 0x4523, 0x1, 0xa, 0x9, 0xa, 0x0, 0x4, 0x4, 0x1, 0x37, 0x7fffffff, 0x9, 0x6, 0x45, 0xda, 0x7900, 0x3, 0x9, 0x1, 0x401, 0x4, 0xf, 0x400, 0x8, 0x80, 0xb5f, 0x6, 0x8, 0xa87f, 0x1, 0x9, 0x8001, 0x10, 0x1f, 0x9, 0xffffffff, 0x3, 0x4, 0x10001, 0x7fff, 0x401, 0xd03c, 0x3, 0x80000001, 0xfffffffc, 0x3, 0x68c4, 0x326, 0xde6, 0xc, 0x80000001, 0x4, 0xd, 0x2, 0xeb4, 0x8, 0xe3, 0x40, 0x0, 0x9, 0x5, 0x7, 0x5, 0x81, 0xa56, 0x7, 0x6, 0x2, 0x8, 0x7, 0x5, 0x8c9, 0xfffffff2, 0xd, 0xe, 0x2, 0x8, 0x6, 0x2c, 0x0, 0x1000, 0x5d5, 0xfffff30f, 0x6, 0x8, 0x1, 0x3, 0x6, 0x8001, 0x7, 0x9, 0x7, 0x4, 0xa4, 0x80, 0x7, 0x2, 0x0, 0x6000000, 0x6, 0xfffff11c, 0xe63c, 0xb, 0x4, 0x1, 0x80000000, 0x8, 0x1, 0x24, 0x10000, 0xffffffc0, 0xf0, 0x1ffd, 0x3, 0x6, 0x4, 0x2, 0x1cb3, 0x8000, 0x1ff, 0xb8e, 0x5, 0xfffffffd, 0x1, 0x1333, 0x4, 0x80000001, 0x5008, 0x400, 0x0, 0x4, 0x3, 0xce98, 0x0, 0x3, 0xfff, 0x5, 0x3, 0x7, 0x6, 0x2, 0x200, 0xfffffff8, 0x0, 0x8, 0x9, 0x8, 0x400, 0x7ff, 0xb, 0x49, 0x8, 0x3, 0xfff, 0xd6d, 0xc92e, 0x7fff, 0x93, 0x10, 0x8, 0xfffffffd, 0x2, 0x7, 0x8, 0xe3, 0x4, 0x4, 0x5, 0x885c, 0x1, 0x7fffffff, 0x6, 0x325f, 0xffff8001, 0xe, 0x4, 0xe, 0x8, 0x3, 0x5, 0x6, 0x4, 0x80000001, 0x7, 0x2, 0x8001, 0x7, 0x3, 0xfffffff8, 0x33ef00, 0x7, 0x8, 0xe, 0x3, 0x80000000, 0xffff, 0x7, 0x2, 0x6, 0x6, 0x5, 0x9, 0x6, 0x1, 0x10000, 0x8000, 0xac4, 0xf, 0x2, 0xfffffffe, 0x8, 0x7, 0x1, 0x40, 0x8001, 0x7, 0x6, 0x200, 0x1, 0x401, 0x71, 0x2, 0x7, 0xb, 0x6, 0x0, 0x5e3d, 0x9, 0x3791, 0x0, 0x400]}, @TCA_POLICE_RATE={0x404, 0x2, [0xf9, 0xf, 0x6181, 0x80000000, 0xffffffff, 0x6, 0x0, 0x2, 0x1, 0x6, 0x1, 0xffff518d, 0x9, 0x0, 0x19, 0xfffffff9, 0xe365, 0x6, 0x7, 0x0, 0x0, 0xf9, 0xf, 0x9, 0x0, 0x8, 0x4, 0x8b, 0x1, 0x101, 0x80000001, 0x8, 0x0, 0x581b4d4d, 0x72, 0x6, 0x2, 0x8f2, 0x9, 0x1, 0xc, 0x4, 0x8001, 0x1ff, 0x40, 0x7, 0xfff, 0xe23e, 0x7, 0x7, 0x1, 0x6, 0x7, 0x1, 0xe86, 0x6, 0x8, 0xf, 0xc57, 0x8, 0x7000000, 0xf, 0x100, 0x5, 0x9, 0x7, 0xe2, 0x101, 0xfff, 0x5, 0x3, 0x7, 0x8, 0x1, 0xfff, 0xc8bd, 0x9, 0x0, 0x401, 0x7, 0x0, 0x9, 0x6, 0x81, 0xd, 0x2, 0xe, 0xfff, 0xb8aa, 0x3, 0xfffffffb, 0x4, 0x9, 0x8000, 0x4, 0x0, 0x2, 0x6, 0x5, 0x7ff, 0x6000, 0xffff, 0x3, 0x6, 0x4, 0x1, 0x40, 0xa3d, 0x80, 0x6, 0x10, 0x10000, 0x8000, 0x8, 0x7, 0xf, 0x6, 0x0, 0x1, 0xc, 0x1, 0x10001, 0xffffff81, 0x9, 0x6, 0x9, 0x9, 0x6, 0x81, 0xffff8000, 0x7900, 0x8001, 0xfffffffb, 0x5, 0x9, 0x8, 0x5, 0x401, 0x8000, 0xd, 0x3, 0x972, 0x6, 0x0, 0x6, 0x1, 0x397, 0x9, 0x8, 0x1, 0x2, 0x1, 0x0, 0x7, 0xfffffffc, 0x72, 0x10000, 0x5, 0x4, 0x4, 0x2, 0x2, 0x4, 0x4, 0x9b, 0x3, 0x5, 0x800, 0x763e, 0x6, 0x7, 0xfff, 0x4b, 0x100, 0x10000, 0x6, 0xca4, 0xfffffc00, 0x9, 0x0, 0x3, 0x4, 0xd, 0x4, 0xffff0000, 0x9, 0x7, 0x7, 0x0, 0xbe, 0x2, 0x1, 0x2, 0x5, 0x0, 0x0, 0x7, 0xeede, 0xfda, 0x4, 0x97, 0xfffffffe, 0x3a3fa87f, 0x8, 0x5, 0x1, 0x7426, 0x948, 0x0, 0x8, 0x800000, 0x5, 0x9, 0x9e8, 0x3, 0x94, 0x1, 0x1, 0x6be, 0x9, 0x8, 0x4, 0x4, 0x8a, 0x100, 0x3, 0x0, 0xe, 0x3, 0x8, 0x2, 0x5, 0x0, 0x10, 0x8001, 0x7, 0x5, 0x9, 0x7fffffff, 0x3, 0x2, 0x7, 0x3f6, 0x0, 0x3, 0x5, 0x1, 0x0, 0x8001, 0x1000, 0x1000, 0x8, 0x6, 0x1, 0x2, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x30000005, 0x5c8, 0x1, 0xe, {0x2, 0x0, 0x5f2, 0x6a56, 0x9, 0xec3}, {0x5, 0x2, 0x8, 0xac00, 0xffc0, 0x3}, 0x0, 0x7, 0xfff}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x9, 0x0, 0x5, {0x5, 0x0, 0xfffe, 0xfff, 0x4, 0x4}, {0xe, 0x2, 0xd, 0xfff, 0x2, 0x5}, 0x2, 0x5, 0x10001}}]}, @TCA_RSVP_ACT={0x210, 0x6, [@m_gact={0x108, 0x11, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0xd87, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x4, 0x5, 0x4e5, 0x200}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x28, 0x0, 0x4, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x400, 0xffffffffffffffff, 0xffff8000, 0x7611}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7fff, 0x6, 0x0, 0x4, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x3ee, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x100, 0x6, 0x5, 0x9, 0x3}}]}, {0x49, 0x6, "a5cf17be334baedc1816c41fe8aa9c28e4b2af4f9a3e63ab201fb95c0af045b54ca968da879932902f7e978913a3629ea329b3bbc967e19c2543f464e348e6e8761441b846"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0x104, 0x0, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x7f, 0x5, 0x1, 0x8}, 0x4d}}]}, {0xb9, 0x6, "526c9cc953f5d88e7022726172b20ae90963a2414a8e3299027d14483f1efb55b25123baa500eff15a83a400fe82138a37475983ba13e4bbba5e1628c9536836d4788eea6b39e3e4e2d9d8a16bdb669a2278777061485a7437b340908e62557a62dc8d10081a6d4e621921f0a33d70f4d0da51590811d2112e8782185c92e8bd89e16ec09522eda270844a9573bc67346c21c76da70cf35db58584cd7c407b34410af2f6ad11551bc1a8c98eece49c57de037d2277"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x8001, 0x9, 0x9}, {0xfffffc00, 0x1, 0x9}, 0x79, 0x31, 0x1}}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr=' \x01\x00'}]}}, @f_rsvp={{0x9}, {0x540, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x8, 0xfff1}}, @TCA_RSVP_ACT={0x124, 0x6, [@m_simple={0x120, 0x1e, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xa, 0x3, '*(74}\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x6, 0x4, 0x8, 0x1}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0xc5, 0x6, "f531b7c8c4fa1686caac90fd5431b8cefc1e77e85bc99f9c412472d93c00b86f012125f625b546f3362ecbe473cb7efe29b2382f038333c99a1e27373a156054129c1f3182593887cac1dd9d54978fb4bc6e01c2895281423c7d31a00f4ed2bf5a4d7be4316d8a788583ccfdaada73c09f73dfeb947aa5b11078c9de9971583c05918fb8b6868a323e400bdd85ecea9c175e8e93b4a9d0971e812279b391e5c13cadfce6103f61ca782eca4d207ed1a86f0960f5eea29dad333b27f60969a025fe"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_RSVP_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xbd, 0x4, 0x3, 0xd178, 0x80000001, 0x1, 0x5c0, 0x0, 0x5, 0x6, 0x7, 0x0, 0xfffffffa, 0x7, 0x3, 0x7, 0x9, 0x1, 0x7fff, 0x4, 0x8001, 0xfff, 0x5, 0xe, 0xd4, 0x903, 0x4, 0x6, 0x10, 0x6, 0x0, 0x151, 0x3, 0x5, 0xffffffcc, 0x689, 0x2, 0x1, 0x0, 0xfffffff9, 0x6, 0x8, 0x606, 0x80000000, 0x97, 0x2, 0xb6, 0x7660, 0x6, 0x4, 0x4, 0x9, 0x30, 0x80000001, 0xfd09, 0x6, 0x1, 0x5, 0x4, 0x6, 0x3ff, 0xd, 0x7, 0x100, 0x67, 0x6, 0x8000, 0x4, 0x0, 0x1000, 0x0, 0x0, 0x8, 0x0, 0x3ff, 0x3, 0x5, 0x9, 0x8, 0x6, 0x400, 0x0, 0xffff8001, 0x9, 0xbd92, 0x5468, 0x9, 0xffffffc4, 0x8, 0x33d, 0xfff, 0x6, 0x10001, 0x3, 0x6, 0x756, 0x80000001, 0x938, 0x1000, 0x76, 0x3, 0x4bc6, 0x5, 0x7fb, 0x100, 0x9, 0x8, 0x9, 0x9d2, 0xd, 0x7, 0x10, 0x258d, 0x81, 0x4, 0x7, 0x2f6a, 0x8, 0xe00, 0x0, 0x7, 0x7f, 0x3, 0x388e, 0x2, 0x80, 0xdf5, 0x3, 0xf, 0x0, 0x6, 0x1, 0x1, 0x75d7, 0x8, 0xa4c, 0x9, 0x36619a9e, 0x1, 0x6f61, 0x6, 0x80000000, 0x0, 0x5, 0x4, 0x2, 0x0, 0xd4b, 0x7fff, 0x9, 0xffff1395, 0xfffffffe, 0x3, 0x0, 0x9, 0x70a5000, 0x4, 0x4, 0x8b1, 0x3, 0x7, 0xb0f, 0x2, 0x0, 0x2, 0x5, 0x0, 0x1000, 0x6, 0x81, 0x7fff, 0x7ff, 0x7, 0x0, 0x2b4, 0x0, 0x3ff, 0x8, 0x5, 0x9, 0x7, 0x7, 0x8, 0x9, 0x0, 0x800, 0x9, 0x0, 0x9, 0x2, 0x8, 0x8, 0x8, 0x1, 0xc6, 0x5, 0x6, 0x7ee, 0x1, 0x8, 0x5, 0x9, 0x8001, 0x7, 0xf5, 0xb90, 0x5, 0x0, 0x3635, 0x1, 0x8, 0x5, 0x0, 0x80000001, 0xe, 0x8, 0x1, 0x2, 0x8001, 0x55, 0x3a48, 0x4, 0x7, 0x1, 0x2, 0x5, 0x5, 0x6, 0x5, 0x4, 0xfffffffc, 0x10, 0x1, 0xb, 0x4, 0xe0, 0x400, 0x616c, 0x3, 0x2d, 0x5, 0xfffffff8, 0x9, 0x80000000, 0x3e, 0x3, 0x0, 0x8, 0x9, 0x1, 0x3, 0xadf, 0x3, 0x6, 0xfc, 0x9]}]}]}}]}, 0x1500}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000004) r0 = socket(0x10, 0x3, 0x0) r1 = openat$mice(0xffffff9c, &(0x7f00000001c0), 0x80000) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@getchain={0x24, 0x66, 0xfff1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0xe, 0xd}, {0x9, 0xfff1}, {0xffff, 0xa}}}, 0x24}}, 0x800) r13 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r13, &(0x7f0000000100)='measure #', 0x9) r14 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r5, r5, 0x19, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x9f1e}}, 0x40) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) close(r14) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001780)=ANY=[@ANYBLOB="cc1100001900010000000000000000001d0109005000108049002100c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd000000681106"], 0x11cc}, 0x1, 0x0, 0x0, 0x5}, 0x0) 6.394202767s ago: executing program 1 (id=1848): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1, &(0x7f0000000440)=@raw=[@call={0x85, 0x0, 0x0, 0x51}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2, 0x0) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000080)={0x1e, @none={0x0, 0x2}}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) sendto(r5, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r4, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) pselect6(0x40, &(0x7f0000000340)={0x0, 0x18, 0x40000000004, 0xfffffffffffffffd, 0x0, 0xbaa3, 0x2000000000000}, 0x0, &(0x7f0000000280)={0x3ff, 0x800, 0x4, 0x9, 0x0, 0x3, 0x7fffffff, 0x100000000000001}, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0x100a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r7, 0x0) sched_setaffinity(r7, 0x8, &(0x7f0000000000)=0x3) 6.152175836s ago: executing program 3 (id=1849): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket(0x2, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=0xffffffffffffffff, 0x2f, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000004c0)={0x0, @rand_addr, @local}, &(0x7f0000000500)=0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x11, 0x0}, 0xff31) r6 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000400)={r7, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc01c5869, &(0x7f0000000700)={r3, &(0x7f0000000600)='\x89\'\x80/\x00', 0x20102, &(0x7f0000000640)={@_ha_fsid={[0xfee3, 0x1]}, {0xff, 0x4, 0x2, 0x3}}, 0x8, &(0x7f0000000680), &(0x7f00000006c0)=0x5}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x17, 0x19, &(0x7f0000000880)=ANY=[@ANYBLOB="18110000", @ANYRES64, @ANYBLOB="0000000000000000b7020000000000008500000086000000186100000400000000000000f8ffffff852000000300c3e7ad52f52ad7660000b7080000000000007b8af8ff00000000b7080000d80d00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70210000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000100a50000008520000004000000a75b0000fcffffff186100000129a0a24978372500000000000000310b00008500000042000000"], &(0x7f0000000480)='syzkaller\x00', 0xe, 0x31, 0x0, 0x41000, 0x0, '\x00', r4, @cgroup_sysctl, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x9, 0x5, 0x10001}, 0x10, r5, 0xffffffffffffffff, 0x3, &(0x7f0000000740)=[r7, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000780)=[{0x0, 0x5, 0x8, 0xa}, {0x4, 0x1, 0x4, 0x61a8a9cee2f380e9}, {0x3, 0x2, 0x4, 0x9}], 0x10, 0xf}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000800), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x3}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) write$P9_RMKNOD(r9, 0x0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000840)='./file0\x00', 0x80000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{0x1}, &(0x7f0000000880), &(0x7f00000008c0)='%-5lx \x00'}, 0x1c) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000940)={0x0, 0x0, 0x14}, 0xc) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000000)={r10, 0x3a, &(0x7f00000015c0)}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r11) sendmsg$TIPC_NL_BEARER_ENABLE(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r12, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0) write(r0, &(0x7f0000000280)="ffff0100ffff02000600000088ca50c0003e400000000200000100000001000002000000000081558a068972529e1b387e145d2da88c3cbf0f1d201b9c772aa09df79173a9fc261f44d870d0", 0x4c) 6.029469945s ago: executing program 2 (id=1851): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_init_net_socket$llc(0x1a, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x29, 0x10, 0x41, 0x5}}) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x18015) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mount(0x0, &(0x7f0000000340)='./sys\x00', 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000601080000000000000000020000000900010073797a300000000048000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a307a000000000000000000000908000340000000940400098068000000140a01030000000000000000020000080c00064000000000000000030900020073797a32000000000c00064000000000000000030c00064000000000000000010900020073797a32000000000900020073797a31000000000c0006400000000000000001140000001100010000000000000000000200000a"], 0xf8}}, 0x4004050) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x4000010, r0, 0x7c311000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) uname(&(0x7f0000000300)=""/4096) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x325000, 0x800}, 0x1c) 4.976086531s ago: executing program 0 (id=1852): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x82}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) openat$vga_arbiter(0xffffff9c, &(0x7f0000000100), 0x10000, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) open$dir(&(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x400, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x14, 0x2f, 0x107, 0x870bd2e, 0x25dfdbfb, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0x7, 0x2) r7 = fsopen(&(0x7f0000000180)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000880)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_80211_inject_frame(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x305) 4.254504992s ago: executing program 1 (id=1853): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)='44100,48000,88200,96000,176400,192000,352', 0x29) symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00') write(0xffffffffffffffff, &(0x7f0000000640)='usbip-vudc.0', 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x7, 0x2, 0x1000, 0xf, 0x5, 0x79, 0x3, 0x80008, 0x6, 0xffffffff, 0x1, 0x800008, 0x5, 0x100, 0x101, 0xfffffffb, 0x9, 0x7f, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0x0, 0x3, 0x8, 0xa6b8, 0x0, 0xfffffff8]}) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="fffffffffffffdf9a684a51b86dd600c7a00d8c225ccd109a27f3291082000183afffe800000000000e700000000000000bbfe8000000000000000000000000000aa8800907800000000fe800000"], 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {0x0, r5, 0x1b00}}, 0x18) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in=@dev, @in6=@mcast1}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() 3.706762541s ago: executing program 1 (id=1854): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket(0x2, 0x805, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000000, 0x2c, 0x0, &(0x7f0000000480)="63eced8e46dc3fcd8bc91d4128f4423a2d83f871462ddf33c9e9b986f77384e87dfe6435d6edbcb8c4327860f96b65725f8fb514263302fe6a8ebadd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x2, 0xa7bc, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) mkdir(0x0, 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='127.0.0.1\x00', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/num\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='0\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/node/mynode/local\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='1\x00', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/cluster/mycluster/heartbeat/dead_threshold\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='3\x00', 0x2) 3.688165972s ago: executing program 3 (id=1855): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x9f, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f045}) ppoll(&(0x7f00000000c0)=[{r0, 0x9f712fd3135d632f}], 0x1, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400000008000000ff01000000000000", @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000010000000000000000000000009220c84689b645a6b2c0c66df5"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xc3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket(0x2b, 0x1, 0x1) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x5) accept4$unix(r5, &(0x7f00000010c0), 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x3, 0x806, 0x1, 