last executing test programs: 2m26.251395252s ago: executing program 0 (id=2443): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfd, "0062ff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x12) 2m25.267028943s ago: executing program 0 (id=2446): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x129002) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x43f) 2m25.266947413s ago: executing program 0 (id=2447): msgsnd(0x0, 0x0, 0x8, 0x0) msgrcv(0x0, 0x0, 0x0, 0xda72ed5a9dc29567, 0x2000) 2m25.266835876s ago: executing program 0 (id=2449): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x210}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0x1}, &(0x7f0000000080), &(0x7f00000000c0)='%pB \x00'}, 0x1c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x201}, [@call={0x85, 0x0, 0x0, 0x4a}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) 2m25.266643122s ago: executing program 0 (id=2450): r0 = socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xb, 0x84, 0xffff, 0x80000000000005, 0x7, 0xb, 0x651, 0xffffffff, 0x7fffffff, 0x0, 0x7ffffffd, 0xfffffffffffffffe, 0xf3, 0xb, 0x80000000000000, 0xcc2, 0x1000, 0x1, 0x94d6, 0x5, 0xfffffffd, 0x9, 0x8, 0xfffffffffffffffa, 0x3, 0x5}) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75015f69643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) lstat(0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2145c89, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r2, 0x4010e501, &(0x7f00000000c0)={r1}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000600)=0x5bb, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r0, @ANYRESOCT, @ANYRES64=r0, @ANYRESOCT, @ANYRES64=r0, @ANYRES16, @ANYBLOB="1345b56d1e0ec93b52fc1f89982175268f3e62b81249cab37d42ba5875abb73bb32baf1f1d6acb8086c455a569d4100c4b9c9a846216b129166f5fd1ca46da3441bba5233f7ce18476643f02d8c7fb73e0fd69c42f0c67dbe4e50c8fabedde0828cb92882f8c8afedc034383d465d7", @ANYRESHEX=r0, @ANYRESOCT=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r3}, 0x90) munlockall() 2m25.264737997s ago: executing program 0 (id=2452): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7fff0040}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x81, 0x2, &(0x7f0000000240)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)={0x14, 0x35, 0x1, 0x70bd26, 0x25dfdbf9, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x404000d}, 0x24000030) r6 = syz_open_pts(0xffffffffffffffff, 0x395002) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000300)) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0xfffffffffffffcd5, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2}, {0x4, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4008000) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4910}, 0x4000804) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) msgsnd(0x0, 0x0, 0x8, 0x0) msgrcv(0x0, 0x0, 0x0, 0xda72ed5a9dc29567, 0x2000) 2m9.982710582s ago: executing program 32 (id=2452): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7fff0040}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x81, 0x2, &(0x7f0000000240)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)={0x14, 0x35, 0x1, 0x70bd26, 0x25dfdbf9, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x404000d}, 0x24000030) r6 = syz_open_pts(0xffffffffffffffff, 0x395002) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000300)) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0xfffffffffffffcd5, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2}, {0x4, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4008000) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4910}, 0x4000804) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) msgsnd(0x0, 0x0, 0x8, 0x0) msgrcv(0x0, 0x0, 0x0, 0xda72ed5a9dc29567, 0x2000) 6.529172256s ago: executing program 4 (id=3487): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="a0725ce9403b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x60, '\x00', {0x0, 0x6, "fd9063", 0x2, 0x3a, 0x0, @empty, @mcast2}}}}}}}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d", @ANYRES64], 0xf8) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001000)={0x10, 0x140d, 0xe3263c25d365e57d, 0x70bd2a, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x1800, 0x0, 0x318, 0x1, 0x24}, 0x9c) 6.527293195s ago: executing program 1 (id=3480): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) rmdir(&(0x7f0000000240)='./file1\x00') chdir(&(0x7f00000001c0)='./bus\x00') r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2000, 0x11) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400, 0x2c) renameat2(r3, &(0x7f0000000080)='./file0\x00', r4, &(0x7f0000000100)='./file1\x00', 0x0) r5 = socket(0x10, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x9) write(r5, &(0x7f0000000040), 0x0) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket(0x2, 0x80805, 0x0) pipe2$watch_queue(0x0, 0x80) add_key(0x0, 0x0, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 5.418022974s ago: executing program 1 (id=3485): getpgid(0x0) epoll_create1(0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x800854db, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x102, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x1a00004a9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='xprtrdma_frwr_sgerr\x00', r1}, 0x18) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r4, 0x0, 0x7, 0x4}) r5 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r5) r6 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) syz_usb_control_io$uac1(r6, 0x0, &(0x7f00000006c0)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r7, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r9 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r10 = dup(r9) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) r11 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r10}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r9}) io_uring_enter(r11, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 5.19497567s ago: executing program 4 (id=3488): openat$sw_sync(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) io_setup(0xfffffc00, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000100), 0x40040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket$netlink(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x38775951944642b9, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x24c01, 0x0) dup3(r2, r0, 0x0) eventfd(0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x0, 0x9, 0x3, 0x0, 0x7fffffff}, 0x0, 0x0) 5.141334308s ago: executing program 4 (id=3489): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) rmdir(&(0x7f0000000240)='./file1\x00') chdir(&(0x7f00000001c0)='./bus\x00') r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2000, 0x11) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400, 0x2c) renameat2(r3, &(0x7f0000000080)='./file0\x00', r4, &(0x7f0000000100)='./file1\x00', 0x0) r5 = socket(0x10, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x9) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b", 0xe) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket(0x2, 0x80805, 0x0) pipe2$watch_queue(0x0, 0x80) add_key(0x0, 0x0, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 4.679633993s ago: executing program 1 (id=3501): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 4.396411723s ago: executing program 1 (id=3504): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCDELRT(r1, 0x890c, 0x0) sendmmsg$inet6(r1, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x4}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000200)='p', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001440)="95", 0x1}], 0x1}}], 0x2, 0x20004004) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(cbc-des3_ede-asm)\x00'}, 0x58) r2 = memfd_create(&(0x7f00000005c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x99\xb80x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r9, 0x2ded, 0xef92, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') open(&(0x7f0000000000)='./file0\x00', 0x502, 0x98) writev(r6, &(0x7f0000000140)=[{&(0x7f0000002240)="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"/4113, 0xff4}, {&(0x7f0000001200)='\x00', 0x32}], 0x2) ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f0000000700)={{r2}, "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"}) ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000007}) 4.261500012s ago: executing program 4 (id=3496): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000002a0725ce9403b86dd60cb800000303a00fe880000000000000000000000000101ff020000000000000000000000000001040090786071000060fd906300023a0000000000000000000000000000000000ff020000000000000000000000000001"], 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d", @ANYRES64], 0xf8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xaf4, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "a30bff0300"}, 0x38) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x300}) read$FUSE(r1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4.143333021s ago: executing program 3 (id=3497): openat$sw_sync(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) io_setup(0xfffffc00, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000100), 0x40040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket$netlink(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x38775951944642b9, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x24c01, 0x0) dup3(r2, r0, 0x0) eventfd(0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x0, 0x9, 0x3, 0x0, 0x7fffffff}, 0x0, 0x0) 4.010739362s ago: executing program 3 (id=3498): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x41, 0x107, 0xfffffffc, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x136}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f00000001c0)={'\x00', 0x9, 0x4, 0x8000, 0x46, 0x6, r1}) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r6 = dup(0xffffffffffffffff) ioctl$SCSI_IOCTL_DOORUNLOCK(r6, 0x5381) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x30, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1ff}]}, 0x30}}, 0x0) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000c80)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffc]}}) dup(r7) r9 = socket(0x8000000010, 0x2, 0x0) write(r9, &(0x7f00000002c0)="7e0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5b", 0x7e) r10 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r10, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) syz_emit_ethernet(0x52, &(0x7f00000000c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fbff00", 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x3a, 0x0, 0x0, 0xe}], {{0x8000, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 3.45037058s ago: executing program 1 (id=3509): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) rmdir(&(0x7f0000000240)='./file1\x00') chdir(&(0x7f00000001c0)='./bus\x00') r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2000, 0x11) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400, 0x2c) renameat2(r3, &(0x7f0000000080)='./file0\x00', r4, &(0x7f0000000100)='./file1\x00', 0x0) r5 = socket(0x10, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a000000020000", 0x7) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x9) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket(0x2, 0x80805, 0x0) add_key(0x0, 0x0, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 3.171414345s ago: executing program 3 (id=3502): socket$kcm(0x29, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x2}}, './bus\x00'}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x2, 0x4, 0xc, 0x200, r3, 0x9, '\x00', r6, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x9}, 0x50) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) rt_sigaction(0x19, &(0x7f00000000c0)={&(0x7f0000000080)="366465f029144d00000081f30fc27f5e06ae0d0fd82e2e460f01d626f00994aff7000000c4c1796f960600000040cd00c4e2f1453c99f340a56544ca0c00", 0x84000004, 0x0}, 0x0, 0x8, &(0x7f0000000000)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000080)=0xf2e, 0x4) r9 = syz_open_dev$video4linux(&(0x7f0000000c80), 0x7, 0xc82) ioctl$VIDIOC_SUBDEV_S_FMT(r9, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x6, 0x8, 0x3017, 0x6, 0xa, 0x8, 0x1, 0x2}}) ftruncate(r8, 0x3292e291) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000018000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000740)=""/4096, &(0x7f00000000c0), &(0x7f00000003c0), 0x2, r7}, 0x38) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001300)=r4, 0x4) write$tun(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="080000f80201ce006800008009004518d66f33a800000808007800000000ac1414aa0800907800e0000027f372c92848c3c7355410391a5d3d0f9d9c56647b52d1061446ce7cf4d3ad624fe991754f46923e78bb1269e4d8bc3d0ba7627cfa2a5ceac760650dc2a0ab65cab0306160b1a728fd05e627150deba0812e7574e746cc65359b60a87654836636c19551268bbafb09589a41d50cac4d6300764166ebf6646f057c7df0c384f4e31d1ba6f1bc6c5cf741239dd8cb2c38fe97190537d49c4f7d7d55e25089346ebbd3e1277e691793820cbd848ea2a687ca78"], 0xdc) r10 = socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) 3.011632237s ago: executing program 3 (id=3503): getpgid(0x0) epoll_create1(0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x800854db, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x102, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x1a00004a9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='xprtrdma_frwr_sgerr\x00', r1}, 0x18) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r4, 0x0, 0x7, 0x4}) r5 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r5) r6 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) syz_usb_control_io$uac1(r6, 0x0, &(0x7f00000006c0)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r7, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r9 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r10 = dup(r9) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) r11 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r10}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r9}) io_uring_enter(r11, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.497545336s ago: executing program 1 (id=3505): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="a0725ce9403b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x60, '\x00', {0x0, 0x6, "fd9063", 0x2, 0x3a, 0x0, @empty, @mcast2}}}}}}}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d", @ANYRES64], 0xf8) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001000)={0x10, 0x140d, 0xe3263c25d365e57d, 0x70bd2a, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x18000000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 2.47232793s ago: executing program 2 (id=3506): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) rmdir(&(0x7f0000000240)='./file1\x00') chdir(&(0x7f00000001c0)='./bus\x00') r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2000, 0x11) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400, 0x2c) renameat2(r3, &(0x7f0000000080)='./file0\x00', r4, &(0x7f0000000100)='./file1\x00', 0x0) r5 = socket(0x10, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x9) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b", 0xe) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket(0x2, 0x80805, 0x0) pipe2$watch_queue(0x0, 0x80) add_key(0x0, 0x0, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 1.551303527s ago: executing program 2 (id=3507): r0 = socket$alg(0x26, 0x5, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) lsm_get_self_attr(0x64, 0x0, &(0x7f0000001280)=0x38, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x10, 0x802, 0xffff, 0x0, 0x0, '\a\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff0200000071106900030000000020"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/71, 0x47}], 0x1}, 0x0) 1.481468682s ago: executing program 2 (id=3508): openat$sw_sync(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) io_setup(0xfffffc00, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000100), 0x40040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket$netlink(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x38775951944642b9, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x24c01, 0x0) dup3(r2, r0, 0x0) eventfd(0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x0, 0x9, 0x3, 0x0, 0x7fffffff}, 0x0, 0x0) 1.481007631s ago: executing program 2 (id=3510): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) rmdir(&(0x7f0000000240)='./file1\x00') chdir(&(0x7f00000001c0)='./bus\x00') r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2000, 0x11) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400, 0x2c) renameat2(r3, &(0x7f0000000080)='./file0\x00', r4, &(0x7f0000000100)='./file1\x00', 0x0) r5 = socket(0x10, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a000000020000", 0x7) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x9) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket(0x2, 0x80805, 0x0) add_key(0x0, 0x0, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 1.261221789s ago: executing program 4 (id=3511): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0xa62d, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000e80)) bpf$MAP_CREATE(0x0, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="3b048423ec0573c50176acc0b9ad8d89e97c21de74ad", @ANYBLOB="000000000000000000000000000000000000000000000011bf000000000000e0053b1471484a235b51380d"], 0x50) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregset(0x4205, r2, 0x2, &(0x7f00000001c0)={0x0, 0x6c}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000240), 0x57, 0x200002) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8095) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f00000002c0)={0x0, @frame_sync}) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) ioctl$FS_IOC_GETFLAGS(r4, 0x80046601, &(0x7f0000000280)) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xfffffffe, 0x4, 0x10000, 0x215, 0x0, r5}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000080)=""/181, 0xb5}], 0x1, 0x1ff, 0x8) 168.251371ms ago: executing program 4 (id=3512): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) read(r0, &(0x7f0000000000)=""/124, 0x7c) futex(0x0, 0x1, 0x800001, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'c6xdigio\x00', [0x4f2b, 0x5, 0x3, 0x4, 0x5, 0xcc7, 0xf, 0xb, 0xa, 0x100, 0x2, 0x1, 0xfffffffd, 0x40, 0x6, 0x101, 0x0, 0x1a449, 0x2, 0x40000003, 0x99, 0xcaa7, 0x0, 0x20001e58, 0xa, 0xe69, 0x3f, 0x8, 0x2, 0x0, 0xfffffff8]}) 90.793881ms ago: executing program 2 (id=3513): openat$drirender128(0xffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c0000000000000000000000080000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b12d25a80648c2594f90124fc60100c03400f000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 