last executing test programs: 5m12.352868762s ago: executing program 3 (id=603): socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) 5m12.304957295s ago: executing program 3 (id=604): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_create_resource$binfmt(&(0x7f0000000180)='./file1\x00') rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) io_setup(0x8, &(0x7f0000002740)=0x0) io_getevents(r3, 0x4, 0x13, &(0x7f0000000000), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r3, 0x1, &(0x7f0000000480)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x8, r4, 0x0, 0x0, 0x6}]) io_destroy(r3) openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) r5 = openat$binfmt(0xffffffffffffff9c, r2, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x24, r7, 0x5, 0x200, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}}, 0x4c0c4) close(r5) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) r9 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') socket$inet6(0xa, 0x5, 0x9) execveat$binfmt(0xffffffffffffff9c, r9, &(0x7f00000001c0)={[&(0x7f0000000140)='\'{']}, 0x0, 0x1000) r10 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r10, 0x40096101, &(0x7f0000000800)={{}, 0xfe}) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000180)=0x4, 0xf, 0x4) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r11, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'rxe\x00'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'rxe\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x8094}, 0x4000000) 5m12.141243917s ago: executing program 3 (id=605): r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000280)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xb, 0x0, 0x0, 0x22}) io_uring_enter(r0, 0x111a, 0x800, 0x2, 0x0, 0x0) 5m12.064480578s ago: executing program 3 (id=606): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth1_vlan\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x5}}) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 5m12.064268303s ago: executing program 3 (id=607): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, 0x0, 0x3}, 0x94) open(0x0, 0x340, 0x30) getpeername(r2, 0x0, 0x0) connect$pppl2tp(r1, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100, 0x1}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000200)={{0x77359400}, 0x11, 0xae, 0x7fffffff}, 0xffffffe7) 5m11.803376872s ago: executing program 3 (id=608): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r0, &(0x7f0000001840)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff07000000fc5e"], 0x125) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000180)=0xffffff5f) syz_io_uring_submit(r1, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) r3 = syz_io_uring_setup(0x233, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={0x0, 0x59}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r7, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x8, 0x0, 0x0}}, 0x10) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 5m11.759326836s ago: executing program 32 (id=608): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r0, &(0x7f0000001840)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff07000000fc5e"], 0x125) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000180)=0xffffff5f) syz_io_uring_submit(r1, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) r3 = syz_io_uring_setup(0x233, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={0x0, 0x59}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r7, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x8, 0x0, 0x0}}, 0x10) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 1m49.848200692s ago: executing program 4 (id=1722): syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x5, 0xc9, 0x9}}}, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) ioctl$sock_bt_hci(r5, 0x400448e3, &(0x7f0000000340)="d90cc34e47a3cf4741a354136c7d81145e80642d09720d590452b6122367faad82998a161bf7232fac46b4373e8a6ca058d7629822aee6457e18a43dd2f054875ec693911af1151fad18620c2647b7a4f615ac51a1b3f2b677847b5d151260bb9e87bc502c4f86eb6db96b69b595f41b19927ba947757a52314a06efb65cd44924d11efdf162386e6b6c97f4ba8d2a9c88c95308e90490f5c19fa0609f93816874fbccf88ffd1d2748e1f37a429e5d") sendmmsg$alg(r5, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x2}], 0x1, 0x40800) r6 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r6, 0x0) sendto$inet6(r6, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000028c0)="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", 0x1000}], 0x1}}], 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000b95000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x40) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0x0, 0xf4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000014c0)=@newtfilter={0x2fe4, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x2fb4, 0x2, [@TCA_FLOW_ACT={0x2f74, 0x9, 0x0, 0x1, [@m_mpls={0xc4, 0x19, 0x0, 0x0, {{0x9}, {0x60, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x73e19}, @TCA_MPLS_TTL={0x5, 0x7, 0x3}, @TCA_MPLS_PROTO={0x6, 0x4, 0x9100}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x10000, 0x7, 0xffffffffffffffff, 0xa, 0x208}, 0x1}}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0x4}, @TCA_MPLS_LABEL={0x8, 0x5, 0x6fd83}, @TCA_MPLS_PROTO={0x6, 0x4, 0xf9}, @TCA_MPLS_BOS={0x5}]}, {0x3a, 0x6, "21284d0630074752f798a00cad888276ebd99705f56c003ef6c884f16c27431ec3fcd020ed6fb6981c509e7b19e994fe41d78286bd8d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_simple={0xec, 0x16, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, '&\xa0}.-^\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffffff, 0x101, 0x6, 0x7, 0x8}}, @TCA_DEF_PARMS={0x18, 0x2, {0xda, 0x2, 0x8, 0x0, 0x5}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x26, 0x5, 0x9, 0x4}}]}, {0x6a, 0x6, "45741dfe9dfaa8080589214491da60d2e3685d027853a3db337b747005483f2ad83f67a23626fccdfe1345def99f1e09271712528cea0e6592753a210e0de8fa65c65999092397bbeef071ccf93c882cd342d67e5e3b27920721675503057c90685b2840d3fc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0x1088, 0x7, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_MARK={0x8, 0x5, 0xfffffffa}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @local}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_PARMS={0x18, 0x1, {0x8, 0x1, 0x2, 0x6, 0x3}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x12}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x61a}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_police={0x1a08, 0x10, 0x0, 0x0, {{0xb}, {0x18f8, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x4, 0x800, 0x800, 0x0, 0x4dcb, 0x6, 0x4, 0x800, 0x8, 0x9, 0x1000, 0x5, 0x0, 0x2, 0x1000, 0x1, 0x0, 0x0, 0x4, 0x7ff, 0x1, 0x2, 0x5, 0x3, 0xe9, 0x6, 0xffffffff, 0x8, 0x5, 0x8, 0xd, 0x5, 0x2, 0x1, 0x81, 0x3a, 0x739, 0x1, 0x8, 0x21f, 0xffffff64, 0x400, 0xed9, 0x1, 0x8b72, 0x8, 0x81, 0x5, 0x1, 0x80000000, 0x9, 0x1, 0x1, 0x7ed, 0xde7, 0x8, 0x2, 0x3, 0xfffffffd, 0xe5, 0x5, 0x1, 0x1, 0xfffffffa, 0xfffffff2, 0x1, 0x3, 0x69, 0x3ff, 0x401, 0x81, 0x5, 0x7, 0xffffffff, 0x5, 0x5, 0xff, 0x3, 0xfffff000, 0x5, 0x7, 0x2, 0x6d47, 0xe, 0x1, 0x10000, 0x7, 0x0, 0x4, 0x0, 0x7f, 0x5, 0x3, 0xfffffff9, 0x0, 0x6, 0xfffffffa, 0x3, 0x4, 0x7, 0x8ab, 0x9, 0x4, 0x10001, 0x6, 0x4, 0x9, 0x2, 0x3, 0x7, 0xe, 0x1, 0x4, 0x0, 0x7f, 0xffffffff, 0xfffffff9, 0x7, 0x8, 0x4, 0x401, 0x9, 0x3, 0xfffffffd, 0x5, 0x5, 0x0, 0x8, 0x100, 0x5, 0xc, 0xa, 0x100, 0xb3, 0x9, 0x4, 0xd86, 0x1, 0x3ff, 0x7, 0x3, 0x0, 0x5, 0x8, 0x0, 0x10001, 0x542e, 0x7, 0x80000000, 0x0, 0x7, 0x92f, 0x9, 0x8, 0x7, 0x46, 0x9, 0x5, 0xffffff5c, 0x3, 0x974c, 0x2, 0x40, 0x2, 0x8, 0x400, 0x9, 0x6f, 0x4b, 0x0, 0x356, 0x9, 0x4, 0xe, 0x4, 0x2, 0xcdb, 0xffffff80, 0x5, 0xd6, 0x3, 0xffffffff, 0xc1, 0x6, 0x1, 0x3, 0x83a, 0x7, 0x9, 0x7eef, 0x9, 0x4b, 0xff, 0x2, 0x6, 0x4, 0x1ff, 0x2, 0xa, 0xb2a9, 0x7, 0x40, 0x5, 0x1, 0x4, 0x0, 0x5875, 0x8, 0x2, 0x0, 0x5, 0x12b, 0x3, 0x76, 0xbb, 0x40, 0xfffffffd, 0x6, 0x1, 0x10000, 0x2, 0x2, 0x2, 0x8001, 0x1b, 0x400, 0x4c9e, 0x8, 0x800, 0x2748c45e, 0xffff, 0x2, 0x4, 0xa0, 0x8, 0x1, 0x874, 0x6, 0x2, 0xe, 0x3, 0xa, 0x8ed2, 0x5, 0x6, 0x1, 0xd4, 0x2, 0xfffffffc, 0x5, 0x2, 0x9, 0x2]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x7fff, 0x1769, 0x40, {0x6, 0x0, 0x7, 0x3, 0x4, 0x2}, {0x7f, 0x2, 0x3, 0xa, 0xcc0, 0xb}, 0x8, 0x101, 0x10}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x800}, @TCA_POLICE_RATE={0x404, 0x2, [0xb7, 0x80000001, 0x4, 0x801, 0xf, 0x3, 0x1, 0x0, 0x2, 0x5, 0x5ec, 0x0, 0x395, 0x8c0d, 0xffff, 0xa, 0x9, 0x200, 0xa, 0x8, 0x51, 0x2, 0xf84, 0x8fbe, 0x7fffffff, 0x10, 0x2, 0xfff, 0x0, 0x7ff, 0x1, 0x7c5f, 0xffffffff, 0x5, 0x1, 0x5d, 0x2, 0xfffffff7, 0x3ff, 0x0, 0x11f7, 0x6, 0x2, 0x7, 0x10000, 0x3, 0x1ff, 0x6, 0x5, 0x4, 0x5, 0x7fffffff, 0xe8c2, 0xffffffff, 0x6, 0x0, 0x1, 0x80000000, 0x9, 0xdaef, 0x80000001, 0x4, 0x9, 0x100, 0x8, 0x6, 0xa0000, 0x80000000, 0x5, 0x401, 0x1, 0xd, 0x5ff2f08e, 0xfffffff8, 0x10000, 0x3, 0xbe, 0x0, 0x2000000, 0x1, 0x6, 0x7ff, 0x5b, 0x7c0000, 0x1ff, 0x75, 0x2, 0x4760121d, 0x0, 0xe, 0xdf, 0xfffffff2, 0x7, 0x3, 0x9b3, 0x7fff, 0x0, 0xfff, 0x46, 0xdafa, 0x5, 0x0, 0x4000, 0x1, 0x6, 0x0, 0x5, 0x307, 0x4, 0x6, 0x7ff, 0x1, 0x3, 0x9, 0x9, 0x9, 0xffffffff, 0x3, 0x101, 0x0, 0xd, 0x3, 0xffff, 0x9, 0x7, 0x2ee, 0x401, 0x6, 0x5dbb4844, 0x1, 0x1000, 0x80, 0x7, 0x6, 0x5, 0x7, 0x6, 0x6, 0x1, 0x5, 0x57, 0x1000, 0x2, 0x40, 0x40, 0x7, 0xfffffff9, 0x7, 0x5, 0x6, 0x8, 0xd, 0x38, 0x0, 0x4, 0x3, 0x9, 0x340, 0x2, 0xfffff55b, 0x78, 0x5, 0x4, 0x100, 0x686, 0x1, 0xd70, 0x7, 0x9, 0x2f, 0x8, 0x10000, 0x1000, 0x2, 0x8, 0xac50, 0x8, 0x22, 0x6, 0x8000, 0x4, 0xffff, 0x4, 0xb8, 0x4ad, 0x7, 0x0, 0x108a46f7, 0x8000, 0x6, 0x4, 0x1, 0x8, 0x3, 0xf, 0x7fff, 0xdc99, 0x3, 0x3, 0x200, 0x4e, 0x401, 0x6, 0x7, 0x7, 0xf666, 0x7, 0x7f6, 0x15c, 0x5, 0x2, 0x8, 0x19a4, 0x401, 0x4, 0x100, 0x3, 0x1800, 0x0, 0x8, 0x6, 0x8, 0x8adf, 0x7f, 0x5, 0x1, 0x8, 0x5, 0x0, 0x1cfb, 0x7ff, 0x371, 0x9, 0x0, 0xfff, 0x5, 0x0, 0x3f, 0xffff1d20, 0x728728bf, 0x1, 0x1ff, 0x8, 0xffffffff, 0x6, 0x9d, 0xfffffffa, 0x409, 0x8000, 0x2, 0x7, 0x0, 0x7, 0x6, 0x7, 0x9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffff56}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffff1a4b}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x35, 0x1, 0x2, 0x8000, 0x400, {0x7, 0x1, 0x5, 0xe, 0x6b, 0x400}, {0x8, 0x1, 0x0, 0x482, 0xfff6, 0x9}, 0x8001, 0x2d, 0x80}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x62}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x1000, 0x7f, 0x2, 0x5, 0x2, 0x8, 0x200, 0xe, 0x1, 0xff, 0x67520355, 0x0, 0x9, 0x9bf, 0x5, 0x1, 0xffff8001, 0xfffffffc, 0x4, 0x3, 0x6, 0x8, 0x8, 0xa4d, 0x10, 0x2, 0x10001, 0x6, 0x20cdc5a8, 0x1, 0x9, 0xa, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x1ff, 0xd, 0x33de, 0xeebb, 0x51, 0x1, 0x8, 0x2, 0xa, 0x6, 0x4, 0x5, 0x9, 0x8, 0xc, 0x2, 0x5, 0x0, 0x8, 0xa64d, 0x7, 0x2, 0x1, 0x5, 0x2, 0x7ff, 0x4da4, 0x1, 0x79f00000, 0x9, 0x3, 0x10001, 0x4, 0xc, 0xffff4030, 0x6d0b4e74, 0x7, 0x54, 0x8, 0x9, 0x10000, 0x0, 0x6, 0x1, 0x2, 0x4, 0x9, 0x4, 0xf, 0x0, 0x81, 0x10, 0x10000, 0x7ff, 0x9, 0x4, 0x0, 0x4, 0x81, 0x3, 0x5, 0xfffffc01, 0xfffffc01, 0x7, 0xffff, 0x9, 0xe, 0x7, 0xb, 0x7fffffff, 0x7, 0x800, 0x9, 0x3, 0x2, 0x8, 0x32000000, 0x3ff, 0x7a1, 0x0, 0x81, 0x3, 0x7, 0x4000, 0x9, 0x74eb1bf8, 0x0, 0x3, 0x9, 0x2, 0x3, 0x9, 0x200, 0x4, 0x6, 0x6, 0x8, 0x7, 0x3, 0x2, 0x1ff, 0x1, 0x9, 0x1, 0x6, 0x7, 0x2, 0xc, 0x7, 0x2f44, 0x9, 0x7, 0x2, 0xcf0, 0x7399a8d4, 0x0, 0x6, 0x4, 0x60f0, 0x0, 0x5, 0x4, 0x4, 0x8, 0x3, 0x8, 0x1ff, 0x9, 0x3, 0x400, 0x9, 0xb0c, 0x1, 0x8, 0x2, 0x4, 0x9deb, 0x0, 0x7fffffff, 0x401, 0x5d, 0xcf, 0x1, 0x6, 0xbd5, 0x9, 0xe830, 0x3, 0x6, 0x8, 0x8, 0x8, 0x400, 0x4, 0xef5b, 0x9, 0xfa, 0x1, 0x400, 0x66c3, 0x7, 0xfffffffa, 0xb1, 0xffffffff, 0x4, 0x9, 0x7, 0x3, 0x4, 0x0, 0x20, 0x3, 0x9, 0x6, 0x6, 0x10000, 0x5, 0x2, 0x3, 0xc9c9, 0xa, 0x80000000, 0xfff, 0x7b, 0x10, 0x1ff, 0x8, 0x5128, 0x5, 0xfff, 0x9, 0x4, 0x6, 0x13c2, 0x2, 0x0, 0x6, 0x82, 0x0, 0x8, 0x0, 0x4, 0x3, 0x0, 0x7ff, 0x36f6, 0xdc9, 0x1, 0x5fa8, 0x2, 0x80000001, 0x6, 0x7, 0x7c, 0x5, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x928, 0x8, 0x5, 0x4c, 0x7, 0xffffffff, 0x0, 0x40, 0x6, 0xfffffe00, 0x3ff, 0x7, 0x80, 0x8, 0xa02, 0x6c2, 0xe, 0x4, 0x6, 0x3, 0xf, 0x100, 0x3, 0x7, 0x72, 0x2, 0x7f, 0x1ab0, 0x8, 0x0, 0xb, 0x7fffffff, 0x7, 0x8, 0x6, 0x3, 0x2, 0x1, 0x5, 0x8, 0x49d, 0x4, 0x700, 0x51053f60, 0x2, 0x4, 0x2, 0x3, 0x3, 0xfffeffff, 0x5, 0x7a4, 0x8000, 0x2, 0x5, 0x8000, 0x80000001, 0x0, 0x4, 0x20bd, 0x80000001, 0x4, 0x38a8, 0xffff0001, 0xfffffff8, 0x0, 0x3, 0x6, 0xd5, 0x6, 0x555f3b84, 0x6, 0x6, 0x5, 0x4, 0x81, 0x558a, 0x3, 0x3, 0x3, 0x4, 0x101, 0xffff235a, 0x3, 0x6, 0x8000, 0x8000, 0x81, 0x2, 0x77, 0x200, 0x7, 0x7, 0x5, 0xffffffff, 0x1, 0xffff, 0xf4e, 0x80000000, 0x6, 0x7, 0x6, 0xffffffa8, 0xff, 0x3ff, 0x0, 0x9, 0x7, 0x13, 0x4, 0x4, 0x3435, 0x1, 0x8, 0x3, 0x8, 0x1, 0x7fffffff, 0x2, 0x3, 0xfffffff8, 0x5, 0x0, 0x6, 0xfffffff9, 0x9, 0x7, 0x2, 0x2ba, 0xd, 0x10, 0x2, 0x4, 0xee, 0x0, 0x1, 0x9, 0x9, 0xfffffff7, 0x5, 0xfffffffb, 0x1, 0x200, 0x9d3c, 0x400, 0x10, 0x10000, 0x7, 0x8, 0x4499e42d, 0x9, 0x7f, 0x6, 0x1ff, 0x7e, 0x4, 0x8, 0x3e7, 0x0, 0x8, 0x1c0, 0x14, 0x64de, 0x7f, 0x80, 0x7, 0xe30c, 0x70c, 0x2, 0x80000000, 0x4, 0x5, 0x7, 0x2, 0xfffffff7, 0x5, 0x3, 0x8, 0x7ff, 0x0, 0x9, 0x98, 0xffff7fff, 0x4f, 0x15c175dd, 0x1f, 0x1000, 0x4, 0x5, 0x1, 0xffffffff, 0xfffffff8, 0xb1e, 0x2, 0x9, 0x3, 0x6, 0x5, 0xbf7, 0xb7e8, 0x1, 0xa75, 0x100, 0x8, 0x10000, 0x3, 0xc24a58bb, 0x6345, 0x9, 0x3, 0x80000001, 0x7, 0x100, 0x81, 0x2, 0x7, 0x11, 0x100, 0x7, 0x7f, 0x3, 0x100, 0x3, 0x8001, 0xffffffff, 0x3, 0xae7, 0x9, 0xfffffff9, 0x439c, 0xfffffff8, 0x5, 0x40, 0x4, 0x8f86, 0xfffffff8, 0x0, 0xd, 0xfffffffe, 0x5, 0x27e, 0x2, 0x3e0, 0x1, 0x5, 0x2, 0x8, 0x1, 0x38c2, 0x2, 0x4, 0x7, 0xff, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x80000000, 0x3, 0xc000000, 0xa5cf, 0xfff, 0x8, 0x9, 0x48d, 0x3, 0x0, 0x5, 0x2, 0x5, 0x40, 0x80000001, 0x1, 0x5, 0x2, 0x4, 0x2a97, 0x7fffffff, 0x639, 0xe, 0x9, 0x4027, 0x6, 0xadf2, 0x0, 0x200, 0x5, 0x9, 0xffff7fff, 0x7, 0xffffff80, 0xc0, 0x4, 0x4, 0x5, 0x3, 0x4, 0x9550, 0x311d, 0x7, 0x8, 0x7, 0x8, 0x8, 0x81, 0x7, 0x3, 0x3, 0xae7, 0xd, 0x2, 0x9, 0xffffff5e, 0xa, 0x81, 0x4, 0x9, 0x7f, 0x2, 0x8, 0x5, 0x3, 0x3, 0x6, 0x1, 0x4, 0xb4, 0x4e4, 0x3, 0x1000, 0x1, 0x9, 0x5, 0x7ff, 0x6, 0x0, 0x449c, 0x6bd, 0x3, 0xffffff2d, 0x1, 0x0, 0xfc8, 0x40, 0xff, 0xeae, 0x40, 0x0, 0x9, 0x8, 0x3, 0x7d56f0f0, 0x3, 0x4, 0x7, 0xd759, 0xbf1, 0xfffffff9, 0x400, 0x6, 0xfff, 0x8, 0x4, 0x1, 0x6, 0x8170, 0x3, 0x0, 0x2, 0x1e8b, 0x4, 0x7, 0x1, 0x3, 0x401, 0xe, 0x9, 0xe, 0x401, 0xe915, 0xfffffff5, 0x80, 0x4, 0x2, 0xfffffff7, 0x1, 0x1000, 0x4, 0x8000, 0x1, 0x1, 0x7f, 0x2, 0x0, 0x934, 0x1, 0xb3d1, 0x7, 0x0, 0xcc, 0x1, 0xd5d6, 0x6, 0x4, 0x0, 0xc35, 0x2f, 0x2, 0x2, 0x40, 0xfff, 0x4, 0x7, 0x7, 0x2a, 0xb, 0x7, 0x8001, 0x7e9f, 0x9, 0x65699c4f, 0xffff, 0x3c, 0x7, 0x1, 0x5bda, 0x400, 0x8, 0x7, 0x5a, 0x80000000, 0x60, 0x1, 0x8, 0x7, 0x9, 0x6, 0x5, 0x6, 0xb, 0x5, 0x6, 0xd2af, 0x0, 0x9, 0x3, 0x10, 0x4b, 0xf, 0x4, 0x3, 0x4, 0x0, 0x9, 0x5, 0x2, 0x9, 0xfffff574, 0x401, 0x3, 0x6, 0xfffffff2, 0x0, 0xd0, 0xfffffffa, 0x1, 0x9, 0x1, 0x1, 0x6, 0x4, 0xd88, 0x0, 0x9b, 0x1, 0xf0, 0x7, 0x0, 0x55, 0x7, 0x2, 0xfffffff8, 0x6d000000, 0x5, 0x94, 0x7f, 0x8c, 0x6, 0x82c, 0xe, 0x20000000, 0x7, 0x6, 0x0, 0x40, 0xe527, 0x81, 0x0, 0x1, 0x40, 0x40, 0x4e, 0x0, 0x2, 0x7, 0xbe, 0x8, 0x4, 0x9, 0x0, 0x8, 0x400]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x401}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x80, 0x0, 0x9, 0x1, 0x836, 0xa27, 0xc45, 0xfffffffc, 0xb4, 0x10000, 0x36b5, 0x9, 0xa44, 0xba45, 0x0, 0x3, 0x5, 0x1, 0xc0, 0x6, 0x0, 0x101, 0x80, 0x76800000, 0x81, 0x1000, 0x8000, 0x1, 0x3, 0x1, 0x7, 0x1, 0xffffffee, 0x5, 0xf4b2, 0x70f1, 0x6, 0x3ca, 0x1, 0x9, 0xa9, 0x8, 0x2000, 0x9, 0x10000, 0x0, 0x6, 0xd, 0x2, 0x5, 0x7, 0x8001, 0x5, 0x8, 0x8, 0x9b6f, 0x7, 0x8, 0x4, 0x2, 0xfc, 0x3fb, 0xc39, 0x4, 0x7, 0x1, 0x5, 0x32bf, 0xda2e, 0xc0c, 0xfffffff9, 0x9, 0x9, 0x101, 0x7, 0x80000001, 0x10001, 0x9, 0x8e6, 0x6, 0x1, 0x6, 0xf, 0x8000, 0x8, 0x3, 0x4, 0x9, 0x7, 0x4, 0x2, 0x7, 0x3, 0x0, 0x3, 0x5, 0x10, 0x0, 0x8392, 0x6, 0x10001, 0x2, 0x9, 0x1ff, 0x1, 0x4, 0x9, 0x3, 0xde40, 0x78d1, 0x2, 0x9, 0x4, 0x6, 0xfffffff2, 0x3, 0x0, 0x6, 0x4, 0x3, 0x8000, 0xfff, 0x6, 0x0, 0x9, 0x5, 0x1, 0xda54, 0x5, 0x1000, 0xcc, 0x5a4, 0x6, 0x10, 0xa, 0x1, 0x6, 0x1, 0x4, 0x7f, 0x0, 0xe00, 0x8, 0xfffffff7, 0x10000, 0x1, 0x46c3a83a, 0x5, 0x10000, 0x101, 0x4, 0x210f985d, 0x10, 0x7, 0x6, 0x10000, 0xc5b, 0x5, 0x9f06, 0x1, 0x9, 0xb, 0x775088ff, 0x4, 0x9, 0x5, 0x2f09, 0x9, 0xe, 0x9, 0xe, 0x9, 0x80000000, 0xa, 0x4, 0x101, 0xfffffff3, 0x2, 0x1, 0x5, 0xff, 0xd76, 0xe, 0x7, 0x6, 0x8, 0xb47, 0x4, 0x3, 0x0, 0xcf, 0x7, 0x4, 0x101, 0xfffffffb, 0x5, 0xffff, 0x5, 0x0, 0x3, 0x8e, 0x2, 0x3, 0x9, 0xa, 0x2, 0x0, 0x1, 0x6, 0x9, 0x0, 0xe, 0x5, 0xffffff7b, 0x2, 0x9, 0xdb, 0x9, 0x5, 0x8, 0x9, 0x4, 0x1, 0x1, 0x5, 0x200, 0x4, 0x9, 0x1ff, 0x7, 0x62e, 0x1, 0x100, 0x3, 0x8, 0x100, 0xfffffffe, 0xffff, 0xff, 0x2, 0x4, 0x80000001, 0x8, 0x3, 0x7fff, 0x7fff, 0x8, 0xe, 0x3, 0x7ff, 0x8, 0x9, 0x7, 0x7ff, 0x7]}]]}, {0xe7, 0x6, "182a6d8dc63c9ff98439b9e6c019db9f9aa7671018f9f23b579225c5952fae37ad2822f9872d0e12860ca1dffb4d91d0c556574dac49835a28c81b83a16e7dd45c308b701e43cf9994c1cfd7e65e26818bee42f4adb92cc7cd8fed475cfb4f3a273375c5dec106261606acd14f3580e0431db14afdfd274594accc41ef2c7bacf4993bda1d604a1311926e8fc919717b4ca02ad6d55d6129f33c850ca76f16a4ee569acfc16484e992d9834837492cb58410e50fb54e41ed004d86f1135f616f0ffa3e4eff9055ee73c84702adf1464a1cf870add1aa1ddd13dcc1a7124595af46871d"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0xc8, 0x19, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x8, 0x2, 0x6, 0xffffffff}, 0x4}}]}, {0x7d, 0x6, "77127489476077c4f6b022701b5d4843e756857de6cfe6fd3b04655d66799eccc04599a7b9f3d9e8f8f624d654db104143bd07c3aae1ce8eef8d8521f2891ba0584b98bf2195f846e8036f95b3af500c6059961422bd74bf53f845a2edb323c04100e4b552f75fe73ea0fb606963bc2552a4d2b23d212921ab"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0x134, 0x13, 0x0, 0x0, {{0xfffffcb0}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1d0}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}]}, {0xf6, 0x6, "9b7184862c35362b944612751e9ea081bd22c2b8d201587dd724cf35fed784cb82c87b0161e06f4ed0b47bf97ad2fb9c358a2b720483ea556872692bcf7b9c9cec398a79d110f242c85c8f3de1170d9c16bd7be9dc57dc7623e282feec8efec9d93992968a23fba94d046d6dbba04021e7fa7f02c6b65028a21209145e11562b51e91755a0a594f79875b57c232f3fd9c8e07dc53e6d9a0e778eec47d908d077a187208732e949ae73fa6834597b31b8660d55a7a731b8993d0695c283fc3a1e5166400a579cc18a03b634bc0f0ad6b320ff6f266cea9cc8f7d92f3c728b22cf82a04d68c83ffbe70c2bbafa895d5806d753"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0x134, 0xf, 0x0, 0x0, {{0xf}, {0x2c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1}]}, {0xdc, 0x6, "3b4d72a89d78d61f93a56b8ec1033b68c7f9a4ce4134f6499e7a1b044d02df9e32b031d38a17a1c554e3b6c97ad342b3d9e6fcd9535f2fc3bc79c80200bc06c19dbf6641e03b48889909222cbfb73fcca22452835c2a54c60d6eabe93ec384a604cf7803ede09bb5ddf5ce13692da8efceb2a5ec7eeeac88156eb89410ed4d5519b05c322bfc8241faddfa0d596c65cac90edfec61fde1b762e24e4ef3dea5031d9c236e05da1b3ba8295070435f3000e2237ae5ef557b63bb280c10704c81bd4044774fa4f3e93a6e2821acece79c28e6d52f48b2b3b84a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_FLOW_MASK={0x8, 0x6, 0x937}, @TCA_FLOW_EMATCHES={0x34, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf584}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x0, 0x2, 0x0, 0x0, {{0x9, 0x8, 0x7}, {0x3, 0x4, 0x5}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1ff}}]}]}}]}, 0x2fe4}, 0x1, 0x0, 0x0, 0x4004000}, 0x2008c014) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, 0x0, 0x0) 1m49.706621049s ago: executing program 4 (id=1723): r0 = syz_io_uring_setup(0x10d, &(0x7f00000004c0)={0x0, 0x8b7c, 0x800, 0x7, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) r3 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0x4340, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00!:', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="7a0a0000186300000d000000000000000300000085100000020000009500"/48], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) ioctl$PPPIOCSMRRU(r3, 0x4004743b, &(0x7f0000000040)=0xb466) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f9, 0x1fff, 0x1, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x20000002, 