0x40055}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r7, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r13, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r12, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r15}, @val={0xc, 0x99, {0xb, 0x5e}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000081}, 0x40050) recvmsg(r11, &(0x7f0000003b80)={0x0, 0x0, 0x0}, 0x80) socket$inet6_sctp(0xa, 0x1, 0x84) 3.334583157s ago: executing program 0 (id=1856): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r1 = syz_io_uring_setup(0x3d6, &(0x7f0000000400)={0x0, 0x5961, 0x40000, 0x3, 0x50}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r5 = fsopen(&(0x7f0000000180)='nfs4\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000004c0)={r8, 0x3, 0x6, @broadcast}, 0x10) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x8, 0x0, 0x7fffffff}]}) syz_emit_ethernet(0x76, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d3ffff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a}, @fragment={0x4, 0x0, 0xb9, 0x1, 0x0, 0x12, 0x65}]}}}}}}}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000004c0)={'tunl0\x00', 0x0}) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r12, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x41}, @empty, 0x7, 0x7fff, 0x3d, 0x500, 0x5, 0x19c003f, r11}) close_range(r9, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) r13 = openat$ipvs(0xffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(r13, 0xc00c6f3e, &(0x7f00000001c0)={0x800, 0x80000, r0}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x124411, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = socket$inet_icmp_raw(0x2, 0x3, 0x1) shutdown(r15, 0x1) r16 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r14) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x4c, r16, 0x1, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3f}}, {0x13, 0xb, 0x7}, {0x6, 0x11, 0x9}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20044090) r17 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r17, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_USERDATA={0x5, 0xd, 0x1, 0x0, '*'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x8c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) unlink(&(0x7f0000000180)='./file0\x00') 3.265293752s ago: executing program 1 (id=1857): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket(0x2, 0x805, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000000200000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000000, 0x2c, 0x0, &(0x7f0000000480)="63eced8e46dc3fcd8bc91d4128f4423a2d83f871462ddf33c9e9b986f77384e87dfe6435d6edbcb8c4327860f96b65725f8fb514263302fe6a8ebadd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x2, 0xa7bc, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', 0x0, &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='127.0.0.1\x00', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/num\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='0\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/node/mynode/local\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='1\x00', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/cluster/mycluster/heartbeat/dead_threshold\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='3\x00', 0x2) 3.199155767s ago: executing program 2 (id=1858): r0 = socket$inet(0xa, 0x801, 0x84) waitid(0x1, 0x0, 0x0, 0x4, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) prctl$PR_SET_IO_FLUSHER(0x34, 0x1) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) r4 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) ioctl$MON_IOCX_MFETCH(r4, 0xc00c9207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x7fff}) readv(r4, &(0x7f0000000040), 0x2000000000000213) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) listen(r0, 0x8) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0xfffffffd) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x8) r7 = syz_open_dev$media(&(0x7f0000000980), 0x3, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r7, 0xc0487c04, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)}) 2.935418063s ago: executing program 0 (id=1859): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x1, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x54, 0x30, 0xb, 0x70bd25, 0x0, {}, [{0xffffffffffffffc7, 0x1, [@m_gact={0x3c, 0x1, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x12e5, 0x6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000015}, 0xc844) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$nci(0xffffff9c, 0x0, 0x2, 0x0) write$nci(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="e87d1120c34370074c8c3159e585e1e7d9d64a51aed756c6943ef9fd32f2845cbdf2adf9b97e6be3d8dea2bee1471e88037c2ffb589116b46549ed728fa80200000000000000565d0879d80203c98a72320180f58b97c9e7006bc20e6abd9264e308eca7ef78d98a2d6b410d2b15e6e085cca6a169fd5801b79b5e5dd5ca55277a42df43f04fb6a3bcc1a6632b89f49f93df860cfc"], 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = inotify_init() inotify_add_watch(r4, 0x0, 0x850003d1) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000880)=""/246) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) 2.73870603s ago: executing program 1 (id=1860): syz_io_uring_setup(0x4443, &(0x7f0000000200)={0x0, 0x4b58, 0x80, 0x2, 0x159}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000340)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4c2142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {}, {0xa, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x4d, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1001fb2f}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8044}, 0x4040050) 2.202696837s ago: executing program 3 (id=1861): close(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='select \n', 0x10) write(r1, &(0x7f0000000840)="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", 0x1b3) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x80) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) 2.195502979s ago: executing program 0 (id=1869): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x82}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x4a102) openat$vga_arbiter(0xffffff9c, &(0x7f0000000100), 0x10000, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) open$dir(&(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x400, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x14, 0x2f, 0x107, 0x870bd2e, 0x25dfdbfb, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0x7, 0x2) r7 = fsopen(&(0x7f0000000180)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000880)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_80211_inject_frame(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x305) 2.188011242s ago: executing program 2 (id=1862): socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x161d02) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@dev, @in6=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={""/10, ""/2, @remote}}}, &(0x7f0000000000)=0xe4) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket(0x10, 0x3, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0xa0002014}) epoll_pwait(r2, &(0x7f00000000c0)=[{}, {}], 0x2, 0xfe, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$inet6_sctp(0xa, 0x5, 0x84) 924.025537ms ago: executing program 3 (id=1863): sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r1, 0x40045109, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000008c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r4, @ANYBLOB="08001d8004000080"], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800000, 0x13, r5, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x40) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x90, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x7c, 0x1, [@m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0xfffffffd}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x80000) syz_80211_inject_frame(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x36) syz_80211_inject_frame(&(0x7f00000003c0)=@broadcast, &(0x7f0000000880)=ANY=[], 0x330) socket$nl_generic(0x10, 0x3, 0x10) 707.131307ms ago: executing program 0 (id=1864): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x82}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) openat$vga_arbiter(0xffffff9c, &(0x7f0000000100), 0x10000, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) open$dir(&(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x400, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x14, 0x2f, 0x107, 0x870bd2e, 0x25dfdbfb, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0x7, 0x2) r7 = fsopen(&(0x7f0000000180)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000880)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_80211_inject_frame(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x305) 418.786924ms ago: executing program 2 (id=1865): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket(0x2, 0x805, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000000200000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000000, 0x2c, 0x0, &(0x7f0000000480)="63eced8e46dc3fcd8bc91d4128f4423a2d83f871462ddf33c9e9b986f77384e87dfe6435d6edbcb8c4327860f96b65725f8fb514263302fe6a8ebadd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x2, 0xa7bc, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) mkdir(0x0, 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='127.0.0.1\x00', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/num\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='0\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/node/mynode/local\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='1\x00', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/cluster/mycluster/heartbeat/dead_threshold\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='3\x00', 0x2) 304.988042ms ago: executing program 2 (id=1866): r0 = socket(0x29, 0xa, 0x1cb) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) syz_extract_tcp_res(&(0x7f0000000000), 0x4, 0xfffffffe) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r2 = fsopen(&(0x7f0000000140)='cgroup\x00', 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) close(r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8000, 0x0, 0x8}, 0x0) mlockall(0x2) r4 = syz_io_uring_setup(0x111, &(0x7f00000002c0)={0x0, 0x39c4, 0x2, 0x4, 0xfffffff8}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r4, 0x11, &(0x7f0000000500)='n', 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f0000000180)=[0x2, 0x6], 0x2) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)) close(r5) r6 = timerfd_create(0x0, 0x0) timerfd_gettime(r6, 0x0) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x80302, 0x0) ioctl$KVM_SET_CLOCK(r7, 0x4030ae7b, &(0x7f0000000000)={0x55, 0x6, 0x6, 0x873e, 0x200}) write(r7, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) syz_usb_disconnect(0xffffffffffffffff) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x0, &(0x7f0000000100)}) close_range(r8, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000040)="1300000043001f00030300f9002304000a04d6", 0x13) 0s ago: executing program 0 (id=1867): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1a5042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0xa8011, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r5], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r6 = dup(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) fcntl$setpipe(r7, 0x407, 0x100004) write$eventfd(r7, &(0x7f0000000240), 0xffffff14) write$UHID_INPUT(r6, &(0x7f0000001040)={0xf, {"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", 0xf8d}}, 0x96d) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r0, 0x0, 0x0) fchdir(r8) kernel console output (not intermixed with test programs): 9524310.186:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10215 comm="syz.3.930" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x0 [ 327.818299][T10226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.930'. [ 327.818446][T10226] openvswitch: netlink: Flow key attr not present in new flow. [ 327.823051][T10200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.600105][T10230] Console: switching to colour dummy device 80x25 [ 329.373962][T10231] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 329.384272][T10231] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 329.384682][T10231] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 329.385209][T10231] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 329.387294][T10231] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 329.434194][T10231] pci 0000:00:01.0: Adding to iommu group 1 [ 329.461648][T10231] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 329.461664][T10231] pci 0000:00:01.0: vgaarb: bridge control possible [ 329.461671][T10231] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 329.471995][T10231] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 329.490116][T10231] pci 0000:00:02.0: BAR 0 [mem 0x81040000-0x8105ffff] [ 329.490218][T10231] pci 0000:00:02.0: BAR 1 [mem 0x81060000-0x8107ffff] [ 329.490504][T10231] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f] [ 329.490573][T10231] pci 0000:00:02.0: BAR 3 [mem 0x81080000-0x81083fff] [ 329.491239][T10231] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 329.491603][T10231] pci 0000:00:02.0: enabling Extended Tags [ 329.537049][T10231] pci 0000:00:02.0: Adding to iommu group 2 [ 329.574784][T10231] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 329.581998][T10231] pci 0000:00:1d.0: BAR 4 [io 0xc0e0-0xc0ff] [ 329.635642][T10231] pci 0000:00:1d.0: Adding to iommu group 7 [ 329.641907][T10231] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 329.642046][T10231] pci 0000:00:02.0: ROM [mem 0x81000000-0x8103ffff pref]: assigned [ 329.642089][T10231] pci 0000:00:02.0: BAR 0 [mem 0x81040000-0x8105ffff]: assigned [ 329.642315][T10231] pci 0000:00:02.0: BAR 1 [mem 0x81060000-0x8107ffff]: assigned [ 329.642512][T10231] pci 0000:00:02.0: BAR 3 [mem 0x81080000-0x81083fff]: assigned [ 329.642681][T10231] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 329.643631][T10231] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f]: assigned [ 329.643816][T10231] pci 0000:00:1d.0: BAR 4 [io 0x2020-0x203f]: assigned [ 329.657744][T10231] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 329.697173][T10231] [drm] Found bochs VGA, ID 0xb0c5. [ 329.697186][T10231] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 329.850320][T10231] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 330.200609][T10231] Console: switching to colour frame buffer device 160x50 [ 330.261400][T10231] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 330.324186][T10231] e1000e 0000:00:02.