28.07854ms ago: executing program 2 (id=3514): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x1) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, &(0x7f00000001c0)) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000580)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1}}, {{0x0, 0x3f, &(0x7f0000000040)=[{&(0x7f00000002c0)="a6", 0x3f}], 0x1}}], 0x2, 0x40448c0) shutdown(r0, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) unshare(0x22020600) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r6, r4, 0x0, 0x7ffffffd) getsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 1.935294ms ago: executing program 3 (id=3515): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c0000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b12d25a80648c2594f90124fc60100c03400f000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 0s ago: executing program 3 (id=3516): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) rmdir(&(0x7f0000000240)='./file1\x00') chdir(&(0x7f00000001c0)='./bus\x00') r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2000, 0x11) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400, 0x2c) renameat2(r3, &(0x7f0000000080)='./file0\x00', r4, &(0x7f0000000100)='./file1\x00', 0x0) r5 = socket(0x10, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x9) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f0000000000", 0x15) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket(0x2, 0x80805, 0x0) pipe2$watch_queue(0x0, 0x80) add_key(0x0, 0x0, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) kernel console output (not intermixed with test programs): 8] ? skb_clone+0x190/0x3f0 [ 447.939797][T23928] ? netlink_deliver_tap+0x103/0xd30 [ 447.939810][T23928] skb_clone+0x190/0x3f0 [ 447.939823][T23928] netlink_deliver_tap+0xabd/0xd30 [ 447.939836][T23928] netlink_unicast+0x64c/0x870 [ 447.939850][T23928] ? __pfx_netlink_unicast+0x10/0x10 [ 447.939863][T23928] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 447.939878][T23928] netlink_sendmsg+0x8d1/0xdd0 [ 447.939892][T23928] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.939906][T23928] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 447.939919][T23928] ____sys_sendmsg+0xa95/0xc70 [ 447.939934][T23928] ? __pfx_____sys_sendmsg+0x10/0x10 [ 447.939949][T23928] ? get_compat_msghdr+0x11a/0x170 [ 447.939963][T23928] ? kstrtouint_from_user+0x13c/0x1d0 [ 447.939976][T23928] ___sys_sendmsg+0x134/0x1d0 [ 447.939988][T23928] ? get_pid_task+0xfc/0x250 [ 447.940002][T23928] ? __pfx____sys_sendmsg+0x10/0x10 [ 447.940017][T23928] ? rcu_is_watching+0x12/0xc0 [ 447.940031][T23928] __sys_sendmsg+0x16d/0x220 [ 447.940044][T23928] ? __pfx___sys_sendmsg+0x10/0x10 [ 447.940059][T23928] ? rcu_is_watching+0x12/0xc0 [ 447.940069][T23928] __do_fast_syscall_32+0x7c/0x3a0 [ 447.940084][T23928] do_fast_syscall_32+0x32/0x80 [ 447.940097][T23928] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 447.940110][T23928] RIP: 0023:0xf7fb4579 [ 447.940118][T23928] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 447.940129][T23928] RSP: 002b:00000000f54d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 447.940139][T23928] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000180 [ 447.940146][T23928] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 447.940151][T23928] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 447.940157][T23928] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 447.940163][T23928] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 447.940171][T23928] [ 447.967212][ T5979] Bluetooth: hci1: command tx timeout [ 448.101109][T23940] netlink: 'syz.1.2397': attribute type 3 has an invalid length. [ 448.103572][T23940] netlink: 'syz.1.2397': attribute type 1 has an invalid length. [ 448.106175][T23940] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2397'. [ 448.131241][T23942] 9pnet_fd: Insufficient options for proto=fd [ 448.524754][T23936] pim6reg1: entered promiscuous mode [ 448.528313][T23936] pim6reg1: entered allmulticast mode [ 449.134833][T23983] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 449.167009][ C2] bridge0: port 1(erspan0) entered learning state [ 449.489225][T24004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2416'. [ 449.750667][T24010] FAULT_INJECTION: forcing a failure. [ 449.750667][T24010] name failslab, interval 1, probability 0, space 0, times 0 [ 449.754819][T24010] CPU: 1 UID: 0 PID: 24010 Comm: syz.0.2417 Not tainted syzkaller #0 PREEMPT(full) [ 449.754847][T24010] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 449.754854][T24010] Call Trace: [ 449.754858][T24010] [ 449.754862][T24010] dump_stack_lvl+0x16c/0x1f0 [ 449.754879][T24010] should_fail_ex+0x512/0x640 [ 449.754894][T24010] should_failslab+0xc2/0x120 [ 449.754909][T24010] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 449.754924][T24010] ? skb_clone+0x190/0x3f0 [ 449.754937][T24010] ? netlink_deliver_tap+0x103/0xd30 [ 449.754951][T24010] skb_clone+0x190/0x3f0 [ 449.754963][T24010] netlink_deliver_tap+0xabd/0xd30 [ 449.754977][T24010] netlink_unicast+0x64c/0x870 [ 449.754991][T24010] ? __pfx_netlink_unicast+0x10/0x10 [ 449.755004][T24010] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 449.755019][T24010] netlink_sendmsg+0x8d1/0xdd0 [ 449.755033][T24010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.755047][T24010] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 449.755059][T24010] ____sys_sendmsg+0xa95/0xc70 [ 449.755075][T24010] ? __pfx_____sys_sendmsg+0x10/0x10 [ 449.755090][T24010] ? get_compat_msghdr+0x11a/0x170 [ 449.755104][T24010] ? kstrtouint_from_user+0x13c/0x1d0 [ 449.755117][T24010] ___sys_sendmsg+0x134/0x1d0 [ 449.755129][T24010] ? get_pid_task+0xfc/0x250 [ 449.755144][T24010] ? __pfx____sys_sendmsg+0x10/0x10 [ 449.755158][T24010] ? rcu_is_watching+0x12/0xc0 [ 449.755173][T24010] __sys_sendmsg+0x16d/0x220 [ 449.755186][T24010] ? __pfx___sys_sendmsg+0x10/0x10 [ 449.755201][T24010] ? rcu_is_watching+0x12/0xc0 [ 449.755212][T24010] __do_fast_syscall_32+0x7c/0x3a0 [ 449.755227][T24010] do_fast_syscall_32+0x32/0x80 [ 449.755239][T24010] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 449.755253][T24010] RIP: 0023:0xf70fe579 [ 449.755260][T24010] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 449.755270][T24010] RSP: 002b:00000000f54ac55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 449.755281][T24010] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000080 [ 449.755287][T24010] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 449.755293][T24010] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 449.755299][T24010] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 449.755304][T24010] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 449.755313][T24010] [ 449.837062][ T5979] Bluetooth: hci4: command tx timeout [ 449.839345][T24007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2417'. [ 449.843290][T24007] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 449.843290][T24007] program syz.0.2417 not setting count and/or reply_len properly [ 449.978188][ T5973] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 449.981837][ T5973] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 449.984368][ T5973] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 449.987763][ T5973] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 449.991356][ T5973] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 450.007091][T24014] lo speed is unknown, defaulting to 1000 [ 450.057142][ T5973] Bluetooth: hci1: command tx timeout [ 450.061167][T24014] wlan1 speed is unknown, defaulting to 1000 [ 450.150126][T24014] chnl_net:caif_netlink_parms(): no params data found [ 450.191676][T24014] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.194174][T24014] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.196620][T24014] bridge_slave_0: entered allmulticast mode [ 450.199308][T24014] bridge_slave_0: entered promiscuous mode [ 450.202000][T24014] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.204042][T24014] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.206264][T24014] bridge_slave_1: entered allmulticast mode [ 450.209391][T24014] bridge_slave_1: entered promiscuous mode [ 450.231121][T24014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.235283][T24014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.259918][T24014] team0: Port device team_slave_0 added [ 450.263536][T24014] team0: Port device team_slave_1 added [ 450.361457][T24014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.363664][T24014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.372348][T24014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.376370][T24014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.379316][T24014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.387979][T24014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.415622][T24014] hsr_slave_0: entered promiscuous mode [ 450.418499][T24014] hsr_slave_1: entered promiscuous mode [ 450.420464][T24014] debugfs: 'hsr0' already exists in 'hsr' [ 450.422352][T24014] Cannot create hsr debugfs directory [ 450.527070][ T6982] erspan0: left allmulticast mode [ 450.528866][ T6982] erspan0: left promiscuous mode [ 450.530502][ T6982] bridge0: port 1(erspan0) entered disabled state [ 450.920074][ T6982] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 450.923019][ T6982] tipc: Resetting bearer [ 450.924838][ T6982] bond0 (unregistering): Released all slaves [ 450.930852][ T6982] bond1 (unregistering): Released all slaves [ 450.935120][ T6982] bond2 (unregistering): Released all slaves [ 450.999296][ T6982] : left promiscuous mode [ 451.068924][ T40] audit: type=1326 audit(1755714045.722:28114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24052 comm="syz.1.2427" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb4579 code=0x0 [ 451.083138][ T6982] tipc: Disabling bearer [ 451.086311][ T6982] tipc: Disabling bearer [ 451.092832][ T6982] tipc: Left network mode [ 451.113564][T24060] binder: 24059:24060 unknown command 0 [ 451.116316][T24060] binder: 24059:24060 ioctl c0306201 80000080 returned -22 [ 451.207224][T24014] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 451.220953][T24014] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 451.226967][T24014] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 451.231418][T24014] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 451.257457][ T40] audit: type=1326 audit(1755714045.912:28115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24042 comm="syz.3.2426" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x0 [ 451.267915][ T6982] hsr_slave_0: left promiscuous mode [ 451.390151][ T6984] smc: removing ib device sz1 [ 451.399225][ T1335] lo speed is unknown, defaulting to 1000 [ 451.401317][ T1335] sz1: Port: 1 Link DOWN [ 451.415737][T24014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.432512][T24014] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.437067][ T6985] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.439933][ T6985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.446210][ T6985] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.448916][ T6985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.531048][T24014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.549714][T24014] veth0_vlan: entered promiscuous mode [ 451.554414][T24014] veth1_vlan: entered promiscuous mode [ 451.573027][T24014] veth0_macvtap: entered promiscuous mode [ 451.576161][T24014] veth1_macvtap: entered promiscuous mode [ 451.582890][T24014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.588196][T24014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.593059][ T6984] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.596176][ T6984] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.599588][ T6984] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.602436][ T6984] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.621581][ T6984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.624073][ T6984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.635726][ T6980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.638958][ T6980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.741081][ T6982] IPVS: stop unused estimator thread 0... [ 451.777304][T24104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2420'. [ 451.782576][T24104] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 451.782576][T24104] program syz.2.2420 not setting count and/or reply_len properly [ 451.887440][ T5973] Bluetooth: hci4: command tx timeout [ 451.908778][T24117] fuse: Bad value for 'rootmode' [ 451.998858][T24124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2439'. [ 452.047061][ T5973] Bluetooth: hci3: command tx timeout [ 452.070072][T24132] FAULT_INJECTION: forcing a failure. [ 452.070072][T24132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 452.074132][T24132] CPU: 3 UID: 0 PID: 24132 Comm: syz.0.2448 Not tainted syzkaller #0 PREEMPT(full) [ 452.074149][T24132] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 452.074155][T24132] Call Trace: [ 452.074159][T24132] [ 452.074163][T24132] dump_stack_lvl+0x16c/0x1f0 [ 452.074179][T24132] should_fail_ex+0x512/0x640 [ 452.074196][T24132] _copy_to_user+0x32/0xd0 [ 452.074206][T24132] simple_read_from_buffer+0xcb/0x170 [ 452.074217][T24132] proc_fail_nth_read+0x197/0x240 [ 452.074229][T24132] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 452.074239][T24132] ? security_file_permission+0x71/0x210 [ 452.074253][T24132] ? rw_verify_area+0xcf/0x6c0 [ 452.074263][T24132] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 452.074290][T24132] vfs_read+0x1e4/0xcf0 [ 452.074360][T24132] ? __pfx_vfs_read+0x10/0x10 [ 452.074371][T24132] ? rcu_is_watching+0x12/0xc0 [ 452.074383][T24132] ? __fget_files+0x20e/0x3c0 [ 452.074396][T24132] ksys_read+0x12a/0x250 [ 452.074407][T24132] ? __pfx_ksys_read+0x10/0x10 [ 452.074419][T24132] ? rcu_is_watching+0x12/0xc0 [ 452.074429][T24132] __do_fast_syscall_32+0x7c/0x3a0 [ 452.074444][T24132] do_fast_syscall_32+0x32/0x80 [ 452.074457][T24132] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 452.074470][T24132] RIP: 0023:0xf70fe579 [ 452.074479][T24132] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 452.074489][T24132] RSP: 002b:00000000f54ee590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 452.074499][T24132] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54ee620 [ 452.074506][T24132] RDX: 000000000000000f RSI: 00000000f7464ff4 RDI: 0000000000000000 [ 452.074512][T24132] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 452.074518][T24132] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 452.074523][T24132] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 452.074539][T24132] [ 452.127190][ T5973] Bluetooth: hci1: command tx timeout [ 452.187199][T24136] netlink: 'syz.1.2442': attribute type 3 has an invalid length. [ 452.189692][T24136] netlink: 'syz.1.2442': attribute type 1 has an invalid length. [ 452.192205][T24136] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2442'. [ 452.216571][T24140] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 452.219054][T24140] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 452.222750][T24140] vhci_hcd vhci_hcd.0: Device attached [ 452.287351][T24101] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 452.422952][T24154] fuse: Unknown parameter 'grou_id' [ 452.486783][ T1335] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 452.536805][T24101] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 452.688572][T24101] usb 6-1: config index 0 descriptor too short (expected 45863, got 27) [ 452.691226][T24101] usb 6-1: config 117 has too many interfaces: 71, using maximum allowed: 32 [ 452.693992][T24101] usb 6-1: config 117 has an invalid descriptor of length 126, skipping remainder of the config [ 452.697491][T24101] usb 6-1: config 117 has 0 interfaces, different from the descriptor's value: 71 [ 452.701920][T24101] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 452.704780][T24101] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 452.707454][T24101] usb 6-1: Product: syz [ 452.708830][T24101] usb 6-1: Manufacturer: syz [ 452.710305][T24101] usb 6-1: SerialNumber: syz [ 452.908362][T24142] vhci_hcd: connection reset by peer [ 452.910220][ T6980] vhci_hcd: stop threads [ 452.911609][ T6980] vhci_hcd: release socket [ 452.913042][ T6980] vhci_hcd: disconnect device [ 453.527355][T24178] netlink: 'syz.3.2454': attribute type 3 has an invalid length. [ 453.529855][T24178] netlink: 'syz.3.2454': attribute type 1 has an invalid length. [ 453.532315][T24178] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2454'. [ 453.577993][T24184] netlink: 'syz.3.2456': attribute type 3 has an invalid length. [ 453.580571][T24184] netlink: 'syz.3.2456': attribute type 1 has an invalid length. [ 453.583104][T24184] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2456'. [ 454.126949][ T5973] Bluetooth: hci3: command tx timeout [ 454.178699][T24193] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2458'. [ 454.206797][ T5973] Bluetooth: hci1: command tx timeout [ 454.589759][ T5979] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 454.592200][ T5979] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 454.594573][ T5979] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 454.597290][ T5979] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 454.599693][ T5979] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 454.616413][T24200] wlan1 speed is unknown, defaulting to 1000 [ 454.720986][T24200] chnl_net:caif_netlink_parms(): no params data found [ 454.793456][T24200] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.796539][T24200] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.800289][T24200] bridge_slave_0: entered allmulticast mode [ 454.802746][T24200] bridge_slave_0: entered promiscuous mode [ 454.813250][T24200] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.815692][T24200] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.819252][T24200] bridge_slave_1: entered allmulticast mode [ 454.821613][T24200] bridge_slave_1: entered promiscuous mode [ 454.839847][T24200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.843729][T24200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.861290][T24200] team0: Port device team_slave_0 added [ 454.865416][T24200] team0: Port device team_slave_1 added [ 