last executing test programs: 13.900709538s ago: executing program 1 (id=700): openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x6, 0x34324152, 0x0, 0xa, [{}, {0x10, 0x800}, {}, {0x3}, {}, {}, {0x0, 0x20}], 0x0, 0x9, 0x0, 0x1, 0x5}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000500000003e6000001000004ff030000f800002e00"/53], 0x0, 0x35, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0) r3 = openat$drirender128(0xffffff9c, 0x0, 0x2000, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000100)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000240)={r4}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000001480)={0x0, r2}) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="140100002d0001fffffff3000000000001"], 0x114}], 0x1}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xc1) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r7, 0x29, 0x41, &(0x7f0000000880)=ANY=[], 0x44) unshare(0x40000000) 13.243314272s ago: executing program 1 (id=705): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r0, 0x0, 0x10000000000000}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[], 0x50) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r1, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000003000/0x2000)=nil) 13.079039882s ago: executing program 1 (id=706): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xfffffffe, &(0x7f0000006680)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x57, 0x800, 0xfffc, {0x4, 0x1}, {0x3a, 0x6}, @cond=[{0x7, 0x5, 0x1fe, 0xfe2d, 0xb, 0x3d8}, {0xff, 0x800, 0xfffb, 0x5, 0x0, 0x529}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = socket$unix(0x1, 0x1, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)) r3 = dup2(r2, r1) close_range(r2, r3, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) readv(r5, &(0x7f0000000180)=[{&(0x7f00000025c0)=""/4096, 0x1000}], 0x1) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x1, 0x7, 0xfff, 0x93c, 0x83, "b95a12ee58f8b3d5c9a7859861f5347046f7a9"}) write$char_usb(r6, &(0x7f0000000040)="e2", 0x12d8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x6, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0x1, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) io_pgetevents(0x0, 0xf, 0x0, 0x0, 0x0, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x3, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x2, 0xf, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x17, 0x19, 0x80, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x28}}, 0x0) sendmsg$key(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030d00000000000000000000030005000000000002004e20ac1e0101000000000000000500000000000000000000000b0000000002000900000000000000000000000000030006000000000002004e230a0101020000000000000000010014000000000000"], 0x68}}, 0x0) ptrace$peeksig(0x4209, 0x0, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb0800450000280000000077c47a4303ed27ace00000010d00907800"/54], 0x0) 12.178659965s ago: executing program 1 (id=709): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r1, 0x1f) syz_emit_ethernet(0x83, &(0x7f0000000100)=ANY=[], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x339e, &(0x7f0000000300)={0x0, 0x0, 0x800}, &(0x7f0000002480), &(0x7f00000024c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000002380)={0x1, 0x0, 0x0, &(0x7f00000022c0)=[{0x0}], 0x0}, 0x20) creat(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x2, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000, 0x0, 0x0, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r6, 0x0, 0x0) fdatasync(r6) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000004f40)={0x0, 0x0, &(0x7f0000004f00)=[{0x0}], 0xfffffffffffffffe, 0x1}, 0x20) timer_create(0x6, &(0x7f0000000680)={0x0, 0x1e, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x3938700}}, 0x0) add_key(&(0x7f0000001240)='big_key\x00', &(0x7f0000001380)={'syz', 0x1}, &(0x7f0000001300)='n', 0x1, 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1fe) 11.953967857s ago: executing program 1 (id=711): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c21000000000020"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="380100"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) (fail_nth: 12) 11.535681561s ago: executing program 1 (id=714): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r0, 0x0, 0x10000000000000}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[], 0x50) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r1, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000003000/0x2000)=nil) 11.459042927s ago: executing program 32 (id=714): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r0, 0x0, 0x10000000000000}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[], 0x50) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r1, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000003000/0x2000)=nil) 6.742328767s ago: executing program 3 (id=735): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x76) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_emit_ethernet(0x27a, &(0x7f0000000780)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @udp={0xd, 0x6, "fce131", 0x240, 0x11, 0xff, @dev={0xfe, 0x80, '\x00', 0x10}, @private1, {[@fragment={0x1, 0x0, 0x2c, 0x1, 0x0, 0x6, 0x68}, @hopopts={0x35, 0xf, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0xd, 0x800, [0xf3, 0x6ae]}}, @calipso={0x7, 0x38, {0x1, 0xc, 0x1, 0x4, [0x7, 0x234b, 0x7, 0x0, 0xfffffffffffff801, 0x9]}}, @ra={0x5, 0x2, 0x7}, @jumbo={0xc2, 0x4, 0x400}, @ra, @jumbo={0xc2, 0x4, 0x5}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @dstopts={0x2c, 0x2, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @fragment={0x2, 0x0, 0xfc, 0x1, 0x0, 0x1, 0x64}, @srh={0x62, 0xe, 0x4, 0x7, 0x0, 0x10, 0x5, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @private0, @mcast1]}, @dstopts={0x11, 0x14, '\x00', [@jumbo={0xc2, 0x4, 0x70f}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x3, 0x91, "0625590db33a2192474485bf076f26717bc9977439bb07c4f50c4a1c09074ff2e26a63153170ebdd98d798f3949780722f4756308c56bf35284da87d59b7fd7c12d1e77b4b9db525d8dede0194a117f1249ec090b009ae6a86dd007538dfb222048123e2d4a6dfc744ed94b977d96a34bf0db2cc151b272e9cde6b4d832e437c788b90b16a84593820643ab45fd076239b"}, @enc_lim={0x4, 0x1, 0x9}, @pad1]}], {0x4e20, 0x4e20, 0x60, 0x0, @gue={{0x1, 0x0, 0x2, 0x0, 0x100, @void}, "e506a65c52cb6c0b43ba93218abe5154a292192efbf4a95957bbf8ae212edb78f2bc3f6e971476e44d564a22b5ee1e4cd1811dd3bffce0d7182f8e34ab25c3dce5548be3b73ce7fea0811ff8eed955d20460f881"}}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xb, 0x3}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYBLOB="000000000000000008000400699b00000800"], 0x30}}, 0x0) mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000240)='ramfs\x00', 0x10c000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') 6.74169748s ago: executing program 0 (id=736): add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) r0 = open(0x0, 0x80ff, 0x88) r1 = open(&(0x7f0000000040)='./file0\x00', 0x222082, 0x81) fcntl$setlease(r1, 0x400, 0x1) fcntl$setlease(r0, 0x400, 0x0) shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffb000/0x2000)=nil) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="3103000000000000000009000000", @ANYRES32], 0x24}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) r3 = dup(r2) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102481, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x80}}, 0x18}}, 0x40d2) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000000)=ANY=[]) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000000000000a01"]) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x8000000000000000, 0x10, 0x0, 0x37a0, 0x4b3f, 0x83}, 0x0, &(0x7f00000002c0)={0x3, 0x80000004}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r9 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r9, &(0x7f0000032680)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xa03) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) 6.652476379s ago: executing program 4 (id=737): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a320000000014000780080013400000000008001240000020000500050002000000050004000000000015000300686173683a6970"], 0x64}, 0x1, 0x0, 0x0, 0x40008d1}, 0x20004000) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001240)=ANY=[@ANYBLOB="280000000306010200000000000000000000000005000100070000000900020073797a32"], 0x28}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) iopl(0x3) r4 = socket(0x840000000002, 0x3, 0x100) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x8000000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "b1348a2fdf4bd032", "be214298687c62bc5b63c359fc146f68", "f48b7e34", "bad7cfa5892235d9"}, 0x28) setsockopt$inet6_tcp_int(r5, 0x11a, 0x4, &(0x7f00000000c0)=0x101, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) pwritev2(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="d0600b401f39b97bf93ecf49759e94b4519a0de2f87e5c417273a5dce55efb335b22dce602ca972f116438489fdab766171401f130eb1c9e78ec70db15755f97ca197fc3da0b85ea0d2f7bdffcc1caa5810430b5448f4ae272489f5c7ac1e4660c4f7b0446d5457181924a3d4dbfdfee93a14379adfe7c1effdacb69a945", 0x7e}], 0x1, 0xa, 0x6e6f2b53, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmmsg$inet(r4, &(0x7f0000005240), 0x264e33, 0xff88) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f00000001c0)=[@register_looper, @acquire], 0x0, 0x0, 0x0}) getsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) 5.65307559s ago: executing program 2 (id=738): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000005c0)='io_uring_create\x00', r0, 0x0, 0xc}, 0x18) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) recvmmsg(r1, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2}, 0x7}], 0x2, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}], 0x0, 0x0, 0x0, 0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f328db0049d90491ceaebfd", 0x23}, {&(0x7f0000000200)="c600007ded74b17c3acbe68d60bc9f263e3203924e7576", 0x17}], 0x2) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) getrlimit(0x4, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="aa", 0x1, 0x20000000, &(0x7f0000000100)={0xa, 0x0, 0x4, @local, 0x4}, 0x1c) eventfd(0x0) r7 = fanotify_init(0x8, 0x0) r8 = epoll_create1(0x0) r9 = fcntl$dupfd(r8, 0x2, 0xffffffffffffffff) fanotify_mark(r7, 0x21, 0x8000019, r9, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@getqdisc={0x40, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xfff2, 0x2}, {0x9, 0xe}, {0x4, 0x6}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x20000) 5.223247029s ago: executing program 3 (id=739): openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000011dafc832047b9f36ba6e95024a141def8efd77c3afb92b96e3dd64a90021efa686eea384b453ad3ea88792b365a678159aa30ebe41f66b5d1c41ed12619504603588ecda466678c9921fe", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(r2, 0x4b, &(0x7f0000000200)=0x81) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x800003e5, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001300)={0xc, {"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", 0xfffffffffffffebd}}, 0x1006) 5.146291355s ago: executing program 0 (id=740): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000b70500000800000085000000a50000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, 0xa, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3a}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_EXPR={0x38, 0x11, 0x0, 0x1, @synproxy={{0xd}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x2}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xff}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xa}]}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x200000d0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000100)=0x2, 0x4) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) r5 = socket(0x10, 0x3, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r7 = openat$vim2m(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0cc5605, &(0x7f0000000080)={0x1, @sdr={0x38415261, 0x400}}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r6}}}}]}, 0x38}}, 0x0) 4.39344264s ago: executing program 2 (id=741): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000004000000080000000c00000000000000", @ANYRESDEC, @ANYBLOB='\x00\x00\x00\x00\x00\x00\b\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x7c90c3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = getpid() syz_pidfd_open(r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0xff, 0x0, 0x0, 0x40, 0x572, 0xcb01, 0x2665, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xaa, 0x75, 0xb7}}]}}]}}, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r3, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x3a, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) openat$sndseq(0xffffff9c, &(0x7f0000000080), 0x8040) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000280)=0xb) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2c2fc2, 0x0) 4.213633996s ago: executing program 3 (id=742): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0x1, 0xfffffffffffffffe) syz_io_uring_setup(0x231, 0x0, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], &(0x7f0000000240)=""/171, 0x42, 0xab, 0x3, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000900000080000000e9c130360de06d1cd24c1a8565b4450abf67ef9990d06886a903fa11bed2c2791f5f4e0db14619f0dc34703cb1caf659e1f1f71841410ad88fc9e6c6b796ea788bb95576ee514ac4e33fa809150c4fdb4591ea4afbed866770d9256cf5ad", @ANYRES32=0x1, @ANYBLOB="0000000400"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="00000000020000008000"/28], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) ppoll(&(0x7f00000001c0)=[{r4}], 0x1, 0x0, 0x0, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000000040)=0xad3, 0x4) bind$inet6(r7, &(0x7f0000000400)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000314010000000004fedb0000000008004100000000001400330073797a6b616c6c657230000000000000"], 0x38}}, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r9, 0x4008af00, &(0x7f0000000140)=0x200000000) 4.212943101s ago: executing program 0 (id=743): mkdir(&(0x7f0000000140)='./file0\x00', 0x4) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2000a0, &(0x7f0000000040)=ANY=[@ANYRESOCT]) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x402, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004841}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) keyctl$join(0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r5, 0x25, 0x0, @void}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$netlink(0x10, 0x3, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r6, &(0x7f0000000000)={0x2, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) 3.617436701s ago: executing program 4 (id=744): r0 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={0x14, r0, 0x5953a6d8b15e6715}, 0x14}}, 0x0) 3.513439316s ago: executing program 4 (id=745): syz_emit_ethernet(0x33, &(0x7f0000000580)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x11, 0x0, @gue={{0x1, 0x1, 0x2, 0xc, 0x100, @void}, "21c2087db1"}}}}}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000040000002a7f000001000000010000002aaf8c52dac63ec4cbe6076a3166d9dfc6e777e6d891f613c6530825b092703aba72b67adc3fb094605e124efa33ec3f76738b57098cf359e15fbc949efaa3f1d4ec77e9275e07ef62d3627b801680703474b805d12ad336dd1520f5f13489721361f5a785afd4424dab8e288922477d8c7f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$bsg(0xffffff9c, &(0x7f0000000080), 0x612500, 0x0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000140)={'filter\x00', 0x0, 0x0, 0x0, [0x9, 0x8, 0x7, 0x6, 0xbc0, 0x2]}, &(0x7f00000000c0)=0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) mount$pvfs2(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)={[{'#$'}, {'rng\x00'}, {'\x00'}, {'#'}, {'/dev/vim2m\x00'}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@smackfsfloor}]}) r5 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0cc5640, &(0x7f0000000540)={0x1, @sliced={0x0, [0x12a9, 0x400, 0xea, 0x8, 0xffff, 0x3, 0x6, 0x8, 0x83, 0x1, 0xe3c7, 0x5, 0x6, 0x8, 0x9, 0x200, 0x7, 0x9, 0x5, 0x3, 0x1ff, 0xad3f, 0x5, 0x4, 0x0, 0x7, 0x6, 0x8, 0x101, 0x515, 0x7, 0x2, 0x5, 0x9, 0x2, 0xfc00, 0x10, 0xfff, 0x9, 0x23, 0x38, 0x4, 0xfff4, 0x675, 0xa, 0x6, 0x800, 0x8], 0x3}}) socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000002340)={[{@quota}, {@huge_always}]}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f0000000300)={0x2020}, 0x2020) 2.93406216s ago: executing program 0 (id=746): pipe2$watch_queue(&(0x7f0000000000), 0x80) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/mnt\x00') (async) r0 = getpid() (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 64) r1 = userfaultfd(0x801) (rerun: 64) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x380}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080), 0x0, 0xffffffffffffffff) keyctl$read(0x2, r2, &(0x7f00000000c0)=""/4096, 0x1000) (async) keyctl$read(0xb, r2, &(0x7f0000004280)=""/4096, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x2020) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x9) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) 2.812681305s ago: executing program 3 (id=747): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x32780db4, 0x109000) ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x4161, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000100)=ANY=[@ANYRES8=r0, @ANYRESDEC]) syz_fuse_handle_req(r3, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) socket$can_j1939(0x1d, 0x2, 0x7) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x62) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0x10b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x100000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) listen(r4, 0x0) accept4(r4, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad5}, &(0x7f0000000240)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r6, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f0000000000)={0xfe, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) 2.623695284s ago: executing program 4 (id=748): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x1004, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x237, &(0x7f0000000480)=ANY=[@ANYRES16, @ANYRESOCT=0x0, @ANYRES16, @ANYRESHEX, @ANYRES32=r1, @ANYRES16=r0], &(0x7f0000000300)='syzkaller\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x3, 0x46}, {0x5, 0x5, 0x3, 0x9}], 0x10, 0x36, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000300000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 2.623302654s ago: executing program 0 (id=749): ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x541b, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a320000000014000780080013400000000008001240000020000500050002000000050004000000000015000300686173683a6970"], 0x64}, 0x1, 0x0, 0x0, 0x40008d1}, 0x20004000) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001240)=ANY=[@ANYBLOB="280000000306010200000000000000000000000005000100070000000900020073797a32"], 0x28}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) iopl(0x3) r3 = socket(0x840000000002, 0x3, 0x100) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x8000000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "b1348a2fdf4bd032", "be214298687c62bc5b63c359fc146f68", "f48b7e34", "bad7cfa5892235d9"}, 0x28) setsockopt$inet6_tcp_int(r4, 0x11a, 0x4, &(0x7f00000000c0)=0x101, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) pwritev2(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="d0600b401f39b97bf93ecf49759e94b4519a0de2f87e5c417273a5dce55efb335b22dce602ca972f116438489fdab766171401f130eb1c9e78ec70db15755f97ca197fc3da0b85ea0d2f7bdffcc1caa5810430b5448f4ae272489f5c7ac1e4660c4f7b0446d5457181924a3d4dbfdfee93a14379adfe7c1effdacb69a945", 0x7e}], 0x1, 0xa, 0x6e6f2b53, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmmsg$inet(r3, &(0x7f0000005240), 0x264e33, 0xff88) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f00000001c0)=[@register_looper, @acquire], 