last executing test programs: 19m3.01773697s ago: executing program 2 (id=173): r0 = syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x3c, &(0x7f0000000080)=0x3, 0x4) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$sock_ifreq(r3, 0x89f0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4) bind$inet(r4, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x89, 0x0, &(0x7f0000000100)="b9ff03006044238cb89e14f088a81bffffff00004000630677fbac141442e934a0a662079f4b4dfe87e5feca6aab845013f288a81a390281080a8da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x58000, 0x1, 0xff, 0x1, 0x0, [{0x5, 0x1, 0xda, '\x00', 0x8}, {0x7, 0x1, 0x7a}, {0x9, 0x5, 0x7, '\x00', 0x8}, {0x41, 0xa3, 0x2, '\x00', 0x8}, {0x71, 0xb3, 0x4, '\x00', 0x6}, {0x6, 0x6, 0x4}, {0x6d, 0x2, 0x2, '\x00', 0x3}, {0x5, 0x6, 0xc, '\x00', 0x1}, {0x61, 0x6, 0x7, '\x00', 0x9}, {0x7, 0x10, 0xf, '\x00', 0x2}, {0x0, 0x5, 0xf7, '\x00', 0x1}, {0x1, 0x8, 0x33, '\x00', 0x3}, {0x1, 0x2, 0x87, '\x00', 0x3}, {0x0, 0x6, 0x9, '\x00', 0x4}, {0x1, 0x9, 0x80, '\x00', 0xdc}, {0x5, 0xc6, 0xa, '\x00', 0xee}, {0x5, 0x4, 0x9, '\x00', 0x2}, {0xd, 0x3, 0xff, '\x00', 0x8}, {0xf, 0x9, 0x0, '\x00', 0x1}, {0xc6, 0x0, 0x9, '\x00', 0xb1}, {0x7, 0x8, 0xf, '\x00', 0x81}, {0x3, 0xd, 0x0, '\x00', 0x8}, {0x6, 0x40, 0x10, '\x00', 0xe}, {0x3, 0x7, 0x4, '\x00', 0x1}]}}) ioctl$HIDIOCGCOLLECTIONINDEX(r2, 0x40184810, &(0x7f0000000040)={0x2003, 0xffffffff, 0x1, 0x1, 0x3, 0x2}) 19m2.377675401s ago: executing program 2 (id=174): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000000c0601080000000000000000010000050900020073797a3000000000050001"], 0x34}, 0x1, 0x0, 0x0, 0x140}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000006, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000001fc0)=[0x0], &(0x7f0000001f40), 0x0, 0x1, 0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000000)={0x0, r5, r4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket(0x2b, 0x80801, 0x1) socket(0x2b, 0x80801, 0x1) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80643, 0x0) ftruncate(r7, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004600002c0000000000069078ac1e0001ac1414aa9404000000004e222ebb82af6c4bc73748d69469eaf3066846b5a778c94bd228804db79a634c5d483a8d79a18dbdc96dd2477382896392b8c901ab03689336646c9b3365f78bccf93dc87da749f1dc4a52bdedba43e20f27b9823f21c129ba8e1d8cac5bb7a630209fa239b05623cb0167209259a2d8f33c7d4512d50145fd61ace108d05fe4c09c78f23109b0d6cae0d6fd8f315c9aa8e817ac72695d1350608f2d66793677ec3af45270dc", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02fffe90788000"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) 19m2.287040356s ago: executing program 2 (id=175): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x8, 0x7}, {}, {0xa, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x8000, 0x0, 0x7, 0x8}, {0x5, 0x0, 0x7f0, 0x8, 0x101, 0x5}, 0x0, 0x6, 0x4e}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCSACTIVE(r7, 0x40087446, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0xd000, 0x3, 0x2, 0x1}]}) 19m2.087603062s ago: executing program 2 (id=179): setresuid(0xee01, 0xee00, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x1, 0x3fff}, 0xc) 19m2.087151542s ago: executing program 2 (id=181): mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x30) socket$inet6(0xa, 0x802, 0x88) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) 19m1.125105752s ago: executing program 2 (id=188): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000300)=0x5, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendto$ax25(0xffffffffffffffff, &(0x7f0000000000)="7e4f2c48db0b452d382d529b0f889add9aa6a42efe6e8dcf61e3edf917b5daaab2781cd8bc09399c58b3", 0x2a, 0x40400c0, &(0x7f0000000040)={{0x3, @bcast, 0x8}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default]}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f00000004c0)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000280)={@void, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x2}}, {@arp={0x806, @generic={0x7, 0x6002, 0x6, 0x0, 0xa, @multicast, "", @local}}}}}, 0x2a) 18m49.887172373s ago: executing program 0 (id=239): setresuid(0xee01, 0xee00, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x1, 0x3fff}, 0xc) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x7, 0x80007, 0x10, 0x1, 0xe, "2d0000000005040000003c00ff9404c005e0ff"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @broadcast}) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010037"], 0x1c}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x14b040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x13, 0xac5) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r5, 0x2, &(0x7f00000005c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x8006, r6, 0x0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x6, 0xfffa, r0, &(0x7f00000004c0)="ed922096ae356325a0f073f71211df16329e6504ceecf64222848901a1671cc94a85bbdc1e2b689d7464e5490434c6d7955fc81c7e08e11506f4198cbce2d1eaf63ca9bedabc46b3b29449ac0f46f3670d1dcff1b33bec8cf32cba1ab489c9c88c5271552e48c793d4cf35aa75", 0x6d, 0x401, 0x0, 0x1}]) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x2) r9 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x5) fchdir(r10) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r11, 0x101, 0x1) ioctl$DRM_IOCTL_MODE_SETPLANE(r8, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x9, 0x8, 0x7f, 0x8d, 0x1002, 0x1, 0x33, 0x0, 0x7}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000240)={{0xd000, 0x1, 0x0, 0x10, 0x9, 0x0, 0x3, 0x7, 0x0, 0x8, 0x9, 0xff}, {0xb000, 0x10000, 0xc, 0x0, 0x7, 0x0, 0x8, 0x0, 0x7, 0xff, 0x1}, {0x2000, 0x8080000, 0xc, 0x0, 0x7, 0xc4, 0x91, 0x0, 0x8, 0x3, 0x3, 0x2}, {0xeeef0000, 0x10000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x0, 0x8, 0x2b, 0x4}, {0x0, 0xeeee0000, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x8}, {0x100000, 0x80a0000, 0xd, 0x78, 0x2, 0x1, 0x2, 0x80, 0x0, 0xff, 0x1}, {0x0, 0xeeee0000, 0x4, 0x4, 0x67, 0x0, 0xa1, 0x6, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x40, 0x7, 0x1, 0x40, 0x26, 0xb, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0x800e001}, 0xddf8fffb, 0x0, 0x0, 0x0, 0x0, 0xf801, 0x58000, [0x80000001, 0x2000000000000000, 0x2, 0x1]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 18m49.807761145s ago: executing program 0 (id=240): r0 = io_uring_setup(0x3dff, 0x0) io_uring_register$IORING_REGISTER_CLOCK(r0, 0x1d, &(0x7f0000000000)={0x1}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) signalfd4(r1, &(0x7f00000000c0)={[0x103, 0x28]}, 0x8, 0x80000) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x0, 0x3231414b}}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='bridge0\x00', 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100ffffffff0000400001000000050007000000000008000900000000101400200000000000000000dffffffeff0000000008000a007300000014001f0000000000000000000000000000000000060002000000000006001b004e200000a502ba2cfd736d8e1971fddbc603ffda0f93bf3ebc1954048e6091ad3709533f1525b115b1b73611c0ad62e629babba7520fd3dd850262199dc89aa8ce897e8d169a3b44f696d249051be88c416af4c74090ecccd7ff01b5a331831d"], 0x64}, 0x1, 0x620b}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000180)=@random="2f239d4f", 0x4, 0x1) r6 = fsmount(0xffffffffffffffff, 0x0, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) r7 = openat$tun(0xffffff9c, &(0x7f0000000400), 0x243c2, 0x0) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000280)={'netpci0\x00', 0x200}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r6, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(0xffffffffffffffff, 0x3518, 0xaddf, 0x2, 0x0, 0x1517f) socket$inet6_tcp(0xa, 0x1, 0x0) 18m48.881154268s ago: executing program 0 (id=250): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x6, 0x10, 0x3}, 0x8) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="796100000000000000007e00000050acaaf9449098fc6ec63211f69d87c39b93a5aa3c98d799477037aa7c33ece85afabb73318782305f3eed1a3af52ef412e6fef88a"], 0x14}, 0x1, 0x0, 0x0, 0x20040018}, 0x4040800) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000440)={0x0, 0x2}, 0x8) 18m45.972083088s ago: executing program 0 (id=256): timer_create(0x0, 0x0, &(0x7f0000000b80)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001380)='./file0/file0\x00', 0x400001, 0x164) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) splice(r2, 0x0, r4, 0x0, 0x25a5, 0x0) connect$inet6(r3, &(0x7f0000001440)={0xa, 0x4e24, 0x7, @remote, 0x5}, 0x1c) mount_setattr(r1, &(0x7f00000013c0)='./file0/file0\x00', 0x8000, &(0x7f0000001400)={0x100004, 0x71, 0xe0000, {r2}}, 0x20) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040001085000000050000f917116ec32904b50000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7, r6}, 0xc) timer_settime(r0, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) timer_gettime(r0, &(0x7f0000000080)) recvmmsg(r5, &(0x7f00000012c0)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/145, 0x91}, {&(0x7f00000004c0)=""/89, 0x59}], 0x2}, 0x5}, {{&(0x7f0000000540)=@nfc_llcp, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000600)=""/18, 0x12}, {&(0x7f0000000680)=""/77, 0x4d}, {&(0x7f0000000700)=""/47, 0x2f}, {&(0x7f0000000740)=""/169, 0xa9}, {&(0x7f0000000800)=""/238, 0xee}, {&(0x7f0000000900)=""/113, 0x71}, {&(0x7f0000000980)=""/51, 0x33}, {&(0x7f00000009c0)=""/63, 0x3f}, {&(0x7f0000000a00)=""/79, 0x4f}, {&(0x7f0000000a80)=""/163, 0xa3}], 0xa, &(0x7f0000000c40)=""/69, 0x45}, 0x6}, {{&(0x7f0000000cc0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f0000001240)=[{&(0x7f0000000d40)=""/223, 0xdf}, {&(0x7f0000000b40)=""/24, 0x18}, {&(0x7f0000000e40)=""/153, 0x99}, {&(0x7f0000000f00)=""/90, 0x5a}, {&(0x7f0000000f80)=""/47, 0x2f}, {&(0x7f0000000fc0)=""/145, 0x91}, {&(0x7f0000001080)=""/86, 0x56}, {&(0x7f0000001100)=""/208, 0xd0}, {&(0x7f0000001200)=""/57, 0x39}], 0x9}, 0x3}], 0x3, 0x12020, &(0x7f0000001340)={0x77359400}) 18m45.967750396s ago: executing program 32 (id=188): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000300)=0x5, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendto$ax25(0xffffffffffffffff, &(0x7f0000000000)="7e4f2c48db0b452d382d529b0f889add9aa6a42efe6e8dcf61e3edf917b5daaab2781cd8bc09399c58b3", 0x2a, 0x40400c0, &(0x7f0000000040)={{0x3, @bcast, 0x8}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default]}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f00000004c0)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000280)={@void, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x2}}, {@arp={0x806, @generic={0x7, 0x6002, 0x6, 0x0, 0xa, @multicast, "", @local}}}}}, 0x2a) 18m44.967752284s ago: executing program 0 (id=261): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000913000000000000030000008500000027000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x1309, 0x0, &(0x7f0000000100)="e0b9547ed36adbe9abc89b6f5bec", 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)=ANY=[@ANYBLOB="806f737761702c00"]) 18m43.884961948s ago: executing program 0 (id=266): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffd2a9dc6da626c0e21677ffaaaaaaaaaa2b86dd6700000100513afffe880000000000000000000000000201ff02000000000000000000000000000189009078000000002001000000000000000000000001fe800000000000000000000000000038220560aeb59d3fb13258c6f29dd7eed9c5aaa04a18f74d2a890000"], 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = mq_open(0x0, 0x8c2, 0x30, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee1, 0x11, r6, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r2, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x16c) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ZERO(r8, 0x0, 0x48f, &(0x7f0000000740)={0x11, @multicast2, 0x4e24, 0x4, 'wrr\x00', 0x2d, 0x7ff, 0x22}, 0x2c) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(r9, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r9, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) read(r1, 0x0, 0x0) 18m43.81643439s ago: executing program 33 (id=266): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffd2a9dc6da626c0e21677ffaaaaaaaaaa2b86dd6700000100513afffe880000000000000000000000000201ff02000000000000000000000000000189009078000000002001000000000000000000000001fe800000000000000000000000000038220560aeb59d3fb13258c6f29dd7eed9c5aaa04a18f74d2a890000"], 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = mq_open(0x0, 0x8c2, 0x30, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee1, 0x11, r6, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r2, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x16c) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ZERO(r8, 0x0, 0x48f, &(0x7f0000000740)={0x11, @multicast2, 0x4e24, 0x4, 'wrr\x00', 0x2d, 0x7ff, 0x22}, 0x2c) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(r9, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r9, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) read(r1, 0x0, 0x0) 17m40.294528294s ago: executing program 3 (id=571): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x4, 0x84) socket$nl_route(0x10, 0x3, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r2, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) 17m39.157142616s ago: executing program 3 (id=576): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x6, 0x10, 0x3}, 0x8) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="796100000000000000007e00000050acaaf9449098fc6ec63211f69d87c39b93a5aa3c98d799477037aa7c33ece85afabb73318782305f3eed1a3af52ef412e6fef88a9e1995502cbaec78d3556fdc5a325c63264ab61ec8fc38253b9b9fa85c0f5fcce95de1b842fc4fcda723cb00143de5ab19c4e2"], 0x14}, 0x1, 0x0, 0x0, 0x20040018}, 0x4040800) 17m36.711171993s ago: executing program 3 (id=584): r0 = syz_io_uring_setup(0xa8f, &(0x7f0000000340)={0x0, 0x6def, 0x206, 0xffffffff, 0xbfdffffa}, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) socket$tipc(0x1e, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$smc(0x0, r8) getsockname$packet(r8, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000300)={0x2}) syz_create_resource$binfmt(0x0) r10 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r10, 0x7, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r1, @ANYRES64=r11, @ANYRES64=r7, @ANYRESDEC=r9, @ANYRES32=0x0, @ANYRES64=r6], 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x0) r12 = socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x40012020, 0x1, {0x2}}) io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) 17m33.784790476s ago: executing program 3 (id=587): pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000000)='./file1\x00') ioperm(0x0, 0x2, 0x7e) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) r2 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r2, r2) r3 = getpgid(r2) setpgid(0x0, r3) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 17m33.5560488s ago: executing program 3 (id=589): r0 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r0, &(0x7f0000000840)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0x10000, @private1={0xfc, 0x1, '\x00', 0x1}, 0xd}, 0x1c, 0x0, 0x0, &(0x7f0000000b00)=[@rthdr={{0x14, 0x29, 0x32, {0x0, 0x0, 0x1, 0x7}}}], 0x14}}], 0x1, 0x4001c00) 17m32.876881389s ago: executing program 3 (id=595): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0xf7, 0x30, 0xfff}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000001c0)={r2, 0x969d}, &(0x7f0000000200)=0x8) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r3 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 17m32.706699881s ago: executing program 34 (id=595): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0xf7, 0x30, 0xfff}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000001c0)={r2, 0x969d}, &(0x7f0000000200)=0x8) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r3 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 14m42.545737488s ago: executing program 6 (id=1244): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe47, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet6_sctp(0xa, 0x4, 0x84) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) clock_getres(0x3, 0x0) sendmmsg$inet(r3, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{0x0}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) 14m40.644847785s ago: executing program 6 (id=1254): r0 = syz_io_uring_setup(0xa8f, &(0x7f0000000340)={0x0, 0x6def, 0x206, 0xffffffff, 0xbfdffffa}, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) socket$tipc(0x1e, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$smc(0x0, r8) getsockname$packet(r8, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000300)={0x2}) syz_create_resource$binfmt(0x0) r10 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r10, 0x7, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r1, @ANYRES64=r11, @ANYRES64=r7, @ANYRESDEC=r9, @ANYRES32=0x0, @ANYRES64=r6], 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r12 = socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x40012020, 0x1, {0x2}}) io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) 14m39.225407573s ago: executing program 6 (id=1259): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x2, 0x4, 0x6, 0x0, 0xb, "fc0b3b4942a8ba81a17f16f6ba8a8aaf09cfc0", 0x1000000, 0xffff}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000c80)='\b', 0x1}, {&(0x7f0000000200)}], 0x2) 14m39.191032395s ago: executing program 6 (id=1260): pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000000)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r1, r1) r2 = getpgid(r1) setpgid(0x0, r2) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 14m39.105255131s ago: executing program 6 (id=1261): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r3, 0x118, 0x137db) ptrace$pokeuser(0x6, r3, 0x118, 0x6000003f) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x4000000) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 14m38.715362261s ago: executing program 6 (id=1264): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x58}, 0x1, 0x7}, 0x0) 14m38.658257835s ago: executing program 35 (id=1264): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x58}, 0x1, 0x7}, 0x0) 7m58.907480068s ago: executing program 7 (id=3036): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newsa={0x134, 0x10, 0x1, 0x0, 0x0, {{@in6=@dev, @in=@multicast2}, {@in=@empty, 0x0, 0x6c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x134}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 7m57.641999756s ago: executing program 7 (id=3040): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000100000005"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r3, @ANYBLOB="d500000000000200140012000c000100627269646765"], 0x34}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000100000005"], 0x50) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r3, @ANYBLOB="d500000000000200140012000c000100627269646765"], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) (async) 7m57.487558448s ago: executing program 7 (id=3041): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/address_bits', 0x0, 0x0) lseek(r2, 0x200002, 0x4) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000019c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000888}, 0x40008d0) link(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00') r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000480)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x1a1c65) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_FORWARD(r7, 0x40044149, &(0x7f00000000c0)=0x9) 7m52.771115911s ago: executing program 7 (id=3055): r0 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x8) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}}, 0x0) 7m52.598587669s ago: executing program 7 (id=3056): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r3, 0x118, 0x137db) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x4000000) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 7m51.350197566s ago: executing program 7 (id=3060): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd26, 0x25dfdbfe, {0xa, 0x0, 0x20, 0x0, 0x0, 0x3}, [@IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_ADDRESS={0x14, 0x1, @private0}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000085}, 0x44000) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x5, 0x2, 0x4}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001bc6500850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xe9) 7m51.30114875s ago: executing program 36 (id=3060): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd26, 0x25dfdbfe, {0xa, 0x0, 0x20, 0x0, 0x0, 0x3}, [@IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_ADDRESS={0x14, 0x1, @private0}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000085}, 0x44000) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x5, 0x2, 0x4}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001bc6500850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xe9) 3m5.623043361s ago: executing program 5 (id=4452): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) (fail_nth: 5) 3m5.622400985s ago: executing program 5 (id=4454): mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000380)=0x101, 0x8000, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) set_robust_list(&(0x7f00000000c0), 0xc) 3m5.541457686s ago: executing program 5 (id=4455): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) write(r0, 0x0, 0xffffffffffffff7f) 3m5.540944744s ago: executing program 5 (id=4456): getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x4, 0x8209, 0xb, 0x9}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x0, 0x2, 0x180, 0x5, 0x4, 0xf1, 0x50, 0x12, 0x2, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xd000, 0x43102}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x3, 0x2004cb, 0x0, 0x1000007, 0xd2, 0x2, 0x9, 0x3, 0x0, 0x7], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0x8, 0x8, 0xf3, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0xeeee0000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0xa4, 0x5, 0x5}, {0x1, 0xf000, 0xd, 0x6, 0x4, 0x42, 0xb, 0x5, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x0, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x83}, {0x1000, 0xc000, 0x9, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0xeeef0000, 0xeeef0000, 0xb, 0x5, 0x7, 0x15, 0x7, 0x3, 0x9, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0x4, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0x3000, 0x30}, {0x8000000, 0x7}, 0x80010000, 0x0, 0x0, 0x2024, 0x0, 0x1500, 0x3000, [0xc54, 0x204, 0x5b, 0x8]}) socket(0x18, 0x1, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xff}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000180)={0x353, @time={0x95}}) r6 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65d, 0x100, 0x8, 0x40}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_TIMEOUT={0xb, 0x62, 0x0, 0x0, 0x1, &(0x7f0000000340)={r9, r10+60000000}, 0x1, 0xc, 0x0, {0x0, r11}}) io_uring_enter(r6, 0x47fa, 0xb277, 0x48, 0x0, 0x0) r12 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r12, 0xc0105500, &(0x7f0000000040)=ANY=[@ANYRESHEX=r12]) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 3m4.763029534s ago: executing program 5 (id=4466): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 3m4.514546695s ago: executing program 5 (id=4467): mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) (fail_nth: 5) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = socket$unix(0x1, 0x5, 0x0) r6 = dup2(r5, r0) close_range(r6, 0xffffffffffffffff, 0x0) 2m49.443766023s ago: executing program 37 (id=4467): mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) (fail_nth: 5) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = socket$unix(0x1, 0x5, 0x0) r6 = dup2(r5, r0) close_range(r6, 0xffffffffffffffff, 0x0) 8.777031787s ago: executing program 1 (id=5155): ioctl$TCSETS(0xffffffffffffffff, 0x80204705, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x17, "d800000000000000000000000000002100"}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x4, 0x8209, 0xb, 0x9}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x20, r1, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x440c0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xe42, 0x9, 0xfffffffffffffffb, 0x5, 0x10000, 0x3, 0x4002004c2, 0x100000007ff, 0xffffffffffffffff, 0x0, 0x10000000000400, 0x80, 0x8b, 0x0, 0x8, 0x8b], 0x58000, 0x240046}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.47937721s ago: executing program 1 (id=5157): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x6, 0x10, 0x3}, 0x8) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffa}, &(0x7f0000000000), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f00000000c0)=0xfffffffc, 0x0, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x10) 7.868204897s ago: executing program 9 (id=5159): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4004001}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000f59ffc), 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x40200, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYRES64], 0x1c}], 0x1, 0x0, 0x0, 0x100}, 0x20000010) write$UHID_CREATE2(r9, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) setsockopt$sock_int(r8, 0x1, 0x2f, &(0x7f0000000000)=0x102, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 7.417887952s ago: executing program 4 (id=5162): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000300)={0x0, 0x0, 0x2c, 0x20, 0x4d, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000440)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) listen(0xffffffffffffffff, 0x8) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x8000000003c) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x6f1dd9aa, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000340)=[r3], &(0x7f0000000280)=[0x1], &(0x7f0000000200), &(0x7f0000000040), 0x0, 0x7f}) 6.793549071s ago: executing program 1 (id=5163): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x145, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x14) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000000c0), &(0x7f00000001c0)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) write$uinput_user_dev(r6, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x4d, [0x10004, 0x6, 0x9, 0x8a4, 0xfffffffe, 0x2, 0x7fffffff, 0x80000001, 0x4, 0x1, 0xfd, 0x3c6, 0x7, 0x7, 0xf70, 0x3c00, 0xe7, 0x4007, 0x401, 0xbc5e, 0x4, 0x1, 0x8, 0xffff, 0xe, 0xe, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1, 0x1, 0x1, 0x4, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x3, 0x1, 0x6, 0x2, 0x5, 0x49, 0x5, 0x9, 0x0, 0x1, 0x1000, 0x3, 0x2, 0x6, 0x7ff, 0xb8547353], [0x4, 0xffffffff, 0x4, 0x5, 0x7ffffdff, 0x1, 0x550, 0x6, 0x2, 0xfffffffc, 0x10001, 0xc, 0x36, 0x4, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x9, 0x99d, 0x8, 0x0, 0xd, 0x10001, 0xfffffffe, 0x6e38, 0x8000, 0xa, 0x6, 0x3, 0x0, 0x5, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x4, 0x0, 0x40000040, 0x1, 0x8, 0x5, 0x8, 0x0, 0x34f1, 0x1ff, 0x4, 0x1b2c5a97, 0x0, 0x9, 0x8, 0x0, 0x1, 0x1, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x5, 0xdb8, 0x9, 0x4, 0x2, 0x200006, 0x5, 0x5, 0x2, 0x80, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x4, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x40000008, 0x2, 0x4, 0x800, 0x7, 0x9, 0x10000, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x4, 0x8c0, 0x9, 0x2, 0x8, 0x7, 0x6, 0x2, 0x81, 0x8, 0x1, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x2, 0xa, 0x6, 0x2, 0xffffff00, 0xda15, 0x82, 0x3, 0x10], [0x0, 0x897, 0x8, 0x246d, 0x6, 0x101, 0x7fffffff, 0xd, 0x7ff, 0x606, 0x5, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x8, 0x7ff, 0xffffffff, 0x0, 0x2, 0x6, 0x20c, 0xfffffffd, 0xa18, 0x61c8, 0x6, 0x7ff, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0x20e, 0x4000006, 0x7, 0xfffffffd, 0x9, 0x1, 0x4, 0x100009, 0x100, 0x8, 0x3c, 0x1000, 0x3, 0x3, 0x15, 0x8000, 0x7, 0x81, 0x8, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r4, 0x1e, &(0x7f0000000040)={r4}, 0x1) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000540), &(0x7f00000005c0), 0x2, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r7, 0x1, 0x9, 0x0, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) close(0x3) syz_usb_connect$uac1(0x3, 0xa2, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r8, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@ra={0x94, 0x4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe, 0x0, 0x8000}}}}}}, 0x0) 5.494920131s ago: executing program 8 (id=5165): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x88, 0x1f, 0x301, 0x0, 0x0, "", [@nested={0x77, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @generic="f400a489160a", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d16"]}]}, 0x88}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="2308000000000b0000000b00000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802110000010000200050800500020002000000090001007ee5d52ffd00000008000300"], 0x48}}, 0x40000) 5.381765615s ago: executing program 8 (id=5166): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='.\x00'/12, @ANYRES32, @ANYBLOB="610df4bf47c489a53b62122f0c5c584694e37500"/30, @ANYRES64=0x0], 0x20) 5.331302476s ago: executing program 8 (id=5167): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = socket(0x2b, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000000)={0xfeffffff, r2, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) 4.701347053s ago: executing program 9 (id=5168): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) socket(0x23, 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e00000000000080000010000380160002000900000004000100"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x29, 0x8, 0xe5, 0xffff, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x7808, 0xb2, 0x401}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x1, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r11 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000680)={'ipvlan0\x00', &(0x7f0000000f00)=@ethtool_cmd={0x7, 0xa, 0x7, 0x9, 0xd, 0x3, 0x3, 0xd8, 0xff, 0x10, 0x15, 0x9, 0x1, 0x8, 0xd, 0x1, [0x10001, 0xff]}}) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x8, 0x5, 0x558, 0x1d4, 0x2c0, 0xffffffff, 0x1d4, 0x2c0, 0x490, 0x490, 0xffffffff, 0x490, 0x490, 0x5, 0x0, {[{{@ipv6={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x1fffffffe], [], 'ip6erspan0\x00', 'wg2\x00'}, 0x0, 0x18c, 0x1d4, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@mcast2, [0xffffff00, 0xff, 0xff, 0xff], @ipv6=@mcast1, [0xff, 0xffffff00, 0xff, 0xffffffff], @ipv4=@private=0xa010100, [0xffffffff, 0x0, 0xffffff00, 0xffffff00], @ipv6=@remote, [0x0, 0xff000000, 0xffffff00, 0xff000000], 0x5, 0x5, 0x21, 0x4e24, 0x4e21, 0x4e22, 0x4e20, 0x800, 0xa82}, 0xba3833f51e10ad49, 0x1}}, @common=@frag={{0x30}, {[0x6, 0xfff], 0x6, 0x20, 0x1}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x5, @ipv4=@private, @ipv4=@loopback, @port, @gre_key=0x2}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@private, @ipv6=@dev, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev, [], [], 'veth1_to_hsr\x00', 'veth0_vlan\x00', {}, {}, 0x84, 0x0, 0x0, 0x10}, 0x0, 0xa4, 0xec}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@dev, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port, @gre_key}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @local, [], [], 'vlan0\x00', 'veth0_vlan\x00'}, 0x0, 0xa4, 0xe4}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "8100000000000000000000005b37f9ca83139d1d43f7ff00"}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5b4) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000002c0)={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, @loopback, 0x5, 0x6, 0x0, 0x100, 0xffffffffffffffeb, 0x112}) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r12, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0xffffffff, 0x2900010, 0x16}, &(0x7f00000003c0)=0x9b) socket$inet_mptcp(0x2, 0x1, 0x106) 4.512920355s ago: executing program 9 (id=5169): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) (fail_nth: 1) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = openat$panthor(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f00000000c0)={0xb, 0x55da, 0x80000000, 0x9}) socket$rds(0x15, 0x5, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000005f00)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x28000) 4.373962754s ago: executing program 8 (id=5170): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000380)=0x10, 0x1c) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040)=0x10, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x2000c0d1}, 0x800e805) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r1) read$FUSE(r1, &(0x7f0000002580)={0x2020}, 0x2020) 4.146774853s ago: executing program 4 (id=5171): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x80204705, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x17, "d800000000000000000000000000002100"}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x4, 0x8209, 0xb, 0x9}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x440c0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xe42, 0x9, 0xfffffffffffffffb, 0x5, 0x10000, 0x3, 0x4002004c2, 0x100000007ff, 0xffffffffffffffff, 0x0, 0x10000000000400, 0x80, 0x8b, 0x0, 0x8, 0x8b], 0x58000, 0x240046}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.86242303s ago: executing program 4 (id=5172): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001a80), r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000009c0)=ANY=[@ANYBLOB="18020000fbffffff000000000000000085000000bc00000085000000a000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="514e06f6679ce5e8d4c4482e3989", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000300)={0x34, r1, 0x1, 0x1000000, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0x34}}, 0x20004000) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x20200, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x11, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x260e, 0x10100, 0x0, 0x170}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r6, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r8, 0x708, 0x41e3, 0x0, 0x0, 0x0) io_setup(0xc, &(0x7f0000000080)=0x0) io_pgetevents(r11, 0x2, 0x2, &(0x7f0000000100)=[{}, {}], 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) write$qrtrtun(r3, &(0x7f0000000300)="ca0e8029606971", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c) 3.462961364s ago: executing program 1 (id=5173): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r1, 0x0) mremap(&(0x7f000000e000/0x7000)=nil, 0x7000, 0x2000, 0x3, &(0x7f0000007000/0x2000)=nil) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x1, 0xf59f, 0x44, @private0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x10, 0x8, 0x6, 0x2}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@mpls_getroute={0x1c4, 0x1a, 0x400, 0x70bd29, 0x25dfdbfb, {0x1c, 0x20, 0x14, 0x5, 0xff, 0x0, 0x0, 0x9, 0x2000}, [@RTA_NEWDST={0x84, 0x13, [{0xb54, 0x0, 0x1}, {0x2}, {0x6, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x5}, {0x4}, {0x5f}, {0x8, 0x0, 0x1}, {0x4}, {0xd, 0x0, 0x1}, {0xffffe, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x7f, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xc0000, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0xb}, {0x95}, {0x2}, {0x6, 0x0, 0x1}, {0xc988, 0x0, 0x1}, {0x9}, {0x6}, {0x5}, {0x1ff}, {0x9a, 0x0, 0x1}, {0x2}, {}, {0x8, 0x0, 0x1}, {0x39, 0x0, 0x1}]}, @RTA_NEWDST={0x84, 0x13, [{0x3, 0x0, 0x1}, {0x5}, {0x54}, {0x4, 0x0, 0x1}, {0x100, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0xfb2}, {0x3}, {0x6, 0x0, 0x1}, {0x10}, {0x9}, {0xa, 0x0, 0x1}, {0xc}, {0x3b0}, {0x800}, {0x2, 0x0, 0x1}, {0x401}, {0xffff}, {0x4, 0x0, 0x1}, {0x4, 0x0, 0x1}, {}, {0x4}, {0xff}, {0xffffe}, {0x7fff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xd3, 0x0, 0x1}, {0xb3, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xde, 0x0, 0x1}, {0x55a4, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x4}}, @RTA_NEWDST={0x84, 0x13, [{0x3ff, 0x0, 0x1}, {}, {0x8, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x3}, {0xfff, 0x0, 0x1}, {0x4}, {0xf29, 0x0, 0x1}, {0x5a}, {0x7, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0xffe00}, {0x4, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0x1ff, 0x0, 0x1}, {0xb}, {}, {0x7d}, {0x3}, {0x200}, {0x6, 0x0, 0x1}, {0x8ea6, 0x0, 0x1}, {0x7f9, 0x0, 0x1}, {0xffffa, 0x0, 0x1}, {0x7}, {}, {0x9}, {0x1, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0xcd, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0xfae, 0x0, 0x1}]}, @RTA_MULTIPATH={0xc, 0x9, {0x0, 0x2, 0xbb, r2}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x7}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$int_out(r0, 0x0, &(0x7f00000000c0)) 3.402342084s ago: executing program 8 (id=5174): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d032, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x1, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xa00, 0x1e, 0x0, 0x8, 0x6e}) r1 = dup2(r0, r0) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x801, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xc3) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000300)='virtiofs\x00', 0x1) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0xfffffffe, 0x0, 0x1000000}) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(0x0, 0xb) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000000), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000080)=""/128, 0x80}, {&(0x7f00000001c0)=""/119, 0x77}, {&(0x7f0000000100)=""/28, 0x1c}, {&(0x7f0000000240)=""/146, 0x92}, {&(0x7f0000000300)=""/233, 0xe9}, {&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000500)=""/40, 0x28}], 0x7, &(0x7f0000000580)=[@cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}, 0xbb3cae68fdff81e) 3.312587507s ago: executing program 1 (id=5175): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000340)={0x0, 0x8000000002, 0x0, [0x802f, 0xffffffff, 0x9, 0x1, 0x6], [0x1000000000000002, 0x10000002, 0x1, 0x2, 0x7ffd, 0xffffffffffff99b9, 0x5, 0x8000000000000001, 0x9, 0xffff, 0x9, 0x1, 0xfc5, 0xfffffffffffffff4, 0x8e3f, 0xfffffffffffffffa, 0x100, 0xd, 0xd9, 0x90, 0xf0, 0x800000000002a9, 0x19, 0x0, 0x3, 0x0, 0xa, 0x20000000003, 0xa53, 0x2, 0x6, 0x7, 0x0, 0xfffffffffffffffa, 0x80, 0x3, 0x80, 0x931, 0x101, 0x3, 0x8004, 0x19a0, 0x101, 0x1, 0xb, 0x8, 0x1, 0x2, 0x1, 0x400083, 0x538a, 0x8001, 0xda, 0x4, 0x0, 0x803, 0x8000005, 0xb, 0x3, 0x77, 0x4, 0x800, 0x7, 0x7, 0x3, 0xffffffffffffffff, 0x4, 0x8000, 0x12f, 0x8, 0x6, 0xfffffffffffffffc, 0x82c, 0x7ff, 0x3, 0x2, 0x2, 0x4, 0x3, 0x5, 0x100000001, 0x800, 0x1, 0xe773, 0x2, 0x8, 0x10000000, 0x6, 0xe, 0x9, 0x100000001, 0x400004, 0x800000008, 0x7, 0x9, 0x10000, 0x6, 0x1, 0x16d, 0x2, 0x8, 0xffffffffffff43b3, 0x8, 0x5eb, 0x12, 0x0, 0x0, 0x3, 0x4, 0x7, 0x3ff, 0x0, 0x8, 0x5, 0x0, 0x2, 0x40, 0x80000001, 0x7, 0x101, 0x1]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_tracing={0x1a, 0x8, &(0x7f00000008c0)=@raw=[@exit, @generic={0x80, 0x6, 0xd, 0x9310, 0x8}, @ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0xe000000}], &(0x7f0000000980)='syzkaller\x00', 0x5, 0xf2, &(0x7f00000009c0)=""/242, 0x41100, 0x44, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b80)={0x2, 0x9, 0xfffffffd, 0xa7}, 0x10, 0x1e42c, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x6}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000000d0a010800000000000000000a0000010900010073c74e310000000004000380"], 0x24}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x120) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x2, @empty, 0x7}], 0x1c) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}, 0x2000000}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000080)={0x4, 0x1, 0x17, 0x1, 0x100, &(0x7f0000000440)="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"}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) socket$netlink(0x10, 0x3, 0xf) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24) sendmmsg(r5, &(0x7f0000007840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="100000001001000001"], 0x10, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0c00000019000000060000000c0000000801000003000000771e4147994bd7364839c067ae90a7e57eee2869f2e7bcd42936848ea7910e1f1f702631dfe63d5b6c384c4715765224326b9ce4633f4a8705143d886e0a8cd45339c3edfcaea95048b85a6022a36c7e2711f2fca101d34752b66535ab0b10b8"], 0x18}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000073c0)}}], 0x4, 0x0) 3.092766011s ago: executing program 8 (id=5176): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0xd6534dfa35922aae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffe01}}, 0x50) r2 = socket$inet6(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7a0a000071107000000000009500000000000000f260030100000000000000070f90df6dfed4952b5a1f9b2028ff9db40e36bfff74a4ab1a01c305198d58f7ef2de4a61c05b035d154e27b97121e60840d0b3d5c7f2f4ed9fe0317669c3586b4c0db03ff34c28d7505732ba8894b"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) r4 = syz_io_uring_setup(0x496, &(0x7f0000000f80)={0x0, 0x79af, 0x3180, 0x7ffc, 0x40024e}, &(0x7f0000000340), &(0x7f0000000080)) syz_io_uring_setup(0x641a, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x0, 0x400002d8, 0x0, r4}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_UNLINKAT={0x24, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) io_setup(0x1, &(0x7f00000016c0)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x14, 0x13, 0x301, 0x0, 0x25dfdbfc, {0xc}}, 0x14}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]}) io_setup(0x2, &(0x7f0000000000)=0x0) syz_clone3(&(0x7f0000000080)={0x21800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r7, 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/216, 0xd8}, {&(0x7f00000006c0)=""/100, 0x64}, {&(0x7f0000000740)=""/104, 0x68}, {&(0x7f0000000880)=""/234, 0xea}], 0x4, 0x2, 0x5) shutdown(r2, 0x0) epoll_create1(0x80000) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x74000000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f0000000100)) write$dsp(r1, &(0x7f0000002000)='`', 0x88020) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(streebog256-generic)\x00'}, 0x58) 2.862317945s ago: executing program 4 (id=5177): r0 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) fdatasync(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000300)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000000)={0x0, &(0x7f0000000180)}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x122) connect$packet(r8, &(0x7f0000000340)={0x1f, 0x17, 0x0, 0x1, 0x1, 0x6, @remote}, 0x13) socket$vsock_stream(0x28, 0x1, 0x0) 1.154970484s ago: executing program 1 (id=5178): memfd_create(0x0, 0x2) socket(0x2a, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8010) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000009b80)=""/102392, 0x18ff8) iopl(0x3) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x4046014}, 0x400c0) syz_genetlink_get_family_id$team(0x0, r3) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) read$dsp(r2, &(0x7f00000001c0)=""/95, 0x5f) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1001, 0x24ff87199961d6af, 0xdcf, 0x4004, 0xb, 0xdc1, 0x0, 0x0, 0x2, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 862.440189ms ago: executing program 9 (id=5179): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="0100000000fa019d21b6ca0ce70200"/25, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) socket(0x23, 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e00000000000080000010000380160002000900000004000100"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x29, 0x8, 0xe5, 0xffff, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x7808, 0xb2, 0x401}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x1, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000680)={'ipvlan0\x00', &(0x7f0000000f00)=@ethtool_cmd={0x7, 0xa, 0x7, 0x9, 0xd, 0x3, 0x3, 0xd8, 0xff, 0x10, 0x15, 0x9, 0x1, 0x8, 0xd, 0x1, [0x10001, 0xff]}}) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x8, 0x5, 0x558, 0x1d4, 0x2c0, 0xffffffff, 0x1d4, 0x2c0, 0x490, 0x490, 0xffffffff, 0x490, 0x490, 0x5, 0x0, {[{{@ipv6={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x1fffffffe], [], 'ip6erspan0\x00', 'wg2\x00'}, 0x0, 0x18c, 0x1d4, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@mcast2, [0xffffff00, 0xff, 0xff, 0xff], @ipv6=@mcast1, [0xff, 0xffffff00, 0xff, 0xffffffff], @ipv4=@private=0xa010100, [0xffffffff, 0x0, 0xffffff00, 0xffffff00], @ipv6=@remote, [0x0, 0xff000000, 0xffffff00, 0xff000000], 0x5, 0x5, 0x21, 0x4e24, 0x4e21, 0x4e22, 0x4e20, 0x800, 0xa82}, 0xba3833f51e10ad49, 0x1}}, @common=@frag={{0x30}, {[0x6, 0xfff], 0x6, 0x20, 0x1}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x5, @ipv4=@private, @ipv4=@loopback, @port, @gre_key=0x2}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@private, @ipv6=@dev, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev, [], [], 'veth1_to_hsr\x00', 'veth0_vlan\x00', {}, {}, 0x84, 0x0, 0x0, 0x10}, 0x0, 0xa4, 0xec}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@dev, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port, @gre_key}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @local, [], [], 'vlan0\x00', 'veth0_vlan\x00'}, 0x0, 0xa4, 0xe4}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "8100000000000000000000005b37f9ca83139d1d43f7ff00"}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5b4) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000002c0)={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, @loopback, 0x5, 0x6, 0x0, 0x100, 0xffffffffffffffeb, 0x112}) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0xffffffff, 0x2900010, 0x16}, &(0x7f00000003c0)=0x9b) socket$inet_mptcp(0x2, 0x1, 0x106) 808.336437ms ago: executing program 4 (id=5180): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x80204705, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x17, "d800000000000000000000000000002100"}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x4, 0x8209, 0xb, 0x9}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x440c0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xe42, 0x9, 0xfffffffffffffffb, 0x5, 0x10000, 0x3, 0x4002004c2, 0x100000007ff, 0xffffffffffffffff, 0x0, 0x10000000000400, 0x80, 0x8b, 0x0, 0x8, 0x8b], 0x58000, 0x240046}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 219.224245ms ago: executing program 9 (id=5181): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='.