0x804c0) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0xfffffffffffffe8a, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002200210b24bd7002fddbdf2500000000d47068da13742a49bb3a85070224ce2b5042b95ec5df4570b473ddfdba7792bbe558041b761e0bd3d45fbd0180b76083a95907aa9a0b46e9089394afefe1119f22"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x0) lseek(0xffffffffffffffff, 0x101, 0x1) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0) fsopen(&(0x7f0000000200)='tmpfs\x00', 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) open(0x0, 0x108843, 0x190) 1m48.718940279s ago: executing program 4 (id=1728): madvise(&(0x7f0000122000/0x4000)=nil, 0x4000, 0x66) (async) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) syz_open_dev$admmidi(&(0x7f0000000080), 0x7, 0x8400) (async) r1 = openat$dlm_control(0xffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0x9, 0x40, 0x0, 0x51, 0xa}) 1m48.326010571s ago: executing program 4 (id=1729): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000008000100", @ANYRES16], 0x1c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000480)=@assoc_value, 0x0) r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003480)=[{{&(0x7f00000003c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000180), 0x0, &(0x7f00000006c0)=""/113, 0x71}}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000002f40)=""/88, 0x58}, {&(0x7f0000002fc0)=""/185, 0xb9}, {0x0}], 0x3}, 0x3}, {{&(0x7f0000003340)=@ieee802154, 0x80, 0x0, 0x0, &(0x7f0000006b80)=""/4096, 0x1000}, 0x250}], 0x3, 0x40002110, &(0x7f0000003580)={0x0, 0x3938700}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000000)) openat$nci(0xffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000001c0)={0x410000, 0x2, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x2, @sliced={0x8, [0x1, 0x8, 0x5, 0x3ff, 0x9, 0x2, 0x6, 0x8, 0x1ff, 0xd9, 0x494, 0x139, 0x6, 0x5, 0x5, 0x7, 0x6, 0x9, 0x2, 0x1005, 0x1, 0x1, 0xd, 0x9, 0x9, 0x8, 0xc8bc, 0x8, 0x7, 0x9, 0x4, 0x5, 0x9, 0x2, 0x9, 0x258d, 0xa, 0x9, 0x6, 0x1, 0xb, 0x79, 0x7ff, 0x7, 0x7f, 0xdea, 0x5, 0x9b], 0x80000000}}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad84825"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000001040)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x6, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592e66e6229bc5c7ac135fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) close_range(r3, 0xffffffffffffffff, 0x10000000000000) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) 1m47.160509858s ago: executing program 4 (id=1733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) r2 = openat$snapshot(0xffffff9c, &(0x7f0000000680), 0x18000, 0x0) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04000081000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newae={0x5c, 0x1e, 0x301, 0x70bd2a, 0x25dfdbfa, {{@in=@remote, 0x4d6, 0x2, 0x2b}, @in6=@mcast2, 0x0, 0x3500}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd29, 0x70bd2c, 0x70bd25, 0x70bd2d}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r4, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000340)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x772d42, 0x0, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) syz_fuse_handle_req(r4, &(0x7f0000007300)="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", 0x2000, &(0x7f0000001880)={&(0x7f0000000600)={0x50, 0xffffffffffffffda, 0x8000001, {0x7, 0x2b, 0x2, 0x241000, 0x96ec, 0x40, 0xff, 0x446, 0x0, 0x0, 0x4, 0xfffffff7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, 0x0, 0x0, 0x1010000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r5 = openat(0xffffffffffffff9c, 0x0, 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) io_setup(0x3ff, &(0x7f0000000500)) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000005c0)) io_setup(0x907b, &(0x7f0000000580)) r6 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x0}, 0x10, 0x80800) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x4, 0x2, 0x0, 0x4, {0xa, 0x4e20, 0xffffff81, @loopback, 0x2}}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000000c0)="1e1d0ea97ac24663fce136ee24ac0169a9893399633d0f6f4f0c4a09a646861525495dd8673cfff8e2392c9cec417c15d4988952c5bb7896c72e83ba17f4244da6ef764a1fd930ea351badc5aa50943d39361071e7bd8c991738c76ea3832e2390", 0x61}, {&(0x7f0000000140)="83d2bda62ad91b8fe4e7de20bc3d8fb96e0d978dad3cade0f3239766dddd74a7cef3fce69d17f4f2e4a20b4ed22e17406e2486a879e6871b2b784f0166a3435e570b0d0431c35ed655ea6b97ea26750aacc7d904af526c63358993c33e1ce955888ea2b9c3119ff689bdb5da25e9a19871b13f6b640e574c8460844baee4ea27e81991487b7a90725120a0be8a0f6bb42cfec20ce3de51be3281d34424ab563b479336247153547964eef1d9707b8088aa9e778cf5db61821abf3e55df3339bcf0d6d7a8c41d9a7298af067b986b3738325c8142", 0xd4}, {&(0x7f0000000240)="15438b7ad7fbb57193c97f1e3415f7418f8977ed96e9cccf00bfa54889c3cdcce194344ab4faf67c301a555e8a9226857620236ca310e4eef6e3d874cfcab1a29cb1b402671b5d9141cdd10c00967162f5f2c7046ffcb74575743540fd0e836a2154bdd83f15e4e7cdc03fd34323698adc316fd7e8cc3aab411262998ccf505a61d26303d38e979047c7b399eddd", 0x8e}, {&(0x7f0000000300)="a439114baacd3c14d453ea915fbc874c4aedcc0cbd807a6dc9d5c7da0bf71d0e59b458fa5eb8ace9d8d98246fd184e7946795168d35861d9ae2466d5427b686357310e473e4bd3d5925a470158fb0320ef23df1e8b8629b8ff8831e9f3dc3e49ace68ddc9618cfca099072df19df25ccc7f7c91520eda44cbf661d2a3fe06a534128a9c8a99b3e788261836a24b96ca0d5ded80cb4f8764ac20609456bf9bcf08d969ef43d2d90df6e2ac5ae97dd2f2cbca63992ec6ebc5633e3d05709f74d8fdd", 0xc1}, {&(0x7f0000000400)="ffa5af56fc4667d42f192c7aea1614ab5f7302654ea4207518bc491572e8fb12752655ce8a4dd8eb7cebd82e606092671efd0e2f14d008c465eadf3f49b183c0111d50ff545f41462a8ba8b5e53ca0ee281f750a07d13987a854af6bee563c9f3ad5c1e9924f7e40c092134887a9b5bf9da21704f5e5deb30a5beea464b2103b8f49630ea188281627aede9eeceaf54c6328a15c6335140b12f7f28cdda5fd04082d1e9a6a3ff396f74b28c3aa30313cc18040b7e49ad9ee5aa95177ec68b554248ca1d04b81720108919e9dd5146dcd7400d7860cb985", 0xd7}], 0x5, &(0x7f0000000900)=[{0x30, 0x112, 0x9, "e93a92ff20cc7cd6afcceb7d2777ea80b646d289cb314fc8dbc222d2fd24a6efb2"}, {0x80, 0x116, 0x433, "3979d61a7a7dcb71a9b5f1d8adfe782f73c20b962de343e49ddd4abd9cf508f2576f23e8d76b110161f951cc03a34c0df3f20788a0d275078691f34b199f1da25e1ed0615fd7b78d809b7ceaab9da66e94e94047ce470b13760329c795528321a281286593a2aa4b6f44b75e9281fa49e4"}, {0x14, 0x111, 0x1, "68869fd320902bc2"}, {0x28, 0x10a, 0xffff, "a03c76af4ec673c799443d7aaab1bb85829be76f3119fe8d1459"}, {0xe4, 0x101, 0xef0, "06a92397f03dd089ad866650f5b256b47c71f5f6cee35cab1847d669e153baddf0c19922f46fe443cfb0ed80a91b2386db5e1628bc3da98195f741f3112925ec68f1fd17bfa5d843bfa1716556d0df65da29eb4db9c421af61cbe9bbda5a859f3638117e93cae462f7ee7a35c814db99ddffd42b74e8b1da2398d2c599e9976e48402d1ea08b5fef11096327d6d8e0a9c9c39764bfbd231845cdf95a6438358ef1e4076bb191950b10a9d4e28d60bde7045428e9eb24d90b78d8ef2dce01500f8d8379cfa54ac6b07f0879f8fa6e52d697e3a305738c"}, {0x9c, 0x10c, 0x6, "9e55bf78efddbf8faa4447e8d66ec877043293b749ec90476b2d37ee71da91a05de02b2dc3c8320c725ffd6f1aeb31f54e874a017960d3119508d91ec87e635b0fe2e0c330c0d4baa33a9ef55eccd5e24e77c7f274ec70ee4a57bf9cb11ad10413c159ee796a02d6ae258eea178096b968ea7f75fafcd06172bce7c8d1e8f779c6c162279195af2b8799c4847e6ed96c"}, {0xb0, 0x112, 0x7, "444b136b97780f636f5b13fc6659d584f76066d9510e19880c6c72629f980809e1c25d5c14b8f816dcfbd29f41d655b2bcc583b0897e46cf75dfb501ff9a99f9435f8f0d3b836bdf78bb4400cca13273a6881ae1fdd0481316a66c6110ef7dcb9ca8ed12be72fb80819b41c8de1d7497518c2c463a1b42f047eadb382d11221a3f6b1594cd5379ea8c1630e1823f7a2ef9280acd0e33c99392ca901c2601e5153f"}, {0x28, 0x6, 0x0, "1d50eeb656efd0a04c80643d57434e24a667d3dee7e016644b611030"}], 0x344}, 0x840) 1m46.912581162s ago: executing program 4 (id=1734): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffc, 0x4, &(0x7f0000006680)) getuid() r0 = socket(0x10, 0x6, 0xe) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x2, {0x1, 0x0, 0x5}}, 0x18) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0x21, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @alu={0x0, 0x0, 0xc, 0x0, 0x6, 0xfffffffffffffff8, 0x8}, @alu={0x4, 0x1, 0xc, 0x9, 0x2, 0x18, 0xfffffffffffffffc}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x5, 0x10, 0x5a}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x2, 0x5, 0x6, 0x5}, {0x0, 0x5, 0x1, 0x7}, {0x4, 0x3, 0x6, 0x3}], 0x10, 0x101}, 0x94) socket$rxrpc(0x21, 0x2, 0x8) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x32, 0x4000, @fd=r4, 0x7, 0x0, 0x0, 0x8, 0x1, {0x1}}) r5 = socket(0xa, 0x80000, 0x20000000) openat$kvm(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x891c, &(0x7f0000000540)={'ip6tnl0\x00', {0x2, 0x0, @private=0xfffffffe}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f00000000c0)=0x3) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002540)=ANY=[@ANYBLOB="1c000000", @ANYRESHEX=r6, @ANYBLOB='ya\x00\x00\x00', @ANYRES8, @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x2404c085}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x640688d1) socket$netlink(0x10, 0x3, 0x4) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 1m31.647083648s ago: executing program 33 (id=1734): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffc, 0x4, &(0x7f0000006680)) getuid() r0 = socket(0x10, 0x6, 0xe) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x2, {0x1, 0x0, 0x5}}, 0x18) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0x21, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @alu={0x0, 0x0, 0xc, 0x0, 0x6, 0xfffffffffffffff8, 0x8}, @alu={0x4, 0x1, 0xc, 0x9, 0x2, 0x18, 0xfffffffffffffffc}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x5, 0x10, 0x5a}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x2, 0x5, 0x6, 0x5}, {0x0, 0x5, 0x1, 0x7}, {0x4, 0x3, 0x6, 0x3}], 0x10, 0x101}, 0x94) socket$rxrpc(0x21, 0x2, 0x8) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x32, 0x4000, @fd=r4, 0x7, 0x0, 0x0, 0x8, 0x1, {0x1}}) r5 = socket(0xa, 0x80000, 0x20000000) openat$kvm(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x891c, &(0x7f0000000540)={'ip6tnl0\x00', {0x2, 0x0, @private=0xfffffffe}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f00000000c0)=0x3) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002540)=ANY=[@ANYBLOB="1c000000", @ANYRESHEX=r6, @ANYBLOB='ya\x00\x00\x00', @ANYRES8, @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x2404c085}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x640688d1) socket$netlink(0x10, 0x3, 0x4) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 2.119424385s ago: executing program 2 (id=2171): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x2000c0d0) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r1, 0xb) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = open$dir(0x0, 0x290200, 0x4) mkdirat(r2, &(0x7f0000000080)='./file1\x00', 0x59) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x20008b}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002f80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x8000000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102400, 0x19000) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents(r5, 0x0, 0x0) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000180)=""/98) 1.470541856s ago: executing program 1 (id=2174): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0xe, 0x0, 0x1, 0x8, 0x6, @broadcast}, 0x14) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 1.370364255s ago: executing program 1 (id=2175): syz_emit_ethernet(0x7a, &(0x7f0000000440)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private1, [@hopopts={0x3a}, @routing]}}}}}}}, 0x0) 1.370085996s ago: executing program 1 (id=2176): ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x37) 1.338018755s ago: executing program 1 (id=2178): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, 0x0, 0x8010) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x14, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x4040000) 1.271160501s ago: executing program 1 (id=2181): socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r2, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 1.118058775s ago: executing program 5 (id=2184): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) 1.106446141s ago: executing program 5 (id=2185): syz_emit_ethernet(0x7a, &(0x7f0000000440)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private1, [@hopopts={0x3a}, @routing]}}}}}}}, 0x0) 980.056283ms ago: executing program 5 (id=2186): ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x37) 979.946318ms ago: executing program 5 (id=2187): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8801) fstatfs(r1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 911.002289ms ago: executing program 2 (id=2188): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mknodat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) 910.693995ms ago: executing program 2 (id=2189): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x100, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x18, r2}, 0x10) 830.615097ms ago: executing program 2 (id=2190): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, 0x0, 0x8010) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x14, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x4040000) 829.962752ms ago: executing program 2 (id=2191): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'veth0_vlan\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@setlink={0x2c, 0x13, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r0, 0x800, 0x80}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1404c0d5}, 0x10) 749.990774ms ago: executing program 2 (id=2192): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002f00)}}, {{0x0, 0x0, 0x0}}], 0x3, 0xf000000) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000180)='4\x00', 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 447.469144ms ago: executing program 0 (id=2193): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x100000001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000240)={0xe, 0x1, 0x1, "005a03f073e22f00000000002000fffe00009a0300000000000000000400", 0x20363159}) 345.334032ms ago: executing program 0 (id=2194): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f00000002c0)=""/91, 0x5b) 345.042897ms ago: executing program 1 (id=2195): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000100)={"50e32a0e47ea614206bd50c02dcde418126cfc6a8ba66709bca5f84dd6c58b6a"}) writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 342.564972ms ago: executing program 0 (id=2196): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 210.949498ms ago: executing program 0 (id=2197): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r1, 0x0, 0x0, 0xa3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000040)={0x8, r2}) 149.164152ms ago: executing program 0 (id=2198): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x100, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x18, r1}, 0x10) 116.024855ms ago: executing program 0 (id=2199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(r1, &(0x7f0000000240)={0x11, 0xe, 0x0, 0x1, 0x8, 0x6, @broadcast}, 0x14) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 115.867609ms ago: executing program 5 (id=2200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, 0x0, 0x8010) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x14, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x4040000) 0s ago: executing program 5 (id=2201): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@deltfilter={0x24, 0x2d, 0x8, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xc, 0x3}, {0xb, 0x2}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @loopback, 0x4}, 0x1c) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0x8, 0xffe0}, {0x0, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x807f}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi1\x00', 0x40041, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 9] ? rcu_is_watching+0x12/0xc0 [ 350.627871][T12009] p9_client_walk+0x1ab/0x530 [ 350.627892][T12009] ? __pfx_p9_client_walk+0x10/0x10 [ 350.627914][T12009] ? v9fs_fid_lookup+0xe9/0xeb0 [ 350.627944][T12009] v9fs_vfs_lookup+0x206/0x5b0 [ 350.627965][T12009] ? __pfx_v9fs_vfs_lookup+0x10/0x10 [ 350.627984][T12009] ? lockdep_init_map_type+0x5c/0x280 [ 350.628010][T12009] ? lockdep_init_map_type+0x5c/0x280 [ 350.628039][T12009] __lookup_slow+0x24e/0x460 [ 350.628068][T12009] ? __pfx___lookup_slow+0x10/0x10 [ 350.628098][T12009] ? perf_trace_mm_compaction_suitable_template+0x3a0/0x5e0 [ 350.628132][T12009] ? perf_trace_mm_compaction_suitable_template+0x3a0/0x5e0 [ 350.628159][T12009] ? d_lookup+0xe7/0x190 [ 350.628197][T12009] lookup_one_unlocked+0xd4/0x120 [ 350.628226][T12009] ovl_lookup_single+0x2ed/0x1270 [ 350.628255][T12009] ? __pfx_ovl_lookup_single+0x10/0x10 [ 350.628284][T12009] ovl_lookup_layer+0x3d4/0x480 [ 350.628309][T12009] ? __pfx_ovl_lookup_layer+0x10/0x10 [ 350.628327][T12009] ? trace_kmalloc+0x2b/0xd0 [ 350.628360][T12009] ovl_lookup+0x13f9/0x21a0 [ 350.628391][T12009] ? __pfx_ovl_lookup+0x10/0x10 [ 350.628410][T12009] ? generic_permission+0xad/0x7d0 [ 350.628438][T12009] ? bpf_lsm_inode_permission+0x9/0x10 [ 350.628464][T12009] ? inode_permission+0x156/0x630 [ 350.628492][T12009] ? ovl_revert_creds+0x13/0x50 [ 350.628512][T12009] ? ovl_permission+0xcd/0x290 [ 350.628530][T12009] ? __pfx_ovl_permission+0x10/0x10 [ 350.628553][T12009] ? bpf_lsm_inode_permission+0x9/0x10 [ 350.628575][T12009] ? security_inode_permission+0xbf/0x260 [ 350.628600][T12009] ? inode_permission+0x156/0x630 [ 350.628627][T12009] ? __pfx_ovl_lookup+0x10/0x10 [ 350.628646][T12009] lookup_open.isra.0+0x4da/0x1580 [ 350.628670][T12009] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 350.628704][T12009] ? __pfx_down_write+0x10/0x10 [ 350.628720][T12009] ? mnt_get_write_access+0x20c/0x300 [ 350.628752][T12009] path_openat+0x893/0x2cb0 [ 350.628782][T12009] ? __pfx_path_openat+0x10/0x10 [ 350.628812][T12009] do_filp_open+0x20b/0x470 [ 350.628834][T12009] ? __pfx_do_filp_open+0x10/0x10 [ 350.628875][T12009] ? alloc_fd+0x471/0x7d0 [ 350.628903][T12009] do_sys_openat2+0x11b/0x1d0 [ 350.628930][T12009] ? __pfx_do_sys_openat2+0x10/0x10 [ 350.628959][T12009] ? __fget_files+0x20e/0x3c0 [ 350.628977][T12009] ? handle_mm_fault+0x240/0xd10 [ 350.629000][T12009] __ia32_compat_sys_open+0x146/0x1e0 [ 350.629018][T12009] ? __pfx___ia32_compat_sys_open+0x10/0x10 [ 350.629041][T12009] ? rcu_is_watching+0x12/0xc0 [ 350.629058][T12009] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 350.629091][T12009] __do_fast_syscall_32+0x7c/0x300 [ 350.629110][T12009] do_fast_syscall_32+0x32/0x80 [ 350.629127][T12009] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 350.629149][T12009] RIP: 0023:0xf7f47579 [ 350.629164][T12009] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 350.629181][T12009] RSP: 002b:00000000f543655c EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 350.629206][T12009] RAX: ffffffffffffffda RBX: 0000000080000580 RCX: 0000000000181240 [ 350.629218][T12009] RDX: 000000005997fa4f RSI: 0000000000000000 RDI: 0000000000000000 [ 350.629228][T12009] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 350.629238][T12009] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 350.629249][T12009] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 350.629273][T12009] [ 350.647766][ T1138] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.809092][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.832928][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.836276][T12011] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 350.838993][T12011] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 350.842073][T12011] vhci_hcd vhci_hcd.0: Device attached [ 350.845502][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.174959][ T8204] usb 40-1: SetAddress Request (34) to port 0 [ 351.177818][ T8204] usb 40-1: new SuperSpeed USB device number 34 using vhci_hcd [ 351.417435][T12012] vhci_hcd: connection reset by peer [ 351.420558][ T1138] vhci_hcd: stop threads [ 351.422171][ T1138] vhci_hcd: release socket [ 351.423812][ T1138] vhci_hcd: disconnect device [ 351.469974][ T24] usb 7-1: new low-speed USB device number 31 using dummy_hcd [ 351.631428][ T24] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 351.634808][ T24] usb 7-1: config 0 has no interface number 0 [ 351.637254][ T24] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 351.641136][ T24] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 351.644716][ T24] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 