last executing test programs: 2m24.798557473s ago: executing program 3 (id=4): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x44}}, 0x20000001) pipe(&(0x7f0000000140)) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2040400) syz_usb_connect$hid(0x633a43bbb115904b, 0x36, &(0x7f0000000140)=ANY=[], 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xc2}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)) epoll_create1(0x80000) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x47f4, 0x5149, 0x8, 0x0, 0x0) 2m23.486219238s ago: executing program 3 (id=5): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r0 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000d80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r0, &(0x7f00000001c0)={0x28, 0x0, r1, {{0x4, 0x7, 0x1, 0xffffffffffffffff}}}, 0x28) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 32) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 32) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x400, 0x3, 0x3e2}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}) (async, rerun: 32) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) (async, rerun: 32) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') writev(r8, &(0x7f0000000340)=[{0x0}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000380)=ANY=[@ANYBLOB="d1e30eaaa2de55e69183ef2cb8480000001400090527bd7000fddbdf25021f00cb", @ANYRES32=0x0, @ANYBLOB="0800040064010104080008004903000008000200e0000002080001007f00000108000a00000000000800090007010000"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r9) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r9, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000009a8bc2be1dde9461e9bba3141644bc9ac9dd2b243f70b24387da55a9808a9985a2a774cccdcbe747caa721a7f74e34", @ANYRES16=r10, @ANYBLOB="010000000000000000000600000914000200000000000000000000000000000000010f000700756e636f6e66696e6564000014000300ff010000000000000000000000000001"], 0x4c}, 0x2, 0x34005}, 0x0) 2m21.9703394s ago: executing program 3 (id=9): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x44}}, 0x20000001) pipe(&(0x7f0000000140)) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x2040400) syz_usb_connect$hid(0x633a43bbb115904b, 0x36, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xc2}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) epoll_create1(0x80000) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f4, 0x5149, 0x8, 0x0, 0x0) 2m20.823260139s ago: executing program 3 (id=13): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) bind$packet(r1, &(0x7f0000000180)={0x11, 0x2, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r4], 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) open_by_handle_at(r6, &(0x7f0000000400)=ANY=[@ANYRES8=r5], 0x2201c3) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r8, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f00000001c0)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x7, 0x24ff871989b0dd67, 0xdcf, 0xb, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r8, &(0x7f0000002a00)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0xf, {0x100000000, 0x1, 0x0, {0xffffffffffffffff, 0x3, 0x3ff, 0x80000001, 0x0, 0x8001ffffffffffe, 0x9e9, 0x0, 0x3, 0x8000, 0x3, 0xffffffffffffffff, 0x0, 0x8, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r8, &(0x7f0000004a00)="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", 0x2000, &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)={0x78, 0x0, 0x0, {0xb01, 0x9, 0x0, {0x0, 0x8, 0x3, 0x7, 0x7, 0x9f0d, 0xfffffeff, 0x8, 0x7fffffff, 0x8000, 0x6, 0x0, 0x0, 0x1000, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_MEASURE_VERITY(r7, 0xc0046686, &(0x7f0000000340)={0x1, 0xad, "d97cb4054f94c2ad88946a0ea31cd1237e02f711bfb66a916b94ecb4d1efd3f37145e3719132e6fccd26fa4eba1b8f55a7166a820f718b3b01b70e35bbfd00afbea61159bc9b51bc550bb0e8e543df02ae1670948269f6cb129d953e920b8ef8e7c3b8a6db10ed9605453422a520196756ba26ac9071bb7a0f19a609dedd791823aff8ab2e016a60327d7f47a311e92c18c067fb000c874d19b17fc81ee461b6b5d0882b7afdd5ed71b94ec0cd"}) ioctl$vim2m_VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000500)={0xa, @sliced={0x3, [0x0, 0x9, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4000, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4]}}) socket(0xa, 0x3, 0x87) syz_emit_ethernet(0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaaf686dd60f4136c000587000000000020000065016f3380f833a7000000079d22f8e5d5002000adfdeed3420d0700000060000000000000009e421e8dd2b6cfac8e0000000000000000403a80a49965e795933f6bd4b460"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x141842, 0x0) 2m19.879180825s ago: executing program 3 (id=16): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r1, 0x84, 0x84, &(0x7f0000000080)=""/4092, &(0x7f0000001080)=0xffc) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$netrom(0x6, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x7fff, 0x9, 0xfffff801, 0x10, 0xd, "07056b66d288c6a8271b542f1a8ad7f5a8b371"}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x10) r4 = memfd_create(&(0x7f00000025c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1cs1F59\xcdR\xc1\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9b\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\xe7\xd6\xa3', 0x6) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="041817aab62fb001000000000000000900"/26], 0x1a) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000200)={@empty, @multicast1, 0x0, "606b177019716ea6ff1f2c7ed79c77e2e0f19a230000002007007c3d935f00", 0x3e1f}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000380)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) 2m18.70078539s ago: executing program 3 (id=21): syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000380)={@broadcast, @remote, @void, {@ipv4={0x8035, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x4, 0x0, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x1, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x11, 0x0, @remote, @rand_addr=0x2}}}}}}, 0x0) (fail_nth: 3) 2m18.650896424s ago: executing program 32 (id=21): syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000380)={@broadcast, @remote, @void, {@ipv4={0x8035, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x4, 0x0, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x1, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x11, 0x0, @remote, @rand_addr=0x2}}}}}}, 0x0) (fail_nth: 3) 6.487453011s ago: executing program 4 (id=467): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x242, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) landlock_restrict_self(0xffffffffffffffff, 0xe) r2 = open(0x0, 0xfc2, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xf6, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x6, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x402, 0x1}}, {0x0, 0x13}}}, 0xfffffffffffffec2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020900"], 0x10}}, 0x0) 5.559198874s ago: executing program 4 (id=471): socket$key(0xf, 0x3, 0x2) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2201}, 0x18, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x242, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) landlock_restrict_self(r0, 0xe) capset(&(0x7f0000000380)={0x20080522}, 0x0) open(&(0x7f0000000580)='./file1\x00', 0xfc2, 0x1df2a23c5997fa5f) 4.449789574s ago: executing program 2 (id=474): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r1 = syz_io_uring_setup(0xb92, &(0x7f0000000480)={0x0, 0xf387, 0x2000, 0x0, 0x335}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioprio_set$pid(0x2, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x8, 0x2007, @fd=r1, 0x3}) io_uring_enter(r1, 0x47ba, 0x636d, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) sendfile(r6, r6, 0x0, 0x6) 4.213363064s ago: executing program 1 (id=477): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x12) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lchown(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000080)=0x2, 0x4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r1 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SYNC(r1, 0xffffffff80000101, 0x0, 0x0) 4.150054933s ago: executing program 1 (id=478): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000000000080000040000", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x20000001) pipe(&(0x7f0000000140)) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2040400) syz_usb_connect$hid(0x633a43bbb115904b, 0x36, &(0x7f0000000140)=ANY=[], 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xc2}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)) epoll_create1(0x80000) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x47f4, 0x5149, 0x8, 0x0, 0x0) 3.489852654s ago: executing program 2 (id=479): socket$inet_mptcp(0x2, 0x1, 0x106) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x101301) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040844) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r4, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25e258a25f9dae13", 0xd}], 0x1}}], 0x1, 0x20008000) recvmsg(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1}, 0x123) shutdown(r4, 0x1) getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000100)=0x3f7, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x40000, &(0x7f0000000240)={0x11, 0xf7, r6, 0x1, 0x20, 0x6, @remote}, 0x14) recvfrom$packet(r5, 0x0, 0x0, 0x2000, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x13c, 0x10, 0x413, 0x70bd26, 0x40, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x7, 0x4e1f, 0x0, 0xa, 0x20, 0x20, 0x67}, {@in=@dev={0xac, 0x14, 0x14, 0x22}, 0x4d4, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, {0x800, 0x17d, 0x0, 0x40000000000004, 0xffffffffffffffff, 0x6, 0x7f, 0x2}, {0x0, 0x21fd, 0x4, 0x4}, {0x4000f6, 0x4, 0x8}, 0x0, 0x34ff, 0x2, 0x1, 0xbe, 0x33}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000804) creat(0x0, 0x0) 3.387199255s ago: executing program 0 (id=481): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r1, 0x84, 0x84, &(0x7f0000000080)=""/4092, &(0x7f0000001080)=0xffc) syz_init_net_socket$netrom(0x6, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x7fff, 0x9, 0xfffff801, 0x10, 0xd, "07056b66d288c6a8271b542f1a8ad7f5a8b371"}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = memfd_create(&(0x7f00000025c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1cs1F59\xcdR\xc1\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9b\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\xe7\xd6\xa3', 0x6) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="041817aab62fb001000000000000000900"/26], 0x1a) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000200)={@empty, @multicast1, 0x0, "606b177019716ea6ff1f2c7ed79c77e2e0f19a230000002007007c3d935f00", 0x3e1f}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000380)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) 3.029284441s ago: executing program 1 (id=482): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e20, @local}}, 0x0, 0x0, 0x22, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c01006f9ef2ef8b"}, 0xd8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="1400040076657468305f6d61637674617000000008000500040000001c00e7005f6734b2a68afb0c6ea9e9ec2d10cc638b0d42f682e63d5d"], 0x54}, 0x1, 0x0, 0x0, 0x20008080}, 0x24044884) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000129bd7000fcdbdf251800000008000300", @ANYRES32=0x0, @ANYBLOB="0a00060008021100000100000a000600ffffffffffff00000a00060008021100000000000a00060008021100000100000a000600080211000001000098559309f338620f2cffbf528e695427072b7efd60590185a677be142913d4f81e692d757f5d25a118fc46a325521cbee4b64659f4a0"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) r4 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close(r4) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000240)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@local, @in=@dev={0xac, 0x14, 0x14, 0x2b}, 0x4e22, 0xb26a, 0x4e22, 0x7, 0xa, 0x20, 0xa0, 0x8, r5, r6}, {0x2, 0x43, 0x8, 0xb6, 0x7, 0x2800000, 0x81, 0xae72}, {0x4, 0xfffffffffffffffc, 0x100000001, 0x9}, 0x1, 0x6e6bb8, 0x0, 0x1, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x3c}, 0xa, @in6=@empty, 0x34ff, 0x1, 0xc7986191a16ae5f3, 0x4, 0x0, 0x7ff}}, 0xe4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 2.518832653s ago: executing program 2 (id=483): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e20, @local}}, 0x0, 0x0, 0x22, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c01006f9ef2ef8b"}, 0xd8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="1400040076657468305f6d61637674617000000008000500040000001c00e7005f6734b2a68afb0c6ea9e9ec2d10cc638b0d42f682e63d5d"], 0x54}, 0x1, 0x0, 0x0, 0x20008080}, 0x24044884) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000129bd7000fcdbdf251800000008000300", @ANYRES32=0x0, @ANYBLOB="0a00060008021100000100000a000600ffffffffffff00000a00060008021100000000000a00060008021100000100000a000600080211000001000098559309f338620f2cffbf528e695427072b7efd60590185a677be142913d4f81e692d757f5d25a118fc46a325521cbee4b64659f4a0"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) r5 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close(r5) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000240)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@local, @in=@dev={0xac, 0x14, 0x14, 0x2b}, 0x4e22, 0xb26a, 0x4e22, 0x7, 0xa, 0x20, 0xa0, 0x8, r6, r7}, {0x2, 0x43, 0x8, 0xb6, 0x7, 0x2800000, 0x81, 0xae72}, {0x4, 0xfffffffffffffffc, 0x100000001, 0x9}, 0x1, 0x6e6bb8, 0x0, 0x1, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x3c}, 0xa, @in6=@empty, 0x34ff, 0x1, 0xc7986191a16ae5f3, 0x4, 0x0, 0x7ff}}, 0xe4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 2.518151203s ago: executing program 4 (id=484): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x12) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) (fail_nth: 3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lchown(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000080)=0x2, 0x4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r1 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SYNC(r1, 0xffffffff80000101, 0x0, 0x0) 2.44959633s ago: executing program 4 (id=485): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e20, @local}}, 0x0, 0x0, 0x22, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c01006f9ef2ef8b"}, 0xd8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="1400040076657468305f6d61637674617000000008000500040000001c00e7005f6734b2a68afb0c6ea9e9ec2d10cc638b0d42f682e63d5d"], 0x54}, 0x1, 0x0, 0x0, 0x20008080}, 0x24044884) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000129bd7000fcdbdf251800000008000300", @ANYRES32=0x0, @ANYBLOB="0a00060008021100000100000a000600ffffffffffff00000a00060008021100000000000a00060008021100000100000a000600080211000001000098559309f338620f2cffbf528e695427072b7efd60590185a677be142913d4f81e692d757f5d25a118fc46a325521cbee4b64659f4a0"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) r4 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close(r4) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000240)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@local, @in=@dev={0xac, 0x14, 0x14, 0x2b}, 0x4e22, 0xb26a, 0x4e22, 0x7, 0xa, 0x20, 0xa0, 0x8, r5, r6}, {0x2, 0x43, 0x8, 0xb6, 0x7, 0x2800000, 0x81, 0xae72}, {0x4, 0xfffffffffffffffc, 0x100000001, 0x9}, 0x1, 0x6e6bb8, 0x0, 0x1, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x3c}, 0xa, @in6=@empty, 0x34ff, 0x1, 0xc7986191a16ae5f3, 0x4, 0x0, 0x7ff}}, 0xe4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 2.27799544s ago: executing program 0 (id=486): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x40, 0x8000, 0x7, 0x200, {{0x11, 0x4, 0x1, 0xc, 0x44, 0x64, 0x0, 0x9, 0x2f, 0x0, @multicast1, @private=0xa010102, {[@timestamp={0x44, 0x18, 0xef, 0x0, 0x7, [0xd, 0x6, 0xffffffff, 0x3, 0x6]}, @timestamp_prespec={0x44, 0xc, 0x63, 0x3, 0x5, [{@rand_addr=0x64010101, 0xaf16}]}, @end, @timestamp_addr={0x44, 0x4, 0x8b, 0x1, 0x3}, @ra={0x94, 0x4}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x70bd27, 0x20000, {0x0, 0x0, 0x0, r1, 0x0, 0x22800}, [@IFLA_CARRIER={0x5, 0x21, 0x4e}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_TXQLEN={0x8, 0xd, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20004884) 2.27372977s ago: executing program 0 (id=487): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000000800000e904000000000000"], 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = socket$inet6(0x10, 0x2, 0x0) write(r2, &(0x7f00000007c0)="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", 0xfc) r3 = accept4(r1, 0x0, 0x0, 0x80800) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r3) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6a) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='./file0\x00') utimes(&(0x7f00000053c0)='./file0\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOGETCMAP(r5, 