\x00'/12, @ANYRES32, @ANYBLOB="610df4bf47c489a53b62122f0c5c584694e37500"/30, @ANYRES64=0x0], 0x20) 123.169504ms ago: executing program 4 (id=5182): ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"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"}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x2002) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f00000005c0)=@framed={{0x18, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0xc6}]}, &(0x7f0000000380)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000061db000018110000", @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2a) eventfd(0x80200003) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000001b80), 0x9, 0x20000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$6lowpan_control(r4, 0x0, 0x0) syz_io_uring_setup(0x286, &(0x7f0000000440)={0x0, 0xfad9, 0x400, 0x0, 0x0, 0x0, r4}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="380000001214010027bd7000fddbdf25080001000200000008001500ad96666008004f000000000008004b00130000000800030001000008"], 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x810) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x48, 0x4000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x2}) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r8, 0x0, 0x0) 0s ago: executing program 9 (id=5183): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r1, 0x0) mremap(&(0x7f000000e000/0x7000)=nil, 0x7000, 0x2000, 0x3, &(0x7f0000007000/0x2000)=nil) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x1, 0xf59f, 0x44, @private0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x10, 0x8, 0x6, 0x2}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@mpls_getroute={0x1c4, 0x1a, 0x400, 0x70bd29, 0x25dfdbfb, {0x1c, 0x20, 0x14, 0x5, 0xff, 0x0, 0x0, 0x9, 0x2000}, [@RTA_NEWDST={0x84, 0x13, [{0xb54, 0x0, 0x1}, {0x2}, {0x6, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x5}, {0x4}, {0x5f}, {0x8, 0x0, 0x1}, {0x4}, {0xd, 0x0, 0x1}, {0xffffe, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x7f, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xc0000, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0xb}, {0x95}, {0x2}, {0x6, 0x0, 0x1}, {0xc988, 0x0, 0x1}, {0x9}, {0x6}, {0x5}, {0x1ff}, {0x9a, 0x0, 0x1}, {0x2}, {}, {0x8, 0x0, 0x1}, {0x39, 0x0, 0x1}]}, @RTA_NEWDST={0x84, 0x13, [{0x3, 0x0, 0x1}, {0x5}, {0x54}, {0x4, 0x0, 0x1}, {0x100, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0xfb2}, {0x3}, {0x6, 0x0, 0x1}, {0x10}, {0x9}, {0xa, 0x0, 0x1}, {0xc}, {0x3b0}, {0x800}, {0x2, 0x0, 0x1}, {0x401}, {0xffff}, {0x4, 0x0, 0x1}, {0x4, 0x0, 0x1}, {}, {0x4}, {0xff}, {0xffffe}, {0x7fff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xd3, 0x0, 0x1}, {0xb3, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xde, 0x0, 0x1}, {0x55a4, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x4}}, @RTA_NEWDST={0x84, 0x13, [{0x3ff, 0x0, 0x1}, {}, {0x8, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x3}, {0xfff, 0x0, 0x1}, {0x4}, {0xf29, 0x0, 0x1}, {0x5a}, {0x7, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0xffe00}, {0x4, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0x1ff, 0x0, 0x1}, {0xb}, {}, {0x7d}, {0x3}, {0x200}, {0x6, 0x0, 0x1}, {0x8ea6, 0x0, 0x1}, {0x7f9, 0x0, 0x1}, {0xffffa, 0x0, 0x1}, {0x7}, {}, {0x9}, {0x1, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0xcd, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0xfae, 0x0, 0x1}]}, @RTA_MULTIPATH={0xc, 0x9, {0x0, 0x2, 0xbb, r2}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x7}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$int_out(r0, 0x0, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): 0000000000000000 [ 1131.532386][T24680] [ 1131.744141][T24689] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1131.748458][T24689] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1131.751801][T24689] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1131.754889][T24689] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1131.759130][T24689] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1131.762353][T24689] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1131.765471][T24689] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1131.769269][T24689] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1131.772486][T24689] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1131.775581][T24689] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1132.322699][ C1] lapbether: lapb_data_request error - 4 [ 1132.325763][ C1] lapbether: lapb_data_request error - 4 [ 1132.333150][ C1] lapbether: lapb_data_request error - 4 [ 1132.346585][ C1] lapbether: lapb_data_request error - 4 [ 1132.349247][ C1] lapbether: lapb_data_request error - 4 [ 1132.351839][ C1] lapbether: lapb_data_request error - 4 [ 1132.356914][ C1] lapbether: lapb_data_request error - 4 [ 1132.371117][ C1] lapbether: lapb_data_request error - 4 [ 1132.750492][ C1] lapbether: lapb_data_request error - 4 [ 1132.752674][ C1] lapbether: lapb_data_request error - 4 [ 1132.754698][ C1] lapbether: lapb_data_request error - 4 [ 1132.757354][ C1] lapbether: lapb_data_request error - 4 [ 1132.759863][ C1] lapbether: lapb_data_request error - 4 [ 1133.179050][T24781] sit1: entered allmulticast mode [ 1134.302070][ T7158] IPVS: starting estimator thread 0... [ 1134.372160][T24865] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.384715][T24866] IPVS: using max 42 ests per chain, 100800 per kthread [ 1134.547859][ C1] lapbether: lapb_data_request error - 4 [ 1134.550901][ C1] lapbether: lapb_data_request error - 4 [ 1134.554928][ C1] lapbether: lapb_data_request error - 4 [ 1134.573123][ C1] lapbether: lapb_data_request error - 4 [ 1134.575930][ C1] lapbether: lapb_data_request error - 4 [ 1135.164857][T24899] netlink: 'syz.1.4883': attribute type 30 has an invalid length. [ 1135.236565][T24900] netlink: 'syz.1.4883': attribute type 30 has an invalid length. [ 1135.701333][T24905] 9p: Bad value for 'wfdno' [ 1135.933127][T24910] No buffer was provided with the request [ 1136.192745][T24912] overlayfs: missing 'lowerdir' [ 1136.484140][T24914] 9pnet_virtio: no channels available for device syz [ 1136.860426][ C0] lapbether: lapb_data_request error - 4 [ 1136.867848][ C1] lapbether: lapb_data_request error - 4 [ 1136.870190][ C1] lapbether: lapb_data_request error - 4 [ 1136.872555][ C1] lapbether: lapb_data_request error - 4 [ 1136.874882][ C1] lapbether: lapb_data_request error - 4 [ 1136.877338][ C1] lapbether: lapb_data_request error - 4 [ 1136.879882][ C1] lapbether: lapb_data_request error - 4 [ 1136.882360][ C1] lapbether: lapb_data_request error - 4 [ 1136.884873][ C1] lapbether: lapb_data_request error - 4 [ 1137.300952][T24920] FAULT_INJECTION: forcing a failure. [ 1137.300952][T24920] name failslab, interval 1, probability 0, space 0, times 0 [ 1137.308140][T24920] CPU: 1 UID: 0 PID: 24920 Comm: syz.8.4888 Tainted: G L syzkaller #0 PREEMPT(full) [ 1137.308160][T24920] Tainted: [L]=SOFTLOCKUP [ 1137.308165][T24920] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1137.308172][T24920] Call Trace: [ 1137.308177][T24920] [ 1137.308182][T24920] dump_stack_lvl+0x100/0x190 [ 1137.308201][T24920] should_fail_ex.cold+0x5/0xa [ 1137.308221][T24920] should_failslab+0xc2/0x120 [ 1137.308238][T24920] __kmalloc_cache_noprof+0x80/0x810 [ 1137.308250][T24920] ? trace_kmem_cache_alloc+0x80/0xb0 [ 1137.308267][T24920] ? kmem_cache_alloc_lru_noprof+0x319/0x7d0 [ 1137.308281][T24920] ? fuse_dentry_init+0x45/0x100 [ 1137.308296][T24920] ? __pfx_fuse_dentry_init+0x10/0x10 [ 1137.308309][T24920] ? fuse_dentry_init+0x45/0x100 [ 1137.308321][T24920] fuse_dentry_init+0x45/0x100 [ 1137.308333][T24920] ? __pfx_fuse_dentry_init+0x10/0x10 [ 1137.308346][T24920] __d_alloc+0x62b/0xa80 [ 1137.308363][T24920] d_alloc_parallel+0x111/0x14e0 [ 1137.308378][T24920] ? find_held_lock+0x2b/0x80 [ 1137.308390][T24920] ? __d_lookup+0x25c/0x4a0 [ 1137.308400][T24920] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1137.308421][T24920] ? __d_lookup+0x266/0x4a0 [ 1137.308435][T24920] lookup_open.isra.0+0x633/0x1890 [ 1137.308447][T24920] ? do_raw_spin_lock+0x128/0x260 [ 1137.308468][T24920] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1137.308489][T24920] ? lookup_fast+0x2da/0x600 [ 1137.308501][T24920] path_openat+0xa9b/0x3120 [ 1137.308520][T24920] ? __pfx_path_openat+0x10/0x10 [ 1137.308539][T24920] do_filp_open+0x1f7/0x420 [ 1137.308554][T24920] ? __pfx_do_filp_open+0x10/0x10 [ 1137.308579][T24920] ? alloc_fd+0x476/0x790 [ 1137.308596][T24920] do_sys_openat2+0x12e/0x220 [ 1137.308615][T24920] ? __pfx_do_sys_openat2+0x10/0x10 [ 1137.308632][T24920] ? __fget_files+0x215/0x3d0 [ 1137.308647][T24920] ? __fget_files+0x21f/0x3d0 [ 1137.308661][T24920] __ia32_compat_sys_openat+0x12d/0x210 [ 1137.308680][T24920] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1137.308708][T24920] ? __pfx_ksys_write+0x10/0x10 [ 1137.308724][T24920] __do_fast_syscall_32+0xde/0x660 [ 1137.308741][T24920] do_fast_syscall_32+0x32/0x70 [ 1137.308757][T24920] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1137.308772][T24920] RIP: 0023:0xf7fc2579 [ 1137.308782][T24920] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 1137.308794][T24920] RSP: 002b:00000000f546550c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 1137.308806][T24920] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000a80 [ 1137.308813][T24920] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000000 [ 1137.308820][T24920] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1137.308827][T24920] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1137.308833][T24920] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1137.308848][T24920] [ 1137.600219][T24925] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1137.606507][T24925] block device autoloading is deprecated and will be removed. [ 1137.613658][T24922] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1137.616666][T24922] block device autoloading is deprecated and will be removed. [ 1137.620129][T24922] md: md2 stopped. [ 1137.712707][T24940] syz.1.4892 (24940): attempted to duplicate a private mapping with mremap. This is not supported. [ 1137.723461][T24941] FAULT_INJECTION: forcing a failure. [ 1137.723461][T24941] name failslab, interval 1, probability 0, space 0, times 0 [ 1137.728235][T24941] CPU: 1 UID: 0 PID: 24941 Comm: syz.8.4894 Tainted: G L syzkaller #0 PREEMPT(full) [ 1137.728255][T24941] Tainted: [L]=SOFTLOCKUP [ 1137.728260][T24941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1137.728267][T24941] Call Trace: [ 1137.728272][T24941] [ 1137.728277][T24941] dump_stack_lvl+0x100/0x190 [ 1137.728296][T24941] should_fail_ex.cold+0x5/0xa [ 1137.728319][T24941] should_failslab+0xc2/0x120 [ 1137.728342][T24941] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 1137.728369][T24941] ? __alloc_skb+0x156/0x410 [ 1137.728400][T24941] ? __alloc_skb+0x156/0x410 [ 1137.728422][T24941] __alloc_skb+0x156/0x410 [ 1137.728445][T24941] ? __alloc_skb+0x35d/0x410 [ 1137.728462][T24941] ? __pfx___alloc_skb+0x10/0x10 [ 1137.728480][T24941] ? kasan_quarantine_put+0x104/0x240 [ 1137.728497][T24941] mgmt_cmd_complete+0x4f/0x560 [ 1137.728516][T24941] set_def_system_config+0xd2d/0x1510 [ 1137.728534][T24941] ? __pfx_mgmt_init_hdev+0x10/0x10 [ 1137.728551][T24941] hci_sock_sendmsg+0x154e/0x2620 [ 1137.728570][T24941] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1137.728586][T24941] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1137.728603][T24941] sock_write_iter+0x566/0x610 [ 1137.728620][T24941] ? __pfx_sock_write_iter+0x10/0x10 [ 1137.728638][T24941] ? bpf_lsm_file_permission+0x9/0x10 [ 1137.728653][T24941] ? security_file_permission+0x76/0x210 [ 1137.728672][T24941] ? rw_verify_area+0xce/0x6d0 [ 1137.728685][T24941] vfs_write+0x6ac/0x1070 [ 1137.728698][T24941] ? __pfx_sock_write_iter+0x10/0x10 [ 1137.728712][T24941] ? __pfx_vfs_write+0x10/0x10 [ 1137.728728][T24941] ? find_held_lock+0x2b/0x80 [ 1137.728748][T24941] ksys_write+0x1f8/0x250 [ 1137.728761][T24941] ? __pfx_ksys_write+0x10/0x10 [ 1137.728773][T24941] ? __pfx_ksys_write+0x10/0x10 [ 1137.728789][T24941] __do_fast_syscall_32+0xde/0x660 [ 1137.728805][T24941] do_fast_syscall_32+0x32/0x70 [ 1137.728820][T24941] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1137.728835][T24941] RIP: 0023:0xf7fc2579 [ 1137.728845][T24941] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 1137.728856][T24941] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1137.728867][T24941] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000000 [ 1137.728875][T24941] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 1137.728881][T24941] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1137.728888][T24941] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1137.728894][T24941] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1137.728908][T24941] [ 1137.748862][T24936] FAULT_INJECTION: forcing a failure. [ 1137.748862][T24936] name failslab, interval 1, probability 0, space 0, times 0 [ 1137.765315][T24943] netlink: 'syz.9.4896': attribute type 10 has an invalid length. [ 1137.769701][T24936] CPU: 2 UID: 0 PID: 24936 Comm: syz.4.4895 Tainted: G L syzkaller #0 PREEMPT(full) [ 1137.769733][T24936] Tainted: [L]=SOFTLOCKUP [ 1137.769739][T24936] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1137.769751][T24936] Call Trace: [ 1137.769757][T24936] [ 1137.769765][T24936] dump_stack_lvl+0x100/0x190 [ 1137.769794][T24936] should_fail_ex.cold+0x5/0xa [ 1137.769826][T24936] should_failslab+0xc2/0x120 [ 1137.769852][T24936] ? lsm_blob_alloc+0x68/0x90 [ 1137.769871][T24936] __kmalloc_noprof+0xf6/0x9c0 [ 1137.769889][T24936] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1137.769917][T24936] ? lsm_blob_alloc+0x68/0x90 [ 1137.769941][T24936] ? __asan_memset+0x23/0x50 [ 1137.769958][T24936] lsm_blob_alloc+0x68/0x90 [ 1137.769978][T24936] security_task_alloc+0x2a/0x260 [ 1137.769998][T24936] copy_process+0x25cc/0x7890 [ 1137.770035][T24936] ? __pfx_copy_process+0x10/0x10 [ 1137.770063][T24936] ? lockdep_init_map_type+0x5c/0x250 [ 1137.770090][T24936] ? lockdep_init_map_type+0x5c/0x250 [ 1137.770116][T24936] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1137.770147][T24936] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1137.770174][T24936] vhost_task_create+0x1db/0x370 [ 1137.770202][T24936] ? __pfx_vhost_task_create+0x10/0x10 [ 1137.770226][T24936] ? register_lock_class+0x40/0x560 [ 1137.770256][T24936] ? __pfx_vhost_task_fn+0x10/0x10 [ 1137.770286][T24936] ? __pfx___mutex_lock+0x10/0x10 [ 1137.770316][T24936] kvm_mmu_post_init_vm+0x1b3/0x370 [ 1137.770340][T24936] kvm_arch_vcpu_ioctl_run+0x66/0x1830 [ 1137.770363][T24936] ? kvm_vcpu_ioctl+0x150f/0x16d0 [ 1137.770386][T24936] kvm_vcpu_ioctl+0x730/0x16d0 [ 1137.770406][T24936] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1137.770423][T24936] ? tomoyo_path_number_perm+0x188/0x580 [ 1137.770451][T24936] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1137.770486][T24936] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1137.770506][T24936] ? do_vfs_ioctl+0x226/0x13e0 [ 1137.770534][T24936] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1137.770573][T24936] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 1137.770591][T24936] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 1137.770610][T24936] ? __fget_files+0x21f/0x3d0 [ 1137.770634][T24936] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 1137.770652][T24936] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1137.770682][T24936] __do_fast_syscall_32+0xde/0x660 [ 1137.770707][T24936] do_fast_syscall_32+0x32/0x70 [ 1137.770729][T24936] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1137.770751][T24936] RIP: 0023:0xf73cd579 [ 1137.770766][T24936] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 1137.770784][T24936] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1137.770801][T24936] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 1137.770812][T24936] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1137.770822][T24936] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1137.770831][T24936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1137.770841][T24936] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1137.770865][T24936] [ 1137.879280][T24946] overlayfs: missing 'lowerdir' [ 1138.158170][T24957] netlink: 'syz.9.4899': attribute type 10 has an invalid length. [ 1138.458500][T25041] FAULT_INJECTION: forcing a failure. [ 1138.458500][T25041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1138.488600][T25041] CPU: 3 UID: 0 PID: 25041 Comm: syz.9.4907 Tainted: G L syzkaller #0 PREEMPT(full) [ 1138.488620][T25041] Tainted: [L]=SOFTLOCKUP [ 1138.488624][T25041] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1138.488631][T25041] Call Trace: [ 1138.488635][T25041] [ 1138.488640][T25041] dump_stack_lvl+0x100/0x190 [ 1138.488660][T25041] should_fail_ex.cold+0x5/0xa [ 1138.488679][T25041] _copy_from_user+0x2e/0xd0 [ 1138.488697][T25041] proc_do_submiturb+0x1a88/0x3950 [ 1138.488710][T25041] ? rcuref_put_slowpath+0x1d0/0x200 [ 1138.488727][T25041] ? get_urb32+0x2fb/0x3d0 [ 1138.488747][T25041] ? find_held_lock+0x2b/0x80 [ 1138.488762][T25041] usbdev_ioctl+0x1d25/0x3aa0 [ 1138.488775][T25041] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1138.488791][T25041] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1138.488805][T25041] ? do_vfs_ioctl+0x226/0x13e0 [ 1138.488823][T25041] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1138.488844][T25041] ? find_held_lock+0x2b/0x80 [ 1138.488854][T25041] ? hook_file_ioctl_common+0x146/0x410 [ 1138.488875][T25041] ? __fget_files+0x21f/0x3d0 [ 1138.488888][T25041] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1138.488905][T25041] compat_ptr_ioctl+0x6e/0xa0 [ 1138.488923][T25041] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 1138.488939][T25041] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1138.488959][T25041] __do_fast_syscall_32+0xde/0x660 [ 1138.488977][T25041] do_fast_syscall_32+0x32/0x70 [ 1138.488992][T25041] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1138.489006][T25041] RIP: 0023:0xf7fd2579 [ 1138.489016][T25041] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 1138.489027][T25041] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1138.489038][T25041] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000802c550a [ 1138.489045][T25041] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1138.489051][T25041] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1138.489058][T25041] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1138.489064][T25041] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1138.489078][T25041] [ 1138.621072][T25087] random: crng reseeded on system resumption [ 1138.649135][T25090] vcan0: tx drop: invalid sa for name 0x0000000000000005 [ 1138.652534][T25090] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4908'. [ 1138.722590][T21776] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1138.797936][T25091] binder: 24968:25091 ioctl 0 80000040 returned -22 [ 1139.393624][T25119] 9p: Invalid gid '0x00000000ffffffff' [ 1139.935625][ C3] lapbether: lapb_data_request error - 4 [ 1139.940115][ C3] lapbether: lapb_data_request error - 4 [ 1139.946427][ C3] lapbether: lapb_data_request error - 4 [ 1139.949398][ C3] lapbether: lapb_data_request error - 4 [ 1139.973817][T25251] binder_alloc: 25250: binder_alloc_buf, no vma [ 1140.069703][ C2] lapbether: lapb_data_request error - 4 [ 1140.071710][ C2] lapbether: lapb_data_request error - 4 [ 1140.073769][ C2] lapbether: lapb_data_request error - 4 [ 1141.207373][ C2] lapbether: lapb_data_request error - 4 [ 1141.209890][ C2] lapbether: lapb_data_request error - 4 [ 1141.212563][ C2] lapbether: lapb_data_request error - 4 [ 1141.214920][ C2] lapbether: lapb_data_request error - 4 [ 1141.226739][ C2] lapbether: lapb_data_request error - 4 [ 1141.229829][ C2] lapbether: lapb_data_request error - 4 [ 1142.761262][ C1] lapbether: lapb_data_request error - 4 [ 1142.765880][ C1] lapbether: lapb_data_request error - 4 [ 1142.769115][ C1] lapbether: lapb_data_request error - 4 [ 1142.776260][ C1] lapbether: lapb_data_request error - 4 [ 1142.841564][ C0] lapbether: lapb_data_request error - 4 [ 1142.846035][ C0] lapbether: lapb_data_request error - 4 [ 1143.484069][ C1] lapbether: lapb_data_request error - 4 [ 1143.490228][ C1] lapbether: lapb_data_request error - 4 [ 1143.880031][T21776] usb 9-1: device descriptor read/64, error -110 [ 1144.119856][T21776] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1144.289765][T21776] usb 9-1: device descriptor read/64, error -32 [ 1144.412720][T21776] usb usb9-port1: attempt power cycle [ 1144.749609][T21776] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1144.770409][T21776] usb 9-1: device descriptor read/8, error -32 [ 1144.812697][ C0] lapbether: lapb_data_request error - 4 [ 1144.816637][ C0] lapbether: lapb_data_request error - 4 [ 1144.819656][ C0] lapbether: lapb_data_request error - 4 [ 1144.831027][ C0] lapbether: lapb_data_request error - 4 [ 1144.833670][ C0] lapbether: lapb_data_request error - 4 [ 1144.879543][T21776] raw-gadget.0 gadget.4: failed to queue suspend event [ 1144.890428][T21776] raw-gadget.0 gadget.4: failed to queue reset event [ 1144.904629][ C0] lapbether: lapb_data_request error - 4 [ 1144.907393][ C0] lapbether: lapb_data_request error - 4 [ 1144.969495][T21776] raw-gadget.0 gadget.4: failed to queue resume event [ 1145.029449][T21776] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1145.059634][ C3] raw-gadget.0 gadget.4: ignoring, device is not running [ 1145.062515][T21776] usb 9-1: device descriptor read/8, error -32 [ 1145.071240][ C1] lapbether: lapb_data_request error - 4 [ 1145.087695][ C1] lapbether: lapb_data_request error - 4 [ 1145.090626][ C1] lapbether: lapb_data_request error - 4 [ 1145.093750][ C1] lapbether: lapb_data_request error - 4 [ 1145.096937][ C1] lapbether: lapb_data_request error - 4 [ 1145.099753][ C1] lapbether: lapb_data_request error - 4 [ 1145.113958][ C1] lapbether: lapb_data_request error - 4 [ 1145.117237][ C1] lapbether: lapb_data_request error - 4 [ 1145.122267][ C1] lapbether: lapb_data_request error - 4 [ 1145.127301][ C1] lapbether: lapb_data_request error - 4 [ 1145.130134][ C1] lapbether: lapb_data_request error - 4 [ 1145.152944][ C1] lapbether: lapb_data_request error - 4 [ 1145.156310][ C1] lapbether: lapb_data_request error - 4 [ 1145.160241][ C1] lapbether: lapb_data_request error - 4 [ 1145.169309][T21776] raw-gadget.0 gadget.4: failed to queue suspend event [ 1145.179373][T21776] usb usb9-port1: unable to enumerate USB device [ 1145.241217][ C1] lapbether: lapb_data_request error - 4 [ 1145.247530][ C1] lapbether: lapb_data_request error - 4 [ 1145.250724][ C1] lapbether: lapb_data_request error - 4 [ 1145.266377][ C3] lapbether: lapb_data_request error - 4 [ 1145.269522][ C3] lapbether: lapb_data_request error - 4 [ 1145.277431][ C3] lapbether: lapb_data_request error - 4 [ 1145.280701][ C3] lapbether: lapb_data_request error - 4 [ 1145.285836][ C3] lapbether: lapb_data_request error - 4 [ 1145.630723][ C1] lapbether: lapb_data_request error - 4 [ 1145.659176][ C3] lapbether: lapb_data_request error - 4 [ 1145.661719][ C3] lapbether: lapb_data_request error - 4 [ 1145.663650][ C3] lapbether: lapb_data_request error - 4 [ 1145.665618][ C3] lapbether: lapb_data_request error - 4 [ 1145.667665][ C3] lapbether: lapb_data_request error - 4 [ 1145.669702][ C3] lapbether: lapb_data_request error - 4 [ 1145.671661][ C3] lapbether: lapb_data_request error - 4 [ 1147.203831][ C1] lapbether: lapb_data_request error - 4 [ 1147.206646][ C1] lapbether: lapb_data_request error - 4 [ 1147.209675][ C1] lapbether: lapb_data_request error - 4 [ 1147.212198][ C1] lapbether: lapb_data_request error - 4 [ 1147.218849][ C1] lapbether: lapb_data_request error - 4 [ 1147.354865][ C0] lapbether: lapb_data_request error - 4 [ 1147.356776][ C0] lapbether: lapb_data_request error - 4 [ 