last executing test programs: 22.161918616s ago: executing program 0 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000040)=@rnullb={'/dev/syzrnull', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000000c0)={{}, {0x1, 0x4}, [], {0x4, 0x3}, [], {0x10, 0x1}, {0x20, 0x6}}, 0x24, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000280)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000002c0), &(0x7f0000000580), 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000005c0), &(0x7f0000000600), 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r2, &(0x7f0000000640)="01010101", 0x4) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000680), &(0x7f00000006c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x42, 0x0) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000740), &(0x7f0000000780), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000800), &(0x7f0000000840), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0xfffffffb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000340)={0x0, 0xb, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r4, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(r6, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x168, r7, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x154, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b2a7bcb}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd86a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d0566b3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2676}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdfc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ee2ae94}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf08e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43dbf9f0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x694b3060}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29396ee6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5625dd49}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51224424}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d72}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe14d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa878ba5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x496fbadd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x248}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ab5dfbc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x278cbb68}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19a972a9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x891e}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe1b3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x635df742}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x319f6ac5}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x26df}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24644749}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xde92}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47076e64}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5cbc494d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbd73}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d0742d9}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5771b89e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe6bd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x452142b3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1c67}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x44c17a56}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9485}]}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x8000}, 0x800) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000cc0)={0x18, 0x110, 0xfa00, {r5, 0x7fffffff, 0x12, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @loopback}}}, 0x118) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x209d, 0x0, 0x4, 0x1f}, 0x10) write(0xffffffffffffffff, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) 21.623092037s ago: executing program 0 (id=26): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x3a, 0x10, &(0x7f0000000800), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r0, 0x0, 0xe, 0x2f, &(0x7f00000008c0)="1d5ff8317ca952a2ba4bfee0f003", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) 21.433900424s ago: executing program 0 (id=28): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) bind$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000001c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x2710}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000240), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000000280)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$usbmon(&(0x7f00000002c0), 0x7, 0x0) pselect6(0x40, &(0x7f0000000300)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000340)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000240), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYRES16=r3], 0x448}}, 0x0) sendmmsg$inet(r3, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="050000007402b8f4191db62b", 0xc}, {&(0x7f00000005c0)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600), 0x2}}], 0x40000000000003a, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/pids.max\x00', 0x2, 0x54) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[], 0x6) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r4, 0x28, 0x6, &(0x7f0000000140)={r5, r6/1000+10000}, 0x8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r7 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x101040, 0x0) ioctl$CDROMREADTOCHDR(r7, 0x5305, &(0x7f0000000040)={0x7, 0x5}) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000400)={0xaa, 0x4}) 20.514336368s ago: executing program 0 (id=35): socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000100)='./file0/../file0\x00') r0 = syz_open_dev$vim2m(&(0x7f0000000380), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000003c0)={0x1, @pix_mp={0x0, 0x0, 0x56555958}}) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x10, 0x0) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0/../file0\x00') r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000000) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r2, 0x10c, 0x5, &(0x7f0000000300), &(0x7f0000000340)=0x4) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x10102) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 20.355180981s ago: executing program 0 (id=39): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r2, &(0x7f00000005c0)='7', 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000007000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000040)={r3, &(0x7f0000000080), &(0x7f00000000c0)=""/166}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r4}, 0xc) ioctl(r1, 0xae60, 0x0) 19.951069298s ago: executing program 0 (id=42): mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./dev\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/mtrr\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)="626173653d30783230303030158f304c23bdb86539307832b779ebb5bfca9570ef6dedb29512b9c59dcaa3f99c476974652d225561636b0a", 0x50) ioctl$TCFLSH(r0, 0x540b, 0x2) mount(0x0, &(0x7f00000003c0)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./dev/console\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000180000fe80000000000000000000000000002cfe8000000000000000000000000000bb2f0200000000000004017f04010000000c"], 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000200)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r4, 0x0) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000300)="81bccb", 0x3}], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) mq_open(0x0, 0x800, 0x80, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000680), 0x8502, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f00000006c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) ioctl$TIOCMGET(r1, 0x5415, 0x0) 19.94463771s ago: executing program 32 (id=42): mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./dev\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/mtrr\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)="626173653d30783230303030158f304c23bdb86539307832b779ebb5bfca9570ef6dedb29512b9c59dcaa3f99c476974652d225561636b0a", 0x50) ioctl$TCFLSH(r0, 0x540b, 0x2) mount(0x0, &(0x7f00000003c0)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./dev/console\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000180000fe80000000000000000000000000002cfe8000000000000000000000000000bb2f0200000000000004017f04010000000c"], 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000200)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r4, 0x0) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000300)="81bccb", 0x3}], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) mq_open(0x0, 0x800, 0x80, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000680), 0x8502, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f00000006c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) ioctl$TIOCMGET(r1, 0x5415, 0x0) 14.458446173s ago: executing program 1 (id=78): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='100', 0x3) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x34, r3, 0x1, 0x70bd26, 0x25dfdbfe, {0x5, 0x0, 0xb6ff}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 14.370789408s ago: executing program 1 (id=79): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000042000100020000000000000003010000c80000001200010000112233445566778899aabb0800000004000280180003801400068088"], 0x48}}, 0x0) mount$9p_virtio(&(0x7f0000000c80), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000300)='cdg', 0x3) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000380)="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", 0xffffff5d, 0x12, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000680), 0x111, 0x9}}, 0x20) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000640)={0x1, 0x0, [{0x587, 0x0, 0x1000000000000000}]}) close(r2) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004084, 0x0, 0x0) syz_usb_connect(0x2, 0x367, &(0x7f0000000540)=ANY=[@ANYBLOB="120110010c7cf9085e04ae020c55010203010902"], 0x0) recvfrom$inet(r1, &(0x7f0000000600), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) shutdown(r1, 0x1) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(r7, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) 13.01888731s ago: executing program 1 (id=85): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019080)={0x16, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fef7ffff000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000040000000850000007300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a8000000850000000600000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$video(&(0x7f0000000080), 0x401, 0x1c180) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f00000003c0)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff000000", 0x46}], 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x38, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x9}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048091}, 0x4801) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20002) ioctl$BLKCRYPTOIMPORTKEY(r3, 0xc0401289, &(0x7f0000000240)={&(0x7f0000000040)="275cfc727e98be5649efe1b708985bb053aaf3d2d1812dcc5537f747", 0x1c, &(0x7f0000000180)=""/89, 0x59}) 12.334900429s ago: executing program 1 (id=88): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000004c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000600)={'wlan0\x00', 0x1}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000900) personality(0x8) uname(&(0x7f0000000940)=""/4096) modify_ldt$write2(0x11, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000001940)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000019c0)={0x0, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001a80)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}}, 0x14}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) recvmsg(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x140) openat(0xffffffffffffff9c, &(0x7f0000001b00)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000001b40)=0x2) clock_adjtime(0x4, &(0x7f0000001b80)={0x8, 0x5, 0x6, 0x81, 0x2, 0x8, 0x40000003, 0x8, 0x2a62, 0xfff, 0x49a7e694, 0x7, 0x7ff, 0x1000, 0x70, 0x4, 0x4, 0xf, 0xfffffffb, 0x7, 0x7, 0x10, 0x2e, 0x4, 0x80}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000001c00)=0xe) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001c40), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001c80)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = add_key(&(0x7f0000001cc0)='big_key\x00', &(0x7f0000001d00)={'syz', 0x1}, &(0x7f0000001d40)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001d80)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f0000001dc0), 0x2, 0x143102) writev(r6, &(0x7f0000001e00)=[{&(0x7f0000001e40)="94", 0xf000}, {0x0}], 0x2) 11.980990137s ago: executing program 1 (id=90): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000003c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0xf, &(0x7f00000004c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000580)=@generic={0x0, r4}, 0x18) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000005c0)={r3, 0x0, 0x0}, 0x10) write(r0, &(0x7f0000000100)='7', 0x1) bind(r0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1a, 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB="b501000000000000bd110000000000008510000002000000850000007600000095000000000000009500a5050000000077d8f3b4000000002be16ad10a48b243ccc40806d25dfd73a015e0ca7fc2506a0f68a7d06d75357f21699cdc6751dfb265a0e3ccae669e173a649c1cfd6587d472d64e7cc955d77578f4c35235138d5421f9453559c35da860e8ef14142b2a3e314422b854421eed734ceb1efeecb9c66854c3b3ffe1b4ce25d7c983c005c03b1d1ca4cb3e26e7a23129d6606fd28a697a9d552af6d9a9df2c3af333e2008e11bbec0727cb3f647535deb6277f5696833a71011a7d06602e2fd5234712596b696418f163d1a13ed38a682f87925bfa753f631cd027edd68149ee99eebc6f7d6dd4ae59af7588c8e1f4efab57644ccb1973d7879b70a70001040000000000000000d7900a820b63278f4e9a217b98ef7042ad2a923132f208fd8289eaf8cd00000000000009d27d753a300800000000000000a5686f2fccc33e3e34c3969c5ad781302d40e97a8ad10ce0cbe17366d5ac6af2fca2360a15b80400d52040ef7b28d300747877e176fe4c4b8e40dbf260f5a9f7eee30293c1b163b795d0aef4deb851a30000f569dc8f39943f889008e1ec914faa9e6cd0b3b4b3b5db666ebeb49d6a62019d76459e70b459543c4ac42e53b4ad4c77cff373ebd95848f01864e456969cd28000170996016aceb583df5ee4dd722e8c350af489f9a900000000a0dcc391a65c674a9cce0439f832a20d7cbdcda5dff3ba92dd66afb9dcd3e7784dbea1e51a15b0f1a040cc63177f8fafa3192fc8e5552da1a982ab8dfe31ad1a0968faa47c2069d6bf09c3aa4f0fc128cb578d99b08a150b4cc4b22f6a464c6398c952519818a44a1b450ff502df87865c276588ea478e328e8277e811b99ce1acfecaf8e2c55ccc4b8eae0a61635514e99ffd438784060f23ba74c0b30b1180d935832deb686d789ba1d436d116394534e88492a42b8bcab12fcc661a2dc50b3a1dcfbc871e5c27e3d7260f6fa589e40000b89db451ff994845f6b49c12e89291398bcb3c06ef1289f74e0b0e2cab592d35f82a69e7284223a171c616b1f0fee6c4711d7aecb69746064d2c096554975d605ebe646302bf3d5cf32a9a09915ae3f3d4eb96615d7b237da56cd5e9904a19e145f25b6d98eb2c019967f553b61d0e80d6913cee9f8d18469a654a239a84a85debbc0284c5a5d51f0e115ab159e3b513a68284d2efc30587e433431b2896a3bd48020af67e9ac071b2dd6dc3b9efae4ff03558fa619aea909c7f2416e7e7da1c51ccc7e6ac27412f728dc6d80da8adf317ca863ed683897321f8c8bb5a5d953d6783b7a06353ee496bbdff418de3e53234df87756eb99e330253cf5da4aa1a9648a38f07e2d302b4165983db4f7b8972923fffa8c03c288512a3a38fbd7c816a44634f7a03fab30811b7b93257bea4369ba46024dee5e9b0b2c3d3324e9b7c1f99ab9bb3f498b1485373b79ec84a67dad4e37575dab87ce55a9a69ed856a4c4410d1242ac1bd1539094a641cc086c2c53e363beafc74ab4e9ff320373705cbf5644586ffe60d293944fa2d9dc18b55f1af5c42f27747bef1ffd0c1766f062d47d61bf9f64e6ee288fa7fc12d48da526527b9f5c318c93ec447cb8b5eee7aa8a1e85696af3dfef96657c0545c8ebd96528d9c28828e5befd80d684b03b6d153da3e3cbd3bfbf4a9375b8ad04a1d241bcb775505cb6cc7a44e2e24bd0b1ca4879caaff59d0ce39dc7f3fea447