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 330.387668][T10231] e1000e 0000:00:02.0 0000:00:02.0 (uninitialized): registered PHC clock [ 330.484091][T10231] e1000e 0000:00:02.0 eth1: (PCI Express:2.5GT/s:Width x1) 52:54:00:12:34:56 [ 330.486504][T10231] e1000e 0000:00:02.0 eth1: Intel(R) PRO/1000 Network Connection [ 330.486672][T10231] e1000e 0000:00:02.0 eth1: MAC: 3, PHY: 8, PBA No: 000000-000 [ 330.591647][T10231] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 98662 usecs [ 330.646566][T10231] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 330.674481][T10231] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 330.674679][T10231] uhci_hcd 0000:00:1d.0: detected 2 ports [ 330.688931][T10231] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002020 [ 330.694559][T10231] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.03 [ 330.695706][T10231] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 330.695719][T10231] usb usb1: Product: UHCI Host Controller [ 330.695727][T10231] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 330.695735][T10231] usb usb1: SerialNumber: 0000:00:1d.0 [ 330.730582][T10231] hub 1-0:1.0: USB hub found [ 330.736079][T10231] hub 1-0:1.0: 2 ports detected [ 330.867466][ T5453] 8021q: adding VLAN 0 to HW filter on device eth1 [ 331.000912][T10259] f_midi2: Invalid MIDI1 group definitions for block 0:1 [ 331.174889][T10260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.321523][T10277] 9p: Bad value for 'rfdno' [ 331.325471][ T8416] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 331.753043][T10255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.544529][T10283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.863548][T10303] kvm: user requested TSC rate below hardware speed [ 333.245483][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.945'. [ 333.245582][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.945'. [ 333.245699][T10309] netlink: 1 bytes leftover after parsing attributes in process `syz.3.945'. [ 334.131676][T10320] fuse: root generation should be zero [ 335.216007][T10340] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 335.360551][T10345] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 335.360577][T10345] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 335.361119][T10345] vhci_hcd vhci_hcd.0: Device attached [ 335.676846][ T30] usb 40-1: SetAddress Request (6) to port 0 [ 335.676907][ T30] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 335.860222][T10354] /dev/nullb0: Can't lookup blockdev [ 336.069660][ T5805] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 336.229400][ T5805] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 336.230438][ T5805] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1792, setting to 1024 [ 336.230454][ T5805] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 336.233863][ T5805] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.233877][ T5805] usb 7-1: Product: syz [ 336.233884][ T5805] usb 7-1: Manufacturer: syz [ 336.233891][ T5805] usb 7-1: SerialNumber: syz [ 336.257487][T10352] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 336.520125][T10352] 9p: Could not find request transport: uj)x [ 337.168585][T10347] vhci_hcd: connection reset by peer [ 337.170777][ T5842] vhci_hcd vhci_hcd.1: stop threads [ 337.170816][ T5842] vhci_hcd vhci_hcd.1: release socket [ 337.170844][ T5842] vhci_hcd vhci_hcd.1: disconnect device [ 337.677873][T10387] binder: 10385:10387 ioctl c0046209 0 returned -22 [ 337.683872][T10387] fuse: Unknown parameter './cgroup.cpu/memory.limit_in_bytes' [ 338.728620][T10396] IPv6: sit2: Disabled Multicast RS [ 338.972100][T10396] sit2: entered allmulticast mode [ 339.375699][ T5805] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 339.515364][T10407] tmpfs: Unknown parameter '‘Çhè9å­±ÍH{üÛÞdx‰iÿ‰©ø8¼àã­0ZÑl |wµ?–VHü²C\W4ÒÙÆtµC|þA [ 339.515364][T10407] Ä5¾' [ 339.887042][ T5805] usb 7-1: USB disconnect, device number 20 [ 339.956044][ T5805] usblp0: removed [ 340.217280][T10401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.762592][ T30] usb 40-1: device descriptor read/8, error -110 [ 341.161398][ T30] usb usb40-port1: attempt power cycle [ 341.386267][T10437] netlink: 16 bytes leftover after parsing attributes in process `syz.3.969'. [ 341.732147][ T30] usb usb40-port1: unable to enumerate USB device [ 341.789458][ T5738] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 341.793782][ T5099] Bluetooth: hci4: command 0x1003 tx timeout [ 342.689983][T10458] netlink: 'syz.2.974': attribute type 12 has an invalid length. [ 343.563930][T10443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.575972][T10484] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 343.575989][T10484] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 343.576444][T10484] vhci_hcd vhci_hcd.0: Device attached [ 343.879419][ T43] audit: type=1326 audit(1789524326.647:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10464 comm="syz.0.975" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 343.879565][ T43] audit: type=1326 audit(1789524326.647:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10464 comm="syz.0.975" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 343.884188][ T43] audit: type=1326 audit(1789524326.647:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10464 comm="syz.0.975" exe="/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 343.888969][ T43] audit: type=1326 audit(1789524326.657:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10464 comm="syz.0.975" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 343.889402][ T43] audit: type=1326 audit(1789524326.657:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10464 comm="syz.0.975" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 343.934551][ T8416] usb 42-1: SetAddress Request (14) to port 0 [ 343.934638][ T8416] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 344.464666][T10494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.980'. [ 345.971376][T10485] vhci_hcd: connection reset by peer [ 345.971698][ T13] vhci_hcd vhci_hcd.2: stop threads [ 345.971717][ T13] vhci_hcd vhci_hcd.2: release socket [ 345.971760][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 347.078339][T10524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.984'. [ 347.078364][T10524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.984'. [ 347.078380][T10524] netlink: 1 bytes leftover after parsing attributes in process `syz.2.984'. [ 347.444806][T10529] netlink: 'syz.3.987': attribute type 13 has an invalid length. [ 348.212455][T10547] gfs2: error -5 reading superblock [ 348.390794][T10548] netlink: 'syz.1.990': attribute type 21 has an invalid length. [ 348.390999][T10548] IPv6: NLM_F_CREATE should be specified when creating new route [ 348.603985][T10534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.998491][ T8416] usb 42-1: device descriptor read/8, error -110 [ 349.411166][ T8416] usb usb42-port1: attempt power cycle [ 349.923547][T10566] comedi comedi3: pcmda12: I/O base address or length out of range [ 350.173968][ T8416] usb usb42-port1: unable to enumerate USB device [ 350.385064][T10555] netlink: 'syz.1.993': attribute type 12 has an invalid length. [ 350.485636][T10572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.996'. [ 350.485654][T10572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.996'. [ 350.502425][T10572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.996'. [ 352.155183][T10580] ptrace attach of ""[10594] was attempted by "/syz-executor exec"[10580] [ 352.167585][ T43] audit: type=1800 audit(1789524334.928:65): pid=10580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.998" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 352.170786][T10593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1002'. [ 352.174121][T10593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1002'. [ 352.174294][T10593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1002'. [ 352.174617][T10593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1002'. [ 352.174686][T10593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1002'. [ 352.952761][T10609] netlink: 'syz.3.1005': attribute type 12 has an invalid length. [ 353.348036][ T2341] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 353.533756][ T2341] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 353.542092][ T2341] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 353.542120][ T2341] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 353.542140][ T2341] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 52, changing to 9 [ 353.542168][ T2341] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 8241, setting to 1024 [ 353.568625][ T2341] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.568655][ T2341] usb 6-1: Product: syz [ 353.568670][ T2341] usb 6-1: Manufacturer: syz [ 353.568686][ T2341] usb 6-1: SerialNumber: syz [ 353.570946][ T2341] usb 6-1: config 0 descriptor?? [ 354.258500][ T2341] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 354.567514][ T970] usb 6-1: USB disconnect, device number 12 [ 355.067967][T10640] netlink: 'syz.3.1010': attribute type 10 has an invalid length. [ 355.184048][T10640] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 355.480567][T10643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1011'. [ 356.659494][T10657] tipc: Cannot configure node identity twice [ 356.668215][T10657] Invalid ELF header magic: != ELF [ 356.678660][T10657] overlayfs: overlapping lowerdir path [ 357.176034][T10664] gfs2: error -5 reading superblock [ 357.224391][T10664] netlink: 'syz.3.1015': attribute type 21 has an invalid length. [ 357.224409][T10664] IPv6: NLM_F_CREATE should be specified when creating new route [ 359.711666][T10693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1020'. [ 361.049757][T10691] bond1 (unregistering): Released all slaves [ 361.291832][T10689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.342329][T10728] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 362.386646][T10732] netlink: 'syz.0.1030': attribute type 21 has an invalid length. [ 362.386672][T10732] IPv6: NLM_F_CREATE should be specified when creating new route [ 363.611360][T10754] Invalid ELF header magic: != ELF [ 363.617026][T10754] overlayfs: overlapping lowerdir path [ 363.694507][T10751] f_midi2: Invalid MIDI1 group definitions for block 0:1 [ 363.708203][T10751] Config c/1 of g1 needs at least one function. [ 363.709544][T10751] udc dummy_udc.0: failed to start g1: -22 [ 363.709592][T10751] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 363.729870][T10751] UDC core: g1: couldn't find an available UDC or it's busy [ 364.963687][T10771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.231139][T10766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.356616][T10785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.777895][T10795] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 365.777921][T10795] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 365.781474][T10795] vhci_hcd vhci_hcd.0: Device attached [ 365.869236][T10800] overlayfs: failed to clone lowerpath [ 366.068511][ T8416] usb 42-1: SetAddress Request (18) to port 0 [ 366.068545][ T8416] usb 42-1: new SuperSpeed USB device number 18 using vhci_hcd [ 366.288420][T10806] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1042'. [ 366.388178][T10811] jffs2: notice: (10811) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 366.768803][ T43] audit: type=1326 audit(1789524349.538:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10837 comm="syz.0.1052" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6feefec code=0x0 [ 366.862909][T10796] vhci_hcd: connection reset by peer [ 366.863473][ T13] vhci_hcd vhci_hcd.2: stop threads [ 366.863495][ T13] vhci_hcd vhci_hcd.2: release socket [ 366.863580][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 367.185931][T10848] openvswitch: netlink: Unknown key attributes 1 [ 367.192568][T10848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1046'. [ 367.356505][T10848] syz.3.1046 (10848): drop_caches: 2 [ 367.826219][T10858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.247156][ T970] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 368.607088][ T970] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 368.660927][ T970] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 368.660945][ T970] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 368.660957][ T970] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 52, changing to 9 [ 368.660969][ T970] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 8241, setting to 1024 [ 368.662570][ T970] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.662583][ T970] usb 8-1: Product: syz [ 368.662590][ T970] usb 8-1: Manufacturer: syz [ 368.662597][ T970] usb 8-1: SerialNumber: syz [ 368.664222][ T970] usb 8-1: config 0 descriptor?? [ 368.759764][T10870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.994138][ T970] adutux 8-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 369.209246][ T970] usb 8-1: USB disconnect, device number 24 [ 369.924573][T10930] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 370.507305][T10941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.941033][T10959] netlink: 'syz.1.1068': attribute type 1 has an invalid length. [ 370.980929][T10959] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 371.149296][ T8416] usb 42-1: device descriptor read/8, error -110 [ 371.268838][T10974] comedi comedi1: Minor 4 could not be opened [ 371.696171][T10953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.919378][ T8416] usb usb42-port1: attempt power cycle [ 372.143116][T10971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.967705][ T8416] usb usb42-port1: unable to enumerate USB device [ 373.159303][T10996] can0: slcan on ttyS3. [ 373.332579][T11002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.377509][T10996] can0 (unregistered): slcan off ttyS3. [ 373.995042][T11010] ptrace attach of ""[11013] was attempted by "/syz-executor exec"[11010] [ 374.184120][ T43] audit: type=1800 audit(1789524356.949:67): pid=11010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1075" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 374.185273][T11011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.228416][T11023] netlink: 'syz.3.1079': attribute type 1 has an invalid length. [ 374.228430][T11023] netlink: 756 bytes leftover after parsing attributes in process `syz.3.1079'. [ 375.383237][T11041] bond0: invalid ARP target specified [ 375.446855][T11026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 376.208171][T11050] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1086'. [ 376.427409][T11050] ubi0: attaching mtd0 [ 376.494590][T11050] ubi0: scanning is finished [ 376.494640][T11050] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 376.543832][T11061] UBIFS error (pid: 11061): cannot open "ubi0:testvol", error -19 [ 376.790391][T11065] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1089'. [ 376.837152][T11050] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 376.837618][T11065] jffs2: notice: (11065) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 377.097674][T11051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.190130][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.232602][T11082] gadgetfs: bound to dummy_udc driver [ 378.246985][T11092] bond0: invalid ARP target specified [ 378.466497][ T8416] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 378.466729][ C1] gadgetfs: connected [ 378.467367][ T8416] gadgetfs: disconnected [ 378.597735][T11083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.616696][ C1] gadgetfs: connected [ 378.617428][ T8416] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 378.617692][ T8416] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 378.617711][ T8416] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.619040][ C1] gadgetfs: configuration #1 [ 378.672890][T11071] gadgetfs: suspended from state 3 [ 378.673217][ T8416] usb 5-1: USB disconnect, device number 9 [ 378.683847][T11071] gadgetfs: disconnected [ 379.117775][T11109] bond0: invalid ARP target specified [ 379.425713][T11112] bond1 (unregistering): Released all slaves [ 380.678885][T11129] ptrace attach of ""[11131] was attempted by "/syz-executor exec"[11129] [ 380.736937][ T43] audit: type=1800 audit(1789524363.509:68): pid=11129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1101" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 381.295389][T11130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.000325][T11152] batadv_slave_1: entered promiscuous mode [ 382.058555][T11156] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1109'. [ 382.097053][T11156] batadv_slave_1: left promiscuous mode [ 383.519248][T11167] netlink: 'syz.2.1113': attribute type 10 has an invalid length. [ 383.522254][T11167] veth0_to_bond: entered promiscuous mode [ 383.522719][T11167] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 384.282589][T11200] gadgetfs: bound to dummy_udc driver [ 384.516272][ T30] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 384.518261][ C1] gadgetfs: connected [ 384.522144][ T30] gadgetfs: disconnected [ 