1147.358767][ C0] lapbether: lapb_data_request error - 4 [ 1147.451522][ C0] lapbether: lapb_data_request error - 4 [ 1147.788467][ C0] lapbether: lapb_data_request error - 4 [ 1147.791002][ C0] lapbether: lapb_data_request error - 4 [ 1148.252790][ C1] lapbether: lapb_data_request error - 4 [ 1148.404903][ C2] lapbether: lapb_data_request error - 4 [ 1148.407357][ C2] lapbether: lapb_data_request error - 4 [ 1148.409899][ C2] lapbether: lapb_data_request error - 4 [ 1148.412312][ C2] lapbether: lapb_data_request error - 4 [ 1148.747293][ C2] lapbether: lapb_data_request error - 4 [ 1148.749897][ C2] lapbether: lapb_data_request error - 4 [ 1148.752256][ C2] lapbether: lapb_data_request error - 4 [ 1148.754243][ C2] lapbether: lapb_data_request error - 4 [ 1148.762341][ C2] lapbether: lapb_data_request error - 4 [ 1148.764358][ C2] lapbether: lapb_data_request error - 4 [ 1148.766342][ C2] lapbether: lapb_data_request error - 4 [ 1148.768332][ C2] lapbether: lapb_data_request error - 4 [ 1148.770244][ C2] lapbether: lapb_data_request error - 4 [ 1148.772157][ C2] lapbether: lapb_data_request error - 4 [ 1148.774037][ C2] lapbether: lapb_data_request error - 4 [ 1148.776640][ C2] lapbether: lapb_data_request error - 4 [ 1148.783268][ C2] lapbether: lapb_data_request error - 4 [ 1148.786407][ C2] lapbether: lapb_data_request error - 4 [ 1148.793022][ C2] lapbether: lapb_data_request error - 4 [ 1149.589982][ C2] lapbether: lapb_data_request error - 4 [ 1149.593155][ C2] lapbether: lapb_data_request error - 4 [ 1149.597420][ C2] lapbether: lapb_data_request error - 4 [ 1149.838164][ C1] lapbether: lapb_data_request error - 4 [ 1149.841364][ C1] lapbether: lapb_data_request error - 4 [ 1149.919503][ C1] lapbether: lapb_data_request error - 4 [ 1149.922167][ C1] lapbether: lapb_data_request error - 4 [ 1149.924773][ C1] lapbether: lapb_data_request error - 4 [ 1149.935234][ C1] lapbether: lapb_data_request error - 4 [ 1149.937834][ C1] lapbether: lapb_data_request error - 4 [ 1149.940513][ C1] lapbether: lapb_data_request error - 4 [ 1149.943102][ C1] lapbether: lapb_data_request error - 4 [ 1150.863480][ C1] lapbether: lapb_data_request error - 4 [ 1150.890875][ C2] lapbether: lapb_data_request error - 4 [ 1150.893464][ C2] lapbether: lapb_data_request error - 4 [ 1150.896003][ C2] lapbether: lapb_data_request error - 4 [ 1150.898922][ C2] lapbether: lapb_data_request error - 4 [ 1150.908100][ C2] lapbether: lapb_data_request error - 4 [ 1150.911574][ C2] lapbether: lapb_data_request error - 4 [ 1150.923376][ C2] lapbether: lapb_data_request error - 4 [ 1150.926908][ C2] lapbether: lapb_data_request error - 4 [ 1150.932227][ C2] lapbether: lapb_data_request error - 4 [ 1151.027664][ C3] lapbether: lapb_data_request error - 4 [ 1151.032529][ C3] lapbether: lapb_data_request error - 4 [ 1151.043095][ C3] lapbether: lapb_data_request error - 4 [ 1151.046079][ C3] lapbether: lapb_data_request error - 4 [ 1151.049465][ C3] lapbether: lapb_data_request error - 4 [ 1151.326663][ C3] lapbether: lapb_data_request error - 4 [ 1151.328589][ C3] lapbether: lapb_data_request error - 4 [ 1151.330446][ C3] lapbether: lapb_data_request error - 4 [ 1151.332335][ C3] lapbether: lapb_data_request error - 4 [ 1151.334200][ C3] lapbether: lapb_data_request error - 4 [ 1151.336051][ C3] lapbether: lapb_data_request error - 4 [ 1151.337972][ C3] lapbether: lapb_data_request error - 4 [ 1151.343948][ C3] lapbether: lapb_data_request error - 4 [ 1151.345876][ C3] lapbether: lapb_data_request error - 4 [ 1151.347847][ C3] lapbether: lapb_data_request error - 4 [ 1151.349784][ C3] lapbether: lapb_data_request error - 4 [ 1151.351619][ C3] lapbether: lapb_data_request error - 4 [ 1151.353472][ C3] lapbether: lapb_data_request error - 4 [ 1151.355333][ C3] lapbether: lapb_data_request error - 4 [ 1151.867628][ C2] lapbether: lapb_data_request error - 4 [ 1153.091878][ C1] lapbether: lapb_data_request error - 4 [ 1153.093947][ C1] lapbether: lapb_data_request error - 4 [ 1153.095905][ C1] lapbether: lapb_data_request error - 4 [ 1153.102158][ C1] lapbether: lapb_data_request error - 4 [ 1153.104275][ C1] lapbether: lapb_data_request error - 4 [ 1153.150187][ C0] lapbether: lapb_data_request error - 4 [ 1153.640364][ C3] lapbether: lapb_data_request error - 4 [ 1153.643026][ C3] lapbether: lapb_data_request error - 4 [ 1154.069842][ C3] lapbether: lapb_data_request error - 4 [ 1154.075258][ C3] lapbether: lapb_data_request error - 4 [ 1154.077525][ C3] lapbether: lapb_data_request error - 4 [ 1154.293703][ C0] lapbether: lapb_data_request error - 4 [ 1154.297316][ C0] lapbether: lapb_data_request error - 4 [ 1154.303835][ C0] lapbether: lapb_data_request error - 4 [ 1154.307109][ C0] lapbether: lapb_data_request error - 4 [ 1154.986524][ C2] lapbether: lapb_data_request error - 4 [ 1154.990070][ C2] lapbether: lapb_data_request error - 4 [ 1154.993450][ C2] lapbether: lapb_data_request error - 4 [ 1155.001442][ C2] lapbether: lapb_data_request error - 4 [ 1155.004396][ C2] lapbether: lapb_data_request error - 4 [ 1155.007126][ C2] lapbether: lapb_data_request error - 4 [ 1155.010490][ C2] lapbether: lapb_data_request error - 4 [ 1155.023733][ C2] lapbether: lapb_data_request error - 4 [ 1155.027481][ C2] lapbether: lapb_data_request error - 4 [ 1155.090117][ C2] lapbether: lapb_data_request error - 4 [ 1155.298950][ C0] lapbether: lapb_data_request error - 4 [ 1155.976457][ C0] lapbether: lapb_data_request error - 4 [ 1155.979068][ C0] lapbether: lapb_data_request error - 4 [ 1155.981732][ C0] lapbether: lapb_data_request error - 4 [ 1155.984416][ C0] lapbether: lapb_data_request error - 4 [ 1155.987057][ C0] lapbether: lapb_data_request error - 4 [ 1156.005678][ C0] lapbether: lapb_data_request error - 4 [ 1156.008453][ C0] lapbether: lapb_data_request error - 4 [ 1156.011068][ C0] lapbether: lapb_data_request error - 4 [ 1156.038680][ C1] lapbether: lapb_data_request error - 4 [ 1156.040568][ C1] lapbether: lapb_data_request error - 4 [ 1156.042388][ C1] lapbether: lapb_data_request error - 4 [ 1156.044378][ C1] lapbether: lapb_data_request error - 4 [ 1156.046279][ C1] lapbether: lapb_data_request error - 4 [ 1156.048073][ C1] lapbether: lapb_data_request error - 4 [ 1156.049990][ C1] lapbether: lapb_data_request error - 4 [ 1156.057764][ C1] lapbether: lapb_data_request error - 4 [ 1156.062688][ C1] lapbether: lapb_data_request error - 4 [ 1156.266412][ C3] lapbether: lapb_data_request error - 4 [ 1156.268753][ C3] lapbether: lapb_data_request error - 4 [ 1156.270949][ C3] lapbether: lapb_data_request error - 4 [ 1156.273278][ C3] lapbether: lapb_data_request error - 4 [ 1156.275636][ C3] lapbether: lapb_data_request error - 4 [ 1156.277940][ C3] lapbether: lapb_data_request error - 4 [ 1156.280237][ C3] lapbether: lapb_data_request error - 4 [ 1157.123755][ C3] lapbether: lapb_data_request error - 4 [ 1157.125993][ C3] lapbether: lapb_data_request error - 4 [ 1157.128325][ C3] lapbether: lapb_data_request error - 4 [ 1157.130764][ C3] lapbether: lapb_data_request error - 4 [ 1157.690009][ C0] lapbether: lapb_data_request error - 4 [ 1157.692350][ C0] lapbether: lapb_data_request error - 4 [ 1157.695950][ C1] lapbether: lapb_data_request error - 4 [ 1157.698373][ C1] lapbether: lapb_data_request error - 4 [ 1157.704473][ C0] lapbether: lapb_data_request error - 4 [ 1157.706442][ C0] lapbether: lapb_data_request error - 4 [ 1157.708371][ C0] lapbether: lapb_data_request error - 4 [ 1157.808788][ C1] lapbether: lapb_data_request error - 4 [ 1157.815857][ C1] lapbether: lapb_data_request error - 4 [ 1157.818184][ C1] lapbether: lapb_data_request error - 4 [ 1157.832792][ C1] lapbether: lapb_data_request error - 4 [ 1157.836551][ C1] lapbether: lapb_data_request error - 4 [ 1157.839017][ C1] lapbether: lapb_data_request error - 4 [ 1157.848283][ C1] lapbether: lapb_data_request error - 4 [ 1157.850727][ C1] lapbether: lapb_data_request error - 4 [ 1157.856604][ C1] lapbether: lapb_data_request error - 4 [ 1157.858501][ C1] lapbether: lapb_data_request error - 4 [ 1157.860969][ C1] lapbether: lapb_data_request error - 4 [ 1157.869647][ C1] lapbether: lapb_data_request error - 4 [ 1157.872875][ C1] lapbether: lapb_data_request error - 4 [ 1157.875032][ C1] lapbether: lapb_data_request error - 4 [ 1157.878996][ C1] lapbether: lapb_data_request error - 4 [ 1157.881460][ C1] lapbether: lapb_data_request error - 4 [ 1157.885373][ C1] lapbether: lapb_data_request error - 4 [ 1158.114456][ C2] lapbether: lapb_data_request error - 4 [ 1158.117521][ C2] lapbether: lapb_data_request error - 4 [ 1158.475637][ C3] lapbether: lapb_data_request error - 4 [ 1158.695582][ C3] lapbether: lapb_data_request error - 4 [ 1158.697956][ C3] lapbether: lapb_data_request error - 4 [ 1158.700332][ C3] lapbether: lapb_data_request error - 4 [ 1158.702685][ C3] lapbether: lapb_data_request error - 4 [ 1158.704575][ C3] lapbether: lapb_data_request error - 4 [ 1158.706878][ C3] lapbether: lapb_data_request error - 4 [ 1158.708800][ C3] lapbether: lapb_data_request error - 4 [ 1159.609202][ C2] lapbether: lapb_data_request error - 4 [ 1159.611250][ C2] lapbether: lapb_data_request error - 4 [ 1159.613235][ C2] lapbether: lapb_data_request error - 4 [ 1159.615230][ C2] lapbether: lapb_data_request error - 4 [ 1159.617234][ C2] lapbether: lapb_data_request error - 4 [ 1159.619446][ C2] lapbether: lapb_data_request error - 4 [ 1159.621455][ C2] lapbether: lapb_data_request error - 4 [ 1159.886989][ C3] lapbether: lapb_data_request error - 4 [ 1159.889473][ C3] lapbether: lapb_data_request error - 4 [ 1159.892647][ C3] lapbether: lapb_data_request error - 4 [ 1159.895167][ C3] lapbether: lapb_data_request error - 4 [ 1160.245689][ C2] lapbether: lapb_data_request error - 4 [ 1160.317170][ C3] lapbether: lapb_data_request error - 4 [ 1160.320447][ C3] lapbether: lapb_data_request error - 4 [ 1160.325444][ C3] lapbether: lapb_data_request error - 4 [ 1160.329007][ C3] lapbether: lapb_data_request error - 4 [ 1160.988155][ C2] lapbether: lapb_data_request error - 4 [ 1161.239205][ C1] lapbether: lapb_data_request error - 4 [ 1161.243707][ C1] lapbether: lapb_data_request error - 4 [ 1161.246293][ C1] lapbether: lapb_data_request error - 4 [ 1161.249300][ C1] lapbether: lapb_data_request error - 4 [ 1161.407702][ C0] lapbether: lapb_data_request error - 4 [ 1161.410360][ C0] lapbether: lapb_data_request error - 4 [ 1161.419241][ C0] lapbether: lapb_data_request error - 4 [ 1161.425487][ C0] lapbether: lapb_data_request error - 4 [ 1161.431355][ C0] lapbether: lapb_data_request error - 4 [ 1161.485772][ C2] lapbether: lapb_data_request error - 4 [ 1161.645247][ C1] lapbether: lapb_data_request error - 4 [ 1161.651288][ C1] lapbether: lapb_data_request error - 4 [ 1161.654199][ C1] lapbether: lapb_data_request error - 4 [ 1161.916264][ T1141] tipc: Disabling bearer [ 1162.102551][ C2] lapbether: lapb_data_request error - 4 [ 1162.185748][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1162.196213][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1162.217210][ T1141] bond0 (unregistering): Released all slaves [ 1162.237757][ T1141] bond1 (unregistering): Released all slaves [ 1162.461015][ T1141] bond2 (unregistering): Released all slaves [ 1162.613307][ T1141] tipc: Left network mode [ 1163.118258][ T1141] hsr_slave_0: left promiscuous mode [ 1163.126045][ C1] lapbether: lapb_data_request error - 4 [ 1163.128110][ C1] lapbether: lapb_data_request error - 4 [ 1163.130066][ C1] lapbether: lapb_data_request error - 4 [ 1163.132051][ C1] lapbether: lapb_data_request error - 4 [ 1163.133913][ C1] lapbether: lapb_data_request error - 4 [ 1163.135760][ C1] lapbether: lapb_data_request error - 4 [ 1163.137609][ C1] lapbether: lapb_data_request error - 4 [ 1163.180547][ T1141] hsr_slave_1: left promiscuous mode [ 1163.182890][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1163.185801][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1163.194822][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1163.197430][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1163.224352][ T1141] veth1_macvtap: left promiscuous mode [ 1163.226818][ T1141] veth0_macvtap: left promiscuous mode [ 1163.230863][ T1141] veth1_vlan: left promiscuous mode [ 1163.235343][ T1141] veth0_vlan: left promiscuous mode [ 1163.580389][ T5949] Bluetooth: hci4: command 0x0406 tx timeout [ 1164.203666][ T1141] team0 (unregistering): Port device team_slave_1 removed [ 1164.276440][ T1141] team0 (unregistering): Port device team_slave_0 removed [ 1164.279198][ C0] lapbether: lapb_data_request error - 4 [ 1164.281194][ C0] lapbether: lapb_data_request error - 4 [ 1164.283055][ C0] lapbether: lapb_data_request error - 4 [ 1164.296789][ C0] lapbether: lapb_data_request error - 4 [ 1164.299287][ C0] lapbether: lapb_data_request error - 4 [ 1164.307541][ C0] lapbether: lapb_data_request error - 4 [ 1164.800624][ C2] lapbether: lapb_data_request error - 4 [ 1164.809511][ C0] lapbether: lapb_data_request error - 4 [ 1164.812105][ C0] lapbether: lapb_data_request error - 4 [ 1164.814609][ C0] lapbether: lapb_data_request error - 4 [ 1164.816845][ C0] lapbether: lapb_data_request error - 4 [ 1164.818758][ C0] lapbether: lapb_data_request error - 4 [ 1164.987160][ C1] lapbether: lapb_data_request error - 4 [ 1165.215476][ C3] lapbether: lapb_data_request error - 4 [ 1165.218499][ C3] lapbether: lapb_data_request error - 4 [ 1165.963365][ C2] lapbether: lapb_data_request error - 4 [ 1165.965901][ C2] lapbether: lapb_data_request error - 4 [ 1165.968372][ C2] lapbether: lapb_data_request error - 4 [ 1165.976165][ C2] lapbether: lapb_data_request error - 4 [ 1165.979615][ C2] lapbether: lapb_data_request error - 4 [ 1166.038125][ C0] lapbether: lapb_data_request error - 4 [ 1166.189837][ C2] lapbether: lapb_data_request error - 4 [ 1166.194451][ C2] lapbether: lapb_data_request error - 4 [ 1166.212534][ C2] lapbether: lapb_data_request error - 4 [ 1166.215966][ C2] lapbether: lapb_data_request error - 4 [ 1166.220267][ C3] lapbether: lapb_data_request error - 4 [ 1166.222898][ C3] lapbether: lapb_data_request error - 4 [ 1166.225453][ C3] lapbether: lapb_data_request error - 4 [ 1166.227997][ C3] lapbether: lapb_data_request error - 4 [ 1166.262064][ C3] lapbether: lapb_data_request error - 4 [ 1166.265542][ C3] lapbether: lapb_data_request error - 4 [ 1166.272906][ C3] lapbether: lapb_data_request error - 4 [ 1166.275589][ C3] lapbether: lapb_data_request error - 4 [ 1166.278002][ C3] lapbether: lapb_data_request error - 4 [ 1166.281847][ C3] lapbether: lapb_data_request error - 4 [ 1166.740227][ C3] lapbether: lapb_data_request error - 4 [ 1166.750024][ C3] lapbether: lapb_data_request error - 4 [ 1166.753019][ C3] lapbether: lapb_data_request error - 4 [ 1166.758512][ C2] lapbether: lapb_data_request error - 4 [ 1166.761009][ C2] lapbether: lapb_data_request error - 4 [ 1166.763468][ C2] lapbether: lapb_data_request error - 4 [ 1166.765917][ C2] lapbether: lapb_data_request error - 4 [ 1166.768555][ C2] lapbether: lapb_data_request error - 4 [ 1166.771116][ C2] lapbether: lapb_data_request error - 4 [ 1166.773658][ C2] lapbether: lapb_data_request error - 4 [ 1167.154161][ C3] lapbether: lapb_data_request error - 4 [ 1167.156552][ C3] lapbether: lapb_data_request error - 4 [ 1167.361070][ C3] lapbether: lapb_data_request error - 4 [ 1167.363901][ C3] lapbether: lapb_data_request error - 4 [ 1167.731128][ C3] lapbether: lapb_data_request error - 4 [ 1167.734192][ C3] lapbether: lapb_data_request error - 4 [ 1167.890573][ C0] lapbether: lapb_data_request error - 4 [ 1167.893396][ C0] lapbether: lapb_data_request error - 4 [ 1167.978977][ C1] lapbether: lapb_data_request error - 4 [ 1168.784151][ C1] lapbether: lapb_data_request error - 4 [ 1169.072976][ C2] lapbether: lapb_data_request error - 4 [ 1169.075778][ C2] lapbether: lapb_data_request error - 4 [ 1169.079578][ C2] lapbether: lapb_data_request error - 4 [ 1169.082353][ C2] lapbether: lapb_data_request error - 4 [ 1169.084595][ C2] lapbether: lapb_data_request error - 4 [ 1169.086899][ C3] lapbether: lapb_data_request error - 4 [ 1169.143201][ C2] lapbether: lapb_data_request error - 4 [ 1169.146976][ C2] lapbether: lapb_data_request error - 4 [ 1169.761584][ C3] lapbether: lapb_data_request error - 4 [ 1169.765766][ C3] lapbether: lapb_data_request error - 4 [ 1169.768218][ C3] lapbether: lapb_data_request error - 4 [ 1169.869046][ C0] lapbether: lapb_data_request error - 4 [ 1169.872043][ C0] lapbether: lapb_data_request error - 4 [ 1169.992507][ C1] lapbether: lapb_data_request error - 4 [ 1170.212225][ C1] lapbether: lapb_data_request error - 4 [ 1170.214819][ C1] lapbether: lapb_data_request error - 4 [ 1170.217875][ C1] lapbether: lapb_data_request error - 4 [ 1170.220403][ C1] lapbether: lapb_data_request error - 4 [ 1170.633993][ C3] lapbether: lapb_data_request error - 4 [ 1170.688796][ C2] lapbether: lapb_data_request error - 4 [ 1171.113005][ C2] lapbether: lapb_data_request error - 4 [ 1171.115249][ C2] lapbether: lapb_data_request error - 4 [ 1171.120337][ C3] lapbether: lapb_data_request error - 4 [ 1171.122275][ C3] lapbether: lapb_data_request error - 4 [ 1171.124290][ C3] lapbether: lapb_data_request error - 4 [ 1171.126333][ C3] lapbether: lapb_data_request error - 4 [ 1171.128329][ C3] lapbether: lapb_data_request error - 4 [ 1171.130442][ C3] lapbether: lapb_data_request error - 4 [ 1171.307089][ C1] lapbether: lapb_data_request error - 4 [ 1171.320603][ C1] lapbether: lapb_data_request error - 4 [ 1171.324370][ C1] lapbether: lapb_data_request error - 4 [ 1171.399045][ C2] lapbether: lapb_data_request error - 4 [ 1171.402201][ C2] lapbether: lapb_data_request error - 4 [ 1171.405278][ C2] lapbether: lapb_data_request error - 4 [ 1171.409851][ C2] lapbether: lapb_data_request error - 4 [ 1171.415022][ C2] lapbether: lapb_data_request error - 4 [ 1171.417926][ C2] lapbether: lapb_data_request error - 4 [ 1171.427652][ C2] lapbether: lapb_data_request error - 4 [ 1171.430901][ C2] lapbether: lapb_data_request error - 4 [ 1171.442024][ C2] lapbether: lapb_data_request error - 4 [ 1171.452222][ C2] lapbether: lapb_data_request error - 4 [ 1171.455571][ C2] lapbether: lapb_data_request error - 4 [ 1171.460339][ C2] lapbether: lapb_data_request error - 4 [ 1171.474840][ C2] lapbether: lapb_data_request error - 4 [ 1171.480925][ C2] lapbether: lapb_data_request error - 4 [ 1171.484843][ C2] lapbether: lapb_data_request error - 4 [ 1171.490429][ C2] lapbether: lapb_data_request error - 4 [ 1171.497037][ C2] lapbether: lapb_data_request error - 4 [ 1171.512339][ C2] lapbether: lapb_data_request error - 4 [ 1171.533978][ C2] lapbether: lapb_data_request error - 4 [ 1171.537154][ C2] lapbether: lapb_data_request error - 4 [ 1171.541189][ C2] lapbether: lapb_data_request error - 4 [ 1171.549524][ C2] lapbether: lapb_data_request error - 4 [ 1171.552032][ C2] lapbether: lapb_data_request error - 4 [ 1171.558899][ C2] lapbether: lapb_data_request error - 4 [ 1171.561406][ C2] lapbether: lapb_data_request error - 4 [ 1172.128522][ C1] lapbether: lapb_data_request error - 4 [ 1172.131685][ C1] lapbether: lapb_data_request error - 4 [ 1172.190353][ C1] lapbether: lapb_data_request error - 4 [ 1172.421601][ C0] lapbether: lapb_data_request error - 4 [ 1172.950456][ C1] lapbether: lapb_data_request error - 4 [ 1172.953502][ C1] lapbether: lapb_data_request error - 4 [ 1173.029001][ C0] lapbether: lapb_data_request error - 4 [ 1173.031485][ C0] lapbether: lapb_data_request error - 4 [ 1173.034143][ C0] lapbether: lapb_data_request error - 4 [ 1173.036883][ C0] lapbether: lapb_data_request error - 4 [ 1173.041769][ C0] lapbether: lapb_data_request error - 4 [ 1173.056328][ C0] lapbether: lapb_data_request error - 4 [ 1173.058854][ C0] lapbether: lapb_data_request error - 4 [ 1173.066139][ C0] lapbether: lapb_data_request error - 4 [ 1173.069226][ C0] lapbether: lapb_data_request error - 4 [ 1173.258653][ C1] lapbether: lapb_data_request error - 4 [ 1173.464659][ C3] lapbether: lapb_data_request error - 4 [ 1173.467488][ C3] lapbether: lapb_data_request error - 4 [ 1173.470206][ C3] lapbether: lapb_data_request error - 4 [ 1173.472192][ C3] lapbether: lapb_data_request error - 4 [ 1173.698244][ C1] lapbether: lapb_data_request error - 4 [ 1173.702689][ C1] lapbether: lapb_data_request error - 4 [ 1173.705802][ C1] lapbether: lapb_data_request error - 4 [ 1173.713421][ C1] lapbether: lapb_data_request error - 4 [ 1173.716598][ C1] lapbether: lapb_data_request error - 4 [ 1173.728448][ C1] lapbether: lapb_data_request error - 4 [ 1173.946966][ C3] lapbether: lapb_data_request error - 4 [ 1173.961537][ C3] lapbether: lapb_data_request error - 4 [ 1173.964656][ C3] lapbether: lapb_data_request error - 4 [ 1174.322079][ C3] lapbether: lapb_data_request error - 4 [ 1174.325140][ C3] lapbether: lapb_data_request error - 4 [ 1174.340399][ C3] lapbether: lapb_data_request error - 4 [ 1174.343862][ C3] lapbether: lapb_data_request error - 4 [ 1174.348918][ C2] lapbether: lapb_data_request error - 4 [ 1174.351934][ C2] lapbether: lapb_data_request error - 4 [ 1174.429899][ C0] lapbether: lapb_data_request error - 4 [ 1174.432555][ C0] lapbether: lapb_data_request error - 4 [ 1174.435214][ C0] lapbether: lapb_data_request error - 4 [ 1174.444163][ C0] lapbether: lapb_data_request error - 4 [ 1174.457317][ C0] lapbether: lapb_data_request error - 4 [ 1174.919002][ T7241] hid-generic FFFD:0000:0000.0009: unknown main item tag 0x7 [ 1174.922754][ T7241] hid-generic FFFD:0000:0000.0009: ignoring exceeding usage max [ 1174.927167][ T7241] hid-generic FFFD:0000:0000.0009: unknown main item tag 0x0 [ 1174.930325][ T7241] hid-generic FFFD:0000:0000.0009: unknown main item tag 0x0 [ 1174.933514][ T7241] hid-generic FFFD:0000:0000.0009: unknown main item tag 0x0 [ 1174.938702][ T7241] hid-generic FFFD:0000:0000.0009: unknown main item tag 0x0 [ 1174.941775][ T7241] hid-generic FFFD:0000:0000.0009: unknown main item tag 0x0 [ 1174.950466][ T7241] hid-generic FFFD:0000:0000.0009: unknown main item tag 0x0 [ 1174.953066][ T7241] hid-generic FFFD:0000:0000.0009: unknown main item tag 0x0 [ 1174.956715][ T7241] hid-generic FFFD:0000:0000.0009: unknown main item tag 0x0 [ 1174.959838][ T7241] hid-generic FFFD:0000:0000.0009: unknown main item tag 0x0 [ 1174.968418][ T7241] hid-generic FFFD:0000:0000.0009: hidraw1: HID v0.00 Device [syz0] on syz1 [ 1174.989946][T26282] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4922'. [ 1175.165712][ T6006] usb 13-1: new high-speed USB device number 19 using dummy_hcd [ 1175.519582][T26292] fido_id[26292]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1175.644132][ T6006] usb 13-1: Using ep0 maxpacket: 8 [ 1175.664099][ T6006] usb 13-1: config index 0 descriptor too short (expected 301, got 45) [ 1175.667050][ T6006] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1175.679483][ T6006] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1175.716478][ T6006] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1175.927287][ T6006] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1175.932416][ T6006] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1175.943840][ T6006] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.179151][ C2] lapbether: lapb_data_request error - 4 [ 1176.182768][ C2] lapbether: lapb_data_request error - 4 [ 1176.197150][ C2] lapbether: lapb_data_request error - 4 [ 1176.200184][ C2] lapbether: lapb_data_request error - 4 [ 1176.205882][ C2] lapbether: lapb_data_request error - 4 [ 1176.295997][T26299] netlink: 'syz.1.4927': attribute type 2 has an invalid length. [ 1176.874836][ C3] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1176.913231][ T6006] usb 13-1: GET_CAPABILITIES returned 0 [ 1176.915621][ T6006] usbtmc 13-1:16.0: can't read capabilities [ 1177.086502][T26295] binder: 26283:26295 ioctl 0 80000040 returned -22 [ 1177.228039][T26284] wireguard0: entered promiscuous mode [ 1177.229844][T26284] wireguard0: entered allmulticast mode [ 1177.488716][T26367] bridge0: port 3(erspan0) entered blocking state [ 1177.490842][T26367] bridge0: port 3(erspan0) entered disabled state [ 1177.493179][T26367] erspan0: entered allmulticast mode [ 1177.496486][T26367] erspan0: entered promiscuous mode [ 1177.498480][T26367] bridge0: port 3(erspan0) entered blocking state [ 1177.500527][T26367] bridge0: port 3(erspan0) entered forwarding state [ 1177.851818][ C2] lapbether: lapb_data_request error - 4 [ 1177.855211][ C2] lapbether: lapb_data_request error - 4 [ 1177.859673][ C2] lapbether: lapb_data_request error - 4 [ 1177.862336][ C2] lapbether: lapb_data_request error - 4 [ 1177.917113][ T5947] usb 13-1: USB disconnect, device number 19 [ 1178.695436][T26543] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4934'. [ 1178.699020][T26543] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4934'. [ 1178.737123][T26544] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 1178.739234][T26544] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1178.741948][T26544] vhci_hcd vhci_hcd.0: Device attached [ 1178.761961][T26544] netlink: 116 bytes leftover after parsing attributes in process `syz.9.4931'. [ 1178.944023][ T5947] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 1179.002423][ T5947] usb 55-1: new full-speed USB device number 2 using vhci_hcd [ 1179.137503][T26545] vhci_hcd: connection reset by peer [ 1179.140083][ T1141] vhci_hcd vhci_hcd.9: stop threads [ 1179.141941][ T1141] vhci_hcd vhci_hcd.9: release socket [ 1179.147850][ T1141] vhci_hcd vhci_hcd.9: disconnect device [ 1179.234669][T26564] virtio-fs: tag not found [ 1179.881070][ C2] lapbether: lapb_data_request error - 4 [ 1179.883748][ C2] lapbether: lapb_data_request error - 4 [ 1179.893037][ C2] lapbether: lapb_data_request error - 4 [ 1180.356679][T26593] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4939'. [ 1180.622207][ C2] lapbether: lapb_data_request error - 4 [ 1180.654295][ C2] lapbether: lapb_data_request error - 4 [ 1180.657649][ C2] lapbether: lapb_data_request error - 4 [ 1180.669073][ C2] lapbether: lapb_data_request error - 4 [ 1180.672796][ C2] lapbether: lapb_data_request error - 4 [ 1180.678807][ C2] lapbether: lapb_data_request error - 4 [ 1180.681924][ C2] lapbether: lapb_data_request error - 4 [ 1180.703489][ C2] lapbether: lapb_data_request error - 4 [ 1180.706876][ C2] lapbether: lapb_data_request error - 4 [ 1181.177641][T26613] overlayfs: missing 'lowerdir' [ 1181.239542][ C3] lapbether: lapb_data_request error - 4 [ 1181.584428][ C2] lapbether: lapb_data_request error - 4 [ 1181.586900][ C2] lapbether: lapb_data_request error - 4 [ 1181.591098][ C2] lapbether: lapb_data_request error - 4 [ 1181.612124][ C3] lapbether: lapb_data_request error - 4 [ 1181.780426][T26724] qrtr: Invalid version 0 [ 1181.969766][T26728] netlink: 'syz.8.4943': attribute type 1 has an invalid length. [ 1181.982270][T26728] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1182.031975][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.037613][ T1419] net_ratelimit: 33018 callbacks suppressed [ 1182.037631][ T1419] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 1182.042767][ T1419] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1182.629169][ C2] lapbether: lapb_data_request error - 4 [ 1182.631811][ C2] lapbether: lapb_data_request error - 4 [ 1182.635401][ C2] lapbether: lapb_data_request error - 4 [ 1182.709856][T26728] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1182.760742][T26731] bond1: (slave veth0_to_bond): making interface the new active one [ 1182.764418][T26731] veth0_to_bond: entered promiscuous mode [ 1182.766771][T26731] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1182.861605][ C0] lapbether: lapb_data_request error - 4 [ 1183.084182][ C1] lapbether: lapb_data_request error - 4 [ 1183.087567][ C1] lapbether: lapb_data_request error - 4 [ 1183.090407][ C1] lapbether: lapb_data_request error - 4 [ 1183.098153][ C1] lapbether: lapb_data_request error - 4 [ 1183.100523][ C1] lapbether: lapb_data_request error - 4 [ 1183.105460][ C1] lapbether: lapb_data_request error - 4 [ 1183.113945][ C1] lapbether: lapb_data_request error - 4 [ 1183.116505][ C1] lapbether: lapb_data_request error - 4 [ 1183.119136][ C1] lapbether: lapb_data_request error - 4 [ 1183.125135][ C1] lapbether: lapb_data_request error - 4 [ 1183.812290][T26851] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 1183.814975][T26851] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1183.818002][T26851] vhci_hcd vhci_hcd.0: Device attached [ 1183.938780][T26855] binder: 26852:26855 ioctl 0 80000040 returned -22 [ 1183.993702][T26841] blktrace: Concurrent blktraces are not allowed on sg0 [ 1184.179788][ T5947] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 1184.271619][T25693] usb 40-1: SetAddress Request (34) to port 0 [ 1184.274284][T25693] usb 40-1: new SuperSpeed USB device number 34 using vhci_hcd [ 1184.828327][ C0] lapbether: lapb_data_request error - 4 [ 1184.831053][ C0] lapbether: lapb_data_request error - 4 [ 1184.833680][ C0] lapbether: lapb_data_request error - 4 [ 1184.836268][ C0] lapbether: lapb_data_request error - 4 [ 1185.555596][ C0] lapbether: lapb_data_request error - 4 [ 1185.557519][ C0] lapbether: lapb_data_request error - 4 [ 1185.559482][ C0] lapbether: lapb_data_request error - 4 [ 1185.561346][ C0] lapbether: lapb_data_request error - 4 [ 1185.563218][ C0] lapbether: lapb_data_request error - 4 [ 1185.565094][ C0] lapbether: lapb_data_request error - 4 [ 1185.566919][ C0] lapbether: lapb_data_request error - 4 [ 1185.568753][ C0] lapbether: lapb_data_request error - 4 [ 1185.570627][ C0] lapbether: lapb_data_request error - 4 [ 1185.572436][ C0] lapbether: lapb_data_request error - 4 [ 1185.574293][ C0] lapbether: lapb_data_request error - 4 [ 1185.576087][ C0] lapbether: lapb_data_request error - 4 [ 1185.577932][ C0] lapbether: lapb_data_request error - 4 [ 1185.579793][ C0] lapbether: lapb_data_request error - 4 [ 1185.581627][ C0] lapbether: lapb_data_request error - 4 [ 1185.984026][T27068] binder: 26971:27068 ioctl 0 80000040 returned -22 [ 1186.089661][T26856] vhci_hcd: connection reset by peer [ 1186.095159][T25415] vhci_hcd vhci_hcd.1: stop threads [ 1186.097677][T25415] vhci_hcd vhci_hcd.1: release socket [ 1186.108297][T25415] vhci_hcd vhci_hcd.1: disconnect device [ 1186.211760][T27070] bridge_slave_0: left allmulticast mode [ 1186.214254][T27070] bridge_slave_0: left promiscuous mode [ 1186.216682][T27070] bridge0: port 1(bridge_slave_0) entered disabled state [ 1186.292873][T27070] bridge_slave_1: left allmulticast mode [ 1186.294754][T27070] bridge_slave_1: left promiscuous mode [ 1186.296666][T27070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1186.331245][T27070] bond0: (slave bond_slave_0): Releasing backup interface [ 1186.719142][T27070] bond0: (slave bond_slave_1): Releasing backup interface [ 1186.809788][T27070] team0: Port device team_slave_0 removed [ 1186.831093][T27070] team0: Port device team_slave_1 removed [ 1186.835440][T27070] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1187.298975][T27181] binder: 27175:27181 ioctl 0 80000040 returned -22 [ 1187.319620][ C1] lapbether: lapb_data_request error - 4 [ 1187.323020][ C1] lapbether: lapb_data_request error - 4 [ 1187.325689][ C1] lapbether: lapb_data_request error - 4 [ 1187.337006][ C1] lapbether: lapb_data_request error - 4 [ 1187.349423][ C1] lapbether: lapb_data_request error - 4 [ 1187.352188][ C1] lapbether: lapb_data_request error - 4 [ 1187.431419][T27177] binder: 27173:27177 ioctl 0 80000040 returned -22 [ 1188.526963][T27290] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1188.530922][T27290] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1188.534875][T27290] overlayfs: missing 'lowerdir' [ 1189.348494][T25693] usb 40-1: device descriptor read/8, error -110 [ 1189.418562][T27307] binder: 27299:27307 ioctl 0 80000040 returned -22 [ 1189.622102][T27305] binder: 27297:27305 ioctl 0 80000040 returned -22 [ 1189.769895][T25693] usb usb40-port1: attempt power cycle [ 1191.067695][ T7158] usb 13-1: new high-speed USB device number 20 using dummy_hcd [ 1191.156866][T27434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4965'. [ 1191.227595][ T7158] usb 13-1: Using ep0 maxpacket: 32 [ 1191.231850][ T7158] usb 13-1: config index 0 descriptor too short (expected 29220, got 36) [ 1191.238457][ T7158] usb 13-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1191.244023][ T7158] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1191.247535][ T7158] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1191.251854][ T7158] usb 13-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1191.254846][ T7158] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1191.258288][ T7158] usb 13-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1191.261555][ T7158] usb 13-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1191.268085][ T7158] usb 13-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1191.281247][ T7158] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.285033][ T7158] usb 13-1: config 0 descriptor?? [ 1191.523421][ T7158] usblp 13-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1191.536742][ T7158] usb 13-1: USB disconnect, device number 20 [ 1191.549218][ T7158] usblp0: removed [ 1191.566939][T25693] usb usb40-port1: unable to enumerate USB device [ 1191.603076][ T53] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1191.719499][T27549] trusted_key: encrypted_key: insufficient parameters specified [ 1191.766482][ C0] lapbether: lapb_data_request error - 4 [ 1191.776136][ T53] usb 6-1: Using ep0 maxpacket: 32 [ 1191.780318][ T53] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1191.782951][ T53] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1191.785707][ T53] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1191.796823][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1191.800358][ T53] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1191.804252][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1191.825948][ T53] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1192.784217][ T53] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1192.789806][ T53] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1192.793693][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.799085][ T53] usb 6-1: config 0 descriptor?? [ 1192.985384][ T7158] usb 13-1: new high-speed USB device number 21 using dummy_hcd [ 1193.007712][ T53] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1193.017561][ T53] usb 6-1: USB disconnect, device number 40 [ 1193.022181][ T53] usblp0: removed [ 1193.180526][T27663] ªªªªªª: renamed from wg2 (while UP) [ 1193.244074][T27665] ptrace attach of "/syz-executor exec"[11353] was attempted by "/syz-executor exec"[27665] [ 1193.327679][ C1] lapbether: lapb_data_request error - 4 [ 1193.329853][ C1] lapbether: lapb_data_request error - 4 [ 1193.332910][ C1] lapbether: lapb_data_request error - 4 [ 1193.376878][ C0] lapbether: lapb_data_request error - 4 [ 1193.383474][ C0] lapbether: lapb_data_request error - 4 [ 1193.386713][ C0] lapbether: lapb_data_request error - 4 [ 1194.027855][ C2] lapbether: lapb_data_request error - 4 [ 1194.030558][ C2] lapbether: lapb_data_request error - 4 [ 1194.033553][ C2] lapbether: lapb_data_request error - 4 [ 1194.036342][ C2] lapbether: lapb_data_request error - 4 [ 1194.039085][ C2] lapbether: lapb_data_request error - 4 [ 1194.221011][ T53] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1194.421288][T23112] usb 14-1: new full-speed USB device number 5 using dummy_hcd [ 1194.466206][T25415] veth0_to_bond: left promiscuous mode [ 1194.596546][T23112] usb 14-1: config 0 has an invalid interface number: 126 but max is 0 [ 1194.600411][T23112] usb 14-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1194.605033][T23112] usb 14-1: config 0 has no interface number 0 [ 1194.607738][T23112] usb 14-1: config 0 interface 126 has no altsetting 0 [ 1194.614124][T23112] usb 14-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=df.8e [ 1194.618549][T23112] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.622431][T23112] usb 14-1: Product: syz [ 1194.624368][T23112] usb 14-1: Manufacturer: syz [ 1194.626993][T23112] usb 14-1: SerialNumber: syz [ 1194.645031][T23112] usb 14-1: config 0 descriptor?? [ 1194.651516][T23112] zaurus 14-1:0.126: More than one union descriptor, skipping ... [ 1194.656232][T23112] zaurus 14-1:0.126: skipping garbage [ 1194.658586][T23112] usb 14-1: bad CDC descriptors [ 1194.714225][ C2] lapbether: lapb_data_request error - 4 [ 1194.716845][ C2] lapbether: lapb_data_request error - 4 [ 1194.719361][ C2] lapbether: lapb_data_request error - 4 [ 1194.721841][ C2] lapbether: lapb_data_request error - 4 [ 1194.724289][ C2] lapbether: lapb_data_request error - 4 [ 1194.726857][ C2] lapbether: lapb_data_request error - 4 [ 1194.729699][ C2] lapbether: lapb_data_request error - 4 [ 1194.732242][ C2] lapbether: lapb_data_request error - 4 [ 1194.734875][ C2] lapbether: lapb_data_request error - 4 [ 1194.737389][ C2] lapbether: lapb_data_request error - 4 [ 1194.739917][ C2] lapbether: lapb_data_request error - 4 [ 1194.742368][ C2] lapbether: lapb_data_request error - 4 [ 1194.745124][ C2] lapbether: lapb_data_request error - 4 [ 1194.786630][ T53] usb 6-1: device not accepting address 41, error -71 [ 1195.044735][T27691] binder: 27687:27691 ioctl 0 80000040 returned -22 [ 1195.066646][ C0] lapbether: lapb_data_request error - 4 [ 1195.069312][ C0] lapbether: lapb_data_request error - 4 [ 1195.071958][ C0] lapbether: lapb_data_request error - 4 [ 1195.074619][ C0] lapbether: lapb_data_request error - 4 [ 1195.077376][ C0] lapbether: lapb_data_request error - 4 [ 1195.079969][ C0] lapbether: lapb_data_request error - 4 [ 1195.082483][ C0] lapbether: lapb_data_request error - 4 [ 1195.869577][T27713] binder: 27709:27713 ioctl 0 80000040 returned -22 [ 1195.990516][T27715] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4984'. [ 1196.405050][ C1] lapbether: lapb_data_request error - 4 [ 1196.412011][ C1] lapbether: lapb_data_request error - 4 [ 1196.483921][ C0] lapbether: lapb_data_request error - 4 [ 1197.299748][T23112] usb 14-1: USB disconnect, device number 5 [ 1197.363414][ T53] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 1197.419355][T27755] loop5: detected capacity change from 0 to 7 [ 1197.423785][T27755] Dev loop5: unable to read RDB block 7 [ 1197.432354][T27755] loop5: unable to read partition table [ 1197.435097][T27755] loop5: partition table beyond EOD, truncated [ 1197.442876][T27755] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1197.524725][ T53] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1197.527281][ T53] usb 6-1: config 0 has no interface number 0 [ 1197.529401][ T53] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1197.538142][ T53] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1197.554719][ T53] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1197.558471][ T53] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1197.561707][ T53] usb 6-1: Product: syz [ 1197.565618][ T53] usb 6-1: SerialNumber: syz [ 1197.574491][ T53] usb 6-1: config 0 descriptor?? [ 1197.579816][ T53] usbhid 6-1:0.8: couldn't find an input interrupt endpoint [ 1197.714502][T27763] binder: 27751:27763 ioctl 0 80000040 returned -22 [ 1198.598385][T27776] binder: BINDER_SET_CONTEXT_MGR already set [ 1198.600853][T27776] binder: 27742:27776 ioctl 4018620d 800002c0 returned -16 [ 1198.668351][T27774] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4988'. [ 1198.876441][ C1] lapbether: lapb_data_request error - 4 [ 1198.881072][ C1] lapbether: lapb_data_request error - 4 [ 1198.887290][ C1] lapbether: lapb_data_request error - 4 [ 1198.889846][ C1] lapbether: lapb_data_request error - 4 [ 1198.899717][ C1] lapbether: lapb_data_request error - 4 [ 1198.901916][ C1] lapbether: lapb_data_request error - 4 [ 1198.907281][ C1] lapbether: lapb_data_request error - 4 [ 1198.909255][ C1] lapbether: lapb_data_request error - 4 [ 1198.911965][ C1] lapbether: lapb_data_request error - 4 [ 1198.914406][ C1] lapbether: lapb_data_request error - 4 [ 1198.928700][ C1] lapbether: lapb_data_request error - 4 [ 1198.933441][ C1] lapbether: lapb_data_request error - 4 [ 1198.936631][ C1] lapbether: lapb_data_request error - 4 [ 1198.939043][ C1] lapbether: lapb_data_request error - 4 [ 1198.942909][ C1] lapbether: lapb_data_request error - 4 [ 1198.945128][ C1] lapbether: lapb_data_request error - 4 [ 1198.947643][ C1] lapbether: lapb_data_request error - 4 [ 1198.949950][ C1] lapbether: lapb_data_request error - 4 [ 1198.952620][ C1] lapbether: lapb_data_request error - 4 [ 1198.954997][ C1] lapbether: lapb_data_request error - 4 [ 1198.955210][T27789] netlink: 7064 bytes leftover after parsing attributes in process `syz.9.4996'. [ 1198.956842][ C1] lapbether: lapb_data_request error - 4 [ 1198.960722][T27789] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1198.982431][T27789] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4996'. [ 1199.138728][T27788] binder: 27782:27788 ioctl 0 80000040 returned -22 [ 1200.163857][ T6179] usb 6-1: USB disconnect, device number 43 [ 1200.692823][ C0] lapbether: lapb_data_request error - 4 [ 1200.698273][ C0] lapbether: lapb_data_request error - 4 [ 1200.701172][ C0] lapbether: lapb_data_request error - 4 [ 1200.837823][ C1] lapbether: lapb_data_request error - 4 [ 1200.841828][ C1] lapbether: lapb_data_request error - 4 [ 1200.845078][ C1] lapbether: lapb_data_request error - 4 [ 1200.849827][ C1] lapbether: lapb_data_request error - 4 [ 1200.853330][ C1] lapbether: lapb_data_request error - 4 [ 1200.856824][ C1] lapbether: lapb_data_request error - 4 [ 1201.060518][ C2] lapbether: lapb_data_request error - 4 [ 1201.064009][ C2] lapbether: lapb_data_request error - 4 [ 1201.072443][ C2] lapbether: lapb_data_request error - 4 [ 1201.075402][ C2] lapbether: lapb_data_request error - 4 [ 1201.082384][ C2] lapbether: lapb_data_request error - 4 [ 1201.086472][ C2] lapbether: lapb_data_request error - 4 [ 1201.089530][ C2] lapbether: lapb_data_request error - 4 [ 1201.108909][ C3] lapbether: lapb_data_request error - 4 [ 1201.111657][ C3] lapbether: lapb_data_request error - 4 [ 1201.113976][ C3] lapbether: lapb_data_request error - 4 [ 1201.116101][ C3] lapbether: lapb_data_request error - 4 [ 1201.118688][ C3] lapbether: lapb_data_request error - 4 [ 1201.121359][ C3] lapbether: lapb_data_request error - 4 [ 1201.123782][ C3] lapbether: lapb_data_request error - 4 [ 1201.164234][ C3] lapbether: lapb_data_request error - 4 [ 1201.166748][ C3] lapbether: lapb_data_request error - 4 [ 1201.172323][ C3] lapbether: lapb_data_request error - 4 [ 1201.262963][T27835] syzkaller0: entered promiscuous mode [ 1201.264875][T27835] syzkaller0: entered allmulticast mode [ 1201.269372][T27835] TC_ACT_REPEAT abuse ? [ 1201.526208][ C2] lapbether: lapb_data_request error - 4 [ 1201.554751][T27842] syzkaller1: entered promiscuous mode [ 1201.556698][T27842] syzkaller1: entered allmulticast mode [ 1202.126185][T27857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1202.136663][T27857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1202.397606][T27861] netlink: 'syz.1.5018': attribute type 62 has an invalid length. [ 1202.691549][ C2] lapbether: lapb_data_request error - 4 [ 1202.695423][ C2] lapbether: lapb_data_request error - 4 [ 1202.698925][ C2] lapbether: lapb_data_request error - 4 [ 1202.708134][ C2] lapbether: lapb_data_request error - 4 [ 1202.717800][ C2] lapbether: lapb_data_request error - 4 [ 1202.720745][ C2] lapbether: lapb_data_request error - 4 [ 1202.747895][ C0] lapbether: lapb_data_request error - 4 [ 1202.750518][ C0] lapbether: lapb_data_request error - 4 [ 1202.752900][ C0] lapbether: lapb_data_request error - 4 [ 1202.760869][ C0] lapbether: lapb_data_request error - 4 [ 1202.763176][ C0] lapbether: lapb_data_request error - 4 [ 1202.765673][ C0] lapbether: lapb_data_request error - 4 [ 1202.768157][ C0] lapbether: lapb_data_request error - 4 [ 1202.943458][T27875] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5025'. [ 1203.103381][T27877] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5028'. [ 1203.142414][T27887] virtio-fs: tag not found [ 1204.054012][T28014] ieee802154 phy1 wpan1: encryption failed: -22 [ 1204.153644][T28018] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5040'. [ 1204.223785][ C2] lapbether: lapb_data_request error - 4 [ 1204.480782][ C0] lapbether: lapb_data_request error - 4 [ 1204.482677][ C0] lapbether: lapb_data_request error - 4 [ 1204.484546][ C0] lapbether: lapb_data_request error - 4 [ 1204.486421][ C0] lapbether: lapb_data_request error - 4 [ 1204.488281][ C0] lapbether: lapb_data_request error - 4 [ 1205.777176][T28036] 9p: Invalid gid '0x00000000ffffffff' [ 1205.815580][T28038] FAULT_INJECTION: forcing a failure. [ 1205.815580][T28038] name failslab, interval 1, probability 0, space 0, times 0 [ 1205.819602][T28038] CPU: 2 UID: 0 PID: 28038 Comm: syz.8.5048 Tainted: G L syzkaller #0 PREEMPT(full) [ 1205.819620][T28038] Tainted: [L]=SOFTLOCKUP [ 1205.819624][T28038] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1205.819631][T28038] Call Trace: [ 1205.819635][T28038] [ 1205.819640][T28038] dump_stack_lvl+0x100/0x190 [ 1205.819658][T28038] should_fail_ex.cold+0x5/0xa [ 1205.819677][T28038] should_failslab+0xc2/0x120 [ 1205.819695][T28038] __kmalloc_node_track_caller_noprof+0xf9/0x9d0 [ 1205.819711][T28038] ? simple_xattr_set+0x5b/0x3e0 [ 1205.819730][T28038] ? kstrdup+0x51/0xe0 [ 1205.819743][T28038] kstrdup+0x51/0xe0 [ 1205.819758][T28038] simple_xattr_set+0x5b/0x3e0 [ 1205.819775][T28038] shmem_xattr_handler_set+0x318/0x3b0 [ 1205.819795][T28038] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 1205.819811][T28038] __vfs_setxattr+0x175/0x1e0 [ 1205.819825][T28038] ? __pfx___vfs_setxattr+0x10/0x10 [ 1205.819836][T28038] ? __pfx_make_vfsgid+0x10/0x10 [ 1205.819857][T28038] __vfs_setxattr_noperm+0x127/0x660 [ 1205.819873][T28038] __vfs_setxattr_locked+0x17d/0x250 [ 1205.819889][T28038] vfs_setxattr+0x140/0x330 [ 1205.819904][T28038] ? __pfx_vfs_setxattr+0x10/0x10 [ 1205.819918][T28038] ? mnt_get_write_access+0x1e9/0x2f0 [ 1205.819938][T28038] ovl_xattr_set+0x253/0x5a0 [ 1205.819957][T28038] ? __pfx_ovl_xattr_set+0x10/0x10 [ 1205.819975][T28038] ? evm_protected_xattr_common+0x184/0x1f0 [ 1205.819990][T28038] ? xattr_resolve_name+0x27d/0x3f0 [ 1205.820003][T28038] ? __pfx_ovl_other_xattr_set+0x10/0x10 [ 1205.820019][T28038] __vfs_setxattr+0x175/0x1e0 [ 1205.820033][T28038] ? __pfx___vfs_setxattr+0x10/0x10 [ 1205.820044][T28038] ? __pfx_make_vfsgid+0x10/0x10 [ 1205.820067][T28038] __vfs_setxattr_noperm+0x127/0x660 [ 1205.820083][T28038] __vfs_setxattr_locked+0x17d/0x250 [ 1205.820098][T28038] vfs_setxattr+0x140/0x330 [ 1205.820114][T28038] ? __pfx_vfs_setxattr+0x10/0x10 [ 1205.820126][T28038] ? mnt_get_write_access+0x52/0x2f0 [ 1205.820143][T28038] ? mnt_get_write_access+0x52/0x2f0 [ 1205.820162][T28038] do_setxattr+0x145/0x180 [ 1205.820176][T28038] filename_setxattr+0x16e/0x1d0 [ 1205.820190][T28038] ? __pfx_filename_setxattr+0x10/0x10 [ 1205.820203][T28038] ? getname_flags.part.0+0x1c5/0x540 [ 1205.820223][T28038] path_setxattrat+0x1ff/0x3a0 [ 1205.820237][T28038] ? __pfx_path_setxattrat+0x10/0x10 [ 1205.820252][T28038] ? ksys_write+0x190/0x250 [ 1205.820265][T28038] ? ksys_write+0x190/0x250 [ 1205.820289][T28038] ? fput+0x79/0x100 [ 1205.820304][T28038] ? ksys_write+0x1ac/0x250 [ 1205.820323][T28038] __ia32_sys_lsetxattr+0xc7/0x140 [ 1205.820337][T28038] ? __do_fast_syscall_32+0x97/0x660 [ 1205.820352][T28038] ? lockdep_hardirqs_on+0x78/0x100 [ 1205.820365][T28038] __do_fast_syscall_32+0xde/0x660 [ 1205.820380][T28038] do_fast_syscall_32+0x32/0x70 [ 1205.820395][T28038] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1205.820409][T28038] RIP: 0023:0xf7fc2579 [ 1205.820418][T28038] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 1205.820429][T28038] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 00000000000000e3 [ 1205.820440][T28038] RAX: ffffffffffffffda RBX: 0000000080000080 RCX: 00000000800000c0 [ 1205.820447][T28038] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1205.820453][T28038] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1205.820460][T28038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1205.820469][T28038] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1205.820490][T28038] [ 1206.006737][T28039] virtio-fs: tag not found [ 1206.123690][T28042] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5049'. [ 1206.457348][T28048] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5051'. [ 1206.908872][ T2161] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1207.454253][T28290] virtio-fs: tag not found [ 1207.638705][T28298] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5053'. [ 1207.685655][T28300] 9p: Invalid gid '0x00000000ffffffff' [ 1208.259172][ C2] lapbether: lapb_data_request error - 4 [ 1208.336164][T28403] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5063'. [ 1208.401639][T28404] random: crng reseeded on system resumption [ 1209.070293][ C3] lapbether: lapb_data_request error - 4 [ 1209.573963][ C3] lapbether: lapb_data_request error - 4 [ 1209.702549][ C2] lapbether: lapb_data_request error - 4 [ 1209.939129][ C0] lapbether: lapb_data_request error - 4 [ 1209.949513][ C0] lapbether: lapb_data_request error - 4 [ 1209.958804][ C0] lapbether: lapb_data_request error - 4 [ 1209.970778][ C0] lapbether: lapb_data_request error - 4 [ 1210.149328][ C3] lapbether: lapb_data_request error - 4 [ 1210.152156][ C3] lapbether: lapb_data_request error - 4 [ 1210.348955][ C3] lapbether: lapb_data_request error - 4 [ 1210.351788][ C3] lapbether: lapb_data_request error - 4 [ 1210.647990][ C2] lapbether: lapb_data_request error - 4 [ 1210.651300][ C2] lapbether: lapb_data_request error - 4 [ 1210.653762][ C2] lapbether: lapb_data_request error - 4 [ 1210.660946][ C2] lapbether: lapb_data_request error - 4 [ 1210.669832][ C2] lapbether: lapb_data_request error - 4 [ 1210.672631][ C2] lapbether: lapb_data_request error - 4 [ 1210.675712][ C2] lapbether: lapb_data_request error - 4 [ 1210.678380][ C2] lapbether: lapb_data_request error - 4 [ 1210.681463][ C2] lapbether: lapb_data_request error - 4 [ 1210.687088][ C2] lapbether: lapb_data_request error - 4 [ 1210.689598][ C2] lapbether: lapb_data_request error - 4 [ 1210.695468][ C2] lapbether: lapb_data_request error - 4 [ 1210.713464][ C3] lapbether: lapb_data_request error - 4 [ 1210.895555][ C3] lapbether: lapb_data_request error - 4 [ 1210.903219][ C0] lapbether: lapb_data_request error - 4 [ 1211.037805][ C2] lapbether: lapb_data_request error - 4 [ 1211.194816][ C3] lapbether: lapb_data_request error - 4 [ 1211.196816][ C3] lapbether: lapb_data_request error - 4 [ 1211.198704][ C3] lapbether: lapb_data_request error - 4 [ 1211.200599][ C3] lapbether: lapb_data_request error - 4 [ 1211.202463][ C3] lapbether: lapb_data_request error - 4 [ 1211.204313][ C3] lapbether: lapb_data_request error - 4 [ 1211.206231][ C3] lapbether: lapb_data_request error - 4 [ 1211.208125][ C3] lapbether: lapb_data_request error - 4 [ 1211.219196][ C3] lapbether: lapb_data_request error - 4 [ 1211.378027][ C3] lapbether: lapb_data_request error - 4 [ 1211.757217][ C1] lapbether: lapb_data_request error - 4 [ 1211.860314][ C0] lapbether: lapb_data_request error - 4 [ 1211.862923][ C0] lapbether: lapb_data_request error - 4 [ 1211.882011][ C1] lapbether: lapb_data_request error - 4 [ 1211.884181][ C1] lapbether: lapb_data_request error - 4 [ 1211.886432][ C1] lapbether: lapb_data_request error - 4 [ 1211.888449][ C1] lapbether: lapb_data_request error - 4 [ 1211.890391][ C1] lapbether: lapb_data_request error - 4 [ 1211.892334][ C1] lapbether: lapb_data_request error - 4 [ 1211.894290][ C1] lapbether: lapb_data_request error - 4 [ 1212.213411][ C2] lapbether: lapb_data_request error - 4 [ 1212.216804][ C2] lapbether: lapb_data_request error - 4 [ 1212.220035][ C2] lapbether: lapb_data_request error - 4 [ 1212.222916][ C2] lapbether: lapb_data_request error - 4 [ 1212.749819][ C3] lapbether: lapb_data_request error - 4 [ 1212.910728][ C3] lapbether: lapb_data_request error - 4 [ 1212.914113][ C3] lapbether: lapb_data_request error - 4 [ 1212.918560][ C3] lapbether: lapb_data_request error - 4 [ 1213.167260][ C0] lapbether: lapb_data_request error - 4 [ 1213.170571][ C0] lapbether: lapb_data_request error - 4 [ 1213.174234][ C0] lapbether: lapb_data_request error - 4 [ 1213.177871][ C0] lapbether: lapb_data_request error - 4 [ 1213.761205][ C3] lapbether: lapb_data_request error - 4 [ 1213.769145][ C3] lapbether: lapb_data_request error - 4 [ 1213.774078][ C3] lapbether: lapb_data_request error - 4 [ 1214.451006][ C3] lapbether: lapb_data_request error - 4 [ 1214.454389][ C3] lapbether: lapb_data_request error - 4 [ 1214.457779][ C3] lapbether: lapb_data_request error - 4 [ 1214.461220][ C3] lapbether: lapb_data_request error - 4 [ 1214.470384][ C3] lapbether: lapb_data_request error - 4 [ 1214.473370][ C3] lapbether: lapb_data_request error - 4 [ 1214.496186][ C3] lapbether: lapb_data_request error - 4 [ 1214.507530][ C3] lapbether: lapb_data_request error - 4 [ 1215.029812][ C2] lapbether: lapb_data_request error - 4 [ 1215.032829][ C2] lapbether: lapb_data_request error - 4 [ 1215.597810][ C2] lapbether: lapb_data_request error - 4 [ 1215.601860][ C2] lapbether: lapb_data_request error - 4 [ 1215.607151][ C2] lapbether: lapb_data_request error - 4 [ 1215.610206][ C2] lapbether: lapb_data_request error - 4 [ 1215.620374][ C2] lapbether: lapb_data_request error - 4 [ 1215.623487][ C2] lapbether: lapb_data_request error - 4 [ 1215.626740][ C2] lapbether: lapb_data_request error - 4 [ 1215.680560][ C2] lapbether: lapb_data_request error - 4 [ 1215.852239][ C2] lapbether: lapb_data_request error - 4 [ 1215.969510][ C2] lapbether: lapb_data_request error - 4 [ 1215.972337][ C2] lapbether: lapb_data_request error - 4 [ 1216.004811][ C3] lapbether: lapb_data_request error - 4 [ 1216.086914][ C2] lapbether: lapb_data_request error - 4 [ 1216.090109][ C2] lapbether: lapb_data_request error - 4 [ 1216.093203][ C2] lapbether: lapb_data_request error - 4 [ 1216.095815][ C2] lapbether: lapb_data_request error - 4 [ 1216.250419][ C2] lapbether: lapb_data_request error - 4 [ 1216.253094][ C2] lapbether: lapb_data_request error - 4 [ 1216.261295][ C2] lapbether: lapb_data_request error - 4 [ 1216.264824][ C2] lapbether: lapb_data_request error - 4 [ 1216.334928][ C0] lapbether: lapb_data_request error - 4 [ 1216.338154][ C0] lapbether: lapb_data_request error - 4 [ 1216.340614][ C0] lapbether: lapb_data_request error - 4 [ 1216.489906][ C0] lapbether: lapb_data_request error - 4 [ 1216.493797][ C0] lapbether: lapb_data_request error - 4 [ 1216.496517][ C0] lapbether: lapb_data_request error - 4 [ 1216.501971][ C0] lapbether: lapb_data_request error - 4 [ 1216.982134][ T9] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1217.191301][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1217.214864][ T9] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1217.218378][ T9] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1217.221946][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1217.309582][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1217.313763][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1217.318828][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1217.322821][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1217.370297][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1217.376586][ T9] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1217.393309][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.412223][ T9] usb 6-1: config 0 descriptor?? [ 1217.532515][T28554] ieee802154 phy1 wpan1: encryption failed: -22 [ 1217.615985][T28556] syzkaller0: entered promiscuous mode [ 1217.618169][T28556] syzkaller0: entered allmulticast mode [ 1217.638048][ T9] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 44 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1217.694805][ T9] usb 6-1: USB disconnect, device number 44 [ 1217.743996][ T9] usblp0: removed [ 1218.096982][T28574] tunl0: entered promiscuous mode [ 1218.102120][T28574] netlink: 'syz.4.5069': attribute type 4 has an invalid length. [ 1218.106359][T28574] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5069'. [ 1218.120165][T28574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1218.125167][T28574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1218.132800][ T9] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1218.182530][T28579] 9p: Invalid gid '0x00000000ffffffff' [ 1218.282694][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1218.287162][ T9] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1218.290241][ T9] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1218.293597][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1218.297519][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1218.300678][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1218.304816][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1218.308851][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1218.312540][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1218.317077][ T9] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1218.320185][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.324427][ T9] usb 6-1: config 0 descriptor?? [ 1218.357261][ C3] lapbether: lapb_data_request error - 4 [ 1218.361063][ C3] lapbether: lapb_data_request error - 4 [ 1218.366089][ C2] lapbether: lapb_data_request error - 4 [ 1218.368700][ C2] lapbether: lapb_data_request error - 4 [ 1218.371204][ C2] lapbether: lapb_data_request error - 4 [ 1218.385656][ C2] lapbether: lapb_data_request error - 4 [ 1218.443592][ C3] lapbether: lapb_data_request error - 4 [ 1218.583796][ T9] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 45 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1218.592185][ T9] usb 6-1: USB disconnect, device number 45 [ 1218.595628][ T9] usblp0: removed [ 1218.779891][T28582] virtio-fs: tag not found [ 1218.837324][ C1] lapbether: lapb_data_request error - 4 [ 1218.840228][ C1] lapbether: lapb_data_request error - 4 [ 1218.843117][ C1] lapbether: lapb_data_request error - 4 [ 1218.845861][ C1] lapbether: lapb_data_request error - 4 [ 1218.848533][ C1] lapbether: lapb_data_request error - 4 [ 1218.864724][ C1] lapbether: lapb_data_request error - 4 [ 1218.868185][ C1] lapbether: lapb_data_request error - 4 [ 1218.870894][ C1] lapbether: lapb_data_request error - 4 [ 1219.137531][T28597] FAULT_INJECTION: forcing a failure. [ 1219.137531][T28597] name failslab, interval 1, probability 0, space 0, times 0 [ 1219.143158][T28597] CPU: 0 UID: 0 PID: 28597 Comm: syz.1.5080 Tainted: G L syzkaller #0 PREEMPT(full) [ 1219.143189][T28597] Tainted: [L]=SOFTLOCKUP [ 1219.143195][T28597] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1219.143206][T28597] Call Trace: [ 1219.143213][T28597] [ 1219.143220][T28597] dump_stack_lvl+0x100/0x190 [ 1219.143246][T28597] should_fail_ex.cold+0x5/0xa [ 1219.143276][T28597] should_failslab+0xc2/0x120 [ 1219.143299][T28597] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1219.143317][T28597] __kmalloc_noprof+0xf6/0x9c0 [ 1219.143343][T28597] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1219.143360][T28597] tomoyo_realpath_from_path+0xb6/0x690 [ 1219.143384][T28597] tomoyo_path_number_perm+0x23c/0x580 [ 1219.143408][T28597] ? tomoyo_path_number_perm+0x22e/0x580 [ 1219.143434][T28597] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1219.143487][T28597] ? find_held_lock+0x2b/0x80 [ 1219.143505][T28597] ? hook_file_ioctl_common+0x146/0x410 [ 1219.143530][T28597] ? __fget_files+0x215/0x3d0 [ 1219.143555][T28597] ? __fget_files+0x21f/0x3d0 [ 1219.143578][T28597] security_file_ioctl_compat+0xd3/0x230 [ 1219.143606][T28597] __ia32_compat_sys_ioctl+0xc2/0x360 [ 1219.143637][T28597] __do_fast_syscall_32+0xde/0x660 [ 1219.143663][T28597] do_fast_syscall_32+0x32/0x70 [ 1219.143685][T28597] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1219.143705][T28597] RIP: 0023:0xf7ff4579 [ 1219.143720][T28597] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 1219.143737][T28597] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1219.143755][T28597] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004601 [ 1219.143766][T28597] RDX: 0000000080000380 RSI: 0000000000000000 RDI: 0000000000000000 [ 1219.143777][T28597] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1219.143787][T28597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1219.143797][T28597] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1219.143822][T28597] [ 1219.143829][T28597] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1219.233045][T28603] netlink: 'syz.8.5081': attribute type 11 has an invalid length. [ 1219.253041][T28603] netlink: 'syz.8.5081': attribute type 11 has an invalid length. [ 1219.268128][T28603] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5081'. [ 1219.276475][T28603] loop2: detected capacity change from 0 to 7 [ 1219.283424][T28603] Dev loop2: unable to read RDB block 7 [ 1219.285791][T28603] loop2: AHDI p1 p2 p3 [ 1219.287588][T28603] loop2: partition table partially beyond EOD, truncated [ 1219.291631][T28603] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1219.296179][T28603] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1220.444166][T28715] 9p: Invalid gid '0x00000000ffffffff' [ 1220.822436][ C2] lapbether: lapb_data_request error - 4 [ 1220.825205][ C2] lapbether: lapb_data_request error - 4 [ 1220.828152][ C2] lapbether: lapb_data_request error - 4 [ 1220.830617][ C2] lapbether: lapb_data_request error - 4 [ 1220.833360][ C2] lapbether: lapb_data_request error - 4 [ 1220.835531][ C2] lapbether: lapb_data_request error - 4 [ 1220.839286][ C2] lapbether: lapb_data_request error - 4 [ 1220.841552][ C2] lapbether: lapb_data_request error - 4 [ 1220.845582][ C2] lapbether: lapb_data_request error - 4 [ 1220.851753][ C2] lapbether: lapb_data_request error - 4 [ 1220.854587][ C2] lapbether: lapb_data_request error - 4 [ 1220.858268][ C2] lapbether: lapb_data_request error - 4 [ 1220.865870][ C2] lapbether: lapb_data_request error - 4 [ 1220.869409][ C2] lapbether: lapb_data_request error - 4 [ 1220.879577][ C2] lapbether: lapb_data_request error - 4 [ 1220.890282][ C2] lapbether: lapb_data_request error - 4 [ 1220.900982][ C2] lapbether: lapb_data_request error - 4 [ 1220.904137][ C2] lapbether: lapb_data_request error - 4 [ 1221.536882][T28719] FAULT_INJECTION: forcing a failure. [ 1221.536882][T28719] name failslab, interval 1, probability 0, space 0, times 0 [ 1221.551310][T28719] CPU: 2 UID: 0 PID: 28719 Comm: syz.8.5086 Tainted: G L syzkaller #0 PREEMPT(full) [ 1221.551339][T28719] Tainted: [L]=SOFTLOCKUP [ 1221.551344][T28719] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1221.551354][T28719] Call Trace: [ 1221.551360][T28719] [ 1221.551366][T28719] dump_stack_lvl+0x100/0x190 [ 1221.551393][T28719] should_fail_ex.cold+0x5/0xa [ 1221.551416][T28719] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1221.551436][T28719] should_failslab+0xc2/0x120 [ 1221.551459][T28719] kmem_cache_alloc_noprof+0x83/0x780 [ 1221.551483][T28719] ? skb_clone+0x190/0x400 [ 1221.551512][T28719] ? skb_clone+0x190/0x400 [ 1221.551535][T28719] skb_clone+0x190/0x400 [ 1221.551561][T28719] netlink_deliver_tap+0xaed/0xcc0 [ 1221.551593][T28719] netlink_unicast+0x70c/0x870 [ 1221.551624][T28719] ? __pfx_netlink_unicast+0x10/0x10 [ 1221.551652][T28719] ? genl_rcv_msg+0x4be/0x800 [ 1221.551678][T28719] netlink_ack+0x655/0xb80 [ 1221.551712][T28719] netlink_rcv_skb+0x333/0x420 [ 1221.551739][T28719] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1221.551759][T28719] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1221.551795][T28719] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1221.551825][T28719] genl_rcv+0x28/0x40 [ 1221.551841][T28719] netlink_unicast+0x5aa/0x870 [ 1221.551872][T28719] ? __pfx_netlink_unicast+0x10/0x10 [ 1221.551909][T28719] netlink_sendmsg+0x8b0/0xda0 [ 1221.551939][T28719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1221.551968][T28719] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1221.551995][T28719] ____sys_sendmsg+0xa54/0xc30 [ 1221.552018][T28719] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1221.552050][T28719] ___sys_sendmsg+0x190/0x1e0 [ 1221.552072][T28719] ? __pfx____sys_sendmsg+0x10/0x10 [ 1221.552123][T28719] __sys_sendmsg+0x170/0x220 [ 1221.552148][T28719] ? __pfx___sys_sendmsg+0x10/0x10 [ 1221.552183][T28719] ? __pfx_ksys_write+0x10/0x10 [ 1221.552217][T28719] __do_fast_syscall_32+0xde/0x660 [ 1221.552243][T28719] do_fast_syscall_32+0x32/0x70 [ 1221.552265][T28719] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1221.552287][T28719] RIP: 0023:0xf7fc2579 [ 1221.552300][T28719] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 1221.552315][T28719] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1221.552333][T28719] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800004c0 [ 1221.552345][T28719] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1221.552356][T28719] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1221.552366][T28719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1221.552376][T28719] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1221.552401][T28719] [ 1221.733492][ C3] lapbether: lapb_data_request error - 4 [ 1221.736410][ C3] lapbether: lapb_data_request error - 4 [ 1221.739914][ C3] lapbether: lapb_data_request error - 4 [ 1221.743453][ C3] lapbether: lapb_data_request error - 4 [ 1221.788444][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 1221.788456][ T40] audit: type=1800 audit(1770530175.894:4792): pid=28723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5087" name="file0" dev="9p" ino=74973357 res=0 errno=0 [ 1222.187866][T28734] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5091'. [ 1222.850484][ T1163] usb 6-1: new low-speed USB device number 46 using dummy_hcd [ 1223.345931][ T1163] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1223.349204][ T1163] usb 6-1: config 0 has no interface number 0 [ 1223.351844][ T1163] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1223.356065][ T1163] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1223.420128][ T1163] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1223.424414][ T1163] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1223.428853][ T1163] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1223.671712][ C3] lapbether: lapb_data_request error - 4 [ 1223.678205][ T1163] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1223.683530][ T1163] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1223.687211][ T1163] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.700718][ T1163] usb 6-1: config 0 descriptor?? [ 1223.703324][T28741] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1223.705777][T28741] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1223.713372][ T1163] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1224.075479][ C2] lapbether: lapb_data_request error - 4 [ 1224.077377][ C2] lapbether: lapb_data_request error - 4 [ 1224.079243][ C2] lapbether: lapb_data_request error - 4 [ 1224.081189][ C2] lapbether: lapb_data_request error - 4 [ 1224.083049][ C2] lapbether: lapb_data_request error - 4 [ 1224.084945][ C2] lapbether: lapb_data_request error - 4 [ 1224.086783][ C2] lapbether: lapb_data_request error - 4 [ 1224.134043][ C3] lapbether: lapb_data_request error - 4 [ 1224.506372][T28750] virtio-fs: tag not found [ 1224.534618][T20067] usb 6-1: USB disconnect, device number 46 [ 1224.545081][T20067] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1224.728857][T28756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5100'. [ 1225.943653][ C0] lapbether: lapb_data_request error - 4 [ 1225.945760][ C0] lapbether: lapb_data_request error - 4 [ 1225.947712][ C0] lapbether: lapb_data_request error - 4 [ 1225.949681][ C0] lapbether: lapb_data_request error - 4 [ 1225.951629][ C0] lapbether: lapb_data_request error - 4 [ 1225.953478][ C0] lapbether: lapb_data_request error - 4 [ 1225.955539][ C0] lapbether: lapb_data_request error - 4 [ 1226.060974][T25693] usb 13-1: new high-speed USB device number 22 using dummy_hcd [ 1226.422123][T25693] usb 13-1: Using ep0 maxpacket: 8 [ 1226.458825][T25693] usb 13-1: config index 0 descriptor too short (expected 301, got 45) [ 1226.461511][T25693] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1226.464639][T25693] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1226.467735][T25693] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1226.471797][T25693] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1226.476323][T25693] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1226.479256][T25693] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.570027][ C1] lapbether: lapb_data_request error - 4 [ 1226.688612][T25693] usb 13-1: usb_control_msg returned -32 [ 1226.690983][T25693] usbtmc 13-1:16.0: can't read capabilities [ 1226.839078][T28802] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.5110'. [ 1226.842001][T28802] openvswitch: netlink: Flow actions attr not present in new flow. [ 1226.944392][T28808] FAULT_INJECTION: forcing a failure. [ 1226.944392][T28808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1226.953779][T28808] CPU: 0 UID: 0 PID: 28808 Comm: syz.9.5112 Tainted: G L syzkaller #0 PREEMPT(full) [ 1226.953799][T28808] Tainted: [L]=SOFTLOCKUP [ 1226.953803][T28808] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1226.953822][T28808] Call Trace: [ 1226.953827][T28808] [ 1226.953832][T28808] dump_stack_lvl+0x100/0x190 [ 1226.953850][T28808] should_fail_ex.cold+0x5/0xa [ 1226.953869][T28808] __kvm_write_guest_page+0x127/0x2b0 [ 1226.953886][T28808] kvm_vcpu_write_guest+0x8a/0x130 [ 1226.953902][T28808] write_emulate+0x33/0x80 [ 1226.953918][T28808] emulator_read_write_onepage+0x2e2/0xb20 [ 1226.953934][T28808] emulator_read_write+0x1d1/0x5c0 [ 1226.953948][T28808] segmented_write.isra.0+0x101/0x160 [ 1226.953962][T28808] ? __pfx_segmented_write.isra.0+0x10/0x10 [ 1226.953977][T28808] ? vmx_cache_reg+0x12c/0x7b0 [ 1226.953990][T28808] emulate_push+0x398/0x5c0 [ 1226.954007][T28808] ? __pfx_emulate_push+0x10/0x10 [ 1226.954025][T28808] ? emulator_get_segment+0x38d/0x440 [ 1226.954045][T28808] em_enter+0x2d8/0xe90 [ 1226.954061][T28808] ? decode_operand+0x2de/0x35f0 [ 1226.954077][T28808] ? __lock_acquire+0x4a5/0x2630 [ 1226.954092][T28808] ? __pfx_em_enter+0x10/0x10 [ 1226.954114][T28808] ? x86_decode_insn+0x401/0x6d80 [ 1226.954136][T28808] ? __pfx_em_enter+0x10/0x10 [ 1226.954151][T28808] x86_emulate_insn+0x5a7/0x4ad0 [ 1226.954172][T28808] ? __pfx_x86_emulate_insn+0x10/0x10 [ 1226.954189][T28808] ? init_emulate_ctxt+0x415/0x6d0 [ 1226.954206][T28808] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 1226.954223][T28808] ? kvm_mmu_do_page_fault+0x3c3/0x6c0 [ 1226.954239][T28808] x86_emulate_instruction+0xb1c/0x1f80 [ 1226.954260][T28808] kvm_mmu_page_fault+0xb70/0x19c0 [ 1226.954274][T28808] ? __schedule+0xff6/0x5e10 [ 1226.954286][T28808] ? fred_extint+0x30/0x70 [ 1226.954302][T28808] ? rcu_qs+0x2a/0xe0 [ 1226.954313][T28808] ? __pfx_kvm_mmu_page_fault+0x10/0x10 [ 1226.954326][T28808] ? __lock_acquire+0x4a5/0x2630 [ 1226.954340][T28808] ? mark_held_locks+0x40/0x70 [ 1226.954354][T28808] ? irqentry_exit+0x180/0x670 [ 1226.954367][T28808] ? lockdep_hardirqs_on+0x78/0x100 [ 1226.954380][T28808] ? irqentry_exit+0x180/0x670 [ 1226.954395][T28808] handle_ept_violation+0x323/0x760 [ 1226.954410][T28808] ? __pfx_handle_ept_violation+0x10/0x10 [ 1226.954425][T28808] vmx_handle_exit+0x720/0x1de0 [ 1226.954441][T28808] vcpu_run+0x34c8/0x5ca0 [ 1226.954462][T28808] ? __pfx_vcpu_run+0x10/0x10 [ 1226.954476][T28808] ? kvm_pmu_trigger_event.isra.0+0x573/0x7b0 [ 1226.954491][T28808] ? complete_fast_pio_in+0x1cf/0x2e0 [ 1226.954504][T28808] ? __pfx_complete_fast_pio_in+0x10/0x10 [ 1226.954519][T28808] ? rcu_is_watching+0x12/0xc0 [ 1226.954531][T28808] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 1226.954546][T28808] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 1226.954564][T28808] kvm_vcpu_ioctl+0x730/0x16d0 [ 1226.954577][T28808] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1226.954588][T28808] ? tomoyo_path_number_perm+0x188/0x580 [ 1226.954606][T28808] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1226.954627][T28808] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1226.954640][T28808] ? do_vfs_ioctl+0x226/0x13e0 [ 1226.954658][T28808] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1226.954682][T28808] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 1226.954693][T28808] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 1226.954705][T28808] ? __fget_files+0x21f/0x3d0 [ 1226.954720][T28808] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 1226.954731][T28808] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1226.954751][T28808] __do_fast_syscall_32+0xde/0x660 [ 1226.954767][T28808] do_fast_syscall_32+0x32/0x70 [ 1226.954781][T28808] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1226.954796][T28808] RIP: 0023:0xf7fd2579 [ 1226.954805][T28808] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 1226.954816][T28808] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1226.954828][T28808] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 1226.954835][T28808] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1226.954842][T28808] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1226.954868][T28808] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1226.954879][T28808] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1226.954900][T28808] [ 1227.251837][T28922] FAULT_INJECTION: forcing a failure. [ 1227.251837][T28922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1227.257552][T28922] CPU: 2 UID: 0 PID: 28922 Comm: syz.4.5116 Tainted: G L syzkaller #0 PREEMPT(full) [ 1227.257570][T28922] Tainted: [L]=SOFTLOCKUP [ 1227.257574][T28922] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1227.257581][T28922] Call Trace: [ 1227.257585][T28922] [ 1227.257589][T28922] dump_stack_lvl+0x100/0x190 [ 1227.257607][T28922] should_fail_ex.cold+0x5/0xa [ 1227.257626][T28922] _copy_from_iter+0x1f4/0x1690 [ 1227.257646][T28922] ? __alloc_skb+0x220/0x410 [ 1227.257660][T28922] ? __alloc_skb+0x35d/0x410 [ 1227.257675][T28922] ? __pfx__copy_from_iter+0x10/0x10 [ 1227.257692][T28922] ? netlink_autobind.isra.0+0xa0/0x370 [ 1227.257715][T28922] netlink_sendmsg+0x808/0xda0 [ 1227.257735][T28922] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1227.257755][T28922] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1227.257771][T28922] ____sys_sendmsg+0xa54/0xc30 [ 1227.257785][T28922] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1227.257803][T28922] ___sys_sendmsg+0x190/0x1e0 [ 1227.257817][T28922] ? __pfx____sys_sendmsg+0x10/0x10 [ 1227.257850][T28922] __sys_sendmsg+0x170/0x220 [ 1227.257870][T28922] ? __pfx___sys_sendmsg+0x10/0x10 [ 1227.257891][T28922] ? __pfx_ksys_write+0x10/0x10 [ 1227.257907][T28922] __do_fast_syscall_32+0xde/0x660 [ 1227.257924][T28922] do_fast_syscall_32+0x32/0x70 [ 1227.257938][T28922] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1227.257952][T28922] RIP: 0023:0xf73cd579 [ 1227.257961][T28922] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 1227.257972][T28922] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1227.257984][T28922] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 1227.257991][T28922] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1227.257998][T28922] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1227.258004][T28922] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1227.258010][T28922] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1227.258024][T28922] [ 1227.460437][T28929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5119'. [ 1228.084727][ C0] lapbether: lapb_data_request error - 4 [ 1228.086979][ C0] lapbether: lapb_data_request error - 4 [ 1228.090659][ C0] lapbether: lapb_data_request error - 4 [ 1228.093364][ C0] lapbether: lapb_data_request error - 4 [ 1228.096183][ C0] lapbether: lapb_data_request error - 4 [ 1228.179016][ C2] lapbether: lapb_data_request error - 4 [ 1228.398804][T29160] FAULT_INJECTION: forcing a failure. [ 1228.398804][T29160] name failslab, interval 1, probability 0, space 0, times 0 [ 1228.404435][T29160] CPU: 3 UID: 0 PID: 29160 Comm: syz.9.5125 Tainted: G L syzkaller #0 PREEMPT(full) [ 1228.404466][T29160] Tainted: [L]=SOFTLOCKUP [ 1228.404472][T29160] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1228.404483][T29160] Call Trace: [ 1228.404491][T29160] [ 1228.404500][T29160] dump_stack_lvl+0x100/0x190 [ 1228.404528][T29160] should_fail_ex.cold+0x5/0xa [ 1228.404559][T29160] should_failslab+0xc2/0x120 [ 1228.404585][T29160] kmem_cache_alloc_noprof+0x83/0x780 [ 1228.404716][T29160] ? getname_flags.part.0+0x4c/0x540 [ 1228.404749][T29160] ? getname_flags.part.0+0x4c/0x540 [ 1228.404773][T29160] getname_flags.part.0+0x4c/0x540 [ 1228.404800][T29160] getname_flags+0x93/0xf0 [ 1228.404819][T29160] do_sys_openat2+0xc5/0x220 [ 1228.404844][T29160] ? __pfx_do_sys_openat2+0x10/0x10 [ 1228.404869][T29160] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1228.404900][T29160] ? rcu_is_watching+0x12/0xc0 [ 1228.404918][T29160] ? irqentry_exit+0x180/0x670 [ 1228.404941][T29160] __ia32_compat_sys_openat+0x12d/0x210 [ 1228.404969][T29160] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1228.405005][T29160] do_int80_emulation+0x101/0x470 [ 1228.405031][T29160] asm_int80_emulation+0x1a/0x20 [ 1228.405048][T29160] RIP: 0023:0xf71d572b [ 1228.405062][T29160] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1228.405078][T29160] RSP: 002b:00000000f54963cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1228.405095][T29160] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5496490 [ 1228.405107][T29160] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1228.405117][T29160] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1228.405126][T29160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1228.405136][T29160] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1228.405160][T29160] [ 1228.611686][T29166] FAULT_INJECTION: forcing a failure. [ 1228.611686][T29166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1228.615871][T29166] CPU: 1 UID: 0 PID: 29166 Comm: syz.1.5127 Tainted: G L syzkaller #0 PREEMPT(full) [ 1228.615890][T29166] Tainted: [L]=SOFTLOCKUP [ 1228.615894][T29166] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1228.615900][T29166] Call Trace: [ 1228.615904][T29166] [ 1228.615909][T29166] dump_stack_lvl+0x100/0x190 [ 1228.615927][T29166] should_fail_ex.cold+0x5/0xa [ 1228.615946][T29166] _copy_from_user+0x2e/0xd0 [ 1228.615964][T29166] kstrtouint_from_user+0xd6/0x1d0 [ 1228.615977][T29166] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1228.615989][T29166] ? __lock_acquire+0x4a5/0x2630 [ 1228.616019][T29166] ? lock_acquire+0x17c/0x330 [ 1228.616037][T29166] proc_fail_nth_write+0x83/0x220 [ 1228.616052][T29166] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1228.616069][T29166] vfs_write+0x2aa/0x1070 [ 1228.616083][T29166] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1228.616098][T29166] ? __pfx_vfs_write+0x10/0x10 [ 1228.616109][T29166] ? find_held_lock+0x2b/0x80 [ 1228.616120][T29166] ? __fget_files+0x215/0x3d0 [ 1228.616135][T29166] ? __fget_files+0x21f/0x3d0 [ 1228.616151][T29166] ksys_write+0x12a/0x250 [ 1228.616164][T29166] ? __pfx_ksys_write+0x10/0x10 [ 1228.616181][T29166] do_int80_emulation+0x101/0x470 [ 1228.616197][T29166] asm_int80_emulation+0x1a/0x20 [ 1228.616209][T29166] RIP: 0023:0xf71f572b [ 1228.616218][T29166] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1228.616229][T29166] RSP: 002b:00000000f54b64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 1228.616240][T29166] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f54b65d0 [ 1228.616247][T29166] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1228.616253][T29166] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1228.616259][T29166] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1228.616266][T29166] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1228.616280][T29166] [ 1228.741785][ T1163] usb 13-1: USB disconnect, device number 22 [ 1228.803142][T29201] tipc: Enabling of bearer rejected, failed to enable media [ 1228.837192][ C2] lapbether: lapb_data_request error - 4 [ 1228.839186][ C2] lapbether: lapb_data_request error - 4 [ 1228.841094][ C2] lapbether: lapb_data_request error - 4 [ 1228.843031][ C2] lapbether: lapb_data_request error - 4 [ 1228.844986][ C2] lapbether: lapb_data_request error - 4 [ 1228.846881][ C2] lapbether: lapb_data_request error - 4 [ 1228.848824][ C2] lapbether: lapb_data_request error - 4 [ 1230.367955][T29454] binder: 29452:29454 ioctl 0 80000040 returned -22 [ 1230.517055][T29458] bridge_slave_0: left allmulticast mode [ 1230.519161][T29458] bridge_slave_0: left promiscuous mode [ 1230.521525][T29458] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.627052][T29458] bridge_slave_1: left allmulticast mode [ 1230.629768][T29458] bridge_slave_1: left promiscuous mode [ 1230.653690][ C2] lapbether: lapb_data_request error - 4 [ 1230.664875][ C2] lapbether: lapb_data_request error - 4 [ 1230.669626][ C2] lapbether: lapb_data_request error - 4 [ 1230.671943][T29458] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.706546][ C3] lapbether: lapb_data_request error - 4 [ 1230.708499][ C3] lapbether: lapb_data_request error - 4 [ 1230.710405][ C3] lapbether: lapb_data_request error - 4 [ 1230.712331][ C3] lapbether: lapb_data_request error - 4 [ 1230.714730][ C3] lapbether: lapb_data_request error - 4 [ 1230.717211][ C3] lapbether: lapb_data_request error - 4 [ 1230.719554][ C3] lapbether: lapb_data_request error - 4 [ 1230.721876][ C3] lapbether: lapb_data_request error - 4 [ 1230.724277][ C3] lapbether: lapb_data_request error - 4 [ 1230.726634][ C3] lapbether: lapb_data_request error - 4 [ 1230.729133][ C3] lapbether: lapb_data_request error - 4 [ 1230.731544][ C3] lapbether: lapb_data_request error - 4 [ 1230.733644][ C3] lapbether: lapb_data_request error - 4 [ 1230.735448][ C3] lapbether: lapb_data_request error - 4 [ 1230.737547][ C3] lapbether: lapb_data_request error - 4 [ 1230.742617][ C3] lapbether: lapb_data_request error - 4 [ 1230.744549][ C3] lapbether: lapb_data_request error - 4 [ 1230.746541][ C3] lapbether: lapb_data_request error - 4 [ 1230.748981][ C3] lapbether: lapb_data_request error - 4 [ 1230.780823][T29458] bond0: (slave bond_slave_0): Releasing backup interface [ 1230.877730][T29458] bond0: (slave bond_slave_1): Releasing backup interface [ 1230.978582][T29566] netlink: 14 bytes leftover after parsing attributes in process `syz.8.5139'. [ 1231.030457][T29567] netlink: 52 bytes leftover after parsing attributes in process `syz.8.5139'. [ 1231.086010][T29570] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5139'. [ 1231.116283][T29458] team0: Port device team_slave_0 removed [ 1231.140207][ C2] lapbether: lapb_data_request error - 4 [ 1231.143196][ C2] lapbether: lapb_data_request error - 4 [ 1231.150758][T29458] team0: Port device team_slave_1 removed [ 1231.154263][T29458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1231.158456][T29458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1231.164650][T29458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1231.168066][T29458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1231.179442][T29458] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1231.235134][T29565] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1231.257864][T29565] bond0: (slave bond2): Enslaving as an active interface with an up link [ 1231.323855][T29566] bond0 (unregistering): (slave 30): Releasing backup interface [ 1231.351282][T29566] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1231.361556][T29566] bond0 (unregistering): (slave bond2): Releasing backup interface [ 1231.369461][T29566] bond0 (unregistering): Released all slaves [ 1231.811296][ T46] bond1: (slave veth0_to_bond): link status definitely down, disabling slave [ 1231.815709][ T46] bond1: now running without any active interface! [ 1231.907280][ C2] lapbether: lapb_data_request error - 4 [ 1232.826725][T29909] binder: 29888:29909 ioctl 84009422 80000680 returned -22 [ 1232.827488][T29909] binder_alloc: 29888: binder_alloc_buf size 4294966480 failed, no address space [ 1232.829251][T29909] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1232.997558][T29910] binder: 29898:29910 ioctl 0 80000040 returned -22 [ 1233.122861][ C3] lapbether: lapb_data_request error - 4 [ 1233.122943][ C3] lapbether: lapb_data_request error - 4 [ 1233.123040][ C3] lapbether: lapb_data_request error - 4 [ 1233.123116][ C3] lapbether: lapb_data_request error - 4 [ 1233.124688][ C3] lapbether: lapb_data_request error - 4 [ 1233.124762][ C3] lapbether: lapb_data_request error - 4 [ 1233.124852][ C3] lapbether: lapb_data_request error - 4 [ 1233.124949][ C3] lapbether: lapb_data_request error - 4 [ 1233.125019][ C3] lapbether: lapb_data_request error - 4 [ 1233.125091][ C3] lapbether: lapb_data_request error - 4 [ 1233.125163][ C3] lapbether: lapb_data_request error - 4 [ 1233.125300][ C3] lapbether: lapb_data_request error - 4 [ 1234.968970][ T40] audit: type=1326 audit(1770530189.090:4793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30053 comm="syz.9.5158" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2579 code=0x7ffc0000 [ 1235.024773][T30055] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5152'. [ 1235.045142][ T40] audit: type=1326 audit(1770530189.100:4794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30053 comm="syz.9.5158" exe="/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf7fd2579 code=0x7ffc0000 [ 1235.052215][ T40] audit: type=1326 audit(1770530189.100:4795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30053 comm="syz.9.5158" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2579 code=0x7ffc0000 [ 1235.250947][ T5949] Bluetooth: hci3: command 0x0406 tx timeout [ 1235.266446][T30054] autofs: Unknown parameter '' [ 1235.299273][T30059] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5153'. [ 1235.547303][ T40] audit: type=1326 audit(1770530189.100:4796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30053 comm="syz.9.5158" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2579 code=0x7ffc0000 [ 1235.554358][ T40] audit: type=1326 audit(1770530189.100:4797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30053 comm="syz.9.5158" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7fd2579 code=0x7ffc0000 [ 1235.561203][ T40] audit: type=1326 audit(1770530189.100:4798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30053 comm="syz.9.5158" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2579 code=0x7ffc0000 [ 1235.915843][ C2] lapbether: lapb_data_request error - 4 [ 1235.921789][ C2] lapbether: lapb_data_request error - 4 [ 1235.923768][ C2] lapbether: lapb_data_request error - 4 [ 1236.133769][ T40] audit: type=1326 audit(1770530189.100:4799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30053 comm="syz.9.5158" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2579 code=0x7ffc0000 [ 1236.141216][ T40] audit: type=1326 audit(1770530189.100:4800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30053 comm="syz.9.5158" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7fd2579 code=0x7ffc0000 [ 1236.148750][ T40] audit: type=1326 audit(1770530189.170:4801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30053 comm="syz.9.5158" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2579 code=0x7ffc0000 [ 1236.156709][ T40] audit: type=1326 audit(1770530189.170:4802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30053 comm="syz.9.5158" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2579 code=0x7ffc0000 [ 1236.199221][ C2] lapbether: lapb_data_request error - 4 [ 1236.201918][ C2] lapbether: lapb_data_request error - 4 [ 1236.204948][ C2] lapbether: lapb_data_request error - 4 [ 1236.207734][ C2] lapbether: lapb_data_request error - 4 [ 1237.623281][ T5946] Bluetooth: hci4: command 0x0406 tx timeout [ 1237.623394][T30063] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1238.036036][ C0] lapbether: lapb_data_request error - 4 [ 1238.401122][T30063] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1238.408008][T30063] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1238.410108][T30063] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1238.438231][T30073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1238.452472][T30073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1238.466064][T30073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1238.476347][T30073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1238.489393][T30073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1238.512856][T30073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1238.620068][T30110] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5168'. [ 1239.019361][T30112] FAULT_INJECTION: forcing a failure. [ 1239.019361][T30112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1239.023745][T30112] CPU: 1 UID: 0 PID: 30112 Comm: syz.9.5169 Tainted: G L syzkaller #0 PREEMPT(full) [ 1239.023763][T30112] Tainted: [L]=SOFTLOCKUP [ 1239.023767][T30112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1239.023774][T30112] Call Trace: [ 1239.023778][T30112] [ 1239.023784][T30112] dump_stack_lvl+0x100/0x190 [ 1239.023801][T30112] should_fail_ex.cold+0x5/0xa [ 1239.023820][T30112] _copy_from_user+0x2e/0xd0 [ 1239.023840][T30112] get_old_itimerspec32+0x86/0x1e0 [ 1239.023861][T30112] ? __pfx_get_old_itimerspec32+0x10/0x10 [ 1239.023880][T30112] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1239.023900][T30112] ? __fget_files+0x215/0x3d0 [ 1239.023923][T30112] __ia32_sys_timer_settime32+0x1a5/0x2c0 [ 1239.023951][T30112] ? __pfx___ia32_sys_timer_settime32+0x10/0x10 [ 1239.023981][T30112] ? fput+0x79/0x100 [ 1239.024007][T30112] ? __pfx_ksys_write+0x10/0x10 [ 1239.024033][T30112] __do_fast_syscall_32+0xde/0x660 [ 1239.024050][T30112] do_fast_syscall_32+0x32/0x70 [ 1239.024064][T30112] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1239.024079][T30112] RIP: 0023:0xf7fd2579 [ 1239.024088][T30112] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 1239.024099][T30112] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000104 [ 1239.024111][T30112] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000001 [ 1239.024118][T30112] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1239.024125][T30112] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1239.024131][T30112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1239.024138][T30112] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1239.024151][T30112] [ 1239.702337][ T5946] Bluetooth: hci4: command 0x0406 tx timeout [ 1239.967269][T30231] virtio-fs: tag not found [ 1240.432772][ T5946] Bluetooth: hci3: command 0x0406 tx timeout [ 1242.500643][ T5946] Bluetooth: hci3: command 0x0406 tx timeout [ 1243.407564][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 1243.416246][T30363] nvme_fabrics: missing parameter 'transport=%s' [ 1243.418844][T30363] nvme_fabrics: missing parameter 'nqn=%s' [ 1243.431050][ T1419] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 1243.434765][ T1419] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1243.840529][T30398] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5184'. [ 1244.397172][T30473] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1247.194981][ C0] lapbether: lapb_data_request error - 4 [ 1247.197744][ C0] lapbether: lapb_data_request error - 4 [ 1247.203284][ C0] lapbether: lapb_data_request error - 4 [ 1247.205977][ C0] lapbether: lapb_data_request error - 4 [ 1247.217090][ C0] lapbether: lapb_data_request error - 4 [ 1247.219982][ C0] lapbether: lapb_data_request error - 4 [ 1248.220067][ C1] lapbether: lapb_data_request error - 4 [ 1248.224535][ C1] lapbether: lapb_data_request error - 4 [ 1249.637779][ C0] lapbether: lapb_data_request error - 4 [ 1249.640487][ C0] lapbether: lapb_data_request error - 4 [ 1249.643477][ C0] lapbether: lapb_data_request error - 4 [ 1249.655346][ C0] lapbether: lapb_data_request error - 4 [ 1249.659600][ C0] lapbether: lapb_data_request error - 4 [ 1249.698022][T14005] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1249.906310][T14005] usb 6-1: Using ep0 maxpacket: 32 [ 1249.910331][T14005] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1249.913483][T14005] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1249.917002][T14005] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1249.920510][T14005] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1249.924092][T14005] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1250.088567][T14005] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1250.091695][T14005] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1250.094734][T14005] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1250.099126][T14005] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1250.102668][T14005] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.170562][ C1] lapbether: lapb_data_request error - 4 [ 1250.173928][T14005] usb 6-1: config 0 descriptor?? [ 1250.396725][T30477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1250.400977][T30477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1250.407737][T30477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1250.410680][T30477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1250.459290][T14005] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 47 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1250.472150][T14005] usb 6-1: USB disconnect, device number 47 [ 1250.480850][T14005] usblp0: removed [ 1252.649376][ C0] lapbether: lapb_data_request error - 4 [ 1253.195584][ C1] lapbether: lapb_data_request error - 4 [ 1253.198173][ C1] lapbether: lapb_data_request error - 4 [ 1253.200661][ C1] lapbether: lapb_data_request error - 4 [ 1253.203144][ C1] lapbether: lapb_data_request error - 4 [ 1253.205677][ C1] lapbether: lapb_data_request error - 4 [ 1253.208006][ C1] lapbether: lapb_data_request error - 4 [ 1253.209980][ C1] lapbether: lapb_data_request error - 4 [ 1254.528943][ C1] lapbether: lapb_data_request error - 4 [ 1254.786355][ C1] lapbether: lapb_data_request error - 4 [ 1254.788990][ C1] lapbether: lapb_data_request error - 4 [ 1254.791378][ C1] lapbether: lapb_data_request error - 4 [ 1254.793693][ C1] lapbether: lapb_data_request error - 4 [ 1254.796126][ C1] lapbether: lapb_data_request error - 4 [ 1254.798521][ C1] lapbether: lapb_data_request error - 4 [ 1254.801035][ C1] lapbether: lapb_data_request error - 4 [ 1254.803560][ C1] lapbether: lapb_data_request error - 4 [ 1254.806226][ C1] lapbether: lapb_data_request error - 4 [ 1254.808502][ C1] lapbether: lapb_data_request error - 4 [ 1254.816791][ C1] lapbether: lapb_data_request error - 4 [ 1254.819309][ C1] lapbether: lapb_data_request error - 4 [ 1254.821720][ C1] lapbether: lapb_data_request error - 4 [ 1254.824279][ C1] lapbether: lapb_data_request error - 4 [ 1254.884463][ C1] lapbether: lapb_data_request error - 4 [ 1254.886421][ C1] lapbether: lapb_data_request error - 4 [ 1254.888418][ C1] lapbether: lapb_data_request error - 4 [ 1254.890275][ C1] lapbether: lapb_data_request error - 4 [ 1254.892176][ C1] lapbether: lapb_data_request error - 4 [ 1254.894067][ C1] lapbether: lapb_data_request error - 4 [ 1254.896271][ C1] lapbether: lapb_data_request error - 4 [ 1254.898811][ C1] lapbether: lapb_data_request error - 4 [ 1254.901208][ C1] lapbether: lapb_data_request error - 4 [ 1254.903572][ C1] lapbether: lapb_data_request error - 4 [ 1254.906170][ C1] lapbether: lapb_data_request error - 4 [ 1254.908450][ C1] lapbether: lapb_data_request error - 4 [ 1255.835221][ C0] lapbether: lapb_data_request error - 4 [ 1258.015756][ C0] lapbether: lapb_data_request error - 4 [ 1258.020748][ C0] lapbether: lapb_data_request error - 4 [ 1258.028352][ C0] lapbether: lapb_data_request error - 4 [ 1258.828514][ C1] lapbether: lapb_data_request error - 4 [ 1258.830811][ C1] lapbether: lapb_data_request error - 4 [ 1258.832974][ C1] lapbether: lapb_data_request error - 4 [ 1258.835030][ C1] lapbether: lapb_data_request error - 4 [ 1258.839160][ C1] lapbether: lapb_data_request error - 4 [ 1258.841438][ C1] lapbether: lapb_data_request error - 4 [ 1258.843950][ C1] lapbether: lapb_data_request error - 4 [ 1258.846316][ C1] lapbether: lapb_data_request error - 4 [ 1258.860823][ C1] lapbether: lapb_data_request error - 4 [ 1259.291868][T24981] raw-gadget.0 gadget.4: failed to queue disconnect event [ 1259.669832][ T5949] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1259.700005][ T5949] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1259.704485][ T5949] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1259.708682][ T5949] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1259.714139][ T5949] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1259.822968][ C0] lapbether: lapb_data_request error - 4 [ 1259.826239][ C0] lapbether: lapb_data_request error - 4 [ 1259.829238][ C0] lapbether: lapb_data_request error - 4 [ 1259.836408][ C0] lapbether: lapb_data_request error - 4 [ 1259.839461][ C0] lapbether: lapb_data_request error - 4 [ 1259.850830][ C0] lapbether: lapb_data_request error - 4 [ 1259.853263][ C0] lapbether: lapb_data_request error - 4 [ 1259.857223][ C0] lapbether: lapb_data_request error - 4 [ 1259.860501][ C0] lapbether: lapb_data_request error - 4 [ 1259.863861][ C0] lapbether: lapb_data_request error - 4 [ 1259.866955][ C0] lapbether: lapb_data_request error - 4 [ 1259.869876][ C0] lapbether: lapb_data_request error - 4 [ 1260.206345][ C1] lapbether: lapb_data_request error - 4 [ 1260.208956][ C1] lapbether: lapb_data_request error - 4 [ 1260.211495][ C1] lapbether: lapb_data_request error - 4 [ 1260.214083][ C1] lapbether: lapb_data_request error - 4 [ 1260.216584][ C1] lapbether: lapb_data_request error - 4 [ 1260.219172][ C1] lapbether: lapb_data_request error - 4 [ 1260.221733][ C1] lapbether: lapb_data_request error - 4 [ 1260.804652][ T1419] ================================================================== [ 1260.807495][ T1419] BUG: KASAN: slab-use-after-free in tty_write_room+0x7d/0x90 [ 1260.810197][ T1419] Read of size 8 at addr ffff888070c4f020 by task aoe_tx0/1419 [ 1260.813942][ T1419] [ 1260.815653][ T1419] CPU: 2 UID: 0 PID: 1419 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1260.815676][ T1419] Tainted: [L]=SOFTLOCKUP [ 1260.815682][ T1419] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1260.815691][ T1419] Call Trace: [ 1260.815700][ T1419] [ 1260.815707][ T1419] dump_stack_lvl+0x100/0x190 [ 1260.815728][ T1419] print_report+0x156/0x4c9 [ 1260.815748][ T1419] ? __virt_addr_valid+0x81/0x620 [ 1260.815769][ T1419] ? __phys_addr+0xe8/0x180 [ 1260.815789][ T1419] ? tty_write_room+0x7d/0x90 [ 1260.815804][ T1419] kasan_report+0xdf/0x1a0 [ 1260.815825][ T1419] ? tty_write_room+0x7d/0x90 [ 1260.815849][ T1419] tty_write_room+0x7d/0x90 [ 1260.815864][ T1419] handle_tx+0x14a/0x620 [ 1260.815887][ T1419] dev_hard_start_xmit+0x127/0x6c0 [ 1260.815907][ T1419] __dev_queue_xmit+0x6dd/0x46f0 [ 1260.815926][ T1419] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1260.815944][ T1419] ? __lock_acquire+0x4a5/0x2630 [ 1260.815963][ T1419] ? ref_tracker_free+0x37e/0x6c0 [ 1260.815977][ T1419] ? do_raw_spin_lock+0x128/0x260 [ 1260.815998][ T1419] ? find_held_lock+0x2b/0x80 [ 1260.816010][ T1419] ? skb_dequeue+0x126/0x180 [ 1260.816025][ T1419] ? skb_dequeue+0x126/0x180 [ 1260.816038][ T1419] ? find_held_lock+0x2b/0x80 [ 1260.816051][ T1419] ? tx+0xa4/0x130 [ 1260.816065][ T1419] ? tx+0xa4/0x130 [ 1260.816079][ T1419] ? rcu_is_watching+0x12/0xc0 [ 1260.816093][ T1419] ? __pfx_tx+0x10/0x10 [ 1260.816106][ T1419] tx+0xc4/0x130 [ 1260.816120][ T1419] kthread+0x1d8/0x3c0 [ 1260.816133][ T1419] ? __kthread_parkme+0xbb/0x230 [ 1260.816148][ T1419] ? __pfx_kthread+0x10/0x10 [ 1260.816160][ T1419] ? rcu_is_watching+0x12/0xc0 [ 1260.816172][ T1419] ? __pfx_default_wake_function+0x10/0x10 [ 1260.816188][ T1419] ? __kthread_parkme+0x18c/0x230 [ 1260.816207][ T1419] ? __pfx_kthread+0x10/0x10 [ 1260.816218][ T1419] kthread+0x3b3/0x730 [ 1260.816236][ T1419] ? __pfx_kthread+0x10/0x10 [ 1260.816257][ T1419] ? ret_from_fork+0x79/0xaf0 [ 1260.816274][ T1419] ? ret_from_fork+0x79/0xaf0 [ 1260.816288][ T1419] ? rcu_is_watching+0x12/0xc0 [ 1260.816302][ T1419] ? __pfx_kthread+0x10/0x10 [ 1260.816321][ T1419] ret_from_fork+0x754/0xaf0 [ 1260.816337][ T1419] ? __pfx_ret_from_fork+0x10/0x10 [ 1260.816352][ T1419] ? __switch_to+0x7b9/0x10c0 [ 1260.816371][ T1419] ? __pfx_kthread+0x10/0x10 [ 1260.816391][ T1419] ret_from_fork_asm+0x1a/0x30 [ 1260.816419][ T1419] [ 1260.816426][ T1419] [ 1260.857718][ C0] lapbether: lapb_data_request error - 4 [ 1260.858120][ T1419] Allocated by task 21295: [ 1260.860709][ C0] lapbether: lapb_data_request error - 4 [ 1260.861553][ T1419] kasan_save_stack+0x30/0x50 [ 1260.861573][ T1419] kasan_save_track+0x14/0x30 [ 1260.861586][ T1419] __kasan_kmalloc+0xaa/0xb0 [ 1260.861600][ T1419] alloc_tty_struct+0x96/0x8c0 [ 1260.861610][ T1419] tty_init_dev.part.0+0x20/0x470 [ 1260.861620][ T1419] tty_open+0xa63/0xfa0 [ 1260.861628][ T1419] chrdev_open+0x234/0x6a0 [ 1260.922711][ T1419] do_dentry_open+0x73e/0x1570 [ 1260.924785][ T1419] vfs_open+0x82/0x3f0 [ 1260.926600][ T1419] path_openat+0x21dc/0x3120 [ 1260.928626][ T1419] do_filp_open+0x1f7/0x420 [ 1260.930634][ T1419] do_sys_openat2+0x12e/0x220 [ 1260.932670][ T1419] __ia32_compat_sys_openat+0x12d/0x210 [ 1260.935001][ T1419] __do_fast_syscall_32+0xde/0x660 [ 1260.937184][ T1419] do_fast_syscall_32+0x32/0x70 [ 1260.939296][ T1419] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1260.942014][ T1419] [ 1260.943084][ T1419] Freed by task 19082: [ 1260.944855][ T1419] kasan_save_stack+0x30/0x50 [ 1260.946865][ T1419] kasan_save_track+0x14/0x30 [ 1260.948626][ T1419] kasan_save_free_info+0x3b/0x70 [ 1260.950360][ T1419] __kasan_slab_free+0x5f/0x80 [ 1260.951969][ T1419] kfree+0x1c7/0x690 [ 1260.953425][ T1419] process_one_work+0x9c2/0x1840 [ 1260.955405][ T1419] worker_thread+0x5da/0xe40 [ 1260.957402][ T1419] kthread+0x3b3/0x730 [ 1260.959182][ T1419] ret_from_fork+0x754/0xaf0 [ 1260.961180][ T1419] ret_from_fork_asm+0x1a/0x30 [ 1260.963437][ T1419] [ 1260.964935][ T1419] Last potentially related work creation: [ 1260.967325][ T1419] kasan_save_stack+0x30/0x50 [ 1260.969305][ T1419] kasan_record_aux_stack+0xa7/0xc0 [ 1260.971524][ T1419] insert_work+0x36/0x230 [ 1260.973362][ T1419] __queue_work+0x96f/0x10f0 [ 1260.975341][ T1419] queue_work_on+0x180/0x1e0 [ 1260.977365][ T1419] release_tty+0x4f3/0x5f0 [ 1260.979317][ T1419] tty_release_struct+0xb7/0xe0 [ 1260.981418][ T1419] tty_release+0xd7a/0x1300 [ 1260.983397][ T1419] __fput+0x3ff/0xb40 [ 1260.985124][ T1419] task_work_run+0x150/0x240 [ 1260.986761][ T1419] do_exit+0x829/0x2a30 [ 1260.988423][ T1419] do_group_exit+0xd5/0x2a0 [ 1260.990412][ T1419] get_signal+0x1ec7/0x21e0 [ 1260.992389][ T1419] arch_do_signal_or_restart+0x91/0x770 [ 1260.994786][ T1419] exit_to_user_mode_loop+0x86/0x4b0 [ 1260.997018][ T1419] do_int80_emulation+0x39b/0x470 [ 1260.998992][ T1419] asm_int80_emulation+0x1a/0x20 [ 1261.000696][ T1419] [ 1261.001478][ T1419] The buggy address belongs to the object at ffff888070c4f000 [ 1261.001478][ T1419] which belongs to the cache kmalloc-cg-2k of size 2048 [ 1261.006345][ T1419] The buggy address is located 32 bytes inside of [ 1261.006345][ T1419] freed 2048-byte region [ffff888070c4f000, ffff888070c4f800) [ 1261.011637][ T1419] [ 1261.012629][ T1419] The buggy address belongs to the physical page: [ 1261.015185][ T1419] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x70c48 [ 1261.018249][ T1419] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1261.021415][ T1419] memcg:ffff88804729e381 [ 1261.023204][ T1419] anon flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 1261.026538][ T1419] page_type: f5(slab) [ 1261.028248][ T1419] raw: 04fff00000000040 ffff88801b84c140 0000000000000000 dead000000000001 [ 1261.031763][ T1419] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff88804729e381 [ 1261.035383][ T1419] head: 04fff00000000040 ffff88801b84c140 0000000000000000 dead000000000001 [ 1261.039016][ T1419] head: 0000000000000000 0000000000080008 00000000f5000000 ffff88804729e381 [ 1261.042645][ T1419] head: 04fff00000000003 ffffea0001c31201 00000000ffffffff 00000000ffffffff [ 1261.046243][ T1419] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1261.049897][ T1419] page dumped because: kasan: bad access detected [ 1261.052651][ T1419] page_owner tracks the page as allocated [ 1261.055074][ T1419] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 631, tgid 630 (syz.1.3852), ts 952252617929, free_ts 952215360264 [ 1261.063561][ T1419] post_alloc_hook+0x1e1/0x250 [ 1261.065581][ T1419] get_page_from_freelist+0xe3d/0x2e10 [ 1261.067943][ T1419] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 1261.070500][ T1419] alloc_pages_mpol+0x1fb/0x550 [ 1261.072618][ T1419] new_slab+0x2c4/0x440 [ 1261.074398][ T1419] ___slab_alloc+0xda3/0x1ca0 [ 1261.076451][ T1419] __slab_alloc.isra.0+0x63/0x110 [ 1261.078647][ T1419] __kmalloc_cache_noprof+0x531/0x810 [ 1261.080399][ T1419] ipv6_add_dev+0x1c9/0x1520 [ 1261.081886][ T1419] addrconf_notify+0x563/0x19c0 [ 1261.083999][ T1419] notifier_call_chain+0x99/0x3b0 [ 1261.086150][ T1419] call_netdevice_notifiers_info+0xbe/0x110 [ 1261.088659][ T1419] register_netdevice+0x16b9/0x21d0 [ 1261.090941][ T1419] register_netdev+0x34/0x50 [ 1261.092954][ T1419] ip6_tnl_init_net+0x2ff/0x480 [ 1261.095053][ T1419] ops_init+0x1e2/0x5f0 [ 1261.096849][ T1419] page last free pid 631 tgid 630 stack trace: [ 1261.099435][ T1419] __free_frozen_pages+0x822/0x1130 [ 1261.101667][ T1419] __put_partials+0x127/0x160 [ 1261.103710][ T1419] qlist_free_all+0x47/0xe0 [ 1261.105672][ T1419] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1261.108007][ T1419] __kasan_kmalloc+0x8a/0xb0 [ 1261.110013][ T1419] __kmalloc_node_track_caller_noprof+0x357/0x9d0 [ 1261.112762][ T1419] kstrdup+0x51/0xe0 [ 1261.114464][ T1419] kstrdup_const+0x63/0x80 [ 1261.116399][ T1419] __kernfs_new_node+0x9b/0x960 [ 1261.118507][ T1419] kernfs_new_node+0x11b/0x1a0 [ 1261.120600][ T1419] __kernfs_create_file+0x53/0x350 [ 1261.122818][ T1419] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1261.125123][ T1419] internal_create_group+0x593/0xf40 [ 1261.127427][ T1419] internal_create_groups+0x9d/0x150 [ 1261.129694][ T1419] ib_setup_port_attrs+0x41f/0x600 [ 1261.131971][ T1419] add_one_compat_dev+0x5b3/0x820 [ 1261.134134][ T1419] [ 1261.135200][ T1419] Memory state around the buggy address: [ 1261.137601][ T1419] ffff888070c4ef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1261.141024][ T1419] ffff888070c4ef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1261.144430][ T1419] >ffff888070c4f000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1261.147588][ T1419] ^ [ 1261.149091][ T1419] ffff888070c4f080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1261.151447][ T1419] ffff888070c4f100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1261.153713][ T1419] ================================================================== [ 1261.156132][ T1419] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1261.158272][ T1419] CPU: 2 UID: 0 PID: 1419 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1261.161343][ T1419] Tainted: [L]=SOFTLOCKUP [ 1261.162637][ T1419] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1261.165544][ T1419] Call Trace: [ 1261.166532][ T1419] [ 1261.167489][ T1419] dump_stack_lvl+0x100/0x190 [ 1261.168949][ T1419] vpanic+0x20d/0x630 [ 1261.170122][ T1419] panic+0xd1/0xd1 [ 1261.171271][ T1419] ? __pfx_panic+0x10/0x10 [ 1261.172593][ T1419] ? check_panic_on_warn+0x1f/0x90 [ 1261.174154][ T1419] check_panic_on_warn.cold+0x19/0x34 [ 1261.176179][ T1419] end_report.part.0+0x3a/0x90 [ 1261.177614][ T1419] kasan_report.cold+0xe/0x18 [ 1261.179014][ T1419] ? tty_write_room+0x7d/0x90 [ 1261.180414][ T1419] tty_write_room+0x7d/0x90 [ 1261.181750][ T1419] handle_tx+0x14a/0x620 [ 1261.183038][ T1419] dev_hard_start_xmit+0x127/0x6c0 [ 1261.184560][ T1419] __dev_queue_xmit+0x6dd/0x46f0 [ 1261.186017][ T1419] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1261.187722][ T1419] ? __lock_acquire+0x4a5/0x2630 [ 1261.189177][ T1419] ? ref_tracker_free+0x37e/0x6c0 [ 1261.190695][ T1419] ? do_raw_spin_lock+0x128/0x260 [ 1261.192167][ T1419] ? find_held_lock+0x2b/0x80 [ 1261.193572][ T1419] ? skb_dequeue+0x126/0x180 [ 1261.194958][ T1419] ? skb_dequeue+0x126/0x180 [ 1261.196313][ T1419] ? find_held_lock+0x2b/0x80 [ 1261.197729][ T1419] ? tx+0xa4/0x130 [ 1261.198864][ T1419] ? tx+0xa4/0x130 [ 1261.199980][ T1419] ? rcu_is_watching+0x12/0xc0 [ 1261.201393][ T1419] ? __pfx_tx+0x10/0x10 [ 1261.202690][ T1419] tx+0xc4/0x130 [ 1261.203817][ T1419] kthread+0x1d8/0x3c0 [ 1261.205038][ T1419] ? __kthread_parkme+0xbb/0x230 [ 1261.206498][ T1419] ? __pfx_kthread+0x10/0x10 [ 1261.207916][ T1419] ? rcu_is_watching+0x12/0xc0 [ 1261.209325][ T1419] ? __pfx_default_wake_function+0x10/0x10 [ 1261.210996][ T1419] ? __kthread_parkme+0x18c/0x230 [ 1261.212425][ T1419] ? __pfx_kthread+0x10/0x10 [ 1261.213760][ T1419] kthread+0x3b3/0x730 [ 1261.214952][ T1419] ? __pfx_kthread+0x10/0x10 [ 1261.216258][ T1419] ? ret_from_fork+0x79/0xaf0 [ 1261.217661][ T1419] ? ret_from_fork+0x79/0xaf0 [ 1261.219000][ T1419] ? rcu_is_watching+0x12/0xc0 [ 1261.220330][ T1419] ? __pfx_kthread+0x10/0x10 [ 1261.221649][ T1419] ret_from_fork+0x754/0xaf0 [ 1261.222982][ T1419] ? __pfx_ret_from_fork+0x10/0x10 [ 1261.224456][ T1419] ? __switch_to+0x7b9/0x10c0 [ 1261.225865][ T1419] ? __pfx_kthread+0x10/0x10 [ 1261.227228][ T1419] ret_from_fork_asm+0x1a/0x30 [ 1261.228663][ T1419] [ 1261.230265][ T1419] Kernel Offset: disabled [ 1261.231534][ T1419] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:14:30 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000002 RCX=ffffffff91636774 RDX=1ffffffff22c6cef RSI=0000000000000000 RDI=ffffffff90d91078 RBP=ffffc90000006da0 RSP=ffffc90000006ce8 R8 =ffffffff916367b0 R9 =0000000000000007 R10=0000000000000000 R11=0000000000016f75 R12=ffffc90000006da8 R13=ffffc90000006d58 R14=ffffc90000006d8d R15=ffffffff91636779 RIP=ffffffff81b644a6 RFL=00000802 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880973e3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000562855790158 CR3=0000000029d23000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000564de5075c50 0000564de5075c50 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf080d410 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7463656e6e6f6373 69645f666961633a 66696163205d3630 383132545b5d3936 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3831203a65756c61 76207327726f7470 6972637365642065 6361667265746e69 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20656874206d6f72 6620746e65726566 666964202c73726f 7470697263736564 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20746e696f70646e 6520322073616820 3020676e69747465 73746c6120302065 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6361667265746e69 2030206769666e6f 63203a312d362062 7375205d35303034 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffff8880423a0ba8 RCX=0000000000000003 RDX=0000000000000008 RSI=ffff8880423a0ba8 RDI=ffff8880423a0000 RBP=ffff8880423a0000 RSP=ffffc900021b7338 R8 =0000000000000001 R9 =0000000000000086 R10=ffff888050315510 R11=0000000000000000 R12=0000000000000000 R13=0000000000000630 R14=0000000000000000 R15=0000000000008000 RIP=ffffffff81e264e0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974e3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000ffa2df2c CR3=0000000029911000 CR4=00352ef0 DR0=0000000000000004 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000001 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000ffffefef Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4566f3bb 00007ffc4566f3bb ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4566f8c0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4566f8c0 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 617461645f627061 6c203a7265687465 6270616c205d3143 202020205b5d3600 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6174616455627061 6620307265627465 6270616620573143 2020202051573600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7463656e6e6f6373 69645f666961633a 66696163205d3630 383132545b5d3936 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3831203a65756c61 76207327726f7470 6972637365642065 6361667265746e69 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20656874206d6f72 6620746e65726566 666964202c73726f 7470697263736564 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20746e696f70646e 6520322073616820 3020676e69747465 73746c6120302065 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6361667265746e69 2030206769666e6f 63203a312d362062 7375205d35303034 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e656d676172 66206562206c6c69 7720656361667265 746e692073696874 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85673c35 RDI=ffffffff9b1f2260 RBP=ffffffff9b1f2220 RSP=ffffc900078bf380 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000031343154 R12=0000000000000000 R13=0000000000000031 R14=0000000000000010 R15=ffffffff85673bd0 RIP=ffffffff85673c5f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975e3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f71b6d10 CR3=000000000e392000 CR4=00352ef0 DR0=0000000000000003 DR1=00000000000001f8 DR2=000000000000008e DR3=000000000000057a DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001b800000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000102b2b7 RBX=ffff88801deb8000 RCX=ffffffff8b7414b5 RDX=0000000000000000 RSI=ffffffff8dc419ff RDI=ffffffff8bfa3320 RBP=0000000000000003 RSP=ffffc9000048fdf0 R8 =0000000000000001 R9 =ffffed10056a673d R10=ffff88802b5339eb R11=0000000000000000 R12=ffffed1003bd7000 R13=0000000000000003 R14=ffffffff90b76fd0 R15=0000000000000000 RIP=ffffffff8b73fe1f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976e3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7380010 CR3=000000000e392000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000004008000a Opmask01=0000000000003fff Opmask02=00000000bfffbfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 172a3a58e1cbc670 8c782b89266b95e8 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 631dd90ac3b41141 a01f1171820e0f37 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9d0b05dd4176519b c6dc8a30087252cc ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c26581d6ed8b53b2 d87a876038d34a90 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000280 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000002fb000002fb 00800100000002fb ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 75db3aea775cb81c 7791be4a000002fb ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0080010075dc2512 000002fb00800100 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 778c71ac00800100 0080010075c2e7ea ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1ff7e429788b2cb3 4d43ad0f30070420 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 336bbed69f85591e 224dc14853ba5709 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 70002f74656e2f73 73616c632f737973 2f002f74656e2f73 79732f636f72702f ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0031303030303031 3132303830786c77 004300303d73656d 616e66692e74656e ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000c0d0d0d0d0d0c 0c0f0d050d45514a 0043000d004e5850 5c535b5413495853 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 000055dd0e6a4d00 00316e6170772f74 656e2f317968702f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00060014cfcdd7fe ff86117800000000 000080fe00010014 000000cbfd80400a ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008000080008 0001cbc50001cbc5 ffffffffffffffff 000600142cb9f9df ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 dedd7fb200000000 000080fe00010014 00000125fd80400a c19dfa046988258c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002001400000048 00000003000b0005 0000008000080008 0001a40f0001a40f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 00060014cfcdd7fe ff86117800000000 000080fe00010014 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000