0x4604, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = io_uring_setup(0x1dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x0, 0x140}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r7, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r7, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], &(0x7f0000000180)=[0xffffffff], 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x188, 0x0, &(0x7f0000000180)="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", 0x0, 0xa5e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x40200005}, 0x50) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) writev(r5, &(0x7f0000000900)=[{&(0x7f00000005c0)="e05449897935ad4a6ddc4427e555e35de527f3cb1290848d4beeed8741a4f585b27ae7d2643738cf72b3d1655b8cacac690d28e10cc6dd9e254eef9fd6279ced803544716b1a530088807415097e74c8fb79caadfc453c7528e349c338ae01f5362dd7210614dd628b6495bf9f90e9f7e876bd0903d54748fcefc24a92fb7932ddfa758bf5bda01b8bac9149fa9f04b1d972a32ad88e417963e0ce800f2e2393b2dddc9dc765c35ae1daa98079218812d2f8b47cd93029279b526303ce15390fb53e70487284e8846ddc33ca78141ced5d9674a02a187ab4bf1a0fc24deb69697ac8e37169d5", 0xe6}, {&(0x7f00000006c0)="3339275b8e49eeece8dcc9fbe87a30b5fd60a7bf2fc50e8258a1fd8a53d034b5f4be19aeeedc25ad2e55e4716558265003dfad857d9a64ea21a3d931a9f8cef2f1803fdff5e8e9287e37991a850145cc1a0428ac26169429082b01ca01f58f12e38141f9adca89ee80555c022f6c9f048e4d978a53eeff20e0fe0e2d3fd136ba6c79ef3e80c7bab2da194943f48577826e530cf02308457d9873b5c5fd1b89d656d2f8c19b49a276f595dc9bd8dfe5b143ffdba6f2f047", 0xb7}, {&(0x7f0000000780)="9c51ccd48e4acde0dcdca74fc35e7f2c5c19f7f98370857b24bae53193b9947384279d5a707c983b1148104611744ac566a75a48d5ee57ebf6d95a6ee43d7ba7636f58af28a593e7fb20a1785a9a93c874b74c973abae371c97d44ee3489ef0ff50ca1533d42645eebdb24aa4fc979d29c9b7276c5007d5ee07e7ad11b9bfca0ec82da169c6700da24fdf94fa6edf27256695a", 0x93}, {&(0x7f0000000840)="8722f56530bb076e7f17765b3a375967ea55cca7b0855bf2000cb1226f220c053e24cbc50593aade3809ce91b07ad97b49b532ed6db1d42713ac119fb2cc1c25a7f3bb9334057a359aac7e807cc3f72a53d4af989ccf7152a6797f7ba39c40d7c6f5a81f5e89c9d8bb6701f6efd96765255809591abaebc1a20890e18e41fd719491188ade9c85f035a13370f75a84e806441ab4a3dc1a0a769e765a6fe656603fe2cd0cc2", 0xa5}], 0x4) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x5) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r8, 0x0) 2.11035335s ago: executing program 1 (id=488): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x801) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000100)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYRES16=r3], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x1c, r8, 0x9c3fa077fa966179, 0x412, 0x0, {{0x7e}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000808}, 0x4040000) 2.045751082s ago: executing program 0 (id=489): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) socket$kcm(0x2, 0x5, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x4, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x184}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xb}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x4, 0x1c}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) 1.639719317s ago: executing program 2 (id=490): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x48843e0c, @loopback, 0x12df}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/85) futex(&(0x7f000000cffc)=0x1, 0x1, 0x0, 0x0, &(0x7f0000048000), 0x0) socket$inet(0x2, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0x1e5}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r1, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 1.639320749s ago: executing program 2 (id=491): socket$inet_mptcp(0x2, 0x1, 0x106) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x101301) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040844) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r4, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25e258a25f9dae13", 0xd}], 0x1}}], 0x1, 0x20008000) recvmsg(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1}, 0x123) shutdown(r4, 0x1) getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000100)=0x3f7, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x40000, &(0x7f0000000240)={0x11, 0xf7, r6, 0x1, 0x20, 0x6, @remote}, 0x14) recvfrom$packet(r5, 0x0, 0x0, 0x2000, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x13c, 0x10, 0x413, 0x70bd26, 0x40, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x7, 0x4e1f, 0x0, 0xa, 0x20, 0x20, 0x67}, {@in=@dev={0xac, 0x14, 0x14, 0x22}, 0x4d4, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, {0x800, 0x17d, 0x0, 0x40000000000004, 0xffffffffffffffff, 0x6, 0x7f, 0x2}, {0x0, 0x21fd, 0x4, 0x4}, {0x4000f6, 0x4, 0x8}, 0x0, 0x34ff, 0x2, 0x1, 0xbe, 0x33}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000804) creat(0x0, 0x0) 1.369687784s ago: executing program 4 (id=492): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x400800, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb635773f07ebbee9, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffff9, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x1000, 0x9, 0x0, 0x400, 0x80, 0x4, 0x0, 0x8, 0x4], 0xdddd1000, 0x80}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 762.908581ms ago: executing program 2 (id=493): socket$key(0xf, 0x3, 0x2) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2201}, 0x18, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x242, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) landlock_restrict_self(r0, 0xe) capset(&(0x7f0000000380)={0x20080522}, &(0x7f00000003c0)) open(0x0, 0xfc2, 0x1df2a23c5997fa5f) 709.66293ms ago: executing program 1 (id=494): timer_settime(0x0, 0x0, 0x0, 0x0) memfd_create(0x0, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {0x7}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0xd5a0}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2880, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x20044080}, 0x48000) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x100) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x1c, r9, 0x205, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0xfffffffffffffdff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 577.025123ms ago: executing program 4 (id=495): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r1, 0x84, 0x84, &(0x7f0000000080)=""/4092, &(0x7f0000001080)=0xffc) syz_init_net_socket$netrom(0x6, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x7fff, 0x9, 0xfffff801, 0x10, 0xd, "07056b66d288c6a8271b542f1a8ad7f5a8b371"}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = memfd_create(&(0x7f00000025c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1cs1F59\xcdR\xc1\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9b\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\xe7\xd6\xa3', 0x6) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="041817aab62fb001000000000000000900"/26], 0x1a) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000200)={@empty, @multicast1, 0x0, "606b177019716ea6ff1f2c7ed79c77e2e0f19a230000002007007c3d935f00", 0x3e1f}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000380)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) 309.694164ms ago: executing program 1 (id=496): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x9, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000c, 0x204031, 0xffffffffffffffff, 0xffffd000) chmod(0x0, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000400), 0x0, 0x40010023, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x40) mkdir(&(0x7f00000001c0)='./file1\x00', 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="401000008909040014001280090001007866726d0000000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x80) creat(0x0, 0x4) 228.977438ms ago: executing program 0 (id=497): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e20, @local}}, 0x0, 0x0, 0x22, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c01006f9ef2ef8b"}, 0xd8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="1400040076657468305f6d61637674617000000008000500040000001c00e7005f6734b2a68afb0c6ea9e9ec2d10cc638b0d42f682e63d5d"], 0x54}, 0x1, 0x0, 0x0, 0x20008080}, 0x24044884) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000129bd7000fcdbdf251800000008000300", @ANYRES32=0x0, @ANYBLOB="0a00060008021100000100000a000600ffffffffffff00000a00060008021100000000000a00060008021100000100000a000600080211000001000098559309f338620f2cffbf528e695427072b7efd60590185a677be142913d4f81e692d757f5d25a118fc46a325521cbee4b64659f4a0"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) r4 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000), 0x4) (fail_nth: 3) close(r4) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000240)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@local, @in=@dev={0xac, 0x14, 0x14, 0x2b}, 0x4e22, 0xb26a, 0x4e22, 0x7, 0xa, 0x20, 0xa0, 0x8, r5, r6}, {0x2, 0x43, 0x8, 0xb6, 0x7, 0x2800000, 0x81, 0xae72}, {0x4, 0xfffffffffffffffc, 0x100000001, 0x9}, 0x1, 0x6e6bb8, 0x0, 0x1, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x3c}, 0xa, @in6=@empty, 0x34ff, 0x1, 0xc7986191a16ae5f3, 0x4, 0x0, 0x7ff}}, 0xe4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 0s ago: executing program 0 (id=498): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r1, 0x84, 0x84, &(0x7f0000000080)=""/4092, &(0x7f0000001080)=0xffc) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$netrom(0x6, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x7fff, 0x9, 0xfffff801, 0x10, 0xd, "07056b66d288c6a8271b542f1a8ad7f5a8b371"}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="041817aab62fb001000000000000000900"/26], 0x1a) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000380)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) kernel console output (not intermixed with test programs): [ 86.299504][ T39] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:56089' (ED25519) to the list of known hosts. [ 89.867865][ T5927] cgroup: Unknown subsys name 'net' [ 90.053872][ T5927] cgroup: Unknown subsys name 'cpuset' [ 90.060822][ T5927] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.344605][ T5927] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.717261][ T5939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.723294][ T5939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.740265][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.743467][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.747324][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.752272][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.753533][ T5948] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.755383][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.758306][ T5950] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.760515][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.761746][ T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.762191][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.763914][ T5950] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.766126][ T5951] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.777682][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.778529][ T5951] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.780544][ T5948] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.783921][ T5951] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.786004][ T5950] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.788218][ T5951] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.160115][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 96.186364][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 96.191808][ T5936] chnl_net:caif_netlink_parms(): no params data found [ 96.298658][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 96.397979][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.400881][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.403349][ T5941] bridge_slave_0: entered allmulticast mode [ 96.406428][ T5941] bridge_slave_0: entered promiscuous mode [ 96.410855][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.413168][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.415463][ T5936] bridge_slave_0: entered allmulticast mode [ 96.419068][ T5936] bridge_slave_0: entered promiscuous mode [ 96.447596][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.451079][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.454088][ T5941] bridge_slave_1: entered allmulticast mode [ 96.457329][ T5941] bridge_slave_1: entered promiscuous mode [ 96.461303][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.464410][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.467341][ T5936] bridge_slave_1: entered allmulticast mode [ 96.470597][ T5936] bridge_slave_1: entered promiscuous mode [ 96.473791][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.476658][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.480149][ T5942] bridge_slave_0: entered allmulticast mode [ 96.483917][ T5942] bridge_slave_0: entered promiscuous mode [ 96.488419][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.491382][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.494283][ T5942] bridge_slave_1: entered allmulticast mode [ 96.498069][ T5942] bridge_slave_1: entered promiscuous mode [ 96.569809][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.573407][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.576763][ T5940] bridge_slave_0: entered allmulticast mode [ 96.580792][ T5940] bridge_slave_0: entered promiscuous mode [ 96.585596][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.588813][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.592055][ T5940] bridge_slave_1: entered allmulticast mode [ 96.595946][ T5940] bridge_slave_1: entered promiscuous mode [ 96.603552][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.618352][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.634480][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.640940][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.649008][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.683989][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.701418][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.738394][ T5936] team0: Port device team_slave_0 added [ 96.742575][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.747910][ T5942] team0: Port device team_slave_0 added [ 96.751683][ T5941] team0: Port device team_slave_0 added [ 96.756267][ T5936] team0: Port device team_slave_1 added [ 96.771729][ T5942] team0: Port device team_slave_1 added [ 96.775918][ T5941] team0: Port device team_slave_1 added [ 96.802427][ T5940] team0: Port device team_slave_0 added [ 96.824918][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.827388][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.836063][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.842389][ T5940] team0: Port device team_slave_1 added [ 96.852192][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.855559][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.868028][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.872107][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.874366][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.884871][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.899337][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.901649][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.910217][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.914537][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.917569][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.929207][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.947554][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.951049][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.962744][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.967084][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.970462][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.981029][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.999522][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.002110][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.013309][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.049257][ T5936] hsr_slave_0: entered promiscuous mode [ 97.051986][ T5936] hsr_slave_1: entered promiscuous mode [ 97.100412][ T5942] hsr_slave_0: entered promiscuous mode [ 97.103181][ T5942] hsr_slave_1: entered promiscuous mode [ 97.106849][ T5942] debugfs: 'hsr0' already exists in 'hsr' [ 97.109686][ T5942] Cannot create hsr debugfs directory [ 97.118357][ T5941] hsr_slave_0: entered promiscuous mode [ 97.121822][ T5941] hsr_slave_1: entered promiscuous mode [ 97.124320][ T5941] debugfs: 'hsr0' already exists in 'hsr' [ 97.126177][ T5941] Cannot create hsr debugfs directory [ 97.188644][ T5940] hsr_slave_0: entered promiscuous mode [ 97.191128][ T5940] hsr_slave_1: entered promiscuous mode [ 97.193461][ T5940] debugfs: 'hsr0' already exists in 'hsr' [ 97.195834][ T5940] Cannot create hsr debugfs directory [ 97.451449][ T5942] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.462390][ T5942] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.471759][ T5942] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.484050][ T5942] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.522293][ T5941] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.529209][ T5941] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.538744][ T5941] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.545418][ T5941] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.609402][ T5936] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.622461][ T5936] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.629119][ T5936] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.636501][ T5936] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.724659][ T5940] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.731081][ T5940] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.740653][ T5940] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.747224][ T5940] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.778729][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.799070][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.818650][ T5944] Bluetooth: hci1: command tx timeout [ 97.818651][ T5951] Bluetooth: hci2: command tx timeout [ 97.819128][ T5951] Bluetooth: hci3: command tx timeout [ 97.821338][ T5946] Bluetooth: hci0: command tx timeout [ 97.837015][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.861979][ T118] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.865343][ T118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.880719][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.890608][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.893020][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.920103][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.929561][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.932025][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.940870][ T186] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.943722][ T186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.974071][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.986139][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.000413][ T186] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.002968][ T186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.023116][ T91] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.026715][ T91] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.054360][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.068800][ T91] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.071733][ T91] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.087362][ T118] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.089991][ T118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.231802][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.302223][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.312634][ T5941] veth0_vlan: entered promiscuous mode [ 98.320382][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.351434][ T5941] veth1_vlan: entered promiscuous mode [ 98.365793][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.383144][ T5942] veth0_vlan: entered promiscuous mode [ 98.397336][ T5942] veth1_vlan: entered promiscuous mode [ 98.418579][ T5941] veth0_macvtap: entered promiscuous mode [ 98.429121][ T5936] veth0_vlan: entered promiscuous mode [ 98.438655][ T5941] veth1_macvtap: entered promiscuous mode [ 98.443727][ T5936] veth1_vlan: entered promiscuous mode [ 98.459758][ T5940] veth0_vlan: entered promiscuous mode [ 98.473254][ T5940] veth1_vlan: entered promiscuous mode [ 98.480015][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.484634][ T5942] veth0_macvtap: entered promiscuous mode [ 98.493314][ T5942] veth1_macvtap: entered promiscuous mode [ 98.503108][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.522164][ T91] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.532547][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.537584][ T91] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.541278][ T91] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.547424][ T5936] veth0_macvtap: entered promiscuous mode [ 98.554854][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.558459][ T91] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.564070][ T774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.567319][ T774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.572960][ T5936] veth1_macvtap: entered promiscuous mode [ 98.592569][ T5940] veth0_macvtap: entered promiscuous mode [ 98.597541][ T5940] veth1_macvtap: entered promiscuous mode [ 98.612403][ T774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.615418][ T774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.645630][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.666644][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.673739][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.682615][ T774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.691153][ T774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.697002][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.721397][ T186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.724494][ T186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.736755][ T774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.739049][ T186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.740441][ T774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.761453][ T186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.775184][ T186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.781280][ T186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.792536][ T186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.795831][ T186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.823155][ T118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.826394][ T118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.849773][ T774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.853389][ T774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.872555][ T186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.876355][ T186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.911435][ T5942] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.922214][ T186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.924860][ T186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.945584][ T118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.958718][ T118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.026138][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.040305][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.897742][ T5939] Bluetooth: hci1: command tx timeout [ 99.917788][ T5951] Bluetooth: hci0: command tx timeout [ 99.917956][ T5946] Bluetooth: hci3: command tx timeout [ 99.922007][ T5944] Bluetooth: hci2: command tx timeout [ 100.843846][ T6056] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.978067][ T5944] Bluetooth: hci2: command tx timeout [ 101.980149][ T5944] Bluetooth: hci1: command tx timeout [ 101.982112][ T5944] Bluetooth: hci3: command tx timeout [ 101.984335][ T5939] Bluetooth: hci0: command tx timeout [ 102.599102][ T6070] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.012942][ T6075] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 103.015109][ T6075] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 103.028578][ T6075] vhci_hcd vhci_hcd.0: Device attached [ 103.033005][ T6075] random: crng reseeded on system resumption [ 103.038838][ T6079] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13'. [ 103.042140][ T6079] Zero length message leads to an empty skb [ 103.114801][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11'. [ 103.313111][ T6086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'. [ 103.317761][ T10] usb 40-1: SetAddress Request (2) to port 0 [ 103.319890][ T10] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 103.410979][ T6076] vhci_hcd: connection reset by peer [ 103.414771][ T46] vhci_hcd vhci_hcd.1: stop threads [ 103.419578][ T46] vhci_hcd vhci_hcd.1: release socket [ 103.422443][ T46] vhci_hcd vhci_hcd.1: disconnect device [ 104.069578][ T5939] Bluetooth: hci0: command tx timeout [ 104.070449][ T5946] Bluetooth: hci3: command tx timeout [ 104.072754][ T5939] Bluetooth: hci1: command tx timeout [ 104.072792][ T5939] Bluetooth: hci2: command tx timeout [ 104.866671][ T774] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.953573][ T774] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.087710][ T774] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.196131][ T774] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.272481][ T5944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 105.280725][ T5944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 105.294567][ T5944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 105.311668][ T5944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 105.316298][ T5944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 105.419119][ T6119] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 105.430401][ T6119] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 106.412281][ T774] bridge_slave_1: left allmulticast mode [ 106.416500][ T774] bridge_slave_1: left promiscuous mode [ 106.427753][ T774] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.455718][ T6127] netlink: 16 bytes leftover after parsing attributes in process `syz.2.26'. [ 106.460600][ T6127] netlink: 16 bytes leftover after parsing attributes in process `syz.2.26'. [ 106.495444][ T774] bridge_slave_0: left allmulticast mode [ 106.507686][ T774] bridge_slave_0: left promiscuous mode [ 106.510242][ T774] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.751646][ T774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.761472][ T774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.765395][ T774] bond0 (unregistering): Released all slaves [ 106.963412][ T6135] tmpfs: Unknown parameter 'ipol\bŠ[ü¯Þ‚ø~&Üξ¼úôlatÿmû6' [ 107.124586][ T6134] netlink: 'syz.2.28': attribute type 1 has an invalid length. [ 107.233962][ T6112] chnl_net:caif_netlink_parms(): no params data found [ 107.396930][ T6112] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.417831][ T5944] Bluetooth: hci2: command tx timeout [ 107.462348][ T6112] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.509811][ T6112] bridge_slave_0: entered allmulticast mode [ 107.522962][ T6112] bridge_slave_0: entered promiscuous mode [ 107.550044][ T774] hsr_slave_0: left promiscuous mode [ 107.553364][ T774] hsr_slave_1: left promiscuous mode [ 107.555920][ T774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.558786][ T774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.563086][ T774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.566404][ T774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.575113][ T774] veth1_macvtap: left promiscuous mode [ 107.577249][ T774] veth0_macvtap: left promiscuous mode [ 107.579438][ T774] veth1_vlan: left promiscuous mode [ 107.581359][ T774] veth0_vlan: left promiscuous mode [ 107.889969][ T774] team0 (unregistering): Port device team_slave_1 removed [ 107.908522][ T774] team0 (unregistering): Port device team_slave_0 removed [ 108.256349][ T6112] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.258728][ T6112] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.261066][ T6112] bridge_slave_1: entered allmulticast mode [ 108.263681][ T6112] bridge_slave_1: entered promiscuous mode [ 108.300087][ T6112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.304555][ T6112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.339667][ T6112] team0: Port device team_slave_0 added [ 108.343017][ T6112] team0: Port device team_slave_1 added [ 108.358918][ T6112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.361175][ T6112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.369397][ T6112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.373579][ T6112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.375742][ T6112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.383962][ T10] usb 40-1: device descriptor read/8, error -110 [ 108.385999][ T6112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.410454][ T6163] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 108.413959][ T40] audit: type=1800 audit(1773992254.650:2): pid=6163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.30" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 108.420793][ T6163] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 108.423811][ T6163] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 108.489874][ T6112] hsr_slave_0: entered promiscuous mode [ 108.492231][ T6112] hsr_slave_1: entered promiscuous mode [ 108.494328][ T6112] debugfs: 'hsr0' already exists in 'hsr' [ 108.496170][ T6112] Cannot create hsr debugfs directory [ 108.783499][ T6112] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 108.806188][ T6112] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 108.810083][ T10] usb usb40-port1: attempt power cycle [ 108.822600][ T6112] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 108.830523][ T6112] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 109.014208][ T6112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.046540][ T6112] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.061377][ T1243] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.064277][ T1243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.072617][ T91] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.075068][ T91] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.128381][ T6194] faux_driver vkms: [drm] Unknown color mode 181; guessing buffer size. [ 109.143987][ T6112] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 109.148340][ T6112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.292186][ T6112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.388538][ T10] usb usb40-port1: unable to enumerate USB device [ 109.405526][ T6216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34'. [ 109.413811][ T6216] openvswitch: netlink: Flow actions attr not present in new flow. [ 109.444784][ T6112] veth0_vlan: entered promiscuous mode [ 109.455766][ T6112] veth1_vlan: entered promiscuous mode [ 109.473926][ T6112] veth0_macvtap: entered promiscuous mode [ 109.479620][ T6112] veth1_macvtap: entered promiscuous mode [ 109.497811][ T5944] Bluetooth: hci2: command tx timeout [ 109.501437][ T6112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.513301][ T6112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.532669][ T91] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.535899][ T91] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.546607][ T91] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.551868][ T91] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.601393][ T186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.604035][ T186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.624610][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.627203][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.676299][ T6219] netlink: 'syz.2.38': attribute type 10 has an invalid length. [ 111.580729][ T5944] Bluetooth: hci2: command tx timeout [ 111.768539][ T6291] netlink: 'syz.4.45': attribute type 3 has an invalid length. [ 112.959488][ T6310] netlink: 'syz.2.50': attribute type 25 has an invalid length. [ 113.658675][ T5944] Bluetooth: hci2: command tx timeout [ 114.635988][ T6325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.52'. [ 114.657553][ T6325] openvswitch: netlink: Flow actions attr not present in new flow. [ 115.397707][ T34] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 115.559777][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.563267][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.566392][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 115.575011][ T34] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 115.578292][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.583505][ T34] usb 7-1: config 0 descriptor?? [ 116.000700][ T34] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 116.268607][ T6337] capability: warning: `syz.2.58' uses deprecated v2 capabilities in a way that may be insecure [ 116.427249][ T6023] usb 7-1: USB disconnect, device number 2 [ 118.159034][ T6378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.69'. [ 118.282734][ T6393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.70'. [ 118.527593][ T6405] netlink: 'syz.4.73': attribute type 32 has an invalid length. [ 118.528511][ T6406] xt_CT: You must specify a L4 protocol and not use inversions on it [ 118.538244][ T6405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.73'. [ 118.548363][ T6405] netlink: 'syz.4.73': attribute type 32 has an invalid length. [ 118.677713][ T39] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 118.849522][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.853271][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.856935][ T39] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 118.866453][ T6426] openvswitch: netlink: IP tunnel dst address not specified [ 118.872518][ T39] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.880271][ T39] usb 7-1: config 0 descriptor?? [ 118.909682][ T6426] FAULT_INJECTION: forcing a failure. [ 118.909682][ T6426] name failslab, interval 1, probability 0, space 0, times 1 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xb2000) [ 118.914334][ T6426] CPU: 1 UID: 0 PID: 6426 Comm: syz.0.74 Not tainted syzkaller #0 PREEMPT(full) [ 118.914350][ T6426] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.914356][ T6426] Call Trace: [ 118.914376][ T6426] [ 118.914381][ T6426] dump_stack_lvl+0x100/0x190 [ 118.914401][ T6426] should_fail_ex.cold+0x5/0xa [ 118.914414][ T6426] should_failslab+0xc2/0x120 [ 118.914426][ T6426] __kmalloc_cache_noprof+0x7a/0x6f0 [ 118.914441][ T6426] ? ax25_listen_register+0x79/0x200 [ 118.914455][ T6426] ? ax25_listen_mine+0xb5/0x110 [ 118.914468][ T6426] ? __local_bh_enable_ip+0xff/0x120 [ 118.914482][ T6426] ax25_listen_register+0x79/0x200 [ 118.914496][ T6426] nr_set_mac_address+0x138/0x1c0 [ 118.914508][ T6426] netif_set_mac_address+0x304/0x4a0 [ 118.914526][ T6426] ? __pfx_netif_set_mac_address+0x10/0x10 [ 118.914543][ T6426] ? down_write+0x146/0x1f0 [ 118.914560][ T6426] ? __pfx_down_write+0x10/0x10 [ 118.914580][ T6426] dev_set_mac_address_user+0xc6/0x270 [ 118.914592][ T6426] dev_ifsioc+0x1368/0x1e90 [ 118.914607][ T6426] ? sk_ioctl+0x173/0x360 [ 118.914619][ T6426] ? __pfx_dev_ifsioc+0x10/0x10 [ 118.914632][ T6426] ? __pfx___mutex_lock+0x10/0x10 [ 118.914653][ T6426] ? dev_load+0x8e/0x240 [ 118.914665][ T6426] ? dev_load+0x8e/0x240 [ 118.914681][ T6426] dev_ioctl+0x342/0x1070 [ 118.914696][ T6426] sock_do_ioctl+0x1a0/0x280 [ 118.914715][ T6426] ? __pfx_sock_do_ioctl+0x10/0x10 [ 118.914733][ T6426] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 118.914753][ T6426] ? do_vfs_ioctl+0x226/0x13e0 [ 118.914768][ T6426] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 118.914785][ T6426] compat_sock_ioctl+0x568/0x760 [ 118.914799][ T6426] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 118.914820][ T6426] ? __fget_files+0x21f/0x3d0 [ 118.914832][ T6426] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 118.914845][ T6426] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 118.914862][ T6426] __do_fast_syscall_32+0xe3/0x8c0 [ 118.914879][ T6426] do_fast_syscall_32+0x32/0x70 [ 118.914895][ T6426] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 118.914910][ T6426] RIP: 0023:0xf706ef6c [ 118.914919][ T6426] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 118.914928][ T6426] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 118.914939][ T6426] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000008924 [ 118.914945][ T6426] RDX: 0000000080001300 RSI: 0000000000000000 RDI: 0000000000000000 [ 118.914951][ T6426] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 118.914957][ T6426] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 118.914963][ T6426] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 118.914976][ T6426] [ 119.178815][ T1112] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 119.181214][ T1112] ata1: failed to read log page 10h (errno=-5) [ 119.183686][ T1112] ata1.00: NCQ disabled due to excessive errors [ 119.185882][ T1112] ata1.00: exception Emask 0x1 SAct 0x4000 SErr 0x0 action 0x0 [ 119.193769][ T1112] ata1.00: irq_stat 0x41000000 [ 119.195482][ T1112] ata1.00: failed command: READ FPDMA QUEUED [ 119.207735][ T1112] ata1.00: cmd 60/90:70:6e:1b:01/05:00:00:00:00/40 tag 14 ncq dma 729088 in [ 119.207735][ T1112] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 119.213998][ T1112] ata1.00: status: { DRDY } [ 119.215642][ T1112] ata1.00: error: { ABRT } [ 119.224740][ T1112] ata1.00: configured for UDMA/100 [ 119.226830][ T1112] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 119.230840][ T1112] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 119.233556][ T1112] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 119.236475][ T1112] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 01 1b 6e 00 05 90 00 [ 119.239973][ T1112] I/O error, dev sda, sector 72558 op 0x0:(READ) flags 0x80700 phys_seg 122 prio class 2 [ 119.244012][ T1112] ata1: EH complete [ 119.290725][ T39] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 119.293429][ T39] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 119.296201][ T39] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 119.302385][ T39] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 119.305173][ T39] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 119.327901][ T39] cm6533_jd 0003:0D8C:0022.0003: hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 119.417906][ T842] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 119.577809][ T842] usb 5-1: Using ep0 maxpacket: 16 [ 119.599156][ T842] usb 5-1: unable to get BOS descriptor or descriptor too short [ 119.604662][ T842] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 119.607383][ T842] usb 5-1: can't read configurations, error -71 [ 119.637810][ T34] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 119.809425][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.814741][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.821560][ T34] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 119.830703][ T34] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 119.835151][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.848122][ T34] usb 9-1: config 0 descriptor?? [ 120.017381][ T6459] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 0, id = 0 [ 120.285930][ T34] plantronics 0003:047F:FFFF.0004: hiddev1,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 120.729010][ T58] usb 7-1: reset high-speed USB device number 3 using dummy_hcd [ 121.504797][ T59] usb 9-1: USB disconnect, device number 2 [ 121.531054][ T6497] netlink: 480 bytes leftover after parsing attributes in process `syz.2.80'. [ 121.534408][ T6497] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.80'. [ 121.596510][ T6500] ======================================================= [ 121.596510][ T6500] WARNING: The mand mount option has been deprecated and [ 121.596510][ T6500] and is ignored by this kernel. Remove the mand [ 121.596510][ T6500] option from the mount to silence this warning. [ 121.596510][ T6500] ======================================================= [ 121.852528][ T6506] Bluetooth: MGMT ver 1.23 [ 122.093030][ T6516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.82'. [ 122.277713][ T40] audit: type=1326 audit(1773992268.510:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.1.86" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23f6c code=0x7ffc0000 [ 122.296215][ T40] audit: type=1326 audit(1773992268.510:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.1.86" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23f6c code=0x7ffc0000 [ 122.312603][ T6004] usb 7-1: USB disconnect, device number 3 [ 122.315087][ T40] audit: type=1326 audit(1773992268.530:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.1.86" exe="/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf7f23f6c code=0x7ffc0000 [ 122.337335][ T40] audit: type=1326 audit(1773992268.530:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.1.86" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23f6c code=0x7ffc0000 [ 122.349478][ T40] audit: type=1326 audit(1773992268.530:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.1.86" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f23f6c code=0x7ffc0000 [ 122.357671][ T40] audit: type=1326 audit(1773992268.530:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.1.86" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23f6c code=0x7ffc0000 [ 122.365293][ T40] audit: type=1326 audit(1773992268.530:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.1.86" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f23f6c code=0x7ffc0000 [ 122.373219][ T40] audit: type=1326 audit(1773992268.530:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.1.86" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23f6c code=0x7ffc0000 [ 122.382976][ T40] audit: type=1326 audit(1773992268.530:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.1.86" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f23f6c code=0x7ffc0000 [ 122.391984][ T40] audit: type=1326 audit(1773992268.530:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.1.86" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23f6c code=0x7ffc0000 [ 122.818345][ T6518] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.85'. [ 124.014088][ T6004] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 124.031894][ T6536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.170673][ T6004] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.179635][ T6004] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.184098][ T6004] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 124.190378][ T6004] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 124.195067][ T6004] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.203413][ T6004] usb 9-1: config 0 descriptor?? [ 124.885978][ T6004] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 125.836921][ T6580] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.99'. [ 125.841155][ T6580] bridge_slave_1: default FDB implementation only supports local addresses [ 125.863982][ T6579] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 125.867383][ T6579] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 125.872539][ T6579] vhci_hcd vhci_hcd.0: Device attached [ 125.876985][ T6579] random: crng reseeded on system resumption [ 126.157760][ T6499] usb 38-1: SetAddress Request (2) to port 0 [ 126.160125][ T6499] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 126.237707][ T39] usb 9-1: reset high-speed USB device number 3 using dummy_hcd [ 126.274164][ T6588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.100'. [ 126.500814][ T6581] vhci_hcd: connection reset by peer [ 126.502811][ T186] vhci_hcd vhci_hcd.0: stop threads [ 126.505122][ T186] vhci_hcd vhci_hcd.0: release socket [ 126.507705][ T186] vhci_hcd vhci_hcd.0: disconnect device [ 127.213450][ T842] usb 9-1: USB disconnect, device number 3 [ 127.589218][ T6125] libceph: connect (1)[c::]:6789 error -101 [ 127.592943][ T6125] libceph: mon0 (1)[c::]:6789 connect error [ 127.860319][ T6125] libceph: connect (1)[c::]:6789 error -101 [ 127.863351][ T6125] libceph: mon0 (1)[c::]:6789 connect error [ 128.195099][ T6635] tipc: Started in network mode [ 128.197015][ T6635] tipc: Node identity 4, cluster identity 4711 [ 128.199247][ T6635] tipc: Node number set to 4 [ 128.353951][ T6613] ceph: No mds server is up or the cluster is laggy [ 128.369735][ T6125] libceph: connect (1)[c::]:6789 error -101 [ 128.371938][ T6125] libceph: mon0 (1)[c::]:6789 connect error [ 128.660971][ T6648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.112'. [ 128.669392][ T6648] openvswitch: netlink: Flow actions attr not present in new flow. [ 129.895666][ T5944] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 130.087993][ T6125] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 130.546820][ T6125] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.566975][ T6125] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.590462][ T6125] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 130.594529][ T6125] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.614285][ T6125] usb 7-1: config 0 descriptor?? [ 131.028703][ T6125] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 131.031326][ T6125] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 131.033754][ T6125] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 131.036283][ T6125] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 131.038987][ T6125] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 131.046451][ T6125] cm6533_jd 0003:0D8C:0022.0006: hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 131.187083][ T6686] syz.1.121 (6686) used greatest stack depth: 19296 bytes left [ 131.264412][ T6499] usb 38-1: device descriptor read/8, error -110 [ 131.825645][ T6499] usb usb38-port1: attempt power cycle [ 131.875946][ T6698] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 131.878141][ T6698] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 131.883416][ T6698] vhci_hcd vhci_hcd.0: Device attached [ 131.889240][ T6698] random: crng reseeded on system resumption [ 132.100453][ T6701] vhci_hcd: connection closed [ 132.100686][ T774] vhci_hcd vhci_hcd.4: stop threads [ 132.105033][ T774] vhci_hcd vhci_hcd.4: release socket [ 132.107533][ T774] vhci_hcd vhci_hcd.4: disconnect device [ 132.389570][ T6499] usb usb38-port1: unable to enumerate USB device [ 132.497943][ T29] usb 7-1: reset high-speed USB device number 4 using dummy_hcd [ 133.860113][ T6722] trusted_key: encrypted_key: keyword 'upmate' not recognized [ 134.287542][ T6499] usb 7-1: USB disconnect, device number 4 [ 135.425557][ T6735] FAULT_INJECTION: forcing a failure. [ 135.425557][ T6735] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 135.431276][ T6735] CPU: 0 UID: 0 PID: 6735 Comm: syz.2.131 Not tainted syzkaller #0 PREEMPT(full) [ 135.431301][ T6735] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.431312][ T6735] Call Trace: [ 135.431318][ T6735] [ 135.431325][ T6735] dump_stack_lvl+0x100/0x190 [ 135.431364][ T6735] should_fail_ex.cold+0x5/0xa [ 135.431386][ T6735] _copy_from_iter+0x1f4/0x1690 [ 135.431481][ T6735] ? __asan_memset+0x23/0x50 [ 135.431510][ T6735] ? __pfx__copy_from_iter+0x10/0x10 [ 135.431531][ T6735] ? __pfx___alloc_skb+0x10/0x10 [ 135.431560][ T6735] netlink_sendmsg+0x808/0xda0 [ 135.431606][ T6735] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.431634][ T6735] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 135.431666][ T6735] ____sys_sendmsg+0x9e1/0xb70 [ 135.431685][ T6735] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.431713][ T6735] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.431743][ T6735] ___sys_sendmsg+0x190/0x1e0 [ 135.431763][ T6735] ? __pfx____sys_sendmsg+0x10/0x10 [ 135.431811][ T6735] __sys_sendmsg+0x170/0x220 [ 135.431836][ T6735] ? __pfx___sys_sendmsg+0x10/0x10 [ 135.431868][ T6735] ? __pfx_ksys_write+0x10/0x10 [ 135.431891][ T6735] __do_fast_syscall_32+0xe3/0x8c0 [ 135.431922][ T6735] do_fast_syscall_32+0x32/0x70 [ 135.431948][ T6735] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 135.431970][ T6735] RIP: 0023:0xf7fa8f6c [ 135.431985][ T6735] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 135.432002][ T6735] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 135.432020][ T6735] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 135.432031][ T6735] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 135.432041][ T6735] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 135.432050][ T6735] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 135.432061][ T6735] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 135.432082][ T6735] [ 136.179160][ T6747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.135'. [ 136.226489][ T6748] x_tables: duplicate underflow at hook 1 [ 136.767305][ T6756] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 136.769525][ T6756] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 136.772414][ T6756] vhci_hcd vhci_hcd.0: Device attached [ 136.788408][ T6753] FAULT_INJECTION: forcing a failure. [ 136.788408][ T6753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.792819][ T6753] CPU: 2 UID: 0 PID: 6753 Comm: syz.4.137 Not tainted syzkaller #0 PREEMPT(full) [ 136.792834][ T6753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 136.792840][ T6753] Call Trace: [ 136.792844][ T6753] [ 136.792849][ T6753] dump_stack_lvl+0x100/0x190 [ 136.792869][ T6753] should_fail_ex.cold+0x5/0xa [ 136.792881][ T6753] _copy_from_user+0x2e/0xd0 [ 136.792895][ T6753] copy_from_buffer+0x7f/0xc0 [ 136.792909][ T6753] copy_uabi_to_xstate+0xc0/0x650 [ 136.792925][ T6753] ? __pfx_copy_uabi_to_xstate+0x10/0x10 [ 136.792942][ T6753] ? __fpu_restore_sig+0xa65/0x1360 [ 136.792956][ T6753] ? x86_task_fpu+0x5f/0x90 [ 