351.648391][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.654326][ T24] usb 7-1: config 0 descriptor?? [ 351.657140][T12019] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 351.664455][ T24] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 351.839536][ T5699] usb 42-1: device descriptor read/8, error -110 [ 351.935377][T12019] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 352.165828][T12050] FAULT_INJECTION: forcing a failure. [ 352.165828][T12050] name failslab, interval 1, probability 0, space 0, times 0 [ 352.170985][T12050] CPU: 1 UID: 0 PID: 12050 Comm: syz.4.1592 Not tainted syzkaller #0 PREEMPT(full) [ 352.171010][T12050] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 352.171018][T12050] Call Trace: [ 352.171023][T12050] [ 352.171027][T12050] dump_stack_lvl+0x16c/0x1f0 [ 352.171048][T12050] should_fail_ex+0x512/0x640 [ 352.171065][T12050] ? __kmalloc_noprof+0xbf/0x510 [ 352.171080][T12050] ? ovl_lookup+0x1243/0x21a0 [ 352.171092][T12050] should_failslab+0xc2/0x120 [ 352.171107][T12050] __kmalloc_noprof+0xd2/0x510 [ 352.171119][T12050] ? ovl_lookup+0x766/0x21a0 [ 352.171134][T12050] ovl_lookup+0x1243/0x21a0 [ 352.171149][T12050] ? privileged_wrt_inode_uidgid+0xca/0x1d0 [ 352.171167][T12050] ? __pfx_ovl_lookup+0x10/0x10 [ 352.171179][T12050] ? generic_permission+0xad/0x7d0 [ 352.171196][T12050] ? bpf_lsm_inode_permission+0x9/0x10 [ 352.171213][T12050] ? inode_permission+0x156/0x630 [ 352.171230][T12050] ? ovl_revert_creds+0x13/0x50 [ 352.171242][T12050] ? ovl_permission+0xcd/0x290 [ 352.171253][T12050] ? __pfx_ovl_permission+0x10/0x10 [ 352.171267][T12050] ? bpf_lsm_inode_permission+0x9/0x10 [ 352.171281][T12050] ? security_inode_permission+0xbf/0x260 [ 352.171296][T12050] ? inode_permission+0x156/0x630 [ 352.171312][T12050] ? __pfx_ovl_lookup+0x10/0x10 [ 352.171324][T12050] lookup_open.isra.0+0x4da/0x1580 [ 352.171338][T12050] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 352.171357][T12050] ? __pfx_down_write+0x10/0x10 [ 352.171367][T12050] ? mnt_get_write_access+0x20c/0x300 [ 352.171386][T12050] path_openat+0x893/0x2cb0 [ 352.171404][T12050] ? __pfx_path_openat+0x10/0x10 [ 352.171418][T12050] ? __lock_acquire+0xb97/0x1ce0 [ 352.171434][T12050] do_filp_open+0x20b/0x470 [ 352.171447][T12050] ? __pfx_do_filp_open+0x10/0x10 [ 352.171470][T12050] ? _raw_spin_unlock+0x28/0x50 [ 352.171485][T12050] ? alloc_fd+0x471/0x7d0 [ 352.171501][T12050] do_sys_openat2+0x11b/0x1d0 [ 352.171518][T12050] ? __pfx_do_sys_openat2+0x10/0x10 [ 352.171535][T12050] ? __pfx___schedule+0x10/0x10 [ 352.171550][T12050] ? __fget_files+0x20e/0x3c0 [ 352.171560][T12050] ? handle_mm_fault+0x240/0xd10 [ 352.171574][T12050] __ia32_compat_sys_openat+0x16d/0x210 [ 352.171586][T12050] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 352.171596][T12050] ? ksys_write+0x1ac/0x250 [ 352.171611][T12050] ? rcu_is_watching+0x12/0xc0 [ 352.171624][T12050] __do_fast_syscall_32+0x7c/0x300 [ 352.171636][T12050] do_fast_syscall_32+0x32/0x80 [ 352.171646][T12050] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 352.171660][T12050] RIP: 0023:0xf7f54579 [ 352.171669][T12050] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 352.171679][T12050] RSP: 002b:00000000f540455c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 352.171690][T12050] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800001c0 [ 352.171697][T12050] RDX: 000000000000275a RSI: 0000000000000000 RDI: 0000000000000000 [ 352.171704][T12050] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 352.171710][T12050] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 352.171716][T12050] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 352.171729][T12050] [ 352.450946][ C3] iowarrior 7-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 352.455958][ T24] usb 7-1: USB disconnect, device number 31 [ 352.981287][T12056] FAULT_INJECTION: forcing a failure. [ 352.981287][T12056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.985436][T12056] CPU: 0 UID: 0 PID: 12056 Comm: syz.4.1594 Not tainted syzkaller #0 PREEMPT(full) [ 352.985451][T12056] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 352.985458][T12056] Call Trace: [ 352.985462][T12056] [ 352.985467][T12056] dump_stack_lvl+0x16c/0x1f0 [ 352.985488][T12056] should_fail_ex+0x512/0x640 [ 352.985508][T12056] _copy_from_user+0x2e/0xd0 [ 352.985521][T12056] do_compat_sigaltstack+0xf6/0x310 [ 352.985539][T12056] ? __pfx_do_compat_sigaltstack+0x10/0x10 [ 352.985554][T12056] ? ia32_restore_sigcontext+0x451/0x630 [ 352.985572][T12056] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 352.985592][T12056] ? rcu_is_watching+0x12/0xc0 [ 352.985604][T12056] ? _raw_spin_unlock_irq+0x23/0x50 [ 352.985619][T12056] ? lockdep_hardirqs_on+0x7c/0x110 [ 352.985637][T12056] compat_restore_altstack+0x17/0x40 [ 352.985653][T12056] __do_compat_sys_rt_sigreturn+0x195/0x1f0 [ 352.985673][T12056] ? __pfx___do_compat_sys_rt_sigreturn+0x10/0x10 [ 352.985693][T12056] ? rcu_is_watching+0x12/0xc0 [ 352.985705][T12056] do_int80_emulation+0x104/0x3e0 [ 352.985716][T12056] asm_int80_emulation+0x1a/0x20 [ 352.985728][T12056] RIP: 0023:0xf7f54577 [ 352.985737][T12056] Code: 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 [ 352.985748][T12056] RSP: 002b:00000000f544655c EFLAGS: 00000296 [ 352.985757][T12056] RAX: 000000000000011c RBX: 0000000000000001 RCX: 0000000000000327 [ 352.985764][T12056] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 352.985770][T12056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 352.985776][T12056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.985782][T12056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 352.985795][T12056] [ 353.167066][T12067] tipc: Enabled bearer , priority 0 [ 353.174608][T12066] tipc: Disabling bearer [ 353.196188][T12074] netlink: 'syz.4.1598': attribute type 1 has an invalid length. [ 353.229502][T12074] 8021q: adding VLAN 0 to HW filter on device bond2 [ 353.247918][T12074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1598'. [ 353.270289][ T5699] usb usb42-port1: attempt power cycle [ 353.477999][T12074] bond2 (unregistering): Released all slaves [ 353.619462][ T57] usb 6-1: new low-speed USB device number 36 using dummy_hcd [ 353.659469][ T7631] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 353.815853][ T7631] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 353.819139][ T7631] usb 9-1: config 0 interface 0 has no altsetting 0 [ 353.826292][ T7631] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 353.831545][ T7631] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.834215][ T7631] usb 9-1: Product: syz [ 353.835646][ T7631] usb 9-1: Manufacturer: syz [ 353.839616][ T7631] usb 9-1: SerialNumber: syz [ 353.843062][ T7631] usb 9-1: config 0 descriptor?? [ 353.853113][ T7631] usb 9-1: selecting invalid altsetting 0 [ 353.864335][T12093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1604'. [ 353.957062][ T5699] usb usb42-port1: unable to enumerate USB device [ 354.942746][T12107] comedi comedi3: pcl812: I/O port conflict (0x4f27,16) [ 355.303988][T12114] fuse: Bad value for 'fd' [ 356.102619][ T29] usb 9-1: USB disconnect, device number 14 [ 356.130860][T12125] syz2: rxe_newlink: already configured on ipvlan0 [ 356.239291][ T8204] usb 40-1: device descriptor read/8, error -110 [ 356.294539][T12133] QAT: Stopping all acceleration devices. [ 356.313596][T12134] netlink: 'syz.1.1613': attribute type 2 has an invalid length. [ 356.328843][T12134] netlink: 'syz.1.1613': attribute type 1 has an invalid length. [ 356.504717][T12136] netlink: 'syz.4.1614': attribute type 28 has an invalid length. [ 356.643694][ T8204] usb usb40-port1: attempt power cycle [ 356.717500][T12146] program syz.2.1618 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 356.969413][ T24] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 357.119298][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 357.123383][ T24] usb 7-1: config index 0 descriptor too short (expected 2304, got 36) [ 357.126991][ T24] usb 7-1: config 0 has too many interfaces: 33, using maximum allowed: 32 [ 357.130140][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.133317][ T24] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 33 [ 357.136184][ T24] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 357.139645][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.148739][ T24] usb 7-1: config 0 descriptor?? [ 357.212776][ T8204] usb usb40-port1: unable to enumerate USB device [ 357.868282][T12156] netlink: 'syz.4.1622': attribute type 1 has an invalid length. [ 357.915389][T12156] 8021q: adding VLAN 0 to HW filter on device bond2 [ 357.949453][T12163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1622'. [ 357.961858][ T57] usb 7-1: USB disconnect, device number 32 [ 358.062722][T12163] bond2 (unregistering): Released all slaves [ 358.239512][T10370] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 358.427931][T10370] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 358.432182][T10370] usb 9-1: config 0 interface 0 has no altsetting 0 [ 358.459771][T10370] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 358.465102][T10370] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.470924][T10370] usb 9-1: Product: syz [ 358.473985][T10370] usb 9-1: Manufacturer: syz [ 358.476625][T10370] usb 9-1: SerialNumber: syz [ 358.488638][T10370] usb 9-1: config 0 descriptor?? [ 358.787078][T10370] usb 9-1: selecting invalid altsetting 0 [ 359.021940][ T24] usb 9-1: USB disconnect, device number 15 [ 359.194948][T12182] netlink: 'syz.2.1628': attribute type 4 has an invalid length. [ 359.213382][T12183] batman_adv: batadv0: Adding interface: dummy0 [ 359.215933][T12183] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.225600][T12183] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 360.451277][T12208] syz_tun: entered allmulticast mode [ 360.457496][T12207] syz_tun: left allmulticast mode [ 360.869573][T12216] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 361.293605][T12221] netlink: 'syz.1.1640': attribute type 1 has an invalid length. [ 361.325596][T12221] 8021q: adding VLAN 0 to HW filter on device bond2 [ 361.359201][T12221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1640'. [ 361.629870][T12221] bond2 (unregistering): Released all slaves [ 361.649094][ T57] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 361.824227][ T57] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 361.827474][ T57] usb 6-1: config 0 interface 0 has no altsetting 0 [ 361.831226][ T40] kauditd_printk_skb: 1778 callbacks suppressed [ 361.831236][ T40] audit: type=1326 audit(2000000038.282:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12229 comm="syz.4.1642" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 361.849683][ T57] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 361.853245][ T57] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.857520][ T40] audit: type=1326 audit(2000000038.292:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12229 comm="syz.4.1642" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 361.864825][ T57] usb 6-1: Product: syz [ 361.869923][ T57] usb 6-1: Manufacturer: syz [ 361.872062][ T57] usb 6-1: SerialNumber: syz [ 361.874276][ T40] audit: type=1326 audit(2000000038.292:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12229 comm="syz.4.1642" exe="/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 361.896351][ T40] audit: type=1326 audit(2000000038.292:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12229 comm="syz.4.1642" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 361.903513][ T57] usb 6-1: config 0 descriptor?? [ 361.906006][ T40] audit: type=1326 audit(2000000038.292:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12229 comm="syz.4.1642" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 361.928781][ T40] audit: type=1326 audit(2000000038.292:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12229 comm="syz.4.1642" exe="/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 361.948323][ T57] usb 6-1: selecting invalid altsetting 0 [ 361.958715][ T40] audit: type=1326 audit(2000000038.292:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12229 comm="syz.4.1642" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 362.004862][ T40] audit: type=1326 audit(2000000038.292:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12229 comm="syz.4.1642" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 362.038684][ T40] audit: type=1326 audit(2000000038.292:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12229 comm="syz.4.1642" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 362.079344][ T40] audit: type=1326 audit(2000000038.292:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12229 comm="syz.4.1642" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 362.129005][ T7631] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 362.150366][T10370] usb 6-1: USB disconnect, device number 37 [ 362.202894][ T6274] udevd[6274]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 362.300520][ T7631] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 362.305314][ T7631] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 362.309657][ T7631] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 362.326640][ T7631] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 362.330768][ T7631] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.334158][ T7631] usb 9-1: Product: syz [ 362.335996][ T7631] usb 9-1: Manufacturer: syz [ 362.337954][ T7631] usb 9-1: SerialNumber: syz [ 362.371882][ T7631] hub 9-1:1.0: bad descriptor, ignoring hub [ 362.374507][ T7631] hub 9-1:1.0: probe with driver hub failed with error -5 [ 362.622473][ T7631] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 362.849521][T12238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1644'. [ 363.519014][T12231] usb 9-1: reset high-speed USB device number 16 using dummy_hcd [ 363.703138][T12244] syz_tun: entered allmulticast mode [ 363.705854][T12243] syz_tun: left allmulticast mode [ 363.870135][T12248] ieee802154 phy0 wpan0: encryption failed: -22 [ 364.826868][T12256] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1650'. [ 364.898856][T12257] netlink: 'syz.0.1649': attribute type 2 has an invalid length. [ 364.925914][T12257] netlink: 'syz.0.1649': attribute type 1 has an invalid length. [ 365.001827][ T1327] usb 9-1: USB disconnect, device number 16 [ 365.005475][ T1327] usblp0: removed [ 365.128812][ T6021] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 365.278905][ T6021] usb 6-1: Using ep0 maxpacket: 8 [ 365.282019][ T6021] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 365.285249][ T6021] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 365.288802][ T6021] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 365.291952][ T6021] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 365.296005][ T6021] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 365.301510][ T6021] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.350946][T12268] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1653'. [ 365.612331][ T6021] usb 6-1: GET_CAPABILITIES returned 0 [ 365.620665][ T6021] usbtmc 6-1:16.0: can't read capabilities [ 365.898117][T12256] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1650'. [ 366.092061][T12262] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1651'. [ 366.358646][T12280] binder: BINDER_SET_CONTEXT_MGR already set [ 366.361089][T12280] binder: 12279:12280 ioctl 4018620d 80000040 returned -16 [ 366.494947][T12284] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1656'. [ 366.663961][T12289] FAULT_INJECTION: forcing a failure. [ 366.663961][T12289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.670912][T12289] CPU: 1 UID: 0 PID: 12289 Comm: syz.0.1657 Not tainted syzkaller #0 PREEMPT(full) [ 366.670937][T12289] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 366.670948][T12289] Call Trace: [ 366.670954][T12289] [ 366.670963][T12289] dump_stack_lvl+0x16c/0x1f0 [ 366.670995][T12289] should_fail_ex+0x512/0x640 [ 366.671026][T12289] _copy_from_user+0x2e/0xd0 [ 366.671046][T12289] ia32_restore_sigcontext+0xc3/0x630 [ 366.671075][T12289] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 366.671108][T12289] ? rcu_is_watching+0x12/0xc0 [ 366.671125][T12289] ? _raw_spin_unlock_irq+0x23/0x50 [ 366.671147][T12289] ? lockdep_hardirqs_on+0x7c/0x110 [ 366.671178][T12289] __do_compat_sys_rt_sigreturn+0x120/0x1f0 [ 366.671206][T12289] ? __pfx___do_compat_sys_rt_sigreturn+0x10/0x10 [ 366.671238][T12289] ? rcu_is_watching+0x12/0xc0 [ 366.671259][T12289] do_int80_emulation+0x104/0x3e0 [ 366.671277][T12289] asm_int80_emulation+0x1a/0x20 [ 366.671295][T12289] RIP: 0023:0xf7f475a7 [ 366.671308][T12289] Code: 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 90 58 b8 77 00 00 00 cd 80 90 8d b4 26 00 00 00 00 b8 ad 00 00 00 cd 80 <90> 90 90 90 90 90 90 90 90 55 89 e5 57 8d 3d 2c dc ff ff 56 53 e8 [ 366.671327][T12289] RSP: 002b:00000000f53f3940 EFLAGS: 00000286 ORIG_RAX: 00000000000000ad [ 366.671344][T12289] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53f39cc [ 366.671356][T12289] RDX: 00000000f53f394c RSI: 0000000000000000 RDI: 0000000000000000 [ 366.671366][T12289] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 366.671375][T12289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.671386][T12289] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 366.671407][T12289] [ 366.803607][ T8204] usb 6-1: USB disconnect, device number 38 [ 366.812617][T12255] block nbd1: shutting down sockets [ 366.815321][T12290] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1654'. [ 369.825232][T12327] syz.0.1666 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 370.027338][T12336] netlink: 'syz.0.1668': attribute type 1 has an invalid length. [ 370.075618][T12336] 8021q: adding VLAN 0 to HW filter on device bond2 [ 370.100873][T12340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1668'. [ 370.245660][T12340] bond2 (unregistering): Released all slaves [ 370.401427][T12350] syz_tun: entered allmulticast mode [ 370.408833][ T6021] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 370.507323][T12353] netlink: 'syz.1.1673': attribute type 2 has an invalid length. [ 370.538184][T12353] netlink: 'syz.1.1673': attribute type 1 has an invalid length. [ 370.564091][ T6021] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 370.572777][ T6021] usb 5-1: config 0 interface 0 has no altsetting 0 [ 370.629608][ T6021] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 370.632699][ T6021] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.637971][ T6021] usb 5-1: Product: syz [ 370.640989][ T6021] usb 5-1: Manufacturer: syz [ 370.641653][T12355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1674'. [ 370.643036][ T6021] usb 5-1: SerialNumber: syz [ 370.646852][T12355] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1674'. [ 370.656108][ T6021] usb 5-1: config 0 descriptor?? [ 370.667443][ T6021] usb 5-1: selecting invalid altsetting 0 [ 370.728312][T12356] team0: Mode changed to "loadbalance" [ 370.733689][T12356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1674'. [ 370.736985][T12356] tipc: Resetting bearer [ 370.820411][T12356] tipc: Disabling bearer [ 371.026782][T12360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1676'. [ 371.426811][T12376] netlink: 'syz.1.1680': attribute type 2 has an invalid length. [ 371.488705][ T10] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 371.530853][T12379] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 371.533693][T12379] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 371.537647][T12379] vhci_hcd vhci_hcd.0: Device attached [ 371.620202][T12380] vhci_hcd: connection closed [ 371.620766][ T1138] vhci_hcd: stop threads [ 371.624714][ T1138] vhci_hcd: release socket [ 371.624729][ T1138] vhci_hcd: disconnect device [ 371.651430][ T10] usb 9-1: config 0 has no interfaces? [ 371.653821][ T10] usb 9-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 371.657583][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.664545][ T10] usb 9-1: config 0 descriptor?? [ 371.955536][ T10] usb 9-1: USB disconnect, device number 17 [ 372.151599][T12393] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 372.154402][T12393] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 