384.738184][ C1] gadgetfs: connected [ 384.739415][ T30] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 384.741722][ T30] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 384.741746][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.763154][ C1] gadgetfs: configuration #1 [ 384.846393][T11183] gadgetfs: suspended from state 3 [ 384.846475][T11183] gadgetfs: disconnected [ 384.850392][ T30] usb 5-1: USB disconnect, device number 10 [ 384.918558][T11191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.553527][T11214] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 385.553576][T11214] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 385.553837][T11214] vhci_hcd vhci_hcd.0: Device attached [ 385.856881][ T30] usb 42-1: SetAddress Request (22) to port 0 [ 385.856937][ T30] usb 42-1: new SuperSpeed USB device number 22 using vhci_hcd [ 385.905048][T11225] netlink: 'syz.1.1125': attribute type 1 has an invalid length. [ 385.905069][T11225] netlink: 756 bytes leftover after parsing attributes in process `syz.1.1125'. [ 386.313030][T11227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.571100][T11215] vhci_hcd: connection reset by peer [ 386.571450][ T5842] vhci_hcd vhci_hcd.2: stop threads [ 386.571472][ T5842] vhci_hcd vhci_hcd.2: release socket [ 386.571589][ T5842] vhci_hcd vhci_hcd.2: disconnect device [ 389.748294][T11309] bond0: invalid ARP target specified [ 389.934588][T11313] gadgetfs: bound to dummy_udc driver [ 390.210229][T11319] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 390.215912][ T8416] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 390.216145][ C1] gadgetfs: connected [ 390.216234][ T8416] gadgetfs: disconnected [ 390.366064][ C1] gadgetfs: connected [ 390.367089][ T8416] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 390.367548][ T8416] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 390.367576][ T8416] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.373493][ C1] gadgetfs: configuration #1 [ 390.451001][T11305] gadgetfs: suspended from state 3 [ 390.451318][T11305] gadgetfs: disconnected [ 390.451507][ T8416] usb 5-1: USB disconnect, device number 11 [ 390.805283][T11333] bond0: invalid ARP target specified [ 390.905829][ T30] usb 42-1: device descriptor read/8, error -110 [ 391.296345][ T30] usb usb42-port1: attempt power cycle [ 391.870089][ T30] usb usb42-port1: unable to enumerate USB device [ 392.127518][T11349] bond0: invalid ARP target specified [ 392.260283][T11353] batadv_slave_1: entered promiscuous mode [ 392.315349][T11354] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1159'. [ 392.491507][T11357] FAULT_INJECTION: forcing a failure. [ 392.491507][T11357] name failslab, interval 1, probability 0, space 0, times 0 [ 392.491548][T11357] CPU: 3 UID: 0 PID: 11357 Comm: syz.2.1160 Tainted: G L syzkaller #0 PREEMPT(full) [ 392.491574][T11357] Tainted: [L]=SOFTLOCKUP [ 392.491581][T11357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 392.491593][T11357] Call Trace: [ 392.491600][T11357] [ 392.491608][T11357] dump_stack_lvl+0x100/0x190 [ 392.491638][T11357] should_fail_ex.cold+0x5/0xa [ 392.491663][T11357] should_failslab+0xc2/0x120 [ 392.491734][T11357] __kmalloc_cache_noprof+0x91/0x6d0 [ 392.491762][T11357] ? file_f_owner_allocate+0x84/0x130 [ 392.491793][T11357] file_f_owner_allocate+0x84/0x130 [ 392.491819][T11357] do_fcntl+0xbd8/0x1670 [ 392.491844][T11357] ? __pfx_do_fcntl+0x10/0x10 [ 392.491867][T11357] ? __fget_files+0x215/0x3d0 [ 392.491892][T11357] ? tomoyo_file_fcntl+0x6c/0xc0 [ 392.491915][T11357] do_compat_fcntl64+0x66d/0x720 [ 392.491940][T11357] ? __pfx_do_compat_fcntl64+0x10/0x10 [ 392.491963][T11357] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 392.491983][T11357] ? xfd_validate_state+0x129/0x190 [ 392.492018][T11357] __do_fast_syscall_32+0x13a/0x8b0 [ 392.492049][T11357] do_fast_syscall_32+0x32/0x70 [ 392.492078][T11357] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 392.492100][T11357] RIP: 0023:0xf7f54fec [ 392.492120][T11357] Code: Unable to access opcode bytes at 0xf7f54fc2. [ 392.492129][T11357] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000037 [ 392.492147][T11357] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000000000f [ 392.492160][T11357] RDX: 00000000800023c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 392.492171][T11357] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 392.492182][T11357] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 392.492193][T11357] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 392.492216][T11357] [ 392.870231][T11368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1163'. [ 392.871179][T11368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1163'. [ 392.871369][T11368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1163'. [ 392.871499][T11368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1163'. [ 392.871568][T11368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1163'. [ 393.035822][T11358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.098727][T11352] batadv_slave_1: left promiscuous mode [ 393.112423][T11370] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 393.153641][T11370] bond1: Removing last ns target with arp_interval on [ 393.411327][T11374] bond0: invalid ARP target specified [ 394.140278][T11383] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1170'. [ 394.749384][T11395] netlink: 'syz.2.1172': attribute type 1 has an invalid length. [ 394.836037][T11395] bond1: entered promiscuous mode [ 394.836325][T11395] 8021q: adding VLAN 0 to HW filter on device bond1 [ 395.590846][T11416] bond0: invalid ARP target specified [ 396.128370][T11406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.635125][T11428] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1186'. [ 397.049152][T11425] batadv_slave_1: entered promiscuous mode [ 397.085571][T11425] batadv_slave_1: left promiscuous mode [ 397.499622][T11435] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 398.859990][T11468] binder: 11467:11468 ioctl c0306201 0 returned -14 [ 398.868609][T11468] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1191'. [ 398.927177][T11468] Console: switching to colour dummy device 80x25 [ 399.124091][T11472] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 399.147263][T11469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.150837][T11472] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 399.150984][T11472] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 399.152481][T11472] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 399.152953][T11472] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 399.182322][T11472] pci 0000:00:01.0: Adding to iommu group 1 [ 399.198849][T11472] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 399.198864][T11472] pci 0000:00:01.0: vgaarb: bridge control possible [ 399.198872][T11472] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 399.250389][T11472] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 399.253933][T11472] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 399.297843][T11472] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 399.390772][T11472] [drm] Found bochs VGA, ID 0xb0c5. [ 399.390790][T11472] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 399.426827][T11472] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 399.607302][T11472] Console: switching to colour frame buffer device 160x50 [ 399.641860][T11472] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 400.160010][T11484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.155281][ T2341] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 401.315250][ T2341] usb 8-1: Using ep0 maxpacket: 16 [ 401.315947][ T2341] usb 8-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 401.318728][ T2341] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.318764][ T2341] usb 8-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 401.318785][ T2341] usb 8-1: config 0 interface 0 has no altsetting 0 [ 401.318809][ T2341] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.336879][ T2341] usb 8-1: config 0 descriptor?? [ 401.349214][ T2341] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 401.469509][T11529] bond0: invalid ARP target specified [ 402.149971][ T2341] usb 8-1: USB disconnect, device number 25 [ 402.375543][T11552] CacheFiles: Failed to register: -95 [ 402.384369][T11552] AppArmor: change_hat: Invalid input 'š—files' [ 402.464023][T11563] bond0: invalid ARP target specified [ 403.427825][T11576] batadv_slave_1: entered promiscuous mode [ 403.428518][T11575] batadv_slave_1: left promiscuous mode [ 403.700215][T11573] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 403.839582][T11588] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 404.206051][T11603] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1225'. [ 404.614650][ T43] audit: type=1804 audit(1789524387.381:69): pid=11616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1229" name="bus" dev="ramfs" ino=35092 res=1 errno=0 [ 404.624033][ T43] audit: type=1804 audit(1789524387.391:70): pid=11616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1229" name="bus" dev="ramfs" ino=35092 res=1 errno=0 [ 405.811380][T11638] batadv_slave_1: entered promiscuous mode [ 405.864756][T11640] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1235'. [ 405.871059][T11640] batadv_slave_1: left promiscuous mode [ 407.207930][T11654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.973766][T11670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 408.033379][T11672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 408.485270][T11677] netlink: 'syz.1.1244': attribute type 7 has an invalid length. [ 408.598529][T11681] bond0: invalid ARP target specified [ 410.544782][ T2341] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 410.695582][ T2341] usb 7-1: Using ep0 maxpacket: 8 [ 410.696478][ T2341] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 410.698819][ T2341] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 410.698840][ T2341] usb 7-1: config 179 has no interface number 0 [ 410.698899][ T2341] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 410.698923][ T2341] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 410.698947][ T2341] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 410.698969][ T2341] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 410.698989][ T2341] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 410.699026][ T2341] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.703740][T11708] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 410.943711][T11701] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1249'. [ 410.963427][T11714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.977339][ T5848] usb 7-1: USB disconnect, device number 21 [ 410.977352][ C2] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 410.977516][ C2] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 411.636486][T11731] bond0: invalid ARP target specified [ 412.522639][T11728] Unable to extract alua_access_type [ 412.600734][T11744] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 412.644716][T11744] serio: Serial port ptm0 [ 412.700753][T11748] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1260'. [ 412.762618][T11751] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 413.996975][T11764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.161515][T11777] bond0: invalid ARP target specified [ 415.200262][T11788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1270'. [ 416.458324][T11811] Console: switching to colour dummy device 80x25 [ 416.594045][T11801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.820741][T11817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.039767][T11824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1277'. [ 417.130272][T11825] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1277'. [ 417.148396][T11825] ata1.00: invalid cdb length 6 [ 417.437487][T11833] cgroup: Unknown subsys name 'rlimit' [ 418.326929][T11853] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 418.326945][T11853] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 418.327412][T11853] vhci_hcd vhci_hcd.0: Device attached [ 418.360890][T11832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.504406][ T5848] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 418.564444][ T5848] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 419.024379][ T2341] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 419.174774][ T2341] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 419.175524][ T2341] usb 5-1: Dual-Role OTG device on HNP port [ 419.175798][ T2341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.196025][ T2341] gspca_main: spca501-2.14.0 probing 0000:0000 [ 419.196486][ T2341] gspca_spca501: reg write: error -32 [ 419.196498][ T2341] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 419.196561][ T2341] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 419.226661][T11864] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1285'. [ 419.288345][T11868] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1285'. [ 419.303696][T11868] cgroup: Invalid name [ 419.751594][T11854] vhci_hcd: connection reset by peer [ 419.753976][ T13] vhci_hcd vhci_hcd.3: stop threads [ 419.754002][ T13] vhci_hcd vhci_hcd.3: release socket [ 419.754739][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 419.905859][T11873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.278704][T11887] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1291'. [ 420.297356][T11887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1291'. [ 420.495566][T11894] pim6reg: entered allmulticast mode [ 420.560261][T11891] pim6reg: left allmulticast mode [ 420.664562][T11901] jffs2: notice: (11901) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 420.706293][T11901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1294'. [ 420.720842][T11891] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1292'. [ 421.450855][T11920] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.453429][T11920] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.502448][T11920] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1300'. [ 421.638885][T11909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.691365][T11928] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 421.869287][T11931] serio: Serial port ptm0 [ 421.918738][T11932] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1301'. [ 422.274704][T11936] bond_slave_0: Caught tx_queue_len zero misconfig [ 422.306222][T11936] retu-mfd 0-0001: could not read Retu revision: -6 [ 422.309568][T11936] i2c i2c-0: new_device: Instantiated device retu at 0x01 [ 422.327546][T11939] jffs2: notice: (11939) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 422.393479][T11939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1304'. [ 422.427527][T11946] overlayfs: failed to clone lowerpath [ 422.601071][T11933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.343516][T11951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.694039][ T5848] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 424.234118][ T35] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 424.409970][ T35] usb 8-1: Using ep0 maxpacket: 32 [ 424.411036][ T35] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 424.411930][ T35] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 424.411943][ T35] usb 8-1: config 0 has no interface number 0 [ 424.439830][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.439845][ T35] usb 8-1: Product: syz [ 424.439852][ T35] usb 8-1: Manufacturer: syz [ 424.439860][ T35] usb 8-1: SerialNumber: syz [ 424.850231][ T35] usb 8-1: config 0 descriptor?? [ 425.105950][ T35] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 425.105965][ T35] usb 8-1: selecting invalid altsetting 1 [ 425.105973][ T35] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 