454.883583][T24200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.885819][T24200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.895108][T24200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.899591][T24200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.901855][T24200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.910859][T24200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.933489][T24200] hsr_slave_0: entered promiscuous mode [ 454.935699][T24200] hsr_slave_1: entered promiscuous mode [ 454.938123][T24200] debugfs: 'hsr0' already exists in 'hsr' [ 454.940488][T24200] Cannot create hsr debugfs directory [ 454.992022][ T6977] erspan0: left allmulticast mode [ 454.993629][ T6977] erspan0: left promiscuous mode [ 454.995300][ T6977] bridge0: port 3(erspan0) entered disabled state [ 454.999403][ T6977] bridge_slave_1: left allmulticast mode [ 455.001194][ T6977] bridge_slave_1: left promiscuous mode [ 455.003084][ T6977] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.006074][ T6977] bridge_slave_0: left allmulticast mode [ 455.008035][ T6977] bridge_slave_0: left promiscuous mode [ 455.009809][ T6977] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.170798][ T6977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.173955][ T6977] bond0 (unregistering): Released all slaves [ 455.182555][ T6977] bond1 (unregistering): Released all slaves [ 455.187026][ T6977] bond2 (unregistering): Released all slaves [ 455.253068][ T6977] tipc: Disabling bearer [ 455.255469][ T6977] tipc: Left network mode [ 455.328561][T24101] usb 6-1: USB disconnect, device number 29 [ 455.361708][T24219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2462'. [ 455.521107][T24229] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 455.552695][ T6977] hsr_slave_0: left promiscuous mode [ 455.555066][ T6977] hsr_slave_1: left promiscuous mode [ 455.557786][ T6977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.560953][ T6977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.563370][ T6977] batman_adv: batadv0: Removing interface: team0 [ 455.607852][ T6977] team0 (unregistering): Port device team_slave_1 removed [ 455.614379][ T6977] team0 (unregistering): Port device team_slave_0 removed [ 455.770235][T24200] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 455.773896][T24200] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 455.778128][T24200] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 455.781845][T24200] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 455.813927][T24200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.820471][T24200] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.824590][ T6982] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.826905][ T6982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.840506][ T6985] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.842762][ T6985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.864163][T24247] 9pnet_fd: Insufficient options for proto=fd [ 455.913305][T24200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.926651][T24200] veth0_vlan: entered promiscuous mode [ 455.930652][T24200] veth1_vlan: entered promiscuous mode [ 455.942303][T24200] veth0_macvtap: entered promiscuous mode [ 455.945274][T24200] veth1_macvtap: entered promiscuous mode [ 455.953481][T24200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.958895][T24200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.963993][ T6985] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.970125][ T6985] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.973103][ T6985] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.976448][ T6985] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.994367][ T6984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.999386][ T6984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.008060][ T6978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.010838][ T6978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.217210][ T5973] Bluetooth: hci3: command tx timeout [ 456.485330][T24257] tmpfs: Bad value for 'size' [ 456.656195][ T5973] Bluetooth: hci0: command tx timeout [ 457.270708][T24292] FAULT_INJECTION: forcing a failure. [ 457.270708][T24292] name failslab, interval 1, probability 0, space 0, times 0 [ 457.274711][T24292] CPU: 0 UID: 0 PID: 24292 Comm: syz.1.2472 Not tainted syzkaller #0 PREEMPT(full) [ 457.274725][T24292] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 457.274732][T24292] Call Trace: [ 457.274736][T24292] [ 457.274740][T24292] dump_stack_lvl+0x16c/0x1f0 [ 457.274757][T24292] should_fail_ex+0x512/0x640 [ 457.274773][T24292] should_failslab+0xc2/0x120 [ 457.274786][T24292] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 457.274799][T24292] ? getname_flags.part.0+0x4c/0x550 [ 457.274815][T24292] getname_flags.part.0+0x4c/0x550 [ 457.274831][T24292] getname_flags+0x93/0xf0 [ 457.274841][T24292] do_sys_openat2+0xb8/0x1d0 [ 457.274857][T24292] ? __pfx_do_sys_openat2+0x10/0x10 [ 457.274873][T24292] ? __fget_files+0x20e/0x3c0 [ 457.274885][T24292] __ia32_compat_sys_openat+0x16d/0x210 [ 457.274895][T24292] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 457.274904][T24292] ? ksys_write+0x1ac/0x250 [ 457.274916][T24292] ? rcu_is_watching+0x12/0xc0 [ 457.274927][T24292] __do_fast_syscall_32+0x7c/0x3a0 [ 457.274942][T24292] do_fast_syscall_32+0x32/0x80 [ 457.274955][T24292] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 457.274968][T24292] RIP: 0023:0xf7fb4579 [ 457.274976][T24292] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 457.274986][T24292] RSP: 002b:00000000f54d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 457.274997][T24292] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000640 [ 457.275003][T24292] RDX: 000000000004a300 RSI: 00000000000000cd RDI: 0000000000000000 [ 457.275009][T24292] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 457.275015][T24292] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 457.275021][T24292] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 457.275029][T24292] [ 457.513403][T24298] overlayfs: missing 'lowerdir' [ 457.636582][ T1335] vhci_hcd: vhci_device speed not set [ 457.640584][T24304] netlink: 'syz.2.2475': attribute type 1 has an invalid length. [ 457.643023][T24304] netlink: 'syz.2.2475': attribute type 2 has an invalid length. [ 458.286925][ T5973] Bluetooth: hci3: command tx timeout [ 458.399548][T24334] overlayfs: missing 'lowerdir' [ 458.686582][ T5973] Bluetooth: hci0: command tx timeout [ 459.171440][T24349] overlayfs: missing 'lowerdir' [ 459.401160][T24360] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2495'. [ 460.021754][T24370] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2499'. [ 460.766539][ T5973] Bluetooth: hci0: command tx timeout [ 461.080002][T24383] pim6reg1: entered promiscuous mode [ 461.081718][T24383] pim6reg1: entered allmulticast mode [ 461.302947][T24395] syz.1.2505 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 461.915667][ T6172] IPVS: starting estimator thread 0... [ 462.006683][T24409] IPVS: using max 58 ests per chain, 139200 per kthread [ 462.287290][T24416] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2510'. [ 462.290430][T24416] ip_vti0: entered promiscuous mode [ 462.292132][T24416] ip_vti0: entered allmulticast mode [ 462.846319][ T5973] Bluetooth: hci0: command tx timeout [ 463.149365][T24440] FAULT_INJECTION: forcing a failure. [ 463.149365][T24440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.154102][T24440] CPU: 3 UID: 0 PID: 24440 Comm: syz.2.2527 Not tainted syzkaller #0 PREEMPT(full) [ 463.154119][T24440] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 463.154126][T24440] Call Trace: [ 463.154131][T24440] [ 463.154136][T24440] dump_stack_lvl+0x16c/0x1f0 [ 463.154153][T24440] should_fail_ex+0x512/0x640 [ 463.154281][T24440] _copy_from_user+0x2e/0xd0 [ 463.154304][T24440] kvm_arch_vcpu_ioctl+0x1a14/0x52d0 [ 463.154319][T24440] ? is_bpf_text_address+0x94/0x1a0 [ 463.154332][T24440] ? kernel_text_address+0x8d/0x100 [ 463.154343][T24440] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 463.154357][T24440] ? stack_trace_save+0x8e/0xc0 [ 463.154368][T24440] ? __pfx_stack_trace_save+0x10/0x10 [ 463.154379][T24440] ? kasan_save_stack+0x42/0x60 [ 463.154391][T24440] ? stack_depot_save_flags+0x29/0x9c0 [ 463.154406][T24440] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 463.154422][T24440] ? kasan_save_stack+0x42/0x60 [ 463.154432][T24440] ? kasan_save_stack+0x33/0x60 [ 463.154443][T24440] ? kasan_save_track+0x14/0x30 [ 463.154455][T24440] ? kasan_save_free_info+0x3b/0x60 [ 463.154465][T24440] ? __mutex_trylock_common+0xe9/0x250 [ 463.154480][T24440] ? rcu_is_watching+0x12/0xc0 [ 463.154490][T24440] ? trace_contention_end+0xdd/0x130 [ 463.154504][T24440] ? __mutex_lock+0x1c5/0x1060 [ 463.154518][T24440] ? __pfx___mutex_lock+0x10/0x10 [ 463.154533][T24440] ? rcu_is_watching+0x12/0xc0 [ 463.154544][T24440] ? kvm_vcpu_ioctl+0x1236/0x1690 [ 463.154556][T24440] kvm_vcpu_ioctl+0x1236/0x1690 [ 463.154570][T24440] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 463.154582][T24440] ? tomoyo_path_number_perm+0x18d/0x580 [ 463.154596][T24440] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 463.154610][T24440] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 463.154624][T24440] ? do_vfs_ioctl+0x128/0x14f0 [ 463.154640][T24440] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 463.154656][T24440] ? rcu_is_watching+0x12/0xc0 [ 463.154667][T24440] kvm_vcpu_compat_ioctl+0x20f/0x3d0 [ 463.154680][T24440] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 463.154701][T24440] ? __fget_files+0x20e/0x3c0 [ 463.154712][T24440] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 463.154726][T24440] __ia32_compat_sys_ioctl+0x23f/0x370 [ 463.154742][T24440] __do_fast_syscall_32+0x7c/0x3a0 [ 463.154757][T24440] do_fast_syscall_32+0x32/0x80 [ 463.154769][T24440] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 463.154783][T24440] RIP: 0023:0xf7f15579 [ 463.154792][T24440] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 463.154803][T24440] RSP: 002b:00000000f543655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 463.154813][T24440] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c048aeca [ 463.154820][T24440] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 463.154826][T24440] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 463.154832][T24440] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 463.154837][T24440] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 463.154846][T24440] [ 463.609473][T24448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2521'. [ 463.613948][T24448] netlink: 'syz.1.2521': attribute type 1 has an invalid length. [ 463.617288][T24448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2521'. [ 463.753652][T24453] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2520'. [ 463.758402][T24453] netlink: 'syz.3.2520': attribute type 13 has an invalid length. [ 463.787167][T24452] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2529'. [ 463.827482][T24453] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 464.626777][T24191] usb 7-1: new low-speed USB device number 32 using dummy_hcd [ 464.778817][T24191] usb 7-1: unable to get BOS descriptor or descriptor too short [ 464.781970][T24191] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.785158][T24191] usb 7-1: config 0 has no interfaces? [ 464.789309][T24191] usb 7-1: string descriptor 0 read error: -22 [ 464.791660][T24191] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 464.794590][T24191] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.797783][T24191] usb 7-1: config 0 descriptor?? [ 465.002716][T24463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2524'. [ 465.005742][T24463] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2524'. [ 465.009244][ T1335] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 465.060545][T24191] usb 7-1: USB disconnect, device number 32 [ 465.176068][ T1335] usb 6-1: Using ep0 maxpacket: 16 [ 465.256996][ T1335] usb 6-1: config 0 has no interfaces? [ 465.295810][ T1335] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 465.298855][ T1335] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.302018][ T1335] usb 6-1: Product: syz [ 465.303566][ T1335] usb 6-1: Manufacturer: syz [ 465.305174][ T1335] usb 6-1: SerialNumber: syz [ 465.307891][ T1335] usb 6-1: config 0 descriptor?? [ 465.479722][T24485] overlayfs: failed lookup in lower (newroot/41, name='file1', err=-40): overlapping layers [ 465.519180][ T839] usb 6-1: USB disconnect, device number 30 [ 466.046925][T24487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2533'. [ 466.049777][T24487] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 466.052361][T24487] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.058112][ T40] audit: type=1326 audit(1755714060.712:28116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24486 comm="syz.1.2533" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x0 [ 466.160501][T24488] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2533'. [ 466.536189][T24496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2536'. [ 466.841648][T24507] overlayfs: missing 'lowerdir' [ 467.123051][ T40] audit: type=1326 audit(1755714061.772:28117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24512 comm="syz.1.2541" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb4579 code=0x0 [ 467.763804][T24529] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2544'. [ 467.883208][ T839] kernel write not supported for file /video36 (pid: 839 comm: kworker/1:2) [ 468.187660][T24550] overlayfs: failed to clone upperpath [ 468.648795][T24559] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 468.651670][T24559] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 468.655212][T24559] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 468.659877][T24559] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 468.663183][T24559] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 468.727479][T24558] chnl_net:caif_netlink_parms(): no params data found [ 468.767152][T24558] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.769032][T24568] FAULT_INJECTION: forcing a failure. [ 468.769032][T24568] name failslab, interval 1, probability 0, space 0, times 0 [ 468.769590][T24558] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.774085][T24568] CPU: 1 UID: 0 PID: 24568 Comm: syz.3.2555 Not tainted syzkaller #0 PREEMPT(full) [ 468.774100][T24568] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 468.774107][T24568] Call Trace: [ 468.774142][T24568] [ 468.774148][T24568] dump_stack_lvl+0x16c/0x1f0 [ 468.774170][T24568] should_fail_ex+0x512/0x640 [ 468.774191][T24568] should_failslab+0xc2/0x120 [ 468.774209][T24568] __kmalloc_cache_noprof+0x6a/0x3e0 [ 468.774220][T24568] ? ovl_init_fs_context+0x11f/0x5f0 [ 468.774232][T24568] ? kasan_save_track+0x14/0x30 [ 468.774244][T24568] ovl_init_fs_context+0x11f/0x5f0 [ 468.774255][T24568] ? __pfx_ovl_init_fs_context+0x10/0x10 [ 468.774266][T24568] alloc_fs_context+0x54a/0x9c0 [ 468.774280][T24568] path_mount+0xbdd/0x2000 [ 468.774294][T24568] ? __pfx_path_mount+0x10/0x10 [ 468.774306][T24568] ? kmem_cache_free+0x2d1/0x4d0 [ 468.774317][T24568] ? putname+0x154/0x1a0 [ 468.774330][T24568] ? getname_flags.part.0+0x1c5/0x550 [ 468.774347][T24568] ? __ia32_sys_mount+0x28b/0x310 [ 468.774359][T24568] __ia32_sys_mount+0x28b/0x310 [ 468.774371][T24568] ? __pfx___ia32_sys_mount+0x10/0x10 [ 468.774385][T24568] ? rcu_is_watching+0x12/0xc0 [ 468.774396][T24568] __do_fast_syscall_32+0x7c/0x3a0 [ 468.774411][T24568] do_fast_syscall_32+0x32/0x80 [ 468.774424][T24568] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 468.774438][T24568] RIP: 0023:0xf70ce579 [ 468.774445][T24568] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 468.774455][T24568] RSP: 002b:00000000f547c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 468.774466][T24568] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800000c0 [ 468.774472][T24568] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000080000100 [ 468.774479][T24568] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 468.774485][T24568] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 468.774490][T24568] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 468.774499][T24568] [ 468.846546][T24558] bridge_slave_0: entered allmulticast mode [ 468.848920][T24558] bridge_slave_0: entered promiscuous mode [ 468.851546][T24558] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.853747][T24558] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.856516][T24558] bridge_slave_1: entered allmulticast mode [ 468.859192][T24558] bridge_slave_1: entered promiscuous mode [ 468.885103][ T6980] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.891920][T24558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.897701][T24558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.938079][T24558] team0: Port device team_slave_0 added [ 468.941209][T24558] team0: Port device team_slave_1 added [ 468.951661][ T6980] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.974562][T24558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.977469][T24558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.985785][T24558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.991809][T24558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.994310][T24558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.003757][T24558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.008463][T24577] syz_tun: entered allmulticast mode [ 469.011813][ T6980] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.026919][T24577] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 469.035042][T24577] bond1: entered allmulticast mode [ 469.037093][T24577] 8021q: adding VLAN 0 to HW filter on device bond1 [ 469.048661][T24576] syz_tun: left allmulticast mode [ 469.051905][T24558] hsr_slave_0: entered promiscuous mode [ 469.054541][T24558] hsr_slave_1: entered promiscuous mode [ 469.057950][T24558] debugfs: 'hsr0' already exists in 'hsr' [ 469.060121][T24558] Cannot create hsr debugfs directory [ 469.073332][ T6980] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.083303][T24585] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 469.086757][T24585] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 469.136866][T24558] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 469.148444][T24558] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 469.152446][T24558] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 469.156469][T24590] overlayfs: failed