372.158707][T12393] vhci_hcd vhci_hcd.0: Device attached [ 372.448376][ T8204] usb 42-1: SetAddress Request (31) to port 0 [ 372.450927][ T8204] usb 42-1: new SuperSpeed USB device number 31 using vhci_hcd [ 372.688504][T12394] vhci_hcd: connection reset by peer [ 372.691587][ T1138] vhci_hcd: stop threads [ 372.694289][ T1138] vhci_hcd: release socket [ 372.696478][ T1138] vhci_hcd: disconnect device [ 372.796580][T12399] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 372.798700][T12399] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 372.801483][T12399] vhci_hcd vhci_hcd.0: Device attached [ 372.814857][T12399] 9pnet_fd: Insufficient options for proto=fd [ 372.856858][T12403] FAULT_INJECTION: forcing a failure. [ 372.856858][T12403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.863841][T12403] CPU: 2 UID: 0 PID: 12403 Comm: syz.1.1685 Not tainted syzkaller #0 PREEMPT(full) [ 372.863863][T12403] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 372.863875][T12403] Call Trace: [ 372.863881][T12403] [ 372.863888][T12403] dump_stack_lvl+0x16c/0x1f0 [ 372.863922][T12403] should_fail_ex+0x512/0x640 [ 372.863954][T12403] _copy_from_user+0x2e/0xd0 [ 372.863972][T12403] move_addr_to_kernel+0x65/0x170 [ 372.863995][T12403] __sys_sendto+0x1be/0x520 [ 372.864017][T12403] ? __pfx___sys_sendto+0x10/0x10 [ 372.864056][T12403] ? ksys_write+0x1ac/0x250 [ 372.864075][T12403] ? __pfx_ksys_write+0x10/0x10 [ 372.864099][T12403] __ia32_sys_sendto+0xdd/0x1b0 [ 372.864121][T12403] ? lockdep_hardirqs_on+0x7c/0x110 [ 372.864147][T12403] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 372.864175][T12403] __do_fast_syscall_32+0x7c/0x300 [ 372.864194][T12403] do_fast_syscall_32+0x32/0x80 [ 372.864209][T12403] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 372.864228][T12403] RIP: 0023:0xf704e579 [ 372.864241][T12403] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 372.864256][T12403] RSP: 002b:00000000f543e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 372.864271][T12403] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000700 [ 372.864281][T12403] RDX: 0000000000000034 RSI: 0000000000048000 RDI: 0000000080000340 [ 372.864290][T12403] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 372.864302][T12403] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 372.864312][T12403] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 372.864333][T12403] [ 372.936681][ C2] vkms_vblank_simulate: vblank timer overrun [ 373.049292][ T24] usb 5-1: USB disconnect, device number 29 [ 373.078716][ T29] usb 46-1: SetAddress Request (22) to port 0 [ 373.081392][ T29] usb 46-1: new SuperSpeed USB device number 22 using vhci_hcd [ 373.112169][T12409] FAULT_INJECTION: forcing a failure. [ 373.112169][T12409] name failslab, interval 1, probability 0, space 0, times 0 [ 373.121000][T12409] CPU: 3 UID: 0 PID: 12409 Comm: syz.1.1688 Not tainted syzkaller #0 PREEMPT(full) [ 373.121028][T12409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 373.121041][T12409] Call Trace: [ 373.121047][T12409] [ 373.121053][T12409] dump_stack_lvl+0x16c/0x1f0 [ 373.121083][T12409] should_fail_ex+0x512/0x640 [ 373.121108][T12409] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 373.121132][T12409] should_failslab+0xc2/0x120 [ 373.121155][T12409] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 373.121179][T12409] ? do_kmem_cache_create+0x1b3/0x720 [ 373.121208][T12409] do_kmem_cache_create+0x1b3/0x720 [ 373.121234][T12409] __kmem_cache_create_args+0x225/0x390 [ 373.121251][T12409] ? p9_client_create+0xe16/0x11c0 [ 373.121279][T12409] p9_client_create+0xec0/0x11c0 [ 373.121312][T12409] ? __pfx_p9_client_create+0x10/0x10 [ 373.121348][T12409] ? rcu_is_watching+0x12/0xc0 [ 373.121371][T12409] ? lockdep_init_map_type+0x5c/0x280 [ 373.121393][T12409] ? __raw_spin_lock_init+0x3a/0x110 [ 373.121421][T12409] v9fs_session_init+0x1f7/0x1a80 [ 373.121457][T12409] ? __pfx_v9fs_session_init+0x10/0x10 [ 373.121502][T12409] v9fs_mount+0xc5/0xa90 [ 373.121516][T12409] ? rcu_is_watching+0x12/0xc0 [ 373.121532][T12409] ? __pfx_v9fs_mount+0x10/0x10 [ 373.121547][T12409] ? aa_get_newest_label+0xd2/0x250 [ 373.121567][T12409] ? apparmor_capable+0x114/0x1d0 [ 373.121586][T12409] ? __pfx_v9fs_mount+0x10/0x10 [ 373.121600][T12409] legacy_get_tree+0x109/0x220 [ 373.121625][T12409] vfs_get_tree+0x8e/0x340 [ 373.121645][T12409] path_mount+0x1513/0x2000 [ 373.121687][T12409] ? __pfx_path_mount+0x10/0x10 [ 373.121709][T12409] ? kmem_cache_free+0x2d1/0x4d0 [ 373.121727][T12409] ? putname+0x154/0x1a0 [ 373.121748][T12409] ? getname_flags.part.0+0x1c5/0x550 [ 373.121782][T12409] ? __ia32_sys_mount+0x28b/0x310 [ 373.121806][T12409] __ia32_sys_mount+0x28b/0x310 [ 373.121827][T12409] ? __pfx___ia32_sys_mount+0x10/0x10 [ 373.121850][T12409] ? rcu_is_watching+0x12/0xc0 [ 373.121869][T12409] __do_fast_syscall_32+0x7c/0x300 [ 373.121886][T12409] do_fast_syscall_32+0x32/0x80 [ 373.121901][T12409] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 373.121922][T12409] RIP: 0023:0xf704e579 [ 373.121938][T12409] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 373.121962][T12409] RSP: 002b:00000000f543e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 373.121978][T12409] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000000 [ 373.121989][T12409] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000080000300 [ 373.121998][T12409] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 373.122007][T12409] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 373.122017][T12409] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 373.122038][T12409] [ 373.122069][T12409] __kmem_cache_create_args(9p-fcall-cache-44) failed with error -22 [ 373.250025][T12409] CPU: 0 UID: 0 PID: 12409 Comm: syz.1.1688 Not tainted syzkaller #0 PREEMPT(full) [ 373.250048][T12409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 373.250058][T12409] Call Trace: [ 373.250064][T12409] [ 373.250070][T12409] dump_stack_lvl+0x16c/0x1f0 [ 373.250099][T12409] __kmem_cache_create_args+0x125/0x390 [ 373.250121][T12409] p9_client_create+0xec0/0x11c0 [ 373.250153][T12409] ? __pfx_p9_client_create+0x10/0x10 [ 373.250182][T12409] ? rcu_is_watching+0x12/0xc0 [ 373.250204][T12409] ? lockdep_init_map_type+0x5c/0x280 [ 373.250227][T12409] ? __raw_spin_lock_init+0x3a/0x110 [ 373.250254][T12409] v9fs_session_init+0x1f7/0x1a80 [ 373.250288][T12409] ? __pfx_v9fs_session_init+0x10/0x10 [ 373.250348][T12409] v9fs_mount+0xc5/0xa90 [ 373.250362][T12409] ? rcu_is_watching+0x12/0xc0 [ 373.250378][T12409] ? __pfx_v9fs_mount+0x10/0x10 [ 373.250393][T12409] ? aa_get_newest_label+0xd2/0x250 [ 373.250412][T12409] ? apparmor_capable+0x114/0x1d0 [ 373.250430][T12409] ? __pfx_v9fs_mount+0x10/0x10 [ 373.250445][T12409] legacy_get_tree+0x109/0x220 [ 373.250467][T12409] vfs_get_tree+0x8e/0x340 [ 373.250483][T12409] path_mount+0x1513/0x2000 [ 373.250508][T12409] ? __pfx_path_mount+0x10/0x10 [ 373.250530][T12409] ? kmem_cache_free+0x2d1/0x4d0 [ 373.250563][T12409] ? putname+0x154/0x1a0 [ 373.250584][T12409] ? getname_flags.part.0+0x1c5/0x550 [ 373.250630][T12409] ? __ia32_sys_mount+0x28b/0x310 [ 373.250649][T12409] __ia32_sys_mount+0x28b/0x310 [ 373.250671][T12409] ? __pfx___ia32_sys_mount+0x10/0x10 [ 373.250694][T12409] ? rcu_is_watching+0x12/0xc0 [ 373.250712][T12409] __do_fast_syscall_32+0x7c/0x300 [ 373.250730][T12409] do_fast_syscall_32+0x32/0x80 [ 373.250745][T12409] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 373.250764][T12409] RIP: 0023:0xf704e579 [ 373.250776][T12409] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 373.250792][T12409] RSP: 002b:00000000f543e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 373.250807][T12409] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000000 [ 373.250817][T12409] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000080000300 [ 373.250827][T12409] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 373.250836][T12409] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 373.250845][T12409] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 373.250879][T12409] [ 373.356996][T12415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1692'. [ 373.364911][T12417] netlink: 'syz.2.1690': attribute type 1 has an invalid length. [ 373.375915][T12419] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1691'. [ 373.379009][T12417] 8021q: adding VLAN 0 to HW filter on device bond3 [ 373.396411][T12417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1690'. [ 373.415986][T12400] vhci_hcd: connection reset by peer [ 373.418485][ T1138] vhci_hcd: stop threads [ 373.419855][ T1138] vhci_hcd: release socket [ 373.421238][ T1138] vhci_hcd: disconnect device [ 373.552387][T12417] bond3 (unregistering): Released all slaves [ 373.688544][ T10] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 373.860542][ T10] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 373.864641][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 373.877453][ T10] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 373.884937][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.888812][ T10] usb 7-1: Product: syz [ 373.893623][ T10] usb 7-1: Manufacturer: syz [ 373.895322][ T10] usb 7-1: SerialNumber: syz [ 373.971116][ T10] usb 7-1: config 0 descriptor?? [ 373.984445][ T10] usb 7-1: selecting invalid altsetting 0 [ 374.277605][T12430] FAULT_INJECTION: forcing a failure. [ 374.277605][T12430] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 374.284704][T12430] CPU: 3 UID: 0 PID: 12430 Comm: syz.4.1696 Not tainted syzkaller #0 PREEMPT(full) [ 374.284728][T12430] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 374.284740][T12430] Call Trace: [ 374.284745][T12430] [ 374.284752][T12430] dump_stack_lvl+0x16c/0x1f0 [ 374.284785][T12430] should_fail_ex+0x512/0x640 [ 374.284819][T12430] should_fail_alloc_page+0xe7/0x130 [ 374.284844][T12430] prepare_alloc_pages+0x3c2/0x610 [ 374.284872][T12430] ? rcu_is_watching+0x12/0xc0 [ 374.284895][T12430] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 374.284919][T12430] ? __lock_acquire+0xb97/0x1ce0 [ 374.284953][T12430] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 374.284975][T12430] ? do_raw_spin_lock+0x12c/0x2b0 [ 374.285010][T12430] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 374.285036][T12430] ? find_held_lock+0x2b/0x80 [ 374.285062][T12430] ? __lock_acquire+0xb97/0x1ce0 [ 374.285085][T12430] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 374.285114][T12430] ? policy_nodemask+0xea/0x4e0 [ 374.285141][T12430] alloc_pages_mpol+0x1fb/0x550 [ 374.285167][T12430] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 374.285198][T12430] folio_alloc_mpol_noprof+0x36/0x2f0 [ 374.285226][T12430] shmem_alloc_folio+0x135/0x160 [ 374.285246][T12430] shmem_alloc_and_add_folio+0x499/0xc20 [ 374.285271][T12430] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 374.285296][T12430] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 374.285322][T12430] shmem_get_folio_gfp+0x67f/0x1600 [ 374.285349][T12430] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 374.285372][T12430] ? filemap_map_pages+0xf58/0x1670 [ 374.285396][T12430] shmem_fault+0x1fe/0xa30 [ 374.285420][T12430] ? __pfx_shmem_fault+0x10/0x10 [ 374.285445][T12430] ? __pfx_filemap_map_pages+0x10/0x10 [ 374.285471][T12430] ? __pfx_filemap_map_pages+0x10/0x10 [ 374.285489][T12430] __do_fault+0x10d/0x490 [ 374.285514][T12430] ? __pfx_filemap_map_pages+0x10/0x10 [ 374.285534][T12430] do_pte_missing+0xf50/0x3ba0 [ 374.285554][T12430] ? find_held_lock+0x2b/0x80 [ 374.285571][T12430] ? __handle_mm_fault+0x14fd/0x2a50 [ 374.285593][T12430] __handle_mm_fault+0x152a/0x2a50 [ 374.285618][T12430] ? __pfx___handle_mm_fault+0x10/0x10 [ 374.285640][T12430] ? __pte_offset_map_lock+0x174/0x310 [ 374.285664][T12430] ? find_held_lock+0x2b/0x80 [ 374.285689][T12430] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 374.285722][T12430] handle_mm_fault+0x589/0xd10 [ 374.285746][T12430] __get_user_pages+0x551/0x34a0 [ 374.285782][T12430] ? __pfx___get_user_pages+0x10/0x10 [ 374.285817][T12430] populate_vma_page_range+0x267/0x3f0 [ 374.285850][T12430] ? __pfx_populate_vma_page_range+0x10/0x10 [ 374.285876][T12430] ? __pfx_find_vma_intersection+0x10/0x10 [ 374.285905][T12430] ? do_mmap+0x69c/0x1210 [ 374.285932][T12430] __mm_populate+0x1d8/0x380 [ 374.285951][T12430] ? __pfx___mm_populate+0x10/0x10 [ 374.285969][T12430] ? up_write+0x1b2/0x520 [ 374.286002][T12430] vm_mmap_pgoff+0x37f/0x470 [ 374.286031][T12430] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 374.286053][T12430] ? handle_mm_fault+0x240/0xd10 [ 374.286077][T12430] ? ksys_write+0x1ac/0x250 [ 374.286101][T12430] ksys_mmap_pgoff+0x7d/0x5c0 [ 374.286125][T12430] ? rcu_is_watching+0x12/0xc0 [ 374.286140][T12430] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 374.286164][T12430] __do_fast_syscall_32+0x7c/0x300 [ 374.286181][T12430] do_fast_syscall_32+0x32/0x80 [ 374.286195][T12430] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 374.286215][T12430] RIP: 0023:0xf7f54579 [ 374.286227][T12430] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 374.286243][T12430] RSP: 002b:00000000f544655c EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 374.286261][T12430] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000b36000 [ 374.286274][T12430] RDX: 0000000000000002 RSI: 0000000000008031 RDI: 00000000ffffffff [ 374.286304][T12430] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 374.286315][T12430] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 374.286325][T12430] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 374.286346][T12430] [ 374.409279][ T10] usb 7-1: USB disconnect, device number 33 [ 374.564785][T12435] netlink: 'syz.0.1695': attribute type 1 has an invalid length. [ 374.584004][T12435] 8021q: adding VLAN 0 to HW filter on device bond2 [ 374.592669][T12435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1695'. [ 374.736025][T12435] bond2 (unregistering): Released all slaves [ 374.897696][T12452] FAULT_INJECTION: forcing a failure. [ 374.897696][T12452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.903310][T12452] CPU: 3 UID: 0 PID: 12452 Comm: syz.4.1701 Not tainted syzkaller #0 PREEMPT(full) [ 374.903335][T12452] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 374.903346][T12452] Call Trace: [ 374.903352][T12452] [ 374.903358][T12452] dump_stack_lvl+0x16c/0x1f0 [ 374.903389][T12452] should_fail_ex+0x512/0x640 [ 374.903420][T12452] _copy_to_user+0x32/0xd0 [ 374.903440][T12452] drm_ioctl+0x5eb/0xc30 [ 374.903462][T12452] ? __pfx_drm_setmaster_ioctl+0x10/0x10 [ 374.903487][T12452] ? __pfx_drm_ioctl+0x10/0x10 [ 374.903524][T12452] drm_compat_ioctl+0x327/0x460 [ 374.903548][T12452] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 374.903571][T12452] __ia32_compat_sys_ioctl+0x242/0x370 [ 374.903603][T12452] __do_fast_syscall_32+0x7c/0x300 [ 374.903623][T12452] do_fast_syscall_32+0x32/0x80 [ 374.903639][T12452] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 374.903661][T12452] RIP: 0023:0xf7f54579 [ 374.903674][T12452] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 374.903692][T12452] RSP: 002b:00000000f544655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 374.903710][T12452] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000641e [ 374.903721][T12452] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 374.903731][T12452] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 374.903741][T12452] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 374.903751][T12452] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 374.903774][T12452] [ 374.968339][ T24] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 375.088792][T12462] syz_tun: entered allmulticast mode [ 375.092482][T12461] syz_tun: left allmulticast mode [ 375.171480][ T24] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 375.175102][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 375.181214][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 375.184182][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.188781][ T24] usb 5-1: Product: syz [ 375.190358][ T24] usb 5-1: Manufacturer: syz [ 375.192007][ T24] usb 5-1: SerialNumber: syz [ 375.195637][T12463] netlink: 'syz.4.1703': attribute type 4 has an invalid length. [ 375.204993][T12463] loop6: detected capacity change from 0 to 63 [ 375.209541][ T8678] buffer_io_error: 10 callbacks suppressed [ 375.209551][ T8678] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.215416][ T8678] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.218762][ T8678] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.221542][ T8678] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.230270][ T24] usb 5-1: config 0 descriptor?? [ 375.247848][T12463] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.254952][T12463] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.259013][T12463] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.262589][T12463] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.266229][T12463] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.270442][T12463] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.308410][ T24] usb 5-1: selecting invalid altsetting 0 [ 377.079626][T12496] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1715'. [ 377.690044][ T8204] usb 42-1: device descriptor read/8, error -110 [ 377.700275][ T7631] usb 5-1: USB disconnect, device number 30 [ 377.794767][T12502] 9pnet: Unknown protocol version 9p20\++} [ 377.855245][T12505] 9pnet_fd: Insufficient options for proto=fd [ 377.886124][T12509] EXT4-fs: Conflicting test_dummy_encryption options [ 378.029901][T12513] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1720'. [ 378.161863][ T29] usb 46-1: device descriptor read/8, error -110 [ 378.232385][T12519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1722'. [ 378.279154][ T8204] usb usb42-port1: attempt power cycle [ 378.549753][ T29] usb usb46-port1: attempt power cycle [ 378.840148][ T8204] usb usb42-port1: unable to enumerate USB device [ 378.990456][T12535] netlink: 'syz.0.1726': attribute type 1 has an invalid length. [ 379.021756][T12535] 8021q: adding VLAN 0 to HW filter on device bond2 [ 379.033217][T12535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1726'. [ 379.042358][T12534] kernel profiling enabled (shift: 3) [ 379.109501][ T29] usb usb46-port1: unable to enumerate USB device [ 379.368475][ T1327] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 379.418178][T12535] bond2 (unregistering): Released all slaves [ 379.692808][ T1327] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 379.695834][ T1327] usb 5-1: config 0 interface 0 has no altsetting 0 [ 379.702272][ T1327] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 379.705608][ T1327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.710047][ T1327] usb 5-1: Product: syz [ 379.711847][ T1327] usb 5-1: Manufacturer: syz [ 379.713810][ T1327] usb 5-1: SerialNumber: syz [ 379.809466][ T1327] usb 5-1: config 0 descriptor?? [ 380.121985][ T1327] usb 5-1: selecting invalid altsetting 0 [ 380.936108][T12560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1733'. [ 381.195339][T12565] syz_tun: entered allmulticast mode [ 381.198895][T12564] syz_tun: left allmulticast mode [ 381.485796][T12569] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 381.488749][T12569] overlayfs: failed to set xattr on upper [ 381.490896][T12569] overlayfs: ...falling back to redirect_dir=nofollow. [ 381.493367][T12569] overlayfs: ...falling back to index=off. [ 381.495614][T12569] overlayfs: ...falling back to uuid=null. [ 381.564093][T12570] input: syz1 as /devices/virtual/input/input19 [ 381.673461][T12571] misc userio: Invalid payload size [ 381.677679][T12571] misc userio: No port type given on /dev/userio [ 381.907867][ T57] usb 5-1: USB disconnect, device number 31 [ 382.080214][T12574] random: crng reseeded on system resumption [ 382.423491][T12589] netlink: 'syz.1.1743': attribute type 21 has an invalid length. [ 382.428123][T12589] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1743'. [ 382.592068][T12584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1741'. [ 382.896198][T12603] syz_tun: entered allmulticast mode [ 382.912123][T12603] pimreg: entered allmulticast mode [ 382.923476][T12602] syz_tun: left allmulticast mode [ 