0x0, 0x0, 0x0}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) 1.595796041s ago: executing program 3 (id=750): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000005c0)='io_uring_create\x00', r0, 0x0, 0xc}, 0x18) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) recvmmsg(r1, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2}, 0x7}], 0x2, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}], 0x0, 0x0, 0x0, 0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f328db0049d90491ceaebfd", 0x23}, {&(0x7f0000000200)="c600007ded74b17c3acbe68d60bc9f263e3203924e7576", 0x17}], 0x2) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) getrlimit(0x4, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="aa", 0x1, 0x20000000, &(0x7f0000000100)={0xa, 0x0, 0x4, @local, 0x4}, 0x1c) eventfd(0x0) r7 = fanotify_init(0x8, 0x0) r8 = epoll_create1(0x0) r9 = fcntl$dupfd(r8, 0x2, 0xffffffffffffffff) fanotify_mark(r7, 0x21, 0x8000019, r9, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@getqdisc={0x40, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xfff2, 0x2}, {0x9, 0xe}, {0x4, 0x6}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x20000) 1.504578226s ago: executing program 4 (id=751): openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000011dafc832047b9f36ba6e95024a141def8efd77c3afb92b96e3dd64a90021efa686eea384b453ad3ea88792b365a678159aa30ebe41f66b5d1c41ed12619504603588ecda466678c9921fe", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(r2, 0x4b, &(0x7f0000000200)=0x81) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x800003e5, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001300)={0xc, {"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", 0xfffffffffffffebd}}, 0x1006) 1.374358216s ago: executing program 2 (id=752): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)) socket$packet(0x11, 0x3, 0x300) (async) dup(r0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) getsockname$packet(r3, &(0x7f00000000c0), &(0x7f0000000100)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x7800, 0x8000, 0x7, 0x1, {{0x1d, 0x4, 0x3, 0x6, 0x74, 0x67, 0x0, 0xbe, 0x4, 0x0, @private=0xa010100, @private=0xa010102, {[@rr={0x7, 0x1f, 0x2a, [@local, @broadcast, @empty, @multicast1, @local, @loopback, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x1c, 0x9b, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6e}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x9}, {@remote, 0x6085}]}, @cipso={0x86, 0x22, 0x3, [{0x6, 0x2}, {0x5, 0x11, "a6554a96d06bb193aeed3fc1f2d93f"}, {0x0, 0x9, "23a4e5b125300d"}]}, @end]}}}}}) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x45, 0x3ff, 0x10000, 0x3, 0x8, 0x4, 0xa0000, 0x5, 0xa0000001, 0x59bc9fd6, 0x2, 0x2, 0x8000, 0x8, 0x4, 0x8, 0x4, 0x114b6000, 0xfffffffe, 0x2a70, 0xffff73cc, 0x81, 0x5, 0x0, 0xa, 0x45, 0x0, 0x8, 0x5, 0xaa44, 0x6fec432f, 0x60b, 0x80000000, 0x5, 0x8, 0x5, 0x1, 0xffff, 0x3, 0xfffffff7, 0x5, 0x8, 0x1a0055ee, 0x1, 0x1, 0xffff4226, 0x7, 0x0, 0x5, 0x101, 0x4, 0x1, 0x1, 0x800, 0xf9, 0x9, 0x9, 0x2, 0x8, 0x2f, 0xfffffff8, 0x0, 0x101, 0x2, 0x7, 0xc5, 0x4, 0x5, 0x0, 0x6, 0x2, 0x5, 0x5, 0x2, 0x9b58, 0x4, 0x2, 0x4be, 0x6, 0x100, 0xa, 0xca6, 0x9fa7, 0xfffeffff, 0x38, 0x4, 0x0, 0x8000, 0x44d, 0x7, 0x200, 0x8, 0x401, 0x7, 0x45, 0x3, 0x9, 0x0, 0x7, 0x6, 0x9, 0x3, 0x7, 0x4, 0x2, 0x7, 0x8000, 0x7, 0xda, 0x1902, 0xc3c, 0x3, 0x28000000, 0x8, 0x30c7, 0xfad, 0x7, 0x8, 0x0, 0x5, 0x10, 0x400, 0xd58, 0x4, 0x422dd3f8, 0x4, 0x8, 0x2, 0x8, 0x10000, 0xea, 0x0, 0x45ba, 0x9, 0x864b, 0x0, 0x7, 0x9, 0x1, 0x7, 0x81, 0x3, 0x800, 0xb, 0xffffff80, 0x740, 0xc22, 0x1, 0x6, 0x7, 0x24404235, 0x7fffffff, 0x4, 0xfff, 0x6, 0x0, 0x7c1, 0x135, 0x6, 0x5, 0x4, 0x3ff, 0x4, 0xb, 0x2, 0x10001, 0x61, 0x5, 0x4, 0x400, 0x101, 0xffffffff, 0x1b, 0xd589, 0xffffff81, 0x0, 0x4, 0x0, 0x300, 0x8, 0x60000000, 0xd3d, 0x0, 0xfffffffe, 0x0, 0x81, 0x2, 0x55, 0x4, 0xbc6, 0x2, 0x8, 0x28a6a52, 0x1ff, 0xf, 0x7fff, 0x9, 0x2e4c20b9, 0xb, 0x4, 0x9, 0x7, 0x4, 0x8, 0x3, 0x6, 0x8, 0x3, 0x7, 0x4, 0x9, 0x8, 0xfffffffa, 0x76e8e800, 0x800, 0x400, 0x6, 0x0, 0xcc6, 0xfffffffb, 0x8000, 0xffffff01, 0x894, 0x7, 0xfb3, 0x2, 0x6, 0x2, 0x6, 0x10001, 0x9, 0x4, 0x8, 0x5d, 0x1000000, 0x0, 0x656, 0x8, 0x80000001, 0x384, 0x9, 0x588, 0x80000000, 0xe04, 0x0, 0x1, 0x2c821159, 0x0, 0x9, 0x7, 0x0, 0x6, 0x0, 0x7f]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x2, 0x8, 0x0, 0xc}, {0xff, 0x1, 0x0, 0x5, 0x5e1d, 0x8}, 0x3ff, 0x8, 0x99}}]}}]}, 0x45c}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, 0x0) (async, rerun: 64) socket(0x11, 0x800000003, 0x0) (async, rerun: 64) socket(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) write(r6, &(0x7f0000000000)="0a000000010001", 0x7) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) 1.244445038s ago: executing program 2 (id=753): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(0x0, r0) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={0x14, r1, 0x5953a6d8b15e6715}, 0x14}}, 0x0) 1.244111148s ago: executing program 2 (id=754): mkdir(&(0x7f0000000140)='./file0\x00', 0x4) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2000a0, &(0x7f0000000040)=ANY=[@ANYRESOCT]) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x402, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004841}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) keyctl$join(0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r5, 0x25, 0x0, @void}, 0x10) socket$netlink(0x10, 0x3, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r6, &(0x7f0000000000)={0x2, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) 389.639934ms ago: executing program 3 (id=755): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0x1, 0xfffffffffffffffe) syz_io_uring_setup(0x231, 0x0, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], &(0x7f0000000240)=""/171, 0x42, 0xab, 0x3, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000900000080000000e9c130360de06d1cd24c1a8565b4450abf67ef9990d06886a903fa11bed2c2791f5f4e0db14619f0dc34703cb1caf659e1f1f71841410ad88fc9e6c6b796ea788bb95576ee514ac4e33fa809150c4fdb4591ea4afbed866770d9256cf5ad", @ANYRES32=0x1, @ANYBLOB="0000000400"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="00000000020000008000"/28], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) ppoll(&(0x7f00000001c0)=[{r4}], 0x1, 0x0, 0x0, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r7, &(0x7f0000000400)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000314010000000004fedb0000000008004100000000001400330073797a6b616c6c657230000000000000"], 0x38}}, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r9, 0x4008af00, &(0x7f0000000140)=0x200000000) 389.093612ms ago: executing program 4 (id=756): syz_emit_ethernet(0x33, &(0x7f0000000580)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x11, 0x0, @gue={{0x1, 0x1, 0x2, 0xc, 0x100, @void}, "21c2087db1"}}}}}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000040000002a7f000001000000010000002aaf8c52dac63ec4cbe6076a3166d9dfc6e777e6d891f613c6530825b092703aba72b67adc3fb094605e124efa33ec3f76738b57098cf359e15fbc949efaa3f1d4ec77e9275e07ef62d3627b801680703474b805d12ad336dd1520f5f13489721361f5a785afd4424dab8e288922477d8c7f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$bsg(0xffffff9c, &(0x7f0000000080), 0x612500, 0x0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000140)={'filter\x00', 0x0, 0x0, 0x0, [0x9, 0x8, 0x7, 0x6, 0xbc0, 0x2]}, &(0x7f00000000c0)=0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000640)=""/4096, 0x1000, 0x2000, &(0x7f0000000380)=@generic={0x11, "d71d9c1bf36be386b8195be2f96732daece168ab8c4756fcaaaaa57ab4d9fa9c5e136c872457faea878081b25c7ac9863e328325d3608f7b92b91789fb2322981d60e78ecebc51a8a848ac66a135cbf9adb555f5fff1d2552ce4b120288f1c606bebc17e3b75c547a1c41ac89d1be3f0e179d586d665ef8397dfdbdaa865"}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) mount$pvfs2(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)={[{'#$'}, {'rng\x00'}, {'\x00'}, {'#'}, {'/dev/vim2m\x00'}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@smackfsfloor}]}) r5 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0cc5640, &(0x7f0000000540)={0x1, @sliced={0x0, [0x12a9, 0x400, 0xea, 0x8, 0xffff, 0x3, 0x6, 0x8, 0x83, 0x1, 0xe3c7, 0x5, 0x6, 0x8, 0x9, 0x200, 0x7, 0x9, 0x5, 0x3, 0x1ff, 0xad3f, 0x5, 0x4, 0x0, 0x7, 0x6, 0x8, 0x101, 0x515, 0x7, 0x2, 0x5, 0x9, 0x2, 0xfc00, 0x10, 0xfff, 0x9, 0x23, 0x38, 0x4, 0xfff4, 0x675, 0xa, 0x6, 0x800, 0x8], 0x3}}) socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000002340)={[{@quota}, {@huge_always}]}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f0000000300)={0x2020}, 0x2020) 204.886192ms ago: executing program 2 (id=757): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000314010080000000000000250900020073797a32000000000800410073697700140033006c6f00"/56], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x67, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0x1}, {0x5, 0x2, 0x13, 0x9}, {0x5, 0x5, 0x3, 0x1}], 0x10, 0x36, @void, @value}, 0x94) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000000640)={'trans=virtio,', {[{@dfltgid}]}}) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r1, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, &(0x7f0000000540)={0x1, @sliced={0x0, [0x12a9, 0x400, 0xea, 0x8, 0xffff, 0x3, 0x6, 0x8, 0x83, 0x1, 0xe3c7, 0x5, 0x6, 0x8, 0xc000, 0x200, 0x7, 0x9, 0x5, 0x3, 0x1ff, 0xad3f, 0x5, 0x4, 0x0, 0x7, 0x6, 0x8, 0x101, 0x515, 0x7, 0x2, 0x5, 0x9, 0x2, 0xfc00, 0x10, 0xfff, 0x9, 0x23, 0x38, 0x4, 0xfff4, 0x675, 0xa, 0x6, 0x800, 0x8], 0x3}}) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000004180)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x369, 0x0, 0x4, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x902, 0x7f}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000000440)={0x50, 0x0, r6}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0x932, 0x0) kernel console output (not intermixed with test programs): adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.751708][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.754754][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.758556][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.762239][ T5942] veth1_macvtap: entered promiscuous mode [ 36.767274][ T5946] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.770633][ T5946] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.773998][ T5946] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.776532][ T5946] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.782030][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.784785][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.796301][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.800262][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.803782][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.807637][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.811567][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.815367][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.819696][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.827517][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.830930][ T5945] Bluetooth: hci0: command tx timeout [ 36.831011][ T5937] Bluetooth: hci3: command tx timeout [ 36.831015][ T66] Bluetooth: hci1: command tx timeout [ 36.831264][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.831292][ T5948] Bluetooth: hci2: command tx timeout [ 36.837317][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.843925][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.846659][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.848401][ T5999] syz.0.1 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 36.850032][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.850045][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.860854][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.864210][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.875428][ T5942] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.878528][ T5942] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.882417][ T5942] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.884902][ T5942] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.894649][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.903256][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.924581][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.927519][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.949342][ T215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.954467][ T215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.967032][ T215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.969306][ T215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.024627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 37.144553][ T6016] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 37.227631][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 37.230029][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 37.240676][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 37.390734][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 37.394148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 37.397714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 37.401974][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 37.405513][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 37.408940][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 37.416280][ T6020] usb 2-1: USB disconnect, device number 2 [ 37.558867][ T6006] hub 2-0:1.0: USB hub found [ 37.561454][ T6006] hub 2-0:1.0: 6 ports detected [ 37.723517][ T5980] usb 2-1: new high-speed USB device number 3 using ehci-pci [ 37.923354][ T5980] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 37.926154][ T5980] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 37.928870][ T5980] usb 2-1: Product: QEMU USB Tablet [ 37.939211][ T5980] usb 2-1: Manufacturer: QEMU [ 37.940929][ T5980] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 37.969755][ T5980] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0002/input/input5 [ 38.038872][ T5980] hid-generic 0003:0627:0001.0002: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 38.452933][ T6031] Bluetooth: MGMT ver 1.23 [ 38.921909][ T5937] Bluetooth: hci3: command tx timeout [ 38.923513][ T5937] Bluetooth: hci0: command tx timeout [ 38.925220][ T5945] Bluetooth: hci2: command tx timeout [ 38.926940][ T5945] Bluetooth: hci1: command tx timeout [ 39.611243][ T6058] usb 2-1: USB disconnect, device number 3 [ 39.644464][ T6058] hub 2-0:1.0: USB hub found [ 39.646787][ T6058] hub 2-0:1.0: 6 ports detected [ 39.765391][ T6061] netlink: 'syz.3.13': attribute type 5 has an invalid length. [ 39.830229][ T833] usb 2-1: new high-speed USB device number 4 using ehci-pci [ 40.034077][ T833] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 40.036819][ T833] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 40.039143][ T833] usb 2-1: Product: QEMU USB Tablet [ 40.040812][ T833] usb 2-1: Manufacturer: QEMU [ 40.042469][ T833] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 40.063290][ T833] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0003/input/input6 [ 40.122323][ T833] hid-generic 0003:0627:0001.0003: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 40.485078][ T6076] input: syz0 as /devices/virtual/input/input7 [ 40.735733][ T6084] usb 2-1: USB disconnect, device number 4 [ 40.834196][ T6085] hub 2-0:1.0: USB hub found [ 40.836635][ T6085] hub 2-0:1.0: 6 ports detected [ 40.991113][ T5945] Bluetooth: hci1: command tx timeout [ 40.991166][ T66] Bluetooth: hci2: command tx timeout [ 40.992772][ T5945] Bluetooth: hci3: command tx timeout [ 40.994758][ T5937] Bluetooth: hci0: command tx timeout [ 41.010278][ T35] usb 2-1: new high-speed USB device number 5 using ehci-pci [ 41.215514][ T35] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 41.218162][ T35] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 41.220519][ T35] usb 2-1: Product: QEMU USB Tablet [ 41.222304][ T35] usb 2-1: Manufacturer: QEMU [ 41.223819][ T35] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 41.250542][ T35] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0004/input/input8 [ 41.265394][ T35] hid-generic 0003:0627:0001.0004: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 41.593221][ T6104] kernel profiling enabled (shift: 63) [ 41.595514][ T6104] profiling shift: 63 too large [ 41.636319][ T6111] usb 2-1: USB disconnect, device number 5 [ 41.731274][ T6115] hub 2-0:1.0: USB hub found [ 41.748964][ T6115] hub 2-0:1.0: 6 ports detected [ 41.930297][ T35] usb 2-1: new high-speed USB device number 6 using ehci-pci [ 42.124121][ T35] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 42.127483][ T35] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 42.131936][ T35] usb 2-1: Product: QEMU USB Tablet [ 42.133500][ T35] usb 2-1: Manufacturer: QEMU [ 42.134847][ T35] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 42.165309][ T35] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0005/input/input9 [ 42.222643][ T35] hid-generic 0003:0627:0001.0005: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 43.070267][ T5937] Bluetooth: hci3: command tx timeout [ 43.080315][ T5937] Bluetooth: hci0: command tx timeout [ 43.080346][ T5945] Bluetooth: hci2: command tx timeout [ 43.081903][ T66] Bluetooth: hci1: command tx timeout [ 43.110663][ T6129] netlink: 16 bytes leftover after parsing attributes in process `syz.2.23'. [ 43.189717][ T6132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24'. [ 43.590742][ T6149] veth1_macvtap: left promiscuous mode [ 43.877553][ T6155] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 43.892071][ T6155] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 45.433715][ T6177] ax25_connect(): syz.1.34 uses autobind, please contact jreuter@yaina.de [ 45.874826][ T6182] mmap: syz.2.35 (6182) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 46.098044][ T6195] usb 2-1: USB disconnect, device number 6 [ 46.150589][ T6195] hub 2-0:1.0: USB hub found [ 46.153549][ T6195] hub 2-0:1.0: 6 ports detected [ 46.172888][ T6196] hub 2-0:1.0: USB hub found [ 46.174461][ T6196] hub 2-0:1.0: 6 ports detected [ 46.350234][ T833] usb 2-1: new high-speed USB device number 7 using ehci-pci [ 46.552688][ T833] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 46.555452][ T833] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 46.557808][ T833] usb 2-1: Product: QEMU USB Tablet [ 46.559460][ T833] usb 2-1: Manufacturer: QEMU [ 46.560995][ T833] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 46.576462][ T833] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0006/input/input10 [ 46.641992][ T833] hid-generic 0003:0627:0001.0006: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 46.697349][ T6199] 9pnet_virtio: no channels available for device syz [ 48.526011][ T6226] usb 2-1: USB disconnect, device number 7 [ 48.591741][ T6228] hub 2-0:1.0: USB hub found [ 48.594643][ T6228] hub 2-0:1.0: 6 ports detected [ 48.604721][ T6227] input: syz0 as /devices/virtual/input/input11 [ 48.606901][ T6227] input: failed to attach handler leds to device input11, error: -6 [ 48.694963][ T6145] libceph: connect (1)[c::]:6789 error -101 [ 48.697292][ T6145] libceph: mon0 (1)[c::]:6789 connect error [ 48.770201][ T35] usb 2-1: new high-speed USB device number 8 using ehci-pci [ 48.958362][ T35] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 48.961085][ T35] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 48.961347][ T6145] libceph: connect (1)[c::]:6789 error -101 [ 48.963347][ T35] usb 2-1: Product: QEMU USB Tablet [ 48.963357][ T35] usb 2-1: Manufacturer: QEMU [ 48.963364][ T35] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 48.971605][ T6145] libceph: mon0 (1)[c::]:6789 connect error [ 48.984061][ T35] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0007/input/input12 [ 49.045959][ T35] hid-generic 0003:0627:0001.0007: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 