to clone upperpath [ 469.157220][T24558] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 469.164933][ T6980] bridge_slave_1: left allmulticast mode [ 469.167016][ T6980] bridge_slave_1: left promiscuous mode [ 469.168893][ T6980] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.172343][ T6980] bridge_slave_0: left allmulticast mode [ 469.174546][ T6980] bridge_slave_0: left promiscuous mode [ 469.176790][ T6980] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.280214][ T6980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.310004][ T6980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.314183][ T6980] bond0 (unregistering): Released all slaves [ 469.366409][T24558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.374746][T24558] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.390870][ T6982] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.393336][ T6982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.396554][ T6982] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.399028][ T6982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.461212][T24605] overlayfs: failed lookup in lower (newroot/50, name='file1', err=-40): overlapping layers [ 469.468735][T24558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.572857][T24558] veth0_vlan: entered promiscuous mode [ 469.585678][T24558] veth1_vlan: entered promiscuous mode [ 469.602163][ T6980] hsr_slave_0: left promiscuous mode [ 469.604198][ T6980] hsr_slave_1: left promiscuous mode [ 469.608950][ T6980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.613123][ T6980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.616306][ T6980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.620922][ T6980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.627250][ T6980] veth1_macvtap: left promiscuous mode [ 469.629045][ T6980] veth0_macvtap: left promiscuous mode [ 469.630870][ T6980] veth1_vlan: left promiscuous mode [ 469.632535][ T6980] veth0_vlan: left promiscuous mode [ 469.717025][ T6980] team0 (unregistering): Port device team_slave_1 removed [ 469.723747][ T6980] team0 (unregistering): Port device team_slave_0 removed [ 469.796947][T24558] veth0_macvtap: entered promiscuous mode [ 469.804501][T24558] veth1_macvtap: entered promiscuous mode [ 469.813227][T24558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.819067][T24558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.833299][ T6977] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.852630][ T6977] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.879894][T24640] overlayfs: failed lookup in lower (newroot/19, name='file1', err=-40): overlapping layers [ 469.881095][ T6977] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.892505][ T6977] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.913576][ T6977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.923494][ T6977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.949162][ T6982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.952193][ T6982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.526326][T24678] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 470.631062][T24683] netlink: 'syz.3.2576': attribute type 1 has an invalid length. [ 470.633619][T24683] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2576'. [ 470.662400][T24685] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2577'. [ 470.666241][T24685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2577'. [ 470.669819][T24685] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.672510][T24685] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.695891][T24559] Bluetooth: hci1: command tx timeout [ 470.916165][ T34] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 471.076906][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 471.078233][ T34] usb 7-1: config 0 has an invalid interface number: 26 but max is 16 [ 471.078246][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 471.078257][ T34] usb 7-1: config 0 has no interface number 0 [ 471.078269][ T34] usb 7-1: config 0 interface 26 has no altsetting 0 [ 471.080260][ T34] usb 7-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 471.080274][ T34] usb 7-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 471.080284][ T34] usb 7-1: Product: syz [ 471.080291][ T34] usb 7-1: Manufacturer: syz [ 471.080300][ T34] usb 7-1: SerialNumber: syz [ 471.081070][ T34] usb 7-1: config 0 descriptor?? [ 471.286245][ T34] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 471.860838][T24718] netlink: 'syz.3.2587': attribute type 1 has an invalid length. [ 471.863124][T24718] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2587'. [ 471.888258][ T34] gspca_sunplus: reg_w_riv err -71 [ 471.890046][ T34] sunplus 7-1:0.26: probe with driver sunplus failed with error -71 [ 471.894825][ T34] usb 7-1: USB disconnect, device number 33 [ 472.056255][ T840] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 472.126148][ T6046] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 472.226160][ T840] usb 9-1: Using ep0 maxpacket: 32 [ 472.229130][ T840] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.232640][ T840] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 472.238676][ T840] usb 9-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 472.241582][ T840] usb 9-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 472.244221][ T840] usb 9-1: Product: syz [ 472.245570][ T840] usb 9-1: Manufacturer: syz [ 472.247588][ T840] usb 9-1: SerialNumber: syz [ 472.251582][ T840] input: appletouch as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/input/input41 [ 472.287751][ T6046] usb 8-1: config index 0 descriptor too short (expected 45863, got 27) [ 472.290551][ T6046] usb 8-1: config 117 has too many interfaces: 71, using maximum allowed: 32 [ 472.293329][ T6046] usb 8-1: config 117 has an invalid descriptor of length 126, skipping remainder of the config [ 472.297089][ T6046] usb 8-1: config 117 has 0 interfaces, different from the descriptor's value: 71 [ 472.301403][ T6046] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 472.304222][ T6046] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 472.307120][ T6046] usb 8-1: Product: syz [ 472.308632][ T6046] usb 8-1: Manufacturer: syz [ 472.310201][ T6046] usb 8-1: SerialNumber: syz [ 472.509080][T24191] usb 9-1: USB disconnect, device number 2 [ 472.515352][T24191] appletouch 9-1:1.0: input: appletouch disconnected [ 472.765729][T24559] Bluetooth: hci1: command tx timeout [ 473.753616][T24753] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 474.413361][T24762] netlink: 'syz.2.2601': attribute type 3 has an invalid length. [ 474.420159][T24762] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2601'. [ 474.846761][T24559] Bluetooth: hci1: command tx timeout [ 474.901915][ T6046] usb 8-1: USB disconnect, device number 41 [ 476.127586][T24790] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2608'. [ 476.445171][T24777] Set syz1 is full, maxelem 65536 reached [ 476.928467][T24559] Bluetooth: hci1: command tx timeout [ 477.492572][T24822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.529121][T24825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2618'. [ 478.948106][T24843] Illegal XDP return value 4294967274 on prog (id 475) dev N/A, expect packet loss! [ 479.000614][T24840] syzkaller1: entered promiscuous mode [ 479.002178][T24840] syzkaller1: entered allmulticast mode [ 479.006184][T24840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2621'. [ 479.009253][T24840] program syz.3.2621 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 479.012715][T24840] nfs: Unknown parameter 'ntext' [ 479.060049][T24850] 9pnet: Could not find request transport: xen [ 479.178000][T24853] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2626'. [ 479.181883][T24853] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2626'. [ 479.184769][T24853] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2626'. [ 479.575903][T24871] overlayfs: failed to clone upperpath [ 479.837963][T24877] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2633'. [ 480.745891][ T1335] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 480.926467][ T1335] usb 8-1: config index 0 descriptor too short (expected 45863, got 27) [ 480.929278][ T1335] usb 8-1: config 117 has too many interfaces: 71, using maximum allowed: 32 [ 480.932371][ T1335] usb 8-1: config 117 has an invalid descriptor of length 126, skipping remainder of the config [ 480.936701][ T1335] usb 8-1: config 117 has 0 interfaces, different from the descriptor's value: 71 [ 480.969940][ T1335] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 481.038122][ T1335] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 481.041071][ T1335] usb 8-1: Product: syz [ 481.043264][ T1335] usb 8-1: Manufacturer: syz [ 481.287910][ T1335] usb 8-1: SerialNumber: syz [ 482.337548][T24932] netlink: 'syz.2.2643': attribute type 3 has an invalid length. [ 482.340682][T24932] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2643'. [ 483.267193][T24945] sg_write: data in/out 65516/154 bytes for SCSI command 0x7-- guessing data in; [ 483.267193][T24945] program syz.2.2647 not setting count and/or reply_len properly [ 483.510812][ T1335] usb 8-1: USB disconnect, device number 42 [ 483.528304][T24965] netlink: 'syz.4.2654': attribute type 3 has an invalid length. [ 483.531242][T24965] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2654'. [ 483.914791][ T40] audit: type=1326 audit(1755714078.563:28118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24978 comm="syz.1.2659" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x0 [ 484.795232][ T1335] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 485.026588][ T1335] usb 9-1: config index 0 descriptor too short (expected 45863, got 27) [ 485.029706][ T1335] usb 9-1: config 117 has too many interfaces: 71, using maximum allowed: 32 [ 485.033078][ T1335] usb 9-1: config 117 has an invalid descriptor of length 126, skipping remainder of the config [ 485.064966][ T1335] usb 9-1: config 117 has 0 interfaces, different from the descriptor's value: 71 [ 485.065256][T24559] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 485.071032][T24559] CPU: 2 UID: 0 PID: 24559 Comm: kworker/u33:0 Not tainted syzkaller #0 PREEMPT(full) [ 485.071049][T24559] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 485.071058][T24559] Workqueue: hci3 hci_rx_work [ 485.071074][T24559] Call Trace: [ 485.071079][T24559] [ 485.071083][T24559] dump_stack_lvl+0x16c/0x1f0 [ 485.071100][T24559] sysfs_warn_dup+0x7f/0xa0 [ 485.071114][T24559] sysfs_create_dir_ns+0x24b/0x2b0 [ 485.071127][T24559] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 485.071140][T24559] ? kobject_add_internal+0x25b/0x9b0 [ 485.071155][T24559] ? lock_release+0x201/0x2f0 [ 485.071170][T24559] ? do_raw_spin_unlock+0x172/0x230 [ 485.071187][T24559] kobject_add_internal+0x2c4/0x9b0 [ 485.071205][T24559] kobject_add+0x16e/0x240 [ 485.071219][T24559] ? __pfx_kobject_add+0x10/0x10 [ 485.071233][T24559] ? lock_release+0x201/0x2f0 [ 485.071247][T24559] ? do_raw_spin_unlock+0x172/0x230 [ 485.071262][T24559] ? kobject_put+0xab/0x5a0 [ 485.071277][T24559] device_add+0x288/0x1aa0 [ 485.071288][T24559] ? __pfx_dev_set_name+0x10/0x10 [ 485.071299][T24559] ? __pfx_device_add+0x10/0x10 [ 485.071308][T24559] ? mgmt_send_event_skb+0x2fb/0x460 [ 485.071321][T24559] hci_conn_add_sysfs+0x17e/0x230 [ 485.071334][T24559] le_conn_complete_evt+0x1075/0x1d70 [ 485.071345][T24559] ? __pfx___might_resched+0x10/0x10 [ 485.071357][T24559] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 485.071367][T24559] ? rcu_is_watching+0x12/0xc0 [ 485.071377][T24559] ? lock_release+0x201/0x2f0 [ 485.071393][T24559] hci_le_conn_complete_evt+0x23c/0x370 [ 485.071406][T24559] hci_le_meta_evt+0x354/0x5e0 [ 485.071417][T24559] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 485.071429][T24559] hci_event_packet+0x685/0x11c0 [ 485.071439][T24559] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 485.071456][T24559] ? __pfx_hci_event_packet+0x10/0x10 [ 485.071466][T24559] ? kcov_remote_start+0x36a/0x6d0 [ 485.071481][T24559] ? rcu_watching_snap_stopped_since+0x100/0x110 [ 485.071494][T24559] ? rcu_is_watching+0x12/0xc0 [ 485.071507][T24559] hci_rx_work+0x2c5/0x16b0 [ 485.071519][T24559] ? rcu_is_watching+0x12/0xc0 [ 485.071531][T24559] process_one_work+0x9cf/0x1b70 [ 485.071552][T24559] ? __pfx_rxrpc_peer_keepalive_worker+0x10/0x10 [ 485.071570][T24559] ? __pfx_process_one_work+0x10/0x10 [ 485.071587][T24559] ? assign_work+0x1a0/0x250 [ 485.071602][T24559] worker_thread+0x6c8/0xf10 [ 485.071612][T24559] ? __kthread_parkme+0x19e/0x250 [ 485.071625][T24559] ? __pfx_worker_thread+0x10/0x10 [ 485.071634][T24559] kthread+0x3c5/0x780 [ 485.071648][T24559] ? __pfx_kthread+0x10/0x10 [ 485.071661][T24559] ? ret_from_fork+0x25/0x6f0 [ 485.071676][T24559] ? rcu_is_watching+0x12/0xc0 [ 485.071686][T24559] ? rcu_is_watching+0x12/0xc0 [ 485.071696][T24559] ? __pfx_kthread+0x10/0x10 [ 485.071711][T24559] ret_from_fork+0x5d4/0x6f0 [ 485.071725][T24559] ? __pfx_kthread+0x10/0x10 [ 485.071739][T24559] ret_from_fork_asm+0x1a/0x30 [ 485.071756][T24559] [ 485.071768][T24559] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 485.074771][ T9] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 485.075110][T24559] Bluetooth: hci3: failed to register connection device [ 485.086722][ T1335] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 485.182646][ T1335] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 485.185470][ T1335] usb 9-1: Product: syz [ 485.187001][ T1335] usb 9-1: Manufacturer: syz [ 485.188575][ T1335] usb 9-1: SerialNumber: syz [ 485.276481][ T9] usb 8-1: config index 0 descriptor too short (expected 45863, got 27) [ 485.279936][ T9] usb 8-1: config 117 has too many interfaces: 71, using maximum allowed: 32 [ 485.283554][ T9] usb 8-1: config 117 has an invalid descriptor of length 126, skipping remainder of the config [ 485.287897][ T9] usb 8-1: config 117 has 0 interfaces, different from the descriptor's value: 71 [ 485.293803][ T9] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 485.297558][ T9] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 485.300855][ T9] usb 8-1: Product: syz [ 485.302653][ T9] usb 8-1: Manufacturer: syz [ 485.304591][ T9] usb 8-1: SerialNumber: syz [ 486.746878][T25021] vlan2: entered promiscuous mode [ 486.748496][T25021] bridge0: entered promiscuous mode [ 486.807455][T25022] fuse: Unknown parameter 'ÿÿ0x0000000000000006' [ 487.555633][ T1335] usb 9-1: USB disconnect, device number 3 [ 487.802672][T25032] overlayfs: failed lookup in lower (newroot/84, name='bus', err=-40): overlapping layers [ 487.843405][ T9] usb 8-1: USB disconnect, device number 43 [ 488.074808][ T40] audit: type=1326 audit(1755714082.724:28119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25039 comm="syz.3.2681" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 488.083217][ T40] audit: type=1326 audit(1755714082.724:28120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25039 comm="syz.3.2681" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 488.092438][ T40] audit: type=1326 audit(1755714082.724:28121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25039 comm="syz.3.2681" exe="/syz-executor" sig=0 arch=40000003 syscall=393 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 488.101337][ T40] audit: type=1326 audit(1755714082.724:28122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25039 comm="syz.3.2681" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 488.108215][ T40] audit: type=1326 audit(1755714082.724:28123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25039 comm="syz.3.2681" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 488.115307][T25045] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2680'. [ 488.120714][ T40] audit: type=1326 audit(1755714082.724:28124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25039 comm="syz.3.2681" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 488.129125][ T40] audit: type=1326 audit(1755714082.724:28125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25039 comm="syz.3.2681" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 488.139980][ T40] audit: type=1326 audit(1755714082.724:28126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25039 comm="syz.3.2681" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 488.149225][ T40] audit: type=1326 audit(1755714082.724:28127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25039 comm="syz.3.2681" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 488.828891][T25059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.833724][T25059] bond0: (slave rose0): Enslaving as an active interface with an up link [ 488.882442][T25070] netlink: 208 bytes leftover after parsing attributes in process `syz.3.2688'. [ 489.052988][T25074] vxfs: WRONG superblock magic 00000000 at 1 [ 489.055634][T25074] vxfs: WRONG superblock magic 00000000 at 8 [ 489.057462][T25074] vxfs: can't find superblock. [ 489.165134][ T34] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 489.306804][T25087] kernel read not supported for file /bus (pid: 25087 comm: syz.4.2690) [ 489.309898][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 489.309911][ T40] audit: type=1800 audit(1755714083.964:28161): pid=25087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2690" name="bus" dev="mqueue" ino=61281 res=0 errno=0 [ 489.316272][ T34] usb 8-1: config index 0 descriptor too short (expected 45863, got 27) [ 489.322077][ T34] usb 8-1: config 117 has too many interfaces: 71, using maximum allowed: 32 [ 489.324997][ T34] usb 8-1: config 117 has an invalid descriptor of length 126, skipping remainder of the config [ 489.328223][ T34] usb 8-1: config 117 has 0 interfaces, different from the descriptor's value: 71 [ 489.332711][ T34] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 489.335802][ T34] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 489.338562][ T34] usb 8-1: Product: syz [ 489.339914][ T34] usb 8-1: Manufacturer: syz [ 489.341367][ T34] usb 8-1: SerialNumber: syz [ 489.624357][T25093] netlink: 'syz.4.2692': attribute type 3 has an invalid length. [ 489.627695][T25093] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2692'. [ 489.921006][ T5973] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 489.921117][ T5973] Bluetooth: hci3: adv larger than maximum supported [ 489.923552][ T5973] Bluetooth: hci3: Malformed LE Event: 0x0d [ 490.108912][T25103] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2694'. [ 