136.792967][ T6753] __fpu_restore_sig+0x10a3/0x1360 [ 136.792982][ T6753] ? __lock_acquire+0x4a5/0x2630 [ 136.792995][ T6753] ? __pfx___fpu_restore_sig+0x10/0x10 [ 136.793014][ T6753] ? __might_fault+0xc5/0x140 [ 136.793032][ T6753] fpu__restore_sig+0x151/0x190 [ 136.793046][ T6753] ia32_restore_sigcontext+0x44c/0x620 [ 136.793062][ T6753] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 136.793080][ T6753] ? rcu_is_watching+0x12/0xc0 [ 136.793096][ T6753] ? _raw_spin_unlock_irq+0x23/0x50 [ 136.793110][ T6753] ? lockdep_hardirqs_on+0x78/0x100 [ 136.793126][ T6753] __do_compat_sys_sigreturn+0x1b2/0x280 [ 136.793142][ T6753] ? __pfx___do_compat_sys_sigreturn+0x10/0x10 [ 136.793161][ T6753] do_int80_emulation+0x141/0x6b0 [ 136.793178][ T6753] asm_int80_emulation+0x1a/0x20 [ 136.793189][ T6753] RIP: 0023:0xf703ef6c [ 136.793198][ T6753] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 136.793208][ T6753] RSP: 002b:00000000f542d50c EFLAGS: 00000292 [ 136.793216][ T6753] RAX: 0000000000001e76 RBX: 0000000000000006 RCX: 0000000000001e76 [ 136.793223][ T6753] RDX: 000000000000f728 RSI: 0000000000000005 RDI: 0000000000000000 [ 136.793228][ T6753] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 136.793234][ T6753] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 136.793240][ T6753] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 136.793252][ T6753] [ 136.882656][ C2] hpet_rtc_timer_reinit: 66 callbacks suppressed [ 136.882665][ C2] hpet: Lost 4 RTC interrupts [ 136.906398][ T6759] random: crng reseeded on system resumption [ 137.087696][ T6757] vhci_hcd: connection closed [ 137.088069][ T186] vhci_hcd vhci_hcd.1: stop threads [ 137.093204][ T186] vhci_hcd vhci_hcd.1: release socket [ 137.096468][ T186] vhci_hcd vhci_hcd.1: disconnect device [ 137.323372][ T6763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.138'. [ 137.335473][ T6763] openvswitch: netlink: Flow actions attr not present in new flow. [ 137.502590][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.505882][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.175908][ T6796] openvswitch: netlink: IP tunnel dst address not specified [ 138.417778][ T59] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 138.577734][ T59] usb 7-1: Using ep0 maxpacket: 16 [ 138.981814][ T6805] netlink: 'syz.1.146': attribute type 11 has an invalid length. [ 138.985328][ T6805] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.146'. [ 139.219974][ T6812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.148'. [ 140.137721][ T5946] Bluetooth: hci2: command 0x0405 tx timeout [ 140.380092][ T6822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.150'. [ 140.396770][ T6822] openvswitch: netlink: Flow actions attr not present in new flow. [ 140.774480][ T6824] x_tables: duplicate underflow at hook 1 [ 141.077029][ T59] usb 7-1: unable to get BOS descriptor or descriptor too short [ 141.085310][ T59] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 141.094266][ T59] usb 7-1: can't read configurations, error -71 [ 142.257825][ T59] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 143.129741][ T59] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.134293][ T59] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.138596][ T59] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 143.141987][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.147006][ T59] usb 5-1: config 0 descriptor?? [ 143.340579][ T6838] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 143.342897][ T6838] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 143.345998][ T6838] vhci_hcd vhci_hcd.0: Device attached [ 143.580284][ T59] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 143.583456][ T59] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 143.585971][ T59] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 143.604341][ T59] cm6533_jd 0003:0D8C:0022.0007: hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 143.637785][ T34] usb 42-1: SetAddress Request (2) to port 0 [ 143.640508][ T34] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 145.554571][ T6839] vhci_hcd: connection reset by peer [ 145.566344][ T12] vhci_hcd vhci_hcd.2: stop threads [ 145.569293][ T12] vhci_hcd vhci_hcd.2: release socket [ 145.571276][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 145.685465][ T29] usb 5-1: USB disconnect, device number 4 [ 146.027691][ T59] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 146.199787][ T59] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.204989][ T59] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.209245][ T59] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 146.213942][ T59] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.222817][ T59] usb 9-1: config 0 descriptor?? [ 146.455297][ T6866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.160'. [ 146.466472][ T6866] openvswitch: netlink: Flow actions attr not present in new flow. [ 146.644725][ T59] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 146.647917][ T59] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 146.652153][ T59] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 146.662875][ T59] cm6533_jd 0003:0D8C:0022.0008: hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 148.697841][ T34] usb 42-1: device descriptor read/8, error -110 [ 149.088265][ T34] usb usb42-port1: attempt power cycle [ 149.249776][ T6880] x_tables: duplicate underflow at hook 1 [ 149.619318][ T6889] netlink: 24 bytes leftover after parsing attributes in process `syz.4.167'. [ 149.658418][ T34] usb usb42-port1: unable to enumerate USB device [ 149.981013][ T6198] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 149.990958][ T29] usb 9-1: USB disconnect, device number 4 [ 150.161850][ T6198] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.182836][ T6198] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.209119][ T6198] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 150.246248][ T6198] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.383486][ T6198] usb 6-1: config 0 descriptor?? [ 150.525118][ T6897] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 150.527480][ T6897] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 150.814417][ T6897] vhci_hcd vhci_hcd.0: Device attached [ 150.823727][ T6198] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 150.870939][ T6198] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 150.882525][ T6198] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 150.986534][ T6198] cm6533_jd 0003:0D8C:0022.0009: hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 151.128170][ T6125] usb 46-1: SetAddress Request (3) to port 0 [ 151.131004][ T6125] usb 46-1: new SuperSpeed USB device number 3 using vhci_hcd [ 151.479836][ T6898] vhci_hcd: connection reset by peer [ 151.482252][ T46] vhci_hcd vhci_hcd.4: stop threads [ 151.484106][ T46] vhci_hcd vhci_hcd.4: release socket [ 151.486369][ T46] vhci_hcd vhci_hcd.4: disconnect device [ 151.633489][ T6904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.170'. [ 152.247783][ T29] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 152.471918][ T6914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.172'. [ 153.358676][ T6499] usb 6-1: USB disconnect, device number 2 [ 154.132697][ T6926] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 154.135002][ T6926] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 154.139274][ T6926] vhci_hcd vhci_hcd.0: Device attached [ 154.144104][ T6926] random: crng reseeded on system resumption [ 154.410547][ T5922] usb 42-1: SetAddress Request (6) to port 0 [ 154.412984][ T5922] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 154.547928][ T6927] vhci_hcd: connection reset by peer [ 154.550212][ T13] vhci_hcd vhci_hcd.2: stop threads [ 154.553047][ T13] vhci_hcd vhci_hcd.2: release socket [ 154.555555][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 155.274458][ T6943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.180'. [ 156.218069][ T6125] usb 46-1: device descriptor read/8, error -110 [ 156.713579][ T6125] usb usb46-port1: attempt power cycle [ 157.298598][ T6125] usb usb46-port1: unable to enumerate USB device [ 157.648919][ T6962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.185'. [ 157.708808][ T6968] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 157.717006][ T6968] binder: Binderfs stats mode cannot be changed during a remount [ 157.912408][ T6971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.188'. [ 157.917238][ T6971] netlink: 24 bytes leftover after parsing attributes in process `syz.4.188'. [ 157.975811][ T6973] FAULT_INJECTION: forcing a failure. [ 157.975811][ T6973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.982512][ T6973] CPU: 1 UID: 0 PID: 6973 Comm: syz.0.189 Not tainted syzkaller #0 PREEMPT(full) [ 157.982529][ T6973] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 157.982536][ T6973] Call Trace: [ 157.982540][ T6973] [ 157.982545][ T6973] dump_stack_lvl+0x100/0x190 [ 157.982577][ T6973] should_fail_ex.cold+0x5/0xa [ 157.982590][ T6973] _copy_from_user+0x2e/0xd0 [ 157.982610][ T6973] get_compat_msghdr+0xb3/0x4b0 [ 157.982631][ T6973] ? __pfx_get_compat_msghdr+0x10/0x10 [ 157.982650][ T6973] ___sys_sendmsg+0x1b6/0x1e0 [ 157.982663][ T6973] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.982690][ T6973] __sys_sendmsg+0x170/0x220 [ 157.982706][ T6973] ? __pfx___sys_sendmsg+0x10/0x10 [ 157.982725][ T6973] ? __pfx_ksys_write+0x10/0x10 [ 157.982738][ T6973] __do_fast_syscall_32+0xe3/0x8c0 [ 157.982757][ T6973] do_fast_syscall_32+0x32/0x70 [ 157.982773][ T6973] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 157.982787][ T6973] RIP: 0023:0xf706ef6c [ 157.982796][ T6973] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 157.982806][ T6973] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 157.982817][ T6973] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800000c0 [ 157.982823][ T6973] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 157.982829][ T6973] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 157.982835][ T6973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.982841][ T6973] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 157.982853][ T6973] [ 158.215613][ T40] audit: type=1804 audit(1773992304.450:79): pid=6976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.190" name="/newroot/46/file1" dev="fuse" ino=1 res=1 errno=0 [ 158.602443][ T6994] netlink: 20 bytes leftover after parsing attributes in process `syz.0.197'. [ 158.665559][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.192'. [ 159.509387][ T5922] usb 42-1: device descriptor read/8, error -110 [ 159.948784][ T5922] usb usb42-port1: attempt power cycle [ 160.518619][ T5922] usb usb42-port1: unable to enumerate USB device [ 160.869048][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.206'. [ 160.877971][ T7033] openvswitch: netlink: Flow actions attr not present in new flow. [ 160.980200][ T7034] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 160.982820][ T7034] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 160.986676][ T7034] vhci_hcd vhci_hcd.0: Device attached [ 160.994007][ T7034] random: crng reseeded on system resumption [ 161.265408][ T34] usb 40-1: SetAddress Request (7) to port 0 [ 161.268448][ T34] usb 40-1: new SuperSpeed USB device number 7 using vhci_hcd [ 161.524510][ T7037] vhci_hcd: connection reset by peer [ 161.528152][ T6289] vhci_hcd vhci_hcd.1: stop threads [ 161.530767][ T6289] vhci_hcd vhci_hcd.1: release socket [ 161.534520][ T6289] vhci_hcd vhci_hcd.1: disconnect device [ 162.067791][ T59] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 162.227815][ T59] usb 5-1: Using ep0 maxpacket: 16 [ 162.232867][ T59] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.238366][ T59] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.242449][ T59] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 162.248121][ T59] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 162.252445][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.263247][ T59] usb 5-1: config 0 descriptor?? [ 162.980853][ T59] usbhid 5-1:0.0: can't add hid device: -71 [ 162.984034][ T59] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 163.017949][ T59] usb 5-1: USB disconnect, device number 5 [ 163.413239][ T7076] FAULT_INJECTION: forcing a failure. [ 163.413239][ T7076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.421468][ T7076] CPU: 2 UID: 0 PID: 7076 Comm: syz.4.221 Not tainted syzkaller #0 PREEMPT(full) [ 163.421483][ T7076] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 163.421489][ T7076] Call Trace: [ 163.421493][ T7076] [ 163.421497][ T7076] dump_stack_lvl+0x100/0x190 [ 163.421529][ T7076] should_fail_ex.cold+0x5/0xa [ 163.421556][ T7076] _copy_from_user+0x2e/0xd0 [ 163.421576][ T7076] get_compat_msghdr+0xb3/0x4b0 [ 163.421597][ T7076] ? __pfx_get_compat_msghdr+0x10/0x10 [ 163.421616][ T7076] ___sys_sendmsg+0x1b6/0x1e0 [ 163.421633][ T7076] ? __pfx____sys_sendmsg+0x10/0x10 [ 163.421678][ T7076] __sys_sendmsg+0x170/0x220 [ 163.421701][ T7076] ? __pfx___sys_sendmsg+0x10/0x10 [ 163.421732][ T7076] ? __pfx_ksys_write+0x10/0x10 [ 163.421754][ T7076] __do_fast_syscall_32+0xe3/0x8c0 [ 163.421782][ T7076] do_fast_syscall_32+0x32/0x70 [ 163.421806][ T7076] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 163.421828][ T7076] RIP: 0023:0xf703ef6c [ 163.421843][ T7076] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 163.421860][ T7076] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 163.421878][ T7076] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800000c0 [ 163.421888][ T7076] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 163.421898][ T7076] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 163.421908][ T7076] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 163.421919][ T7076] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 163.421942][ T7076] [ 163.502989][ C2] hpet: Lost 4 RTC interrupts [ 163.728557][ T7085] syz.0.224 uses obsolete (PF_INET,SOCK_PACKET) [ 164.314068][ T7097] tipc: Enabling of bearer rejected, failed to enable media [ 164.489585][ T40] audit: type=1326 audit(1773992310.720:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.0.228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 164.489852][ T7099] syz.0.228 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 164.522012][ T40] audit: type=1326 audit(1773992310.720:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.0.228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 164.542831][ T40] audit: type=1326 audit(1773992310.730:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.0.228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 164.577920][ T40] audit: type=1326 audit(1773992310.730:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.0.228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 164.606420][ T40] audit: type=1326 audit(1773992310.730:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.0.228" exe="/syz-executor" sig=0 arch=40000003 syscall=104 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 164.606467][ T40] audit: type=1326 audit(1773992310.740:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.0.228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 164.606507][ T40] audit: type=1326 audit(1773992310.780:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.0.228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 164.606543][ T40] audit: type=1326 audit(1773992310.780:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.0.228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 164.606578][ T40] audit: type=1326 audit(1773992310.780:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.0.228" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 165.172873][ T7109] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 165.228530][ T7105] capability: warning: `syz.4.225' uses 32-bit capabilities (legacy support in use) [ 165.432700][ T7109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.230'. [ 166.077044][ T7123] Illegal XDP return value 4294967274 on prog (id 22) dev N/A, expect packet loss! [ 166.467733][ T34] usb 40-1: device descriptor read/8, error -110 [ 166.754401][ T7133] FAULT_INJECTION: forcing a failure. [ 166.754401][ T7133] name failslab, interval 1, probability 0, space 0, times 0 [ 166.761423][ T7133] CPU: 0 UID: 0 PID: 7133 Comm: syz.0.236 Not tainted syzkaller #0 PREEMPT(full) [ 166.761439][ T7133] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 166.761446][ T7133] Call Trace: [ 166.761450][ T7133] [ 166.761455][ T7133] dump_stack_lvl+0x100/0x190 [ 166.761474][ T7133] should_fail_ex.cold+0x5/0xa [ 166.761487][ T7133] should_failslab+0xc2/0x120 [ 166.761498][ T7133] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 166.761515][ T7133] ? __alloc_skb+0x140/0x710 [ 166.761531][ T7133] __alloc_skb+0x140/0x710 [ 166.761544][ T7133] ? __alloc_skb+0x5b7/0x710 [ 166.761566][ T7133] ? __pfx___alloc_skb+0x10/0x10 [ 166.761580][ T7133] ? up_write+0x290/0x4f0 [ 166.761597][ T7133] alloc_skb_with_frags+0xe0/0x810 [ 166.761617][ T7133] sock_alloc_send_pskb+0x801/0x980 [ 166.761630][ T7133] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 166.761648][ T7133] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 166.761661][ T7133] ? find_held_lock+0x2b/0x80 [ 166.761671][ T7133] ? dev_get_by_index+0x180/0x380 [ 166.761685][ T7133] ? dev_get_by_index+0x180/0x380 [ 166.761702][ T7133] packet_sendmsg+0x20e0/0x53c0 [ 166.761720][ T7133] ? __pfx___might_resched+0x10/0x10 [ 166.761734][ T7133] ? pm_qos_update_flags+0x26/0x9e0 [ 166.761753][ T7133] ? aa_sk_perm+0x309/0xaa0 [ 166.761767][ T7133] ? __pfx_packet_sendmsg+0x10/0x10 [ 166.761777][ T7133] ? __pfx_aa_sk_perm+0x10/0x10 [ 166.761792][ T7133] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 166.761811][ T7133] ____sys_sendmsg+0x9e1/0xb70 [ 166.761821][ T7133] ? __pfx_packet_sendmsg+0x10/0x10 [ 166.761833][ T7133] ? __pfx_____sys_sendmsg+0x10/0x10 [ 166.761849][ T7133] ___sys_sendmsg+0x190/0x1e0 [ 166.761862][ T7133] ? __pfx____sys_sendmsg+0x10/0x10 [ 166.761888][ T7133] __sys_sendmsg+0x170/0x220 [ 166.761903][ T7133] ? __pfx___sys_sendmsg+0x10/0x10 [ 166.761922][ T7133] ? __pfx_ksys_write+0x10/0x10 [ 166.761935][ T7133] __do_fast_syscall_32+0xe3/0x8c0 [ 166.761952][ T7133] do_fast_syscall_32+0x32/0x70 [ 166.761968][ T7133] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 166.761982][ T7133] RIP: 0023:0xf706ef6c [ 166.761991][ T7133] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 166.762001][ T7133] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 166.762012][ T7133] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 166.762018][ T7133] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 166.762024][ T7133] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 166.762030][ T7133] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 166.762035][ T7133] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 166.762048][ T7133] [ 166.882990][ T34] usb usb40-port1: attempt power cycle [ 166.963049][ T7142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.239'. [ 167.458796][ T34] usb usb40-port1: unable to enumerate USB device [ 167.912226][ T7155] netlink: 36 bytes leftover after parsing attributes in process `syz.1.242'. [ 168.079960][ T7159] x_tables: duplicate underflow at hook 1 [ 168.929172][ T6499] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 169.088998][ T6499] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 169.092074][ T6499] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 169.095971][ T6499] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 169.100589][ T6499] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 169.104696][ T6499] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 169.110103][ T6499] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 169.112917][ T6499] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 169.116829][ T6499] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 169.121829][ T6499] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 169.125879][ T6499] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 169.131995][ T6499] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 169.135694][ T6499] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 169.140514][ T6499] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 169.144318][ T6499] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 169.149553][ T6499] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 169.155994][ T6499] usb 7-1: string descriptor 0 read error: -22 [ 169.158750][ T6499] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 169.161744][ T6499] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.172139][ T6499] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 169.480325][ T34] usb 7-1: USB disconnect, device number 7 [ 169.486518][ T7176] usb 7-1: Couldn't submit interrupt_out_urb -19 [ 170.072599][ T7184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.251'. [ 171.314931][ T7203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.258'. [ 171.774029][ T7211] x_tables: duplicate underflow at hook 1 [ 173.888515][ T7244] binder: 7242:7244 ioctl 400c620e 800002c0 returned -22 [ 174.023075][ T7248] loop5: detected capacity change from 0 to 7 [ 174.030081][ T6593] Dev loop5: unable to read RDB block 7 [ 174.032394][ T6593] loop5: AHDI p1 p2 p3 [ 174.034058][ T6593] loop5: partition table partially beyond EOD, truncated [ 174.039129][ T6593] loop5: p1 start 1601398130 is beyond EOD, truncated [ 174.041401][ T6593] loop5: p2 start 1702059890 is beyond EOD, truncated [ 174.045751][ T7248] Dev loop5: unable to read RDB block 7 [ 174.048826][ T7248] loop5: AHDI p1 p2 p3 [ 174.050862][ T7248] loop5: partition table partially beyond EOD, truncated [ 174.056683][ T7248] loop5: p1 start 1601398130 is beyond EOD, truncated [ 174.059381][ T7248] loop5: p2 start 1702059890 is beyond EOD, truncated [ 174.771909][ T7256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.272'. [ 175.459540][ T7273] x_tables: duplicate underflow at hook 1 [ 175.845396][ T7280] binder: BINDER_SET_CONTEXT_MGR already set [ 175.848355][ T7280] binder: 7279:7280 ioctl 4018620d 800002c0 returned -16 [ 177.559326][ T7297] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 177.563526][ T7298] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 1 [ 177.564265][ T7299] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 2 [ 177.571520][ T7300] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 3 [ 177.584094][ T7295] set match dimension is over the limit! [ 177.669557][ T7302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.283'. [ 177.681882][ T7302] openvswitch: netlink: Flow actions attr not present in new flow. [ 177.886388][ T7307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.286'. [ 177.993955][ T7310] netlink: 20 bytes leftover after parsing attributes in process `syz.0.288'. [ 178.852393][ T7317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.868180][ T7317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.991381][ T7322] x_tables: duplicate underflow at hook 1 [ 180.711246][ T7335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.293'. [ 181.418760][ T7347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.297'. [ 181.498355][ T7351] netlink: 20 bytes leftover after parsing attributes in process `syz.0.299'. [ 182.266714][ T7358] netlink: 'syz.2.300': attribute type 10 has an invalid length. [ 182.270510][ T7358] netlink: 228 bytes leftover after parsing attributes in process `syz.2.300'. [ 182.486701][ T7358] loop5: detected capacity change from 0 to 7 [ 182.504105][ T7358] Dev loop5: unable to read RDB block 7 [ 182.505937][ T7358] loop5: unable to read partition table [ 182.507981][ T7358] loop5: partition table beyond EOD, truncated [ 182.509999][ T7358] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 182.516877][ T7358] ipvlan2: entered promiscuous mode [ 182.524264][ T7358] bridge0: port 3(ipvlan2) entered blocking state [ 182.526363][ T7358] bridge0: port 3(ipvlan2) entered disabled state [ 182.534800][ T7358] ipvlan2: entered allmulticast mode [ 182.536575][ T7358] bridge0: entered allmulticast mode [ 182.542301][ T7358] ipvlan2: left allmulticast mode [ 182.544297][ T7358] bridge0: left allmulticast mode [ 182.813657][ T7357] ALSA: mixer_oss: invalid OSS volume 'u' [ 182.815717][ T7357] ALSA: mixer_oss: invalid OSS volume '' [ 182.817802][ T7357] ALSA: mixer_oss: invalid OSS volume 'ìXuG4¾1×P5ÀvëCÙbÀŒ¤lòo¾k' [ 183.684588][ T7382] x_tables: duplicate underflow at hook 1 [ 183.904336][ T7391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.306'. [ 184.181786][ T7389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.305'. [ 184.426815][ T7405] FAULT_INJECTION: forcing a failure. [ 184.426815][ T7405] name failslab, interval 1, probability 0, space 0, times 0 [ 184.431197][ T7405] CPU: 2 UID: 0 PID: 7405 Comm: syz.2.311 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.431214][ T7405] Tainted: [L]=SOFTLOCKUP [ 184.431218][ T7405] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 184.431224][ T7405] Call Trace: [ 184.431229][ T7405] [ 184.431234][ T7405] dump_stack_lvl+0x100/0x190 [ 184.431254][ T7405] should_fail_ex.cold+0x5/0xa [ 184.431267][ T7405] ? comedi_alloc_devpriv+0x22/0x60 [ 184.431282][ T7405] should_failslab+0xc2/0x120 [ 184.431293][ T7405] __kmalloc_noprof+0xe0/0x850 [ 184.431311][ T7405] comedi_alloc_devpriv+0x22/0x60 [ 184.431327][ T7405] das16m1_attach+0x2a/0xc10 [ 184.431340][ T7405] comedi_device_attach+0x3d2/0x660 [ 184.431359][ T7405] do_devconfig_ioctl+0x1b3/0x6d0 [ 184.431370][ T7405] ? comedi_unlocked_ioctl+0x180/0x3310 [ 184.431384][ T7405] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 184.431401][ T7405] ? tomoyo_path_number_perm+0x46d/0x580 [ 184.431414][ T7405] ? kasan_save_stack+0x3f/0x50 [ 184.431429][ T7405] ? kasan_save_stack+0x30/0x50 [ 184.431444][ T7405] ? kasan_save_track+0x14/0x30 [ 184.431459][ T7405] ? kasan_save_free_info+0x3b/0x70 [ 184.431476][ T7405] comedi_unlocked_ioctl+0x860/0x3310 [ 184.431493][ T7405] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 184.431514][ T7405] ? tomoyo_path_number_perm+0x46d/0x580 [ 184.431531][ T7405] ? kasan_quarantine_put+0x104/0x240 [ 184.431547][ T7405] ? lockdep_hardirqs_on+0x78/0x100 [ 184.431563][ T7405] ? find_held_lock+0x2b/0x80 [ 184.431572][ T7405] ? tomoyo_path_number_perm+0x28f/0x580 [ 184.431583][ T7405] ? tomoyo_path_number_perm+0x28f/0x580 [ 184.431597][ T7405] ? tomoyo_path_number_perm+0x188/0x580 [ 184.431612][ T7405] comedi_compat_ioctl+0x438/0xe20 [ 184.431626][ T7405] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 184.431639][ T7405] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 184.431659][ T7405] ? do_vfs_ioctl+0x226/0x13e0 [ 184.431674][ T7405] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 184.431693][ T7405] ? find_held_lock+0x2b/0x80 [ 184.431702][ T7405] ? hook_file_ioctl_common+0x146/0x410 [ 184.431717][ T7405] ? __fget_files+0x21f/0x3d0 [ 184.431730][ T7405] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 184.431743][ T7405] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 184.431760][ T7405] __do_fast_syscall_32+0xe3/0x8c0 [ 184.431777][ T7405] do_fast_syscall_32+0x32/0x70 [ 184.431793][ T7405] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 184.431807][ T7405] RIP: 0023:0xf7fa8f6c [ 184.431816][ T7405] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 184.431825][ T7405] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 184.431836][ T7405] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040946400 [ 184.431842][ T7405] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 184.431848][ T7405] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 184.431854][ T7405] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 184.431859][ T7405] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 184.431872][ T7405] [ 184.548471][ C2] hpet_rtc_timer_reinit: 77 callbacks suppressed [ 184.548484][ C2] hpet: Lost 6 RTC interrupts [ 184.607444][ T7407] FAULT_INJECTION: forcing a failure. [ 184.607444][ T7407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.615015][ T7407] CPU: 2 UID: 0 PID: 7407 Comm: syz.2.312 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.615035][ T7407] Tainted: [L]=SOFTLOCKUP [ 184.615039][ T7407] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 184.615046][ T7407] Call Trace: [ 184.615049][ T7407] [ 184.615054][ T7407] dump_stack_lvl+0x100/0x190 [ 184.615075][ T7407] should_fail_ex.cold+0x5/0xa [ 184.615088][ T7407] _copy_from_iter+0x1f4/0x1690 [ 184.615104][ T7407] ? __asan_memset+0x23/0x50 [ 184.615163][ T7407] ? __pfx__copy_from_iter+0x10/0x10 [ 184.615177][ T7407] ? __pfx___alloc_skb+0x10/0x10 [ 184.615199][ T7407] netlink_sendmsg+0x808/0xda0 [ 184.615219][ T7407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.615238][ T7407] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 184.615259][ T7407] ____sys_sendmsg+0x9e1/0xb70 [ 184.615270][ T7407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.615288][ T7407] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.615305][ T7407] ___sys_sendmsg+0x190/0x1e0 [ 184.615318][ T7407] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.615346][ T7407] __sys_sendmsg+0x170/0x220 [ 184.615362][ T7407] ? __pfx___sys_sendmsg+0x10/0x10 [ 184.615383][ T7407] ? __pfx_ksys_write+0x10/0x10 [ 184.615396][ T7407] __do_fast_syscall_32+0xe3/0x8c0 [ 184.615416][ T7407] do_fast_syscall_32+0x32/0x70 [ 184.615432][ T7407] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 184.615447][ T7407] RIP: 0023:0xf7fa8f6c [ 184.615457][ T7407] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 184.615467][ T7407] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 184.615478][ T7407] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 184.615485][ T7407] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 184.615491][ T7407] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 184.615497][ T7407] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 184.615503][ T7407] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 184.615516][ T7407] [ 184.690528][ C2] hpet: Lost 4 RTC interrupts [ 184.752251][ T7413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.313'. [ 184.949189][ T7415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.315'. [ 185.066352][ T7420] binder: 7419:7420 ioctl c0306201 0 returned -14 [ 185.358594][ T7428] FAULT_INJECTION: forcing a failure. [ 185.358594][ T7428] name failslab, interval 1, probability 0, space 0, times 0 [ 185.364802][ T7428] CPU: 3 UID: 0 PID: 7428 Comm: syz.2.320 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.364831][ T7428] Tainted: [L]=SOFTLOCKUP [ 185.364837][ T7428] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 185.364848][ T7428] Call Trace: [ 185.364857][ T7428] [ 185.364866][ T7428] dump_stack_lvl+0x100/0x190 [ 185.364898][ T7428] should_fail_ex.cold+0x5/0xa [ 185.364921][ T7428] should_failslab+0xc2/0x120 [ 185.364942][ T7428] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 185.364968][ T7428] ? sk_prot_alloc+0x60/0x2a0 [ 185.364993][ T7428] sk_prot_alloc+0x60/0x2a0 [ 185.365013][ T7428] sk_alloc+0x36/0xe80 [ 185.365038][ T7428] unix_create1+0xa6/0x700 [ 185.365070][ T7428] unix_stream_connect+0x374/0x1b10 [ 185.365091][ T7428] ? __might_fault+0xc5/0x140 [ 185.365124][ T7428] ? __pfx_unix_stream_connect+0x10/0x10 [ 185.365143][ T7428] __sys_connect_file+0x141/0x1a0 [ 185.365190][ T7428] __sys_connect+0x141/0x170 [ 185.365211][ T7428] ? __pfx___sys_connect+0x10/0x10 [ 185.365244][ T7428] ? ksys_write+0x1ac/0x250 [ 185.365261][ T7428] ? __pfx_ksys_write+0x10/0x10 [ 185.365282][ T7428] __ia32_sys_connect+0x71/0xb0 [ 185.365304][ T7428] ? lockdep_hardirqs_on+0x78/0x100 [ 185.365330][ T7428] __do_fast_syscall_32+0xe3/0x8c0 [ 185.365360][ T7428] do_fast_syscall_32+0x32/0x70 [ 185.365387][ T7428] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 185.365410][ T7428] RIP: 0023:0xf7fa8f6c [ 185.365431][ T7428] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 185.365453][ T7428] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 000000000000016a [ 185.365476][ T7428] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340 [ 185.365487][ T7428] RDX: 000000000000006e RSI: 0000000000000000 RDI: 0000000000000000 [ 185.365497][ T7428] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 185.365508][ T7428] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 185.365518][ T7428] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 185.365542][ T7428] [ 185.489408][ T7430] netlink: 'syz.2.321': attribute type 64 has an invalid length. [ 185.492855][ T7430] netlink: 5 bytes leftover after parsing attributes in process `syz.2.321'. [ 185.652672][ T7434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.322'. [ 186.875874][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.324'. [ 187.136304][ T7450] x_tables: duplicate underflow at hook 1 [ 187.959946][ T7458] netlink: 'syz.2.329': attribute type 12 has an invalid length. [ 187.963541][ T7458] netlink: 248 bytes leftover after parsing attributes in process `syz.2.329'. [ 188.242738][ T7473] FAULT_INJECTION: forcing a failure. [ 188.242738][ T7473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.247284][ T7473] CPU: 2 UID: 0 PID: 7473 Comm: syz.0.333 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.247302][ T7473] Tainted: [L]=SOFTLOCKUP [ 188.247306][ T7473] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 188.247312][ T7473] Call Trace: [ 188.247316][ T7473] [ 188.247321][ T7473] dump_stack_lvl+0x100/0x190 [ 