49.058809][ T6227] ceph: No mds server is up or the cluster is laggy [ 49.384967][ T6238] usb 2-1: USB disconnect, device number 8 [ 49.461159][ T6239] hub 2-0:1.0: USB hub found [ 49.486261][ T6239] hub 2-0:1.0: 6 ports detected [ 50.388267][ T6068] usb 2-1: new high-speed USB device number 9 using ehci-pci [ 50.574571][ T6068] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 50.577099][ T6068] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 50.579277][ T6068] usb 2-1: Product: QEMU USB Tablet [ 50.581042][ T6068] usb 2-1: Manufacturer: QEMU [ 50.582775][ T6068] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 50.604803][ T6068] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0008/input/input13 [ 50.663326][ T6068] hid-generic 0003:0627:0001.0008: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 51.019795][ T6269] usb 2-1: USB disconnect, device number 9 [ 51.152240][ T6270] hub 2-0:1.0: USB hub found [ 51.154821][ T6270] hub 2-0:1.0: 6 ports detected [ 51.310209][ T30] usb 2-1: new high-speed USB device number 10 using ehci-pci [ 51.493049][ T30] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 51.495725][ T30] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 51.498276][ T30] usb 2-1: Product: QEMU USB Tablet [ 51.500052][ T30] usb 2-1: Manufacturer: QEMU [ 51.505993][ T30] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 51.566031][ T30] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0009/input/input14 [ 51.633584][ T30] hid-generic 0003:0627:0001.0009: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 52.214420][ T6278] netlink: 48 bytes leftover after parsing attributes in process `syz.0.52'. [ 52.760236][ T5980] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 52.879830][ T6287] syzkaller0: entered promiscuous mode [ 52.881647][ T6287] syzkaller0: entered allmulticast mode [ 52.938875][ T5980] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 52.941457][ T5980] usb 7-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 52.944367][ T5980] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 52.946921][ T5980] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 52.981057][ T5980] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 52.983624][ T6288] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.983661][ T5980] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 52.989031][ T6289] overlayfs: missing 'lowerdir' [ 52.989305][ T5980] usb 7-1: Product: syz [ 52.989315][ T5980] usb 7-1: Manufacturer: syz [ 53.010643][ T5980] cdc_wdm 7-1:1.0: skipping garbage [ 53.012234][ T5980] cdc_wdm 7-1:1.0: skipping garbage [ 53.019608][ T5980] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 53.220562][ T5980] usb 7-1: USB disconnect, device number 2 [ 53.639126][ T6294] capability: warning: `syz.1.57' uses deprecated v2 capabilities in a way that may be insecure [ 55.459928][ T6327] usb 2-1: USB disconnect, device number 10 [ 55.517846][ T6327] hub 2-0:1.0: USB hub found [ 55.519367][ T6327] hub 2-0:1.0: 6 ports detected [ 55.770217][ T5939] usb 2-1: new high-speed USB device number 11 using ehci-pci [ 55.848675][ T6336] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 56.138637][ T39] audit: type=1800 audit(1735407902.671:2): pid=6337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.66" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 56.164607][ T5939] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 56.167356][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 56.169715][ T5939] usb 2-1: Product: QEMU USB Tablet [ 56.171728][ T5939] usb 2-1: Manufacturer: QEMU [ 56.173127][ T5939] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 56.188806][ T5939] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.000A/input/input15 [ 56.194278][ T5939] hid-generic 0003:0627:0001.000A: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 56.803569][ T6347] netlink: 'syz.3.69': attribute type 4 has an invalid length. [ 56.812845][ T6347] netlink: 'syz.3.69': attribute type 4 has an invalid length. [ 57.996642][ T6361] pim6reg: entered allmulticast mode [ 58.003530][ T6361] process 'syz.3.73' launched './file1' with NULL argv: empty string added [ 58.035603][ T6361] No control pipe specified [ 58.039392][ T6361] No control pipe specified [ 58.212093][ T6371] usb 2-1: USB disconnect, device number 11 [ 58.411205][ T6373] hub 2-0:1.0: USB hub found [ 58.417451][ T6373] hub 2-0:1.0: 6 ports detected [ 58.477687][ T6386] hub 2-0:1.0: USB hub found [ 58.479595][ T6386] hub 2-0:1.0: 6 ports detected [ 58.509951][ T6387] hub 2-0:1.0: USB hub found [ 58.512157][ T6387] hub 2-0:1.0: 6 ports detected [ 58.670563][ T6087] usb 2-1: new high-speed USB device number 12 using ehci-pci [ 58.844223][ T6087] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 58.847596][ T6087] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 58.850385][ T6087] usb 2-1: Product: QEMU USB Tablet [ 58.852333][ T6087] usb 2-1: Manufacturer: QEMU [ 58.854369][ T6087] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 58.876687][ T6087] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.000B/input/input16 [ 58.954009][ T6087] hid-generic 0003:0627:0001.000B: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 60.276835][ T6397] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 60.365674][ T6399] warning: `syz.0.81' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 60.382301][ T6399] binder_alloc: 6398: pid 6398 spamming oneway? 1 buffers allocated for a total size of 4096 [ 60.411202][ T6401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.82'. [ 60.416041][ T6401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.82'. [ 60.418535][ T6401] bridge_slave_1: left allmulticast mode [ 60.421531][ T6401] bridge_slave_1: left promiscuous mode [ 60.425348][ T6401] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.426024][ T6403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.83'. [ 60.433339][ T6401] bridge_slave_0: left allmulticast mode [ 60.433632][ T6403] netlink: 104 bytes leftover after parsing attributes in process `syz.0.83'. [ 60.434966][ T6401] bridge_slave_0: left promiscuous mode [ 60.437452][ T6403] netlink: 104 bytes leftover after parsing attributes in process `syz.0.83'. [ 60.439093][ T6401] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.771270][ T6418] usb 2-1: USB disconnect, device number 12 [ 60.793736][ T6418] hub 2-0:1.0: USB hub found [ 60.795213][ T6418] hub 2-0:1.0: 6 ports detected [ 60.970343][ T5980] usb 2-1: new high-speed USB device number 13 using ehci-pci [ 61.054453][ T6424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.84'. [ 61.184485][ T5980] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 61.188075][ T5980] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 61.192822][ T5980] usb 2-1: Product: QEMU USB Tablet [ 61.195036][ T5980] usb 2-1: Manufacturer: QEMU [ 61.196993][ T5980] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 61.219338][ T5980] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.000C/input/input17 [ 61.284421][ T5980] hid-generic 0003:0627:0001.000C: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 62.492844][ T6448] netlink: 80 bytes leftover after parsing attributes in process `syz.1.95'. [ 62.932923][ T6450] No control pipe specified [ 63.092257][ T6450] /dev/sr0: Can't open blockdev [ 63.213946][ T6451] /dev/sr0: Can't open blockdev [ 63.411194][ T6469] netlink: 28 bytes leftover after parsing attributes in process `syz.2.101'. [ 63.719862][ T6475] netlink: 'syz.0.103': attribute type 39 has an invalid length. [ 64.047251][ T6483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.063380][ T6483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.068553][ T6483] netlink: 'syz.3.106': attribute type 10 has an invalid length. [ 64.072872][ T6483] syz_tun: entered promiscuous mode [ 64.077429][ T6483] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 64.450829][ T6494] usb 2-1: USB disconnect, device number 13 [ 64.475234][ T6494] hub 2-0:1.0: USB hub found [ 64.477705][ T6494] hub 2-0:1.0: 6 ports detected [ 64.530296][ T39] audit: type=1800 audit(1735407911.061:3): pid=6487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.107" name="bus" dev="overlay" ino=162 res=0 errno=0 [ 64.629189][ T6503] fuse: Unknown parameter 'grou00000000000000000000' [ 64.660411][ T35] usb 2-1: new high-speed USB device number 14 using ehci-pci [ 64.845511][ T35] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 64.849186][ T35] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 64.852971][ T35] usb 2-1: Product: QEMU USB Tablet [ 64.855249][ T35] usb 2-1: Manufacturer: QEMU [ 64.857299][ T35] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 64.976382][ T35] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.000D/input/input18 [ 65.056167][ T35] hid-generic 0003:0627:0001.000D: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 65.909569][ T6533] fuse: Unknown parameter 'group_i00000000000000000000' [ 65.914594][ T6530] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 66.220188][ T6145] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.380265][ T6145] usb 5-1: Using ep0 maxpacket: 8 [ 66.385200][ T6145] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 66.389649][ T6145] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 66.393951][ T6145] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 66.397899][ T6145] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 66.403241][ T6145] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 66.406977][ T6145] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.621516][ T6145] usb 5-1: GET_CAPABILITIES returned 0 [ 66.628138][ T6145] usbtmc 5-1:16.0: can't read capabilities [ 66.823872][ T6087] usb 5-1: USB disconnect, device number 2 [ 66.945681][ T6546] ax25_connect(): syz.1.122 uses autobind, please contact jreuter@yaina.de [ 67.411638][ T5937] Bluetooth: hci0: unexpected cc 0x203e length: 2 > 1 [ 67.970341][ T5937] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 67.973021][ T5937] Bluetooth: hci1: Injecting HCI hardware error event [ 67.976090][ T5937] Bluetooth: hci1: hardware error 0x00 [ 68.011356][ T6561] overlayfs: failed to resolve './file1': -2 [ 68.368568][ T6565] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.655524][ T6583] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 69.150427][ T6590] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 69.155539][ T6589] binder: 6587:6589 ioctl c0306201 0 returned -14 [ 69.452339][ T6599] relay: one or more items not logged [item size (56) > sub-buffer size (42)] [ 69.530325][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 69.692223][ T9] usb 8-1: config 255 has too many interfaces: 240, using maximum allowed: 32 [ 69.698552][ T9] usb 8-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 69.702765][ T9] usb 8-1: config 255 has 0 interfaces, different from the descriptor's value: 240 [ 69.831411][ T6609] ax25_connect(): syz.0.138 uses autobind, please contact jreuter@yaina.de [ 70.041398][ T5937] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 70.192307][ T9] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 70.195028][ T9] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 70.197444][ T9] usb 8-1: Manufacturer: syz [ 70.472247][ T9] usb 8-1: USB disconnect, device number 2 [ 70.567648][ T6614] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 70.572769][ T6614] netlink: 80 bytes leftover after parsing attributes in process `syz.2.141'. [ 70.758370][ T1412] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.822754][ T1412] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.837552][ T6620] ax25_connect(): syz.0.140 uses autobind, please contact jreuter@yaina.de [ 71.473368][ T5937] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 71.475840][ T5937] Bluetooth: hci0: Injecting HCI hardware error event [ 71.478867][ T66] Bluetooth: hci0: hardware error 0x00 [ 71.608367][ T6648] syzkaller0: entered promiscuous mode [ 71.613804][ T6648] syzkaller0: entered allmulticast mode [ 71.892346][ T6654] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 71.892346][ T6654] program syz.1.148 not setting count and/or reply_len properly [ 71.965800][ T6658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.153'. [ 71.966050][ T6659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.153'. [ 72.747079][ T6658] bridge_slave_1: left allmulticast mode [ 72.749323][ T6658] bridge_slave_1: left promiscuous mode [ 72.751801][ T6658] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.756049][ T6658] bridge_slave_0: left allmulticast mode [ 72.758246][ T6658] bridge_slave_0: left promiscuous mode [ 72.761162][ T6658] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.128896][ T6675] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 73.494084][ T6686] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 73.555727][ T66] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 74.168258][ T6726] openvswitch: netlink: Missing valid actions attribute. [ 74.170500][ T6726] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 74.549366][ T6737] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 75.555395][ T6762] Zero length message leads to an empty skb [ 75.873737][ T63] cfg80211: failed to load regulatory.db [ 77.409886][ T6796] netlink: 44 bytes leftover after parsing attributes in process `syz.1.186'. [ 78.356270][ T6811] usb 2-1: USB disconnect, device number 14 [ 78.370449][ T6811] hub 2-0:1.0: USB hub found [ 78.372146][ T6811] hub 2-0:1.0: 6 ports detected [ 78.550311][ T25] usb 2-1: new high-speed USB device number 15 using ehci-pci [ 78.735872][ T25] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 78.738832][ T25] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 78.741248][ T25] usb 2-1: Product: QEMU USB Tablet [ 78.742981][ T25] usb 2-1: Manufacturer: QEMU [ 78.744404][ T25] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 78.774750][ T25] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.000E/input/input19 [ 78.891714][ T25] hid-generic 0003:0627:0001.000E: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 79.184585][ T6839] usb 2-1: USB disconnect, device number 15 [ 79.324768][ T6841] hub 2-0:1.0: USB hub found [ 79.324937][ T6841] hub 2-0:1.0: 6 ports detected [ 79.615270][ T9] usb 2-1: new high-speed USB device number 16 using ehci-pci [ 79.809260][ T9] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 79.809340][ T9] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 79.809360][ T9] usb 2-1: Product: QEMU USB Tablet [ 79.809428][ T9] usb 2-1: Manufacturer: QEMU [ 79.809447][ T9] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 79.866701][ T9] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.000F/input/input20 [ 79.996521][ T9] hid-generic 0003:0627:0001.000F: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 80.876163][ T6853] wireguard0: entered promiscuous mode [ 80.876287][ T6853] wireguard0: entered allmulticast mode [ 80.916225][ T6855] fuse: Unknown parameter 'f' [ 81.068125][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.202'. [ 82.459274][ T6886] block device autoloading is deprecated and will be removed. [ 82.868742][ T6900] siw: device registration error -23 [ 83.017473][ T6905] FAULT_INJECTION: forcing a failure. [ 83.017473][ T6905] name failslab, interval 1, probability 0, space 0, times 1 [ 83.022822][ T6905] CPU: 1 UID: 0 PID: 6905 Comm: syz.2.212 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0 [ 83.025939][ T6905] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.029311][ T6905] Call Trace: [ 83.030685][ T6905] [ 83.031890][ T6905] dump_stack_lvl+0x16c/0x1f0 [ 83.033772][ T6905] should_fail_ex+0x497/0x5b0 [ 83.035236][ T6905] ? fs_reclaim_acquire+0xae/0x150 [ 83.036745][ T6905] should_failslab+0xc2/0x120 [ 83.038122][ T6905] __kmalloc_cache_noprof+0x68/0x420 [ 83.039749][ T6905] ? kasan_save_track+0x14/0x30 [ 83.041441][ T6905] snd_mixer_oss_get_volume1_sw.constprop.0.isra.0+0xd4/0x480 [ 83.043788][ T6905] snd_mixer_oss_get_recsrc1_sw+0x105/0x1d0 [ 83.045505][ T6905] ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10 [ 83.047351][ T6905] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 83.049359][ T6905] snd_mixer_oss_ioctl1+0x15b8/0x1a90 [ 83.050998][ T6905] ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10 [ 83.052917][ T6905] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 83.054663][ T6905] ? __pfx_lock_release+0x10/0x10 [ 83.056148][ T6905] ? trace_lock_acquire+0x14e/0x1f0 [ 83.057756][ T6905] ? __fget_files+0x206/0x3a0 [ 83.059443][ T6905] snd_mixer_oss_ioctl_compat+0x43/0x70 [ 83.061666][ T6905] ? __pfx_snd_mixer_oss_ioctl_compat+0x10/0x10 [ 83.063989][ T6905] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 83.065538][ T6905] __do_fast_syscall_32+0x73/0x120 [ 83.067024][ T6905] do_fast_syscall_32+0x32/0x80 [ 83.068464][ T6905] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 83.070348][ T6905] RIP: 0023:0xf7f32579 [ 83.071592][ T6905] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 83.077356][ T6905] RSP: 002b:00000000f508655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 83.080098][ T6905] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080044dff [ 83.082476][ T6905] RDX: 0000000020000540 RSI: 0000000000000000 RDI: 0000000000000000 [ 83.084842][ T6905] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 83.087197][ T6905] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 83.089929][ T6905] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 83.093030][ T6905] [ 84.720824][ T6954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.223'. [ 84.763661][ T6954] netlink: 36 bytes leftover after parsing attributes in process `syz.2.223'. [ 85.122649][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.125397][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.128953][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.132410][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.135397][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.138332][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.142683][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.145541][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.147884][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.153673][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.156631][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.159554][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.162997][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.165934][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.168791][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.171875][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.174780][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.177866][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.180895][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.183810][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.186722][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.189681][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.192523][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.195178][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.198081][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.201740][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.204742][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.207694][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.210521][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.213906][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.216762][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.219554][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.222534][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.225378][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.227986][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.230870][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.233712][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.236502][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.239028][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.241176][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.243502][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.246308][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.249171][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 