490.608024][T25125] ieee802154 phy1 wpan1: encryption failed: -90 [ 490.610497][T25126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2699'. [ 490.657077][T25128] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 490.668359][T25128] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 490.671574][T25128] overlayfs: missing 'lowerdir' [ 490.676892][T25128] overlayfs: failed lookup in lower (newroot/35, name='bus', err=-40): overlapping layers [ 490.819317][T25136] hub 6-0:1.0: USB hub found [ 490.821049][T25136] hub 6-0:1.0: 1 port detected [ 491.758983][T25144] netlink: 'syz.2.2703': attribute type 10 has an invalid length. [ 491.764249][T25144] batman_adv: batadv0: Adding interface: team0 [ 491.766343][T25144] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.774340][T25144] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 491.787003][T25144] netlink: 'syz.2.2703': attribute type 10 has an invalid length. [ 491.789473][T25144] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2703'. [ 491.792510][T25144] team0: entered promiscuous mode [ 491.794067][T25144] team_slave_0: entered promiscuous mode [ 491.796334][T25144] team_slave_1: entered promiscuous mode [ 491.800146][T25144] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.802713][T25144] batman_adv: batadv0: Interface activated: team0 [ 491.807308][T25144] batman_adv: batadv0: Interface deactivated: team0 [ 491.814622][T25144] batman_adv: batadv0: Removing interface: team0 [ 491.825472][T25144] bridge0: port 3(team0) entered blocking state [ 491.827656][T25144] bridge0: port 3(team0) entered disabled state [ 491.833401][T25144] team0: entered allmulticast mode [ 491.835450][T25144] team_slave_0: entered allmulticast mode [ 491.844618][T25144] team_slave_1: entered allmulticast mode [ 491.936051][ T34] usb 8-1: USB disconnect, device number 44 [ 492.649677][T25152] kernel read not supported for file /bus (pid: 25152 comm: syz.2.2706) [ 492.654413][ T40] audit: type=1800 audit(1755714087.304:28162): pid=25152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2706" name="bus" dev="mqueue" ino=63905 res=0 errno=0 [ 492.791000][T25156] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2708'. [ 492.967340][T25164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2712'. [ 493.171755][T25172] overlayfs: failed to clone upperpath [ 493.960114][T25193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2720'. [ 494.026995][T25202] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2724'. [ 494.123294][T25205] random: crng reseeded on system resumption [ 494.265337][ T40] audit: type=1326 audit(1755714088.894:28163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25199 comm="syz.1.2723" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 494.419362][ T40] audit: type=1326 audit(1755714088.894:28164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25199 comm="syz.1.2723" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 494.451270][ T40] audit: type=1326 audit(1755714088.894:28165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25199 comm="syz.1.2723" exe="/syz-executor" sig=0 arch=40000003 syscall=393 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 494.478147][ T40] audit: type=1326 audit(1755714088.894:28166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25199 comm="syz.1.2723" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 494.497157][ T40] audit: type=1326 audit(1755714088.894:28167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25199 comm="syz.1.2723" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 494.515000][ T40] audit: type=1326 audit(1755714088.894:28168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25199 comm="syz.1.2723" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 494.523614][ T40] audit: type=1326 audit(1755714088.894:28169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25199 comm="syz.1.2723" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 494.532931][ T40] audit: type=1326 audit(1755714088.894:28170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25199 comm="syz.1.2723" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 494.542708][ T40] audit: type=1326 audit(1755714088.904:28171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25199 comm="syz.1.2723" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 494.551683][ T40] audit: type=1326 audit(1755714088.904:28172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25199 comm="syz.1.2723" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 494.559151][ T40] audit: type=1326 audit(1755714088.904:28173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25199 comm="syz.1.2723" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 495.622403][T25229] netlink: 'syz.1.2734': attribute type 10 has an invalid length. [ 495.628021][T25229] netlink: 'syz.1.2734': attribute type 10 has an invalid length. [ 495.630671][T25229] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2734'. [ 498.028213][T25283] netlink: 'syz.2.2751': attribute type 14 has an invalid length. [ 498.333976][T25286] netlink: 'syz.3.2752': attribute type 3 has an invalid length. [ 498.337387][T25286] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2752'. [ 498.402664][T25288] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 498.453944][T25291] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 498.485159][T25288] /dev/sr0: Can't open blockdev [ 498.595220][T25291] /dev/sr0: Can't open blockdev [ 499.893191][T25323] netlink: 'syz.4.2762': attribute type 3 has an invalid length. [ 499.896278][T25323] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2762'. [ 500.408135][T25330] netlink: 'syz.2.2764': attribute type 3 has an invalid length. [ 500.409555][T25332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2765'. [ 500.413485][T25330] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2764'. [ 501.009652][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.054872][T25355] 9pnet_fd: Insufficient options for proto=fd [ 501.075123][T25355] ip_vti0: left promiscuous mode [ 501.076765][T25355] ip_vti0: left allmulticast mode [ 501.090882][T25355] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.093237][T25355] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.144989][T25355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.151346][T25355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.226231][T25355] vlan2: left promiscuous mode [ 501.227801][T25355] bridge0: left promiscuous mode [ 501.230954][T25357] netdevsim netdevsim2: Direct firmware load for @ failed with error -2 [ 501.233691][T25357] netdevsim netdevsim2: Falling back to sysfs fallback for: @ [ 501.255305][ T6984] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.258357][ T6984] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.261435][ T6973] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.265147][ T6973] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.310162][T25361] netlink: 'syz.3.2777': attribute type 3 has an invalid length. [ 501.312660][T25361] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2777'. [ 501.544641][ T6046] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 501.696143][ T6046] usb 9-1: config index 0 descriptor too short (expected 45863, got 27) [ 501.698928][ T6046] usb 9-1: config 117 has too many interfaces: 71, using maximum allowed: 32 [ 501.701807][ T6046] usb 9-1: config 117 has an invalid descriptor of length 126, skipping remainder of the config [ 501.705861][ T6046] usb 9-1: config 117 has 0 interfaces, different from the descriptor's value: 71 [ 501.710531][ T6046] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 501.713688][ T6046] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 501.717006][ T6046] usb 9-1: Product: syz [ 501.718489][ T6046] usb 9-1: Manufacturer: syz [ 501.720064][ T6046] usb 9-1: SerialNumber: syz [ 502.424728][T25392] netlink: 'syz.3.2787': attribute type 3 has an invalid length. [ 502.427344][T25392] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2787'. [ 503.337137][T25424] netlink: 'syz.1.2799': attribute type 3 has an invalid length. [ 503.339669][T25424] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2799'. [ 503.541280][T25429] overlayfs: failed to clone upperpath [ 504.326340][ T6046] usb 9-1: USB disconnect, device number 4 [ 504.381358][T25450] overlayfs: failed to clone upperpath [ 504.411868][T25454] netlink: 320 bytes leftover after parsing attributes in process `syz.1.2808'. [ 504.424399][T25454] : entered promiscuous mode [ 506.046458][T24191] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 507.478603][T25525] netlink: 'syz.3.2823': attribute type 3 has an invalid length. [ 507.481969][T25525] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2823'. [ 507.507644][T25527] netlink: 'syz.3.2824': attribute type 3 has an invalid length. [ 507.514460][T25527] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2824'. [ 513.893801][T25565] bridge_slave_1: left allmulticast mode [ 513.895682][T25565] bridge_slave_1: left promiscuous mode [ 513.897770][T25565] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.901560][T25565] bridge_slave_0: left allmulticast mode [ 513.903857][T25565] bridge_slave_0: left promiscuous mode [ 513.906045][T25565] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.406873][T25585] overlayfs: overlapping lowerdir path [ 515.906289][T25618] overlayfs: failed to clone lowerpath [ 516.727839][T25635] overlayfs: failed to clone lowerpath [ 516.732355][T25635] overlayfs: failed to clone upperpath [ 517.415809][T25647] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 517.891188][T25668] kernel profiling enabled (shift: 5) [ 517.990616][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 517.990630][ T40] audit: type=1326 audit(1755714112.645:28203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25663 comm="syz.3.2866" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 518.005567][ T40] audit: type=1326 audit(1755714112.645:28204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25663 comm="syz.3.2866" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 518.014464][ T40] audit: type=1326 audit(1755714112.645:28205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25663 comm="syz.3.2866" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 518.023725][ T40] audit: type=1326 audit(1755714112.645:28206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25663 comm="syz.3.2866" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 518.032647][ T40] audit: type=1326 audit(1755714112.645:28207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25663 comm="syz.3.2866" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 518.041824][ T40] audit: type=1326 audit(1755714112.645:28208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25663 comm="syz.3.2866" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 518.052140][ T40] audit: type=1326 audit(1755714112.645:28209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25663 comm="syz.3.2866" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 518.060460][ T40] audit: type=1326 audit(1755714112.645:28210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25663 comm="syz.3.2866" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 518.068629][ T40] audit: type=1326 audit(1755714112.645:28211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25663 comm="syz.3.2866" exe="/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 518.077436][ T40] audit: type=1326 audit(1755714112.645:28212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25663 comm="syz.3.2866" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 518.181531][T25677] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 518.185607][T25677] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 518.794480][T25686] 9pnet_fd: Insufficient options for proto=fd [ 519.078408][T25699] overlay: Unknown parameter '/' [ 519.340143][T25708] overlayfs: failed to clone upperpath [ 520.933031][T23709] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 521.093119][T23709] usb 9-1: Using ep0 maxpacket: 16 [ 521.096240][T23709] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 521.099097][T23709] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 521.102325][T23709] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 521.107065][T23709] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 521.109948][T23709] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.112526][T23709] usb 9-1: Product: syz [ 521.114415][T23709] usb 9-1: Manufacturer: syz [ 521.116459][T23709] usb 9-1: SerialNumber: syz [ 521.326448][T23709] usb 9-1: 0:2 : does not exist [ 521.346446][T23709] usb 9-1: USB disconnect, device number 5 [ 521.362772][T25757] udevd[25757]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 521.894464][T25768] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2896'. [ 522.718746][T25810] overlay: Unknown parameter '/' [ 525.285547][ T40] kauditd_printk_skb: 67 callbacks suppressed [ 525.285558][ T40] audit: type=1800 audit(1755714119.946:28280): pid=25867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.2924" name="/" dev="sockfs" ino=65131 res=0 errno=0 [ 525.318887][T25873] bridge0: port 3(team0) entered blocking state [ 525.321577][T25873] bridge0: port 3(team0) entered listening state [ 525.323815][T25873] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.326711][T25873] bridge0: port 2(bridge_slave_1) entered listening state [ 525.329106][T25873] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.331506][T25873] bridge0: port 1(bridge_slave_0) entered listening state [ 525.338171][T25873] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 527.163146][ T6046] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 527.312746][ T6046] usb 9-1: Using ep0 maxpacket: 32 [ 527.316239][ T6046] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 527.319501][ T6046] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 527.322936][ T6046] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 527.325918][ T6046] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 527.330071][ T6046] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 527.334435][ T6046] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 527.338772][ T6046] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 527.341904][ T6046] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.346311][ T6046] usb 9-1: config 0 descriptor?? [ 527.555765][ T6046] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 527.559843][ T6046] usb 9-1: USB disconnect, device number 6 [ 527.563197][ T6046] usblp0: removed [ 527.632678][ T61] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 527.762645][ T61] usb 7-1: device descriptor read/64, error -71 [ 528.012615][ T839] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 528.015432][ T61] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 528.162895][ T61] usb 7-1: device descriptor read/64, error -71 [ 528.182545][ T839] usb 9-1: Using ep0 maxpacket: 32 [ 528.185646][ T839] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 528.188391][ T839] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 528.191296][ T839] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 528.194352][ T839] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 528.197423][ T839] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 528.200652][ T839] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 528.205004][ T839] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 528.208037][ T839] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.212383][ T839] usb 9-1: config 0 descriptor?? [ 528.272759][ T61] usb usb7-port1: attempt power cycle [ 528.425019][ T839] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 528.612548][ T61] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 528.632955][ T61] usb 7-1: device descriptor read/8, error -71 [ 528.729599][ C0] usblp0: nonzero read bulk status received: -71 [ 528.729986][ T839] usb 9-1: USB disconnect, device number 7 [ 528.732229][T25937] usblp0: error -71 reading from printer [ 528.736054][T25912] usblp0: error -19 reading from printer [ 528.807829][T25940] overlayfs: failed to resolve './file0': -2 [ 528.872542][ T61] usb 7-1: new full-speed USB device number 37 using dummy_hcd [ 528.893111][ T61] usb 7-1: device descriptor read/8, error -71 [ 528.932652][T25911] usblp0: removed [ 529.002941][ T61] usb usb7-port1: unable to enumerate USB device [ 529.929806][T25962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2954'. [ 530.594801][T25991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2959'. [ 532.502817][T26036] syzkaller0: entered promiscuous mode [ 532.505083][T26036] syzkaller0: entered allmulticast mode [ 533.022830][T24559] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 533.025435][T24559] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 533.027951][T24559] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 533.030792][T24559] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 533.033472][T24559] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 533.085185][T26047] chnl_net:caif_netlink_parms(): no params data found [ 533.118756][T26047] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.121819][T26047] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.125769][T26047] bridge_slave_0: entered allmulticast mode [ 533.128595][T26047] bridge_slave_0: entered promiscuous mode [ 533.132464][T26047] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.134842][T26047] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.137267][T26047] bridge_slave_1: entered allmulticast mode [ 533.139580][T26047] bridge_slave_1: entered promiscuous mode [ 533.161394][T26047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.169340][T26047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.225797][T26047] team0: Port device team_slave_0 added [ 533.233694][T26047] team0: Port device team_slave_1 added [ 533.266194][T26047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.269012][T26047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.279585][T26047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.284762][T26047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.287045][T26047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.295264][T26047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.317321][T26047] hsr_slave_0: entered promiscuous mode [ 533.319571][T26047] hsr_slave_1: entered promiscuous mode [ 533.321553][T26047] debugfs: 'hsr0' already exists in 'hsr' [ 533.323452][T26047] Cannot create hsr debugfs