383.062755][T12608] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1747'. [ 383.147789][ T7631] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 383.202261][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.205622][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.329666][ T7631] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.333939][ T7631] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 383.340170][ T7631] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 383.343543][ T7631] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 383.348863][ T7631] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 383.352180][ T7631] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 383.355016][ T7631] usb 6-1: Manufacturer: syz [ 383.362087][ T7631] usb 6-1: config 0 descriptor?? [ 383.639631][ T7631] rc_core: IR keymap rc-hauppauge not found [ 383.641606][ T7631] Registered IR keymap rc-empty [ 383.643337][ T7631] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 383.667845][ T7631] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 383.688412][ T7631] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 383.693084][ T7631] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input20 [ 383.699704][ T7631] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 383.717862][ T7631] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 383.737845][ T7631] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 383.767752][ T7631] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 383.787795][ T7631] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 383.809191][ T7631] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 383.838252][ T7631] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 383.857830][ T7631] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 383.878630][ T7631] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 383.907852][ T7631] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 383.941464][ T7631] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 383.944835][ T7631] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 383.954629][ T7631] usb 6-1: USB disconnect, device number 39 [ 384.220177][T12625] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 384.223101][T12625] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 384.226895][T12625] vhci_hcd vhci_hcd.0: Device attached [ 384.320337][T12629] /dev/nullb0: Can't open blockdev [ 384.415667][T12634] binder: Unknown parameter 'fsuuid' [ 384.442675][ T1327] libceph: connect (1)[c::]:6789 error -22 [ 384.445646][ T1327] libceph: mon0 (1)[c::]:6789 connect error [ 384.517834][ T29] usb 38-1: SetAddress Request (43) to port 0 [ 384.520203][ T29] usb 38-1: new SuperSpeed USB device number 43 using vhci_hcd [ 384.525403][T12634] ceph: No mds server is up or the cluster is laggy [ 384.681479][T12626] vhci_hcd: connection reset by peer [ 384.685151][ T13] vhci_hcd: stop threads [ 384.686977][ T13] vhci_hcd: release socket [ 384.689790][ T13] vhci_hcd: disconnect device [ 384.985491][T12644] syz_tun: entered allmulticast mode [ 384.992236][T12643] syz_tun: left allmulticast mode [ 385.280373][T12649] input: syz1 as /devices/virtual/input/input21 [ 385.377437][T12652] binder_alloc: 12650: binder_alloc_buf, no vma [ 385.380077][T12651] binder: 12650:12651 ioctl c0306201 80000580 returned -14 [ 385.397959][T12651] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 385.401469][T12651] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 385.410669][T12651] kvm: user requested TSC rate below hardware speed [ 385.681573][T12659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1759'. [ 385.813997][T12659] lo speed is unknown, defaulting to 1000 [ 385.859154][ T5985] block nbd2: Receive control failed (result -32) [ 385.859716][T12646] block nbd2: shutting down sockets [ 385.948500][ T57] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 386.951261][T12671] batman_adv: batadv0: Removing interface: dummy0 [ 386.957999][T12671] bond0: (slave batadv_slave_0): Releasing backup interface [ 386.963480][T12671] batadv_slave_0: left promiscuous mode [ 387.266445][T12674] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1764'. [ 388.395823][T12681] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1766'. [ 388.508707][T12683] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 388.511471][T12683] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 388.515079][T12683] vhci_hcd vhci_hcd.0: Device attached [ 388.777494][ T8204] usb 40-1: SetAddress Request (38) to port 0 [ 388.779467][ T8204] usb 40-1: new SuperSpeed USB device number 38 using vhci_hcd [ 388.954748][T12684] vhci_hcd: connection reset by peer [ 388.960018][ T61] vhci_hcd: stop threads [ 388.961802][ T61] vhci_hcd: release socket [ 388.967837][ T61] vhci_hcd: disconnect device [ 389.324680][T12701] netlink: 'syz.2.1771': attribute type 10 has an invalid length. [ 389.329202][T12701] bond0: (slave wlan1): Opening slave failed [ 389.597637][ T29] usb 38-1: device descriptor read/8, error -110 [ 389.721866][T12699] syz.2.1771: page allocation failure: order:0, mode:0x10cc0(GFP_KERNEL|__GFP_NORETRY), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 389.727455][T12699] CPU: 2 UID: 0 PID: 12699 Comm: syz.2.1771 Not tainted syzkaller #0 PREEMPT(full) [ 389.727479][T12699] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 389.727490][T12699] Call Trace: [ 389.727497][T12699] [ 389.727504][T12699] dump_stack_lvl+0x16c/0x1f0 [ 389.727535][T12699] warn_alloc+0x248/0x3a0 [ 389.727557][T12699] ? __pfx_warn_alloc+0x10/0x10 [ 389.727580][T12699] ? psi_memstall_leave+0x19f/0x2d0 [ 389.727601][T12699] ? __pfx___alloc_pages_direct_compact+0x10/0x10 [ 389.727621][T12699] ? psi_memstall_leave+0x1e1/0x2d0 [ 389.727643][T12699] ? psi_memstall_leave+0x1e6/0x2d0 [ 389.727667][T12699] __alloc_frozen_pages_noprof+0xea2/0x23f0 [ 389.727701][T12699] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 389.727730][T12699] ? lockdep_hardirqs_on+0x7c/0x110 [ 389.727762][T12699] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 389.727789][T12699] ? policy_nodemask+0xea/0x4e0 [ 389.727815][T12699] alloc_pages_mpol+0x1fb/0x550 [ 389.727844][T12699] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 389.727873][T12699] alloc_pages_noprof+0x131/0x390 [ 389.727897][T12699] kimage_alloc_pages+0x75/0x350 [ 389.727926][T12699] kimage_alloc_control_pages+0x153/0xa00 [ 389.727950][T12699] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 389.727975][T12699] do_kexec_load+0x478/0x8a0 [ 389.727995][T12699] ? __pfx_do_kexec_load+0x10/0x10 [ 389.728020][T12699] __ia32_compat_sys_kexec_load+0x37f/0x400 [ 389.728043][T12699] ? __pfx___ia32_compat_sys_kexec_load+0x10/0x10 [ 389.728066][T12699] ? rcu_is_watching+0x12/0xc0 [ 389.728087][T12699] __do_fast_syscall_32+0x7c/0x300 [ 389.728107][T12699] do_fast_syscall_32+0x32/0x80 [ 389.728123][T12699] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 389.728144][T12699] RIP: 0023:0xf7f91579 [ 389.728158][T12699] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 389.728174][T12699] RSP: 002b:00000000f548655c EFLAGS: 00000296 ORIG_RAX: 000000000000011b [ 389.728191][T12699] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000003 [ 389.728202][T12699] RDX: 0000000080001080 RSI: 00000000003e0000 RDI: 0000000000000000 [ 389.728213][T12699] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 389.728223][T12699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 389.728233][T12699] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 389.728256][T12699] [ 389.728262][T12699] Mem-Info: [ 389.812299][T12699] active_anon:93 inactive_anon:25157 isolated_anon:0 [ 389.812299][T12699] active_file:1871 inactive_file:14445 isolated_file:0 [ 389.812299][T12699] unevictable:1768 dirty:310 writeback:0 [ 389.812299][T12699] slab_reclaimable:7412 slab_unreclaimable:57856 [ 389.812299][T12699] mapped:24795 shmem:18602 pagetables:1608 [ 389.812299][T12699] sec_pagetables:315 bounce:0 [ 389.812299][T12699] kernel_misc_reclaimable:0 [ 389.812299][T12699] free:25964 free_pcp:764 free_cma:0 [ 389.826380][T12699] Node 0 active_anon:28kB inactive_anon:112kB active_file:60kB inactive_file:8kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:588kB dirty:0kB writeback:0kB shmem:3552kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7380kB pagetables:1700kB sec_pagetables:1128kB all_unreclaimable? no Balloon:0kB [ 389.836069][T12699] Node 1 active_anon:344kB inactive_anon:100516kB active_file:7424kB inactive_file:57372kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:98392kB dirty:1240kB writeback:0kB shmem:70856kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6704kB pagetables:4732kB sec_pagetables:132kB all_unreclaimable? no Balloon:0kB [ 389.848296][T12699] Node 0 DMA free:2016kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:20kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:204kB local_pcp:124kB free_cma:0kB [ 389.857259][T12699] lowmem_reserve[]: 0 288 288 288 288 [ 389.859253][T12699] Node 0 DMA32 free:17460kB boost:0kB min:13220kB low:16524kB high:19828kB reserved_highatomic:2048KB free_highatomic:1120KB active_anon:476kB inactive_anon:452kB active_file:12kB inactive_file:192kB unevictable:3536kB writepending:0kB present:1032196kB managed:295072kB mlocked:0kB bounce:0kB free_pcp:2356kB local_pcp:1916kB free_cma:0kB [ 389.871788][T12699] lowmem_reserve[]: 0 0 0 0 0 [ 389.873426][T12699] Node 1 DMA32 free:84152kB boost:24576kB min:71716kB low:83500kB high:95284kB reserved_highatomic:0KB free_highatomic:0KB active_anon:444kB inactive_anon:100516kB active_file:7824kB inactive_file:55972kB unevictable:3536kB writepending:1240kB present:1048432kB managed:948220kB mlocked:0kB bounce:0kB free_pcp:1892kB local_pcp:664kB free_cma:0kB [ 389.884713][T12699] lowmem_reserve[]: 0 0 0 0 0 [ 389.886876][T12699] Node 0 DMA: 4*4kB (UM) 5*8kB (UM) 5*16kB (U) 8*32kB (UM) 2*64kB (M) 2*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2056kB [ 389.891925][T12699] Node 0 DMA32: 39*4kB (UM) 56*8kB (UME) 112*16kB (UMEH) 132*32kB (UMEH) 54*64kB (UMEH) 16*128kB (UME) 7*256kB (UME) 5*512kB (UMH) 1*1024kB (M) 0*2048kB 0*4096kB = 17500kB [ 389.897640][T12699] Node 1 DMA32: 926*4kB (UME) 670*8kB (UME) 447*16kB (UME) 360*32kB (ME) 243*64kB (UME) 117*128kB (UME) 41*256kB (UME) 26*512kB (UME) 2*1024kB (U) 0*2048kB 0*4096kB = 84120kB [ 389.903207][T12699] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 389.906613][T12699] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 389.910351][T12699] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 389.913340][T12699] Node 1 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 389.916224][T12699] 34358 total pagecache pages [ 389.918425][T12699] 27 pages in swap cache [ 389.919832][T12699] Free swap = 119412kB [ 389.921156][T12699] Total swap = 124996kB [ 389.923571][T12699] 524155 pages RAM [ 389.925045][T12699] 0 pages HighMem/MovableOnly [ 389.932030][T12705] netlink: 'syz.1.1772': attribute type 4 has an invalid length. [ 389.943750][T12699] 209492 pages reserved [ 389.945277][T12699] 0 pages cma reserved [ 389.998981][ T29] usb usb38-port1: attempt power cycle [ 390.200243][T12699] kexec: Could not allocate control_code_buffer [ 390.229918][T12707] FAULT_INJECTION: forcing a failure. [ 390.229918][T12707] name failslab, interval 1, probability 0, space 0, times 0 [ 390.235165][T12707] CPU: 1 UID: 0 PID: 12707 Comm: syz.0.1773 Not tainted syzkaller #0 PREEMPT(full) [ 390.235181][T12707] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 390.235188][T12707] Call Trace: [ 390.235192][T12707] [ 390.235197][T12707] dump_stack_lvl+0x16c/0x1f0 [ 390.235218][T12707] should_fail_ex+0x512/0x640 [ 390.235239][T12707] should_failslab+0xc2/0x120 [ 390.235254][T12707] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 390.235269][T12707] ? __inet_bhash2_update_saddr+0x1c0/0x19d0 [ 390.235287][T12707] __inet_bhash2_update_saddr+0x1c0/0x19d0 [ 390.235305][T12707] ? __call_rcu_common.constprop.0+0x3f0/0xa10 [ 390.235338][T12707] tcp_v4_connect+0x14f8/0x1bb0 [ 390.235366][T12707] ? __pfx_tcp_v4_connect+0x10/0x10 [ 390.235393][T12707] __inet_stream_connect+0x917/0xf60 [ 390.235424][T12707] ? __pfx___inet_stream_connect+0x10/0x10 [ 390.235454][T12707] tcp_sendmsg_fastopen+0x3ed/0x750 [ 390.235471][T12707] tcp_sendmsg_locked+0x23ff/0x42a0 [ 390.235488][T12707] ? __lock_acquire+0xb97/0x1ce0 [ 390.235507][T12707] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 390.235521][T12707] ? do_raw_spin_lock+0x12c/0x2b0 [ 390.235540][T12707] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 390.235572][T12707] ? __local_bh_enable_ip+0xa4/0x120 [ 390.235594][T12707] tcp_sendmsg+0x2e/0x50 [ 390.235625][T12707] ? __pfx_tcp_sendmsg+0x10/0x10 [ 390.235643][T12707] inet_sendmsg+0xb9/0x140 [ 390.235663][T12707] __sys_sendto+0x43c/0x520 [ 390.235687][T12707] ? __pfx___sys_sendto+0x10/0x10 [ 390.235734][T12707] ? ksys_write+0x1ac/0x250 [ 390.235757][T12707] ? __pfx_ksys_write+0x10/0x10 [ 390.235780][T12707] __ia32_sys_sendto+0xdd/0x1b0 [ 390.235802][T12707] ? lockdep_hardirqs_on+0x7c/0x110 [ 390.235820][T12707] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 390.235838][T12707] __do_fast_syscall_32+0x7c/0x300 [ 390.235851][T12707] do_fast_syscall_32+0x32/0x80 [ 390.235862][T12707] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 390.235876][T12707] RIP: 0023:0xf7f47579 [ 390.235887][T12707] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 390.235904][T12707] RSP: 002b:00000000f543655c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 390.235922][T12707] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 390.235935][T12707] RDX: 0000000000000000 RSI: 00000000200007fd RDI: 0000000080e68000 [ 390.235947][T12707] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 390.235958][T12707] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 390.235969][T12707] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 390.235993][T12707] [ 390.667383][ T1454] usb 7-1: new low-speed USB device number 34 using dummy_hcd [ 390.688398][ T29] usb usb38-port1: unable to enumerate USB device [ 390.769609][T12725] fuse: Bad value for 'fd' [ 391.647328][ T1327] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 391.799529][ T1327] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 391.803255][ T1327] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 391.807705][ T1327] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 391.811437][ T1327] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 391.816294][ T1327] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 391.823824][ T1327] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 391.827697][ T1327] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 391.831460][ T1327] usb 5-1: Product: syz [ 391.833860][ T1327] usb 5-1: Manufacturer: syz [ 391.849158][ T1327] cdc_wdm 5-1:1.0: skipping garbage [ 391.851570][ T1327] cdc_wdm 5-1:1.0: skipping garbage [ 391.856395][ T1327] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 391.859173][ T1327] cdc_wdm 5-1:1.0: Unknown control protocol [ 392.569152][ T7631] usb 5-1: USB disconnect, device number 33 [ 392.860257][T12746] netdevsim netdevsim0: Direct firmware load for @ failed with error -2 [ 392.863221][T12746] netdevsim netdevsim0: Falling back to sysfs fallback for: @ [ 392.969191][T12748] fuse: Bad value for 'fd' [ 393.694024][T12759] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1788'. [ 393.850540][ T8204] usb 40-1: device descriptor read/8, error -110 [ 394.267997][ T8204] usb usb40-port1: attempt power cycle [ 394.637607][ T40] kauditd_printk_skb: 53 callbacks suppressed [ 394.639802][ T40] audit: type=1804 audit(2000000071.073:2087): pid=12782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1791" name="/newroot/447/bus" dev="tmpfs" ino=2454 res=1 errno=0 [ 394.939641][ T8204] usb usb40-port1: unable to enumerate USB device [ 395.608300][T12789] nbd0: detected capacity change from 0 to 63 [ 395.616356][T12790] block nbd0: NBD_DISCONNECT [ 395.625033][T12790] block nbd0: Disconnected due to user request. [ 395.627720][T12790] block nbd0: shutting down sockets [ 395.629740][ T8678] blk_print_req_error: 10 callbacks suppressed [ 395.629751][ T8678] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.637111][ T8678] buffer_io_error: 492 callbacks suppressed [ 395.637125][ T8678] Buffer I/O error on dev nbd0, logical block 0, async page read [ 395.641714][ T8678] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.677219][ T8678] Buffer I/O error on dev nbd0, logical block 1, async page read [ 395.680052][ T8678] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.682981][ T8678] Buffer I/O error on dev nbd0, logical block 2, async page read [ 395.685578][ T8678] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.698806][ T8678] Buffer I/O error on dev nbd0, logical block 3, async page read [ 395.701492][ T8678] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.704341][ T8678] Buffer I/O error on dev nbd0, logical block 0, async page read [ 395.707543][ T8678] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.711265][ T8678] Buffer I/O error on dev nbd0, logical block 1, async page read [ 395.714581][ T8678] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.737068][ T8678] Buffer I/O error on dev nbd0, logical block 2, async page read [ 395.739693][ T8678] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.747398][ T8678] Buffer I/O error on dev nbd0, logical block 3, async page read [ 395.750323][ T8678] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.753330][ T8678] Buffer I/O error on dev nbd0, logical block 0, async page read [ 395.756027][ T8678] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.759242][ T8678] Buffer I/O error on dev nbd0, logical block 1, async page read [ 395.768384][ T8678] ldm_validate_partition_table(): Disk read failed. [ 395.771456][ T8678] Dev nbd0: unable to read RDB block 0 [ 395.778401][ T8678] nbd0: unable to read partition table [ 395.836072][ T8678] ldm_validate_partition_table(): Disk read failed. [ 395.839330][ T8678] Dev nbd0: unable to read RDB block 0 [ 395.841970][ T8678] nbd0: unable to read partition table [ 396.401576][T12801] netlink: 'syz.0.1798': attribute type 2 has an invalid length. [ 396.420688][T12801] netlink: 'syz.0.1798': attribute type 1 has an invalid length. [ 396.902009][T12808] x_tables: ip_tables: udp match: only valid for protocol 17 [ 397.007279][ T5980] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 397.018494][ T5980] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 397.022930][ T5980] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 397.049018][ T5980] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 397.052441][ T5980] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 397.268679][ T12] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.313501][T12808] lo speed is unknown, defaulting to 1000 [ 397.411790][ T12] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.609126][ T12] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.615418][T12809] lo speed is unknown, defaulting to 1000 [ 397.981025][ T12] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.134766][T12809] chnl_net:caif_netlink_parms(): no params data found [ 398.373099][T12809] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.380633][T12809] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.384071][T12809] bridge_slave_0: entered allmulticast mode [ 398.388397][T12809] bridge_slave_0: entered promiscuous mode [ 398.536091][T12841] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1804'. [ 398.546940][ T24] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 398.591395][T12842] netlink: 'syz.0.1807': attribute type 2 has an invalid length. [ 398.629155][T12842] netlink: 'syz.0.1807': attribute type 1 has an invalid length. [ 398.740284][ T24] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 398.743964][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.747832][ T24] usb 6-1: Product: syz [ 398.755769][ T24] usb 6-1: Manufacturer: syz [ 398.758240][ T24] usb 6-1: SerialNumber: syz [ 398.821242][ T24] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 398.839291][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.857997][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.867029][ T6028] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 