85.256767][ T25] hid-generic 0000:0000:0000.0010: hidraw1: HID ve.00 Device [syz0] on syz0 [ 85.309114][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.230'. [ 85.343282][ T6978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.231'. [ 85.420260][ T6982] fuse: Unknown parameter '0x0000000000000004' [ 85.681730][ T6991] binder: BINDER_SET_CONTEXT_MGR already set [ 85.684618][ T6991] binder: 6983:6991 ioctl 4018620d 200002c0 returned -16 [ 85.688664][ T6991] netlink: 16 bytes leftover after parsing attributes in process `syz.2.234'. [ 86.272173][ T7000] 9pnet_fd: Insufficient options for proto=fd [ 86.338954][ T7005] overlayfs: failed to clone lowerpath [ 86.697328][ T7016] netlink: 40 bytes leftover after parsing attributes in process `syz.1.239'. [ 86.923580][ T7018] FAULT_INJECTION: forcing a failure. [ 86.923580][ T7018] name failslab, interval 1, probability 0, space 0, times 0 [ 86.927869][ T7018] CPU: 2 UID: 0 PID: 7018 Comm: syz.3.241 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0 [ 86.931474][ T7018] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.935133][ T7018] Call Trace: [ 86.936293][ T7018] [ 86.937328][ T7018] dump_stack_lvl+0x16c/0x1f0 [ 86.938965][ T7018] should_fail_ex+0x497/0x5b0 [ 86.940627][ T7018] ? fs_reclaim_acquire+0xae/0x150 [ 86.942462][ T7018] should_failslab+0xc2/0x120 [ 86.944153][ T7018] __kmalloc_noprof+0xce/0x4f0 [ 86.945900][ T7018] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 86.947904][ T7018] ? tomoyo_realpath_from_path+0xbf/0x710 [ 86.949953][ T7018] tomoyo_realpath_from_path+0xbf/0x710 [ 86.951910][ T7018] ? tomoyo_path_number_perm+0x235/0x5b0 [ 86.953966][ T7018] tomoyo_path_number_perm+0x248/0x5b0 [ 86.955893][ T7018] ? tomoyo_path_number_perm+0x235/0x5b0 [ 86.957842][ T7018] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 86.960046][ T7018] ? __pfx_lock_release+0x10/0x10 [ 86.961840][ T7018] ? trace_lock_acquire+0x14e/0x1f0 [ 86.963670][ T7018] ? lock_acquire+0x2f/0xb0 [ 86.965266][ T7018] ? __fget_files+0x40/0x3a0 [ 86.966847][ T7018] ? __fget_files+0x206/0x3a0 [ 86.968528][ T7018] security_file_ioctl_compat+0x9b/0x240 [ 86.970532][ T7018] __do_compat_sys_ioctl+0x4e/0x2c0 [ 86.972414][ T7018] __do_fast_syscall_32+0x73/0x120 [ 86.974285][ T7018] do_fast_syscall_32+0x32/0x80 [ 86.976007][ T7018] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 86.978269][ T7018] RIP: 0023:0xf7fb3579 [ 86.979612][ T7018] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 86.986387][ T7018] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 86.989387][ T7018] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000c048aeca [ 86.992127][ T7018] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 86.994899][ T7018] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 86.997710][ T7018] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 87.000518][ T7018] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 87.003325][ T7018] [ 87.007640][ T7018] ERROR: Out of memory at tomoyo_realpath_from_path. [ 87.114536][ T7024] syzkaller1: entered promiscuous mode [ 87.116376][ T7024] syzkaller1: entered allmulticast mode [ 87.468539][ T7040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.247'. [ 87.774457][ T7054] fuse: Bad value for 'fd' [ 87.863114][ T7055] binder: 7050:7055 ioctl c0306201 0 returned -14 [ 88.428106][ T7067] trusted_key: encrypted_key: key user:syz not found [ 90.491349][ T39] audit: type=1326 audit(1735407937.031:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.3.266" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 90.502838][ T39] audit: type=1326 audit(1735407937.031:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.3.266" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 90.511666][ T39] audit: type=1326 audit(1735407937.051:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.3.266" exe="/syz-executor" sig=0 arch=40000003 syscall=234 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 90.519276][ T39] audit: type=1326 audit(1735407937.051:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.3.266" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 90.525986][ T39] audit: type=1326 audit(1735407937.051:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.3.266" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 90.532614][ T39] audit: type=1326 audit(1735407937.051:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.3.266" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 90.550178][ T39] audit: type=1326 audit(1735407937.051:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.3.266" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 90.557591][ T39] audit: type=1326 audit(1735407937.051:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.3.266" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 90.564085][ T39] audit: type=1326 audit(1735407937.051:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.3.266" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 90.570501][ T39] audit: type=1326 audit(1735407937.051:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.3.266" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 91.852195][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.271'. [ 91.859832][ T7139] FAULT_INJECTION: forcing a failure. [ 91.859832][ T7139] name failslab, interval 1, probability 0, space 0, times 0 [ 91.862481][ T7131] netlink: 244 bytes leftover after parsing attributes in process `syz.0.271'. [ 91.868015][ T7139] CPU: 3 UID: 0 PID: 7139 Comm: syz.3.270 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0 [ 91.872111][ T7139] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.876337][ T7139] Call Trace: [ 91.877784][ T7139] [ 91.878942][ T7139] dump_stack_lvl+0x16c/0x1f0 [ 91.880821][ T7139] should_fail_ex+0x497/0x5b0 [ 91.882639][ T7139] ? fs_reclaim_acquire+0xae/0x150 [ 91.884659][ T7139] should_failslab+0xc2/0x120 [ 91.886446][ T7139] __kmalloc_noprof+0xce/0x4f0 [ 91.888317][ T7139] ? strset_prepare_data+0x60f/0xb70 [ 91.890376][ T7139] strset_prepare_data+0x60f/0xb70 [ 91.892361][ T7139] ethnl_default_dumpit+0x650/0xd50 [ 91.894436][ T7139] genl_dumpit+0x122/0x230 [ 91.896162][ T7139] netlink_dump+0x53c/0xd00 [ 91.897951][ T7139] ? __pfx_netlink_dump+0x10/0x10 [ 91.899910][ T7139] ? __check_object_size+0x31/0x710 [ 91.901967][ T7139] ? skb_recv_datagram+0x89/0xc0 [ 91.903909][ T7139] ? rcu_is_watching+0x12/0xc0 [ 91.905817][ T7139] netlink_recvmsg+0xa0d/0xf30 [ 91.907681][ T7139] ? __pfx_netlink_recvmsg+0x10/0x10 [ 91.909758][ T7139] ? find_held_lock+0x2d/0x110 [ 91.911657][ T7139] ? __might_fault+0x13b/0x190 [ 91.913618][ T7139] ? __pfx_lock_release+0x10/0x10 [ 91.915594][ T7139] ____sys_recvmsg+0x5f8/0x6b0 [ 91.917474][ T7139] ? __pfx_____sys_recvmsg+0x10/0x10 [ 91.919569][ T7139] ___sys_recvmsg+0x115/0x1a0 [ 91.921483][ T7139] ? __pfx____sys_recvmsg+0x10/0x10 [ 91.923529][ T7139] ? __fget_files+0x1fc/0x3a0 [ 91.925478][ T7139] ? trace_lock_acquire+0x14e/0x1f0 [ 91.927424][ T7139] ? __fget_files+0x206/0x3a0 [ 91.929154][ T7139] ? __pfx___might_resched+0x10/0x10 [ 91.931235][ T7139] do_recvmmsg+0x55d/0x740 [ 91.933021][ T7139] ? __pfx_do_recvmmsg+0x10/0x10 [ 91.934969][ T7139] ? vfs_write+0x306/0x1150 [ 91.936790][ T7139] ? __fget_files+0x206/0x3a0 [ 91.938644][ T7139] __sys_recvmmsg+0x21e/0x280 [ 91.940533][ T7139] ? __pfx___sys_recvmmsg+0x10/0x10 [ 91.942573][ T7139] ? __pfx_ksys_write+0x10/0x10 [ 91.944503][ T7139] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 91.946922][ T7139] ? lockdep_hardirqs_on+0x7c/0x110 [ 91.948934][ T7139] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 91.951424][ T7139] __do_fast_syscall_32+0x73/0x120 [ 91.953461][ T7139] do_fast_syscall_32+0x32/0x80 [ 91.955375][ T7139] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 91.957857][ T7139] RIP: 0023:0xf7fb3579 [ 91.959467][ T7139] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 91.966899][ T7139] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 91.970112][ T7139] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020004d80 [ 91.973456][ T7139] RDX: 0000000000000493 RSI: 000000000000000a RDI: 0000000000000000 [ 91.976457][ T7139] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 91.979550][ T7139] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 91.982696][ T7139] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 91.985791][ T7139] [ 91.987140][ C3] vkms_vblank_simulate: vblank timer overrun [ 93.073515][ T7162] infiniband syz0: set active [ 93.075199][ T7162] infiniband syz0: added bond0 [ 93.089599][ T7162] RDS/IB: syz0: added [ 93.091225][ T7162] smc: adding ib device syz0 with port count 1 [ 93.131484][ T7162] smc: ib device syz0 port 1 has pnetid [ 93.153861][ T7165] tmpfs: Unknown parameter 'mod' [ 93.157914][ T7167] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 93.574166][ T7183] netlink: 72 bytes leftover after parsing attributes in process `syz.3.285'. [ 95.211788][ T7201] usb 2-1: USB disconnect, device number 16 [ 95.325680][ T7203] mmap: syz.0.290 (7203): VmData 37507072 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 95.399219][ T7202] hub 2-0:1.0: USB hub found [ 95.406719][ T7202] hub 2-0:1.0: 6 ports detected [ 95.628291][ T30] usb 2-1: new high-speed USB device number 17 using ehci-pci [ 95.914276][ T39] kauditd_printk_skb: 9 callbacks suppressed [ 95.914307][ T39] audit: type=1800 audit(1735407942.536:23): pid=7215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.292" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 96.199606][ T30] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 96.202392][ T30] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 96.205345][ T30] usb 2-1: Product: QEMU USB Tablet [ 96.207712][ T30] usb 2-1: Manufacturer: QEMU [ 96.209224][ T30] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 96.232839][ T30] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0011/input/input21 [ 96.292813][ T30] hid-generic 0003:0627:0001.0011: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 97.047358][ T7230] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 97.356915][ T7233] netlink: 188 bytes leftover after parsing attributes in process `syz.1.296'. [ 97.360398][ T7233] netlink: 'syz.1.296': attribute type 1 has an invalid length. [ 97.378464][ T7235] netlink: 28 bytes leftover after parsing attributes in process `syz.3.297'. [ 97.381252][ T7235] netlink: 28 bytes leftover after parsing attributes in process `syz.3.297'. [ 97.417062][ T7235] dummy0: entered promiscuous mode [ 97.419060][ T7235] batadv_slave_1: entered promiscuous mode [ 98.406224][ T7254] fuse: Unknown parameter 'use00000000000000000000' [ 98.416606][ T7256] netlink: 16 bytes leftover after parsing attributes in process `syz.2.304'. [ 99.310075][ T7282] fuse: Unknown parameter 'use00000000000000000000' [ 99.356464][ T7285] fuse: Bad value for 'fd' [ 100.686840][ T7307] fuse: Unknown parameter 'use00000000000000000000' [ 100.722860][ T7313] Invalid source name [ 100.724125][ T7313] UBIFS error (pid: 7313): cannot open "/dev/sg0", error -22 [ 100.726564][ T7313] binder: 7312:7313 ioctl c0306201 200003c0 returned -14 [ 100.828418][ T7316] FAULT_INJECTION: forcing a failure. [ 100.828418][ T7316] name failslab, interval 1, probability 0, space 0, times 0 [ 100.832222][ T7316] CPU: 1 UID: 0 PID: 7316 Comm: syz.3.325 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0 [ 100.835425][ T7316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 100.838472][ T7316] Call Trace: [ 100.839430][ T7316] [ 100.840272][ T7316] dump_stack_lvl+0x16c/0x1f0 [ 100.841611][ T7316] should_fail_ex+0x497/0x5b0 [ 100.843007][ T7316] should_failslab+0xc2/0x120 [ 100.844381][ T7316] __kmalloc_cache_noprof+0x68/0x420 [ 100.845921][ T7316] ? __sctp_v6_cmp_addr+0x206/0x530 [ 100.847440][ T7316] sctp_add_bind_addr+0x9d/0x3e0 [ 100.848930][ T7316] sctp_copy_local_addr_list+0x39e/0x5a0 [ 100.850570][ T7316] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 100.852352][ T7316] ? sctp_auth_asoc_copy_shkeys+0x2a7/0x360 [ 100.854201][ T7316] ? sctp_bind_addr_copy+0xe0/0x530 [ 100.855697][ T7316] sctp_bind_addr_copy+0xe0/0x530 [ 100.857171][ T7316] sctp_connect_new_asoc+0x1d8/0x790 [ 100.858705][ T7316] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 100.860454][ T7316] ? mark_held_locks+0x9f/0xe0 [ 100.861865][ T7316] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 100.863494][ T7316] sctp_sendmsg+0x162a/0x1f10 [ 100.864875][ T7316] ? __pfx___lock_acquire+0x10/0x10 [ 100.866373][ T7316] ? __pfx_sctp_sendmsg+0x10/0x10 [ 100.867841][ T7316] ? __pfx_aa_sk_perm+0x10/0x10 [ 100.869265][ T7316] ? __pfx_sctp_sendmsg+0x10/0x10 [ 100.870728][ T7316] inet_sendmsg+0x119/0x140 [ 100.872045][ T7316] __sys_sendto+0x42a/0x4f0 [ 100.873392][ T7316] ? __pfx___sys_sendto+0x10/0x10 [ 100.874861][ T7316] ? ksys_write+0x1ba/0x250 [ 100.876183][ T7316] ? __pfx_ksys_write+0x10/0x10 [ 100.877602][ T7316] __ia32_sys_sendto+0xdd/0x1b0 [ 100.878996][ T7316] ? lockdep_hardirqs_on+0x7c/0x110 [ 100.880469][ T7316] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 100.882307][ T7316] __do_fast_syscall_32+0x73/0x120 [ 100.883725][ T7316] do_fast_syscall_32+0x32/0x80 [ 100.885295][ T7316] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.887124][ T7316] RIP: 0023:0xf7fb3579 [ 100.888306][ T7316] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 100.893850][ T7316] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 100.896237][ T7316] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040 [ 100.898522][ T7316] RDX: 0000000000000001 RSI: 0000000000000a00 RDI: 0000000020000100 [ 100.900810][ T7316] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 100.902976][ T7316] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 100.905241][ T7316] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.907504][ T7316] [ 101.230899][ T7334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.332'. [ 101.271702][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.333'. [ 101.274937][ T7336] netlink: 28 bytes leftover after parsing attributes in process `syz.1.333'. [ 101.280081][ T7336] netlink: 40 bytes leftover after parsing attributes in process `syz.1.333'. [ 101.283793][ T7339] 9pnet_fd: Insufficient options for proto=fd [ 101.474042][ T7348] fuse: Bad value for 'fd' [ 101.515834][ T7350] xt_policy: output policy not valid in PREROUTING and INPUT [ 102.057714][ T7372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.342'. [ 102.508116][ T7363] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 103.024614][ T7396] FAULT_INJECTION: forcing a failure. [ 103.024614][ T7396] name failslab, interval 1, probability 0, space 0, times 0 [ 103.028967][ T7396] CPU: 1 UID: 0 PID: 7396 Comm: syz.2.350 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0 [ 103.032548][ T7396] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 103.036503][ T7396] Call Trace: [ 103.037715][ T7396] [ 103.038639][ T7396] dump_stack_lvl+0x16c/0x1f0 [ 103.040167][ T7396] should_fail_ex+0x497/0x5b0 [ 103.041982][ T7396] ? fs_reclaim_acquire+0xae/0x150 [ 103.043757][ T7396] should_failslab+0xc2/0x120 [ 103.045180][ T7396] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 103.046934][ T7396] ? __alloc_skb+0x2b3/0x380 [ 103.048297][ T7396] __alloc_skb+0x2b3/0x380 [ 103.049726][ T7396] ? __pfx___alloc_skb+0x10/0x10 [ 103.051332][ T7396] ? lock_acquire+0x2f/0xb0 [ 103.053180][ T7396] netlink_alloc_large_skb+0x69/0x130 [ 103.055330][ T7396] netlink_sendmsg+0x689/0xd70 [ 103.056865][ T7396] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.058379][ T7396] ____sys_sendmsg+0x9ae/0xb40 [ 103.059796][ T7396] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.061347][ T7396] ? get_compat_msghdr+0x11b/0x170 [ 103.062831][ T7396] ___sys_sendmsg+0x135/0x1e0 [ 103.064302][ T7396] ? __pfx____sys_sendmsg+0x10/0x10 [ 103.065828][ T7396] ? __pfx_lock_release+0x10/0x10 [ 103.067365][ T7396] ? trace_lock_acquire+0x14e/0x1f0 [ 103.068876][ T7396] ? __fget_files+0x206/0x3a0 [ 103.070265][ T7396] __sys_sendmsg+0x16e/0x220 [ 103.071628][ T7396] ? __pfx___sys_sendmsg+0x10/0x10 [ 103.073143][ T7396] __do_fast_syscall_32+0x73/0x120 [ 103.074613][ T7396] do_fast_syscall_32+0x32/0x80 [ 103.076015][ T7396] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.077827][ T7396] RIP: 0023:0xf7f32579 [ 103.078995][ T7396] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 103.085101][ T7396] RSP: 002b:00000000f508655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 103.087557][ T7396] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000280 [ 103.089876][ T7396] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.092232][ T7396] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.094651][ T7396] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 103.096981][ T7396] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.099346][ T7396] [ 104.414929][ T7420] syzkaller1: entered promiscuous mode [ 104.417172][ T7420] syzkaller1: entered allmulticast mode [ 104.875417][ T7437] ISOFS: Unable to identify CD-ROM format. [ 106.105483][ T7463] netlink: 96 bytes leftover after parsing attributes in process `syz.1.371'. [ 106.152191][ T7464] evm: overlay not supported [ 106.323972][ T7466] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 106.328029][ T7466] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.373327][ T7472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.373'. [ 106.414053][ T7474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.374'. [ 106.457361][ T7474] netlink: 20 bytes leftover after parsing attributes in process `syz.1.374'. [ 106.460604][ T7474] nbd: must specify at least one socket [ 108.361215][ T7509] block nbd0: shutting down sockets [ 108.407941][ T7509] nbd: must specify a device to reconfigure [ 108.444917][ T7516] nbd0: detected capacity change from 0 to 18 [ 108.459359][ T6086] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.462595][ T6086] Buffer I/O error on dev nbd0, logical block 0, async page read [ 108.468944][ T6086] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.472114][ T6086] Buffer I/O error on dev nbd0, logical block 0, async page read [ 108.475166][ T6086] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.477854][ T6086] Buffer I/O error on dev nbd0, logical block 0, async page read [ 108.480286][ T6086] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.483081][ T6086] Buffer I/O error on dev nbd0, logical block 0, async page read [ 108.485517][ T6086] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.488228][ T6086] Buffer I/O error on dev nbd0, logical block 0, async page read [ 108.491577][ T6086] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.494818][ T6086] Buffer I/O error on dev nbd0, logical block 0, async page read [ 108.497075][ T6086] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.499541][ T6086] Buffer I/O error on dev nbd0, logical block 0, async page read [ 108.501774][ T6086] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.505897][ T6086] Buffer I/O error on dev nbd0, logical block 0, async page read [ 108.508380][ T6086] ldm_validate_partition_table(): Disk read failed. [ 108.510497][ T6086] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.513045][ T6086] Buffer I/O error on dev nbd0, logical block 0, async page read [ 108.516280][ T6086] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.518888][ T6086] Buffer I/O error on dev nbd0, logical block 0, async page read [ 108.521231][ T6086] Dev nbd0: unable