directory [ 533.369275][T26047] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.427803][T26047] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.467203][T26047] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.527205][T26047] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.597315][T26047] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 533.601497][T26047] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 533.605708][T26047] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 533.609053][T26047] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 533.619478][T26047] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.622374][T26047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.625340][T26047] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.628130][T26047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.646411][T26047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.653546][T25104] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.656047][T25104] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.661590][T26047] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.666501][ T6984] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.668808][ T6984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.674122][ T6984] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.676474][ T6984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.747105][T26047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.760138][T26047] veth0_vlan: entered promiscuous mode [ 533.763817][T26047] veth1_vlan: entered promiscuous mode [ 533.773398][T26047] veth0_macvtap: entered promiscuous mode [ 533.776584][T26047] veth1_macvtap: entered promiscuous mode [ 533.783087][T26047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.787631][T26047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.791940][ T6985] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.795278][ T6985] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.798919][ T6985] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.801638][ T6985] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.819088][ T6985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.824912][ T6985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.831782][ T6972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.834621][ T6972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.704553][T26095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2986'. [ 534.709248][T26095] veth1_to_hsr: entered promiscuous mode [ 534.711052][T26095] macsec1: entered promiscuous mode [ 534.713457][T26095] macsec1: entered allmulticast mode [ 534.715282][T26095] veth1_to_hsr: entered allmulticast mode [ 534.718841][T26095] veth1_to_hsr: left allmulticast mode [ 534.720606][T26095] veth1_to_hsr: left promiscuous mode [ 535.082272][T24559] Bluetooth: hci2: command tx timeout [ 535.379141][T26104] overlay: Unknown parameter '/' [ 536.322161][ T6056] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 536.493387][ T6056] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.496957][ T6056] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.500048][ T6056] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 536.503019][ T6056] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.506665][ T6056] usb 9-1: config 0 descriptor?? [ 536.688101][ T6980] Bluetooth: hci3: Frame reassembly failed (-84) [ 537.113662][ T6056] usb 9-1: language id specifier not provided by device, defaulting to English [ 537.172168][ T5973] Bluetooth: hci2: command tx timeout [ 537.315535][ T6056] uclogic 0003:256C:006D.000A: failed retrieving Huion firmware version: -71 [ 537.318335][ T6056] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 537.320803][ T6056] uclogic 0003:256C:006D.000A: probe with driver uclogic failed with error -71 [ 537.324960][ T6056] usb 9-1: USB disconnect, device number 8 [ 538.762726][T24559] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 539.133745][T26204] overlay: Unknown parameter '/' [ 539.136739][T26204] overlayfs: failed to clone upperpath [ 539.229063][T26206] veth0_vlan: entered allmulticast mode [ 539.242390][ T5973] Bluetooth: hci2: command tx timeout [ 539.786649][T26208] vlan3: entered allmulticast mode [ 539.859723][T26210] overlayfs: failed to clone upperpath [ 540.149761][T26227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3029'. [ 540.946751][T26254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3039'. [ 541.331916][ T5973] Bluetooth: hci2: command tx timeout [ 542.182478][ T40] audit: type=1800 audit(1755714136.847:28281): pid=26279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.3047" name="/" dev="sockfs" ino=67545 res=0 errno=0 [ 543.302585][T26308] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3055'. [ 543.491782][ T9] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 543.652947][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.656507][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.659748][ T9] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 543.663092][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.666439][ T9] usb 8-1: config 0 descriptor?? [ 544.476021][ T9] uclogic 0003:256C:006D.000B: failed retrieving Huion firmware version: -71 [ 544.479287][ T9] uclogic 0003:256C:006D.000B: failed probing parameters: -71 [ 544.481912][ T9] uclogic 0003:256C:006D.000B: probe with driver uclogic failed with error -71 [ 544.487460][ T9] usb 8-1: USB disconnect, device number 45 [ 547.124313][T26398] overlayfs: failed to clone upperpath [ 548.353194][T26429] tipc: Enabling of bearer rejected, failed to enable media [ 549.403723][T26463] tipc: Started in network mode [ 549.405691][T26463] tipc: Node identity 5e78cf0fb4b3, cluster identity 4711 [ 549.408783][T26463] tipc: Enabled bearer , priority 0 [ 549.730365][T26474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3108'. [ 549.740511][T26474] macsec0: entered promiscuous mode [ 549.742449][T26474] veth1_to_hsr: entered promiscuous mode [ 549.744514][T26474] macsec0: entered allmulticast mode [ 549.746415][T26474] veth1_to_hsr: entered allmulticast mode [ 549.750251][T26474] veth1_to_hsr: left allmulticast mode [ 549.752753][T26474] veth1_to_hsr: left promiscuous mode [ 550.521942][ T6046] tipc: Node number set to 3939225359 [ 550.562141][T26502] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 550.564270][T26502] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 550.566958][T26502] vhci_hcd vhci_hcd.0: Device attached [ 550.586066][T26502] netdevsim netdevsim2: Direct firmware load for @ failed with error -2 [ 550.589066][T26502] netdevsim netdevsim2: Falling back to sysfs fallback for: @ [ 550.841854][ T6056] usb 42-1: SetAddress Request (6) to port 0 [ 550.843792][ T6056] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 551.322198][T26503] vhci_hcd: connection reset by peer [ 551.324562][ T6978] vhci_hcd: stop threads [ 551.325946][ T6978] vhci_hcd: release socket [ 551.327900][ T6978] vhci_hcd: disconnect device [ 551.541670][ T6046] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 551.691576][ T6046] usb 8-1: Using ep0 maxpacket: 16 [ 551.698603][ T6046] usb 8-1: config 33 has 0 interfaces, different from the descriptor's value: 9 [ 551.702751][ T6046] usb 8-1: New USB device found, idVendor=1fd2, idProduct=6006, bcdDevice= 0.00 [ 551.705726][ T6046] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.915528][ T839] usb 8-1: USB disconnect, device number 46 [ 553.601734][T26550] netdevsim netdevsim1: Direct firmware load for @ failed with error -2 [ 553.604441][T26550] netdevsim netdevsim1: Falling back to sysfs fallback for: @ [ 554.198203][T26559] netlink: 'syz.2.3136': attribute type 3 has an invalid length. [ 554.201949][T26559] netlink: 199644 bytes leftover after parsing attributes in process `syz.2.3136'. [ 555.073943][T26584] fuse: Bad value for 'fd' [ 555.251108][ T5973] Bluetooth: hci4: Opcode 0x206a failed: -110 [ 555.253121][ T5973] Bluetooth: hci4: command 0x206a tx timeout [ 555.401047][ C2] bridge0: port 1(bridge_slave_0) entered learning state [ 555.403367][ C2] bridge0: port 2(bridge_slave_1) entered learning state [ 555.405638][ C2] bridge0: port 3(team0) entered learning state [ 555.840151][T26602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3152'. [ 555.881122][ T6056] usb 42-1: device descriptor read/8, error -110 [ 556.059955][T26604] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 556.062541][T26604] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 556.066298][T26604] vhci_hcd vhci_hcd.0: Device attached [ 556.090511][T26604] netdevsim netdevsim4: Direct firmware load for @ failed with error -2 [ 556.094886][T26604] netdevsim netdevsim4: Falling back to sysfs fallback for: @ [ 556.343435][ T6056] usb usb42-port1: attempt power cycle [ 556.391024][ T61] usb 46-1: SetAddress Request (2) to port 0 [ 556.393031][ T61] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 556.450298][T26637] gretap0: entered allmulticast mode [ 556.682819][T26605] vhci_hcd: connection reset by peer [ 556.685719][ T6977] vhci_hcd: stop threads [ 556.687550][ T6977] vhci_hcd: release socket [ 556.689485][ T6977] vhci_hcd: disconnect device [ 556.831581][T24721] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 556.901513][ T6056] usb usb42-port1: unable to enumerate USB device [ 556.981409][T24721] usb 7-1: Using ep0 maxpacket: 16 [ 556.986221][T24721] usb 7-1: config 33 has 0 interfaces, different from the descriptor's value: 9 [ 557.024431][T24721] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6006, bcdDevice= 0.00 [ 557.028752][T24721] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.308846][T26647] netlink: 'syz.3.3165': attribute type 4 has an invalid length. [ 557.381874][T24191] usb 7-1: USB disconnect, device number 38 [ 557.942233][T26662] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 558.182767][T26668] netlink: 'syz.1.3172': attribute type 1 has an invalid length. [ 558.271831][ T1120] sr 2:0:0:0: [sr0] tag#16 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 558.276522][ T1120] sr 2:0:0:0: [sr0] tag#16 Sense Key : Illegal Request [current] [ 558.279766][ T1120] sr 2:0:0:0: [sr0] tag#16 Add. Sense: Invalid command operation code [ 558.284001][ T1120] sr 2:0:0:0: [sr0] tag#16 CDB: Write(10) 2a 00 00 00 00 00 00 00 04 00 [ 558.286994][ T1120] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 2 prio class 1 [ 558.290208][ T1120] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 558.295229][T26671] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3172'. [ 558.298685][ T1120] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 559.441034][T24721] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 559.603874][T24721] usb 7-1: config index 0 descriptor too short (expected 45863, got 27) [ 559.606823][T24721] usb 7-1: config 117 has too many interfaces: 71, using maximum allowed: 32 [ 559.609802][T24721] usb 7-1: config 117 has an invalid descriptor of length 126, skipping remainder of the config [ 559.615949][T24721] usb 7-1: config 117 has 0 interfaces, different from the descriptor's value: 71 [ 559.621392][T24721] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 559.624417][T24721] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 559.627815][T24721] usb 7-1: Product: syz [ 559.629647][T24721] usb 7-1: Manufacturer: syz [ 559.632020][T24721] usb 7-1: SerialNumber: syz [ 560.594007][T26711] overlayfs: failed to clone upperpath [ 561.480854][ T61] usb 46-1: device descriptor read/8, error -110 [ 561.688686][T26738] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3194'. [ 561.691904][T26738] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3194'. [ 561.862120][ T9] libceph: connect (1)[c::]:6789 error -101 [ 561.864183][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 561.891089][ T61] usb usb46-port1: attempt power cycle [ 562.121005][ T9] libceph: connect (1)[c::]:6789 error -101 [ 562.123689][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 562.215468][T24721] usb 7-1: USB disconnect, device number 39 [ 562.333745][T26772] binder: 26770:26772 ioctl c0306201 80000540 returned -22 [ 562.442150][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.501734][T26778] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3204'. [ 562.506429][T26778] batadv1: entered allmulticast mode [ 562.521122][ T61] usb usb46-port1: unable to enumerate USB device [ 562.553812][T26782] input: syz1 as /devices/virtual/input/input44 [ 562.640832][ T9] libceph: connect (1)[c::]:6789 error -101 [ 562.643351][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 562.673668][T26746] ceph: No mds server is up or the cluster is laggy [ 563.298981][T26787] mkiss: ax0: crc mode is auto. [ 564.586350][T26827] tipc: Enabling of bearer rejected, failed to enable media [ 564.632079][T26829] FAULT_INJECTION: forcing a failure. [ 564.632079][T26829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.636693][T26829] CPU: 0 UID: 0 PID: 26829 Comm: syz.4.3220 Not tainted syzkaller #0 PREEMPT(full) [ 564.636710][T26829] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 564.636717][T26829] Call Trace: [ 564.636722][T26829] [ 564.636726][T26829] dump_stack_lvl+0x16c/0x1f0 [ 564.636743][T26829] should_fail_ex+0x512/0x640 [ 564.636759][T26829] _copy_to_user+0x32/0xd0 [ 564.636773][T26829] __copy_siginfo_to_user32+0x96/0xf0 [ 564.636788][T26829] ? __pfx___copy_siginfo_to_user32+0x10/0x10 [ 564.636804][T26829] ? _raw_spin_unlock_irq+0x29/0x50 [ 564.636816][T26829] ? siginfo_layout+0x177/0x290 [ 564.636827][T26829] ia32_setup_rt_frame+0x6cd/0xb30 [ 564.636845][T26829] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 564.636863][T26829] arch_do_signal_or_restart+0x480/0x790 [ 564.636877][T26829] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 564.636890][T26829] ? user_path_at+0x44/0x60 [ 564.636903][T26829] ? ksys_write+0x1ac/0x250 [ 564.636914][T26829] ? __pfx_ksys_write+0x10/0x10 [ 564.636925][T26829] ? __do_compat_sys_rt_sigreturn+0x14d/0x1f0 [ 564.636943][T26829] exit_to_user_mode_loop+0x84/0x110 [ 564.636959][T26829] __do_fast_syscall_32+0x2ac/0x3a0 [ 564.636974][T26829] do_fast_syscall_32+0x32/0x80 [ 564.636987][T26829] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 564.637001][T26829] RIP: 0023:0xf7f07579 [ 564.637009][T26829] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 564.637020][T26829] RSP: 002b:00000000f542655c EFLAGS: 00000296 ORIG_RAX: 0000000000000133 [ 564.637052][T26829] RAX: fffffffffffffff2 RBX: 00000000ffffffff RCX: 0000000000000000 [ 564.637061][T26829] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 564.637067][T26829] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 564.637073][T26829] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 564.637079][T26829] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 564.637088][T26829] [ 565.900709][T24191] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 566.052168][T24191] usb 9-1: config index 0 descriptor too short (expected 45863, got 27) [ 566.055665][T24191] usb 9-1: config 117 has too many interfaces: 71, using maximum allowed: 32 [ 566.058596][T24191] usb 9-1: config 117 has an invalid descriptor of length 126, skipping remainder of the config [ 566.062329][T24191] usb 9-1: config 117 has 0 interfaces, different from the descriptor's value: 71 [ 566.066711][T24191] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 566.069668][T24191] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 566.072899][T24191] usb 9-1: Product: syz [ 566.075123][T24191] usb 9-1: Manufacturer: syz [ 566.077075][T24191] usb 9-1: SerialNumber: syz [ 566.086166][T26882] overlayfs: failed to clone upperpath [ 566.939526][T26907] netlink: 'syz.2.3248': attribute type 3 has an invalid length. [ 566.942277][T26907] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3248'. [ 567.197049][T26928] overlayfs: failed to clone upperpath [ 567.407530][T26936] netlink: 'syz.2.3254': attribute type 3 has an invalid length. [ 567.411690][T26936] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3254'. [ 568.030756][T26956] overlayfs: failed to clone upperpath [ 568.364673][T26958] tipc: Enabling of bearer rejected, failed to enable media [ 568.450015][T26966] netlink: 'syz.3.3264': attribute type 3 has an invalid length. [ 568.454569][T26966] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3264'. [ 568.670361][T24191] usb 9-1: USB disconnect, device number 9 [ 569.075412][T26990] tipc: Enabling of bearer rejected, already enabled [ 569.134839][T26997] netlink: 'syz.1.3274': attribute type 3 has an invalid length. [ 569.137669][T26997] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3274'. [ 569.404170][T27006] overlayfs: failed to clone upperpath [ 569.640299][ T5973] Bluetooth: hci4: command 0x206a tx timeout [ 569.760347][ T59] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 569.911937][ T59] usb 7-1: config index 0 descriptor too short (expected 45863, got 27) [ 569.911954][ T59] usb 7-1: config 117 has too many interfaces: 71, using maximum allowed: 32 [ 569.911964][ T59] usb 7-1: config 117 has an invalid descriptor of length 126, skipping remainder of the config [ 569.911974][ T59] usb 7-1: config 117 has 0 interfaces, different from the descriptor's value: 71 [ 569.913402][ T59] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 569.913415][ T59] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 569.913425][ T59] usb 7-1: Product: syz [ 569.913433][ T59] usb 7-1: Manufacturer: syz [ 569.913440][ T59] usb 7-1: SerialNumber: syz [ 570.112723][T27018] tipc: Enabling of bearer rejected, already enabled [ 570.184567][T27027] netlink: 'syz.1.3283': attribute type 3 has an invalid length. [ 570.184581][T27027] netlink: 199556 bytes leftover after parsing attributes in process `syz.1.3283'. [ 570.384372][T27033] overlayfs: failed to clone upperpath [ 571.286489][T27042] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3286'. [ 571.572031][T27058] netlink: 'syz.4.3291': attribute type 1 has an invalid length. [ 571.579585][T27058] 8021q: adding VLAN 0 to HW filter on device bond1 [ 571.589209][T27058] bond1: (slave geneve2): making interface the new active one [ 571.592635][T27058] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 571.602908][T27054] tipc: Enabling of bearer rejected, already enabled [ 571.616445][T27061] netlink: 'syz.4.3292': attribute type 3 has an invalid length. [ 571.618893][T27061] netlink: 199556 bytes leftover after parsing attributes in process `syz.4.3292'. [ 571.635459][T27063] netlink: 'syz.1.3293': attribute type 3 has an invalid