425.287222][T11984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.416952][T11974] e1000e 0000:00:02.0 eth1: removed PHC [ 425.463209][ T35] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 425.463546][ T35] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 425.463583][ T35] usb 8-1: media controller created [ 425.472843][ T35] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 425.944531][T11974] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 426.130927][T12009] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 426.275245][ T35] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 426.275274][ T35] zl10353_read_register: readreg error (reg=127, ret==-71) [ 426.275542][ T35] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 426.314063][ T35] usb 8-1: USB disconnect, device number 26 [ 426.721815][T12036] bond0: invalid ARP target specified [ 427.643009][T12052] fuse: fd is not a fuse device [ 427.789686][T12037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.462274][T12072] overlayfs: failed to clone lowerpath [ 428.930025][T12080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.384445][ T970] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 429.534253][ T970] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 429.535366][ T970] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 429.535429][ T970] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 429.535442][ T970] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 429.535458][ T970] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 429.535476][ T970] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.587907][T12093] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 429.587964][T12093] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 429.588011][T12093] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 429.588057][T12093] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 429.608442][ T970] cxacru 7-1:1.0: send of cm 0x90 failed (-71) [ 429.618859][T12118] cxacru 7-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 429.618883][T12118] cxacru 7-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 429.714561][T12122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1336'. [ 429.715177][T12122] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1336'. [ 429.765604][T12125] overlayfs: failed to clone lowerpath [ 430.288617][ T43] audit: type=1326 audit(1789524413.062:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12137 comm="syz.3.1340" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 430.290006][ T43] audit: type=1326 audit(1789524413.062:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12137 comm="syz.3.1340" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 430.291268][ T43] audit: type=1326 audit(1789524413.062:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12137 comm="syz.3.1340" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 430.291371][T12138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1340'. [ 430.292464][ T43] audit: type=1326 audit(1789524413.062:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12137 comm="syz.3.1340" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 430.292623][ T43] audit: type=1326 audit(1789524413.062:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12137 comm="syz.3.1340" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 430.292854][ T43] audit: type=1326 audit(1789524413.062:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12137 comm="syz.3.1340" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 430.293681][ T43] audit: type=1326 audit(1789524413.062:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12137 comm="syz.3.1340" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 430.294939][ T43] audit: type=1326 audit(1789524413.072:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12137 comm="syz.3.1340" exe="/syz-executor" sig=0 arch=40000003 syscall=271 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 430.296138][ T43] audit: type=1326 audit(1789524413.072:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12137 comm="syz.3.1340" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 430.421765][T12131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.573501][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 431.846896][ T8416] usb 7-1: USB disconnect, device number 22 [ 431.878293][T12144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.960884][T12163] overlayfs: failed to clone lowerpath [ 432.657130][T12173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1349'. [ 432.658216][T12173] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1349'. [ 433.101002][T12170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.046264][T12190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.751343][T12226] overlayfs: failed to clone lowerpath [ 438.012625][T12227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.043448][T12244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1362'. [ 438.072755][T12244] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1362'. [ 438.072987][T12244] openvswitch: netlink: Message has 16 unknown bytes. [ 438.500583][T12244] jffs2: notice: (12244) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 439.631869][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.080875][T12277] devpts: Bad value for 'uid' [ 440.080887][T12277] devpts: Bad value for 'uid' [ 440.086188][T12277] i2c i2c-0: new_device: Extra parameters [ 440.234700][T12261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.408995][T12283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 442.598811][T12315] 9p: Bad value for 'rfdno' [ 444.103818][T12335] netlink: 'syz.3.1388': attribute type 2 has an invalid length. [ 444.162403][T12341] bond0: invalid ARP target specified [ 444.208609][T12343] fuse: fd is not a fuse device [ 445.261030][T12346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.792909][T12369] netlink: 'syz.2.1394': attribute type 4 has an invalid length. [ 446.694356][T12389] bond0: invalid ARP target specified [ 447.605178][T12399] bond0: invalid ARP target specified [ 447.753320][T12407] devpts: Bad value for 'uid' [ 447.753332][T12407] devpts: Bad value for 'uid' [ 447.759111][T12407] i2c i2c-0: new_device: Extra parameters [ 447.892391][T12409] netlink: 'syz.2.1401': attribute type 8 has an invalid length. [ 448.024584][T12406] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 449.193141][T12412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.520030][T12433] netlink: 'syz.1.1408': attribute type 1 has an invalid length. [ 449.520051][T12433] netlink: 756 bytes leftover after parsing attributes in process `syz.1.1408'. [ 449.662618][ T30] usb 8-1: new full-speed USB device number 27 using dummy_hcd [ 449.814506][ T30] usb 8-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 449.815643][ T30] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 449.815676][ T30] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 449.819023][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.819046][ T30] usb 8-1: Product: syz [ 449.819057][ T30] usb 8-1: Manufacturer: syz [ 449.819068][ T30] usb 8-1: SerialNumber: syz [ 450.101159][T12431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.101511][T12431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.259817][T12444] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1410'. [ 450.573717][ T30] usb 8-1: Unsupported UAC3 BADD profile [ 450.790062][T12449] bridge1: entered promiscuous mode [ 451.086440][T12457] netlink: 'syz.0.1415': attribute type 2 has an invalid length. [ 451.086454][T12457] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1415'. [ 451.086810][ T30] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 451.102621][ T30] usb 8-1: USB disconnect, device number 27 [ 451.124234][T12457] : entered promiscuous mode [ 451.344471][ T6889] udevd[6889]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 452.697455][T12481] xt_CT: No such helper "pptp" [ 452.801240][T12481] tmpfs: Unknown parameter 'grpquotaq.io_wait_time_recursive' [ 453.470705][T12497] bond0: invalid ARP target specified [ 454.378817][T12492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.779475][T12510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1427'. [ 455.780981][T12510] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1427'. [ 455.781024][T12510] openvswitch: netlink: Message has 16 unknown bytes. [ 455.828141][T12510] jffs2: notice: (12510) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 456.709680][T12524] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 456.969390][T12531] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size. [ 457.578993][T12546] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1432'. [ 457.642549][T12540] bond0: invalid ARP target specified [ 457.672402][T12546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1432'. [ 459.135026][T12573] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 459.603571][T12576] smc: net device vlan1 applied user defined pnetid SYZ2 [ 459.690071][T12558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.825297][T12551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.441731][T12583] bond0: invalid ARP target specified [ 460.478858][T12584] overlayfs: failed to clone lowerpath [ 461.275651][T12604] netlink: 'syz.0.1450': attribute type 1 has an invalid length. [ 461.297380][T12604] 8021q: adding VLAN 0 to HW filter on device bond2 [ 462.333603][T12615] null_blk: disk nullb1 created [ 462.914872][T12612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.377092][T12642] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 463.835635][T12630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.295989][T12661] bond0: invalid ARP target specified [ 465.722674][ T6796] IPVS: starting estimator thread 0... [ 465.811750][T12665] IPVS: using max 29 ests per chain, 69600 per kthread [ 467.100916][T12671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.019740][T12688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.165302][T12723] bridge2: entered promiscuous mode [ 470.004901][T12729] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 470.122551][T12734] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 471.506781][T12742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1482'. [ 471.598627][T12742] hsr_slave_1 (unregistering): left promiscuous mode [ 472.323815][T12741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.942829][T12760] batadv_slave_1: entered promiscuous mode [ 472.952140][T12758] batadv_slave_1: left promiscuous mode [ 473.189079][T12766] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 473.251591][T12756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 474.346104][T12787] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 475.241114][T12784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.500667][T12796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.067731][T12805] netlink: 'syz.0.1489': attribute type 4 has an invalid length. [ 477.015521][T12822] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 477.934210][T12842] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 478.093926][T12823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.373471][T12846] bond0: invalid ARP target specified [ 479.793143][T12856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.763473][T12878] overlayfs: failed to clone lowerpath [ 480.993121][T12886] overlayfs: failed to clone lowerpath [ 481.064634][T12888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1510'. [ 481.121860][T12888] hsr_slave_1 (unregistering): left promiscuous mode [ 481.725777][T12894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.926771][T12903] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1515'. [ 481.982117][T12903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1515'. [ 482.457425][T12910] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 483.292158][T12917] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 483.304686][T12917] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 483.304856][T12917] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 483.314835][T12917] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 483.316813][T12917] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 483.395424][T12917] pci 0000:00:01.0: Adding to iommu group 1 [ 483.404643][T12917] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 483.404657][T12917] pci 0000:00:01.0: vgaarb: bridge control possible [ 483.404664][T12917] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 483.405530][T12917] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 483.416993][T12917] pci 0000:00:02.0: BAR 0 [mem 0x81040000-0x8105ffff] [ 483.420621][T12917] pci 0000:00:02.0: BAR 1 [mem 0x81060000-0x8107ffff] [ 483.424881][T12917] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f] [ 483.427526][T12917] pci 0000:00:02.0: BAR 3 [mem 0x81080000-0x81083fff] [ 483.427721][T12917] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 483.439250][T12917] pci 0000:00:02.0: enabling Extended Tags [ 483.467821][T12917] pci 0000:00:02.0: Adding to iommu group 2 [ 483.491311][T12917] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 483.491763][T12917] pci 0000:00:02.0: ROM [mem 0x81000000-0x8103ffff pref]: assigned [ 483.491820][T12917] pci 0000:00:02.0: BAR 0 [mem 0x81040000-0x8105ffff]: assigned [ 483.491990][T12917] pci 0000:00:02.0: BAR 1 [mem 0x81060000-0x8107ffff]: assigned [ 483.492326][T12917] pci 0000:00:02.0: BAR 3 [mem 0x81080000-0x81083fff]: assigned [ 483.492458][T12917] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 483.492593][T12917] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f]: assigned [ 483.495520][T12917] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 483.556416][T12917] [drm] Found bochs VGA, ID 0xb0c5. [ 483.556982][T12917] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 483.588396][T12917] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 484.293091][T12919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.788443][T12935] bond0: invalid ARP target specified [ 485.945500][T12938] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 485.971898][T12917] Console: switching to colour frame buffer device 160x50 [ 486.018768][T12917] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 486.202178][T12917] e1000e 0000:00:02.