f4e46967855208e63ec988bd2692afefbed2b001205e4b30ee8fe417defa566a73ace8f01f7181de0ef25f1744896a3c38859e6148c42454949cd64b1a888e7fe9c2d86bb01023b6dde4ab67f5eb038af3e460c771518a4126c338b0390d459361e03adf6e6b558b3651a0e33d101b5febfff82794203da18db6fcf89715c2d338f78d8b9220171b418528f857a7cb79ca990de1208777e13faaa9b9cb9e67797b07d9eb9e909410b50c5d981d9a72aa36498b630519d1530ef0000000000000000000037fcffffffffffffff8db8379bd2044c652dff399a9f8bfa4e9c507f049d18837464276830461ee203ba51f6102d262fc9a26bc3638ecce24e65c55da6efaa462f03e0d36c62785f32ecc294a8c7a522b59f5a7b44d018cb2648383073d9e032492cae44350bc0a85697f431392eb22cae093e85954af97d6d7b2e6e8f43353062275ad1578a431594243452a2bfb89f91d8eaac00000000000080014573789425c4c22da528d89356aa6d2ae6da082e756c80cf39053431080ea6cbf9997a5a0ddad0b9d12bc3f880476ab32f0feaac5f16e61f7b72b8c9082eec423c6b3eaecfdcc9ec72795e7696421c83b76c2d6bac19bc875d009679778d8ef97d7e05329649d97b0dc54bea9b650873de2d3d702690176e0b23ee5cb5e469a8d1612d611722e6200e3a297d92f8e1de98326c5ef2b89d4e2d47767c0700783e5d865e373338e96ceb8399f296c59b2d70ca27735ecaff62982616d3ac1ab041733bce119d8002a6c8a2b08b32551b2313b1a2ff41b3f04af61c69c85cb2da48215727271bac2ffdeb62d9f5dc4845f1c3f63dc806e615ee8d28d6d7f181e30807afa27f41d0364c746a65a47464db68f3c433d88dd625db35fded2c86d75af88efaf20c8b37c644b6c4e773a9589200faa553bc92f916b75ddbfa18ab73979f46947b35914286d2499a0b8c970000000000000000f4fe74e0c26ab52329bd600627b256ca44dd121ffc8dbb6e5f70cbe03efccac70375b30cc927574d254d1b46c607e8b1ca7d1511568c4d885723734a3ef4b6b885f4582bdcef74e5e010627fc8e4fe00000000000000000000869d9640f06b11df2971909b90133983308ea4f033de613763f32d913bcbe9dd082a6fff197a20730269e6cfd31275395833f1c2b8a50a94c30cceae2a11fe9b9b835d0da73891c0b3ce22dea6bf31e7f51808cf72f44b4455b77a778440795e152dc1b7bb0a5636aa4742ce4d331a47de5836539cdf289176527277b70c8162aaf6f9475418b478329f3565450acfaf07000000eab8cabfa97e35081967bb92a264b07e8003d2f15537e72a1e4ca5ec1e2aaaf8236ecdefbaf512c75e636b6b6f518ad20521f909b12e9bc97e408e0dc82f950d12705f35708bc862196abb27e8d7991b5273987f38c4706289ff4f6130cee76465d487a07a74452f87da2029bd3debd9870335d58d3fe1ac809c227aa25842f75981bc6f569ffdb10ba3f20a86d95128d13e0c778998d3b3114bfb07bd61e4bff8a5e2ce4aa572c63e09b44ca4a181bcfe4eec3ce843c65c4948169fe639a186acc2b4a96c6b8d4d2e6d53ab97bea01eab953e6e89e3af34d4ada217bc6fda0fb2095c49195d0d6f365ca80a955b9ec81240a84ef672afa369fcd097728955cf04fec692b01fadfc8e3d444ba35d0f51a0065a3b982d09dfc6874fc0d8079b185447cb8a695e132d4d613a529d9c77e2a8f7320ecf698e8a2b170fd601dc1a9767a38b10788e92d1356f6a6c1bcfb2d31b46e735db13f1be80bac1b6be04fd98610000000000000000000000000000139af5493f74751c5e2501a4936bc4a0fa516117f4ccadc692003adee0a080eba2f1059660c0ee0e9aec72d4d0fe095632e4f641b0e34c611c5b3e0ba05fa36542d40837dda323910672a9097d68398fd3539686e4288db0d6bf7cb8a1835f46dfe11865a66ef47e736dada06677a5bca133d6cbc8fe5c4557e51b006bdccd7c5f32ff1d9e8b130f77df09236870fb3de5b87b4f8acc13df534eba329b86670000000000000000b27a2616c03cdf6c009447a652bca9b325e73c0737d5b717945e4fe7a169c5e2c54fc71a4104aa7cf0f5d30e2fcd9503650edbd8a5971a9a1fde5e5df37469ae204a6e899eacc1e63034cbabc5604739881cb82604bed3e53696a0606b26b879ef232a1a038291389593d1575cb79aa8284cf01a7e1a456acab9d8d608ad69d4c4b56492af7004e7ed9d47c5db3d76a00bea7c804f3a3638408bc1636f1009b7f185f51606918eaa0ab61a19"], &(0x7f0000001300)='GPL\x00', 0x5, 0xc3, &(0x7f0000001340)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 11.86109342s ago: executing program 1 (id=91): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfefffffe) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x2, 0x0, @ioapic={0xeeee0000, 0x5, 0x44, 0x7fff, 0x0, [{0x80, 0xff, 0x4, '\x00', 0x7}, {0x2, 0x2, 0xf9, '\x00', 0x6}, {0xa0, 0x2, 0x6, '\x00', 0xe6}, {0x4, 0x7, 0x6, '\x00', 0xd}, {0x4, 0x2, 0x6, '\x00', 0x4}, {0x3, 0x4, 0x8, '\x00', 0x22}, {0x12, 0x80}, {0x2, 0xb, 0xcd, '\x00', 0xe4}, {0xd8, 0xfb, 0x0, '\x00', 0xc9}, {0x9, 0x62, 0x9, '\x00', 0x7f}, {0x8, 0x2, 0xf4, '\x00', 0xd}, {0xe, 0x8, 0x80, '\x00', 0xb}, {0x2, 0x9, 0x0, '\x00', 0x9}, {0x1, 0xa, 0x6}, {0xe, 0x0, 0x1, '\x00', 0xf7}, {0xb7, 0x4, 0x3, '\x00', 0x81}, {0xc3, 0x37, 0x58, '\x00', 0x7e}, {0x2, 0x0, 0x1, '\x00', 0x2}, {0x0, 0x6, 0x6, '\x00', 0x9}, {0x7, 0x7, 0x16, '\x00', 0x5}, {0x7, 0x5, 0x1}, {0x9, 0x3, 0x4, '\x00', 0xfb}, {0x51, 0x0, 0x10, '\x00', 0xd}, {0x0, 0x28, 0xf0, '\x00', 0x95}]}}) 2.147762437s ago: executing program 2 (id=138): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000004700), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000004740)={0x1e0, 0x50, 0x300, 0x40, 0xa, 0x10000000, 0x0, 0x0, {}, {}, {0x0, 0x4}, {}, 0x0, 0x40, 0x0, 0x1, 0x1, 0x4, 0x4, 0x3, 0x1ff, 0x803d, 0x1, 0x9, 0x5f, 0x2, 0x1, 0x3}) 2.147565414s ago: executing program 2 (id=139): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0xfffffffeffffffff) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000b40)='0', 0x1) setgroups(0x0, 0x0) 2.079485422s ago: executing program 3 (id=140): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0) mq_open(&(0x7f0000000000)='\x00', 0xf4e08cbd1c690303, 0x0, &(0x7f0000000040)={0x8001, 0xc351, 0x5, 0x8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1d, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000002000000000000001100000085000000ae00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x27}, 0x94) fsopen(&(0x7f0000000240)='tracefs\x00', 0x1) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x28100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000340)={[0x0, 0x100000000, 0x0, 0x7e, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x1, 0x7, 0x0, 0x5, 0xa, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mount$9p_virtio(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x0, 0x0) symlink(&(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') chdir(&(0x7f0000000500)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00'}) lstat(&(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f00000009c0), &(0x7f0000000a40)=0x0, &(0x7f0000000e80)) mount$nfs4(&(0x7f0000000580)='/dev/bsg/2:0:0:0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0xac402c, &(0x7f0000000ec0)={[{'$%L,'}, {}, {'}'}, {}, {'.]-\\['}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@pcr={'pcr', 0x3d, 0x14}}, {@appraise_type}, {@uid_eq={'uid', 0x3d, r5}}, {@uid_lt={'uid<', r6}}, {@fowner_gt={'fowner>', r7}}, {@subj_role={'subj_role', 0x3d, '\xd7u7\x8f\xd1\xf8|\x87Y\x19b\x02\x0eb\xc1\xe3\xddy4HL\xe2F\xc36\x1f.u\x1b2\xe9\xd2\xfcY\xc4\xa76M\xb0\xd9\x19.\xba\xed2\x83\x00'/57}}, {@audit}, {@subj_role={'subj_role', 0x3d, '/lev/uh\x85\x91\x00L\xe6A\x05mh\xa6A\xa7\xa3\x06\xbb\xf9\x8dJ\xbd \xc0\x9a\x95\xe9\x8cJ\xdc\xc7\x16\xc8\xaa\x02\xfe\x834\xf0\xd2#x\xac!l\x7fk\x19J\x17[k\xd3\x15\x85\xa9\x93$\xc0^@\xae$\xfb\xf6\xe3q'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}) ioctl$int_in(r4, 0x5421, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000640)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x14, 0x3, 0x1b1c, 0xc10, 0x0, 0x0, "05010900a101150026ff007508951009008102c0"}}, 0x12c) r8 = openat$bsg(0xffffff9c, &(0x7f0000000080)='/dev/bsg/2:0:0:0\x00', 0x44002, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r8, 0x2288, &(0x7f00000000c0)) write$UHID_INPUT2(r0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0c0000001300d4977745264d5d6353421a79461b7d957d37ecb40e0f143aa952244c1d4a1c605a01d0a57fe9ab13b1b31927366301f2dd9b558ef764d1f72fe0ea6db6edd098b2d6584fd53809ba62c1c67402629584eaf0fe6f5b87d3539470453609360854069ef282902851955560c3be20f3f759c9acefb567b1e44c9ed3deb510ecb0bc"], 0x19) 1.950593616s ago: executing program 2 (id=141): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000000c0)=0x4) syz_io_uring_setup(0xbdc, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x324) 1.950400894s ago: executing program 3 (id=142): r0 = openat$bsg(0xffffff9c, &(0x7f0000000040)='/dev/bsg/0:0:0:0\x00', 0x0, 0x0) ioctl$BSG_IO(r0, 0x2285, &(0x7f0000000140)={0x51, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfff, 0xc, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x7ffe, 0x30, 0x0, 0x10008}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}]}, 0x38}}, 0x0) r2 = dup(r0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r2, 0xc0207511, &(0x7f0000000200)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) syz_open_procfs$namespace(r3, &(0x7f0000000280)='ns/pid_for_children\x00') setsockopt$inet6_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "d67a721287066477", "d2b709031f2fc475b301cc0e2ba6ad6bc28a29d4b4a5c076805e4a3cf74c09c1", 't=V`', "b8926de9e2738715"}, 0x38) 1.83014505s ago: executing program 4 (id=143): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) openat$vnet(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/hid_cougar/parameters/g6_is_space\x00', 0x2, 0x0) write(r2, &(0x7f0000000040)='1\n', 0x2) close(r2) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r2, 0x7ac, &(0x7f0000000680)={&(0x7f0000000240)={{@hyper, 0xfff}, {@hyper, 0x8cb}, 0x400, "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"}, 0x418, 0x9}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="000100000000000000ff1400c9004589001400660008606c907800000000ffffffff"], 0x22) 1.391096518s ago: executing program 4 (id=144): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa000, 0x0) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00') connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002f00)=[{{0x0, 0x2f, 0x0}, 0xff}], 0x1, 0x100, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) setgroups(0x41b7, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0]) fsetxattr$security_ima(r0, &(0x7f0000000000), &(0x7f0000000080)=@ng={0x4, 0xc, "ef7c4b2e6360f09f4e80e166273b"}, 0x10, 0x4) r4 = openat$rnull_attr(0xffffff9c, &(0x7f00000000c0)={'/sys/kernel/config/rnull/syzrnull', 0x0, '/rotational\x00'}, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000002c0)={0x8, 0x81, 0x0, 0xfffffff8, 0x10000}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) 1.201426113s ago: executing program 3 (id=145): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x7, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0xa, 0x2}, {0x2, 0x2}, {0xf, 0x2}, {0x0, 0x4}, {0xc, 0x4}, {0x6, 0x4}, {0xc, 0x4}]}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x2}, @enum64={0xd, 0x1, 0x0, 0x13, 0x1, 0x1, [{0xc, 0x3, 0xbfa}]}]}, {0x0, [0x2e, 0x5f, 0x5f, 0x5f, 0x5f]}}, &(0x7f0000000180)=""/113, 0x87, 0x71, 0x0, 0xc}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x18) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/packet\x00') socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) pread64(r0, &(0x7f00000006c0)=""/102377, 0x18fe9, 0xfff) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff, 0xffffffff, 0x2000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_misc(r2, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x42, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7eb0000e60080b8785d00ffffffffff00000000d600", "0809e8dbe108598948224ad55f81cd90177d2d458dd4992861ac000000000000000000000000000000000000000000001a00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x80000000006, 0x6]}}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000540)=[{0x6, 0x7, 0xfe, 0x7fff0004}]}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000019b40)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000019b80)={0x11, 0x2, r5, 0x1, 0x7, 0x6, @local}, 0x14) bind$packet(r4, &(0x7f0000019bc0)={0x11, 0x4, r5, 0x1, 0x3, 0x6, @remote}, 0x14) syz_emit_ethernet(0x22, &(0x7f0000019c00)=ANY=[], 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f00000003c0)={0x28, 0x0, 0x2710}, 0x10) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000019a00)=ANY=[@ANYBLOB="140dde106a3b8f3d35b121f45b000000009c782c9024d4c4ef5e95c2a64314888c3ad22997ac39e52d59d37774936e9a2b9a865b4162a25282de71534e39a1f2d258e1813717f70ca9c3bd138449a24ca609a1512d88fc5ea0d2abf9fcf46ed01fe1531acd0f9e66a1e0f3e7d888fd346b86cf4010dcdbde2d2aa35b22a06a6ba5a37c88b823ace6d940b93c789db3e35d452229eddc5013a7f9dd484d"], 0x14}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000196c0)=ANY=[@ANYBLOB="0f00000004000000040000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000600)={0x3, &(0x7f0000019ac0)=[{0x20, 0xc, 0x77, 0xfffff00c}, {0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r9, &(0x7f0000019b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x804) bpf$PROG_LOAD(0x5, &(0x7f0000019740)={0x1e, 0x11, &(0x7f0000019800)=ANY=[@ANYBLOB="bf16000000000000620afcff3f000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f00000198c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000019900)=[r8], 0x0, 0x0}, 0x94) 1.050515957s ago: executing program 2 (id=146): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000000), 0x0) close(r0) r1 = openat$nsim_new_device(0xffffff9c, &(0x7f0000000480), 0x1, 0x0) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x9, 0x0, 0x3, 0xa308, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000400)={{r3}, 0x6, 0xffffffffffffffff, 0xfffffffffffffe01}) openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x40000000040201, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000440)={'wlan1\x00', @random="0300"}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$P9_RREADDIR(r6, &(0x7f0000000280)={0xc5, 0x29, 0x2, {0x0, [{{0x80, 0x4, 0x7}, 0x3, 0x1, 0x7, './file0'}, {{0x80, 0x0, 0x2}, 0xfffffffffffffffd, 0xb, 0x7, './file0'}, {{0x80, 0x1, 0x3}, 0x1000, 0x0, 0x7, './file0'}, {{0x2, 0x2, 0x6}, 0xf, 0x5, 0x7, './file0'}, {{0x0, 0x0, 0x2}, 0xffff, 0x4, 0x7, './file0'}, {{0x40, 0x3, 0x1}, 0x6cd, 0x7, 0x7, './file0'}]}}, 0xc5) r7 = syz_io_uring_setup(0x34b9, &(0x7f0000000040)={0x0, 0xe5f7, 0x400, 0x5, 0x351, 0x0, r6}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0x9, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r7, 0x1, 0x1, 0x1, 0x0, 0x0) 1.050225439s ago: executing program 3 (id=147): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32, @ANYBLOB="01000000000000001c0012000c00"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) 1.020502326s ago: executing program 2 (id=148): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0xffffffffffffffc6, 0x1, 0x0, 0x0, {{0xb}, {0x8, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080002"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000006c0)={0x1, 0x0, [{0x93d, 0x0, 0x7ee69d08}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f00000007c0)={0x1c0003, 0x0, {[0xfffffffffffffff9, 0x3, 0x653, 0x49, 0xf8ce, 0xfffffffffffffffd, 0x7, 0x3]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000640)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000680)="09000000010001", 0x178) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x30040) openat$procfs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/asound/seq/clients\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x4, 0x8}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r5, 0x0, 0x20040040) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) pipe(0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 948.604225ms ago: executing program 3 (id=149): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mydev\x00', &(0x7f0000000080)='aufs\x00', 0xc0000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mydev/ttyS0\x00', 0x2, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x200002, 0x200003, 0x803, 0x4, 0x7}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000640)={0x1, 0x4, 0x1000, 0x8, 0x18, "ed9c52dafcfd9751b42cd3345e86d0a04e5fa4"}) 948.290447ms ago: executing program 3 (id=150): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0xb5, &(0x7f0000000240)=""/181, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000400)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000500), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x2) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac-aes-ce\x00'}, 0x58) (async) recvmmsg(r1, &(0x7f0000000600), 