398.869509][ T12] bond0 (unregistering): Released all slaves [ 398.877898][ T12] bond1 (unregistering): Released all slaves [ 398.889647][T12809] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.894782][T12809] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.909835][T12809] bridge_slave_1: entered allmulticast mode [ 398.913251][T12809] bridge_slave_1: entered promiscuous mode [ 399.032057][T12809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.087045][ T12] tipc: Left network mode [ 399.099347][T12809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.117722][ T5980] Bluetooth: hci2: command tx timeout [ 399.159782][ T7631] usb 6-1: USB disconnect, device number 40 [ 399.434310][T12809] team0: Port device team_slave_0 added [ 399.445843][T12809] team0: Port device team_slave_1 added [ 399.874973][T12809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.877833][T12809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.906118][T12809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.917982][T12809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.920641][T12809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.932555][ T6028] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 399.935608][ T6028] ath9k_htc: Failed to initialize the device [ 399.936898][T12809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.942157][ T7631] usb 6-1: ath9k_htc: USB layer deinitialized [ 400.095968][T12809] hsr_slave_0: entered promiscuous mode [ 400.098433][T12809] hsr_slave_1: entered promiscuous mode [ 400.101205][T12809] debugfs: 'hsr0' already exists in 'hsr' [ 400.106087][T12809] Cannot create hsr debugfs directory [ 400.338437][ T12] hsr_slave_0: left promiscuous mode [ 400.343840][ T12] hsr_slave_1: left promiscuous mode [ 400.368058][ T12] veth1_macvtap: left promiscuous mode [ 400.370160][ T12] veth0_macvtap: left promiscuous mode [ 400.372625][ T12] veth1_vlan: left promiscuous mode [ 400.374949][ T12] veth0_vlan: left promiscuous mode [ 400.494420][ T12] pimreg (unregistering): left allmulticast mode [ 400.678035][ T61] smc: removing ib device syz2 [ 401.196822][ T5980] Bluetooth: hci2: command tx timeout [ 401.924611][ T6028] syz2: Port: 1 Link DOWN [ 401.926002][T12877] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 401.956912][T12887] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 401.996755][T12888] syz_tun: entered allmulticast mode [ 402.014428][T12890] syz_tun: left allmulticast mode [ 402.256488][T12809] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 402.263400][T12809] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 402.298726][T12809] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 402.312828][T12809] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 402.342020][T12898] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1817'. [ 402.380234][T12907] libceph: resolve '400' (ret=-3): failed [ 402.504946][T12809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.541491][ C2] vkms_vblank_simulate: vblank timer overrun [ 402.569965][T12809] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.581765][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.585606][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.603324][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.606373][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.759287][T12809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.050825][T12809] veth0_vlan: entered promiscuous mode [ 403.064531][T12809] veth1_vlan: entered promiscuous mode [ 403.093886][T12809] veth0_macvtap: entered promiscuous mode [ 403.103117][T12809] veth1_macvtap: entered promiscuous mode [ 403.121044][T12809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.129112][T12809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.140526][ T1148] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.145056][ T1148] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.151889][ T1148] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.156077][ T1148] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.286706][ T5980] Bluetooth: hci2: command tx timeout [ 403.995696][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.023644][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.091201][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.094494][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.264191][T12947] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 404.973074][T12962] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1824'. [ 405.223675][T12968] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1825'. [ 405.754210][ T5980] Bluetooth: hci2: command tx timeout [ 406.173395][T12974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1827'. [ 406.476412][T12989] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 406.836560][T12992] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 406.838928][T12992] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 406.847604][T12992] vhci_hcd vhci_hcd.0: Device attached [ 407.122401][T12994] vhci_hcd: connection closed [ 407.124282][ T61] vhci_hcd: stop threads [ 407.127831][ T61] vhci_hcd: release socket [ 407.129644][ T61] vhci_hcd: disconnect device [ 407.206466][ T8204] usb 42-1: SetAddress Request (35) to port 0 [ 407.209087][ T8204] usb 42-1: new SuperSpeed USB device number 35 using vhci_hcd [ 407.267638][T12997] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 407.270386][T12997] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 407.274026][T12997] vhci_hcd vhci_hcd.0: Device attached [ 407.315981][ T40] audit: type=1800 audit(2000000083.754:2088): pid=12997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1826" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 407.528693][T13003] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1835'. [ 407.604194][T13006] ucma_write: process 17 (syz.5.1835) changed security contexts after opening file descriptor, this is not allowed. [ 407.611606][T13006] tmpfs: Unknown parameter 'nr_Jn' [ 407.614706][T12998] vhci_hcd: connection closed [ 407.706474][ T1138] vhci_hcd: stop threads [ 407.710723][ T1138] vhci_hcd: release socket [ 407.712991][ T1138] vhci_hcd: disconnect device [ 407.723088][ T53] usb 40-1: enqueue for inactive port 0 [ 408.239729][T13016] comedi comedi3: aio_iiro_16: I/O port conflict (0x4f27,8) [ 408.247378][ T53] usb usb40-port1: attempt power cycle [ 408.777579][T13032] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 408.780416][T13032] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 408.784736][T13032] vhci_hcd vhci_hcd.0: Device attached [ 408.798839][ T40] audit: type=1800 audit(2000000085.254:2089): pid=13032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1840" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 408.827710][ T53] usb usb40-port1: unable to enumerate USB device [ 409.086326][ T29] usb 48-1: SetAddress Request (2) to port 0 [ 409.088506][ T29] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 409.263448][T13033] vhci_hcd: connection reset by peer [ 409.266710][ T12] vhci_hcd: stop threads [ 409.270496][ T12] vhci_hcd: release socket [ 409.272670][ T12] vhci_hcd: disconnect device [ 409.750311][T13068] netlink: 'syz.0.1850': attribute type 2 has an invalid length. [ 409.783537][T13068] netlink: 'syz.0.1850': attribute type 1 has an invalid length. [ 410.023835][T13073] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 410.026466][T13073] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 410.039622][T13073] vhci_hcd vhci_hcd.0: Device attached [ 410.688167][T13074] vhci_hcd: connection closed [ 410.688469][ T12] vhci_hcd: stop threads [ 410.691887][ T12] vhci_hcd: release socket [ 410.693421][ T12] vhci_hcd: disconnect device [ 411.019140][T13083] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 411.022019][T13083] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 411.025543][T13083] vhci_hcd vhci_hcd.0: Device attached [ 411.170467][T13084] vhci_hcd: connection closed [ 411.170848][ T1138] vhci_hcd: stop threads [ 411.175031][ T1138] vhci_hcd: release socket [ 411.177802][ T1138] vhci_hcd: disconnect device [ 411.226231][ T6028] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 411.439687][ T6028] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.898093][T13094] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1856'. [ 412.165721][ T6028] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 412.170598][ T6028] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 412.174970][ T6028] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.180641][ T6028] usb 5-1: config 0 descriptor?? [ 412.184963][T13097] netlink: 'syz.1.1857': attribute type 1 has an invalid length. [ 412.186121][ T6028] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 412.188651][T13097] netlink: 'syz.1.1857': attribute type 1 has an invalid length. [ 412.190591][ T6028] dvb-usb: bulk message failed: -22 (3/0) [ 412.202151][ T6028] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 412.206886][ T6028] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 412.210200][ T6028] usb 5-1: media controller created [ 412.216158][ T6028] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 412.230646][ T6028] dvb-usb: bulk message failed: -22 (6/0) [ 412.233438][ T6028] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 412.236197][ T8204] usb 42-1: device descriptor read/8, error -110 [ 412.239300][ T6028] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input23 [ 412.246797][ T6028] dvb-usb: schedule remote query interval to 150 msecs. [ 412.249737][ T6028] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 412.407871][ T6028] dvb-usb: bulk message failed: -22 (1/0) [ 412.413638][ T6028] dvb-usb: error while querying for an remote control event. [ 412.527390][T13104] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 412.529557][T13104] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 412.532530][T13104] vhci_hcd vhci_hcd.0: Device attached [ 412.577738][ T6021] dvb-usb: bulk message failed: -22 (1/0) [ 412.580003][ T6021] dvb-usb: error while querying for an remote control event. [ 412.736190][ T6021] dvb-usb: bulk message failed: -22 (1/0) [ 412.738592][ T6021] dvb-usb: error while querying for an remote control event. [ 412.816135][ T6028] usb 40-1: SetAddress Request (46) to port 0 [ 412.818213][ T6028] usb 40-1: new SuperSpeed USB device number 46 using vhci_hcd [ 412.927255][ T6021] dvb-usb: bulk message failed: -22 (1/0) [ 412.944279][T13107] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 412.955339][ T6021] dvb-usb: error while querying for an remote control event. [ 412.999880][ T8204] usb 42-1: SetAddress Request (36) to port 0 [ 413.001909][ T8204] usb 42-1: new SuperSpeed USB device number 36 using vhci_hcd [ 413.004065][ T53] usb 5-1: USB disconnect, device number 34 [ 413.071992][T13105] vhci_hcd: connection reset by peer [ 413.073974][ T13] vhci_hcd: stop threads [ 413.075753][ T13] vhci_hcd: release socket [ 413.078226][ T13] vhci_hcd: disconnect device [ 413.080108][ T53] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 413.243074][T13119] netlink: 'syz.5.1860': attribute type 2 has an invalid length. [ 413.279868][T13119] netlink: 'syz.5.1860': attribute type 1 has an invalid length. [ 413.402321][T13122] netlink: 'syz.2.1861': attribute type 2 has an invalid length. [ 413.430029][T13122] netlink: 'syz.2.1861': attribute type 1 has an invalid length. [ 413.615823][T13125] netlink: 'syz.5.1862': attribute type 2 has an invalid length. [ 413.630292][T13125] netlink: 'syz.5.1862': attribute type 1 has an invalid length. [ 414.169709][ T29] usb 48-1: device descriptor read/8, error -110 [ 414.705610][T13144] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1867'. [ 414.774501][T13151] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1867'. [ 415.117673][T13168] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 415.119709][T13168] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 415.122522][T13168] vhci_hcd vhci_hcd.0: Device attached [ 415.150438][ T29] usb usb48-port1: attempt power cycle [ 415.215657][T13172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.238157][T13172] bond0: (slave rose0): Enslaving as an active interface with an up link [ 415.239589][T13176] validate_nla: 1 callbacks suppressed [ 415.239599][T13176] netlink: 'syz.2.1868': attribute type 10 has an invalid length. [ 415.294828][T13169] vhci_hcd: connection closed [ 415.295219][ T13] vhci_hcd: stop threads [ 415.298229][ T13] vhci_hcd: release socket [ 415.299795][ T13] vhci_hcd: disconnect device [ 415.526280][ T6021] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 415.701785][ T6021] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 415.711712][ T6021] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 415.724840][ T6021] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 415.728615][ T6021] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 415.733187][ T6021] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 415.736429][ T29] usb usb48-port1: unable to enumerate USB device [ 415.742895][ T6021] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 415.746035][ T6021] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 415.756018][ T6021] usb 10-1: Product: syz [ 415.757987][ T6021] usb 10-1: Manufacturer: syz [ 415.763179][ T6021] cdc_wdm 10-1:1.0: skipping garbage [ 415.764879][ T6021] cdc_wdm 10-1:1.0: skipping garbage [ 415.778280][ T6021] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 415.780758][ T6021] cdc_wdm 10-1:1.0: Unknown control protocol [ 416.689373][T13209] comedi comedi2: c6xdigio: I/O port conflict (0x3c4,3) [ 417.926165][ T6028] usb 40-1: device descriptor read/8, error -110 [ 418.198983][ T8204] usb 42-1: device descriptor read/8, error -110 [ 418.261968][ T7631] usb 10-1: USB disconnect, device number 2 [ 418.305902][ T8204] usb usb42-port1: attempt power cycle [ 418.326348][ T6028] usb usb40-port1: attempt power cycle [ 418.449122][ T8204] usb 42-1: SetAddress Request (37) to port 0 [ 418.481425][T13233] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1880'. [ 418.488955][T13234] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1881'. [ 418.627747][ T8204] usb 42-1: new SuperSpeed USB device number 37 using vhci_hcd [ 418.981193][ T6028] usb usb40-port1: unable to enumerate USB device [ 419.359863][T13226] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 419.362746][T13226] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 419.375902][T13226] vhci_hcd vhci_hcd.0: Device attached [ 419.534265][T13244] vhci_hcd: connection closed [ 419.534490][ T1139] vhci_hcd: stop threads [ 419.545978][ T1139] vhci_hcd: release socket [ 419.548002][ T1139] vhci_hcd: disconnect device [ 419.584636][T13249] FAULT_INJECTION: forcing a failure. [ 419.584636][T13249] name failslab, interval 1, probability 0, space 0, times 0 [ 419.596069][T13249] CPU: 0 UID: 0 PID: 13249 Comm: syz.2.1883 Not tainted syzkaller #0 PREEMPT(full) [ 419.596097][T13249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 419.596109][T13249] Call Trace: [ 419.596115][T13249] [ 419.596122][T13249] dump_stack_lvl+0x16c/0x1f0 [ 419.596185][T13249] should_fail_ex+0x512/0x640 [ 419.596223][T13249] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 419.596250][T13249] should_failslab+0xc2/0x120 [ 419.596275][T13249] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 419.596299][T13249] ? copy_process+0x4b6/0x7690 [ 419.596329][T13249] copy_process+0x4b6/0x7690 [ 419.596365][T13249] ? __pfx_copy_process+0x10/0x10 [ 419.596393][T13249] ? lockdep_init_map_type+0x5c/0x280 [ 419.596423][T13249] ? lockdep_init_map_type+0x5c/0x280 [ 419.596450][T13249] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 419.596479][T13249] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 419.596502][T13249] vhost_task_create+0x1d2/0x370 [ 419.596520][T13249] ? __pfx_vhost_task_create+0x10/0x10 [ 419.596555][T13249] ? __pfx_vhost_task_fn+0x10/0x10 [ 419.596579][T13249] kvm_mmu_post_init_vm+0x1b7/0x380 [ 419.596598][T13249] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 419.596615][T13249] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 419.596633][T13249] kvm_vcpu_ioctl+0x5eb/0x1690 [ 419.596649][T13249] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 419.596663][T13249] ? tomoyo_path_number_perm+0x18d/0x580 [ 419.596679][T13249] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 419.596698][T13249] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 419.596716][T13249] ? do_vfs_ioctl+0x128/0x14f0 [ 419.596735][T13249] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 419.596758][T13249] kvm_vcpu_compat_ioctl+0x20f/0x3d0 [ 419.596774][T13249] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 419.596788][T13249] ? __fget_files+0x20e/0x3c0 [ 419.596804][T13249] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 419.596819][T13249] __ia32_compat_sys_ioctl+0x242/0x370 [ 419.596839][T13249] __do_fast_syscall_32+0x7c/0x300 [ 419.596851][T13249] do_fast_syscall_32+0x32/0x80 [ 419.596861][T13249] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 419.596876][T13249] RIP: 0023:0xf7f91579 [ 419.596885][T13249] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 419.596896][T13249] RSP: 002b:00000000f548655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 419.596915][T13249] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 419.596922][T13249] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 419.596928][T13249] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 419.596935][T13249] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 419.596941][T13249] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 419.596955][T13249] [ 419.714328][T13252] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1884'. [ 419.781271][T13253] nvme_fabrics: unknown parameter or missing value '0' in ctrl creation request [ 420.343271][T13264] siw: device registration error -23 [ 420.736946][T13269] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1890'. [ 421.740982][T13278] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1889'. [ 421.776934][T13278] dlm: no local IP address has been set [ 421.778999][T13278] dlm: cannot start dlm midcomms -107 [ 422.762187][T13283] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1891'. [ 422.778340][T13275] befs: (nbd0): No write support. Marking filesystem read-only [ 423.015700][T13275] befs: (nbd0): unable to read superblock [ 423.231527][T13291] netlink: 'syz.5.1895': attribute type 2 has an invalid length. [ 423.255037][T13291] netlink: 'syz.5.1895': attribute type 1 has an invalid length. [ 423.755590][ T8204] usb 42-1: device descriptor read/8, error -110 [ 424.008597][ T8204] usb 42-1: SetAddress Request (38) to port 0 [ 424.011310][ T8204] usb 42-1: new SuperSpeed USB device number 38 using vhci_hcd [ 424.038220][T13311] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1900'. [ 424.834247][T13315] tipc: Enabled bearer , priority 0 [ 424.841879][T13315] syzkaller0: entered promiscuous mode [ 424.844202][T13315] syzkaller0: entered allmulticast mode [ 424.878905][T13315] tipc: Resetting bearer [ 424.892578][T13314] tipc: Resetting bearer [ 424.906049][T13314] tipc: Disabling bearer [ 424.958901][T13318] netlink: 'syz.5.1902': attribute type 2 has an invalid length. [ 424.982551][T13318] netlink: 'syz.5.1902': attribute type 1 has an invalid length. [ 425.092314][T13328] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 425.578892][ T7631] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 425.735386][ T7631] usb 10-1: Using ep0 maxpacket: 16 [ 425.738919][ T7631] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.743081][ T7631] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.746850][ T7631] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 425.751159][ T7631] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 425.754120][ T7631] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.784579][ T7631] usb 10-1: config 0 descriptor?? [ 426.008483][T13346] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1910'. [ 426.010140][T13345] sp0: Synchronizing with TNC [ 426.012141][ T40] audit: type=1800 audit(2000000102.465:2090): pid=13337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1907" name="/" dev="fuse" ino=5 