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 486.319557][T12917] e1000e 0000:00:02.0 0000:00:02.0 (uninitialized): registered PHC clock [ 486.488067][T12917] e1000e 0000:00:02.0 eth1: (PCI Express:2.5GT/s:Width x1) 52:54:00:12:34:56 [ 486.488186][T12917] e1000e 0000:00:02.0 eth1: Intel(R) PRO/1000 Network Connection [ 486.488381][T12917] e1000e 0000:00:02.0 eth1: MAC: 3, PHY: 8, PBA No: 000000-000 [ 486.610590][T12944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.158891][ T5453] 8021q: adding VLAN 0 to HW filter on device eth1 [ 487.288782][T12951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.390421][T12981] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 487.390446][T12981] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 487.394855][T12981] vhci_hcd vhci_hcd.0: Device attached [ 487.537988][ T30] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 487.555398][T12979] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 487.710450][ T30] usb 40-1: SetAddress Request (10) to port 0 [ 487.710512][ T30] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 488.823988][T13008] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 488.980992][T12982] vhci_hcd: connection reset by peer [ 488.981468][ T12] vhci_hcd vhci_hcd.1: stop threads [ 488.981559][ T12] vhci_hcd vhci_hcd.1: release socket [ 488.981628][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 489.111768][T13008] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 489.111829][T13008] overlayfs: failed to look up (tracing) for ino (-66) [ 489.604891][T13014] hpfs: hpfs_map_sector(): read error [ 489.786260][T13018] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 489.786496][T13018] CPU: 2 UID: 0 PID: 13018 Comm: syz.3.1535 Tainted: G L syzkaller #0 PREEMPT(full) [ 489.786527][T13018] Tainted: [L]=SOFTLOCKUP [ 489.786551][T13018] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 489.786563][T13018] Call Trace: [ 489.786570][T13018] [ 489.786578][T13018] dump_stack_lvl+0x100/0x190 [ 489.786680][T13018] sysfs_warn_dup.cold+0x1c/0x28 [ 489.786711][T13018] sysfs_create_dir_ns+0x24b/0x2b0 [ 489.786761][T13018] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 489.786783][T13018] ? find_held_lock+0x2b/0x80 [ 489.786804][T13018] ? kobject_add_internal+0x25f/0x930 [ 489.786851][T13018] ? kobject_add_internal+0x25f/0x930 [ 489.786876][T13018] ? class_dir_child_ns_type+0xd/0x60 [ 489.786909][T13018] kobject_add_internal+0x2c8/0x930 [ 489.786936][T13018] kobject_add+0x16a/0x1e0 [ 489.786958][T13018] ? __pfx_kobject_add+0x10/0x10 [ 489.786983][T13018] ? get_device_parent+0x1b3/0x4c0 [ 489.787010][T13018] ? kobject_put+0xb9/0x640 [ 489.787035][T13018] device_add+0x294/0x1970 [ 489.787062][T13018] ? lockdep_init_map_type+0x5c/0x250 [ 489.787086][T13018] ? __pfx_device_add+0x10/0x10 [ 489.787109][T13018] ? lockdep_init_map_type+0x5c/0x250 [ 489.787141][T13018] ? __init_waitqueue_head+0xca/0x150 [ 489.787179][T13018] tty_register_device_attr+0x388/0x7f0 [ 489.787204][T13018] ? lockdep_init_map_type+0x5c/0x250 [ 489.787229][T13018] ? __pfx_tty_register_device_attr+0x10/0x10 [ 489.787257][T13018] ? tty_port_init+0x156/0x1c0 [ 489.787283][T13018] gsm_activate_mux+0x155/0x2a0 [ 489.787309][T13018] gsmld_ioctl+0xbbc/0x15c0 [ 489.787340][T13018] ? __pfx_gsmld_ioctl+0x10/0x10 [ 489.787383][T13018] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 489.787412][T13018] ? __pfx_gsmld_ioctl+0x10/0x10 [ 489.787436][T13018] tty_compat_ioctl+0x396/0x420 [ 489.787457][T13018] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 489.787480][T13018] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 489.787511][T13018] __do_fast_syscall_32+0x13a/0x8b0 [ 489.787540][T13018] do_fast_syscall_32+0x32/0x70 [ 489.787566][T13018] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 489.787590][T13018] RIP: 0023:0xf7f82fec [ 489.787612][T13018] Code: Unable to access opcode bytes at 0xf7f82fc2. [ 489.787619][T13018] RSP: 002b:00000000f540450c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 489.787637][T13018] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000404c4701 [ 489.787649][T13018] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 489.787660][T13018] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 489.787672][T13018] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 489.787683][T13018] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 489.787707][T13018] [ 489.787823][T13018] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 490.562135][T13016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.878966][T12118] cxacru 7-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 491.448836][T13026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 492.332872][T13038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 492.750185][ T30] usb 40-1: device descriptor read/8, error -110 [ 493.176809][T13052] overlayfs: failed to clone lowerpath [ 493.309089][ T30] usb usb40-port1: attempt power cycle [ 493.970737][ T30] usb usb40-port1: unable to enumerate USB device [ 494.397470][T13064] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 495.820657][T13096] tunl0: Caught tx_queue_len zero misconfig [ 495.912834][T13078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 497.653216][T13111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1550'. [ 498.759186][T13114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.297373][T13142] Bluetooth: MGMT ver 1.23 [ 501.061300][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.899941][T13143] gadgetfs: bound to dummy_udc driver [ 502.159836][ T970] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 502.160117][ C2] gadgetfs: connected [ 502.160500][ T970] gadgetfs: disconnected [ 502.309972][ C2] gadgetfs: connected [ 502.310181][ T970] usb 6-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 502.310989][ T970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.327090][ C2] gadgetfs: configuration #1 [ 502.562249][T13143] gadgetfs: suspended from state 3 [ 502.562383][T13143] gadgetfs: disconnected [ 502.755808][ T970] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/input/input21 [ 502.770632][T13157] random: crng reseeded on system resumption [ 503.045156][ T970] usb 6-1: USB disconnect, device number 13 [ 503.045264][ C2] usbtouchscreen 6-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 503.272574][T13160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.788540][T13176] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 504.990968][T13185] netlink: 'syz.2.1564': attribute type 1 has an invalid length. [ 504.990982][T13185] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1564'. [ 505.049210][T13179] fuse: fd is not a fuse device [ 505.051011][T13179] fuse: fd is not a fuse device [ 505.686190][T13076] syz.1.1543 (13076) used greatest stack depth: 17840 bytes left [ 505.808631][T13187] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 505.808671][T13187] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 505.808932][T13187] vhci_hcd vhci_hcd.0: Device attached [ 506.248191][T13199] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 506.248191][T13199] [ 506.248530][T13199] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 506.248608][T13199] CIFS: Attempting to mount //127.0.0.1/share [ 506.411009][ T30] usb 44-1: SetAddress Request (10) to port 0 [ 506.413422][ T30] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 506.432520][T13204] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1565'. [ 506.601873][T13204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1565'. [ 506.904880][T13199] CIFS: VFS: Error connecting to socket. Aborting operation. [ 506.904907][T13199] CIFS: VFS: cifs_mount failed w/return code = -101 [ 507.014054][T13210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1569'. [ 507.984338][T13228] 9p: Bad value for 'rfdno' [ 508.146806][T13192] vhci_hcd: connection reset by peer [ 508.146977][ T5815] vhci_hcd vhci_hcd.3: stop threads [ 508.146998][ T5815] vhci_hcd vhci_hcd.3: release socket [ 508.147037][ T5815] vhci_hcd vhci_hcd.3: disconnect device [ 508.404292][ T6796] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 508.408057][T13230] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 508.504132][T13217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.569617][ T970] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 508.729483][ T970] usb 8-1: Using ep0 maxpacket: 8 [ 508.742539][ T970] usb 8-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 508.758978][ T970] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.759337][ T970] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 508.761433][ T970] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 508.798307][ T970] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.798793][ T970] usb 8-1: Product: syz [ 508.799217][ T970] usb 8-1: Manufacturer: syz [ 508.801872][ T970] usb 8-1: SerialNumber: syz [ 509.122856][T13230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.123054][T13230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.209898][ T970] usb 8-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 509.209944][ T970] usb 8-1: clock source 0 is not valid, cannot use [ 509.210686][ T970] usb 8-1: 1:1: cannot get freq (v2/v3): err -71 [ 509.211091][ T970] usb 8-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 509.268128][ T970] usb 8-1: USB disconnect, device number 28 [ 509.365465][T13037] udevd[13037]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 510.069107][T13249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1580'. [ 511.348113][T13262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1583'. [ 511.479095][ T30] usb 44-1: device descriptor read/8, error -110 [ 511.900004][ T30] usb usb44-port1: attempt power cycle [ 512.476432][ T30] usb usb44-port1: unable to enumerate USB device [ 513.063128][T13277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.438508][T13288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.493353][T13301] random: crng reseeded on system resumption [ 513.532045][T13301] input: syz1 as /devices/virtual/input/input22 [ 513.583344][T13303] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1590'. [ 514.266696][T13311] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1593'. [ 514.960609][T13325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1597'. [ 514.976600][T13325] bond0: (slave bond_slave_1): Releasing backup interface [ 514.977468][T13325] bond_slave_1 (unregistering): left promiscuous mode [ 516.278793][T13343] syz_tun: entered allmulticast mode [ 516.284586][T13342] syz_tun: left allmulticast mode [ 519.456485][T13347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.883424][T13359] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 519.883455][T13359] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 519.883545][T13359] vhci_hcd vhci_hcd.0: Device attached [ 520.259239][ T35] usb 8-1: new low-speed USB device number 29 using dummy_hcd [ 520.412537][ T35] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 520.414058][ T35] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 520.414086][ T35] usb 8-1: config 0 has no interface number 0 [ 520.414123][ T35] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 520.414145][ T35] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 520.414214][ T35] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 520.414239][ T35] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 520.414266][ T35] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 520.414292][ T35] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 520.414329][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.466365][ T35] usb 8-1: config 0 descriptor?? [ 520.467329][T13378] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 520.467476][T13378] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 520.492805][ T35] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 520.623545][ T30] usb 42-1: SetAddress Request (26) to port 0 [ 520.623581][ T30] usb 42-1: new SuperSpeed USB device number 26 using vhci_hcd [ 520.659723][T13370] vhci_hcd: connection reset by peer [ 520.660828][ T5815] vhci_hcd vhci_hcd.2: stop threads [ 520.660843][ T5815] vhci_hcd vhci_hcd.2: release socket [ 520.660922][ T5815] vhci_hcd vhci_hcd.2: disconnect device [ 522.210093][T13391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.669760][T13402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1610'. [ 522.974724][ T2341] usb 8-1: USB disconnect, device number 29 [ 522.976994][ T2341] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 523.177639][T13418] jffs2: notice: (13418) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 523.316900][T13418] overlayfs: failed to resolve './file1': -2 [ 523.852785][T13434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1619'. [ 524.182574][T13425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 525.699278][ T30] usb 42-1: device descriptor read/8, error -110 [ 526.186999][T13441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 526.315188][T13448] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 526.315222][T13448] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 526.324661][T13448] vhci_hcd vhci_hcd.0: Device attached [ 526.419332][ T30] usb 42-1: SetAddress Request (27) to port 0 [ 526.419595][ T30] usb 42-1: new SuperSpeed USB device number 27 using vhci_hcd [ 528.049000][T13471] ip6tnl0: Caught tx_queue_len zero misconfig [ 528.076753][T13451] vhci_hcd: connection reset by peer [ 528.083842][ T5842] vhci_hcd vhci_hcd.2: stop threads [ 528.083869][ T5842] vhci_hcd vhci_hcd.2: release socket [ 528.083918][ T5842] vhci_hcd vhci_hcd.2: disconnect device [ 528.162878][T13471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1625'. [ 528.179852][T13471] bond0: (slave bond_slave_1): Releasing backup interface [ 528.471927][T13466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 528.940487][T13483] netlink: 'syz.3.1628': attribute type 1 has an invalid length. [ 528.955683][T13483] bond1: entered promiscuous mode [ 528.955984][T13483] 8021q: adding VLAN 0 to HW filter on device bond1 [ 528.978465][T13483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1628'. [ 528.978480][T13483] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1628'. [ 529.152370][T13494] random: crng reseeded on system resumption [ 529.163219][T13495] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1629'. [ 529.264061][T13494] input: syz1 as /devices/virtual/input/input24 [ 529.273089][T13498] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1630'. [ 530.029352][T13496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 530.191028][ T43] kauditd_printk_skb: 70 callbacks suppressed [ 530.191051][ T43] audit: type=1326 audit(1789524510.963:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13515 comm="syz.2.1636" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 530.192798][ T43] audit: type=1326 audit(1789524510.963:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13515 comm="syz.2.1636" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 530.202027][ T43] audit: type=1326 audit(1789524510.973:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13515 comm="syz.2.1636" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 530.202337][ T43] audit: type=1326 audit(1789524510.973:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13515 comm="syz.2.1636" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 530.202497][ T43] audit: type=1326 audit(1789524510.973:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13515 comm="syz.2.1636" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 530.204887][ T43] audit: type=1326 audit(1789524510.973:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13515 comm="syz.2.1636" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 530.206406][ T43] audit: type=1326 audit(1789524510.973:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13515 comm="syz.2.1636" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 530.207361][ T43] audit: type=1326 audit(1789524510.973:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13515 comm="syz.2.1636" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 530.218133][ T43] audit: type=1326 audit(1789524510.993:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13515 comm="syz.2.1636" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71575ab code=0x7ffc0000 [ 530.218601][ T43] audit: type=1326 audit(1789524510.993:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13515 comm="syz.2.1636" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 530.468066][ T5848] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 530.629660][ T5848] usb 7-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 530.636712][ T5848] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.636737][ T5848] usb 7-1: Product: syz [ 530.636750][ T5848] usb 7-1: Manufacturer: syz [ 530.636763][ T5848] usb 7-1: SerialNumber: syz [ 530.655062][ T5848] usb 7-1: USB2VGA dongle found at address 23 [ 530.658826][ T5848] usb 7-1: Allocated 8 output buffers [ 531.319430][T13512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 531.557727][ T30] usb 42-1: device descriptor read/8, error -110 [ 531.627479][ T6796] Bluetooth: (null): Invalid header checksum [ 531.632995][T13516] netlink: 'syz.2.1636': attribute type 30 has an invalid length. [ 531.773745][ T5848] usb 7-1: Failed to early initialize device [ 531.789520][ T5848] usb 7-1: USB