0x10106, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mount(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='devpts\x00', 0x38130d1, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000006c0)={0x1, &(0x7f0000000700)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) (async) sched_getaffinity(r0, 0x8, &(0x7f0000000740)) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x404, &(0x7f0000000880)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f0000000e40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000002e80)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) (async) statx(0xffffffffffffff9c, &(0x7f0000002f00)='./file0/file1\x00', 0x1000, 0x100, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002f40)='./file0/file0\x00', 0x0, 0x0) (async) syz_fuse_handle_req(r4, &(0x7f0000002f80)="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", 0x2000, &(0x7f0000004f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005000)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x4000, 0x3c3, r6, r7, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 405.029004ms ago: executing program 4 (id=151): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000700)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000740)={0x2, 0x0, @multicast2}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ftruncate(r1, 0x4) sendfile(r0, r1, 0x0, 0x10) 396.601419ms ago: executing program 4 (id=152): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x40000017, r1, 0x0) read(r2, 0x0, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000380)="87", 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x5, 0x1f6, &(0x7f0000000240)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000300), 0x1}, 0x6d) 261.097221ms ago: executing program 4 (id=153): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$DM_DEV_RENAME(r0, 0xc138fd05, &(0x7f0000001240)={0x4, 0x0, 0x0, 0x1c0, 0x138, 0x0, 0x0, 0x2c001, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, @uuid={'LVM-syz', 0x0, '3\x00'}}) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000240)={0x4, 0x0, 0x40000000, 0x1c0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}, [@crypt={0x0, 0x2000, 0x0, 0x88, 'crypt\x00', {'aes-xts-plain64', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, '0', 0x20, {@ram={'/dev/ram', 0x1}, 0x20, '0'}}}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040004) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)='0', 0x1) mknodat$dm(0xffffffffffffff9c, 0x0, 0x6180, r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000001180)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) listen(r5, 0xfffffffc) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f00000011c0)={0x2, 0x4e22, @local}, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000001200)={0x2, 0x4e22, @local}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) r8 = openat$dm_dev(0xffffffffffffff9c, &(0x7f0000000500)='./dm0\x00', 0x2, 0x0) open(&(0x7f0000000f40)='./sys\x00', 0x0, 0x101) ioctl$DM_DEV_RENAME(r0, 0xc138fd05, &(0x7f0000000540)={0x4, 0x0, 0x0, 0x1c0, 0x138, 0x0, 0x0, 0x80410, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}, @uuid={'LVM-syz', 0x0, '3\x00'}}) setns(0xc9, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14001f0000000000000a00"/20], 0x14}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)=@nat={'nat\x00', 0x1b, 0x5, 0x618, 0x270, 0x270, 0xffffffff, 0x0, 0x0, 0x580, 0x580, 0xffffffff, 0x580, 0x580, 0x5, &(0x7f0000000700), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff000000, 0xffffffff], [0x0, 0xff, 0x0, 0xffffffff], 'veth1_macvtap\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x0, 0x2, 0x5, 0x8}, 0x0, 0x10c, 0x154, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'nicvf0\x00', 'veth0_to_hsr\x00', 0x4, 0x0, 0x0, 0x2, 0x8001, 0x57, {0x2}, {0x8000}}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xd, @ipv4=@private=0xa010101, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @port=0x4e23, @gre_key=0x401}}}, {{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0xb, @ipv6=@mcast2, @ipv6=@dev={0xfe, 0x80, '\x00', 0x30}, @icmp_id=0x67, @gre_key=0x4}}}, {{@ipv6={@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff, 0xff, 0xff000000], [0xffffffff, 0xffffffff, 0x0, 0xffffff80], 'bridge_slave_1\x00', 'syz_tun\x00', {0x8f67c6fe61e2ee28}, {}, 0x89, 0xa, 0x1, 0x10}, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe9abad6314825880, @ipv6=@private0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x68, @gre_key=0x8d0e}}}, {{@uncond, 0x0, 0x1dc, 0x224, 0x0, {}, [@common=@rt={{0x138}, {0x5, [0xfffffffb, 0x3], 0x1, 0x20, 0x0, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @empty, @local, @loopback, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, @empty, @ipv4={'\x00', '\xff\xff', @empty}, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}], 0x6}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv4=@multicast1, @ipv6=@empty, @gre_key=0xfbff, @port=0x4e23}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x674) fcntl$getown(r8, 0x9) 179.676592ms ago: executing program 4 (id=154): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) syz_usb_connect(0x0, 0x32, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff000000070581020002"], 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0x9}}}, 0xd) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010ef17476000000000000109022400010000a00209040005020300840009210000400122180009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x5000) prlimit64(0x0, 0xe, &(0x7f0000001800)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001840)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000001880)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000018c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000001900), 0x0, 0x0) read$msr(r4, &(0x7f0000001940)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f000001a940)='./sys\x00', 0x1ef) mount(0x0, &(0x7f000001a980)='./sys\x00', &(0x7f000001a9c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f000001aa00)='./sys/class/net/bond0/bonding/arp_validate\x00', 0x1, 0x0) write(r5, &(0x7f000001aa40)="114587", 0x3) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f000001aa80)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x3, 0x1}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f000001aac0)={0x0, 0x0, &(0x7f000001ab00)={&(0x7f000001ab40)=@newlink={0x30, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x4}}}]}, 0x30}}, 0x4) 0s ago: executing program 2 (id=155): syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x2006, 0x118, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x5, "", [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xbd, 0x0, 0xfc}}}}}]}}]}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r1 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc2c45513, &(0x7f0000000300)={{0xa, 0x6, 0x9, 0x2, '\x00', 0x9}, 0x0, [0x9, 0x7, 0x1, 0x5, 0x3, 0x4, 0x7, 0x400, 0xff, 0x6, 0xfffffffc, 0x401, 0xef, 0x5, 0xdf, 0x0, 0xde1, 0x1e13e124, 0x7fff, 0x7, 0x2, 0x5, 0x0, 0x2d1, 0x45ba, 0x8, 0xf, 0x4, 0x4, 0x1, 0x2, 0x4, 0x0, 0x6, 0x200, 0x7f, 0x3, 0x400, 0xdf91, 0x8, 0x9, 0x7f, 0x0, 0xfff, 0x6, 0xffffffff, 0xd5b, 0x4, 0x3, 0xfffffff8, 0x8, 0x80000001, 0x29, 0xdf, 0xffff, 0x101, 0x2, 0x0, 0xbc, 0x800, 0x3, 0x5, 0x8, 0x1, 0xfffffffb, 0x5512, 0x1, 0x4, 0x4, 0x5, 0x7fff, 0x9, 0x8, 0x9, 0x7, 0x4b60ef72, 0x2, 0x0, 0x0, 0x80000001, 0x3fe, 0x2, 0x4, 0x88e, 0x1, 0x3, 0x7, 0x0, 0x8, 0xc3, 0x8000, 0x7fff, 0x7, 0x4, 0x3, 0x5, 0x3e5c245, 0xb2, 0x2, 0x7, 0x0, 0x2, 0xffff, 0x1, 0x1, 0x7, 0xb7, 0x8, 0x3, 0x1, 0x1, 0x28, 0x0, 0x8, 0x5, 0x2, 0x1, 0x4, 0xd, 0x5, 0x7ff, 0x5, 0x2, 0x1, 0x2, 0x80000001, 0x400, 0x80000001]}) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000180), &(0x7f0000000200)={'L+', 0x200}, 0x16, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kernel/parameters/panic_on_warn\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='0\n', 0x2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x121002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./dev_mnt\x00', &(0x7f0000000680)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./dev_mnt/ubi0\x00', 0x2, 0x0) r6 = fsopen(&(0x7f0000000700)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x83) r8 = openat(r7, &(0x7f0000000740)='.\x00', 0x0, 0xa2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000780)={0x0, r8}, 0x8) ioctl(r5, 0x40986f00, &(0x7f0000000700)) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f0000000280)={0xfffffffffffefffc, 0x4000c2}) 0s ago: executing program 3 (id=156): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffeffff}, 0x94) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000400)=r4, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=@newsa={0xec, 0x10, 0x1, 0xfffffffc, 0x0, {{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, {@in=@local, 0x1234, 0x6c}, @in6=@rand_addr=' \x01\x00', {0xffffffffffffefff, 0x966, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x3506, 0x2, 0x1}}, 0xec}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0xc, &(0x7f0000000800)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000880)={r7, 0x0, 0x0}, 0x10) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_COMMENT={0x9, 0x1a, 'test\x00'}]}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r8, &(0x7f0000000a80)={0xfc, {"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", 0x1000}}, 0x1006) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f0000001ac0)={0x7a2a, 0x9, 0x5a}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, 0x0, 0x0) sendmsg$inet_sctp(r9, &(0x7f0000001b00)={&(0x7f0000001b40)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001b80)=[{&(0x7f0000001bc0)="0c4a522d120d", 0x6}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) shutdown(r9, 0x1) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001cc0)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001d00)={0xd, 0x4, &(0x7f0000001dc0)=ANY=[@ANYBLOB="180000000001000000000000"], &(0x7f0000001e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) fgetxattr(r1, &(0x7f0000001e40)=ANY=[@ANYBLOB="6f73322ee7"], &(0x7f0000001e80)=""/209, 0xd1) mount$fuse(0x0, &(0x7f0000001f80)='./file0\x00', &(0x7f0000001fc0), 0x8001, &(0x7f0000002000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_emit_ethernet(0x3e, &(0x7f0000002080)=ANY=[@ANYBLOB="ffe5438b328007ab8a54873dabffffffffffaaaaaaaaaa000806450000300622000000019078ac1e0001ac1414aa03049078000100004500000000000000"], 0x0) kernel console output (not intermixed with test programs): [ 70.891641][ T855] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:62136' (ED25519) to the list of known hosts. [ 234.539669][ T5764] cgroup: Unknown subsys name 'net' [ 234.660465][ T5764] cgroup: Unknown subsys name 'cpuset' [ 234.664146][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 235.525322][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 239.606346][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 239.608421][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 239.611565][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 239.612221][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 239.612993][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 239.613456][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 239.615326][ T65] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 239.616244][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 239.617357][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 239.617734][ T65] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 239.618977][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 239.619752][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 239.620238][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 239.620448][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 239.620922][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 239.621823][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 239.626029][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 239.626238][ T5793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 239.626674][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 239.629669][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 239.834147][ T5778] rxe_eth0 speed is unknown, defaulting to 1000 [ 239.835180][ T5778] rxe_eth0 speed is unknown, defaulting to 1000 [ 239.835829][ T5778] rxe_eth0 speed is unknown, defaulting to 1000 [ 239.838804][ T5779] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 239.871560][ T5788] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 239.893143][ T5784] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 239.921680][ T5778] infiniband rxe0: set active [ 239.923970][ T5778] infiniband rxe0: added rxe_eth0 [ 239.930814][ T5778] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 239.930835][ T5778] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 239.930856][ T5778] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 239.939870][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 239.953037][ T5778] RDS/IB: rxe0: added [ 239.953149][ T5778] smc: adding ib device rxe0 with port count 1 [ 239.953181][ T5778] smc: ib device rxe0 port 1 has no pnetid [ 239.955906][ T1346] rxe_eth0 speed is unknown, defaulting to 1000 [ 239.974624][ T5778] rxe_eth0 speed is unknown, defaulting to 1000 [ 240.029240][ T41] rxe_eth0 speed is unknown, defaulting to 1000 [ 240.031718][ T1346] rxe_eth0 speed is unknown, defaulting to 1000 [ 240.064242][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 240.085620][ T5778] rxe_eth0 speed is unknown, defaulting to 1000 [ 240.135941][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.136312][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.136378][ T5779] bridge_slave_0: entered allmulticast mode [ 240.137270][ T5779] bridge_slave_0: entered promiscuous mode [ 240.150665][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.150712][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.150766][ T5779] bridge_slave_1: entered allmulticast mode [ 240.151466][ T5779] bridge_slave_1: entered promiscuous mode [ 240.176231][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.179902][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.202479][ T5778] rxe_eth0 speed is unknown, defaulting to 1000 [ 240.258805][ T5779] team0: Port device team_slave_0 added [ 240.260397][ T5779] team0: Port device team_slave_1 added [ 240.266459][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.266585][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.266670][ T5784] bridge_slave_0: entered allmulticast mode [ 240.267559][ T5784] bridge_slave_0: entered promiscuous mode [ 240.269027][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.269107][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.269192][ T5788] bridge_slave_0: entered allmulticast mode [ 240.270374][ T5788] bridge_slave_0: entered promiscuous mode [ 240.272020][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.272058][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.272114][ T5788] bridge_slave_1: entered allmulticast mode [ 240.272833][ T5788] bridge_slave_1: entered promiscuous mode [ 240.285309][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.285381][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.285464][ T5784] bridge_slave_1: entered allmulticast mode [ 240.286619][ T5784] bridge_slave_1: entered promiscuous mode [ 240.299778][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.299790][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.299803][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.301062][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.301071][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.301083][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.318842][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.326316][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.328048][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.331436][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.331465][ T5778] rxe_eth0 speed is unknown, defaulting to 1000 [ 240.362704][ T5779] hsr_slave_0: entered promiscuous mode [ 240.363200][ T5779] hsr_slave_1: entered promiscuous mode [ 240.364527][ T5784] team0: Port device team_slave_0 added [ 240.365785][ T5784] team0: Port device team_slave_1 added [ 240.366735][ T5788] team0: Port device team_slave_0 added [ 240.368559][ T5788] team0: Port device team_slave_1 added [ 240.401680][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.401695][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.401720][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.403270][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.403281][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.403300][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.405121][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.405132][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.405150][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.422660][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.422671][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.422685][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.486027][ T5784] hsr_slave_0: entered promiscuous mode [ 240.486739][ T5784] hsr_slave_1: entered promiscuous mode [ 240.487703][ T5784] debugfs: 'hsr0' already exists in 'hsr' [ 240.487771][ T5784] Cannot create hsr debugfs directory [ 240.500158][ T5788] hsr_slave_0: entered promiscuous mode [ 240.500636][ T5788] hsr_slave_1: entered promiscuous mode [ 240.501146][ T5788] debugfs: 'hsr0' already exists in 'hsr' [ 240.501157][ T5788] Cannot create hsr debugfs directory [ 240.699517][ T5779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 240.705701][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 240.706411][ T5779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 240.709550][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 240.709962][ T5779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 240.713463][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 240.719784][ T5779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 240.723564][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 240.777552][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 240.781981][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 240.782677][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 240.786970][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 240.811582][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.811652][ T5779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.812031][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.812076][ T5779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.814132][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 240.816786][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 240.842229][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 240.845267][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 240.869223][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.869268][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.869428][ T5778] bridge_slave_0: entered allmulticast mode [ 240.870193][ T5778] bridge_slave_0: entered promiscuous mode [ 240.883315][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.883480][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.883575][ T5778] bridge_slave_1: entered allmulticast mode [ 240.885170][ T5778] bridge_slave_1: entered promiscuous mode [ 240.915118][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.916685][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.921866][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.921991][ T5784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.922160][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.922235][ T5784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.924444][ T5788] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 240.926875][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 240.928100][ T5788] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 240.930794][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 240.943505][ T5788] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 240.945654][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 240.946073][ T5788] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 240.947743][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 240.953757][ T5778] team0: Port device team_slave_0 added [ 240.956890][ T5778] team0: Port device team_slave_1 added [ 240.989448][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.989459][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.989472][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.991704][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.991713][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.991726][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.026816][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.026957][ T5788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.027221][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.027307][ T5788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.037556][ T5778] hsr_slave_0: entered promiscuous mode [ 241.038080][ T5778] hsr_slave_1: entered promiscuous mode [ 241.038383][ T5778] debugfs: 'hsr0' already exists in 'hsr' [ 241.038396][ T5778] Cannot create hsr debugfs directory [ 241.055170][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.076569][ T222] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.080406][ T222] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.086173][ T222] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.087725][ T222] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.090233][ T222] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.093144][ T222] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.188143][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.197604][ T222] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.197659][ T222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.207393][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.209033][ T222] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.209076][ T222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.249340][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.261762][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.263417][ T582] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.263469][ T582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.278153][ T582] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.278198][ T582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.283795][ T5778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 241.286984][ T5778] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 241.287664][ T5778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 241.291680][ T5778] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 241.292220][ T5778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 241.294653][ T5778] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 241.296307][ T5778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 241.299756][ T5778] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 241.318188][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.332817][ T582] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.332862][ T582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.345294][ T582] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.345370][ T582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.400777][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.409974][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.414788][ T222] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.414831][ T222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.420757][ T222] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.420801][ T222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.551022][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.579432][ T5779] veth0_vlan: entered promiscuous mode [ 241.582847][ T5779] veth1_vlan: entered promiscuous mode [ 241.598715][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.606628][ T5779] veth0_macvtap: entered promiscuous mode [ 241.616049][ T5779] veth1_macvtap: entered promiscuous mode [ 241.635209][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.640573][ T5784] veth0_vlan: entered promiscuous mode [ 241.644231][ T5784] veth1_vlan: entered promiscuous mode [ 241.648248][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.658048][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.678526][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.684845][ T5788] veth0_vlan: entered promiscuous mode [ 241.687963][ T5099] Bluetooth: hci3: command tx timeout [ 241.687969][ T5789] Bluetooth: hci0: command tx timeout [ 241.688222][ T5099] Bluetooth: hci2: command tx timeout [ 241.688228][ T5789] Bluetooth: hci1: command tx timeout [ 241.692757][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.703016][ T5784] veth0_macvtap: entered promiscuous mode [ 241.705149][ T5788] veth1_vlan: entered promiscuous mode [ 241.705834][ T5784] veth1_macvtap: entered promiscuous mode [ 241.740976][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.752094][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.755531][ T5788] veth0_macvtap: entered promiscuous mode [ 241.756153][ T222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.756165][ T222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.775273][ T5788] veth1_macvtap: entered promiscuous mode [ 241.791175][ T5778] veth0_vlan: entered promiscuous mode [ 241.794036][ T222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.794098][ T222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.803813][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.816156][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.818731][ T5778] veth1_vlan: entered promiscuous mode [ 241.838071][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.838098][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.838117][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.867134][ T5779] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 241.871788][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.871801][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.878045][ T5779] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 241.882291][ T5778] veth0_macvtap: entered promiscuous mode [ 241.885186][ T5779] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 241.885776][ T5779] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 241.896182][ T5778] veth1_macvtap: entered promiscuous mode [ 241.902712][ T5779] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 241.912948][ T222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.912961][ T222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.930672][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.931092][ T222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.931104][ T222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.939298][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.947685][ T5890] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.947888][ T5890] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.948275][ T5890] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.973405][ T222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.973418][ T222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.983190][ T5940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 241.984744][ T5940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 242.007958][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.023248][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.023260][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.037425][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.037598][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.037620][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.037638][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.037656][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.037680][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.037698][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.037717][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.044465][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.044476][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.121958][ T5947] FAULT_INJECTION: forcing a failure. [ 242.121958][ T5947] name fail_futex, interval 1, probability 0, space 0, times 1 [ 242.121979][ T5947] CPU: 2 UID: 0 PID: 5947 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 242.121993][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 242.121999][ T5947] Call Trace: [ 242.122003][ T5947] [ 242.122008][ T5947] dump_stack_lvl+0x100/0x190 [ 242.122030][ T5947] should_fail_ex.cold+0x5/0xa [ 242.122045][ T5947] get_futex_key+0x1c9/0x13e0 [ 242.122058][ T5947] ? __pfx_get_futex_key+0x10/0x10 [ 242.122069][ T5947] ? ___sys_sendmsg+0x127/0x1e0 [ 242.122085][ T5947] futex_wake+0xf4/0x5e0 [ 242.122097][ T5947] ? futex_wait+0x11e/0x370 [ 242.122112][ T5947] ? __pfx_futex_wake+0x10/0x10 [ 242.122128][ T5947] ? find_held_lock+0x2b/0x80 [ 242.122143][ T5947] do_futex+0x2b2/0x440 [ 242.122156][ T5947] ? __pfx_do_futex+0x10/0x10 [ 242.122168][ T5947] ? fput+0x7c/0x100 [ 242.122185][ T5947] __ia32_sys_futex_time32+0x2f4/0x470 [ 242.122200][ T5947] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 242.122213][ T5947] ? __might_fault+0xc5/0x140 [ 242.122229][ T5947] __do_fast_syscall_32+0x14b/0x8c0 [ 242.122244][ T5947] ? lockdep_hardirqs_on+0x7d/0x110 [ 242.122259][ T5947] do_fast_syscall_32+0x32/0x70 [ 242.122273][ T5947] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 242.122287][ T5947] RIP: 0023:0xf7f64fbc [ 242.122296][ T5947] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 242.122306][ T5947] RSP: 002b:00000000f54165cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 242.122317][ T5947] RAX: ffffffffffffffda RBX: 00000000f7424f8c RCX: 0000000000000081 [ 242.122323][ T5947] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 242.122330][ T5947] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 242.122336][ T5947] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 242.122343][ T5947] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 242.122357][ T5947] [ 242.171850][ T5949] netlink: 3876 bytes leftover after parsing attributes in process `syz.1.2'. [ 242.218070][ T5951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'. [ 242.317822][ T1346] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 242.328891][ T5960] FAULT_INJECTION: forcing a failure. [ 242.328891][ T5960] name failslab, interval 1, probability 0, space 0, times 1 [ 242.328908][ T5960] CPU: 3 UID: 0 PID: 5960 Comm: syz.2.8 Not tainted syzkaller #0 PREEMPT(full) [ 242.328920][ T5960] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 242.328927][ T5960] Call Trace: [ 242.328931][ T5960] [ 242.328935][ T5960] dump_stack_lvl+0x100/0x190 [ 242.328954][ T5960] should_fail_ex.cold+0x5/0xa [ 242.328969][ T5960] should_failslab+0xc2/0x120 [ 242.328987][ T5960] __kmalloc_noprof+0xfc/0x840 [ 242.329004][ T5960] ? diag_fmt_alloc.isra.0+0x150/0x5b0 [ 242.329021][ T5960] diag_fmt_alloc.isra.0+0x150/0x5b0 [ 242.329039][ T5960] bpf_diag_vfmt+0x12e/0x170 [ 242.329055][ T5960] ? __pfx_bpf_diag_vfmt+0x10/0x10 [ 242.329072][ T5960] ? vsnprintf+0x4c5/0x1300 [ 242.329088][ T5960] bpf_diag_source+0x33e/0x1540 [ 242.329104][ T5960] ? __pfx_vsnprintf+0x10/0x10 [ 242.329122][ T5960] ? __pfx_bpf_diag_source+0x10/0x10 [ 242.329136][ T5960] ? bpf_verifier_vlog+0x19d/0x6d0 [ 242.329150][ T5960] ? diag_write+0x121/0x170 [ 242.329163][ T5960] ? __pfx_diag_write+0x10/0x10 [ 242.329176][ T5960] ? bpf_diag_header.part.0+0x110/0x140 [ 242.329190][ T5960] ? diag_vprint_indented+0x9d/0xe0 [ 242.329226][ T5960] ? kfree+0x22b/0x6d0 [ 242.329242][ T5960] bpf_diag_program_structure+0x200/0x290 [ 242.329261][ T5960] ? __pfx_bpf_diag_program_structure+0x10/0x10 [ 242.329278][ T5960] ? __pfx_verbose+0x10/0x10 [ 242.329292][ T5960] ? __pfx_cmp_subprogs+0x10/0x10 [ 242.329308][ T5960] ? bpf_find_containing_subprog+0x17f/0x1e0 [ 242.329328][ T5960] bpf_check+0x6243/0xac70 [ 242.329345][ T5960] ? __css_rstat_updated+0x1ce/0x590 [ 242.329366][ T5960] ? __lock_acquire+0x5c0/0x1f40 [ 242.329385][ T5960] ? __pfx___css_rstat_updated+0x10/0x10 [ 242.329423][ T5960] ? __pfx_bpf_check+0x10/0x10 [ 242.329449][ T5960] ? lock_acquire+0x1d1/0x380 [ 242.329470][ T5960] ? bpf_prog_load+0x1a22/0x2ab0 [ 242.329488][ T5960] ? find_held_lock+0x2b/0x80 [ 242.329504][ T5960] ? bpf_prog_load+0x1a22/0x2ab0 [ 242.329523][ T5960] ? __asan_memset+0x23/0x50 [ 242.329539][ T5960] ? bpf_prog_load+0x1adc/0x2ab0 [ 242.329556][ T5960] bpf_prog_load+0x1adc/0x2ab0 [ 242.329576][ T5960] ? __pfx_bpf_prog_load+0x10/0x10 [ 242.329591][ T5960] ? lock_acquire+0x1d1/0x380 [ 242.329619][ T5960] __sys_bpf+0x1f46/0x4a30 [ 242.329635][ T5960] ? __pfx___sys_bpf+0x10/0x10 [ 242.329647][ T5960] ? find_held_lock+0x2b/0x80 [ 242.329658][ T5960] ? futex_wake+0x4ea/0x5e0 [ 242.329681][ T5960] ? rcu_read_lock_any_held+0x6a/0x90 [ 242.329693][ T5960] ? find_held_lock+0x2b/0x80 [ 242.329704][ T5960] ? ksys_write+0x190/0x250 [ 242.329717][ T5960] ? ksys_write+0x190/0x250 [ 242.329731][ T5960] ? populate_seccomp_data+0x225/0x4d0 [ 242.329752][ T5960] ? find_held_lock+0x2b/0x80 [ 242.329765][ T5960] ? __ia32_sys_bpf+0xcc/0x170 [ 242.329776][ T5960] __ia32_sys_bpf+0xcc/0x170 [ 242.329789][ T5960] ? __seccomp_permit_syscall+0x1e7/0x2d0 [ 242.329803][ T5960] __do_fast_syscall_32+0x14b/0x8c0 [ 242.329817][ T5960] ? lockdep_hardirqs_on+0x7d/0x110 [ 242.329831][ T5960] do_fast_syscall_32+0x32/0x70 [ 242.329846][ T5960] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 242.329859][ T5960] RIP: 0023:0xf747efbc [ 242.329869][ T5960] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 242.329879][ T5960] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 242.329890][ T5960] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000480 [ 242.329897][ T5960] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 242.329903][ T5960] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 242.329910][ T5960] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 242.329917][ T5960] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 242.329932][ T5960] [ 242.345936][ T5960] Process accounting resumed [ 242.390215][ T5965] netlink: 'syz.2.10': attribute type 1 has an invalid length. [ 242.425437][ T5965] bond1 (unregistering): Released all slaves [ 242.472379][ T5967] bond1 (unregistering): Released all slaves [ 242.499641][ T1346] usb 8-1: not running at top speed; connect to a high speed hub [ 242.499662][ T1346] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 242.500452][ T1346] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.500476][ T1346] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 242.500488][ T1346] usb 8-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 242.500508][ T1346] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.506016][ T1346] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 242.525171][ T1346] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 242.543952][ T1346] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 242.544647][ T1346] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 242.589432][ T1346] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 242.847719][ T5945] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 243.610360][ T10] usb 8-1: USB disconnect, device number 2 [ 243.627244][ T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 243.643422][ T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 243.643906][ T10] keyspan 8-1:1.0: device disconnected [ 243.767688][ T5789] Bluetooth: hci3: command tx timeout [ 243.767712][ T5789] Bluetooth: hci1: command tx timeout [ 243.767723][ T5789] Bluetooth: hci0: command tx timeout [ 243.767801][ T5791] Bluetooth: hci2: command tx timeout [ 244.467220][ T5877] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 244.628660][ T5877] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 244.629638][ T5877] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 244.629661][ T5877] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 244.629679][ T5877] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 244.631936][ T5877] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.631955][ T5877] usb 7-1: Product: syz [ 244.631966][ T5877] usb 7-1: Manufacturer: syz [ 244.631983][ T5877] usb 7-1: SerialNumber: syz [ 244.633972][ T5877] usb 7-1: config 0 descriptor?? [ 244.906955][ T5877] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 245.118889][ T6004] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint [ 245.126940][ T6004] pci 0000:00:00.0: Adding to iommu group 0 [ 245.847623][ T5099] Bluetooth: hci0: command tx timeout [ 245.847657][ T5099] Bluetooth: hci3: command tx timeout [ 245.847722][ T5791] Bluetooth: hci2: command tx timeout [ 245.847736][ T5789] Bluetooth: hci1: command tx timeout [ 246.316459][ T6013] jffs2: notice: (6013) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 247.928797][ T5789] Bluetooth: hci1: command tx timeout [ 247.928821][ T5789] Bluetooth: hci0: command tx timeout [ 247.929397][ T5789] Bluetooth: hci2: command tx timeout [ 247.929627][ T5789] Bluetooth: hci3: command tx timeout [ 248.056221][ T6032] MTD: Couldn't look up '/dev/syzrnull0': -2 [ 248.072713][ T6032] process 'syz.0.25' launched './file1' with NULL argv: empty string added [ 248.166274][ T24] usb 7-1: USB disconnect, device number 2 [ 248.533889][ T6037] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 249.261174][ T6057] rxe_eth0 speed is unknown, defaulting to 1000 [ 249.369009][ T42] audit: type=1326 audit(1792713241.268:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.3.33" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fbc code=0x7ffc0000 [ 249.369042][ T42] audit: type=1326 audit(1792713241.268:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.3.33" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fbc code=0x7ffc0000 [ 249.370572][ T42] audit: type=1326 audit(1792713241.268:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.3.33" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f76fbc code=0x7ffc0000 [ 249.370914][ T42] audit: type=1326 audit(1792713241.268:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.3.33" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fbc code=0x7ffc0000 [ 249.371265][ T42] audit: type=1326 audit(1792713241.268:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.3.33" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fbc code=0x7ffc0000 [ 249.371356][ T42] audit: type=1326 audit(1792713241.268:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.3.33" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f76fbc code=0x7ffc0000 [ 249.371489][ T42] audit: type=1326 audit(1792713241.268:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.3.33" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fbc code=0x7ffc0000 [ 249.371573][ T42] audit: type=1326 audit(1792713241.268:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.3.33" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fbc code=0x7ffc0000 [ 249.372041][ T42] audit: type=1326 audit(1792713241.268:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.3.33" exe="/syz-executor" sig=0 arch=40000003 syscall=334 compat=1 ip=0xf7f76fbc code=0x7ffc0000 [ 249.372134][ T42] audit: type=1326 audit(1792713241.268:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.3.33" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fbc code=0x7ffc0000 [ 249.552899][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 249.581521][ T6068] warning: `syz.2.36' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 249.681424][ T6073] FAULT_INJECTION: forcing a failure. [ 249.681424][ T6073] name failslab, interval 1, probability 0, space 0, times 0 [ 249.681450][ T6073] CPU: 3 UID: 0 PID: 6073 Comm: syz.3.38 Not tainted syzkaller #0 PREEMPT(full) [ 249.681464][ T6073] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 249.681470][ T6073] Call Trace: [ 249.681474][ T6073] [ 249.681478][ T6073] dump_stack_lvl+0x100/0x190 [ 249.681498][ T6073] should_fail_ex.cold+0x5/0xa [ 249.681512][ T6073] should_failslab+0xc2/0x120 [ 249.681529][ T6073] __kmalloc_noprof+0xfc/0x840 [ 249.681543][ T6073] ? rcu_is_watching+0x13/0xc0 [ 249.681556][ T6073] ? tomoyo_realpath_from_path+0xb6/0x690 [ 249.681576][ T6073] tomoyo_realpath_from_path+0xb6/0x690 [ 249.681595][ T6073] tomoyo_check_open_permission+0x2af/0x3c0 [ 249.681611][ T6073] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 249.681629][ T6073] ? hook_file_open+0x248/0x8e0 [ 249.681657][ T6073] tomoyo_file_open+0x6b/0x90 [ 249.681669][ T6073] security_file_open+0xb5/0x1e0 [ 249.681683][ T6073] do_dentry_open+0x552/0x1470 [ 249.681701][ T6073] vfs_open_consume+0xcc/0x460 [ 249.681714][ T6073] path_openat+0x1547/0x23f0 [ 249.681731][ T6073] ? __pfx_path_openat+0x10/0x10 [ 249.681750][ T6073] do_file_open+0x20e/0x430 [ 249.681766][ T6073] ? __pfx_do_file_open+0x10/0x10 [ 249.681791][ T6073] ? _raw_spin_unlock+0x28/0x50 [ 249.681802][ T6073] ? alloc_fd+0x471/0x7a0 [ 249.681821][ T6073] do_sys_openat2+0x163/0x1d0 [ 249.681822][ T6074] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.35'. [ 249.681831][ T6073] ? __pfx_do_sys_openat2+0x10/0x10 [ 249.681844][ T6073] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 249.681859][ T6073] __ia32_compat_sys_openat+0x12d/0x210 [ 249.681887][ T6073] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 249.681906][ T6073] do_int80_emulation+0x166/0x650 [ 249.681924][ T6073] asm_int80_emulation+0x1a/0x20 [ 249.681936][ T6073] RIP: 0023:0xf71677ab [ 249.681946][ T6073] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 249.681956][ T6073] RSP: 002b:00000000f542603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 249.681968][ T6073] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5426100 [ 249.681976][ T6073] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 249.681982][ T6073] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 249.681988][ T6073] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 249.681994][ T6073] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 249.682009][ T6073] [ 249.682014][ T6073] ERROR: Out of memory at tomoyo_realpath_from_path. [ 249.682240][ T6066] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.35'. [ 249.682443][ T6069] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.35'. [ 249.720084][ T24] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 249.722528][ T24] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 249.722541][ T24] usb 6-1: config 0 has no interface number 0 [ 249.722559][ T24] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 249.724060][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.724072][ T24] usb 6-1: Product: syz [ 249.724079][ T24] usb 6-1: Manufacturer: syz [ 249.724086][ T24] usb 6-1: SerialNumber: syz [ 249.727896][ T24] usb 6-1: config 0 descriptor?? [ 249.734068][ T24] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 250.035665][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.091211][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.159772][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.174147][ T5789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 250.175023][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 250.175380][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 250.175826][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 250.176335][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 250.255064][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.372487][ T6098] jffs2: notice: (6098) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 250.411864][ T6088] rxe_eth0 speed is unknown, defaulting to 1000 [ 250.431642][ T12] bridge_slave_1: left allmulticast mode [ 250.431667][ T12] bridge_slave_1: left promiscuous mode [ 250.432257][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.449887][ T12] bridge_slave_0: left allmulticast mode [ 250.449905][ T12] bridge_slave_0: left promiscuous mode [ 250.450744][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.547313][ C2] usb 6-1: yurex_control_callback - control failed: -71 [ 250.550454][ T10] usb 6-1: USB disconnect, device number 2 [ 250.557301][ T10] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 250.929706][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.932385][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.934024][ T12] bond0 (unregistering): Released all slaves [ 251.359184][ T6111] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 251.548350][ T5452] 8021q: adding VLAN 0 to HW filter on device eth2 [ 251.551918][ T6088] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.552001][ T6088] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.552097][ T6088] bridge_slave_0: entered allmulticast mode [ 251.554273][ T6088] bridge_slave_0: entered promiscuous mode [ 251.559502][ T6088] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.559737][ T6088] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.559803][ T6088] bridge_slave_1: entered allmulticast mode [ 251.560724][ T6088] bridge_slave_1: entered promiscuous mode [ 251.717324][ T6088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.721905][ T6088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.752171][ T6088] team0: Port device team_slave_0 added [ 251.796507][ T12] hsr_slave_0: left promiscuous mode [ 251.798461][ T12] hsr_slave_1: left promiscuous mode [ 251.798952][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.798981][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.800702][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.800713][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.818254][ T12] veth1_macvtap: left promiscuous mode [ 251.818583][ T12] veth0_macvtap: left promiscuous mode [ 251.818719][ T12] veth1_vlan: left promiscuous mode [ 251.818800][ T12] veth0_vlan: left promiscuous mode [ 251.928373][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 251.994469][ T12] team0 (unregistering): Port device team_slave_1 removed [ 252.001312][ T12] team0 (unregistering): Port device team_slave_0 removed [ 252.060597][ T6088] team0: Port device team_slave_1 added [ 252.066524][ T5452] 8021q: adding VLAN 0 to HW filter on device eth3 [ 252.078246][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 252.080696][ T10] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 252.082420][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 252.082439][ T10] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 252.082459][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 252.082472][ T10] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 252.082484][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 252.082496][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 252.082509][ T10] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 252.082523][ T10] usb 6-1: config 168 interface 0 has no altsetting 0 [ 252.086341][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 252.086361][ T10] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 