188.247340][ T7473] should_fail_ex.cold+0x5/0xa [ 188.247353][ T7473] _copy_from_user+0x2e/0xd0 [ 188.247366][ T7473] get_compat_msghdr+0xb3/0x4b0 [ 188.247381][ T7473] ? __pfx_get_compat_msghdr+0x10/0x10 [ 188.247401][ T7473] ___sys_sendmsg+0x1b6/0x1e0 [ 188.247414][ T7473] ? __pfx____sys_sendmsg+0x10/0x10 [ 188.247441][ T7473] __sys_sendmsg+0x170/0x220 [ 188.247457][ T7473] ? __pfx___sys_sendmsg+0x10/0x10 [ 188.247476][ T7473] ? __pfx_ksys_write+0x10/0x10 [ 188.247489][ T7473] __do_fast_syscall_32+0xe3/0x8c0 [ 188.247507][ T7473] do_fast_syscall_32+0x32/0x70 [ 188.247523][ T7473] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 188.247536][ T7473] RIP: 0023:0xf706ef6c [ 188.247546][ T7473] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 188.247555][ T7473] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 188.247566][ T7473] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800000c0 [ 188.247572][ T7473] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 188.247578][ T7473] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 188.247583][ T7473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.247590][ T7473] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 188.247626][ T7473] [ 188.314347][ C2] hpet: Lost 4 RTC interrupts [ 188.517111][ T7478] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 188.520202][ T7478] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 188.524056][ T7478] vhci_hcd vhci_hcd.0: Device attached [ 188.562939][ T7478] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 188.798634][ T6039] usb 46-1: SetAddress Request (7) to port 0 [ 188.801410][ T6039] usb 46-1: new SuperSpeed USB device number 7 using vhci_hcd [ 189.381828][ T7479] vhci_hcd: connection reset by peer [ 189.405700][ T46] vhci_hcd vhci_hcd.4: stop threads [ 189.408199][ T46] vhci_hcd vhci_hcd.4: release socket [ 189.410728][ T46] vhci_hcd vhci_hcd.4: disconnect device [ 190.467079][ T7504] netlink: 20 bytes leftover after parsing attributes in process `syz.2.340'. [ 192.735651][ T7515] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 192.738663][ T7515] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 192.744970][ T7515] vhci_hcd vhci_hcd.0: Device attached [ 193.030286][ T39] usb 42-1: SetAddress Request (10) to port 0 [ 193.032857][ T39] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 193.122699][ T7515] random: crng reseeded on system resumption [ 193.315601][ T7522] vhci_hcd: connection reset by peer [ 193.340141][ T13] vhci_hcd vhci_hcd.2: stop threads [ 193.342633][ T13] vhci_hcd vhci_hcd.2: release socket [ 193.349390][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 193.528850][ T7531] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 193.898035][ T6039] usb 46-1: device descriptor read/8, error -110 [ 194.248362][ T7544] netlink: 20 bytes leftover after parsing attributes in process `syz.2.350'. [ 194.318233][ T6039] usb usb46-port1: attempt power cycle [ 194.527504][ T7557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.351'. [ 194.881496][ T6039] usb usb46-port1: unable to enumerate USB device [ 196.197760][ T34] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 196.897215][ T7572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.355'. [ 196.919371][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.924134][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.926366][ T7572] openvswitch: netlink: Flow actions attr not present in new flow. [ 196.938015][ T34] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 196.941953][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.950936][ T34] usb 6-1: config 0 descriptor?? [ 197.060373][ T7573] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 197.062694][ T7573] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 197.065892][ T7573] vhci_hcd vhci_hcd.0: Device attached [ 197.069925][ T7573] random: crng reseeded on system resumption [ 197.329245][ T5922] usb 46-1: SetAddress Request (11) to port 0 [ 197.331749][ T5922] usb 46-1: new SuperSpeed USB device number 11 using vhci_hcd [ 197.366311][ T34] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 197.373928][ T34] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 197.384372][ T34] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0D8C:0022.000A/input/input8 [ 197.418314][ T34] cm6533_jd 0003:0D8C:0022.000A: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 197.644504][ T7574] vhci_hcd: connection reset by peer [ 197.646942][ T186] vhci_hcd vhci_hcd.4: stop threads [ 197.649579][ T186] vhci_hcd vhci_hcd.4: release socket [ 197.651595][ T186] vhci_hcd vhci_hcd.4: disconnect device [ 198.147809][ T39] usb 42-1: device descriptor read/8, error -110 [ 198.554369][ T39] usb usb42-port1: attempt power cycle [ 198.567828][ T842] usb 6-1: reset high-speed USB device number 3 using dummy_hcd [ 198.772882][ T7591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.360'. [ 198.777205][ T7591] netlink: 112 bytes leftover after parsing attributes in process `syz.1.360'. [ 198.888780][ T7592] comedi comedi1: Minor 163 is invalid! [ 198.940710][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.942921][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.141598][ T39] usb usb42-port1: unable to enumerate USB device [ 199.384148][ T6023] usb 6-1: USB disconnect, device number 3 [ 202.393752][ T5922] usb 46-1: device descriptor read/8, error -110 [ 202.580852][ T7611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.364'. [ 202.800696][ T5922] usb usb46-port1: attempt power cycle [ 203.380508][ T5922] usb usb46-port1: unable to enumerate USB device [ 203.432668][ T7618] netlink: 20 bytes leftover after parsing attributes in process `syz.4.366'. [ 204.275539][ T7622] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 204.277983][ T7622] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 204.282056][ T7622] vhci_hcd vhci_hcd.0: Device attached [ 204.287995][ T7622] random: crng reseeded on system resumption [ 204.557963][ T5922] usb 40-1: SetAddress Request (11) to port 0 [ 204.561829][ T5922] usb 40-1: new SuperSpeed USB device number 11 using vhci_hcd [ 204.637297][ T7628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.365'. [ 204.651417][ T7628] openvswitch: netlink: Flow actions attr not present in new flow. [ 204.668024][ T7624] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 204.671085][ T186] vhci_hcd vhci_hcd.1: stop threads [ 204.673220][ T186] vhci_hcd vhci_hcd.1: release socket [ 204.675575][ T186] vhci_hcd vhci_hcd.1: disconnect device [ 204.977741][ T842] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 205.661388][ T842] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.666149][ T842] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.599079][ T842] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 206.602271][ T842] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.689095][ T842] usb 9-1: config 0 descriptor?? [ 207.111178][ T842] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 207.114353][ T842] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 207.124536][ T842] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0D8C:0022.000B/input/input9 [ 207.156891][ T842] cm6533_jd 0003:0D8C:0022.000B: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 207.345931][ T7654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'. [ 207.433208][ T7655] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 207.435426][ T7655] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 207.438643][ T7655] vhci_hcd vhci_hcd.0: Device attached [ 207.459820][ T7655] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 207.849762][ T842] usb 42-1: SetAddress Request (14) to port 0 [ 207.852871][ T842] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 207.926205][ T7656] vhci_hcd: connection reset by peer [ 207.928540][ T13] vhci_hcd vhci_hcd.2: stop threads [ 207.930372][ T13] vhci_hcd vhci_hcd.2: release socket [ 207.932390][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 208.287725][ T6023] usb 9-1: reset high-speed USB device number 5 using dummy_hcd [ 208.865614][ T7673] netlink: 20 bytes leftover after parsing attributes in process `syz.2.380'. [ 209.218875][ T39] usb 9-1: USB disconnect, device number 5 [ 209.312087][ T7674] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 209.315078][ T7674] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 209.320920][ T7674] vhci_hcd vhci_hcd.0: Device attached [ 209.560867][ T7678] random: crng reseeded on system resumption [ 209.755037][ T7676] vhci_hcd: connection reset by peer [ 209.767905][ T186] vhci_hcd vhci_hcd.1: stop threads [ 209.769771][ T186] vhci_hcd vhci_hcd.1: release socket [ 209.772900][ T5922] usb 40-1: device descriptor read/8, error -110 [ 209.775047][ T186] vhci_hcd vhci_hcd.1: disconnect device [ 209.927728][ T7679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.378'. [ 209.933893][ T7679] openvswitch: netlink: Flow actions attr not present in new flow. [ 210.101135][ T7685] FAULT_INJECTION: forcing a failure. [ 210.101135][ T7685] name failslab, interval 1, probability 0, space 0, times 0 [ 210.106780][ T7685] CPU: 0 UID: 0 PID: 7685 Comm: syz.0.382 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.106813][ T7685] Tainted: [L]=SOFTLOCKUP [ 210.106820][ T7685] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 210.106831][ T7685] Call Trace: [ 210.106838][ T7685] [ 210.106846][ T7685] dump_stack_lvl+0x100/0x190 [ 210.106886][ T7685] should_fail_ex.cold+0x5/0xa [ 210.106908][ T7685] should_failslab+0xc2/0x120 [ 210.106929][ T7685] __kvmalloc_node_noprof+0xfa/0xa00 [ 210.106957][ T7685] ? file_tty_write.isra.0+0x64e/0x890 [ 210.107021][ T7685] file_tty_write.isra.0+0x64e/0x890 [ 210.107055][ T7685] do_iter_readv_writev+0x6ee/0x920 [ 210.107085][ T7685] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 210.107118][ T7685] ? bpf_lsm_file_permission+0x9/0x10 [ 210.107147][ T7685] ? security_file_permission+0x76/0x210 [ 210.107172][ T7685] ? rw_verify_area+0xce/0x6d0 [ 210.107201][ T7685] vfs_writev+0x360/0xe10 [ 210.107239][ T7685] ? __pfx_vfs_writev+0x10/0x10 [ 210.107288][ T7685] ? __fget_files+0x21f/0x3d0 [ 210.107314][ T7685] ? do_writev+0x13e/0x340 [ 210.107340][ T7685] do_writev+0x13e/0x340 [ 210.107367][ T7685] ? __pfx_do_writev+0x10/0x10 [ 210.107393][ T7685] ? __pfx_ksys_write+0x10/0x10 [ 210.107417][ T7685] __do_fast_syscall_32+0xe3/0x8c0 [ 210.107449][ T7685] do_fast_syscall_32+0x32/0x70 [ 210.107476][ T7685] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 210.107500][ T7685] RIP: 0023:0xf706ef6c [ 210.107516][ T7685] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 210.107532][ T7685] RSP: 002b:00000000f543c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000092 [ 210.107550][ T7685] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000b00 [ 210.107562][ T7685] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 210.107572][ T7685] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 210.107583][ T7685] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 210.107611][ T7685] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 210.107638][ T7685] [ 210.196069][ T5922] usb usb40-port1: attempt power cycle [ 210.257213][ T7689] x_tables: duplicate underflow at hook 1 [ 210.778451][ T5922] usb usb40-port1: unable to enumerate USB device [ 211.627738][ T5922] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 211.792699][ T5922] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.807903][ T5922] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.812188][ T5922] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 211.816264][ T5922] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.827846][ T5922] usb 9-1: config 0 descriptor?? [ 211.879377][ T7708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.388'. [ 211.884753][ T7708] netlink: 200 bytes leftover after parsing attributes in process `syz.2.388'. [ 212.239733][ T5922] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 212.244036][ T5922] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 212.251546][ T5922] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0D8C:0022.000C/input/input10 [ 212.276327][ T5922] cm6533_jd 0003:0D8C:0022.000C: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 212.937766][ T842] usb 42-1: device descriptor read/8, error -110 [ 213.339878][ T842] usb usb42-port1: attempt power cycle [ 213.407804][ T6857] usb 9-1: reset high-speed USB device number 6 using dummy_hcd [ 213.919589][ T842] usb usb42-port1: unable to enumerate USB device [ 214.615753][ T7723] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 214.618077][ T7723] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 214.650711][ T7723] vhci_hcd vhci_hcd.0: Device attached [ 214.651957][ T7729] random: crng reseeded on system resumption [ 214.656755][ T7719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.391'. [ 214.663785][ T7719] openvswitch: netlink: Flow actions attr not present in new flow. [ 214.788991][ T7725] vhci_hcd: connection closed [ 214.790073][ T774] vhci_hcd vhci_hcd.0: stop threads [ 214.793868][ T774] vhci_hcd vhci_hcd.0: release socket [ 214.799308][ T774] vhci_hcd vhci_hcd.0: disconnect device [ 214.868939][ T7737] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 214.871325][ T7737] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 214.878708][ T7737] vhci_hcd vhci_hcd.0: Device attached [ 214.933533][ T7737] fuse: Unknown parameter '017777777777777777777770x0000000000000003' [ 215.129265][ T6039] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 215.367280][ T34] usb 9-1: USB disconnect, device number 6 [ 215.677253][ T7738] vhci_hcd: connection reset by peer [ 215.680568][ T46] vhci_hcd vhci_hcd.2: stop threads [ 215.682711][ T46] vhci_hcd vhci_hcd.2: release socket [ 215.685000][ T46] vhci_hcd vhci_hcd.2: disconnect device [ 216.243266][ T7751] x_tables: duplicate underflow at hook 1 [ 216.260864][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.400'. [ 216.264108][ T7753] netlink: 200 bytes leftover after parsing attributes in process `syz.4.400'. [ 216.368264][ T7760] netlink: 20 bytes leftover after parsing attributes in process `syz.4.402'. [ 217.454495][ T7769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.404'. [ 217.459294][ T7769] openvswitch: netlink: Flow actions attr not present in new flow. [ 217.938629][ T7773] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 217.941508][ T7773] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 217.945204][ T7773] vhci_hcd vhci_hcd.0: Device attached [ 217.949519][ T7773] random: crng reseeded on system resumption [ 218.190074][ T7779] netlink: 20 bytes leftover after parsing attributes in process `syz.0.408'. [ 218.232249][ T34] usb 40-1: SetAddress Request (15) to port 0 [ 218.235129][ T34] usb 40-1: new SuperSpeed USB device number 15 using vhci_hcd [ 218.966318][ T7774] vhci_hcd: connection reset by peer [ 219.049701][ T46] vhci_hcd vhci_hcd.1: stop threads [ 219.052060][ T46] vhci_hcd vhci_hcd.1: release socket [ 219.055823][ T46] vhci_hcd vhci_hcd.1: disconnect device [ 220.208199][ T6039] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 221.501575][ T5939] Bluetooth: hci3: command 0x0406 tx timeout [ 221.505305][ T5950] Bluetooth: hci0: command 0x0406 tx timeout [ 221.508239][ T5950] Bluetooth: hci1: command 0x0406 tx timeout [ 222.288709][ T7825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.416'. [ 222.320728][ T7825] openvswitch: netlink: Flow actions attr not present in new flow. [ 222.699979][ T7834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.418'. [ 223.340855][ T34] usb 40-1: device descriptor read/8, error -110 [ 223.738918][ T34] usb usb40-port1: attempt power cycle [ 223.791804][ T7853] 9pnet_virtio: no channels available for device syz [ 223.823164][ T7854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.422'. [ 224.017711][ T5922] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 224.179699][ T5922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.184225][ T5922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.189951][ T5922] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 224.193270][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.199693][ T5922] usb 6-1: config 0 descriptor?? [ 224.309877][ T34] usb usb40-port1: unable to enumerate USB device [ 224.615342][ T5922] cm6533_jd 0003:0D8C:0022.000D: unknown main item tag 0x0 [ 224.622088][ T5922] cm6533_jd 0003:0D8C:0022.000D: unknown main item tag 0x0 [ 224.631380][ T5922] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0D8C:0022.000D/input/input11 [ 224.657080][ T5922] cm6533_jd 0003:0D8C:0022.000D: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 225.877805][ T34] usb 6-1: reset high-speed USB device number 4 using dummy_hcd [ 229.238995][ T6857] usb 6-1: USB disconnect, device number 4 [ 229.593053][ T7909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.438'. [ 231.742872][ T7929] netlink: 20 bytes leftover after parsing attributes in process `syz.4.442'. [ 232.306379][ T7932] netlink: 20 bytes leftover after parsing attributes in process `syz.2.443'. [ 232.417154][ T7935] FAULT_INJECTION: forcing a failure. [ 232.417154][ T7935] name failslab, interval 1, probability 0, space 0, times 0 [ 232.422258][ T7935] CPU: 2 UID: 0 PID: 7935 Comm: syz.0.444 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.422282][ T7935] Tainted: [L]=SOFTLOCKUP [ 232.422287][ T7935] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 232.422293][ T7935] Call Trace: [ 232.422299][ T7935] [ 232.422305][ T7935] dump_stack_lvl+0x100/0x190 [ 232.422329][ T7935] should_fail_ex.cold+0x5/0xa [ 232.422342][ T7935] ? tomoyo_realpath_from_path+0xb6/0x690 [ 232.422358][ T7935] should_failslab+0xc2/0x120 [ 232.422371][ T7935] __kmalloc_noprof+0xe0/0x850 [ 232.422391][ T7935] tomoyo_realpath_from_path+0xb6/0x690 [ 232.422409][ T7935] tomoyo_path_number_perm+0x23c/0x580 [ 232.422421][ T7935] ? tomoyo_path_number_perm+0x22e/0x580 [ 232.422433][ T7935] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 232.422459][ T7935] ? find_held_lock+0x2b/0x80 [ 232.422469][ T7935] ? hook_file_ioctl_common+0x146/0x410 [ 232.422482][ T7935] ? __fget_files+0x215/0x3d0 [ 232.422495][ T7935] ? __fget_files+0x21f/0x3d0 [ 232.422508][ T7935] security_file_ioctl_compat+0xd3/0x230 [ 232.422522][ T7935] __ia32_compat_sys_ioctl+0xc2/0x360 [ 232.422541][ T7935] __do_fast_syscall_32+0xe3/0x8c0 [ 232.422561][ T7935] do_fast_syscall_32+0x32/0x70 [ 232.422578][ T7935] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 232.422594][ T7935] RIP: 0023:0xf706ef6c [ 232.422606][ T7935] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 232.422616][ T7935] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 232.422628][ T7935] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000894b [ 232.422635][ T7935] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 232.422641][ T7935] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 232.422648][ T7935] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 232.422654][ T7935] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 232.422666][ T7935] [ 232.422672][ T7935] ERROR: Out of memory at tomoyo_realpath_from_path. [ 232.702542][ T7942] netlink: 20 bytes leftover after parsing attributes in process `syz.0.448'. [ 233.764739][ T7963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.451'. [ 233.957379][ T7965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.452'. [ 233.964219][ T7965] openvswitch: netlink: Flow actions attr not present in new flow. [ 236.552712][ T7998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.462'. [ 236.559354][ T7998] openvswitch: netlink: Flow actions attr not present in new flow. [ 236.697985][ T8002] netlink: 20 bytes leftover after parsing attributes in process `syz.2.464'. [ 238.085181][ T8021] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 239.548774][ T8040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.475'. [ 239.553473][ T8040] openvswitch: netlink: Flow actions attr not present in new flow. [ 240.313932][ T8055] netlink: 20 bytes leftover after parsing attributes in process `syz.0.480'. [ 240.374358][ T8057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.479'. [ 241.283536][ T8069] FAULT_INJECTION: forcing a failure. [ 241.283536][ T8069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.292779][ T8069] CPU: 3 UID: 0 PID: 8069 Comm: syz.4.484 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.292808][ T8069] Tainted: [L]=SOFTLOCKUP [ 241.292813][ T8069] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 241.292824][ T8069] Call Trace: [ 241.292830][ T8069] [ 241.292838][ T8069] dump_stack_lvl+0x100/0x190 [ 241.292872][ T8069] should_fail_ex.cold+0x5/0xa [ 241.292895][ T8069] _copy_to_user+0x32/0xd0 [ 241.292918][ T8069] simple_read_from_buffer+0xcb/0x170 [ 241.292947][ T8069] proc_fail_nth_read+0x1af/0x230 [ 241.292967][ T8069] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 241.292987][ T8069] ? rw_verify_area+0xce/0x6d0 [ 241.293015][ T8069] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 241.293038][ T8069] vfs_read+0x1e4/0xb30 [ 241.293066][ T8069] ? __pfx_vfs_read+0x10/0x10 [ 241.293088][ T8069] ? find_held_lock+0x2b/0x80 [ 241.293105][ T8069] ? __fget_files+0x215/0x3d0 [ 241.293124][ T8069] ? __fget_files+0x21f/0x3d0 [ 241.293144][ T8069] ksys_read+0x12a/0x250 [ 241.293159][ T8069] ? __pfx_ksys_read+0x10/0x10 [ 241.293184][ T8069] do_int80_emulation+0x141/0x6b0 [ 241.293215][ T8069] asm_int80_emulation+0x1a/0x20 [ 241.293232][ T8069] RIP: 0023:0xf7175cab [ 241.293246][ T8069] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 241.293262][ T8069] RSP: 002b:00000000f542d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 241.293279][ T8069] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f542d5d0 [ 241.293289][ T8069] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 241.293298][ T8069] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 241.293308][ T8069] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 241.293317][ T8069] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 241.293342][ T8069] [ 241.534665][ T8077] netlink: 'syz.0.487': attribute type 12 has an invalid length. [ 242.303919][ T8094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.491'. [ 243.085824][ T8085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.489'. [ 243.092448][ T8085] openvswitch: netlink: Flow actions attr not present in new flow. [ 243.118599][ T8104] tipc: Enabled bearer , priority 0 [ 243.122184][ T8104] syzkaller0: entered promiscuous mode [ 243.125329][ T8104] syzkaller0: entered allmulticast mode [ 243.133219][ T8104] block nbd1: not configured, cannot reconfigure [ 243.137796][ T8104] netlink: 'syz.1.494': attribute type 1 has an invalid length. [ 243.141466][ T8104] netlink: 'syz.1.494': attribute type 2 has an invalid length. [ 243.144958][ T8104] netlink: 'syz.1.494': attribute type 1 has an invalid length. [ 243.199948][ T8103] tipc: Resetting bearer [ 243.245263][ T8103] tipc: Disabling bearer [ 243.615063][ T8114] FAULT_INJECTION: forcing a failure. [ 243.615063][ T8114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.620092][ T8114] CPU: 2 UID: 0 PID: 8114 Comm: syz.0.497 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.620110][ T8114] Tainted: [L]=SOFTLOCKUP [ 243.620113][ T8114] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 243.620120][ T8114] Call Trace: [ 243.620124][ T8114] [ 243.620128][ T8114] dump_stack_lvl+0x100/0x190 [ 243.620153][ T8114] should_fail_ex.cold+0x5/0xa [ 243.620167][ T8114] _copy_to_user+0x32/0xd0 [ 243.620181][ T8114] simple_read_from_buffer+0xcb/0x170 [ 243.620199][ T8114] proc_fail_nth_read+0x1af/0x230 [ 243.620213][ T8114] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 243.620227][ T8114] ? rw_verify_area+0xce/0x6d0 [ 243.620243][ T8114] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 243.620255][ T8114] vfs_read+0x1e4/0xb30 [ 243.620274][ T8114] ? __pfx_vfs_read+0x10/0x10 [ 243.620289][ T8114] ? find_held_lock+0x2b/0x80 [ 243.620300][ T8114] ? __fget_files+0x215/0x3d0 [ 243.620312][ T8114] ? __fget_files+0x21f/0x3d0 [ 243.620326][ T8114] ksys_read+0x12a/0x250 [ 243.620335][ T8114] ? __pfx_ksys_read+0x10/0x10 [ 243.620348][ T8114] do_int80_emulation+0x141/0x6b0 [ 243.620367][ T8114] asm_int80_emulation+0x1a/0x20 [ 243.620378][ T8114] RIP: 0023:0xf71a5cab [ 243.620387][ T8114] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 243.620397][ T8114] RSP: 002b:00000000f543c4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 243.620408][ T8114] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f543c5d0 [ 243.620414][ T8114] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 243.620420][ T8114] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 243.620426][ T8114] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 243.620432][ T8114] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 243.620445][ T8114] [ 243.693199][ C2] hpet: Lost 3 RTC interrupts [ 244.110645][ T8110] ------------[ cut here ]------------ [ 244.112630][ T8110] kernel BUG at fs/netfs/iterator.c:248! [ 244.114592][ T8110] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 244.116884][ T8110] CPU: 1 UID: 0 PID: 8110 Comm: syz.1.496 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.121890][ T8110] Tainted: [L]=SOFTLOCKUP [ 244.123459][ T8110] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 244.127392][ T8110] RIP: 0010:netfs_limit_iter+0x100d/0x1100 [ 244.129512][ T8110] Code: ff e9 a4 f4 ff ff 48 89 de 48 c7 c7 80 b4 ab 8e e8 c8 f0 75 fe e9 59 f6 ff ff e8 5e 37 b2 ff e9 6f f6 ff ff e8 f4 a2 46 ff 90 <0f> 0b e8 bc 36 b2 ff e9 cd f9 ff ff 4c 89 f6 48 c7 c7 00 b5 ab 8e [ 244.136195][ T8110] RSP: 0000:ffffc9000352ece8 EFLAGS: 00010283 [ 244.138340][ T8110] RAX: 0000000000007926 RBX: 0000000000000000 RCX: ffffc9000d571000 [ 244.141131][ T8110] RDX: 0000000000080000 RSI: ffffffff82c178ec RDI: ffff8880287c8000 [ 244.143943][ T8110] RBP: 0000000000000003 R08: 0000000000000001 R09: 0000000000000005 [ 244.146720][ T8110] R10: 0000000000000003 R11: 0000000000000000 R12: 000000007fffffff [ 244.149670][ T8110] R13: 1ffff920006a5da3 R14: ffff888028ece2e0 R15: ffff888029ede1c0 [ 244.152832][ T8110] FS: 0000000000000000(0000) GS:ffff888097249000(0063) knlGS:00000000f53e6b40 [ 244.155996][ T8110] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 244.158341][ T8110] CR2: 00000000ffe2af6f CR3: 0000000072e77000 CR4: 0000000000352ef0 [ 244.161162][ T8110] Call Trace: [ 244.162340][ T8110] [ 244.163411][ T8110] ? do_raw_spin_lock+0x128/0x260 [ 244.165229][ T8110] ? find_held_lock+0x2b/0x80 [ 244.166823][ T8110] ? __pfx_netfs_limit_iter+0x10/0x10 [ 244.168733][ T8110] ? do_raw_spin_unlock+0x145/0x1e0 [ 244.170742][ T8110] ? _raw_spin_unlock+0x28/0x50 [ 244.172541][ T8110] ? netfs_prepare_write+0x486/0x7a0 [ 244.174319][ T8110] netfs_unbuffered_write+0x25d/0x2080 [ 244.176054][ T8110] netfs_unbuffered_write_iter_locked+0x801/0xab0 [ 244.178153][ T8110] netfs_unbuffered_write_iter+0x40c/0x710 [ 244.180107][ T8110] ? __pfx_v9fs_file_write_iter+0x10/0x10 [ 244.181985][ T8110] v9fs_file_write_iter+0xbf/0x100 [ 244.183708][ T8110] __kernel_write_iter+0x2ac/0x920 [ 244.185407][ T8110] ? __pfx___kernel_write_iter+0x10/0x10 [ 244.187319][ T8110] ? kasan_save_stack+0x3f/0x50 [ 244.188957][ T8110] ? kasan_save_stack+0x30/0x50 [ 244.190561][ T8110] ? exit_to_user_mode_loop+0x86/0x4a0 [ 244.192420][ T8110] ? __do_fast_syscall_32+0x578/0x8c0 [ 244.194229][ T8110] ? do_fast_syscall_32+0x32/0x70 [ 244.195901][ T8110] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 244.198017][ T8110] __kernel_write+0xf6/0x140 [ 244.199586][ T8110] ? __pfx___kernel_write+0x10/0x10 [ 244.201332][ T8110] dump_emit+0x21f/0x330 [ 244.201347][ T8110] ? __pfx_dump_emit+0x10/0x10 [ 244.201360][ T8110] elf_core_dump+0x24ab/0x42e0 [ 244.201379][ T8110] ? __pfx_elf_core_dump+0x10/0x10 [ 244.201394][ T8110] ? trace_sched_exit_tp+0x13a/0x180 [ 244.209452][ T8110] ? __schedule+0x1000/0x6120 [ 244.211031][ T8110] ? vfs_coredump+0x27bc/0x5570 [ 244.212632][ T8110] vfs_coredump+0x27bc/0x5570 [ 244.214193][ T8110] ? __pfx_vfs_coredump+0x10/0x10 [ 244.215821][ T8110] ? __lock_acquire+0x4a5/0x2630 [ 244.217484][ T8110] ? lock_acquire+0x1cf/0x380 [ 244.219072][ T8110] ? is_bpf_text_address+0x8a/0x1a0 [ 244.220764][ T8110] ? bpf_ksym_find+0x124/0x1c0 [ 244.222306][ T8110] ? __kernel_text_address+0xd/0x30 [ 244.224017][ T8110] ? unwind_get_return_address+0x59/0xa0 [ 244.225847][ T8110] ? arch_stack_walk+0xa6/0xf0 [ 244.227463][ T8110] ? __sigqueue_free+0xbe/0x2a0 [ 244.229248][ T8110] ? stack_trace_save+0x8e/0xc0 [ 244.231367][ T8110] ? __pfx_stack_trace_save+0x10/0x10 [ 244.233666][ T8110] ? stack_depot_save_flags+0x27/0x9d0 [ 244.235958][ T8110] ? __lock_acquire+0x4a5/0x2630 [ 244.238008][ T8110] ? do_fast_syscall_32+0x32/0x70 [ 244.240180][ T8110] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 244.242796][ T8110] ? proc_coredump_connector+0x2d3/0x4f0 [ 244.244582][ T8110] ? __pfx_proc_coredump_connector+0x10/0x10 [ 244.246525][ T8110] ? rcu_is_watching+0x12/0xc0 [ 244.248076][ T8110] get_signal+0x1f2a/0x21e0 [ 244.249853][ T8110] ? __pfx_get_signal+0x10/0x10 [ 244.251964][ T8110] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 244.254285][ T8110] ? force_sig_info_to_task+0x4d2/0x660 [ 244.256180][ T8110] arch_do_signal_or_restart+0x91/0x770 [ 244.258367][ T8110] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 244.260378][ T8110] exit_to_user_mode_loop+0x86/0x4a0 [ 244.262104][ T8110] __do_fast_syscall_32+0x578/0x8c0 [ 244.263821][ T8110] do_fast_syscall_32+0x32/0x70 [ 244.265421][ T8110] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 244.267444][ T8110] RIP: 0023:0xf7f23f6c [ 244.268807][ T8110] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 244.274837][ T8110] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 244.277512][ T8110] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000080 [ 244.280096][ T8110] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 244.282668][ T8110] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 244.285240][ T8110] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 244.287827][ T8110] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 244.290379][ T8110] [ 244.291421][ T8110] Modules linked in: [ 244.292994][ T8110] ---[ end trace 0000000000000000 ]--- [ 244.402220][ T8110] RIP: 0010:netfs_limit_iter+0x100d/0x1100 [ 244.404255][ T8110] Code: ff e9 a4 f4 ff ff 48 89 de 48 c7 c7 80 b4 ab 8e e8 c8 f0 75 fe e9 59 f6 ff ff e8 5e 37 b2 ff e9 6f f6 ff ff e8 f4 a2 46 ff 90 <0f> 0b e8 bc 36 b2 ff e9 cd f9 ff ff 4c 89 f6 48 c7 c7 00 b5 ab 8e [ 244.410687][ T8110] RSP: 0000:ffffc9000352ece8 EFLAGS: 00010283 [ 244.412699][ T8110] RAX: 0000000000007926 RBX: 0000000000000000 RCX: ffffc9000d571000 [ 244.415302][ T8110] RDX: 0000000000080000 RSI: ffffffff82c178ec RDI: ffff8880287c8000 [ 244.418360][ T8110] RBP: 0000000000000003 R08: 0000000000000001 R09: 0000000000000005 [ 244.421264][ T8110] R10: 0000000000000003 R11: 0000000000000000 R12: 000000007fffffff [ 244.423861][ T8110] R13: 1ffff920006a5da3 R14: ffff888028ece2e0 R15: ffff888029ede1c0 [ 244.427159][ T8110] FS: 0000000000000000(0000) GS:ffff888097249000(0063) knlGS:00000000f53e6b40 [ 244.430843][ T8110] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 244.432979][ T8110] CR2: 00000000f542d50c CR3: 0000000072e77000 CR4: 0000000000352ef0 [ 244.435547][ T8110] Kernel panic - not syncing: Fatal exception [ 244.438287][ T8110] Kernel Offset: disabled [ 244.439743][ T8110] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:39:50 Registers: info registers vcpu 0 CPU#0 EAX=000003ff EBX=000002bc ECX=000004de EDX=00000000 ESI=000336ac EDI=f7434fe8 EBP=f7f65610 ESP=ff959290 EIP=f707d9f7 EFL=00000206 [-----P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 5738b480 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 00003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f742e418 CR3=00000000244e1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85779815 RDI=ffffffff9b48f180 RBP=ffffffff9b48f140 RSP=ffffc9000352e5c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=7a7973203a6d6d43 R12=0000000000000000 R13=0000000000000038 R14=0000000000000010 R15=ffffffff857797b0 RIP=ffffffff8577983f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097249000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000ffe2af6f CR3=0000000072e77000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000002 RBX=0000000000000001 RCX=ffffffff825fb547 RDX=0000000000000001 RSI=0000000000000000 RDI=ffff88802989a4c0 RBP=000000006cf24867 RSP=ffffc90002daf388 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=000000000000001e R12=dffffc0000000000 R13=0000000000000867 R14=000000000008009f R15=ffffea0001b3c900 RIP=ffffffff82081510 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097349000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055be3d499000 CR3=00000000769d5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003800000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000275c74 RBX=ffff88801c7e24c0 RCX=ffffffff8b8d7c75 RDX=0000000000000001 RSI=ffffffff8c1b0a20 RDI=ffffffff81ddfdd4 RBP=0000000000000000 RSP=ffffc9000048fdf0 R8 =0000000000000000 R9 =ffffed10056a6795 R10=ffff88802b533cab R11=0000000000000000 R12=0000000000000003 R13=ffffed10038fc498 R14=0000000000000003 R15=ffffffff90d9c110 RIP=ffffffff8b8d65df RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097449000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f541aff4 CR3=000000004535e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000