length. [ 571.638486][T27063] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3293'. [ 572.189810][T27085] program syz.3.3300 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 572.647708][T27094] nbd: device at index 4 is going down [ 572.658887][ T59] usb 7-1: USB disconnect, device number 40 [ 572.691454][T27096] netlink: 'syz.2.3303': attribute type 3 has an invalid length. [ 572.694132][T27096] netlink: 199556 bytes leftover after parsing attributes in process `syz.2.3303'. [ 572.716567][T27098] netlink: 'syz.2.3304': attribute type 3 has an invalid length. [ 572.719850][T27098] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3304'. [ 572.897921][T27107] infiniband syz1: set down [ 572.899557][T27107] infiniband syz1: added syz_tun [ 572.909013][T27107] RDS/IB: syz1: added [ 572.910482][T27107] smc: adding ib device syz1 with port count 1 [ 572.912579][T27107] smc: ib device syz1 port 1 has pnetid [ 573.150065][ T61] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 573.312124][ T61] usb 7-1: config index 0 descriptor too short (expected 45863, got 27) [ 573.314756][ T61] usb 7-1: config 117 has too many interfaces: 71, using maximum allowed: 32 [ 573.317473][ T61] usb 7-1: config 117 has an invalid descriptor of length 126, skipping remainder of the config [ 573.320783][ T61] usb 7-1: config 117 has 0 interfaces, different from the descriptor's value: 71 [ 573.325573][ T61] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 573.328379][ T61] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 573.332387][ T61] usb 7-1: Product: syz [ 573.334420][ T61] usb 7-1: Manufacturer: syz [ 573.336219][ T61] usb 7-1: SerialNumber: syz [ 573.389100][T27123] netlink: 'syz.1.3313': attribute type 3 has an invalid length. [ 573.392545][T27123] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3313'. [ 573.412852][T27125] netlink: 'syz.1.3314': attribute type 3 has an invalid length. [ 573.415818][T27125] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3314'. [ 573.453562][T27094] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 574.344421][T27155] wlan1 speed is unknown, defaulting to 1000 [ 574.349209][T27155] wlan1 speed is unknown, defaulting to 1000 [ 574.358770][T27155] wlan1 speed is unknown, defaulting to 1000 [ 574.374066][T27155] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 574.389250][T27157] netlink: 'syz.4.3322': attribute type 3 has an invalid length. [ 574.391905][T27157] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3322'. [ 574.401880][T27155] wlan1 speed is unknown, defaulting to 1000 [ 574.411684][T27155] wlan1 speed is unknown, defaulting to 1000 [ 574.425113][T27155] wlan1 speed is unknown, defaulting to 1000 [ 574.436480][T27155] wlan1 speed is unknown, defaulting to 1000 [ 574.445208][T27155] wlan1 speed is unknown, defaulting to 1000 [ 574.451304][T27155] wlan1 speed is unknown, defaulting to 1000 [ 574.457395][T27155] wlan1 speed is unknown, defaulting to 1000 [ 574.465005][T27160] rdma_rxe: rxe_newlink: failed to add syz_tun [ 574.674026][T27160] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.722723][T27160] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.773508][T27160] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.834738][T27160] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.881891][ T6972] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.889009][ T6972] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.900260][ T6972] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.905120][ T6972] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.019065][T27163] netlink: 'syz.4.3324': attribute type 3 has an invalid length. [ 575.022778][T27163] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3324'. [ 575.245193][T27170] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3325'. [ 575.938994][ T61] usb 7-1: USB disconnect, device number 41 [ 576.072378][T27186] tipc: Enabling of bearer rejected, failed to enable media [ 576.081481][T27198] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 576.086302][T27198] netlink: 'syz.4.3330': attribute type 10 has an invalid length. [ 576.197612][T27206] batadv_slave_1: entered promiscuous mode [ 576.321027][T24559] Bluetooth: hci4: unexpected event for opcode 0x09e0 [ 576.440305][T24721] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 576.601738][T24721] usb 8-1: config index 0 descriptor too short (expected 45863, got 27) [ 576.604892][T24721] usb 8-1: config 117 has too many interfaces: 71, using maximum allowed: 32 [ 576.608253][T24721] usb 8-1: config 117 has an invalid descriptor of length 126, skipping remainder of the config [ 576.612882][T24721] usb 8-1: config 117 has 0 interfaces, different from the descriptor's value: 71 [ 576.618003][T24721] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 576.621703][T24721] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 576.624285][T24721] usb 8-1: Product: syz [ 576.625646][T24721] usb 8-1: Manufacturer: syz [ 576.627140][T24721] usb 8-1: SerialNumber: syz [ 579.212088][T27209] batadv_slave_1: left promiscuous mode [ 579.232656][T24721] usb 8-1: USB disconnect, device number 47 [ 579.245232][T27247] netlink: 'syz.1.3349': attribute type 5 has an invalid length. [ 580.033959][T27271] tipc: Enabling of bearer rejected, failed to enable media [ 580.210940][T27286] netlink: 'syz.2.3362': attribute type 3 has an invalid length. [ 580.214058][T27286] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3362'. [ 580.235517][T27289] netlink: 'syz.2.3363': attribute type 3 has an invalid length. [ 580.235859][T27288] lo speed is unknown, defaulting to 1000 [ 580.238583][T27289] netlink: 199556 bytes leftover after parsing attributes in process `syz.2.3363'. [ 580.242099][T27288] lo speed is unknown, defaulting to 1000 [ 580.246848][T27288] lo speed is unknown, defaulting to 1000 [ 580.366076][T27288] infiniband sz1: set active [ 580.367625][T27288] infiniband sz1: added lo [ 580.370144][ T6024] lo speed is unknown, defaulting to 1000 [ 580.377891][T27288] RDS/IB: sz1: added [ 580.379228][T27288] smc: adding ib device sz1 with port count 1 [ 580.381835][T27288] smc: ib device sz1 port 1 has pnetid [ 580.385057][T27288] lo speed is unknown, defaulting to 1000 [ 580.399678][ T9] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 580.422620][T27288] lo speed is unknown, defaulting to 1000 [ 580.459390][T27288] lo speed is unknown, defaulting to 1000 [ 580.491789][T27288] lo speed is unknown, defaulting to 1000 [ 580.524713][T27288] lo speed is unknown, defaulting to 1000 [ 580.558206][T27288] lo speed is unknown, defaulting to 1000 [ 580.591678][T27288] lo speed is unknown, defaulting to 1000 [ 580.621597][ T9] usb 8-1: config index 0 descriptor too short (expected 45863, got 27) [ 580.624331][ T9] usb 8-1: config 117 has too many interfaces: 71, using maximum allowed: 32 [ 580.627435][ T9] usb 8-1: config 117 has an invalid descriptor of length 126, skipping remainder of the config [ 580.630051][ T6024] lo speed is unknown, defaulting to 1000 [ 580.630975][ T9] usb 8-1: config 117 has 0 interfaces, different from the descriptor's value: 71 [ 580.644685][ T9] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 580.647771][ T9] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 580.650704][ T9] usb 8-1: Product: syz [ 580.653823][ T9] usb 8-1: Manufacturer: syz [ 580.655342][ T9] usb 8-1: SerialNumber: syz [ 580.855014][T27304] bridge0: port 3(erspan0) entered blocking state [ 580.859035][T27304] bridge0: port 3(erspan0) entered disabled state [ 580.861537][T27304] erspan0: entered allmulticast mode [ 580.890958][T27304] erspan0: entered promiscuous mode [ 581.646001][T23709] hid-generic 0005:0007:0007.000C: reserved main item tag 0xd [ 581.648432][T23709] hid-generic 0005:0007:0007.000C: unexpected long global item [ 581.651478][T23709] hid-generic 0005:0007:0007.000C: probe with driver hid-generic failed with error -22 [ 581.755462][T27311] netlink: 372 bytes leftover after parsing attributes in process `syz.2.3369'. [ 581.808043][T27318] overlayfs: failed to clone upperpath [ 581.824484][ T40] audit: type=1326 audit(1755714176.479:28282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27319 comm="syz.2.3371" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf711e598 code=0x7ffc0000 [ 581.836158][ T40] audit: type=1326 audit(1755714176.479:28283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27319 comm="syz.2.3371" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf711e598 code=0x7ffc0000 [ 581.859669][ T40] audit: type=1326 audit(1755714176.479:28284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27319 comm="syz.2.3371" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf711e598 code=0x7ffc0000 [ 581.869562][ T40] audit: type=1326 audit(1755714176.479:28285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27319 comm="syz.2.3371" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf711e598 code=0x7ffc0000 [ 581.877719][ T40] audit: type=1326 audit(1755714176.479:28286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27319 comm="syz.2.3371" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 581.885124][ T40] audit: type=1326 audit(1755714176.479:28287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27319 comm="syz.2.3371" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 581.894450][ T40] audit: type=1326 audit(1755714176.479:28288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27319 comm="syz.2.3371" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 581.902685][ T40] audit: type=1326 audit(1755714176.479:28289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27319 comm="syz.2.3371" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 581.911684][ T40] audit: type=1326 audit(1755714176.479:28290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27319 comm="syz.2.3371" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 581.919904][ T40] audit: type=1326 audit(1755714176.479:28291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27319 comm="syz.2.3371" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 582.072159][T27323] netlink: 'syz.2.3372': attribute type 3 has an invalid length. [ 582.074956][T27323] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3372'. [ 583.173664][ T9] usb 8-1: USB disconnect, device number 48 [ 583.297526][T24559] Bluetooth: hci4: unexpected event for opcode 0x200d [ 583.314622][T27335] batadv_slave_0: entered promiscuous mode [ 583.455856][T27342] netlink: 'syz.3.3380': attribute type 3 has an invalid length. [ 583.458807][T27342] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3380'. [ 583.540255][T27344] netlink: 'syz.3.3381': attribute type 3 has an invalid length. [ 583.543675][T27344] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3381'. [ 583.560760][T27331] tipc: Enabling of bearer rejected, failed to enable media [ 583.722102][T27367] netlink: 'syz.2.3392': attribute type 9 has an invalid length. [ 583.724764][T27367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3392'. [ 583.729239][T27367] hsr0: entered promiscuous mode [ 583.731442][T27367] macvlan2: entered promiscuous mode [ 583.733323][T27367] macvlan2: entered allmulticast mode [ 583.735192][T27367] hsr0: entered allmulticast mode [ 583.736931][T27367] hsr_slave_0: entered allmulticast mode [ 583.738827][T27367] hsr_slave_1: entered allmulticast mode [ 583.799434][ T9] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 583.970826][ T9] usb 8-1: config index 0 descriptor too short (expected 45863, got 27) [ 583.973850][ T9] usb 8-1: config 117 has too many interfaces: 71, using maximum allowed: 32 [ 583.977026][ T9] usb 8-1: config 117 has an invalid descriptor of length 126, skipping remainder of the config [ 583.980636][ T9] usb 8-1: config 117 has 0 interfaces, different from the descriptor's value: 71 [ 583.985066][ T9] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 583.988131][ T9] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 583.995460][ T9] usb 8-1: Product: syz [ 583.996820][ T9] usb 8-1: Manufacturer: syz [ 583.998369][ T9] usb 8-1: SerialNumber: syz [ 584.386246][T27383] overlayfs: failed to clone upperpath [ 584.617297][T27379] tipc: Enabling of bearer rejected, failed to enable media [ 584.727930][T27389] tipc: Enabling of bearer rejected, failed to enable media [ 585.479574][ C2] bridge0: port 3(team0) entered forwarding state [ 585.482365][ C2] bridge0: topology change detected, propagating [ 585.484509][ C2] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.486721][ C2] bridge0: topology change detected, propagating [ 585.488728][ C2] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.491567][ C2] bridge0: topology change detected, propagating [ 585.912069][T27413] netlink: 'syz.2.3404': attribute type 3 has an invalid length. [ 585.914677][T27413] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3404'. [ 586.081233][T27422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3408'. [ 586.089849][T27422] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.3408'. [ 586.395789][T27438] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3414'. [ 586.579671][ T9] usb 8-1: USB disconnect, device number 49 [ 586.661849][T27443] netlink: 'syz.3.3415': attribute type 3 has an invalid length. [ 586.665580][T27443] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3415'. [ 586.870490][T27447] tipc: Enabling of bearer rejected, failed to enable media [ 587.087421][T27458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 587.104204][T27458] batadv_slave_0: entered promiscuous mode [ 587.183169][T27455] overlayfs: failed to clone upperpath [ 588.045131][ T6972] team0: left allmulticast mode [ 588.047213][ T6972] team_slave_0: left allmulticast mode [ 588.050169][ T6972] team_slave_1: left allmulticast mode [ 588.052177][ T6972] bridge0: port 3(team0) entered disabled state [ 588.055051][ T6972] bridge_slave_1: left allmulticast mode [ 588.056926][ T6972] bridge_slave_1: left promiscuous mode [ 588.059086][ T6972] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.062424][ T6972] bridge_slave_0: left allmulticast mode [ 588.064288][ T6972] bridge_slave_0: left promiscuous mode [ 588.066150][ T6972] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.218313][ T6972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.239854][ T6972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.250059][ T6972] bond0 (unregistering): Released all slaves [ 588.256238][ T6972] bond1 (unregistering): Released all slaves [ 588.261605][T27477] tipc: Enabling of bearer rejected, already enabled [ 588.500069][T27502] tipc: Enabling of bearer rejected, failed to enable media [ 588.519409][T27500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3434'. [ 588.554482][ T6972] hsr_slave_0: left promiscuous mode [ 588.556646][ T6972] hsr_slave_1: left promiscuous mode [ 588.558558][ T6972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 588.561682][ T6972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.565512][ T6972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 588.567854][ T6972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.579783][ T6972] veth1_macvtap: left promiscuous mode [ 588.581596][ T6972] veth0_macvtap: left promiscuous mode [ 588.583357][ T6972] veth1_vlan: left promiscuous mode [ 588.585073][ T6972] veth0_vlan: left promiscuous mode [ 588.596323][T27514] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 588.673695][ T6972] team_slave_1 (unregistering): left promiscuous mode [ 588.676753][ T6972] team0 (unregistering): Port device team_slave_1 removed [ 588.683650][ T6972] team_slave_0 (unregistering): left promiscuous mode [ 588.686325][ T6972] team0 (unregistering): Port device team_slave_0 removed [ 588.754782][T27528] netlink: 'syz.4.3443': attribute type 3 has an invalid length. [ 588.757375][T27528] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3443'. [ 588.831495][T27530] tipc: Enabling of bearer rejected, failed to enable media [ 588.945100][T27536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3446'. [ 589.348088][T27553] netlink: 'syz.1.3452': attribute type 3 has an invalid length. [ 589.350903][T27553] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3452'. [ 589.559744][T27563] overlayfs: failed to clone upperpath [ 589.988191][T27577] netlink: 'syz.2.3460': attribute type 3 has an invalid length. [ 589.990847][T27577] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3460'. [ 590.034218][T27581] netlink: 'syz.2.3462': attribute type 3 has an invalid length. [ 590.869247][T24559] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 590.869267][T24559] Bluetooth: hci2: adv larger than maximum supported [ 590.872138][T27610] netlink: 'syz.1.3471': attribute type 3 has an invalid length. [ 590.873913][T24559] Bluetooth: hci2: Malformed LE Event: 0x0d [ 590.891758][T27612] netlink: 'syz.4.3470': attribute type 3 has an invalid length. [ 591.230484][T27624] overlayfs: failed to clone upperpath [ 592.086820][T24559] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 592.087214][T24559] Bluetooth: hci1: adv larger than maximum supported [ 592.089917][T24559] Bluetooth: hci1: Malformed LE Event: 0x0d [ 592.105435][T27642] __nla_validate_parse: 4 callbacks suppressed [ 592.105511][T27642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3487'. [ 592.191086][T27644] overlayfs: failed to clone upperpath [ 592.370040][T27647] netlink: 'syz.2.3481': attribute type 3 has an invalid length. [ 592.372586][T27647] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3481'. [ 593.422066][T27661] tipc: Enabling of bearer rejected, failed to enable media [ 593.768598][T27677] netlink: 'syz.2.3491': attribute type 3 has an invalid length. [ 593.772799][T27677] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3491'. [ 594.286133][ T5973] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 594.286175][ T5973] Bluetooth: hci1: adv larger than maximum supported [ 594.288507][ T5973] Bluetooth: hci1: Malformed LE Event: 0x0d [ 594.651512][T27716] netlink: 62 bytes leftover after parsing attributes in process `syz.3.3498'. [ 595.059354][ T6024] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 595.066119][ T6024] hid-generic 0000:0000:0000.000D: hidraw1: HID v0.00 Device [syz1] on syz0 [ 595.197011][T27718] comedi comedi3: c6xdigio: I/O port conflict (0x4f2b,3) [ 595.202983][T27718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3499'. [ 595.238914][ T5973] Bluetooth: hci1: command 0x0406 tx timeout [ 595.330842][T27728] overlayfs: failed to clone upperpath [ 595.337304][T27729] syzkaller1: entered promiscuous mode [ 595.339705][T27729] syzkaller1: entered allmulticast mode [ 595.346918][T27729] netlink: 'syz.3.3502': attribute type 10 has an invalid length. [ 595.353341][T27729] team0: Port device dummy0 added [ 595.738830][T24101] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 595.888903][T24101] usb 8-1: Using ep0 maxpacket: 32 [ 595.892094][T24101] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 595.894767][T24101] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 595.897487][T24101] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 595.900888][T24101] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 595.905004][T24101] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 595.909135][T24101] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 595.914041][T24101] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 595.916868][T24101] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.920428][T24101] usb 8-1: config 0 descriptor?? [ 596.049369][T24559] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 596.049403][T24559] Bluetooth: hci4: adv larger than maximum supported [ 596.052247][T24559] Bluetooth: hci4: Malformed LE Event: 0x0d [ 596.127617][T24101] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 50 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 596.132936][T24101] usb 8-1: USB disconnect, device number 50 [ 596.136150][T24101] usblp0: removed [ 596.568778][T24721] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 596.719192][T24721] usb 8-1: Using ep0 maxpacket: 32 [ 596.722483][T24721] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 596.725148][T24721] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 596.727906][T24721] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 596.731706][T24721] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 596.734798][T24721] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 596.737861][T24721] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 596.742517][T24721] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 596.745438][T24721] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.749790][T24721] usb 8-1: config 0 descriptor?? [ 596.996580][T27744] tipc: Enabling of bearer rejected, failed to enable media [ 597.029497][T27746] fuse: Bad value for 'group_id' [ 597.031266][T27746] fuse: Bad value for 'group_id' [ 597.157480][T24721] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 51 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 597.302771][T24721] usb 8-1: USB disconnect, device number 51 [ 597.527231][T24721] usblp0: removed [ 598.390619][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 598.399201][ T9] hid-generic 0000:0000:0000.000E: hidraw1: HID v0.00 Device [syz1] on syz0 [ 598.453622][T27763] netlink: 'syz.2.3513': attribute type 3 has an invalid length. [ 598.456085][T27763] netlink: 199556 bytes leftover after parsing attributes in process `syz.2.3513'. [ 598.518883][T27767] netlink: 'syz.3.3515': attribute type 3 has an invalid length. [ 598.521311][T27767] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3515'. [ 598.535936][T27760] comedi comedi3: c6xdigio: I/O port conflict (0x4f2b,3) [ 598.538243][T27760] ================================================================== [ 598.541571][T27760] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70 [ 598.544264][T27760] Read of size 8 at addr ffff88804cea0c30 by task syz.4.3512/27760 [ 598.549069][T27760] [ 598.550610][T27760] CPU: 3 UID: 0 PID: 27760 Comm: syz.4.3512 Not tainted syzkaller #0 PREEMPT(full) [ 598.550632][T27760] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 598.550640][T27760] Call Trace: [ 598.550646][T27760] [ 598.550651][T27760] dump_stack_lvl+0x116/0x1f0 [ 598.550669][T27760] print_report+0xcd/0x630 [ 598.550685][T27760] ? __virt_addr_valid+0x81/0x610 [ 598.550700][T27760] ? __phys_addr+0xe8/0x180 [ 598.550713][T27760] ? sysfs_remove_file_ns+0x63/0x70 [ 598.550725][T27760] kasan_report+0xe0/0x110 [ 598.550738][T27760] ? sysfs_remove_file_ns+0x63/0x70 [ 598.550751][T27760] sysfs_remove_file_ns+0x63/0x70 [ 598.550763][T27760] driver_remove_file+0x4a/0x60 [ 598.550780][T27760] bus_remove_driver+0x224/0x2c0 [ 598.550794][T27760] driver_unregister+0x76/0xb0 [ 598.550810][T27760] comedi_device_detach_locked+0x12c/0xa50 [ 598.550827][T27760] comedi_device_detach+0x67/0xb0 [ 598.550840][T27760] comedi_device_attach+0x43d/0x900 [ 598.550856][T27760] do_devconfig_ioctl+0x1b1/0x710 [ 598.550865][T27760] ? __mutex_lock+0x1c5/0x1060 [ 598.550879][T27760] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 598.550892][T27760] ? kasan_save_stack+0x42/0x60 [ 598.550903][T27760] ? kasan_save_stack+0x33/0x60 [ 598.550915][T27760] ? kasan_save_track+0x14/0x30 [ 598.550926][T27760] ? kasan_save_free_info+0x3b/0x60 [ 598.550936][T27760] ? __kasan_slab_free+0x60/0x70 [ 598.550948][T27760] ? kfree+0x2b4/0x4d0 [ 598.550957][T27760] ? tomoyo_path_number_perm+0x470/0x580 [ 598.550972][T27760] comedi_unlocked_ioctl+0x165d/0x2f00 [ 598.550985][T27760] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 598.551000][T27760] ? rcu_is_watching+0x12/0xc0 [ 598.551012][T27760] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 598.551030][T27760] ? tomoyo_path_number_perm+0x295/0x580 [ 598.551042][T27760] ? rcu_is_watching+0x12/0xc0 [ 598.551052][T27760] ? lock_release+0x201/0x2f0 [ 598.551067][T27760] ? tomoyo_path_number_perm+0x18d/0x580 [ 598.551080][T27760] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 598.551094][T27760] comedi_compat_ioctl+0x1d0/0x990 [ 598.551105][T27760] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 598.551118][T27760] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 598.551134][T27760] ? do_vfs_ioctl+0x128/0x14f0 [ 598.551151][T27760] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 598.551167][T27760] ? rcu_is_watching+0x12/0xc0 [ 598.551179][T27760] ? __fget_files+0x204/0x3c0 [ 598.551191][T27760] ? hook_file_ioctl_common+0x145/0x410 [ 598.551207][T27760] ? __fget_files+0x20e/0x3c0 [ 598.551217][T27760] ? __ia32_compat_sys_openat+0xf0/0x210 [ 598.551229][T27760] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 598.551241][T27760] __ia32_compat_sys_ioctl+0x23f/0x370 [ 598.551258][T27760] __do_fast_syscall_32+0x7c/0x3a0 [ 598.551273][T27760] do_fast_syscall_32+0x32/0x80 [ 598.551287][T27760] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 598.551301][T27760] RIP: 0023:0xf7f07579 [ 598.551311][T27760] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 598.551322][T27760] RSP: 002b:00000000f542655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 598.551332][T27760] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000040946400 [ 598.551340][T27760] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 598.551346][T27760] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 598.551353][T27760] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 598.551359][T27760] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 598.551369][T27760] [ 598.551373][T27760] [ 598.673544][T27760] Allocated by task 8753: [ 598.674914][T27760] kasan_save_stack+0x33/0x60 [ 598.676524][T27760] kasan_save_track+0x14/0x30 [ 598.678044][T27760] __kasan_kmalloc+0xaa/0xb0 [ 598.679541][T27760] bus_add_driver+0x92/0x690 [ 598.681027][T27760] driver_register+0x15c/0x4b0 [ 598.682556][T27760] c6xdigio_attach+0xa3/0x4b0 [ 598.684083][T27760] comedi_device_attach+0x3b0/0x900 [ 598.685744][T27760] do_devconfig_ioctl+0x1b1/0x710 [ 598.687350][T27760] comedi_unlocked_ioctl+0x165d/0x2f00 [ 598.689075][T27760] comedi_compat_ioctl+0x1d0/0x990 [ 598.690740][T27760] __ia32_compat_sys_ioctl+0x23f/0x370 [ 598.692454][T27760] __do_fast_syscall_32+0x7c/0x3a0 [ 598.694106][T27760] do_fast_syscall_32+0x32/0x80 [ 598.695656][T27760] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 598.697656][T27760] [ 598.698435][T27760] Freed by task 27718: [ 598.699736][T27760] kasan_save_stack+0x33/0x60 [ 598.701245][T27760] kasan_save_track+0x14/0x30 [ 598.702745][T27760] kasan_save_free_info+0x3b/0x60 [ 598.704367][T27760] __kasan_slab_free+0x60/0x70 [ 598.705924][T27760] kfree+0x2b4/0x4d0 [ 598.707196][T27760] kobject_put+0x1e7/0x5a0 [ 598.708622][T27760] bus_remove_driver+0x16e/0x2c0 [ 598.710197][T27760] driver_unregister+0x76/0xb0 [ 598.711719][T27760] comedi_device_detach_locked+0x12c/0xa50 [ 598.713569][T27760] comedi_device_detach+0x67/0xb0 [ 598.715195][T27760] comedi_device_attach+0x43d/0x900 [ 598.716837][T27760] do_devconfig_ioctl+0x1b1/0x710 [ 598.718441][T27760] comedi_unlocked_ioctl+0x165d/0x2f00 [ 598.720164][T27760] comedi_compat_ioctl+0x1d0/0x990 [ 598.721788][T27760] __ia32_compat_sys_ioctl+0x23f/0x370 [ 598.723509][T27760] __do_fast_syscall_32+0x7c/0x3a0 [ 598.725192][T27760] do_fast_syscall_32+0x32/0x80 [ 598.726861][T27760] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 598.728871][T27760] [ 598.729648][T27760] The buggy address belongs to the object at ffff88804cea0c00 [ 598.729648][T27760] which belongs to the cache kmalloc-256 of size 256 [ 598.733983][T27760] The buggy address is located 48 bytes inside of [ 598.733983][T27760] freed 256-byte region [ffff88804cea0c00, ffff88804cea0d00) [ 598.738177][T27760] [ 598.738949][T27760] The buggy address belongs to the physical page: [ 598.740978][T27760] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804cea1800 pfn:0x4cea0 [ 598.744123][T27760] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 598.746779][T27760] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 598.749459][T27760] page_type: f5(slab) [ 598.750728][T27760] raw: 04fff00000000240 ffff88801b842b40 ffffea00012e1110 ffffea0001caaf90 [ 598.753412][T27760] raw: ffff88804cea1800 000000000010000a 00000000f5000000 0000000000000000 [ 598.756147][T27760] head: 04fff00000000240 ffff88801b842b40 ffffea00012e1110 ffffea0001caaf90 [ 598.758937][T27760] head: ffff88804cea1800 000000000010000a 00000000f5000000 0000000000000000 [ 598.761678][T27760] head: 04fff00000000001 ffffea000133a801 00000000ffffffff 00000000ffffffff [ 598.764373][T27760] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 598.767059][T27760] page dumped because: kasan: bad access detected [ 598.769061][T27760] page_owner tracks the page as allocated [ 598.770831][T27760] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8745, tgid 8736 (syz.0.741), ts 187807871838, free_ts 175964285713 [ 598.777285][T27760] post_alloc_hook+0x1c0/0x230 [ 598.778826][T27760] get_page_from_freelist+0x132b/0x38e0 [ 598.780546][T27760] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 598.782391][T27760] alloc_pages_mpol+0x1fb/0x550 [ 598.783944][T27760] new_slab+0x247/0x330 [ 598.785260][T27760] ___slab_alloc+0xcf2/0x1740 [ 598.786746][T27760] __slab_alloc.constprop.0+0x56/0xb0 [ 598.788426][T27760] __kmalloc_noprof+0x2f2/0x510 [ 598.789968][T27760] io_cache_alloc_new+0x45/0xf0 [ 598.791542][T27760] __io_prep_rw+0x21d/0x1090 [ 598.792995][T27760] io_prep_rw+0x24/0x220 [ 598.794373][T27760] io_prep_writev+0x23/0xa0 [ 598.795888][T27760] io_submit_sqes+0x835/0x2590 [ 598.797432][T27760] __do_sys_io_uring_enter+0xd6a/0x1630 [ 598.799200][T27760] __do_fast_syscall_32+0x7c/0x3a0 [ 598.800831][T27760] do_fast_syscall_32+0x32/0x80 [ 598.802622][T27760] page last free pid 23 tgid 23 stack trace: [ 598.804536][T27760] __free_frozen_pages+0x7d5/0x10f0 [ 598.806202][T27760] tlb_remove_table_rcu+0x116/0x1a0 [ 598.807843][T27760] rcu_core+0x799/0x1530 [ 598.809212][T27760] handle_softirqs+0x219/0x8e0 [ 598.810855][T27760] run_ksoftirqd+0x3a/0x60 [ 598.812294][T27760] smpboot_thread_fn+0x3f7/0xae0 [ 598.813918][T27760] kthread+0x3c5/0x780 [ 598.815228][T27760] ret_from_fork+0x5d4/0x6f0 [ 598.816697][T27760] ret_from_fork_asm+0x1a/0x30 [ 598.818240][T27760] [ 598.819015][T27760] Memory state around the buggy address: [ 598.820770][T27760] ffff88804cea0b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 598.823265][T27760] ffff88804cea0b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 598.825745][T27760] >ffff88804cea0c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 598.828246][T27760] ^ [ 598.830011][T27760] ffff88804cea0c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 598.832498][T27760] ffff88804cea0d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 598.835057][T27760] ================================================================== [ 598.841592][T27760] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 598.843882][T27760] CPU: 3 UID: 0 PID: 27760 Comm: syz.4.3512 Not tainted syzkaller #0 PREEMPT(full) [ 598.846806][T27760] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 598.850316][T27760] Call Trace: SYZFAIL: failed to recv rpc [ 598.851373][T27760] [ 598.852440][T27760] dump_stack_lvl+0x3d/0x1f0 [ 598.854013][T27760] vpanic+0x6e8/0x7a0 [ 598.855244][T27760] ? __pfx_vpanic+0x10/0x10 [ 598.856690][T27760] ? __pfx_vprintk_emit+0x10/0x10 [ 598.858321][T27760] ? sysfs_remove_file_ns+0x63/0x70 [ 598.860083][T27760] panic+0xca/0xd0 [ 598.861310][T27760] ? __pfx_panic+0x10/0x10 [ 598.862723][T27760] ? sysfs_remove_file_ns+0x63/0x70 [ 598.864349][T27760] ? preempt_schedule_common+0x44/0xc0 [ 598.866089][T27760] ? preempt_schedule_thunk+0x16/0x30 [ 598.867793][T27760] check_panic_on_warn+0xab/0xb0 [ 598.869386][T27760] end_report+0x107/0x170 [ 598.870767][T27760] kasan_report+0xee/0x110 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 598.872430][T27760] ? sysfs_remove_file_ns+0x63/0x70 [ 598.874190][T27760] sysfs_remove_file_ns+0x63/0x70 [ 598.875810][T27760] driver_remove_file+0x4a/0x60 [ 598.877371][T27760] bus_remove_driver+0x224/0x2c0 [ 598.878945][T27760] driver_unregister+0x76/0xb0 [ 598.880501][T27760] comedi_device_detach_locked+0x12c/0xa50 [ 598.882342][T27760] comedi_device_detach+0x67/0xb0 [ 598.883967][T27760] comedi_device_attach+0x43d/0x900 [ 598.885600][T27760] do_devconfig_ioctl+0x1b1/0x710 [ 598.887209][T27760] ? __mutex_lock+0x1c5/0x1060 [ 598.888753][T27760] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 598.890624][T27760] ? kasan_save_stack+0x42/0x60 [ 598.892177][T27760] ? kasan_save_stack+0x33/0x60 [ 598.893757][T27760] ? kasan_save_track+0x14/0x30 [ 598.895311][T27760] ? kasan_save_free_info+0x3b/0x60 [ 598.896978][T27760] ? __kasan_slab_free+0x60/0x70 [ 598.898547][T27760] ? kfree+0x2b4/0x4d0 [ 598.899846][T27760] ? tomoyo_path_number_perm+0x470/0x580 [ 598.901607][T27760] comedi_unlocked_ioctl+0x165d/0x2f00 [ 598.903507][T27760] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 598.905402][T27760] ? rcu_is_watching+0x12/0xc0 [ 598.906930][T27760] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 598.908806][T27760] ? tomoyo_path_number_perm+0x295/0x580 [ 598.910569][T27760] ? rcu_is_watching+0x12/0xc0 [ 598.912092][T27760] ? lock_release+0x201/0x2f0 [ 598.913603][T27760] ? tomoyo_path_number_perm+0x18d/0x580 [ 598.915359][T27760] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 598.917256][T27760] comedi_compat_ioctl+0x1d0/0x990 [ 598.918851][T27760] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 598.920447][T27760] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 598.922459][T27760] ? do_vfs_ioctl+0x128/0x14f0 [ 598.924024][T27760] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 598.925646][T27760] ? rcu_is_watching+0x12/0xc0 [ 598.927192][T27760] ? __fget_files+0x204/0x3c0 [ 598.928695][T27760] ? hook_file_ioctl_common+0x145/0x410 [ 598.930456][T27760] ? __fget_files+0x20e/0x3c0 [ 598.931950][T27760] ? __ia32_compat_sys_openat+0xf0/0x210 [ 598.933760][T27760] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 598.935532][T27760] __ia32_compat_sys_ioctl+0x23f/0x370 [ 598.937278][T27760] __do_fast_syscall_32+0x7c/0x3a0 [ 598.938811][T27760] do_fast_syscall_32+0x32/0x80 [ 598.940302][T27760] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 598.942300][T27760] RIP: 0023:0xf7f07579 [ 598.943605][T27760] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 598.949119][T27760] RSP: 002b:00000000f542655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 598.951737][T27760] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000040946400 [ 598.954509][T27760] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 598.957027][T27760] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 598.959600][T27760] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 598.962089][T27760] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 598.964589][T27760] [ 598.966380][T27760] Kernel Offset: disabled [ 598.967751][T27760] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:23:13 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=800000006311e007 RCX=ffffffff8205adb0 RDX=ffff888022fc8000 RSI=0000000000000000 RDI=0000000000000007 RBP=0000000000000001 RSP=ffffc90026c6f5e0 R8 =0000000000000007 R9 =0000000000000000 R10=800000006311e007 R11=000000000000001e R12=1ffff92004d8debc R13=ffff888012a36780 R14=00000000f5eac000 R15=ffffea00018c4740 RIP=ffffffff8205adb0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880974c4000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f955c0 CR3=0000000060d17000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000001aa8f7c RBX=0000000000000001 RCX=ffffffff8b908bf9 RDX=ffffed1005666656 RSI=ffffffff8c162c80 RDI=ffffffff8190cca1 RBP=ffffed1003bd8488 RSP=ffffc9000046fdf8 R8 =0000000000000000 R9 =ffffed1005666655 R10=ffff88802b3332ab R11=0000000000000001 R12=0000000000000001 R13=ffff88801dec2440 R14=ffffffff90ab7690 R15=0000000000000000 RIP=ffffffff8b90775f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000570d3b60 CR3=000000006f350000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000090e714 RBX=0000000000000002 RCX=ffffffff8b908bf9 RDX=ffffed1005686656 RSI=ffffffff8c162c80 RDI=ffffffff8190cca1 RBP=ffffed1003bd8910 RSP=ffffc9000047fdf8 R8 =0000000000000000 R9 =ffffed1005686655 R10=ffff88802b4332ab R11=0000000000000001 R12=0000000000000002 R13=ffff88801dec4880 R14=ffffffff90ab7690 R15=0000000000000000 RIP=ffffffff8b90775f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000056296fb94f40 CR3=000000006f350000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc000000000d RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff85616c00 RDI=ffffffff9b0f8680 RBP=ffffffff9b0f8640 RSP=ffffc90003207180 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3430383838666666 R12=0000000000000000 R13=ffffffff9b0f8690 R14=ffffffff9b0f8640 R15=ffffffff9b0f8900 RIP=ffffffff85616c27 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977c4000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f72e73fc CR3=000000006e176000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000