to read RDB block 0 [ 108.522899][ T6086] nbd0: unable to read partition table [ 108.525851][ T6086] nbd0: partition table beyond EOD, truncated [ 108.546789][ T6086] ldm_validate_partition_table(): Disk read failed. [ 108.549851][ T6086] Dev nbd0: unable to read RDB block 0 [ 108.552396][ T6086] nbd0: unable to read partition table [ 108.554457][ T6086] nbd0: partition table beyond EOD, truncated [ 108.751516][ T7521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 108.753841][ T7521] IPv6: NLM_F_CREATE should be set when creating new route [ 108.755980][ T7521] IPv6: NLM_F_CREATE should be set when creating new route [ 108.787159][ T7524] netlink: 56 bytes leftover after parsing attributes in process `syz.0.388'. [ 108.843922][ T7525] netlink: 'syz.0.388': attribute type 1 has an invalid length. [ 110.348947][ T7562] sch_tbf: peakrate 1024 is lower than or equals to rate 7600496105983292809 ! [ 110.604037][ T7578] kernel profiling enabled (shift: 63) [ 110.605710][ T7578] profiling shift: 63 too large [ 111.501301][ T7601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.400'. [ 111.541786][ T7598] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 112.271978][ T7607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.285900][ T7607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.291390][ T7607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.297963][ T7607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.312789][ T7607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.619191][ T7617] random: crng reseeded on system resumption [ 112.699294][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.406'. [ 112.705023][ T7622] IPVS: Error joining to the multicast group [ 112.970687][ T7636] usb 2-1: USB disconnect, device number 17 [ 112.997202][ T7636] hub 2-0:1.0: USB hub found [ 112.998697][ T7636] hub 2-0:1.0: 6 ports detected [ 113.172039][ T25] usb 2-1: new high-speed USB device number 18 using ehci-pci [ 113.519656][ T25] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 113.523539][ T25] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 113.526925][ T25] usb 2-1: Product: QEMU USB Tablet [ 113.529168][ T25] usb 2-1: Manufacturer: QEMU [ 113.531088][ T25] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 113.557889][ T25] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0012/input/input22 [ 113.639166][ T25] hid-generic 0003:0627:0001.0012: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 114.093346][ T7651] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 286, id = 0 [ 114.096852][ T7652] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 286, id = 1 [ 114.099745][ T7653] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 286, id = 2 [ 114.100931][ T7654] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 286, id = 3 [ 114.138119][ T7655] binder: 7648:7655 ioctl c0306201 20000080 returned -14 [ 114.231726][ T7656] fuse: Bad value for 'fd' [ 114.636929][ T7644] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 114.641984][ T7644] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 114.650756][ T7644] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 114.656657][ T7644] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 114.659115][ T7644] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 114.663596][ T7644] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 115.185822][ T7687] fuse: Unknown parameter '0x0000000000000003' [ 115.610954][ T39] audit: type=1326 audit(1735408475.401:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7681 comm="syz.0.422" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf714e579 code=0x7fc00000 [ 115.620763][ T63] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 115.802712][ T63] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 115.807301][ T63] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.810420][ T63] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.813709][ T63] usb 8-1: config 0 interface 0 has no altsetting 0 [ 115.818545][ T63] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.821520][ T63] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.825944][ T63] usb 8-1: config 0 interface 0 has no altsetting 0 [ 115.828129][ T7697] netlink: 12 bytes leftover after parsing attributes in process `syz.0.426'. [ 115.836042][ T63] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.839270][ T63] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.842786][ T63] usb 8-1: config 0 interface 0 has no altsetting 0 [ 115.847158][ T63] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.850387][ T63] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.854480][ T63] usb 8-1: config 0 interface 0 has no altsetting 0 [ 115.857523][ T63] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.860129][ T63] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.869030][ T63] usb 8-1: config 0 interface 0 has no altsetting 0 [ 115.876245][ T63] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.879476][ T63] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.883323][ T63] usb 8-1: config 0 interface 0 has no altsetting 0 [ 115.888207][ T63] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.891454][ T63] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.894776][ T63] usb 8-1: config 0 interface 0 has no altsetting 0 [ 115.897980][ T63] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.901756][ T63] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.905567][ T63] usb 8-1: config 0 interface 0 has no altsetting 0 [ 115.910185][ T63] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 115.913347][ T63] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 115.916228][ T63] usb 8-1: Product: syz [ 115.917526][ T63] usb 8-1: Manufacturer: syz [ 115.918865][ T63] usb 8-1: SerialNumber: syz [ 115.927204][ T63] usb 8-1: config 0 descriptor?? [ 115.931362][ T5937] Bluetooth: hci2: command 0x0c1a tx timeout [ 115.937555][ T63] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 116.110534][ T833] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 116.207175][ T7708] syzkaller1: entered promiscuous mode [ 116.208775][ T7708] syzkaller1: entered allmulticast mode [ 116.239508][ C3] usb 8-1: yurex_control_callback - control failed: -71 [ 116.242930][ T63] usb 8-1: USB disconnect, device number 3 [ 116.245456][ T63] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 116.250773][ T833] usb 6-1: device descriptor read/64, error -71 [ 116.377121][ T7713] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 116.490306][ T833] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 116.531974][ T7718] fuse: Unknown parameter '0x0000000000000003' [ 116.620277][ T833] usb 6-1: device descriptor read/64, error -71 [ 116.710008][ T7722] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 116.723606][ T5937] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.731239][ T833] usb usb6-port1: attempt power cycle [ 117.070032][ T833] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 117.091496][ T833] usb 6-1: device descriptor read/8, error -71 [ 117.360213][ T833] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 117.394218][ T833] usb 6-1: device descriptor read/8, error -71 [ 117.500088][ T833] usb usb6-port1: unable to enumerate USB device [ 117.836146][ T7772] usb 2-1: USB disconnect, device number 18 [ 117.887059][ T7772] hub 2-0:1.0: USB hub found [ 117.889065][ T7772] hub 2-0:1.0: 6 ports detected [ 118.009534][ T5937] Bluetooth: hci2: command 0x0c1a tx timeout [ 118.089488][ T6068] usb 2-1: new high-speed USB device number 19 using ehci-pci [ 118.283880][ T6068] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 118.290660][ T6068] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 118.297717][ T6068] usb 2-1: Product: QEMU USB Tablet [ 118.302675][ T6068] usb 2-1: Manufacturer: QEMU [ 118.307147][ T6068] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 118.356584][ T6068] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0013/input/input23 [ 118.665908][ T6068] hid-generic 0003:0627:0001.0013: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 118.799114][ T5937] Bluetooth: hci3: command 0x0c1a tx timeout [ 119.329962][ T7795] FAULT_INJECTION: forcing a failure. [ 119.329962][ T7795] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 119.333844][ T7795] CPU: 3 UID: 0 PID: 7795 Comm: syz.0.444 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0 [ 119.337391][ T7795] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 119.340443][ T7795] Call Trace: [ 119.341551][ T7795] [ 119.342646][ T7795] dump_stack_lvl+0x16c/0x1f0 [ 119.344241][ T7795] should_fail_ex+0x497/0x5b0 [ 119.345819][ T7795] _copy_to_user+0x32/0xd0 [ 119.347091][ T7795] drm_ioctl+0x5a6/0xba0 [ 119.348300][ T7795] ? __pfx_drm_ioctl+0x10/0x10 [ 119.349736][ T7795] drm_compat_ioctl+0x327/0x460 [ 119.351153][ T7795] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 119.352676][ T7795] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 119.354146][ T7795] __do_fast_syscall_32+0x73/0x120 [ 119.355598][ T7795] do_fast_syscall_32+0x32/0x80 [ 119.356990][ T7795] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 119.358801][ T7795] RIP: 0023:0xf714e579 [ 119.359980][ T7795] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 119.365542][ T7795] RSP: 002b:00000000f511f55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 119.367865][ T7795] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000c00c642e [ 119.370112][ T7795] RDX: 0000000020000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 119.372334][ T7795] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 119.374594][ T7795] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 119.376845][ T7795] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 119.379088][ T7795] [ 119.616048][ T39] audit: type=1326 audit(1735408479.423:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="syz.2.446" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x0 [ 120.078560][ T5937] Bluetooth: hci2: command 0x0c1a tx timeout [ 120.346116][ T7816] fuse: Unknown parameter '0x0000000000000003' [ 120.458152][ T7825] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 120.879057][ T5937] Bluetooth: hci3: command 0x0c1a tx timeout [ 121.006581][ T7838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.457'. [ 121.016563][ T7838] netlink: 72 bytes leftover after parsing attributes in process `syz.2.457'. [ 121.140646][ T7844] fuse: Unknown parameter '0x0000000000000003' [ 121.475462][ T7854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.462'. [ 121.912620][ T7864] netlink: 56 bytes leftover after parsing attributes in process `syz.0.464'. [ 121.971566][ T39] audit: type=1326 audit(1735408481.784:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7843 comm="syz.1.458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7fc00000 [ 122.146126][ T7869] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 122.313241][ T7877] fuse: Unknown parameter 'fd0x0000000000000003' [ 122.416398][ T7883] netlink: 60 bytes leftover after parsing attributes in process `syz.2.470'. [ 122.495868][ T7887] ata1.00: invalid cdb length 6 [ 122.692498][ T7892] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 122.694561][ T7892] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 122.697716][ T7892] vhci_hcd vhci_hcd.0: Device attached [ 122.882981][ T39] audit: type=1326 audit(1735408482.695:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7898 comm="syz.3.476" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x0 [ 122.937080][ T5980] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 123.040047][ T7906] random: crng reseeded on system resumption [ 123.066538][ T7906] Restarting kernel threads ... done. [ 123.074056][ T7906] overlayfs: failed to resolve './file0': -2 [ 123.512852][ T7893] vhci_hcd: connection reset by peer [ 123.519771][ T1218] vhci_hcd: stop threads [ 123.522482][ T1218] vhci_hcd: release socket [ 123.526071][ T1218] vhci_hcd: disconnect device [ 123.752665][ T7912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.479'. [ 123.834533][ T7918] fuse: Unknown parameter 'fd0x0000000000000003' [ 125.209217][ T7953] fuse: Unknown parameter 'fd0x0000000000000003' [ 126.314656][ T7990] 9pnet_fd: Insufficient options for proto=fd [ 126.476882][ T7994] input: syz0 as /devices/virtual/input/input24 [ 127.439233][ T8014] FAULT_INJECTION: forcing a failure. [ 127.439233][ T8014] name failslab, interval 1, probability 0, space 0, times 0 [ 127.443887][ T8014] CPU: 0 UID: 0 PID: 8014 Comm: syz.1.507 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0 [ 127.447947][ T8014] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 127.452028][ T8014] Call Trace: [ 127.453318][ T8014] [ 127.454426][ T8014] dump_stack_lvl+0x16c/0x1f0 [ 127.456272][ T8014] should_fail_ex+0x497/0x5b0 [ 127.458127][ T8014] ? fs_reclaim_acquire+0xae/0x150 [ 127.460140][ T8014] should_failslab+0xc2/0x120 [ 127.461987][ T8014] __kmalloc_noprof+0xce/0x4f0 [ 127.463819][ T8014] ? d_absolute_path+0x137/0x1b0 [ 127.465756][ T8014] ? tomoyo_encode2+0x100/0x3e0 [ 127.467654][ T8014] tomoyo_encode2+0x100/0x3e0 [ 127.469506][ T8014] tomoyo_realpath_from_path+0x1a7/0x710 [ 127.471590][ T8014] tomoyo_path_number_perm+0x248/0x5b0 [ 127.473690][ T8014] ? tomoyo_path_number_perm+0x235/0x5b0 [ 127.475864][ T8014] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 127.478215][ T8014] ? __pfx_lock_release+0x10/0x10 [ 127.480187][ T8014] ? trace_lock_acquire+0x14e/0x1f0 [ 127.482223][ T8014] ? lock_acquire+0x2f/0xb0 [ 127.483986][ T8014] ? __fget_files+0x40/0x3a0 [ 127.485746][ T8014] ? __fget_files+0x206/0x3a0 [ 127.487504][ T8014] security_file_ioctl_compat+0x9b/0x240 [ 127.489617][ T8014] __do_compat_sys_ioctl+0x4e/0x2c0 [ 127.491549][ T8014] __do_fast_syscall_32+0x73/0x120 [ 127.493550][ T8014] do_fast_syscall_32+0x32/0x80 [ 127.495435][ T8014] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 127.497903][ T8014] RIP: 0023:0xf7f37579 [ 127.499480][ T8014] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 127.506775][ T8014] RSP: 002b:00000000f508655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 127.509976][ T8014] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c04064aa [ 127.513020][ T8014] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 127.516097][ T8014] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 127.519128][ T8014] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 127.522112][ T8014] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 127.525132][ T8014] [ 127.534826][ T8014] ERROR: Out of memory at tomoyo_realpath_from_path. [ 128.104533][ T5980] vhci_hcd: vhci_device speed not set [ 128.546270][ T8031] usb 2-1: USB disconnect, device number 19 [ 128.714910][ T5977] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 128.731514][ T8028] hub 2-0:1.0: USB hub found [ 128.733023][ T8028] hub 2-0:1.0: 6 ports detected [ 128.886234][ T5977] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 128.888794][ T5977] usb 5-1: config 1 has an invalid descriptor of length 78, skipping remainder of the config [ 128.891902][ T5977] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 128.896379][ T5977] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 128.903885][ T5977] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 173, changing to 11 [ 128.913998][ T5977] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 17911, setting to 1024 [ 128.921621][ T5977] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 128.926393][ T5977] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 128.929305][ T5977] usb 5-1: Product: syz [ 128.931690][ T5977] usb 5-1: Manufacturer: syz [ 129.012135][ T8026] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 129.019798][ T5977] cdc_wdm 5-1:1.0: skipping garbage [ 129.037018][ T5977] cdc_wdm 5-1:1.0: skipping garbage [ 129.043841][ T5977] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 129.045737][ T5977] cdc_wdm 5-1:1.0: Unknown control protocol [ 129.230330][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 129.232389][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 129.234597][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 129.236483][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 129.238461][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 129.240764][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 129.243330][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 129.245941][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 129.248636][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 129.251237][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 129.253247][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 129.255129][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 129.257041][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 129.258915][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 129.260805][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 129.262699][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 129.264692][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 129.266561][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 129.268454][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 129.270331][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 129.452209][ T833] usb 5-1: USB disconnect, device number 3 [ 129.452532][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 129.457274][ T8026] cdc_wdm 5-1:1.0: Tx URB error: -19 [ 129.476647][ T25] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 129.665088][ T25] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 129.670201][ T25] usb 6-1: config 1 has an invalid descriptor of length 78, skipping remainder of the config [ 129.673175][ T25] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 129.687974][ T25] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 129.691260][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 173, changing to 11 [ 129.703634][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 17911, setting to 1024 [ 129.715849][ T25] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 129.718613][ T25] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 129.720923][ T25] usb 6-1: Product: syz [ 129.722141][ T25] usb 6-1: Manufacturer: syz [ 129.729814][ T8046] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 129.732535][ T25] cdc_wdm 6-1:1.0: skipping garbage [ 129.732663][ T6145] usb 2-1: new high-speed USB device number 20 using ehci-pci [ 129.739085][ T25] cdc_wdm 6-1:1.0: skipping garbage [ 129.749071][ T25] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 129.750808][ T25] cdc_wdm 6-1:1.0: Unknown control protocol [ 129.823645][ T5980] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 129.927833][ T6145] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 129.931621][ T6145] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 129.939861][ T8046] FAULT_INJECTION: forcing a failure. [ 129.939861][ T8046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.943987][ T6145] usb 2-1: Product: QEMU USB Tablet [ 129.946146][ T6145] usb 2-1: Manufacturer: QEMU [ 129.947862][ T6145] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 129.953507][ T8046] CPU: 3 UID: 0 PID: 8046 Comm: syz.1.514 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0 [ 129.957551][ T8046] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 129.961197][ T8046] Call Trace: [ 129.961407][ T6145] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0014/input/input25 [ 129.962191][ T8046] [ 129.962197][ T8046] dump_stack_lvl+0x16c/0x1f0 [ 129.969354][ T8046] should_fail_ex+0x497/0x5b0 [ 129.971142][ T8046] _copy_from_user+0x2e/0xd0 [ 129.972901][ T8046] memdup_user+0x71/0xd0 [ 129.974510][ T8046] wdm_write+0x15f/0xef0 [ 129.976111][ T8046] ? __pfx_wdm_write+0x10/0x10 [ 129.977953][ T8046] ? apparmor_file_permission+0x251/0x400 [ 129.980117][ T8046] ? bpf_lsm_file_permission+0x9/0x10 [ 129.982126][ T8046] ? security_file_permission+0x71/0x210 [ 129.984255][ T8046] ? __pfx_wdm_write+0x10/0x10 [ 129.986048][ T8046] vfs_write+0x24c/0x1150 [ 129.987331][ T8046] ? __fget_files+0x1fc/0x3a0 [ 129.988809][ T8046] ? __pfx_lock_release+0x10/0x10 [ 129.990292][ T8046] ? __pfx_vfs_write+0x10/0x10 [ 129.991690][ T8046] ? lock_acquire+0x2f/0xb0 [ 129.993070][ T8046] ? __fget_files+0x40/0x3a0 [ 129.994428][ T8046] ? __fget_files+0x206/0x3a0 [ 129.995677][ T8046] ksys_write+0x12b/0x250 [ 129.996890][ T8046] ? __pfx_ksys_write+0x10/0x10 [ 129.998362][ T8046] ? __bpf_trace_sys_enter+0x80/0xb0 [ 130.000123][ T8046] ? rcu_is_watching+0x12/0xc0 [ 130.001944][ T8046] __do_fast_syscall_32+0x73/0x120 [ 130.003923][ T8046] do_fast_syscall_32+0x32/0x80 [ 130.005779][ T8046] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 130.008162][ T8046] RIP: 0023:0xf7f37579 [ 130.009714][ T8046] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 130.016962][ T8046] RSP: 002b:00000000f508655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 130.020172][ T8046] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 130.023113][ T8046] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 130.026307][ T8046] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 130.029388][ T8046] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 130.032346][ T8046] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 130.035145][ T8046] [ 130.053703][ T6145] hid-generic 0003:0627:0001.0014: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 130.054889][ T9] usb 6-1: USB disconnect, device number 6 [ 130.054927][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 130.961460][ T8079] [U] [ 130.962443][ T8079] [U] [ 130.963290][ T8079] [U] [ 130.964103][ T8079] [U] [ 130.983461][ T8079] [U] [ 130.984320][ T8079] [U] [ 130.985107][ T8079] [U] [ 130.985963][ T8079] [U] [ 131.013309][ T8079] [U] [ 131.014164][ T8079] [U] [ 131.014971][ T8079] [U] [ 131.015776][ T8079] [U] [ 131.031755][ T8079] [U] [ 131.032613][ T8079] [U] [ 131.033429][ T8079] [U] [ 131.034232][ T8079] [U] [ 131.049442][ T8079] [U] [ 131.050285][ T8079] [U] [ 131.051091][ T8079] [U] [ 131.051898][ T8079] [U] [ 131.066843][ T8079] [U] [ 131.067684][ T8079] [U] [ 131.068507][ T8079] [U] [ 131.069297][ T8079] [U] [ 131.083354][ T8079] [U] [ 131.084569][ T8079] [U] [ 131.085704][ T8079] [U] [ 131.086837][ T8079] [U] [ 131.088237][ T8079] [U] [ 131.089403][ T8079] [U] [ 131.090540][ T8079] [U] [ 131.091669][ T8079] [U] [ 131.123226][ T8079] [U] [ 131.124442][ T8079] [U] [ 131.125582][ T8079] [U] [ 131.126720][ T8079] [U] [ 131.130383][ T8079] [U] [ 131.131557][ T8079] [U] [ 131.132731][ T8079] [U] [ 131.133871][ T8079] [U] [ 131.147973][ T8079] [U] [ 131.149194][ T8079] [U] [ 131.150335][ T8079] [U] [ 131.151494][ T8079] [U] [ 131.166469][ T8079] [U] [ 131.167403][ T8079] [U] [ 131.168201][ T8079] [U] [ 131.169015][ T8079] [U] [ 131.182652][ T8079] [U] [ 131.183845][ T8079] [U] [ 131.184980][ T8079] [U] [ 131.186125][ T8079] [U] [ 131.199449][ T8079] [U] [ 131.200299][ T8079] [U] [ 131.201166][ T8079] [U] [ 131.202287][ T8079] [U] [ 131.223826][ T8079] [U] [ 131.224701][ T8079] [U] [ 131.225507][ T8079] [U] [ 131.226309][ T8079] [U] [ 131.262901][ T8079] [U] [ 131.263785][ T8079] [U] [ 131.264601][ T8079] [U] [ 131.265540][ T8079] [U] [ 131.275547][ T8079] [U] [ 131.276578][ T8079] [U] [ 131.277601][ T8079] [U] [ 131.278632][ T8079] [U] [ 131.279735][ T8079] [U] [ 131.280763][ T8079] [U] [ 131.281789][ T8079] [U] [ 131.282849][ T8079] [U] [ 131.335117][ T8079] [U] [ 131.336143][ T8079] [U] [ 131.337176][ T8079] [U] [ 131.338192][ T8079] [U] [ 131.339316][ T8079] [U] [ 131.340347][ T8079] [U] [ 131.341371][ T8079] [U] [ 131.342406][ T8079] [U] [ 131.365757][ T8079] [U] [ 131.366763][ T8079] [U] [ 131.367787][ T8079] [U] [ 131.368815][ T8079] [U] [ 131.369928][ T8079] [U] [ 131.370951][ T8079] [U] [ 131.371965][ T8079] [U] [ 131.373034][ T8079] [U] [ 131.404682][ T8079] [U] [ 131.405723][ T8079] [U] [ 131.406756][ T8079] [U] [ 131.407778][ T8079] [U] [ 131.420393][ T8079] [U] [ 131.421423][ T8079] [U] [ 131.422456][ T8079] [U] [ 131.423504][ T8079] [U] [ 131.445380][ T8079] [U] [ 131.446381][ T8079] [U] [ 131.447415][ T8079] [U] [ 131.448454][ T8079] [U] [ 131.449528][ T8079] [U] [ 131.450518][ T8079] [U] [ 131.451573][ T8079] [U] [ 131.452616][ T8079] [U] [ 131.475712][ T8079] [U] [ 131.476680][ T8079] [U] [ 131.477498][ T8079] [U] [ 131.478316][ T8079] [U] [ 131.479267][ T8079] [U] [ 131.480079][ T8079] [U] [ 131.480933][ T8079] [U] [ 131.481754][ T8079] [U] [ 131.482628][ T8079] [U] [ 131.483477][ T8079] [U] [ 131.484281][ T8079] [U] [ 131.485116][ T8079] [U] [ 131.517119][ T8079] [U] [ 131.517965][ T8079] [U] [ 131.518778][ T8079] [U] [ 131.519553][ T8079] [U] [ 131.520339][ T8079] [U] [ 131.521111][ T8079] [U] [ 131.521914][ T8079] [U] [ 131.522756][ T8079] [U] [ 131.544395][ T8079] [U] [ 131.545227][ T8079] [U] [ 131.546030][ T8079] [U] [ 131.564180][ T8075] [U] [ 131.925357][ T1412] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.535001][ T8098] netlink: 'syz.0.526': attribute type 1 has an invalid length. [ 132.537223][ T8098] netlink: 224 bytes leftover after parsing attributes in process `syz.0.526'. [ 132.693364][ C3] raw-gadget.0 gadget.2: ignoring, device is not running [ 132.710597][ T5980] usb 7-1: device descriptor read/all, error -71 [ 132.947150][ T8104] usb 2-1: USB disconnect, device number 20 [ 133.000990][ T8104] hub 2-0:1.0: USB hub found [ 133.003757][ T8104] hub 2-0:1.0: 6 ports detected [ 133.182265][ T832] usb 2-1: new high-speed USB device number 21 using ehci-pci [ 133.364083][ T832] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 133.371506][ T832] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 133.376404][ T832] usb 2-1: Product: QEMU USB Tablet [ 133.378094][ T832] usb 2-1: Manufacturer: QEMU [ 133.379605][ T832] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 133.408116][ T832] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0015/input/input26 [ 133.489206][ T832] hid-generic 0003:0627:0001.0015: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 134.002204][ T8135] netlink: 28 bytes leftover after parsing attributes in process `syz.3.535'. [ 135.001032][ T5980] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 135.160922][ T5980] usb 6-1: Using ep0 maxpacket: 8 [ 135.163893][ T5980] usb 6-1: config 0 has no interfaces? [ 135.167045][ T5980] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 135.169734][ T5980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.172573][ T5980] usb 6-1: Product: syz [ 135.174159][ T5980] usb 6-1: Manufacturer: syz [ 135.175494][ T5980] usb 6-1: SerialNumber: syz [ 135.178157][ T5980] usb 6-1: config 0 descriptor?? [ 135.386974][ T5980] usb 6-1: USB disconnect, device number 7 [ 135.512581][ T8158] netlink: 20 bytes leftover after parsing attributes in process `syz.2.540'. [ 136.345655][ T8174] netlink: 'syz.1.545': attribute type 10 has an invalid length. [ 136.351323][ T8174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.355381][ T8174] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 136.359528][ T8175] fuse: Unknown parameter 'ûd¡' [ 136.984780][ T8174] syz.1.545 (8174) used greatest stack depth: 20480 bytes left [ 137.108931][ T8195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.552'. [ 137.114732][ T8194] usb 2-1: USB disconnect, device number 21 [ 137.169430][ T8196] hub 2-0:1.0: USB hub found [ 137.174018][ T8196] hub 2-0:1.0: 6 ports detected [ 137.339886][ T833] usb 2-1: new high-speed USB device number 22 using ehci-pci [ 137.376267][ T8172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.542882][ T833] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 137.545574][ T833] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 137.548584][ T833] usb 2-1: Product: QEMU USB Tablet [ 137.550187][ T833] usb 2-1: Manufacturer: QEMU [ 137.551959][ T833] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 137.581848][ T833] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0016/input/input27 [ 137.643055][ T833] hid-generic 0003:0627:0001.0016: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 138.336042][ T8208] netlink: 28 bytes leftover after parsing attributes in process `syz.0.556'. [ 138.338672][ T8208] netlink: 28 bytes leftover after parsing attributes in process `syz.0.556'. [ 138.343899][ T8208] dummy0: entered promiscuous mode [ 138.346215][ T8208] team0: entered promiscuous mode [ 138.347729][ T8208] team_slave_0: entered promiscuous mode [ 138.352688][ T8208] team_slave_1: entered promiscuous mode [ 138.356971][ T8208] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 138.360694][ T8208] Cannot create hsr debugfs directory [ 138.490351][ T8212] usb 2-1: USB disconnect, device number 22 [ 138.547956][ T8212] hub 2-0:1.0: USB hub found [ 138.588020][ T8212] hub 2-0:1.0: 6 ports detected [ 138.819098][ T6145] usb 2-1: new high-speed USB device number 23 using ehci-pci [ 138.832578][ T8227] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 139.013051][ T6145] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 139.016521][ T6145] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 139.019572][ T6145] usb 2-1: Product: QEMU USB Tablet [ 139.021377][ T6145] usb 2-1: Manufacturer: QEMU [ 139.023067][ T6145] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 139.036348][ T6145] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0017/input/input28 [ 139.101618][ T6145] hid-generic 0003:0627:0001.0017: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 140.290522][ T8269] binder: 8267:8269 ioctl c0306201 20000180 returned -14 [ 140.457398][ T8274] 9pnet_virtio: no channels available for device syz [ 141.832852][ T6145] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 142.041331][ T8317] ax25_connect(): syz.3.588 uses autobind, please contact jreuter@yaina.de [ 142.098771][ T8325] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 142.108071][ T6145] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.114513][ T6145] usb 6-1: config 0 has no interfaces? [ 142.119608][ T6145] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 142.122273][ T6145] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 142.124579][ T6145] usb 6-1: Manufacturer: syz [ 142.126925][ T6145] usb 6-1: config 0 descriptor?? [ 142.158362][ T66] Bluetooth: hci3: command 0x0c1a tx timeout [ 143.135243][ T39] audit: type=1800 audit(1735409015.949:28): pid=8338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.593" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 144.067953][ T35] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 144.236503][ T35] usb 7-1: Using ep0 maxpacket: 8 [ 144.239390][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 144.242645][ T35] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 144.245286][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.248727][ T35] usb 7-1: config 0 descriptor?? [ 144.464361][ T35] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 144.513735][ T25] usb 6-1: USB disconnect, device number 8 [ 144.543954][ T8363] netlink: 'syz.3.599': attribute type 4 has an invalid length. [ 144.572609][ T8363] netlink: 'syz.3.599': attribute type 4 has an invalid length. [ 144.744485][ T8371] usb 2-1: USB disconnect, device number 23 [ 144.786439][ T8371] hub 2-0:1.0: USB hub found [ 144.788498][ T8371] hub 2-0:1.0: 6 ports detected [ 144.886299][ T35] usb 7-1: USB disconnect, device number 5 [ 144.893826][ T8373] Bluetooth: MGMT ver 1.23 [ 144.957808][ T833] usb 2-1: new high-speed USB device number 24 using ehci-pci [ 145.160177][ T833] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 145.163162][ T833] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 145.165972][ T833] usb 2-1: Product: QEMU USB Tablet [ 145.168086][ T833] usb 2-1: Manufacturer: QEMU [ 145.170131][ T833] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 145.195135][ T833] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0018/input/input29 [ 145.277870][ T833] hid-generic 0003:0627:0001.0018: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 145.438546][ T8389] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 145.447050][ T8389] nbd: must specify a size in bytes for the device [ 145.449373][ T8389] block nbd2: not configured, cannot reconfigure [ 145.553451][ T8395] random: crng reseeded on system resumption [ 145.593491][ T8397] No source specified [ 147.296716][ T8432] input: syz0 as /devices/virtual/input/input31 [ 148.072602][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.623'. [ 149.663902][ T5937] Bluetooth: hci2: command 0x0c1a tx timeout [ 149.665971][ T8437] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 150.325219][ T8437] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 150.437432][ T8461] FAULT_INJECTION: forcing a failure. [ 150.437432][ T8461] name failslab, interval 1, probability 0, space 0, times 0 [ 150.442124][ T8461] CPU: 0 UID: 0 PID: 8461 Comm: syz.2.625 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0 [ 150.446026][ T8461] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 150.449989][ T8461] Call Trace: [ 150.451250][ T8461] [ 150.452366][ T8461] dump_stack_lvl+0x16c/0x1f0 [ 150.454142][ T8461] should_fail_ex+0x497/0x5b0 [ 150.455946][ T8461] ? fs_reclaim_acquire+0xae/0x150 [ 150.457880][ T8461] should_failslab+0xc2/0x120 [ 150.459664][ T8461] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 150.461843][ T8461] ? __alloc_skb+0x2b3/0x380 [ 150.463621][ T8461] __alloc_skb+0x2b3/0x380 [ 150.465331][ T8461] ? __pfx___alloc_skb+0x10/0x10 [ 150.467243][ T8461] ? genl_rcv_msg+0x4bd/0x800 [ 150.469108][ T8461] netlink_ack+0x164/0xb20 [ 150.470839][ T8461] netlink_rcv_skb+0x327/0x410 [ 150.472702][ T8461] ? __pfx_genl_rcv_msg+0x10/0x10 [ 150.474572][ T8461] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 150.476604][ T8461] ? down_read+0xc9/0x330 [ 150.478247][ T8461] ? __pfx_down_read+0x10/0x10 [ 150.480033][ T8461] ? netlink_deliver_tap+0x1ae/0xca0 [ 150.482026][ T8461] genl_rcv+0x28/0x40 [ 150.483598][ T8461] netlink_unicast+0x53c/0x7f0 [ 150.485440][ T8461] ? __pfx_netlink_unicast+0x10/0x10 [ 150.487446][ T8461] ? __phys_addr_symbol+0x30/0x80 [ 150.489377][ T8461] ? __check_object_size+0x488/0x710 [ 150.491408][ T8461] netlink_sendmsg+0x8b8/0xd70 [ 150.493315][ T8461] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.495383][ T8461] ____sys_sendmsg+0x9ae/0xb40 [ 150.497259][ T8461] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.499345][ T8461] ? get_compat_msghdr+0x11b/0x170 [ 150.501214][ T8461] ___sys_sendmsg+0x135/0x1e0 [ 150.502630][ T8461] ? __pfx____sys_sendmsg+0x10/0x10 [ 150.504176][ T8461] ? __pfx_lock_release+0x10/0x10 [ 150.505653][ T8461] ? trace_lock_acquire+0x14e/0x1f0 [ 150.507180][ T8461] ? __fget_files+0x206/0x3a0 [ 150.508569][ T8461] __sys_sendmsg+0x16e/0x220 [ 150.509933][ T8461] ? __pfx___sys_sendmsg+0x10/0x10 [ 150.511572][ T8461] __do_fast_syscall_32+0x73/0x120 [ 150.513096][ T8461] do_fast_syscall_32+0x32/0x80 [ 150.514510][ T8461] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 150.516333][ T8461] RIP: 0023:0xf7f32579 [ 150.517514][ T8461] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 150.523081][ T8461] RSP: 002b:00000000f508655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 150.525486][ T8461] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020001ac0 [ 150.527760][ T8461] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 150.530044][ T8461] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 150.532534][ T8461] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 150.535588][ T8461] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 150.538593][ T8461] [ 150.813090][ T6068] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 151.003010][ T6068] usb 8-1: Using ep0 maxpacket: 16 [ 151.010941][ T6068] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 151.016691][ T6068] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 151.019454][ T6068] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.021824][ T6068] usb 8-1: Product: syz [ 151.023174][ T6068] usb 8-1: Manufacturer: syz [ 151.024572][ T6068] usb 8-1: SerialNumber: syz [ 151.026833][ T6068] usb 8-1: config 0 descriptor?? [ 151.030051][ T6068] hub 8-1:0.0: bad descriptor, ignoring hub [ 151.032009][ T6068] hub 8-1:0.0: probe with driver hub failed with error -5 [ 151.037921][ T6068] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input32 [ 151.357572][ T8489] netlink: 20 bytes leftover after parsing attributes in process `syz.1.633'. [ 151.744512][ T5937] Bluetooth: hci3: command 0x0c1a tx timeout [ 152.114906][ T8499] ISOFS: Unable to identify CD-ROM format. [ 152.873869][ T8513] usb 2-1: USB disconnect, device number 24 [ 152.965267][ T8515] hub 2-0:1.0: USB hub found [ 152.973731][ T8515] hub 2-0:1.0: 6 ports detected [ 153.161943][ T832] usb 2-1: new high-speed USB device number 25 using ehci-pci [ 153.355915][ T832] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 153.358591][ T832] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 153.361051][ T832] usb 2-1: Product: QEMU USB Tablet [ 153.372983][ T832] usb 2-1: Manufacturer: QEMU [ 153.376567][ T832] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 153.383556][ T39] audit: type=1326 audit(1735409026.214:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8523 comm="syz.1.642" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 153.399951][ T832] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0019/input/input33 [ 153.401906][ T39] audit: type=1326 audit(1735409026.214:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8523 comm="syz.1.642" exe="/syz-executor" sig=0 arch=40000003 syscall=50 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 153.409938][ T39] audit: type=1326 audit(1735409026.214:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8523 comm="syz.1.642" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 153.411811][ T832] hid-generic 0003:0627:0001.0019: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 153.419899][ T39] audit: type=1326 audit(1735409026.214:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8523 comm="syz.1.642" exe="/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 154.301812][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 154.445142][ T833] usb 8-1: USB disconnect, device number 4 [ 161.927149][ T8617] input: syz0 as /devices/virtual/input/input34 [ 162.651779][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.660'. [ 162.674662][ T8624] vlan3: entered allmulticast mode [ 162.676234][ T8624] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 162.719103][ T8631] FAULT_INJECTION: forcing a failure. [ 162.719103][ T8631] name failslab, interval 1, probability 0, space 0, times 0 [ 162.723611][ T8631] CPU: 1 UID: 0 PID: 8631 Comm: syz.2.662 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0 [ 162.726947][ T8631] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 162.729901][ T8631] Call Trace: [ 162.730825][ T8631] [ 162.731695][ T8631] dump_stack_lvl+0x16c/0x1f0 [ 162.732993][ T8631] should_fail_ex+0x497/0x5b0 [ 162.734264][ T8631] ? fs_reclaim_acquire+0xae/0x150 [ 162.735657][ T8631] should_failslab+0xc2/0x120 [ 162.736969][ T8631] __kmalloc_cache_noprof+0x68/0x420 [ 162.738485][ T8631] ? _raw_spin_unlock_irq+0x23/0x50 [ 162.739975][ T8631] ? snd_mixer_oss_get_volume1_sw.constprop.0.isra.0+0x36d/0x480 [ 162.742133][ T8631] snd_mixer_oss_get_volume1_sw.constprop.0.isra.0+0x9c/0x480 [ 162.744217][ T8631] snd_mixer_oss_get_recsrc1_sw+0x105/0x1d0 [ 162.745935][ T8631] ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10 [ 162.747744][ T8631] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 162.749439][ T8631] snd_mixer_oss_ioctl1+0x15b8/0x1a90 [ 162.750950][ T8631] ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10 [ 162.752750][ T8631] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 162.754372][ T8631] ? __pfx_lock_release+0x10/0x10 [ 162.755813][ T8631] ? trace_lock_acquire+0x14e/0x1f0 [ 162.757360][ T8631] ? __fget_files+0x206/0x3a0 [ 162.758734][ T8631] snd_mixer_oss_ioctl_compat+0x43/0x70 [ 162.760336][ T8631] ? __pfx_snd_mixer_oss_ioctl_compat+0x10/0x10 [ 162.762127][ T8631] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 162.763651][ T8631] __do_fast_syscall_32+0x73/0x120 [ 162.765140][ T8631] do_fast_syscall_32+0x32/0x80 [ 162.766546][ T8631] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 162.768813][ T8631] RIP: 0023:0xf7f32579 [ 162.770525][ T8631] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 162.776104][ T8631] RSP: 002b:00000000f508655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 162.779205][ T8631] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080044dff [ 162.781637][ T8631] RDX: 0000000020000540 RSI: 0000000000000000 RDI: 0000000000000000 [ 162.784243][ T8631] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 162.787203][ T8631] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 162.789512][ T8631] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 162.791717][ T8631] [ 162.909458][ T8647] netlink: 120 bytes leftover after parsing attributes in process `syz.2.666'. [ 163.614590][ T8663] FAULT_INJECTION: forcing a failure. [ 163.614590][ T8663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.618494][ T8663] CPU: 1 UID: 0 PID: 8663 Comm: syz.3.671 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0 [ 163.621599][ T8663] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 163.624510][ T8663] Call Trace: [ 163.625437][ T8663] [ 163.626229][ T8663] dump_stack_lvl+0x16c/0x1f0 [ 163.627546][ T8663] should_fail_ex+0x497/0x5b0 [ 163.628853][ T8663] _copy_to_user+0x32/0xd0 [ 163.630123][ T8663] msr_read+0x14f/0x250 [ 163.631263][ T8663] ? __pfx_msr_read+0x10/0x10 [ 163.632593][ T8663] ? bpf_lsm_file_permission+0x9/0x10 [ 163.634073][ T8663] ? security_file_permission+0x71/0x210 [ 163.635650][ T8663] ? __pfx_msr_read+0x10/0x10 [ 163.637039][ T8663] vfs_read+0x1df/0xbe0 [ 163.638216][ T8663] ? __fget_files+0x1fc/0x3a0 [ 163.639564][ T8663] ? __pfx_lock_release+0x10/0x10 [ 163.640953][ T8663] ? __pfx_vfs_read+0x10/0x10 [ 163.642141][ T8663] ? lock_acquire+0x2f/0xb0 [ 163.643301][ T8663] ? __fget_files+0x40/0x3a0 [ 163.644552][ T8663] ? __fget_files+0x206/0x3a0 [ 163.645958][ T8663] ksys_read+0x12b/0x250 [ 163.647194][ T8663] ? __pfx_ksys_read+0x10/0x10 [ 163.648578][ T8663] __do_fast_syscall_32+0x73/0x120 [ 163.650030][ T8663] do_fast_syscall_32+0x32/0x80 [ 163.651409][ T8663] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 163.653210][ T8663] RIP: 0023:0xf7fb3579 [ 163.654378][ T8663] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 163.659771][ T8663] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000003 [ 163.662101][ T8663] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020019680 [ 163.664361][ T8663] RDX: 0000000000018ff8 RSI: 0000000000000000 RDI: 0000000000000000 [ 163.666583][ T8663] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 163.668868][ T8663] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 163.671084][ T8663] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 163.673314][ T8663] [ 163.976394][ T8672] FAULT_INJECTION: forcing a failure. [ 163.976394][ T8672] name failslab, interval 1, probability 0, space 0, times 0 [ 163.982289][ T8672] CPU: 3 UID: 0 PID: 8672 Comm: syz.0.674 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0 [ 163.985328][ T8672] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 163.988378][ T8672] Call Trace: [ 163.989341][ T8672] [ 163.990199][ T8672] dump_stack_lvl+0x16c/0x1f0 [ 163.991570][ T8672] should_fail_ex+0x497/0x5b0 [ 163.992976][ T8672] ? fs_reclaim_acquire+0xae/0x150 [ 163.994432][ T8672] should_failslab+0xc2/0x120 [ 163.995794][ T8672] __kmalloc_cache_noprof+0x68/0x420 [ 163.997352][ T8672] ? rcu_is_watching+0x12/0xc0 [ 163.998740][ T8672] ? trace_contention_end+0xee/0x140 [ 164.000267][ T8672] fuse_lookup_name+0x13f/0x790 [ 164.001673][ T8672] ? fuse_lock_inode+0xd2/0x110 [ 164.003083][ T8672] ? __pfx_fuse_lookup_name+0x10/0x10 [ 164.004631][ T8672] ? __pfx___mutex_lock+0x10/0x10 [ 164.006109][ T8672] fuse_lookup+0x1b1/0x430 [ 164.007460][ T8672] ? lock_acquire.part.0+0x11b/0x380 [ 164.009024][ T8672] ? __pfx_fuse_lookup+0x10/0x10 [ 164.010444][ T8672] ? d_alloc+0x176/0x1e0 [ 164.011671][ T8672] ? do_raw_spin_unlock+0x172/0x230 [ 164.013184][ T8672] ? _raw_spin_unlock+0x28/0x50 [ 164.014583][ T8672] lookup_one_qstr_excl+0x11d/0x190 [ 164.016086][ T8672] ? mnt_want_write+0x161/0x450 [ 164.017497][ T8672] filename_create+0x1ed/0x530 [ 164.018887][ T8672] ? __pfx_filename_create+0x10/0x10 [ 164.020421][ T8672] ? lock_acquire+0x2f/0xb0 [ 164.021733][ T8672] ? __virt_addr_valid+0x1a4/0x590 [ 164.023175][ T8672] do_linkat+0x17f/0x590 [ 164.024377][ T8672] ? __pfx_do_linkat+0x10/0x10 [ 164.025722][ T8672] ? strncpy_from_user+0x1fe/0x2d0 [ 164.027156][ T8672] ? getname_flags.part.0+0x1c5/0x550 [ 164.028664][ T8672] __ia32_sys_link+0x7c/0xa0 [ 164.029984][ T8672] __do_fast_syscall_32+0x73/0x120 [ 164.031451][ T8672] do_fast_syscall_32+0x32/0x80 [ 164.032859][ T8672] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 164.034667][ T8672] RIP: 0023:0xf714e579 [ 164.035830][ T8672] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 164.041338][ T8672] RSP: 002b:00000000f511f55c EFLAGS: 00000296 ORIG_RAX: 0000000000000009 [ 164.043777][ T8672] RAX: ffffffffffffffda RBX: 0000000020000280 RCX: 0000000020000400 [ 164.046040][ T8672] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 164.048303][ T8672] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 164.050553][ T8672] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 164.052861][ T8672] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 164.055099][ T8672] [ 164.258176][ T8686] netlink: 2036 bytes leftover after parsing attributes in process `syz.0.675'. [ 164.261028][ T8686] netlink: 24 bytes leftover after parsing attributes in process `syz.0.675'. [ 164.262561][ T8680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.334971][ T8687] netlink: 40 bytes leftover after parsing attributes in process `syz.2.676'. [ 165.125926][ T39] audit: type=1326 audit(1735409037.940:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.2.681" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x50000 [ 165.131951][ T39] audit: type=1326 audit(1735409037.940:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.2.681" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x50000 [ 165.138268][ T39] audit: type=1326 audit(1735409037.940:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.2.681" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x50000 [ 165.144146][ T39] audit: type=1326 audit(1735409037.940:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.2.681" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x50000 [ 165.150067][ T39] audit: type=1326 audit(1735409037.940:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.2.681" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x50000 [ 165.155813][ T39] audit: type=1326 audit(1735409037.940:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.2.681" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x50000 [ 165.161919][ T39] audit: type=1326 audit(1735409037.940:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.2.681" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x50000 [ 165.169067][ T39] audit: type=1326 audit(1735409037.940:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.2.681" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x50000 [ 165.174976][ T39] audit: type=1326 audit(1735409037.940:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.2.681" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x50000 [ 165.181660][ T39] audit: type=1326 audit(1735409037.940:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.2.681" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x50000 [ 166.737197][ T8721] Illegal XDP return value 4294967262 on prog (id 130) dev N/A, expect packet loss! [ 166.832491][ T8729] raw_sendmsg: syz.1.690 forgot to set AF_INET. Fix it! [ 166.950867][ T8733] usb 2-1: USB disconnect, device number 25 [ 167.089177][ T8738] hub 2-0:1.0: USB hub found [ 167.093171][ T8738] hub 2-0:1.0: 6 ports detected [ 167.306337][ T6068] usb 2-1: new high-speed USB device number 26 using ehci-pci [ 167.522536][ T6068] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 167.525231][ T6068] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 167.527632][ T6068] usb 2-1: Product: QEMU USB Tablet [ 167.529259][ T6068] usb 2-1: Manufacturer: QEMU [ 167.530662][ T6068] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 167.558277][ T6068] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.001A/input/input35 [ 167.615723][ T6068] hid-generic 0003:0627:0001.001A: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 169.743869][ T8787] netlink: 40 bytes leftover after parsing attributes in process `syz.2.707'. [ 170.507623][ T8800] pim6reg: entered allmulticast mode [ 170.516352][ T8800] pim6reg: left allmulticast mode [ 170.934428][ T215] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.042622][ T215] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.094190][ T66] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 171.097107][ T66] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 171.103049][ T66] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 171.115988][ T66] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 171.119397][ T66] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 171.121363][ T66] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 171.159238][ T215] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.236609][ T215] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.249986][ T8816] chnl_net:caif_netlink_parms(): no params data found [ 171.254950][ T8825] netlink: 40 bytes leftover after parsing attributes in process `syz.2.718'. [ 171.308170][ T8816] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.310973][ T8816] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.314024][ T8816] bridge_slave_0: entered allmulticast mode [ 171.317345][ T8816] bridge_slave_0: entered promiscuous mode [ 171.321215][ T8816] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.326895][ T8816] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.329776][ T8816] bridge_slave_1: entered allmulticast mode [ 171.332461][ T8816] bridge_slave_1: entered promiscuous mode [ 171.367794][ T8816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.371394][ T8816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.426784][ T8816] team0: Port device team_slave_0 added [ 171.435170][ T8816] team0: Port device team_slave_1 added [ 171.503824][ T215] infiniband syz0: set down [ 171.698953][ T12] smc: removing ib device syz0 [ 171.701111][ T215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.708453][ T215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.714840][ T215] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 171.744880][ T215] bond0 (unregistering): Released all slaves [ 171.750853][ T8816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.753676][ T8816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.761891][ T8816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.767127][ T8816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.769083][ T8816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.777360][ T8816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.807538][ T8816] hsr_slave_0: entered promiscuous mode [ 171.810953][ T8816] hsr_slave_1: entered promiscuous mode [ 171.813536][ T8816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.815579][ T8816] Cannot create hsr debugfs directory [ 171.986357][ T8816] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 172.001489][ T8816] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 172.020205][ T8816] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 172.038861][ T8816] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 172.099684][ T8816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.113844][ T8816] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.140939][ T8816] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 172.152537][ T8816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.261185][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.265187][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.276776][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.279520][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.411090][ T8816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.607074][ T215] IPVS: stopping master sync thread 6590 ... [ 172.736263][ T8816] veth0_vlan: entered promiscuous mode [ 172.744898][ T8816] veth1_vlan: entered promiscuous mode [ 172.774576][ T8870] netlink: 48 bytes leftover after parsing attributes in process `syz.3.723'. [ 172.781972][ T8816] veth0_macvtap: entered promiscuous mode [ 172.787183][ T8816] veth1_macvtap: entered promiscuous mode [ 172.803169][ T8816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.809505][ T8816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.812272][ T8816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.815205][ T8816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.818939][ T8816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.823539][ T8816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.826244][ T8816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.829140][ T8816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.833575][ T8816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.881446][ T8816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.890897][ T8816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.895308][ T8816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.898373][ T8816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.901215][ T8816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.910183][ T8816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.913168][ T8816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.921723][ T8816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.931004][ T8816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.092021][ T8816] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.094588][ T8816] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.097055][ T8816] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.099715][ T8816] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.103755][ T8876] FAULT_INJECTION: forcing a failure. [ 173.103755][ T8876] name failslab, interval 1, probability 0, space 0, times 0 [ 173.108485][ T8876] CPU: 3 UID: 0 PID: 8876 Comm: syz.3.724 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0 [ 173.112468][ T8876] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 173.116467][ T8876] Call Trace: [ 173.117744][ T8876] [ 173.118910][ T8876] dump_stack_lvl+0x16c/0x1f0 [ 173.120769][ T8876] should_fail_ex+0x497/0x5b0 [ 173.122343][ T8876] ? fs_reclaim_acquire+0xae/0x150 [ 173.123834][ T8876] should_failslab+0xc2/0x120 [ 173.125301][ T8876] __kmalloc_noprof+0xce/0x4f0 [ 173.127155][ T8876] ? tomoyo_encode2+0x100/0x3e0 [ 173.128931][ T8876] tomoyo_encode2+0x100/0x3e0 [ 173.130735][ T8876] tomoyo_realpath_from_path+0x1a7/0x710 [ 173.132942][ T8876] ? tomoyo_path_number_perm+0x235/0x5b0 [ 173.135092][ T8876] tomoyo_path_number_perm+0x248/0x5b0 [ 173.136761][ T8876] ? tomoyo_path_number_perm+0x235/0x5b0 [ 173.138488][ T8876] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 173.140418][ T8876] ? __pfx_lock_release+0x10/0x10 [ 173.142280][ T8876] ? trace_lock_acquire+0x14e/0x1f0 [ 173.143764][ T8876] ? lock_acquire+0x2f/0xb0 [ 173.145131][ T8876] ? __fget_files+0x40/0x3a0 [ 173.146888][ T8876] ? __fget_files+0x206/0x3a0 [ 173.148699][ T8876] security_file_ioctl_compat+0x9b/0x240 [ 173.150762][ T8876] __do_compat_sys_ioctl+0x4e/0x2c0 [ 173.152731][ T8876] __do_fast_syscall_32+0x73/0x120 [ 173.154691][ T8876] do_fast_syscall_32+0x32/0x80 [ 173.156528][ T8876] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 173.158614][ T8876] RIP: 0023:0xf7fb3579 [ 173.159737][ T8876] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 173.166613][ T8876] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 173.169716][ T8876] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004020aeb2 [ 173.172411][ T8876] RDX: 0000000020000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 173.174591][ T8876] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 173.176957][ T8876] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 173.179212][ T8876] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 173.181515][ T8876] [ 173.191402][ T8876] ERROR: Out of memory at tomoyo_realpath_from_path. [ 173.192037][ T5937] Bluetooth: hci3: command tx timeout [ 173.235409][ T215] hsr_slave_0: left promiscuous mode [ 173.245240][ T215] hsr_slave_1: left promiscuous mode [ 173.248809][ T215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.251188][ T215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.265095][ T215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.267334][ T215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.285244][ T215] veth0_macvtap: left promiscuous mode [ 173.287836][ T215] veth1_vlan: left promiscuous mode [ 173.289401][ T215] veth0_vlan: left promiscuous mode [ 173.979593][ T215] team0 (unregistering): Port device team_slave_1 removed [ 174.064151][ T215] team0 (unregistering): Port device team_slave_0 removed [ 174.611581][ T8887] netlink: 28 bytes leftover after parsing attributes in process `syz.3.728'. [ 174.669806][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.673651][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.687132][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.690194][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.252874][ T5937] Bluetooth: hci3: command tx timeout [ 175.909934][ T8972] netlink: 16 bytes leftover after parsing attributes in process `syz.3.735'. [ 176.296466][ T8974] usb 2-1: USB disconnect, device number 26 [ 176.422389][ T8978] hub 2-0:1.0: USB hub found [ 176.424971][ T8978] hub 2-0:1.0: 6 ports detected [ 176.650245][ T6087] usb 2-1: new high-speed USB device number 27 using ehci-pci [ 176.832418][ T6087] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 176.835392][ T6087] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 176.837677][ T6087] usb 2-1: Product: QEMU USB Tablet [ 176.839127][ T6087] usb 2-1: Manufacturer: QEMU [ 176.840675][ T6087] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 176.860631][ T6087] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.001B/input/input36 [ 176.925627][ T6087] hid-generic 0003:0627:0001.001B: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 177.329968][ T5937] Bluetooth: hci3: command tx timeout [ 178.269410][ T5980] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 178.351969][ T9006] netlink: 40 bytes leftover after parsing attributes in process `syz.3.742'. [ 178.433293][ T5980] usb 7-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 178.437013][ T5980] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.440315][ T5980] usb 7-1: Product: syz [ 178.441948][ T5980] usb 7-1: Manufacturer: syz [ 178.443873][ T5980] usb 7-1: SerialNumber: syz [ 178.447659][ T5980] usb 7-1: config 0 descriptor?? [ 178.654970][ T9000] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 179.428906][ T5937] Bluetooth: hci3: command tx timeout [ 179.947894][ T9030] usb 2-1: USB disconnect, device number 27 [ 180.058142][ T9031] hub 2-0:1.0: USB hub found [ 180.067357][ T9031] hub 2-0:1.0: 6 ports detected [ 180.271404][ T6068] usb 2-1: new high-speed USB device number 28 using ehci-pci [ 180.516025][ T6068] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 180.520729][ T6068] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 180.527374][ T6068] usb 2-1: Product: QEMU USB Tablet [ 180.534130][ T6068] usb 2-1: Manufacturer: QEMU [ 180.546480][ T6068] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 180.662121][ T6068] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.001C/input/input37 [ 180.759891][ T6068] hid-generic 0003:0627:0001.001C: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 181.037018][ T5980] cx82310_eth 7-1:0.0: probe with driver cx82310_eth failed with error -22 [ 181.049077][ T5980] cxacru 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 181.061623][ T5980] usb 7-1: USB disconnect, device number 6 [ 182.157449][ T9066] netlink: 40 bytes leftover after parsing attributes in process `syz.3.755'. [ 182.864674][ T9079] [ 182.865702][ T9079] ====================================================== [ 182.868534][ T9079] WARNING: possible circular locking dependency detected [ 182.871310][ T9079] 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0 Not tainted SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 182.875884][ T9079] ------------------------------------------------------ [ 182.878444][ T9079] syz.0.758/9079 is trying to acquire lock: [ 182.880621][ T9079] ffff8880436aa330 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x132/0x4f0 [ 182.883335][ T9079] [ 182.883335][ T9079] but task is already holding lock: [ 182.885401][ T9079] ffff8880436aa3c0 (&q->sysfs_dir_lock){+.