252.086380][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 252.086394][ T10] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 252.086406][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 252.086418][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 252.086431][ T10] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 252.086444][ T10] usb 6-1: config 168 interface 0 has no altsetting 0 [ 252.087621][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 252.087637][ T10] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 252.087657][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 252.087670][ T10] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 252.087683][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 252.087942][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 252.088020][ T10] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 252.088084][ T10] usb 6-1: config 168 interface 0 has no altsetting 0 [ 252.091362][ T10] usb 6-1: string descriptor 0 read error: -22 [ 252.091420][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.101705][ T6088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.101714][ T6088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.101727][ T6088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.105345][ T6088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.105354][ T6088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.105367][ T6088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.112544][ T10] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 252.119508][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 252.160167][ T6088] hsr_slave_0: entered promiscuous mode [ 252.160675][ T6088] hsr_slave_1: entered promiscuous mode [ 252.162771][ T6088] debugfs: 'hsr0' already exists in 'hsr' [ 252.162786][ T6088] Cannot create hsr debugfs directory [ 252.247286][ T5791] Bluetooth: hci3: command tx timeout [ 252.406439][ T6151] capability: warning: `syz.3.52' uses deprecated v2 capabilities in a way that may be insecure [ 252.413777][ T34] usb 6-1: USB disconnect, device number 3 [ 252.421205][ T6150] syzkaller0: entered promiscuous mode [ 252.421218][ T6150] syzkaller0: entered allmulticast mode [ 252.429036][ T6088] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 252.437710][ T6088] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 252.440928][ T6088] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 252.444626][ T6088] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 252.445545][ T6088] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 252.457902][ T6088] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 252.458393][ T6088] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 252.463100][ T6088] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 252.589470][ T6088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.610141][ T6088] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.613577][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.613623][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.621887][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.621933][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.692301][ T5452] 8021q: adding VLAN 0 to HW filter on device eth4 [ 252.898155][ T5452] 8021q: adding VLAN 0 to HW filter on device eth5 [ 252.951971][ T6088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.151387][ T6088] veth0_vlan: entered promiscuous mode [ 253.154852][ T6088] veth1_vlan: entered promiscuous mode [ 253.195111][ T6088] veth0_macvtap: entered promiscuous mode [ 253.199783][ T6088] veth1_macvtap: entered promiscuous mode [ 253.207824][ T6088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.211768][ T6088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.737804][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.737846][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.737873][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.737900][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.810800][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.811541][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.812838][ T222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.812886][ T222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.911177][ T6216] FAULT_INJECTION: forcing a failure. [ 253.911177][ T6216] name failslab, interval 1, probability 0, space 0, times 0 [ 253.911212][ T6216] CPU: 1 UID: 0 PID: 6216 Comm: syz.1.60 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.911229][ T6216] Tainted: [L]=SOFTLOCKUP [ 253.911233][ T6216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 253.911240][ T6216] Call Trace: [ 253.911245][ T6216] [ 253.911251][ T6216] dump_stack_lvl+0x100/0x190 [ 253.911357][ T6216] should_fail_ex.cold+0x5/0xa [ 253.911382][ T6216] should_failslab+0xc2/0x120 [ 253.911427][ T6216] kmem_cache_alloc_noprof+0x92/0x6a0 [ 253.911442][ T6216] ? __proc_create+0xc1/0x8f0 [ 253.911461][ T6216] ? __proc_create+0x247/0x8f0 [ 253.911475][ T6216] __proc_create+0x247/0x8f0 [ 253.911487][ T6216] ? __pfx___proc_create+0x10/0x10 [ 253.911500][ T6216] ? _raw_write_unlock+0x28/0x50 [ 253.911600][ T6216] ? proc_register+0x56d/0x910 [ 253.911614][ T6216] proc_create_reg+0x75/0x170 [ 253.911629][ T6216] proc_create_data+0x86/0x110 [ 253.911643][ T6216] ? __pfx_proc_create_data+0x10/0x10 [ 253.911656][ T6216] ? cache_register_net+0x137/0x5e0 [ 253.911760][ T6216] ? cache_register_net+0x137/0x5e0 [ 253.911780][ T6216] cache_register_net+0x2d6/0x5e0 [ 253.911799][ T6216] nfsd_idmap_init+0xb6/0x250 [ 253.911823][ T6216] ? __pfx_nfsd_net_init+0x10/0x10 [ 253.911839][ T6216] nfsd_net_init+0x85/0x480 [ 253.911856][ T6216] ? __pfx_nfsd_net_init+0x10/0x10 [ 253.911871][ T6216] ops_init+0x1e2/0x5f0 [ 253.911924][ T6216] setup_net+0x118/0x3a0 [ 253.911937][ T6216] ? __pfx_setup_net+0x10/0x10 [ 253.911949][ T6216] ? bpf_lsm_namespace_init+0x9/0x10 [ 253.911966][ T6216] copy_net_ns+0x340/0x7a0 [ 253.911981][ T6216] create_new_namespaces+0x3ea/0xac0 [ 253.912006][ T6216] unshare_nsproxy_namespaces+0xf6/0x210 [ 253.912022][ T6216] ksys_unshare+0x44f/0x980 [ 253.912040][ T6216] ? __pfx_ksys_unshare+0x10/0x10 [ 253.912059][ T6216] ? __might_fault+0xc5/0x140 [ 253.912076][ T6216] __ia32_sys_unshare+0x30/0x40 [ 253.912095][ T6216] __do_fast_syscall_32+0x14b/0x8c0 [ 253.912119][ T6216] do_fast_syscall_32+0x32/0x70 [ 253.912134][ T6216] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 253.912149][ T6216] RIP: 0023:0xf7f26fbc [ 253.912159][ T6216] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 253.912169][ T6216] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 253.912188][ T6216] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 253.912194][ T6216] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 253.912200][ T6216] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 253.912206][ T6216] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 253.912212][ T6216] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 253.912226][ T6216] [ 253.998022][ T6221] netlink: 3876 bytes leftover after parsing attributes in process `syz.3.61'. [ 254.182628][ T6231] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0] [ 254.182642][ T6231] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 254.182650][ T6231] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 254.182656][ T6231] One or more global auth toks could not properly register; rc = [-22] [ 254.182679][ T6231] Error validating options; rc = [-22] [ 254.268699][ T6231] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.327243][ T5791] Bluetooth: hci3: command tx timeout [ 254.336305][ T6235] Zero length message leads to an empty skb [ 254.412779][ T6242] jffs2: notice: (6242) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 254.420238][ T6241] Need at least one configuration in g1. [ 254.420359][ T6241] udc dummy_udc.0: failed to start g1: -22 [ 254.420371][ T6241] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 254.422909][ T6241] UDC core: g1: couldn't find an available UDC or it's busy [ 254.533242][ T6247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.69'. [ 255.220348][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.220407][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.310334][ T6264] overlayfs: conflicting options: nfs_export=on,index=off [ 255.485542][ T6269] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 255.577191][ T5869] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 255.612619][ T855] libceph: connect (1)[c::]:6789 error -101 [ 255.612815][ T855] libceph: mon0 (1)[c::]:6789 connect error [ 255.619267][ T6280] FAULT_INJECTION: forcing a failure. [ 255.619267][ T6280] name failslab, interval 1, probability 0, space 0, times 0 [ 255.619288][ T6280] CPU: 1 UID: 0 PID: 6280 Comm: syz.1.78 Tainted: G L syzkaller #0 PREEMPT(full) [ 255.619305][ T6280] Tainted: [L]=SOFTLOCKUP [ 255.619309][ T6280] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 255.619315][ T6280] Call Trace: [ 255.619319][ T6280] [ 255.619325][ T6280] dump_stack_lvl+0x100/0x190 [ 255.619345][ T6280] should_fail_ex.cold+0x5/0xa [ 255.619359][ T6280] should_failslab+0xc2/0x120 [ 255.619378][ T6280] kmem_cache_alloc_noprof+0x92/0x6a0 [ 255.619393][ T6280] ? __asan_memcpy+0x3c/0x60 [ 255.619406][ T6280] ? __kernfs_new_node+0xd2/0xa10 [ 255.619420][ T6280] __kernfs_new_node+0xd2/0xa10 [ 255.619432][ T6280] ? __pfx___kernfs_new_node+0x10/0x10 [ 255.619445][ T6280] ? lock_acquire+0x1d1/0x380 [ 255.619459][ T6280] ? kernfs_root+0x23/0x2a0 [ 255.619485][ T6280] ? find_held_lock+0x2b/0x80 [ 255.619496][ T6280] ? kernfs_root+0xee/0x2a0 [ 255.619512][ T6280] ? kernfs_root+0xee/0x2a0 [ 255.619533][ T6280] kernfs_new_node+0x194/0x200 [ 255.619547][ T6280] ? __pfx_kernfs_new_node+0x10/0x10 [ 255.619559][ T6280] ? kernfs_create_link+0xe4/0x280 [ 255.619572][ T6280] ? kernfs_create_link+0xe4/0xqemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. 280 [ 255.619609][ T6280] kernfs_create_link+0x100/0x280 [ 255.619625][ T6280] sysfs_do_create_link_sd+0x90/0x140 [ 255.619643][ T6280] sysfs_create_link+0x61/0xc0 [ 255.619660][ T6280] device_add+0x675/0x1970 [ 255.619705][ T6280] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 255.619724][ T6280] ? __pfx_device_add+0x10/0x10 [ 255.619735][ T6280] ? lockdep_init_map_type+0x5c/0x250 [ 255.619752][ T6280] ? __init_waitqueue_head+0xca/0x150 [ 255.619773][ T6280] netdev_register_kobject+0x1df/0x410 [ 255.619791][ T6280] register_netdevice+0x15b1/0x25a0 [ 255.619806][ T6280] ? __pfx_register_netdevice+0x10/0x10 [ 255.619817][ T6280] ? find_held_lock+0x2b/0x80 [ 255.619828][ T6280] ? l2tp_eth_create+0x94a/0xd80 [ 255.619856][ T6280] l2tp_eth_create+0x7e8/0xd80 [ 255.619872][ T6280] ? l2tp_tunnel_get+0x226/0x490 [ 255.619890][ T6280] ? __pfx_l2tp_eth_create+0x10/0x10 [ 255.619909][ T6280] ? __pfx_l2tp_eth_create+0x10/0x10 [ 255.619924][ T6280] l2tp_nl_cmd_session_create+0x88f/0xc00 [ 255.619942][ T6280] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 255.619959][ T6280] ? __nla_parse+0x40/0x60 [ 255.619997][ T6280] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 255.620017][ T6280] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 255.620038][ T6280] genl_family_rcv_msg_doit+0x214/0x300 [ 255.620059][ T6280] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 255.620078][ T6280] ? genl_get_cmd+0x3e7/0x760 [ 255.620098][ T6280] ? bpf_lsm_capable+0x9/0x10 [ 255.620110][ T6280] ? security_capable+0x80/0x260 [ 255.620131][ T6280] ? ns_capable+0xcd/0xf0 [ 255.620148][ T6280] genl_rcv_msg+0x560/0x800 [ 255.620161][ T6280] ? __pfx_genl_rcv_msg+0x10/0x10 [ 255.620172][ T6280] ? __lock_acquire+0x5c0/0x1f40 [ 255.620186][ T6280] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 255.620207][ T6280] netlink_rcv_skb+0x159/0x420 [ 255.620224][ T6280] ? __pfx_genl_rcv_msg+0x10/0x10 [ 255.620235][ T6280] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 255.620259][ T6280] ? netlink_deliver_tap+0x1ae/0xcc0 [ 255.620277][ T6280] genl_rcv+0x28/0x40 [ 255.620292][ T6280] netlink_unicast+0x65f/0x950 [ 255.620310][ T6280] ? __pfx_netlink_unicast+0x10/0x10 [ 255.620330][ T6280] netlink_sendmsg+0x9ac/0x10c0 [ 255.620348][ T6280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.620367][ T6280] ? apparmor_socket_sendmsg+0x165/0x280 [ 255.620382][ T6280] ? ____sys_sendmsg+0xa4d/0xbe0 [ 255.620395][ T6280] ____sys_sendmsg+0xa4d/0xbe0 [ 255.620406][ T6280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.620423][ T6280] ? __pfx_____sys_sendmsg+0x10/0x10 [ 255.620443][ T6280] ___sys_sendmsg+0x190/0x1e0 [ 255.620457][ T6280] ? __pfx____sys_sendmsg+0x10/0x10 [ 255.620478][ T6280] ? futex_wait+0x11e/0x370 [ 255.620498][ T6280] ? find_held_lock+0x2b/0x80 [ 255.620520][ T6280] __sys_sendmsg+0x160/0x210 [ 255.620538][ T6280] ? __pfx___sys_sendmsg+0x10/0x10 [ 255.620565][ T6280] __do_fast_syscall_32+0x14b/0x8c0 [ 255.620580][ T6280] ? lockdep_hardirqs_on+0x7d/0x110 [ 255.620596][ T6280] do_fast_syscall_32+0x32/0x70 [ 255.620613][ T6280] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 255.620633][ T6280] RIP: 0023:0xf7f26fbc [ 255.620646][ T6280] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 255.620661][ T6280] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 255.620680][ T6280] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000200 [ 255.620691][ T6280] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 255.620700][ T6280] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 255.620709][ T6280] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 255.620720][ T6280] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 255.620743][ T6280] [ 255.709308][ T6276] ceph: No mds server is up or the cluster is laggy [ 255.727959][ T5869] usb 8-1: Using ep0 maxpacket: 8 [ 255.728406][ T5869] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 255.730324][ T5869] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 255.730348][ T5869] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 255.730359][ T5869] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 255.730371][ T5869] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 255.730382][ T5869] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 255.730402][ T5869] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.935928][ T5869] usb 8-1: usb_control_msg returned -32 [ 255.935954][ T5869] usbtmc 8-1:16.0: can't read capabilities [ 256.007154][ T855] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 256.178689][ T855] usb 6-1: New USB device found, idVendor=045e, idProduct=02ae, bcdDevice=55.0c [ 256.179175][ T855] usb 6-1: config 0 has no interfaces? [ 256.181149][ T855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.181161][ T855] usb 6-1: Product: syz [ 256.181169][ T855] usb 6-1: Manufacturer: syz [ 256.181176][ T855] usb 6-1: SerialNumber: syz [ 256.183034][ T855] usb 6-1: config 0 descriptor?? [ 256.290022][ T6286] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 256.301378][ T855] usb 8-1: USB disconnect, device number 3 [ 256.407547][ T5791] Bluetooth: hci3: command tx timeout [ 256.461715][ T2320] usb 6-1: USB disconnect, device number 4 [ 256.538820][ T6291] netlink: 308 bytes leftover after parsing attributes in process `syz.2.80'. [ 256.572260][ T6293] rxe_eth0 speed is unknown, defaulting to 1000 [ 256.600554][ T6295] tipc: Started in network mode [ 256.600567][ T6295] tipc: Node identity 1001001, cluster identity 4711 [ 256.600573][ T6295] tipc: Node number set to 16781313 [ 256.601839][ T6295] tipc: Enabled bearer , priority 0 [ 256.686204][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 256.686218][ T42] audit: type=1326 audit(1792713248.578:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6299 comm="syz.4.84" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fbc