res=0 errno=0 [ 426.218783][T13352] lo speed is unknown, defaulting to 1000 [ 426.360369][ T7631] hid_parser_main: 8 callbacks suppressed [ 426.360921][ T7631] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 426.388671][ T7631] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 426.408088][ T7631] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 426.433543][ T7631] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 426.443199][ T7631] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 426.622550][T13339] netlink: 'syz.5.1908': attribute type 2 has an invalid length. [ 426.649189][ T7631] input: HID 0955:7214 Haptics as /devices/virtual/input/input24 [ 426.665526][T13339] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1908'. [ 426.700402][T13357] overlayfs: failed to resolve './file1': -2 [ 426.706944][T13357] overlayfs: missing 'lowerdir' [ 426.865463][ T7631] shield 0003:0955:7214.0008: Registered Thunderstrike controller [ 426.868865][ T7631] shield 0003:0955:7214.0008: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 426.876805][T13365] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1914'. [ 426.885578][T13365] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 426.910726][T13365] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 426.914048][T13365] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 427.984208][ T7631] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 428.037612][ T7631] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 428.042147][ T7631] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 428.049840][ T7631] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 428.148799][T13383] netlink: zone id is out of range [ 428.150817][T13383] netlink: zone id is out of range [ 428.153443][T13383] netlink: zone id is out of range [ 428.157121][T13383] netlink: del zone limit has 4 unknown bytes [ 428.178857][ T1454] usb 10-1: reset high-speed USB device number 3 using dummy_hcd [ 428.325915][ T1454] usb 10-1: device descriptor read/64, error -32 [ 429.045246][ T8204] usb 42-1: device descriptor read/8, error -110 [ 429.165624][ T8204] usb usb42-port1: unable to enumerate USB device [ 429.250932][ T7631] usb 10-1: USB disconnect, device number 3 [ 429.542283][T13387] netlink: 'syz.5.1919': attribute type 1 has an invalid length. [ 429.544879][T13387] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1919'. [ 429.853615][T13393] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1921'. [ 429.962931][T13394] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1922'. [ 430.199412][T13402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1923'. [ 430.304900][T13404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1923'. [ 430.821906][T13407] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 430.824664][T13407] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 430.827982][T13407] vhci_hcd vhci_hcd.0: Device attached [ 430.891627][T13409] vhci_hcd: connection closed [ 430.892802][ T6658] vhci_hcd: stop threads [ 430.901317][ T6658] vhci_hcd: release socket [ 430.903728][ T6658] vhci_hcd: disconnect device [ 431.545171][ T24] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 431.707844][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 431.724193][ T24] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 431.727375][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.735358][ T24] usb 7-1: Product: syz [ 431.736688][ T24] usb 7-1: Manufacturer: syz [ 431.738158][ T24] usb 7-1: SerialNumber: syz [ 431.753383][ T24] usb 7-1: config 0 descriptor?? [ 432.100909][T13421] vxcan1: entered allmulticast mode [ 432.156224][ T24] usb 7-1: USB disconnect, device number 35 [ 432.229506][ T6274] udevd[6274]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 432.648341][T13441] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1932'. [ 433.159885][T13446] netlink: 'syz.2.1933': attribute type 2 has an invalid length. [ 433.238928][T13449] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1934'. [ 433.259888][T13449] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 433.313088][T13446] netlink: 'syz.2.1933': attribute type 1 has an invalid length. [ 433.577715][ T6028] e1000 0000:00:06.0 eth0: Reset adapter [ 435.552573][T13476] lo speed is unknown, defaulting to 1000 [ 436.555521][T13499] bridge1: entered promiscuous mode [ 436.635278][T13490] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 436.899151][T13490] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 436.901044][T13490] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 436.928284][T13490] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 436.956048][ T6021] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 438.724692][ T5980] Bluetooth: hci1: command 0x0406 tx timeout [ 438.954847][ T5980] Bluetooth: hci2: command 0x0c1a tx timeout [ 441.034734][ T5980] Bluetooth: hci2: command 0x0c1a tx timeout [ 443.114651][ T5980] Bluetooth: hci2: command 0x0c1a tx timeout [ 444.637594][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.640208][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.268871][ T40] audit: type=1326 audit(2000000123.726:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.1.1944" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e598 code=0x7ffc0000 [ 447.284272][ T40] audit: type=1326 audit(2000000123.726:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.1.1944" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e598 code=0x7ffc0000 [ 447.298227][ T40] audit: type=1326 audit(2000000123.726:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.1.1944" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e598 code=0x7ffc0000 [ 447.307167][ T40] audit: type=1326 audit(2000000123.726:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.1.1944" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e598 code=0x7ffc0000 [ 447.319136][ T40] audit: type=1326 audit(2000000123.726:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.1.1944" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e598 code=0x7ffc0000 [ 447.327563][T13525] No source specified [ 447.328190][ T40] audit: type=1326 audit(2000000123.726:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.1.1944" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e598 code=0x7ffc0000 [ 447.340886][ T40] audit: type=1326 audit(2000000123.726:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.1.1944" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e598 code=0x7ffc0000 [ 447.348057][T13526] netlink: 'syz.0.1943': attribute type 1 has an invalid length. [ 447.349475][T13524] input: syz0 as /devices/virtual/input/input26 [ 447.354879][ T40] audit: type=1326 audit(2000000123.726:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.1.1944" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e598 code=0x7ffc0000 [ 447.362905][ T40] audit: type=1326 audit(2000000123.726:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.1.1944" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e598 code=0x7ffc0000 [ 447.379626][T13525] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1945'. [ 447.381426][ T40] audit: type=1326 audit(2000000123.726:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.1.1944" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e598 code=0x7ffc0000 [ 447.402936][T13529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1943'. [ 447.418663][T13526] 8021q: adding VLAN 0 to HW filter on device bond2 [ 447.565754][T13529] bond2 (unregistering): Released all slaves [ 447.765953][ T8204] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 447.926085][ T8204] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 447.929124][ T8204] usb 5-1: config 0 interface 0 has no altsetting 0 [ 447.938110][ T8204] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 447.940883][ T8204] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.943365][ T8204] usb 5-1: Product: syz [ 447.951518][ T8204] usb 5-1: Manufacturer: syz [ 447.952987][ T8204] usb 5-1: SerialNumber: syz [ 447.963491][ T8204] usb 5-1: config 0 descriptor?? [ 447.969133][ T8204] usb 5-1: selecting invalid altsetting 0 [ 448.279160][T13539] evm: overlay not supported [ 449.421810][T13545] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1950'. [ 450.273738][ T6021] usb 5-1: USB disconnect, device number 35 [ 450.580598][T13569] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1957'. [ 450.600149][T13569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1957'. [ 453.257248][T13600] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 454.743265][T13627] netlink: 'syz.0.1975': attribute type 4 has an invalid length. [ 454.755274][T13624] loop6: detected capacity change from 0 to 63 [ 454.761999][T13562] buffer_io_error: 138 callbacks suppressed [ 454.762020][T13562] Buffer I/O error on dev loop6, logical block 0, async page read [ 454.777358][T13624] Buffer I/O error on dev loop6, logical block 0, async page read [ 454.780634][T13624] Buffer I/O error on dev loop6, logical block 0, async page read [ 454.793769][T13562] Buffer I/O error on dev loop6, logical block 0, async page read [ 454.797773][T13562] Buffer I/O error on dev loop6, logical block 0, async page read [ 454.801291][T13562] Buffer I/O error on dev loop6, logical block 0, async page read [ 454.814111][T13624] Buffer I/O error on dev loop6, logical block 0, async page read [ 454.822306][T13624] Buffer I/O error on dev loop6, logical block 0, async page read [ 454.828801][T13562] Buffer I/O error on dev loop6, logical block 0, async page read [ 454.839456][T13624] Buffer I/O error on dev loop6, logical block 0, async page read [ 454.890679][T13636] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 454.968282][T13639] lo speed is unknown, defaulting to 1000 [ 455.203705][T13645] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1981'. [ 455.365008][T13652] random: crng reseeded on system resumption [ 455.695717][T13657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1986'. [ 456.582140][T13665] dummy0: entered promiscuous mode [ 456.586404][T13665] dummy0: left promiscuous mode [ 458.043559][ T6021] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 458.209852][ T6021] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 458.213871][ T6021] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 458.217947][ T6021] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 458.221994][ T6021] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 458.226397][ T6021] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 458.230163][ T6021] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.235495][ T6021] usb 6-1: config 0 descriptor?? [ 458.451410][ T6021] hdpvr 6-1:0.0: firmware version 0x8 dated [ 458.652876][ T6021] hdpvr 6-1:0.0: device init failed [ 458.658653][ T6021] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 458.669036][ T6021] usb 6-1: USB disconnect, device number 41 [ 458.773731][ T24] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 458.832241][T13699] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2000'. [ 458.925087][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.931153][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.937619][ T24] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 458.943074][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.953228][ T24] usb 10-1: config 0 descriptor?? [ 459.031894][T13698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2000'. [ 459.036194][T13698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2000'. [ 459.165881][T13703] vlan2: entered promiscuous mode [ 459.168051][T13703] hsr_slave_1: entered promiscuous mode [ 459.170066][T13703] vlan2: entered allmulticast mode [ 459.171839][T13703] hsr_slave_1: entered allmulticast mode [ 459.425675][ T5699] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 459.575484][ T5699] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.579540][ T5699] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 459.582337][ T5699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.588329][ T5699] usb 6-1: config 0 descriptor?? [ 459.593200][ T5699] pwc: Askey VC010 type 2 USB webcam detected. [ 460.007512][ T5699] pwc: recv_control_msg error -32 req 02 val 2b00 [ 460.011206][ T5699] pwc: recv_control_msg error -32 req 02 val 2700 [ 460.013307][ T24] input: HID 256c:006d as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:256C:006D.0009/input/input27 [ 460.078943][ T24] input: HID 256c:006d as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:256C:006D.0009/input/input28 [ 460.099403][ T24] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:256C:006D.0009/input/input29 [ 460.137612][ T24] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:256C:006D.0009/input/input30 [ 460.162907][ T24] uclogic 0003:256C:006D.0009: input,hidraw1: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.5-1/input0 [ 460.214066][ T24] usb 10-1: USB disconnect, device number 4 [ 460.225633][ T5699] pwc: recv_control_msg error -71 req 04 val 1000 [ 460.229715][ T5699] pwc: recv_control_msg error -71 req 04 val 1300 [ 460.233189][ T5699] pwc: recv_control_msg error -71 req 04 val 1400 [ 460.236052][ T5699] pwc: recv_control_msg error -71 req 02 val 2000 [ 460.239660][ T5699] pwc: recv_control_msg error -71 req 02 val 2100 [ 460.242403][ T5699] pwc: recv_control_msg error -71 req 04 val 1500 [ 460.245317][ T5699] pwc: recv_control_msg error -71 req 02 val 2500 [ 460.248601][ T5699] pwc: recv_control_msg error -71 req 02 val 2400 [ 460.251433][ T5699] pwc: recv_control_msg error -71 req 02 val 2600 [ 460.255008][ T5699] pwc: recv_control_msg error -71 req 02 val 2900 [ 460.258139][ T5699] pwc: recv_control_msg error -71 req 02 val 2800 [ 460.261120][ T5699] pwc: recv_control_msg error -71 req 04 val 1100 [ 460.263759][ T5699] pwc: recv_control_msg error -71 req 04 val 1200 [ 460.282580][T13710] fido_id[13710]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb10/10-1/report_descriptor': No such file or directory [ 460.291225][ T5699] pwc: Registered as video103. [ 460.297896][ T5699] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb6/6-1/input/input31 [ 460.314256][ T5699] usb 6-1: USB disconnect, device number 42 [ 461.563409][ T57] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 461.726098][ T57] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 461.728728][ T57] usb 6-1: config 0 has no interface number 0 [ 461.733716][ T57] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 461.736723][ T57] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.739278][ T57] usb 6-1: Product: syz [ 461.740575][ T57] usb 6-1: Manufacturer: syz [ 461.742289][ T57] usb 6-1: SerialNumber: syz [ 461.745768][ T57] usb 6-1: config 0 descriptor?? [ 461.863652][ T7631] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 462.046065][ T7631] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 462.049551][ T7631] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.052561][ T7631] usb 5-1: Product: syz [ 462.055737][ T7631] usb 5-1: Manufacturer: syz [ 462.057927][ T7631] usb 5-1: SerialNumber: syz [ 462.066621][ T7631] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 462.082085][ T1454] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 462.494165][ T24] usb 5-1: USB disconnect, device number 36 [ 462.557749][ T57] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 462.560846][ T57] asix 6-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 462.564433][ T57] asix 6-1:0.251: probe with driver asix failed with error -71 [ 462.568797][ T57] usb 6-1: USB disconnect, device number 43 [ 463.123276][ T1454] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 463.127073][ T1454] ath9k_htc: Failed to initialize the device [ 463.130553][ T24] usb 5-1: ath9k_htc: USB layer deinitialized [ 464.501619][T13788] netlink: 'syz.1.2031': attribute type 11 has an invalid length. [ 464.747960][T13796] lo speed is unknown, defaulting to 1000 [ 466.365858][T13817] sp0: Synchronizing with TNC [ 466.843768][T13811] [U] [ 466.980400][T13828] loop5: detected capacity change from 0 to 7 [ 467.109108][T13835] netlink: 'syz.1.2049': attribute type 8 has an invalid length. [ 467.233674][ T24] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 467.297870][T13562] Dev loop5: unable to read RDB block 7 [ 467.300781][T13562] loop5: unable to read partition table [ 467.304175][T13562] loop5: partition table beyond EOD, truncated [ 467.394898][ T24] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 467.398489][ T24] usb 10-1: config 0 has no interface number 0 [ 467.401137][ T24] usb 10-1: config 0 interface 51 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 467.407245][ T24] usb 10-1: config 0 interface 51 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 467.414687][ T24] usb 10-1: New USB device found, idVendor=061c, idProduct=c084, bcdDevice=f5.fc [ 467.418021][ T24] usb 10-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 467.421436][ T24] usb 10-1: Product: syz [ 467.424878][ T24] usb 10-1: Manufacturer: syz [ 467.427187][ T24] usb 10-1: SerialNumber: syz [ 467.431676][ T24] usb 10-1: config 0 descriptor?? [ 467.709045][T13828] Dev loop5: unable to read RDB block 7 [ 467.716473][T13828] loop5: unable to read partition table [ 467.725845][T13828] loop5: partition table beyond EOD, truncated [ 467.728834][T13828] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 467.804453][T13840] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 468.070202][T13846] input: syz0 as /devices/virtual/input/input32 [ 468.190954][T13850] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 468.802963][ T1454] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 468.963004][ T1454] usb 6-1: Using ep0 maxpacket: 32 [ 468.967550][ T1454] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 468.970574][ T1454] usb 6-1: config 0 has no interface number 0 [ 468.973313][ T1454] usb 6-1: config 0 interface 12 has no altsetting 0 [ 468.977866][ T1454] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 468.981200][ T1454] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.985243][ T1454] usb 6-1: Product: syz [ 468.986994][ T1454] usb 6-1: Manufacturer: syz [ 468.988518][ T1454] usb 6-1: SerialNumber: syz [ 468.992411][ T1454] usb 6-1: config 0 descriptor?? [ 469.415371][ T1454] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 469.418896][ T1454] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 469.421560][ T1454] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 469.424649][ T1454] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 469.433142][ T1454] usb 6-1: USB disconnect, device number 44 [ 470.020663][ T57] usb 10-1: USB disconnect, device number 5 [ 472.282874][ T57] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 472.442807][ T57] usb 10-1: Using ep0 maxpacket: 32 [ 472.447412][ T57] usb 10-1: config 0 has an invalid interface number: 230 but max is 0 [ 472.450955][ T57] usb 10-1: config 0 has no interface number 0 [ 472.453777][ T57] usb 10-1: too many endpoints for config 0 interface 230 altsetting 2: 210, using maximum allowed: 30 [ 472.458697][ T57] usb 10-1: config 0 interface 230 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 210 [ 472.464599][ T57] usb 10-1: config 0 interface 230 has no altsetting 0 [ 472.475646][ T57] usb 10-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 472.479577][ T57] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.483258][ T57] usb 10-1: Product: syz [ 472.485162][ T57] usb 10-1: Manufacturer: syz [ 472.487408][ T57] usb 10-1: SerialNumber: syz [ 472.492946][ T57] usb 10-1: config 0 descriptor?? [ 472.501021][ T57] ums-usbat 10-1:0.230: USB Mass Storage device detected [ 472.516261][ T57] ums-usbat 10-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 472.765946][ T57] ums-usbat 10-1:0.230: probe with driver ums-usbat failed with error -5 [ 472.776686][ T57] usb 10-1: USB disconnect, device number 6 [ 473.358257][T13922] program syz.0.2075 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 473.592760][ T5985] Bluetooth: hci1: command 0x0406 tx timeout [ 473.592837][ T5980] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 473.622838][ T1454] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 473.776574][ T1454] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 