+.}-{4:4}, at: blk_register_queue+0x5c/0x4f0 [ 182.887987][ T9079] [ 182.887987][ T9079] which lock already depends on the new lock. [ 182.887987][ T9079] [ 182.890862][ T9079] [ 182.890862][ T9079] the existing dependency chain (in reverse order) is: [ 182.893396][ T9079] [ 182.893396][ T9079] -> #6 (&q->sysfs_dir_lock){+.+.}-{4:4}: [ 182.895537][ T9079] __mutex_lock+0x19b/0xa60 [ 182.896949][ T9079] blk_mq_sysfs_unregister_hctxs+0x92/0x2d0 [ 182.898846][ T9079] __blk_mq_update_nr_hw_queues+0x93f/0x1460 [ 182.900632][ T9079] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 182.902407][ T9079] nbd_start_device+0x15b/0xd70 [ 182.903944][ T9079] nbd_ioctl+0x21a/0xfd0 [ 182.905285][ T9079] compat_blkdev_ioctl+0x2f7/0x750 [ 182.906875][ T9079] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 182.908559][ T9079] __do_fast_syscall_32+0x73/0x120 [ 182.910211][ T9079] do_fast_syscall_32+0x32/0x80 [ 182.912031][ T9079] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 182.914109][ T9079] [ 182.914109][ T9079] -> #5 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 182.916473][ T9079] blk_mq_submit_bio+0x1fb6/0x24c0 [ 182.918208][ T9079] __submit_bio+0x384/0x540 [ 182.919639][ T9079] submit_bio_noacct_nocheck+0x698/0xd70 [ 182.921379][ T9079] submit_bio_noacct+0x93a/0x1e20 [ 182.923004][ T9079] block_read_full_folio+0x812/0xa50 [ 182.924666][ T9079] filemap_read_folio+0xc6/0x2a0 [ 182.926222][ T9079] filemap_get_pages+0x155f/0x1be0 [ 182.928023][ T9079] filemap_read+0x3ca/0xd70 [ 182.929449][ T9079] blkdev_read_iter+0x187/0x480 [ 182.930972][ T9079] vfs_read+0x87f/0xbe0 [ 182.932362][ T9079] ksys_read+0x12b/0x250 [ 182.933750][ T9079] do_syscall_64+0xcd/0x250 [ 182.935208][ T9079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.937058][ T9079] [ 182.937058][ T9079] -> #4 (mapping.invalidate_lock#2){++++}-{4:4}: [ 182.939683][ T9079] down_read+0x9a/0x330 [ 182.941053][ T9079] filemap_fault+0x2e0/0x2820 [ 182.942560][ T9079] __do_fault+0x10a/0x490 [ 182.943969][ T9079] do_pte_missing+0x99f/0x3e00 [ 182.945482][ T9079] __handle_mm_fault+0x103c/0x2a40 [ 182.947193][ T9079] handle_mm_fault+0x3fa/0xaa0 [ 182.948695][ T9079] do_user_addr_fault+0x60d/0x13f0 [ 182.950256][ T9079] exc_page_fault+0x5c/0xc0 [ 182.951739][ T9079] asm_exc_page_fault+0x26/0x30 [ 182.953270][ T9079] [ 182.953270][ T9079] -> #3 (&vma->vm_lock->lock){++++}-{4:4}: [ 182.955555][ T9079] down_write+0x93/0x200 [ 182.956926][ T9079] vma_link+0x26d/0x4a0 [ 182.958295][ T9079] insert_vm_struct+0x197/0x3f0 [ 182.959987][ T9079] alloc_bprm+0x6e0/0xc90 [ 182.961367][ T9079] kernel_execve+0xb0/0x3b0 [ 182.962859][ T9079] kernel_init+0x14a/0x2b0 [ 182.964214][ T9079] ret_from_fork+0x45/0x80 [ 182.965549][ T9079] ret_from_fork_asm+0x1a/0x30 [ 182.967125][ T9079] [ 182.967125][ T9079] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 182.969266][ T9079] __might_fault+0x11b/0x190 [ 182.970681][ T9079] _copy_from_user+0x29/0xd0 [ 182.972221][ T9079] __blk_trace_setup+0xa8/0x180 [ 182.973711][ T9079] blk_trace_setup+0x47/0x70 [ 182.975190][ T9079] sg_ioctl+0x7a3/0x26b0 [ 182.976581][ T9079] compat_ptr_ioctl+0x6b/0xa0 [ 182.978061][ T9079] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 182.979812][ T9079] __do_fast_syscall_32+0x73/0x120 [ 182.981362][ T9079] do_fast_syscall_32+0x32/0x80 [ 182.982958][ T9079] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 182.984862][ T9079] [ 182.984862][ T9079] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 182.987098][ T9079] __mutex_lock+0x19b/0xa60 [ 182.988742][ T9079] blk_register_queue+0x13c/0x4f0 [ 182.990568][ T9079] add_disk_fwnode+0x785/0x1300 [ 182.992159][ T9079] brd_alloc.isra.0+0x50a/0x7c0 [ 182.993671][ T9079] brd_init+0x12b/0x1d0 [ 182.995016][ T9079] do_one_initcall+0x128/0x630 [ 182.996568][ T9079] kernel_init_freeable+0x58f/0x8b0 [ 182.998201][ T9079] kernel_init+0x1c/0x2b0 [ 182.999625][ T9079] ret_from_fork+0x45/0x80 [ 183.001059][ T9079] ret_from_fork_asm+0x1a/0x30 [ 183.002621][ T9079] [ 183.002621][ T9079] -> #0 (&q->sysfs_lock){+.+.}-{4:4}: [ 183.004786][ T9079] __lock_acquire+0x249e/0x3c40 [ 183.006382][ T9079] lock_acquire.part.0+0x11b/0x380 [ 183.008118][ T9079] __mutex_lock+0x19b/0xa60 [ 183.009522][ T9079] blk_register_queue+0x132/0x4f0 [ 183.011075][ T9079] add_disk_fwnode+0x785/0x1300 [ 183.012623][ T9079] md_alloc+0x393/0x1030 [ 183.013963][ T9079] md_probe+0x6e/0xd0 [ 183.015249][ T9079] blk_request_module+0x115/0x1e0 [ 183.016811][ T9079] blkdev_get_no_open+0x7a/0xe0 [ 183.018367][ T9079] blkdev_open+0x13c/0x400 [ 183.019869][ T9079] do_dentry_open+0xf59/0x1ea0 [ 183.021341][ T9079] vfs_open+0x82/0x3f0 [ 183.022626][ T9079] path_openat+0x1e6a/0x2d60 [ 183.024084][ T9079] do_filp_open+0x20c/0x470 [ 183.025493][ T9079] do_sys_openat2+0x17a/0x1e0 [ 183.026938][ T9079] __ia32_compat_sys_openat+0x16e/0x210 [ 183.028755][ T9079] __do_fast_syscall_32+0x73/0x120 [ 183.030290][ T9079] do_fast_syscall_32+0x32/0x80 [ 183.031789][ T9079] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 183.033678][ T9079] [ 183.033678][ T9079] other info that might help us debug this: [ 183.033678][ T9079] [ 183.036510][ T9079] Chain exists of: [ 183.036510][ T9079] &q->sysfs_lock --> &q->q_usage_counter(io)#49 --> &q->sysfs_dir_lock [ 183.036510][ T9079] [ 183.040425][ T9079] Possible unsafe locking scenario: [ 183.040425][ T9079] [ 183.042428][ T9079] CPU0 CPU1 [ 183.043938][ T9079] ---- ---- [ 183.045592][ T9079] lock(&q->sysfs_dir_lock); [ 183.046902][ T9079] lock(&q->q_usage_counter(io)#49); [ 183.049227][ T9079] lock(&q->sysfs_dir_lock); [ 183.051207][ T9079] lock(&q->sysfs_lock); [ 183.052482][ T9079] [ 183.052482][ T9079] *** DEADLOCK *** [ 183.052482][ T9079] [ 183.054698][ T9079] 3 locks held by syz.0.758/9079: [ 183.056110][ T9079] #0: ffffffff8e8b8be8 (major_names_lock){+.+.}-{4:4}, at: blk_request_module+0x29/0x1e0 [ 183.058949][ T9079] #1: ffffffff8f62a5c8 (disks_mutex){+.+.}-{4:4}, at: md_alloc+0x3e/0x1030 [ 183.061453][ T9079] #2: ffff8880436aa3c0 (&q->sysfs_dir_lock){+.+.}-{4:4}, at: blk_register_queue+0x5c/0x4f0 [ 183.064361][ T9079] [ 183.064361][ T9079] stack backtrace: [ 183.066058][ T9079] CPU: 1 UID: 0 PID: 9079 Comm: syz.0.758 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0 [ 183.069157][ T9079] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 183.072234][ T9079] Call Trace: [ 183.073280][ T9079] [ 183.074212][ T9079] dump_stack_lvl+0x116/0x1f0 [ 183.075513][ T9079] print_circular_bug+0x41c/0x610 [ 183.076950][ T9079] check_noncircular+0x31a/0x400 [ 183.078522][ T9079] ? __pfx_check_noncircular+0x10/0x10 [ 183.080046][ T9079] ? lock_acquire+0x2f/0xb0 [ 183.081343][ T9079] ? lockdep_lock+0xc6/0x200 [ 183.082725][ T9079] ? __pfx_lockdep_lock+0x10/0x10 [ 183.084146][ T9079] __lock_acquire+0x249e/0x3c40 [ 183.085494][ T9079] ? __pfx___lock_acquire+0x10/0x10 [ 183.086934][ T9079] ? sysfs_add_file_mode_ns+0x227/0x3b0 [ 183.088463][ T9079] lock_acquire.part.0+0x11b/0x380 [ 183.089901][ T9079] ? blk_register_queue+0x132/0x4f0 [ 183.091397][ T9079] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 183.092988][ T9079] ? rcu_is_watching+0x12/0xc0 [ 183.094331][ T9079] ? trace_lock_acquire+0x14e/0x1f0 [ 183.095754][ T9079] ? blk_register_queue+0x132/0x4f0 [ 183.097232][ T9079] ? lock_acquire+0x2f/0xb0 [ 183.098858][ T9079] ? blk_register_queue+0x132/0x4f0 [ 183.100341][ T9079] __mutex_lock+0x19b/0xa60 [ 183.101592][ T9079] ? blk_register_queue+0x132/0x4f0 [ 183.103157][ T9079] ? kobject_add_internal+0x54e/0x990 [ 183.104655][ T9079] ? blk_register_queue+0x132/0x4f0 [ 183.106198][ T9079] ? __pfx___mutex_lock+0x10/0x10 [ 183.107747][ T9079] ? kobject_add+0x17c/0x240 [ 183.109073][ T9079] ? blk_register_queue+0x132/0x4f0 [ 183.110608][ T9079] blk_register_queue+0x132/0x4f0 [ 183.112111][ T9079] add_disk_fwnode+0x785/0x1300 [ 183.113520][ T9079] md_alloc+0x393/0x1030 [ 183.114793][ T9079] md_probe+0x6e/0xd0 [ 183.115972][ T9079] ? __pfx_md_probe+0x10/0x10 [ 183.117291][ T9079] blk_request_module+0x115/0x1e0 [ 183.118857][ T9079] blkdev_get_no_open+0x7a/0xe0 [ 183.120316][ T9079] blkdev_open+0x13c/0x400 [ 183.121586][ T9079] do_dentry_open+0xf59/0x1ea0 [ 183.122994][ T9079] ? __pfx_blkdev_open+0x10/0x10 [ 183.124439][ T9079] ? inode_permission+0xdd/0x5f0 [ 183.125876][ T9079] vfs_open+0x82/0x3f0 [ 183.127064][ T9079] ? may_open+0x1f2/0x400 [ 183.128374][ T9079] path_openat+0x1e6a/0x2d60 [ 183.129724][ T9079] ? __pfx_path_openat+0x10/0x10 [ 183.131191][ T9079] do_filp_open+0x20c/0x470 [ 183.132648][ T9079] ? __pfx_do_filp_open+0x10/0x10 [ 183.134075][ T9079] ? alloc_fd+0x41f/0x760 [ 183.135278][ T9079] do_sys_openat2+0x17a/0x1e0 [ 183.136718][ T9079] ? __pfx_do_sys_openat2+0x10/0x10 [ 183.138226][ T9079] ? find_held_lock+0x2d/0x110 [ 183.139656][ T9079] ? __might_fault+0x13b/0x190 [ 183.140990][ T9079] __ia32_compat_sys_openat+0x16e/0x210 [ 183.142558][ T9079] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 183.144374][ T9079] ? __might_fault+0xe3/0x190 [ 183.145693][ T9079] ? __might_fault+0xe3/0x190 [ 183.147051][ T9079] ? rcu_is_watching+0x12/0xc0 [ 183.148490][ T9079] __do_fast_syscall_32+0x73/0x120 [ 183.149928][ T9079] do_fast_syscall_32+0x32/0x80 [ 183.151301][ T9079] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 183.153194][ T9079] RIP: 0023:0xf714e579 [ 183.154332][ T9079] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 183.159726][ T9079] RSP: 002b:00000000f4cdb55c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 183.162161][ T9079] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000a80 [ 183.164471][ T9079] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 183.166638][ T9079] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 183.168962][ T9079] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 183.171180][ T9079] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 183.173503][ T9079] [ 183.216753][ T9079] block device autoloading is deprecated and will be removed. [ 183.334810][ T9062] bond0: (slave syz_tun): Releasing backup interface [ 183.692383][ T215] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.769568][ T215] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.848393][ T215] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.898801][ T215] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.989402][ T215] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.059229][ T215] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.108468][ T215] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.153150][ T215] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.233215][ T215] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.301476][ T215] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.370570][ T215] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.429634][ T215] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.498012][ T215] bridge_slave_1: left allmulticast mode [ 184.499650][ T215] bridge_slave_1: left promiscuous mode [ 184.501317][ T215] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.504193][ T215] bridge_slave_0: left allmulticast mode [ 184.505805][ T215] bridge_slave_0: left promiscuous mode [ 184.508023][ T215] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.514056][ T215] bridge_slave_1: left allmulticast mode [ 184.515691][ T215] bridge_slave_1: left promiscuous mode [ 184.517403][ T215] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.520168][ T215] bridge_slave_0: left allmulticast mode [ 184.521770][ T215] bridge_slave_0: left promiscuous mode [ 184.523405][ T215] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.851480][ T215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.856086][ T215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.860283][ T215] bond0 (unregistering): Released all slaves [ 184.868845][ T215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.873208][ T215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.877458][ T215] bond0 (unregistering): Released all slaves [ 184.885520][ T215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.890237][ T215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.894476][ T215] bond0 (unregistering): Released all slaves [ 185.017739][ T215] IPVS: stopping master sync thread 7654 ... [ 185.020352][ T215] IPVS: stopping master sync thread 7653 ... [ 185.022075][ T215] IPVS: stopping master sync thread 7652 ... [ 185.023880][ T215] IPVS: stopping master sync thread 7651 ... [ 185.307351][ T215] mac80211_hwsim hwsim9 wlan1 (unregistering): left allmulticast mode [ 185.454988][ T215] dummy0: left promiscuous mode [ 185.457605][ T215] team0: left promiscuous mode [ 185.459557][ T215] team_slave_0: left promiscuous mode [ 185.461804][ T215] team_slave_1: left promiscuous mode [ 185.467892][ T215] hsr_slave_0: left promiscuous mode [ 185.470542][ T215] hsr_slave_1: left promiscuous mode [ 185.473147][ T215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.477242][ T215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.480427][ T215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.483383][ T215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.487880][ T215] hsr_slave_0: left promiscuous mode [ 185.490776][ T215] hsr_slave_1: left promiscuous mode [ 185.493370][ T215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.495609][ T215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.498284][ T215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.501113][ T215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.506999][ T215] hsr_slave_0: left promiscuous mode [ 185.509533][ T215] hsr_slave_1: left promiscuous mode [ 185.512052][ T215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.514973][ T215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.517979][ T215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.520129][ T215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.525028][ T215] veth1_macvtap: left promiscuous mode [ 185.526749][ T215] veth0_macvtap: left promiscuous mode [ 185.528417][ T215] veth1_vlan: left promiscuous mode [ 185.529923][ T215] veth0_vlan: left promiscuous mode [ 185.531835][ T215] veth1_macvtap: left promiscuous mode [ 185.533419][ T215] veth0_macvtap: left promiscuous mode [ 185.535153][ T215] veth1_vlan: left promiscuous mode [ 185.536853][ T215] veth0_vlan: left promiscuous mode [ 185.538962][ T215] veth1_macvtap: left promiscuous mode [ 185.540567][ T215] veth0_macvtap: left promiscuous mode [ 185.542147][ T215] veth1_vlan: left promiscuous mode [ 185.543646][ T215] veth0_vlan: left promiscuous mode [ 185.722234][ T215] team0 (unregistering): Port device team_slave_1 removed [ 185.757734][ T215] team0 (unregistering): Port device team_slave_0 removed [ 186.035325][ T215] team0 (unregistering): Port device team_slave_1 removed [ 186.073663][ T215] team0 (unregistering): Port device team_slave_0 removed [ 186.395545][ T215] team0 (unregistering): Port device team_slave_1 removed [ 186.432684][ T215] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 17:47:09 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=1ffff92000fcaf2d RCX=ffffffff817647f9 RDX=fffffbfff2039c7b RSI=ffffffff8bb16f80 RDI=ffffffff8bb16fc0 RBP=0000000000000000 RSP=ffffc90007e57940 R8 =0000000000000000 R9 =fffffbfff2039c7a R10=ffffffff901ce3d7 R11=0000000000000000 R12=ffff88801ec81f20 R13=ffffc90007e57a90 R14=ffffc90007e57b50 R15=00000000201811c0 RIP=ffffffff817f1b42 RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020daa000 CR3=0000000021c4e000 CR4=00352ef0 DR0=0000000000000003 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000c400000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000067 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85142e55 RDI=ffffffff9a667240 RBP=ffffffff9a667200 RSP=ffffc90023e46e40 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e33312e36 R12=0000000000000000 R13=0000000000000067 R14=ffffffff85142df0 R15=0000000000000000 RIP=ffffffff85142e7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002e000ffc CR3=0000000021c4e000 CR4=00352ef0 DR0=0000000000000003 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000f000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000001a172e0 RCX=ffffffff82073e74 RDX=ffff88801d8b2440 RSI=ffffffff82073e90 RDI=0000000000000007 RBP=0000000000000000 RSP=ffffc9000321f770 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffff888040d172e0 R13=0000000000000000 R14=0000000000000001 R15=ffffc9000321fcb8 RIP=ffffffff81994fb6 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f36e40 CR3=000000000db7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73d3ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88804c33e6d8 RCX=ffffffff82075f0e RDX=ffff888024392440 RSI=0000000000000001 RDI=0000000000000004 RBP=0000000000000001 RSP=ffffc9000797fab0 R8 =0000000000000004 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=ffff88801ac7ba80 R14=dffffc0000000000 R15=1ffff92000f2ff59 RIP=ffffffff8199505b RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f0d21525740 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffd824daf32 CR3=00000000683ce000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000062003 Opmask01=0000000000100000 Opmask02=000000000fffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000032316270616c ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd824b92d0 0000003000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e2e2e2e2e2e2e2e 2e2e2e2e2e2e2e2e ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0000ff000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 50422064656e7761 7073203a73250050 5241006e65706f5f 667062203a732500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 50420541404b5244 5556051f56000050 5241004b40554a5f 435547051f560000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9cd3d93c74339a8f 0000557074ed0ce3 0000000000000021 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000071 0000000000000000 00316e6170772f74 656e2f327968702f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000557546d98233 73656d5f70636864 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 725f0f685509c661 72610f777b6ff37f 6567757777fdffff 7f7f7d7f75777965 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000031 0000726565666965 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000031 00006d5f65636864 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbf2b313423342c ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020