disconnect, device number 23 [ 531.812956][ T6913] udevd[6913]: setting mode of /dev/sisusbvga0 to 020600 failed: No such file or directory [ 531.813103][ T6913] udevd[6913]: setting owner of /dev/sisusbvga0 to uid=0, gid=0 failed: No such file or directory [ 531.977695][ T30] usb usb42-port1: attempt power cycle [ 532.413372][T13543] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 532.413411][T13543] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 532.413557][T13543] vhci_hcd vhci_hcd.0: Device attached [ 532.688158][ T8416] usb 40-1: SetAddress Request (14) to port 0 [ 532.688572][ T8416] usb 40-1: new SuperSpeed USB device number 14 using vhci_hcd [ 532.752810][ T30] usb usb42-port1: unable to enumerate USB device [ 532.824037][T13533] input: syz1 as /devices/virtual/input/input25 [ 533.598181][T13549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 535.210234][T13566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 535.764924][T13544] vhci_hcd: connection reset by peer [ 535.765065][ T5815] vhci_hcd vhci_hcd.1: stop threads [ 535.765079][ T5815] vhci_hcd vhci_hcd.1: release socket [ 535.765135][ T5815] vhci_hcd vhci_hcd.1: disconnect device [ 535.886002][T13587] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1650'. [ 536.191250][T13589] netlink: 'syz.3.1651': attribute type 1 has an invalid length. [ 536.191264][T13589] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1651'. [ 536.333890][ T74] nvmet: connect request for invalid subsystem testsubsys! [ 536.334075][T13591] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 537.625477][T13615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1656'. [ 537.722894][T13619] jffs2: notice: (13619) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 537.772710][T13614] gadgetfs: bound to dummy_udc driver [ 537.786745][ T8416] usb 40-1: device descriptor read/8, error -110 [ 538.027765][ T30] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 538.028229][ C1] gadgetfs: connected [ 538.029155][ T30] gadgetfs: disconnected [ 538.172914][ T8416] usb usb40-port1: attempt power cycle [ 538.179715][ C1] gadgetfs: connected [ 538.182446][ T30] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 538.183629][ T30] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 538.183753][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.218978][T13602] gadgetfs: suspended from state 3 [ 538.219387][T13602] gadgetfs: disconnected [ 538.251022][ T30] usb 6-1: can't set config #1, error -71 [ 538.262175][ T30] usb 6-1: USB disconnect, device number 14 [ 538.484791][T13611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 538.728499][ T8416] usb usb40-port1: unable to enumerate USB device [ 539.404325][ T43] kauditd_printk_skb: 121 callbacks suppressed [ 539.404338][ T43] audit: type=1326 audit(1789524519.179:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13648 comm="syz.3.1663" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 539.404562][ T43] audit: type=1326 audit(1789524519.179:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13648 comm="syz.3.1663" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 539.406681][ T43] audit: type=1326 audit(1789524519.179:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13648 comm="syz.3.1663" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 539.406708][ T43] audit: type=1326 audit(1789524519.179:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13648 comm="syz.3.1663" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 539.406728][ T43] audit: type=1326 audit(1789524519.179:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13648 comm="syz.3.1663" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 539.407096][ T43] audit: type=1326 audit(1789524519.179:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13648 comm="syz.3.1663" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 539.407862][ T43] audit: type=1326 audit(1789524519.189:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13648 comm="syz.3.1663" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 539.409926][ T43] audit: type=1326 audit(1789524519.189:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13648 comm="syz.3.1663" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 539.411047][ T43] audit: type=1326 audit(1789524519.189:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13648 comm="syz.3.1663" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71875ab code=0x7ffc0000 [ 539.411327][ T43] audit: type=1326 audit(1789524519.189:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13648 comm="syz.3.1663" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 539.657451][ T35] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 539.808290][ T35] usb 8-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 539.811731][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.811745][ T35] usb 8-1: Product: syz [ 539.811752][ T35] usb 8-1: Manufacturer: syz [ 539.811759][ T35] usb 8-1: SerialNumber: syz [ 539.816684][ T35] usb 8-1: USB2VGA dongle found at address 30 [ 539.818530][ T35] usb 8-1: Allocated 8 output buffers [ 539.833530][T13655] cgroup: Unknown subsys name 'l@Ø$nc‘ : Failed to resolve address, err: -ENODEV [ 597.230271][T14415] rtrs_client L2636: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 598.023982][T14437] 9pnet_virtio: no channels available for device syz [ 598.074655][T14437] gadgetfs: bound to dummy_udc driver [ 598.111604][ T43] kauditd_printk_skb: 293 callbacks suppressed [ 598.111623][ T43] audit: type=1800 audit(1789524577.892:700): pid=14437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1823" name="ep1in-bulk" dev="gadgetfs" ino=45829 res=0 errno=0 [ 598.324386][ T30] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 598.324722][ C1] gadgetfs: connected [ 598.325513][ T30] gadgetfs: disconnected [ 598.484569][ C1] gadgetfs: connected [ 598.519289][ T30] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 598.527585][ T30] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 598.527608][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.581787][ C1] gadgetfs: configuration #1 [ 598.711083][T14434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 599.587758][T14427] gadgetfs: suspended from state 3 [ 599.588039][ T8416] usb 5-1: USB disconnect, device number 13 [ 599.593573][T14427] gadgetfs: disconnected [ 599.616849][T14446] comedi comedi0: comedi_config --init_data is deprecated [ 599.898517][T14449] bond1: entered promiscuous mode [ 600.598011][T14448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 602.427491][T14471] MTD: Couldn't look up './dev/mtdblock0': -2 [ 603.511655][T14478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 603.604124][ T2341] kernel read not supported for file /dsp1 (pid: 2341 comm: kworker/2:3) [ 604.281152][T14493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 604.421050][T14520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1835'. [ 604.421068][T14520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1835'. [ 604.478982][ T1354] hid_parser_main: 56 callbacks suppressed [ 604.478998][ T1354] hid-generic 0000:0000:0000.000F: unknown main item tag 0x7 [ 604.479013][ T1354] hid-generic 0000:0000:0000.000F: ignoring exceeding usage max [ 604.479615][ T1354] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 604.479654][ T1354] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 604.479666][ T1354] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 604.479678][ T1354] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 604.479690][ T1354] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 604.479704][ T1354] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 604.479716][ T1354] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 604.479732][ T1354] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 604.479744][ T1354] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 604.482556][ T1354] hid-generic 0000:0000:0000.000F: hidraw1: HID v0.00 Device [syz0] on syz0 [ 604.705510][ T5453] 8021q: adding VLAN 0 to HW filter on device bond1 [ 604.743788][ T1354] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 605.052427][ T1354] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 605.052452][ T1354] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 605.178797][ T1354] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 605.178826][ T1354] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 605.178840][ T1354] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 605.178853][ T1354] usb 6-1: config 0 interface 0 has no altsetting 0 [ 605.248181][ T1354] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 605.248212][ T1354] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 605.248226][ T1354] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 605.248239][ T1354] usb 6-1: config 0 interface 0 has no altsetting 0 [ 605.282466][ T1354] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 605.282495][ T1354] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 605.282509][ T1354] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 605.282522][ T1354] usb 6-1: config 0 interface 0 has no altsetting 0 [ 605.312353][ T1354] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 605.312381][ T1354] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 605.312395][ T1354] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 605.312408][ T1354] usb 6-1: config 0 interface 0 has no altsetting 0 [ 605.345364][ T1354] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 605.345391][ T1354] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 605.345405][ T1354] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 605.345418][ T1354] usb 6-1: config 0 interface 0 has no altsetting 0 [ 605.375709][ T1354] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 605.375734][ T1354] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 605.375748][ T1354] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 605.375761][ T1354] usb 6-1: config 0 interface 0 has no altsetting 0 [ 605.404983][ T1354] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 605.405011][ T1354] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 605.405025][ T1354] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 605.405038][ T1354] usb 6-1: config 0 interface 0 has no altsetting 0 [ 605.464387][ T1354] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 605.464417][ T1354] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 605.464432][ T1354] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 605.464451][ T1354] usb 6-1: config 0 interface 0 has no altsetting 0 [ 605.587455][ T1354] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 605.587472][ T1354] usb 6-1: Product: syz [ 605.587479][ T1354] usb 6-1: Manufacturer: syz [ 605.587486][ T1354] usb 6-1: SerialNumber: syz [ 605.883078][ T1354] usb 6-1: config 0 descriptor?? [ 605.897366][T14524] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 606.107569][ T1354] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 606.128659][ T8416] usb 6-1: USB disconnect, device number 18 [ 606.140461][ T8416] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 607.390891][T14513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 607.509824][T14527] fido_id[14527]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 607.911462][T14569] 9pnet_virtio: no channels available for device syz [ 609.262016][T14593] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 609.715305][ T43] audit: type=1807 audit(1789524589.483:701): action=measure res=1 [ 609.866836][T14602] ima: policy update completed [ 609.866951][ T43] audit: type=1802 audit(1789524589.643:702): pid=14602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.3.1847" res=1 errno=0 [ 610.065216][ T43] audit: type=1800 audit(1789524589.833:703): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 610.092063][ T43] audit: type=1800 audit(1789524589.863:704): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 610.196504][ T43] audit: type=1800 audit(1789524589.973:705): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 610.242954][ T43] audit: type=1800 audit(1789524590.013:706): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 610.515736][T14624] netlink: 'syz.2.1851': attribute type 10 has an invalid length. [ 611.289066][T14623] tipc: Enabled bearer , priority 10 [ 611.838875][ T43] audit: type=1800 audit(1789524591.583:707): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16051 res=0 errno=0 [ 611.880784][ T43] audit: type=1800 audit(1789524591.653:708): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16051 res=0 errno=0 [ 611.943849][T14613] tipc: Resetting bearer [ 612.210479][T14627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.235163][T14613] tipc: Disabling bearer [ 612.350355][ T43] audit: type=1800 audit(1789524592.123:709): pid=14637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1853" name="p_srate" dev="configfs" ino=45983 res=0 errno=0 [ 612.573960][T14621] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1851'. [ 612.791530][ T43] audit: type=1800 audit(1789524592.563:710): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 612.913980][T14644] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 613.480902][T14660] 9pnet_virtio: no channels available for device syz [ 613.550790][T14660] overlayfs: failed to clone lowerpath [ 613.564469][T14660] overlayfs: failed to clone lowerpath [ 614.929479][T14679] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 614.929504][T14679] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 614.929647][T14679] vhci_hcd vhci_hcd.0: Device attached [ 614.930101][ T43] kauditd_printk_skb: 4 callbacks suppressed [ 614.930111][ T43] audit: type=1800 audit(1789524594.703:715): pid=14679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1862" name="attach" dev="sysfs" ino=36236 res=0 errno=0 [ 614.956088][T14665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.128253][T14662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1860'. [ 615.192933][T14682] vhci_hcd: connection closed [ 615.193336][ T1354] usb 42-1: SetAddress Request (34) to port 0 [ 615.193390][ T1354] usb 42-1: new SuperSpeed USB device number 34 using vhci_hcd [ 615.193622][T12596] vhci_hcd vhci_hcd.2: stop threads [ 615.193641][T12596] vhci_hcd vhci_hcd.2: release socket [ 615.193682][T12596] vhci_hcd vhci_hcd.2: disconnect device [ 615.213562][ T1354] usb 42-1: enqueue for inactive port 0 [ 615.278117][ T43] audit: type=1800 audit(1789524595.053:716): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 615.603885][ T1354] usb usb42-port1: attempt power cycle [ 615.650547][T14689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.776406][ T43] audit: type=1800 audit(1789524595.553:717): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 615.843789][ T43] audit: type=1800 audit(1789524595.623:718): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 615.916055][T14700] gadgetfs: bound to dummy_udc driver [ 615.917600][ T43] audit: type=1800 audit(1789524595.693:719): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34490 res=0 errno=0 [ 615.918225][ T43] audit: type=1800 audit(1789524595.693:720): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34513 res=0 errno=0 [ 616.153233][ T5929] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 616.153643][ C0] gadgetfs: connected [ 616.153845][ T5929] gadgetfs: disconnected [ 616.174561][ T1354] usb usb42-port1: unable to enumerate USB device [ 616.303447][ C0] gadgetfs: connected [ 616.303571][ T5929] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 616.391413][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.392922][ C0] gadgetfs: configuration #1 [ 616.403524][ T43] audit: type=1800 audit(1789524596.173:721): pid=6913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=201627 res=0 errno=0 [ 616.423010][ T5929] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/input/input26 [ 616.436831][ T43] audit: type=1800 audit(1789524596.213:722): pid=6913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=201656 res=0 errno=0 [ 616.436861][ T43] audit: type=1800 audit(1789524596.213:723): pid=6913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=201634 res=0 errno=0 [ 616.437600][ C1] ================================================================== [ 616.437608][ C1] BUG: KASAN: slab-out-of-bounds in find_endpoint+0x2a3/0x2c0 [ 616.437659][ C1] Read of size 1 at addr ffff8880133a3a93 by task syz-executor/5739 [ 616.437668][ C1] [ 616.437676][ C1] CPU: 1 UID: 0 PID: 5739 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 616.437691][ C1] Tainted: [L]=SOFTLOCKUP [ 616.437695][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 616.437701][ C1] Call Trace: [ 616.437705][ C1] [ 616.437709][ C1] dump_stack_lvl+0x100/0x190 [ 616.437725][ C1] print_report+0x13d/0x4b0 [ 616.437740][ C1] ? __virt_addr_valid+0x239/0x430 [ 616.437756][ C1] ? find_endpoint+0x2a3/0x2c0 [ 616.437765][ C1] kasan_report+0xdf/0x1c0 [ 616.437779][ C1] ? find_endpoint+0x2a3/0x2c0 [ 616.437790][ C1] find_endpoint+0x2a3/0x2c0 [ 616.437800][ C1] dummy_timer+0x500/0x3700 [ 616.437812][ C1] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 616.437831][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 616.437846][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 616.437862][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 616.437874][ C1] ? rcu_is_watching+0x13/0xc0 [ 616.437902][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 616.437918][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 616.437929][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 616.437943][ C1] hrtimer_run_softirq+0x1ca/0x360 [ 616.437955][ C1] handle_softirqs+0x1e6/0x9d0 [ 616.437971][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 616.437988][ C1] ? _raw_spin_unlock+0x28/0x50 [ 616.438001][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 616.438013][ C1] __irq_exit_rcu+0x16a/0x210 [ 616.438027][ C1] irq_exit_rcu+0x9/0x30 [ 616.438042][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 616.438056][ C1] [ 616.438060][ C1] [ 616.438063][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 616.438076][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 616.438091][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 f6 5a 15 f6 48 89 df e8 7e b1 15 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 05 a7 04 f6 65 48 83 3d 74 a4 ba 08 00 74 16 5b [ 616.438102][ C1] RSP: 0000:ffffc90004ca7c40 EFLAGS: 00000246 [ 616.438111][ C1] RAX: 0000000000000006 RBX: ffff888024908ea0 RCX: 0000000000000000 [ 616.438118][ C1] RDX: 0000000000000001 RSI: ffffffff8e3f18bd RDI: ffffffff8c622c80 [ 616.438125][ C1] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 616.438132][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff110001334b0 [ 616.438138][ C1] R13: ffffc90004ca7cc8 R14: 0000000000000000 R15: 0000000000000004 [ 616.438149][ C1] do_wait+0x13b/0x570 [ 616.438161][ C1] ? __pfx_debug_object_free+0x10/0x10 [ 616.438175][ C1] kernel_wait4+0x16d/0x280 [ 616.438187][ C1] ? __pfx_kernel_wait4+0x10/0x10 [ 616.438198][ C1] ? __asan_memset+0x23/0x50 [ 616.438208][ C1] ? __pfx_child_wait_callback+0x10/0x10 [ 616.438219][ C1] ? hrtimer_nanosleep+0x181/0x350 [ 616.438231][ C1] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 616.438243][ C1] __do_compat_sys_wait4+0x15b/0x170 [ 616.438256][ C1] ? __pfx___do_compat_sys_wait4+0x10/0x10 [ 616.438268][ C1] ? get_old_timespec32+0xda/0x130 [ 616.438286][ C1] do_int80_emulation+0x166/0x650 [ 616.438302][ C1] asm_int80_emulation+0x1a/0x20 [ 616.438313][ C1] RIP: 0023:0xf71375ab [ 616.438320][ C1] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 616.438330][ C1] RSP: 002b:00000000ff9bda7c EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 616.438340][ C1] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00000000ff9bdc18 [ 616.438347][ C1] RDX: 0000000040000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 616.438353][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 616.438359][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 616.438365][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 616.438374][ C1] [ 616.438379][ C1] [ 616.438381][ C1] Allocated by task 5453: [ 616.438387][ C1] kasan_save_stack+0x30/0x50 [ 616.438399][ C1] kasan_save_track+0x14/0x30 [ 616.438409][ C1] __kasan_kmalloc+0xaa/0xb0 [ 616.438419][ C1] __kmalloc_node_noprof+0x342/0x880 [ 616.438429][ C1] qdisc_alloc+0xbb/0xb30 [ 616.438443][ C1] qdisc_create_dflt+0x93/0x490 [ 616.438457][ C1] dev_activate+0x64f/0xce0 [ 616.438470][ C1] __dev_open+0x490/0x8f0 [ 616.438489][ C1] __dev_change_flags+0x596/0x850 [ 616.438500][ C1] netif_change_flags+0x8d/0x160 [ 616.438511][ C1] dev_change_flags+0xba/0x260 [ 616.438525][ C1] devinet_ioctl+0x110b/0x1f10 [ 616.438537][ C1] inet_ioctl+0x3aa/0x3f0 [ 616.438549][ C1] sock_do_ioctl+0x118/0x280 [ 616.438563][ C1] sock_ioctl+0x599/0x6b0 [ 616.438571][ C1] __x64_sys_ioctl+0x18e/0x210 [ 616.438586][ C1] do_syscall_64+0x121/0x770 [ 616.438599][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.438609][ C1] [ 616.438611][ C1] The buggy address belongs to the object at ffff8880133a3800 [ 616.438611][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 616.438619][ C1] The buggy address is located 19 bytes to the right of [ 616.438619][ C1] allocated 640-byte region [ffff8880133a3800, ffff8880133a3a80) [ 616.438628][ C1] [ 616.438631][ C1] The buggy address belongs to the physical page: [ 616.438636][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x133a0 [ 616.438645][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 616.438653][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 616.438663][ C1] page_type: f5(slab) [ 616.438672][ C1] raw: 00fff00000000040 ffff88801c042dc0 dead000000000100 dead000000000122 [ 616.438681][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 616.438690][ C1] head: 00fff00000000040 ffff88801c042dc0 dead000000000100 dead000000000122 [ 616.438699][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 616.438707][ C1] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 616.438716][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 616.438721][ C1] page dumped because: kasan: bad access detected [ 616.438726][ C1] page_owner tracks the page as allocated [ 616.438729][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6769, tgid 6768 (syz.3.188), ts 110390211357 [ 616.438749][ C1] post_alloc_hook+0xfd/0x120 [ 616.438766][ C1] get_page_from_freelist+0x110d/0x35d0 [ 616.438775][ C1] __alloc_frozen_pages_noprof+0x936/0x3300 [ 616.438785][ C1] new_slab+0xa9/0x6e0 [ 616.438792][ C1] refill_objects+0xe3/0x410 [ 616.438803][ C1] __pcs_replace_empty_main+0x35e/0x650 [ 616.438818][ C1] __kvmalloc_node_noprof+0x7bb/0x9b0 [ 616.438828][ C1] io_alloc_cache_init+0x38/0x170 [ 616.438837][ C1] io_uring_setup.cold+0x4aa/0x1c5e [ 616.438860][ C1] __ia32_sys_io_uring_setup+0xc2/0x170 [ 616.438880][ C1] do_int80_emulation+0x166/0x650 [ 616.438903][ C1] asm_int80_emulation+0x1a/0x20 [ 616.438915][ C1] page last free pid 0 tgid 0 ts 104050234785 stack trace: [ 616.438925][ C1] __free_frozen_pages+0x79f/0x10f0 [ 616.438944][ C1] rcu_core+0x5f0/0x1260 [ 616.438966][ C1] handle_softirqs+0x1e6/0x9d0 [ 616.438986][ C1] __irq_exit_rcu+0x16a/0x210 [ 616.439007][ C1] irq_exit_rcu+0x9/0x30 [ 616.439025][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 616.439038][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 616.439049][ C1] [ 616.439051][ C1] Memory state around the buggy address: [ 616.439056][ C1] ffff8880133a3980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 616.439065][ C1] ffff8880133a3a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 616.439072][ C1] >ffff8880133a3a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 616.439078][ C1] ^ [ 616.439083][ C1] ffff8880133a3b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 616.439090][ C1] ffff8880133a3b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 616.439095][ C1] ================================================================== [ 616.439152][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 616.771802][ C1] CPU: 1 UID: 0 PID: 5739 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 616.776259][ C1] Tainted: [L]=SOFTLOCKUP [ 616.778101][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 616.782054][ C1] Call Trace: [ 616.783401][ C1] [ 616.784629][ C1] dump_stack_lvl+0x100/0x190 [ 616.786391][ C1] vpanic+0x553/0x970 [ 616.787684][ C1] ? __pfx_vpanic+0x10/0x10 [ 616.789118][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 616.790794][ C1] ? find_endpoint+0x2a3/0x2c0 [ 616.792312][ C1] panic+0xd1/0xe0 [ 616.793547][ C1] ? __pfx_panic+0x10/0x10 [ 616.794981][ C1] ? end_report.part.0+0x23/0x90 [ 616.796538][ C1] ? rcu_is_watching+0x13/0xc0 [ 616.798162][ C1] ? end_report.part.0+0x23/0x90 [ 616.799720][ C1] check_panic_on_warn.cold+0x19/0x34 [ 616.801491][ C1] end_report.part.0+0x3a/0x90 [ 616.803012][ C1] kasan_report.cold+0xe/0x18 [ 616.804733][ C1] ? find_endpoint+0x2a3/0x2c0 [ 616.806328][ C1] find_endpoint+0x2a3/0x2c0 [ 616.807788][ C1] dummy_timer+0x500/0x3700 [ 616.809242][ C1] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 616.811528][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 616.813416][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 616.815183][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 616.816771][ C1] ? rcu_is_watching+0x13/0xc0 [ 616.818283][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 616.820109][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 616.821712][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 616.823450][ C1] hrtimer_run_softirq+0x1ca/0x360 [ 616.825134][ C1] handle_softirqs+0x1e6/0x9d0 [ 616.826756][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 616.828549][ C1] ? _raw_spin_unlock+0x28/0x50 [ 616.830270][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 616.832268][ C1] __irq_exit_rcu+0x16a/0x210 [ 616.833926][ C1] irq_exit_rcu+0x9/0x30 [ 616.835511][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 616.837326][ C1] [ 616.838287][ C1] [ 616.839575][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 616.841988][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 616.844261][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 f6 5a 15 f6 48 89 df e8 7e b1 15 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 05 a7 04 f6 65 48 83 3d 74 a4 ba 08 00 74 16 5b [ 616.850939][ C1] RSP: 0000:ffffc90004ca7c40 EFLAGS: 00000246 [ 616.853353][ C1] RAX: 0000000000000006 RBX: ffff888024908ea0 RCX: 0000000000000000 [ 616.856171][ C1] RDX: 0000000000000001 RSI: ffffffff8e3f18bd RDI: ffffffff8c622c80 [ 616.858661][ C1] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 616.861110][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff110001334b0 [ 616.863664][ C1] R13: ffffc90004ca7cc8 R14: 0000000000000000 R15: 0000000000000004 [ 616.866121][ C1] do_wait+0x13b/0x570 [ 616.867507][ C1] ? __pfx_debug_object_free+0x10/0x10 [ 616.869400][ C1] kernel_wait4+0x16d/0x280 [ 616.870994][ C1] ? __pfx_kernel_wait4+0x10/0x10 [ 616.872597][ C1] ? __asan_memset+0x23/0x50 [ 616.874293][ C1] ? __pfx_child_wait_callback+0x10/0x10 [ 616.876063][ C1] ? hrtimer_nanosleep+0x181/0x350 [ 616.877750][ C1] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 616.879484][ C1] __do_compat_sys_wait4+0x15b/0x170 [ 616.881150][ C1] ? __pfx___do_compat_sys_wait4+0x10/0x10 [ 616.882964][ C1] ? get_old_timespec32+0xda/0x130 [ 616.884738][ C1] do_int80_emulation+0x166/0x650 [ 616.886362][ C1] asm_int80_emulation+0x1a/0x20 [ 616.888006][ C1] RIP: 0023:0xf71375ab [ 616.889279][ C1] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 616.895275][ C1] RSP: 002b:00000000ff9bda7c EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 616.897944][ C1] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00000000ff9bdc18 [ 616.900393][ C1] RDX: 0000000040000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 616.902881][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 616.905396][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 616.908025][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 616.910511][ C1] [ 616.912255][ C1] Kernel Offset: disabled [ 616.913682][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:10:03 Registers: info registers vcpu 0 CPU#0 RAX=0000000000b98659 RBX=ffffffff8ea91540 RCX=ffffffff8bce7185 RDX=0000000000000001 RSI=ffffffff8e3f18bd RDI=ffffffff8c622c80 RBP=fffffbfff1d522a8 RSP=ffffffff8ea07cf0 R8 =0000000000000001 R9 =ffffed10056467bd R10=ffff88802b233deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d40fa2 R15=dffffc0000000000 RIP=ffffffff8bce56bf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096960000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffca2344d10 CR3=0000000077543000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85aeb445 RDI=ffffffff9bc571e0 RBP=ffffffff9bc571a0 RSP=ffffc900005a03c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3331303838386652 R12=0000000000000000 R13=0000000000000074 R14=0000000000000002 R15=ffffc900005a06e0 RIP=ffffffff85aeb46f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096a60000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000056223cdfeb1c CR3=0000000067e73000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff888048584b00 RCX=0000000000000002 RDX=ffff888048584b00 RSI=ffffffff82443a8a RDI=ffff888048584b00 RBP=ffffc900034f7880 RSP=ffffc900034f7808 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffff88802a014b00 R13=0000000000000001 R14=ffff888048584b00 R15=ffff88802b43c040 RIP=ffffffff82443acd RFL=00000096 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096b60000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055fbe4feaf40 CR3=000000004bc2e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=6a45be47f64618af 236249a1f99e3164 6a45be47f64618af 236249a1f99e3164 6a45be47f64618af 236249a1f99e3164 6a45be47f64618af 236249a1f99e3164 ZMM18=eb4fbe5e8eb99a48 381b637255b5ba56 eb4fbe5e8eb99a48 381b637255b5ba56 eb4fbe5e8eb99a48 381b637255b5ba56 eb4fbe5e8eb99a48 381b637255b5ba56 ZMM19=a514000000000000 0000000000000004 a514000000000000 0000000000000003 a514000000000000 0000000000000002 a514000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 829608000e880310 08000e80030fffff ffff020208000008 000208007c08000a ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0150860004000008 000e800201c70800 08014c8000307265 646e69622f736672 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65646e69622f2e01 ffffffffffffffff d9080e80033a0000 05680000001c0000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 667265766f5f6b63 617473725f636570 732f73656974696c 69626172656e6c75 ZMM25=381b6372381b6372 381b6372381b6372 381b6372381b6372 381b6372381b6372 381b6372381b6372 381b6372381b6372 381b6372381b6372 381b6372381b6372 ZMM26=8eb99a488eb99a48 8eb99a488eb99a48 8eb99a488eb99a48 8eb99a488eb99a48 8eb99a488eb99a48 8eb99a488eb99a48 8eb99a488eb99a48 8eb99a488eb99a48 ZMM27=eb4fbe5eeb4fbe5e eb4fbe5eeb4fbe5e eb4fbe5eeb4fbe5e eb4fbe5eeb4fbe5e eb4fbe5eeb4fbe5e eb4fbe5eeb4fbe5e eb4fbe5eeb4fbe5e eb4fbe5eeb4fbe5e ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=a4140000a4140000 a4140000a4140000 a4140000a4140000 a4140000a4140000 a4140000a4140000 a4140000a4140000 a4140000a4140000 a4140000a4140000 info registers vcpu 3 CPU#3 RAX=ffffffff9243053e RBX=ffffffff919b0558 RCX=dffffc0000000000 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff919b0558 RBP=ffffffff919b0558 RSP=ffffc900005f8740 R8 =ffffffff92430574 R9 =0000000000000007 R10=0000000000000200 R11=0000000000058fe4 R12=ffffffff919b0558 R13=ffffffff868fe454 R14=ffffffff919b0558 R15=ffffffff919b0558 RIP=ffffffff81b93a15 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096c60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c45c53c CR3=000000004bc2e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000