code=0x7ffc0000 [ 256.687012][ T42] audit: type=1326 audit(1792713248.578:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6299 comm="syz.4.84" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fbc code=0x7ffc0000 [ 256.688511][ T42] audit: type=1326 audit(1792713248.578:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6299 comm="syz.4.84" exe="/syz-executor" sig=0 arch=40000003 syscall=101 compat=1 ip=0xf7fc4fbc code=0x7ffc0000 [ 256.688564][ T42] audit: type=1326 audit(1792713248.588:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6299 comm="syz.4.84" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fbc code=0x7ffc0000 [ 256.688833][ T42] audit: type=1326 audit(1792713248.588:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6299 comm="syz.4.84" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fbc code=0x7ffc0000 [ 256.688999][ T42] audit: type=1326 audit(1792713248.588:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6299 comm="syz.4.84" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7fc4fbc code=0x7ffc0000 [ 256.689191][ T42] audit: type=1326 audit(1792713248.588:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6299 comm="syz.4.84" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fbc code=0x7ffc0000 [ 256.689596][ T42] audit: type=1326 audit(1792713248.588:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6299 comm="syz.4.84" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fbc code=0x7ffc0000 [ 256.689688][ T42] audit: type=1326 audit(1792713248.588:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6299 comm="syz.4.84" exe="/syz-executor" sig=0 arch=40000003 syscall=316 compat=1 ip=0xf7fc4fbc code=0x7ffc0000 [ 256.689701][ T6300] GUP no longer grows the stack in syz.4.84 (6300): 80004000-80005000 (80001000) [ 256.689720][ T6300] CPU: 1 UID: 0 PID: 6300 Comm: syz.4.84 Tainted: G L syzkaller #0 PREEMPT(full) [ 256.689734][ T6300] Tainted: [L]=SOFTLOCKUP [ 256.689738][ T6300] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 256.689744][ T6300] Call Trace: [ 256.689748][ T6300] [ 256.689753][ T6300] dump_stack_lvl+0x100/0x190 [ 256.689772][ T6300] gup_vma_lookup.cold+0x83/0x96 [ 256.689789][ T6300] __get_user_pages+0x252/0x2c20 [ 256.689810][ T6300] ? __pfx___get_user_pages+0x10/0x10 [ 256.689825][ T6300] ? __pfx_down_read_killable+0x10/0x10 [ 256.689846][ T6300] __gup_longterm_locked+0x87d/0x16f0 [ 256.689861][ T6300] ? lock_acquire+0x1d1/0x380 [ 256.689875][ T6300] ? unwind_next_frame+0xbd/0x2090 [ 256.689892][ T6300] ? __pfx___gup_longterm_locked+0x10/0x10 [ 256.689908][ T6300] ? lock_acquire+0x1d1/0x380 [ 256.689922][ T6300] ? gup_fast_fallback+0x946/0x2790 [ 256.689942][ T6300] gup_fast_fallback+0x16dc/0x2790 [ 256.689967][ T6300] ? __pfx_gup_fast_fallback+0x10/0x10 [ 256.689985][ T6300] ? __lock_acquire+0x5c0/0x1f40 [ 256.689999][ T6300] ? find_held_lock+0x2b/0x80 [ 256.690010][ T6300] ? is_bpf_text_address+0x8a/0x1a0 [ 256.690027][ T6300] ? is_bpf_text_address+0x8a/0x1a0 [ 256.690045][ T6300] get_user_pages_fast+0xa7/0xf0 [ 256.690060][ T6300] ? __pfx_get_user_pages_fast+0x10/0x10 [ 256.690075][ T6300] ? lock_acquire+0x1d1/0x380 [ 256.690088][ T6300] ? pipe_lock+0x69/0x80 [ 256.690105][ T6300] __iov_iter_get_pages_alloc+0x8f2/0x1f20 [ 256.690120][ T6300] ? __mutex_lock+0x267/0x1c10 [ 256.690134][ T6300] ? pipe_lock+0x69/0x80 [ 256.690146][ T6300] ? audit_log_end+0x1f/0x30 [ 256.690159][ T6300] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 256.690172][ T6300] ? __pfx___mutex_lock+0x10/0x10 [ 256.690186][ T6300] ? __fget_files+0x34/0x3d0 [ 256.690200][ T6300] ? import_ubuf+0x1b6/0x220 [ 256.690214][ T6300] iov_iter_get_pages2+0xa3/0x100 [ 256.690226][ T6300] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 256.690238][ T6300] ? wait_for_space+0x342/0x410 [ 256.690260][ T6300] __do_sys_vmsplice+0x7dd/0x13c0 [ 256.690282][ T6300] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 256.690303][ T6300] ? kasan_quarantine_put+0x104/0x240 [ 256.690320][ T6300] ? audit_log_end+0x1f/0x30 [ 256.690331][ T6300] ? kmem_cache_free+0x127/0x6c0 [ 256.690343][ T6300] ? audit_log_end.part.0+0x1fa/0x280 [ 256.690358][ T6300] ? audit_log_end+0x24/0x30 [ 256.690381][ T6300] ? __might_fault+0xc5/0x140 [ 256.690395][ T6300] ? __do_fast_syscall_32+0x14b/0x8c0 [ 256.690410][ T6300] __do_fast_syscall_32+0x14b/0x8c0 [ 256.690426][ T6300] do_fast_syscall_32+0x32/0x70 [ 256.690441][ T6300] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 256.690455][ T6300] RIP: 0023:0xf7fc4fbc [ 256.690464][ T6300] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 256.690474][ T6300] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 000000000000013c [ 256.690485][ T6300] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000800000c0 [ 256.690492][ T6300] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 256.690497][ T6300] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 256.690503][ T6300] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 256.690509][ T6300] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 256.690523][ T6300] [ 256.690681][ T42] audit: type=1326 audit(1792713248.588:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6299 comm="syz.4.84" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fbc code=0x7ffc0000 [ 256.857207][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 256.938073][ T5869] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 257.017620][ T9] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 257.018517][ T9] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 257.018530][ T9] usb 7-1: config 0 has no interface number 0 [ 257.018548][ T9] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 257.020261][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.020273][ T9] usb 7-1: Product: syz [ 257.020280][ T9] usb 7-1: Manufacturer: syz [ 257.020287][ T9] usb 7-1: SerialNumber: syz [ 257.021682][ T9] usb 7-1: config 0 descriptor?? [ 257.027164][ T9] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 257.063306][ T6303] FAULT_INJECTION: forcing a failure. [ 257.063306][ T6303] name failslab, interval 1, probability 0, space 0, times 0 [ 257.063329][ T6303] CPU: 0 UID: 0 PID: 6303 Comm: syz.3.86 Tainted: G L syzkaller #0 PREEMPT(full) [ 257.063357][ T6303] Tainted: [L]=SOFTLOCKUP [ 257.063361][ T6303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 257.063367][ T6303] Call Trace: [ 257.063371][ T6303] [ 257.063376][ T6303] dump_stack_lvl+0x100/0x190 [ 257.063395][ T6303] should_fail_ex.cold+0x5/0xa [ 257.063410][ T6303] should_failslab+0xc2/0x120 [ 257.063429][ T6303] kmem_cache_alloc_noprof+0x92/0x6a0 [ 257.063445][ T6303] ? copy_fs_struct+0x49/0x340 [ 257.063467][ T6303] copy_fs_struct+0x49/0x340 [ 257.063482][ T6303] ksys_unshare+0x3a9/0x980 [ 257.063500][ T6303] ? __pfx_ksys_unshare+0x10/0x10 [ 257.063519][ T6303] ? __might_fault+0xc5/0x140 [ 257.063535][ T6303] __ia32_sys_unshare+0x30/0x40 [ 257.063552][ T6303] __do_fast_syscall_32+0x14b/0x8c0 [ 257.063567][ T6303] ? lockdep_hardirqs_on+0x7d/0x110 [ 257.063581][ T6303] do_fast_syscall_32+0x32/0x70 [ 257.063596][ T6303] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 257.063609][ T6303] RIP: 0023:0xf7f76fbc [ 257.063619][ T6303] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 257.063628][ T6303] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 257.063640][ T6303] RAX: ffffffffffffffda RBX: 0000000022020600 RCX: 0000000000000000 [ 257.063647][ T6303] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 257.063652][ T6303] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 257.063659][ T6303] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 257.063665][ T6303] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 257.063679][ T6303] [ 257.066782][ T6303] netlink: 12 bytes leftover after parsing attributes in process `syz.3.86'. [ 257.087852][ T5869] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 257.089058][ T5869] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.091715][ T5869] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.091727][ T5869] usb 9-1: Product: syz [ 257.091734][ T5869] usb 9-1: Manufacturer: syz [ 257.091741][ T5869] usb 9-1: SerialNumber: syz [ 257.092990][ T5869] usb 9-1: config 0 descriptor?? [ 257.095591][ T5869] asix 9-1:0.0: probe with driver asix failed with error -22 [ 257.402422][ T6300] mmap: syz.4.84 (6300) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 257.520123][ T34] usb 9-1: USB disconnect, device number 2 [ 257.986020][ C0] usb 7-1: yurex_control_callback - control failed: -71 [ 257.986419][ T6288] usb 7-1: USB disconnect, device number 3 [ 257.996823][ T6288] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 258.121552][ T6319] FAULT_INJECTION: forcing a failure. [ 258.121552][ T6319] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 258.121576][ T6319] CPU: 3 UID: 0 PID: 6319 Comm: syz.1.90 Tainted: G L syzkaller #0 PREEMPT(full) [ 258.121599][ T6319] Tainted: [L]=SOFTLOCKUP [ 258.121603][ T6319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 258.121609][ T6319] Call Trace: [ 258.121614][ T6319] [ 258.121618][ T6319] dump_stack_lvl+0x100/0x190 [ 258.121637][ T6319] should_fail_ex.cold+0x5/0xa [ 258.121649][ T6319] ? prepare_alloc_pages+0x16d/0x5b0 [ 258.121668][ T6319] should_fail_alloc_page+0xeb/0x140 [ 258.121686][ T6319] prepare_alloc_pages+0x1f0/0x5b0 [ 258.121704][ T6319] __alloc_frozen_pages_noprof+0x1e8/0x32e0 [ 258.121718][ T6319] ? __lock_acquire+0x5c0/0x1f40 [ 258.121734][ T6319] ? do_raw_spin_unlock+0x145/0x1e0 [ 258.121751][ T6319] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 258.121764][ T6319] ? rcu_is_watching+0x13/0xc0 [ 258.121775][ T6319] ? trace_hrtimer_start+0x77/0x220 [ 258.121788][ T6319] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 258.121804][ T6319] ? find_held_lock+0x2b/0x80 [ 258.121815][ T6319] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 258.121830][ T6319] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 258.121846][ T6319] ? rcu_is_watching+0x13/0xc0 [ 258.121857][ T6319] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 258.121871][ T6319] ? lockdep_hardirqs_on+0x7d/0x110 [ 258.121886][ T6319] ? rcu_is_watching+0x13/0xc0 [ 258.121897][ T6319] ? trace_sched_exit_tp+0x120/0x160 [ 258.121915][ T6319] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 258.121931][ T6319] ? policy_nodemask+0xed/0x4f0 [ 258.121970][ T6319] alloc_pages_mpol+0x201/0x550 [ 258.121989][ T6319] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 258.122005][ T6319] ? lock_acquire+0x1d1/0x380 [ 258.122041][ T6319] ? futex_unqueue+0x29/0x2c0 [ 258.122058][ T6319] folio_alloc_mpol_noprof+0x36/0x260 [ 258.122076][ T6319] vma_alloc_folio_noprof+0xed/0x1d0 [ 258.122093][ T6319] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 258.122110][ T6319] ? rcu_read_unlock+0x2d/0xb0 [ 258.122130][ T6319] ? rcu_read_unlock+0x2d/0xb0 [ 258.122154][ T6319] do_wp_page+0x1b0b/0x45b0 [ 258.122186][ T6319] ? lock_acquire+0x1d1/0x380 [ 258.122210][ T6319] ? __pfx_do_wp_page+0x10/0x10 [ 258.122252][ T6319] ? do_raw_spin_lock+0x128/0x260 [ 258.122283][ T6319] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 258.122319][ T6319] __handle_mm_fault+0x1cd2/0x2f60 [ 258.122343][ T6319] ? lock_vma_under_rcu+0x11d/0x590 [ 258.122359][ T6319] ? __pfx___handle_mm_fault+0x10/0x10 [ 258.122389][ T6319] ? lock_vma_under_rcu+0x17c/0x590 [ 258.122409][ T6319] handle_mm_fault+0x363/0xa20 [ 258.122425][ T6319] do_user_addr_fault+0x59c/0x12f0 [ 258.122443][ T6319] exc_page_fault+0x6f/0xd0 [ 258.122457][ T6319] asm_exc_page_fault+0x26/0x30 [ 258.122468][ T6319] RIP: 0023:0xf700b722 [ 258.122478][ T6319] Code: 00 00 00 00 8d 74 26 00 57 e8 b8 2f 02 00 81 c7 ee 28 3a 00 56 53 81 ec 34 10 00 00 8b 94 24 48 10 00 00 8b 84 24 44 10 00 00 <52> 50 8d 87 60 b5 e0 ff 50 e8 50 59 ff ff 8b 9c 24 54 10 00 00 83 [ 258.122488][ T6319] RSP: 002b:00000000f53d54dc EFLAGS: 00010292 [ 258.122498][ T6319] RAX: 0000000080000140 RBX: 0000000000000000 RCX: 0000000080000140 [ 258.122504][ T6319] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: 00000000f73adff4 [ 258.122510][ T6319] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 258.122516][ T6319] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 258.122522][ T6319] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 258.122537][ T6319] [ 258.122647][ T6319] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 258.487239][ T5791] Bluetooth: hci3: command tx timeout [ 258.602238][ T6322] syzkaller1: entered promiscuous mode [ 258.602252][ T6322] syzkaller1: entered allmulticast mode [ 258.874520][ T6328] x_tables: duplicate underflow at hook 2 [ 261.237182][ T5877] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 261.399200][ T5877] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 261.405019][ T5877] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.410107][ T5877] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.410120][ T5877] usb 7-1: Product: syz [ 261.410127][ T5877] usb 7-1: Manufacturer: syz [ 261.410134][ T5877] usb 7-1: SerialNumber: syz [ 261.410873][ T6348] input: syz0 as /devices/virtual/input/input5 [ 261.412382][ T5877] usb 7-1: config 0 descriptor?? [ 261.417609][ T5877] asix 7-1:0.0: probe with driver asix failed with error -22 [ 261.447041][ T6348] netlink: 28 bytes leftover after parsing attributes in process `syz.4.98'. [ 261.787271][ T42] kauditd_printk_skb: 164 callbacks suppressed [ 261.787284][ T42] audit: type=1326 audit(1792713253.688:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.2.97" exe="/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf747efbc code=0x7ffc0000 [ 261.794544][ T42] audit: type=1326 audit(1792713253.688:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.4.99" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fbc code=0x7ffc0000 [ 261.794662][ T42] audit: type=1326 audit(1792713253.688:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.4.99" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fbc code=0x7ffc0000 [ 261.795120][ T42] audit: type=1326 audit(1792713253.688:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.4.99" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7fc4fbc code=0x7ffc0000 [ 261.795242][ T42] audit: type=1326 audit(1792713253.688:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.4.99" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fbc code=0x7ffc0000 [ 261.795360][ T42] audit: type=1326 audit(1792713253.688:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.4.99" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fbc code=0x7ffc0000 [ 261.795704][ T42] audit: type=1326 audit(1792713253.688:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.4.99" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fc4fbc code=0x7ffc0000 [ 261.795819][ T42] audit: type=1326 audit(1792713253.688:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.4.99" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fbc code=0x7ffc0000 [ 261.796268][ T42] audit: type=1326 audit(1792713253.688:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.4.99" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fbc code=0x7ffc0000 [ 261.796469][ T42] audit: type=1326 audit(1792713253.688:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.4.99" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc4fbc code=0x7ffc0000 [ 261.798764][ T5877] usb 7-1: USB disconnect, device number 4 [ 262.079154][ T6352] syz.4.99 (6352): drop_caches: 2 [ 262.218855][ T6359] netlink: 48 bytes leftover after parsing attributes in process `syz.2.101'. [ 262.712737][ T6378] netlink: 28 bytes leftover after parsing attributes in process `syz.2.106'. [ 262.753705][ T6381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.107'. [ 262.754880][ T6381] netlink: 24 bytes leftover after parsing attributes in process `syz.4.107'. [ 264.024012][ T6398] netlink: 'syz.2.115': attribute type 12 has an invalid length. [ 264.024027][ T6398] netlink: 'syz.2.115': attribute type 29 has an invalid length. [ 264.024034][ T6398] netlink: 148 bytes leftover after parsing attributes in process `syz.2.115'. [ 264.024044][ T6398] netlink: 'syz.2.115': attribute type 2 has an invalid length. [ 264.024050][ T6398] netlink: 'syz.2.115': attribute type 3 has an invalid length. [ 264.024056][ T6398] netlink: 19 bytes leftover after parsing attributes in process `syz.2.115'. [ 265.365134][ T6434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.122'. [ 266.069148][ T6456] e1000e 0000:00:02.0 eth1: removed PHC [ 266.186645][ T6456] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 266.444949][ T6475] fuse: blksize only supported for fuseblk [ 266.589605][ T6488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.131'. [ 266.651739][ T6491] rxe_eth0 speed is unknown, defaulting to 1000 [ 266.851009][ T6491] netlink: 'syz.3.133': attribute type 15 has an invalid length. [ 266.851025][ T6491] netlink: 24 bytes leftover after parsing attributes in process `syz.3.133'. [ 266.854152][ T6491] netlink: 'syz.3.133': attribute type 4 has an invalid length. [ 267.037172][ T5869] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 267.260898][ T5869] usb 9-1: New USB device found, idVendor=045e, idProduct=02ae, bcdDevice=55.0c [ 267.264110][ T5869] usb 9-1: config 0 has no interfaces? [ 267.275105][ T5869] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.275195][ T5869] usb 9-1: Product: syz [ 267.275235][ T5869] usb 9-1: Manufacturer: syz [ 267.275275][ T5869] usb 9-1: SerialNumber: syz [ 267.287457][ T5869] usb 9-1: config 0 descriptor?? [ 267.619962][ T9] usb 9-1: USB disconnect, device number 3 [ 268.017951][ T6537] 9pnet_virtio: no channels available for device syz [ 268.123422][ T6539] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 268.241055][ T6542] infiniband syz0: set active [ 268.241112][ T6542] infiniband syz0: added veth1_virt_wifi [ 268.252218][ T6542] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 268.252242][ T6542] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 268.252264][ T6542] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 268.265780][ T6542] RDS/IB: syz0: added [ 268.265809][ T6542] smc: adding ib device syz0 with port count 1 [ 268.265820][ T6542] smc: ib device syz0 port 1 has no pnetid [ 268.520574][ T6547] syzkaller1: entered promiscuous mode [ 268.520595][ T6547] syzkaller1: entered allmulticast mode [ 269.019731][ T6559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.147'. [ 269.054206][ T6561] netlink: 16 bytes leftover after parsing attributes in process `syz.2.148'. [ 269.054228][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.148'. [ 269.246349][ T42] kauditd_printk_skb: 73 callbacks suppressed [ 269.246362][ T42] audit: type=1326 audit(1792713261.138:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.3.150" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fbc code=0x7ffc0000 [ 269.246385][ T42] audit: type=1326 audit(1792713261.138:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.3.150" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fbc code=0x7ffc0000 [ 269.248755][ T42] audit: type=1326 audit(1792713261.148:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.3.150" exe="/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf7f76fbc code=0x7ffc0000 [ 269.248780][ T42] audit: type=1326 audit(1792713261.148:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.3.150" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fbc code=0x7ffc0000 [ 269.248799][ T42] audit: type=1326 audit(1792713261.148:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.3.150" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fbc code=0x7ffc0000 [ 269.270522][ T42] audit: type=1326 audit(1792713261.168:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.3.150" exe="/syz-executor" sig=0 arch=40000003 syscall=383 compat=1 ip=0xf7f76fbc code=0x7ffc0000 [ 269.308677][ T42] audit: type=1326 audit(1792713261.208:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.3.150" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fbc code=0x7ffc0000 [ 269.308707][ T42] audit: type=1326 audit(1792713261.208:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.3.150" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fbc code=0x7ffc0000 [ 269.762970][ T6578] device-mapper: ioctl: Unable to rename non-existent device, syze2 to uuid LVM-syze3 [ 270.094258][ T6589] ================================================================== [ 270.094269][ T6589] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x174a/0x1910 [ 270.094291][ T6589] Write of size 8 at addr ffffc90004bed000 by task syz.3.156/6589 [ 270.094300][ T6589] [ 270.094308][ T6589] CPU: 3 UID: 0 PID: 6589 Comm: syz.3.156 Tainted: G L syzkaller #0 PREEMPT(full) [ 270.094324][ T6589] Tainted: [L]=SOFTLOCKUP [ 270.094328][ T6589] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 270.094335][ T6589] Call Trace: [ 270.094340][ T6589] [ 270.094346][ T6589] dump_stack_lvl+0x100/0x190 [ 270.094362][ T6589] print_report+0x13d/0x4b0 [ 270.094379][ T6589] ? _raw_spin_lock_irqsave+0x52/0x60 [ 270.094394][ T6589] ? sys_fillrect+0x174a/0x1910 [ 270.094406][ T6589] kasan_report+0xdf/0x1c0 [ 270.094423][ T6589] ? sys_fillrect+0x174a/0x1910 [ 270.094437][ T6589] sys_fillrect+0x174a/0x1910 [ 270.094452][ T6589] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 270.094468][ T6589] bit_clear+0x17d/0x220 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 270.094478][ T6589] ? __pfx_bit_clear+0x10/0x10 [ 270.094489][ T6589] ? fb_get_color_depth+0x120/0x250 [ 270.094505][ T6589] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 270.094522][ T6589] __fbcon_clear+0x633/0x760 [ 270.094539][ T6589] ? __pfx_bit_clear+0x10/0x10 [ 270.094550][ T6589] fbcon_scroll+0x48b/0x650 [ 270.094566][ T6589] con_scroll+0x464/0x690 [ 270.094582][ T6589] csi_ECMA.constprop.0+0x1238/0x3b60 [ 270.094597][ T6589] ? find_held_lock+0x2b/0x80 [ 270.094609][ T6589] ? __pfx_csi_ECMA.constprop.0+0x10/0x10 [ 270.094626][ T6589] do_con_write+0x366b/0x4ae0 [ 270.094645][ T6589] ? __pfx_do_con_write+0x10/0x10 [ 270.094659][ T6589] ? add_softcursor+0x220/0x290 [ 270.094673][ T6589] ? con_write+0x96/0xb0 [ 270.094688][ T6589] con_write+0x23/0xb0 [ 270.094703][ T6589] n_tty_write+0x440/0x1200 [ 270.094716][ T6589] ? __pfx_n_tty_write+0x10/0x10 [ 270.094726][ T6589] ? __kasan_kmalloc+0xaa/0xb0 [ 270.094740][ T6589] ? __pfx_woken_wake_function+0x10/0x10 [ 270.094756][ T6589] ? rcu_is_watching+0x13/0xc0 [ 270.094766][ T6589] ? file_tty_write.isra.0+0x6ed/0x8f0 [ 270.094780][ T6589] ? kfree+0x1e5/0x6d0 [ 270.094817][ T6589] ? __pfx_n_tty_write+0x10/0x10 [ 270.094831][ T6589] file_tty_write.isra.0+0x4ca/0x8f0 [ 270.094854][ T6589] vfs_write+0x6af/0x1050 [ 270.094868][ T6589] ? __pfx_tty_write+0x10/0x10 [ 270.094883][ T6589] ? __pfx_vfs_write+0x10/0x10 [ 270.094896][ T6589] ? find_held_lock+0x2b/0x80 [ 270.094913][ T6589] ksys_write+0x12a/0x250 [ 270.094926][ T6589] ? __pfx_ksys_write+0x10/0x10 [ 270.094942][ T6589] __do_fast_syscall_32+0x14b/0x8c0 [ 270.094956][ T6589] ? lockdep_hardirqs_on+0x7d/0x110 [ 270.094970][ T6589] do_fast_syscall_32+0x32/0x70 [ 270.094984][ T6589] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 270.094998][ T6589] RIP: 0023:0xf7f76fbc [ 270.095006][ T6589] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 270.095017][ T6589] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 270.095028][ T6589] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000a80 [ 270.095034][ T6589] RDX: 0000000000001006 RSI: 0000000000000000 RDI: 0000000000000000 [ 270.095041][ T6589] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 270.095047][ T6589] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 270.095053][ T6589] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 270.095062][ T6589] [ 270.095066][ T6589] [ 270.095069][ T6589] The buggy address belongs to a vmalloc virtual mapping [ 270.095078][ T6589] Memory state around the buggy address: [ 270.095083][ T6589] ffffc90004becf00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 270.095090][ T6589] ffffc90004becf80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 270.095096][ T6589] >ffffc90004bed000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 270.095101][ T6589] ^ [ 270.095106][ T6589] ffffc90004bed080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 270.095113][ T6589] ffffc90004bed100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 270.095119][ T6589] ================================================================== [ 270.095125][ T6589] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 270.227465][ T6589] CPU: 3 UID: 0 PID: 6589 Comm: syz.3.156 Tainted: G L syzkaller #0 PREEMPT(full) [ 270.230856][ T6589] Tainted: [L]=SOFTLOCKUP [ 270.232223][ T6589] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 270.235352][ T6589] Call Trace: [ 270.236421][ T6589] [ 270.237365][ T6589] dump_stack_lvl+0x100/0x190 [ 270.238873][ T6589] vpanic+0x553/0x970 [ 270.240143][ T6589] ? __pfx_vpanic+0x10/0x10 [ 270.241594][ T6589] ? __pfx_vprintk_emit+0x10/0x10 [ 270.243203][ T6589] ? sys_fillrect+0x174a/0x1910 [ 270.244740][ T6589] panic+0xd1/0xe0 [ 270.245936][ T6589] ? __pfx_panic+0x10/0x10 [ 270.247355][ T6589] ? sys_fillrect+0x174a/0x1910 [ 270.248895][ T6589] check_panic_on_warn.cold+0x19/0x34 [ 270.250604][ T6589] end_report.part.0+0x3a/0x90 [ 270.252150][ T6589] kasan_report.cold+0xe/0x18 [ 270.253642][ T6589] ? sys_fillrect+0x174a/0x1910 [ 270.255190][ T6589] sys_fillrect+0x174a/0x1910 [ 270.256686][ T6589] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 270.258594][ T6589] bit_clear+0x17d/0x220 [ 270.259960][ T6589] ? __pfx_bit_clear+0x10/0x10 [ 270.261497][ T6589] ? fb_get_color_depth+0x120/0x250 [ 270.263157][ T6589] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 270.265019][ T6589] __fbcon_clear+0x633/0x760 [ 270.266441][ T6589] ? __pfx_bit_clear+0x10/0x10 [ 270.267948][ T6589] fbcon_scroll+0x48b/0x650 [ 270.269428][ T6589] con_scroll+0x464/0x690 [ 270.270817][ T6589] csi_ECMA.constprop.0+0x1238/0x3b60 [ 270.272518][ T6589] ? find_held_lock+0x2b/0x80 [ 270.274007][ T6589] ? __pfx_csi_ECMA.constprop.0+0x10/0x10 [ 270.275832][ T6589] do_con_write+0x366b/0x4ae0 [ 270.277329][ T6589] ? __pfx_do_con_write+0x10/0x10 [ 270.278951][ T6589] ? add_softcursor+0x220/0x290 [ 270.280520][ T6589] ? con_write+0x96/0xb0 [ 270.281870][ T6589] con_write+0x23/0xb0 [ 270.283196][ T6589] n_tty_write+0x440/0x1200 [ 270.284635][ T6589] ? __pfx_n_tty_write+0x10/0x10 [ 270.286198][ T6589] ? __kasan_kmalloc+0xaa/0xb0 [ 270.287714][ T6589] ? __pfx_woken_wake_function+0x10/0x10 [ 270.289502][ T6589] ? rcu_is_watching+0x13/0xc0 [ 270.291012][ T6589] ? file_tty_write.isra.0+0x6ed/0x8f0 [ 270.292716][ T6589] ? kfree+0x1e5/0x6d0 [ 270.294098][ T6589] ? __pfx_n_tty_write+0x10/0x10 [ 270.295664][ T6589] file_tty_write.isra.0+0x4ca/0x8f0 [ 270.297328][ T6589] vfs_write+0x6af/0x1050 [ 270.298701][ T6589] ? __pfx_tty_write+0x10/0x10 [ 270.300243][ T6589] ? __pfx_vfs_write+0x10/0x10 [ 270.301757][ T6589] ? find_held_lock+0x2b/0x80 [ 270.303289][ T6589] ksys_write+0x12a/0x250 [ 270.304657][ T6589] ? __pfx_ksys_write+0x10/0x10 [ 270.306193][ T6589] __do_fast_syscall_32+0x14b/0x8c0 [ 270.307835][ T6589] ? lockdep_hardirqs_on+0x7d/0x110 [ 270.309474][ T6589] do_fast_syscall_32+0x32/0x70 [ 270.311034][ T6589] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 270.313041][ T6589] RIP: 0023:0xf7f76fbc [ 270.314330][ T6589] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 270.320275][ T6589] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 270.322883][ T6589] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000a80 [ 270.325342][ T6589] RDX: 0000000000001006 RSI: 0000000000000000 RDI: 0000000000000000 [ 270.327843][ T6589] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 270.330315][ T6589] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 270.332803][ T6589] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 270.335288][ T6589] [ 270.336909][ T6589] Kernel Offset: disabled [ 270.338280][ T6589] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:54:22 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000003 RCX=0000000000000000 RDX=ffff88801db24b00 RSI=ffffffff81ff35ee RDI=ffff88801db24b00 RBP=ffff88802b341e00 RSP=ffffc900001b7960 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed1003b64c13 R13=0000000000000003 R14=ffffed10056683c1 R15=0000000000000001 RIP=ffffffff81ff35f4 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809572f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000000fb98000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=0000000000000001 RCX=0000000000000001 RDX=1ffff920009f4f26 RSI=ffffffff8c628900 RDI=ffffffff8e6af928 RBP=ffffc90004fa7928 RSP=ffffc90004fa7870 R8 =00000000ef9d33e4 R9 =0000000000000007 R10=0000000000000200 R11=0000000000000000 R12=ffffc90004fa7930 R13=ffffc90004fa78e0 R14=0000000000000000 R15=ffff888029f68000 RIP=ffffffff81ba0a88 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809582f000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000057f151fc CR3=0000000066e83000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=8000000000000202 RBX=0000000000000004 RCX=0000000000000202 RDX=ffff888029834b00 RSI=ffffffff85373c49 RDI=ffff888029834b00 RBP=0000000000000004 RSP=ffffc900043ef2c0 R8 =0000000000000001 R9 =0000000000000019 R10=0000000000000004 R11=0000000000000000 R12=ffffffff8c62b450 R13=0000000000000040 R14=0000000000000000 R15=ffffc900043ef500 RIP=ffffffff820bf2ab RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fbbab3a4300 ffffffff 00c00000 GS =0000 ffff88809592f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055c5df7a5000 CR3=0000000046996000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000003000000012 0004000000080024 0000000000280034 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000a3 0000001400000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800089803000800 08900301c2ea0800 0888030a000003a1 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b8030008000db003 0010000da0030008 000d9803188283d4 8808000d90030108 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000d88030004000d 84032802000d8203 5c02000d8003100c 800605100b800405 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080a8002050c8002 0b80020a80020880 023a08000a007bcc 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000001ffffff ffffffffffe70808 b80301080008b003 05b0080008a00304 ZMM24=003f6db9003f6db9 003f6db9003f6db9 003f6db9003f6db9 003f6db9003f6db9 003f6db9003f6db9 003f6db9003f6db9 003f6db9003f6db9 003f6db9003f6db9 ZMM25=93ea9f8393ea9f83 93ea9f8393ea9f83 93ea9f8393ea9f83 93ea9f8393ea9f83 93ea9f8393ea9f83 93ea9f8393ea9f83 93ea9f8393ea9f83 93ea9f8393ea9f83 ZMM26=7b7704b67b7704b6 7b7704b67b7704b6 7b7704b67b7704b6 7b7704b67b7704b6 7b7704b67b7704b6 7b7704b67b7704b6 7b7704b67b7704b6 7b7704b67b7704b6 ZMM27=f6532df0f6532df0 f6532df0f6532df0 f6532df0f6532df0 f6532df0f6532df0 f6532df0f6532df0 f6532df0f6532df0 f6532df0f6532df0 f6532df0f6532df0 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=b4050000b4050000 b4050000b4050000 b4050000b4050000 b4050000b4050000 b4050000b4050000 b4050000b4050000 b4050000b4050000 b4050000b4050000 info registers vcpu 3 CPU#3 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85b37440 RDI=ffffffff9cc893c0 RBP=ffffffff9cc89380 RSP=ffffc900049c6ce0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff39912cd R15=dffffc0000000000 RIP=ffffffff85b37467 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888095a2f000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=00000000527e5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000