473.780190][ T1454] usb 6-1: config 1 has no interface number 0 [ 473.783285][ T1454] usb 6-1: config 1 interface 105 has no altsetting 0 [ 473.789693][ T1454] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 473.793801][ T1454] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.797221][ T1454] usb 6-1: Product: syz [ 473.799146][ T1454] usb 6-1: Manufacturer: syz [ 473.801309][ T1454] usb 6-1: SerialNumber: syz [ 474.514147][ T6021] libceph: connect (1)[c::]:6789 error -101 [ 474.516533][ T6021] libceph: mon0 (1)[c::]:6789 connect error [ 474.612664][ T57] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 474.624710][T13946] ceph: No mds server is up or the cluster is laggy [ 474.876688][ T1454] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 474.881830][ T1454] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 474.923945][ T1454] aqc111 6-1:1.105 eth10: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 38:ed:5c:4a:89:cc [ 474.930048][ T1454] usb 6-1: USB disconnect, device number 45 [ 474.935127][ T1454] aqc111 6-1:1.105 eth10: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 474.994908][ T1454] aqc111 6-1:1.105 eth10 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 474.999234][ T1454] aqc111 6-1:1.105 eth10 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 475.003810][ T1454] aqc111 6-1:1.105 eth10 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 475.546718][T13970] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2096'. [ 475.549823][T13970] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2096'. [ 475.963808][T13973] ip6erspan0: entered allmulticast mode [ 476.380245][T13981] netlink: 'syz.2.2099': attribute type 9 has an invalid length. [ 477.403731][ T57] usb 5-1: unable to get BOS descriptor or descriptor too short [ 477.406834][ T57] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 477.409226][ T57] usb 5-1: can't read configurations, error -71 [ 477.430453][T13994] syzkaller1: entered promiscuous mode [ 477.432916][T13994] syzkaller1: entered allmulticast mode [ 477.992572][ T6021] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 478.152481][ T6021] usb 6-1: Using ep0 maxpacket: 32 [ 478.156520][ T6021] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 478.159880][ T6021] usb 6-1: config 0 has no interface number 0 [ 478.165253][ T6021] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=2c.d8 [ 478.168833][ T6021] usb 6-1: New USB device strings: Mfr=193, Product=2, SerialNumber=3 [ 478.171810][ T6021] usb 6-1: Product: syz [ 478.173813][ T6021] usb 6-1: Manufacturer: syz [ 478.175785][ T6021] usb 6-1: SerialNumber: syz [ 478.180506][ T6021] usb 6-1: config 0 descriptor?? [ 478.184505][ T6021] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 478.188134][ T6021] usb 6-1: selecting invalid altsetting 1 [ 478.190516][ T6021] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 478.199303][ T6021] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 478.203845][ T6021] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 478.207131][ T6021] usb 6-1: media controller created [ 478.223986][ T6021] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 478.394184][ T6021] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 478.398498][ T6021] zl10353_read_register: readreg error (reg=127, ret==-32) [ 478.403940][T14004] lo speed is unknown, defaulting to 1000 [ 478.464579][ T6021] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 478.518281][ T6021] usb 6-1: USB disconnect, device number 46 [ 478.652394][ T24] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 478.802491][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 478.806724][ T24] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 478.810123][ T24] usb 10-1: config 0 has no interface number 0 [ 478.815699][ T24] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 478.819771][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.823454][ T24] usb 10-1: Product: syz [ 478.825271][ T24] usb 10-1: Manufacturer: syz [ 478.827274][ T24] usb 10-1: SerialNumber: syz [ 478.835834][ T24] usb 10-1: config 0 descriptor?? [ 478.839992][ T24] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 478.843434][ T24] usb 10-1: selecting invalid altsetting 1 [ 478.845475][ T24] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 478.852172][ T24] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 478.856009][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 478.858779][ T24] usb 10-1: media controller created [ 478.870695][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 479.092421][ T24] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 479.094715][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 479.097331][ T24] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 479.116586][ T24] usb 10-1: USB disconnect, device number 7 [ 480.003928][ T24] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 480.162385][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 480.167164][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 480.170624][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 480.174933][ T24] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD2, changing to 0x82 [ 480.178513][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 48, changing to 9 [ 480.181858][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 8240, setting to 1024 [ 480.187064][ T24] usb 10-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 480.189902][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.193787][ T24] usb 10-1: Product: syz [ 480.195158][ T24] usb 10-1: Manufacturer: syz [ 480.196649][ T24] usb 10-1: SerialNumber: syz [ 480.199428][ T24] usb 10-1: config 0 descriptor?? [ 480.204745][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input33 [ 480.210506][ T5374] xpad 10-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 480.218796][ T5374] xpad 10-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 480.231492][ T5374] xpad 10-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 480.237317][ T5374] xpad 10-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 480.268287][T13532] xpad 10-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 480.279780][ T5374] xpad 10-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 480.293950][ T5374] xpad 10-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 480.303683][ T5374] xpad 10-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 480.407971][T14054] xpad 10-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 480.415506][ T6021] usb 10-1: USB disconnect, device number 8 [ 482.342195][ T6021] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 482.905499][T14104] input: syz1 as /devices/virtual/input/input34 [ 483.900714][T14119] random: crng reseeded on system resumption [ 484.979667][ T6021] usb 5-1: unable to get BOS descriptor or descriptor too short [ 484.983981][ T6021] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 484.986362][ T6021] usb 5-1: can't read configurations, error -71 [ 485.709677][T14152] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 485.712628][T14152] IPv6: NLM_F_CREATE should be set when creating new route [ 485.842016][T14162] netlink: 'syz.2.2169': attribute type 1 has an invalid length. [ 485.845112][T14162] netlink: 'syz.2.2169': attribute type 1 has an invalid length. [ 485.847542][T14162] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2169'. [ 488.095610][T14236] ================================================================== [ 488.098162][T14236] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70 [ 488.100583][T14236] Read of size 8 at addr ffff88804b797030 by task syz.5.2201/14236 [ 488.104164][T14236] [ 488.105627][T14236] CPU: 0 UID: 0 PID: 14236 Comm: syz.5.2201 Not tainted syzkaller #0 PREEMPT(full) [ 488.105643][T14236] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 488.105650][T14236] Call Trace: [ 488.105655][T14236] [ 488.105664][T14236] dump_stack_lvl+0x116/0x1f0 [ 488.105685][T14236] print_report+0xcd/0x630 [ 488.105700][T14236] ? __virt_addr_valid+0x81/0x610 [ 488.105716][T14236] ? __phys_addr+0xe8/0x180 [ 488.105731][T14236] ? sysfs_remove_file_ns+0x63/0x70 [ 488.105743][T14236] kasan_report+0xe0/0x110 [ 488.105757][T14236] ? sysfs_remove_file_ns+0x63/0x70 [ 488.105771][T14236] sysfs_remove_file_ns+0x63/0x70 [ 488.105783][T14236] driver_remove_file+0x4a/0x60 [ 488.105795][T14236] bus_remove_driver+0x224/0x2c0 [ 488.105811][T14236] driver_unregister+0x76/0xb0 [ 488.105822][T14236] comedi_device_detach_locked+0x12c/0xa50 [ 488.105842][T14236] do_devconfig_ioctl+0x555/0x710 [ 488.105854][T14236] ? __mutex_lock+0x1c5/0x1060 [ 488.105877][T14236] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 488.105895][T14236] ? kasan_save_stack+0x42/0x60 [ 488.105908][T14236] ? kasan_save_stack+0x33/0x60 [ 488.105920][T14236] ? kasan_save_track+0x14/0x30 [ 488.105932][T14236] ? kasan_save_free_info+0x3b/0x60 [ 488.105944][T14236] ? __kasan_slab_free+0x60/0x70 [ 488.105958][T14236] ? kfree+0x2b4/0x4d0 [ 488.105968][T14236] ? tomoyo_path_number_perm+0x470/0x580 [ 488.105987][T14236] comedi_unlocked_ioctl+0x165d/0x2f00 [ 488.106005][T14236] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 488.106024][T14236] ? kasan_quarantine_put+0x10a/0x240 [ 488.106036][T14236] ? lockdep_hardirqs_on+0x7c/0x110 [ 488.106055][T14236] ? find_held_lock+0x2b/0x80 [ 488.106066][T14236] ? tomoyo_path_number_perm+0x295/0x580 [ 488.106081][T14236] ? tomoyo_path_number_perm+0x18d/0x580 [ 488.106095][T14236] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 488.106110][T14236] comedi_compat_ioctl+0x1d0/0x990 [ 488.106125][T14236] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 488.106140][T14236] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 488.106157][T14236] ? do_vfs_ioctl+0x128/0x14f0 [ 488.106175][T14236] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 488.106194][T14236] ? find_held_lock+0x2b/0x80 [ 488.106205][T14236] ? hook_file_ioctl_common+0x145/0x410 [ 488.106222][T14236] ? __fget_files+0x20e/0x3c0 [ 488.106233][T14236] ? __ia32_compat_sys_openat+0x110/0x210 [ 488.106246][T14236] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 488.106261][T14236] __ia32_compat_sys_ioctl+0x242/0x370 [ 488.106280][T14236] __do_fast_syscall_32+0x7c/0x300 [ 488.106291][T14236] do_fast_syscall_32+0x32/0x80 [ 488.106302][T14236] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 488.106316][T14236] RIP: 0023:0xf70de579 [ 488.106325][T14236] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 488.106336][T14236] RSP: 002b:00000000f54ad55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 488.106347][T14236] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000040946400 [ 488.106355][T14236] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 488.106362][T14236] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 488.106368][T14236] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 488.106375][T14236] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 488.106385][T14236] [ 488.106390][T14236] [ 488.211906][T14236] Allocated by task 14041: [ 488.213316][T14236] kasan_save_stack+0x33/0x60 [ 488.214802][T14236] kasan_save_track+0x14/0x30 [ 488.216408][T14236] __kasan_kmalloc+0xaa/0xb0 [ 488.218067][T14236] snd_seq_pool_new+0x44/0x230 [ 488.219587][T14236] seq_create_client1+0x66/0x5e0 [ 488.221161][T14236] snd_seq_open+0x59/0x550 [ 488.222577][T14236] snd_open+0x22a/0x4c0 [ 488.223893][T14236] chrdev_open+0x234/0x6a0 [ 488.225405][T14236] do_dentry_open+0x982/0x1530 [ 488.227169][T14236] vfs_open+0x82/0x3f0 [ 488.228494][T14236] path_openat+0x1de4/0x2cb0 [ 488.229876][T14236] do_filp_open+0x20b/0x470 [ 488.231206][T14236] io_openat2+0x206/0x850 [ 488.232553][T14236] __io_issue_sqe+0xe5/0x7c0 [ 488.234022][T14236] io_issue_sqe+0x86/0xe50 [ 488.235483][T14236] io_submit_sqes+0x94b/0x25c0 [ 488.237243][T14236] __do_sys_io_uring_enter+0xd6a/0x1630 [ 488.239035][T14236] __do_fast_syscall_32+0x7c/0x300 [ 488.240656][T14236] do_fast_syscall_32+0x32/0x80 [ 488.242219][T14236] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 488.244202][T14236] [ 488.245077][T14236] Freed by task 14041: [ 488.246420][T14236] kasan_save_stack+0x33/0x60 [ 488.247915][T14236] kasan_save_track+0x14/0x30 [ 488.249413][T14236] kasan_save_free_info+0x3b/0x60 [ 488.250952][T14236] __kasan_slab_free+0x60/0x70 [ 488.252662][T14236] kfree+0x2b4/0x4d0 [ 488.253906][T14236] snd_seq_pool_delete+0x51/0x70 [ 488.255393][T14236] seq_create_client1+0x2bb/0x5e0 [ 488.257184][T14236] snd_seq_open+0x59/0x550 [ 488.258609][T14236] snd_open+0x22a/0x4c0 [ 488.259932][T14236] chrdev_open+0x234/0x6a0 [ 488.261370][T14236] do_dentry_open+0x982/0x1530 [ 488.262961][T14236] vfs_open+0x82/0x3f0 [ 488.264216][T14236] path_openat+0x1de4/0x2cb0 [ 488.265739][T14236] do_filp_open+0x20b/0x470 [ 488.267178][T14236] io_openat2+0x206/0x850 [ 488.268504][T14236] __io_issue_sqe+0xe5/0x7c0 [ 488.270058][T14236] io_issue_sqe+0x86/0xe50 [ 488.271500][T14236] io_submit_sqes+0x94b/0x25c0 [ 488.273021][T14236] __do_sys_io_uring_enter+0xd6a/0x1630 [ 488.274773][T14236] __do_fast_syscall_32+0x7c/0x300 [ 488.276503][T14236] do_fast_syscall_32+0x32/0x80 [ 488.278151][T14236] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 488.280130][T14236] [ 488.280917][T14236] The buggy address belongs to the object at ffff88804b797000 [ 488.280917][T14236] which belongs to the cache kmalloc-256 of size 256 [ 488.285274][T14236] The buggy address is located 48 bytes inside of [ 488.285274][T14236] freed 256-byte region [ffff88804b797000, ffff88804b797100) [ 488.289448][T14236] [ 488.290258][T14236] The buggy address belongs to the physical page: [ 488.292299][T14236] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804b797000 pfn:0x4b796 [ 488.295600][T14236] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 488.298481][T14236] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 488.301242][T14236] page_type: f5(slab) [ 488.302583][T14236] raw: 04fff00000000240 ffff88801b842b40 ffffea00017f0b10 ffffea0001464390 [ 488.305279][T14236] raw: ffff88804b797000 000000000010000e 00000000f5000000 0000000000000000 [ 488.308088][T14236] head: 04fff00000000240 ffff88801b842b40 ffffea00017f0b10 ffffea0001464390 [ 488.311040][T14236] head: ffff88804b797000 000000000010000e 00000000f5000000 0000000000000000 [ 488.313731][T14236] head: 04fff00000000001 ffffea00012de581 00000000ffffffff 00000000ffffffff [ 488.316587][T14236] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 488.319394][T14236] page dumped because: kasan: bad access detected [ 488.321516][T14236] page_owner tracks the page as allocated [ 488.323306][T14236] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5977, tgid 5977 (syz-executor), ts 54113883661, free_ts 52934898236 [ 488.330066][T14236] post_alloc_hook+0x1c0/0x230 [ 488.331569][T14236] get_page_from_freelist+0x132b/0x38e0 [ 488.333304][T14236] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 488.335513][T14236] alloc_pages_mpol+0x1fb/0x550 [ 488.337251][T14236] new_slab+0x247/0x330 [ 488.338879][T14236] ___slab_alloc+0xcf2/0x1750 [ 488.340790][T14236] __slab_alloc.constprop.0+0x56/0xb0 [ 488.342723][T14236] __kmalloc_noprof+0x2f2/0x510 [ 488.344429][T14236] __register_sysctl_table+0xea2/0x1900 [ 488.346252][T14236] neigh_sysctl_register+0x31f/0x670 [ 488.348062][T14236] addrconf_sysctl_register+0xb9/0x1f0 [ 488.349825][T14236] addrconf_notify+0x11e/0x19e0 [ 488.351361][T14236] notifier_call_chain+0xb9/0x410 [ 488.353081][T14236] call_netdevice_notifiers_info+0xbe/0x140 [ 488.355041][T14236] netif_change_name+0x557/0x920 [ 488.356638][T14236] do_setlink.constprop.0+0x3362/0x4380 [ 488.358460][T14236] page last free pid 5989 tgid 5989 stack trace: [ 488.360649][T14236] __free_frozen_pages+0x7d5/0x10f0 [ 488.362296][T14236] qlist_free_all+0x4d/0x120 [ 488.363758][T14236] kasan_quarantine_reduce+0x195/0x1e0 [ 488.365541][T14236] __kasan_slab_alloc+0x69/0x90 [ 488.367388][T14236] __kmalloc_cache_noprof+0x1f1/0x3e0 [ 488.369113][T14236] kobject_uevent_env+0x265/0x1870 [ 488.370723][T14236] __kobject_del+0x168/0x1f0 [ 488.372180][T14236] kobject_put+0x327/0x5a0 [ 488.373602][T14236] netdev_queue_update_kobjects+0x4e5/0x720 [ 488.375641][T14236] netif_set_real_num_tx_queues+0x151/0x870 [ 488.377492][T14236] veth_init_queues+0xe1/0x190 [ 488.379009][T14236] veth_newlink+0x4ec/0xa00 [ 488.380449][T14236] rtnl_newlink+0xc45/0x2000 [ 488.382025][T14236] rtnetlink_rcv_msg+0x95e/0xe90 [ 488.383633][T14236] netlink_rcv_skb+0x155/0x420 [ 488.385380][T14236] netlink_unicast+0x5aa/0x870 [ 488.387355][T14236] [ 488.388131][T14236] Memory state around the buggy address: [ 488.389869][T14236] ffff88804b796f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 488.392145][T14236] ffff88804b796f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 488.394713][T14236] >ffff88804b797000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 488.397389][T14236] ^ [ 488.399126][T14236] ffff88804b797080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 488.401735][T14236] ffff88804b797100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 488.404215][T14236] ================================================================== [ 488.408580][T14236] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 488.410863][T14236] CPU: 0 UID: 0 PID: 14236 Comm: syz.5.2201 Not tainted syzkaller #0 PREEMPT(full) [ 488.413918][T14236] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 488.417486][T14236] Call Trace: [ 488.418554][T14236] [ 488.419493][T14236] dump_stack_lvl+0x3d/0x1f0 [ 488.420968][T14236] vpanic+0x6e8/0x7a0 [ 488.422256][T14236] ? __pfx_vpanic+0x10/0x10 [ 488.423783][T14236] ? __pfx_vprintk_emit+0x10/0x10 [ 488.425469][T14236] ? sysfs_remove_file_ns+0x63/0x70 [ 488.427076][T14236] panic+0xca/0xd0 [ 488.428420][T14236] ? __pfx_panic+0x10/0x10 [ 488.429853][T14236] ? sysfs_remove_file_ns+0x63/0x70 [ 488.431577][T14236] ? preempt_schedule_common+0x44/0xc0 [ 488.433339][T14236] ? preempt_schedule_thunk+0x16/0x30 [ 488.435243][T14236] check_panic_on_warn+0xab/0xb0 [ 488.436824][T14236] end_report+0x107/0x170 [ 488.438219][T14236] kasan_report+0xee/0x110 [ 488.439592][T14236] ? sysfs_remove_file_ns+0x63/0x70 [ 488.441250][T14236] sysfs_remove_file_ns+0x63/0x70 [ 488.442832][T14236] driver_remove_file+0x4a/0x60 [ 488.444360][T14236] bus_remove_driver+0x224/0x2c0 [ 488.445993][T14236] driver_unregister+0x76/0xb0 [ 488.447649][T14236] comedi_device_detach_locked+0x12c/0xa50 [ 488.449501][T14236] do_devconfig_ioctl+0x555/0x710 [ 488.451178][T14236] ? __mutex_lock+0x1c5/0x1060 [ 488.452724][T14236] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 488.454473][T14236] ? kasan_save_stack+0x42/0x60 [ 488.456013][T14236] ? kasan_save_stack+0x33/0x60 [ 488.457755][T14236] ? kasan_save_track+0x14/0x30 [ 488.459299][T14236] ? kasan_save_free_info+0x3b/0x60 [ 488.460943][T14236] ? __kasan_slab_free+0x60/0x70 [ 488.462654][T14236] ? kfree+0x2b4/0x4d0 [ 488.463953][T14236] ? tomoyo_path_number_perm+0x470/0x580 [ 488.465830][T14236] comedi_unlocked_ioctl+0x165d/0x2f00 [ 488.467601][T14236] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 488.469434][T14236] ? kasan_quarantine_put+0x10a/0x240 [ 488.471248][T14236] ? lockdep_hardirqs_on+0x7c/0x110 [ 488.472934][T14236] ? find_held_lock+0x2b/0x80 [ 488.474430][T14236] ? tomoyo_path_number_perm+0x295/0x580 [ 488.476182][T14236] ? tomoyo_path_number_perm+0x18d/0x580 [ 488.478075][T14236] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 488.479954][T14236] comedi_compat_ioctl+0x1d0/0x990 [ 488.481697][T14236] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 488.483473][T14236] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 488.485446][T14236] ? do_vfs_ioctl+0x128/0x14f0 [ 488.487002][T14236] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 488.488663][T14236] ? find_held_lock+0x2b/0x80 [ 488.490229][T14236] ? hook_file_ioctl_common+0x145/0x410 [ 488.491973][T14236] ? __fget_files+0x20e/0x3c0 [ 488.493468][T14236] ? __ia32_compat_sys_openat+0x110/0x210 [ 488.495510][T14236] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 488.497344][T14236] __ia32_compat_sys_ioctl+0x242/0x370 [ 488.499061][T14236] __do_fast_syscall_32+0x7c/0x300 [ 488.500687][T14236] do_fast_syscall_32+0x32/0x80 [ 488.502225][T14236] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 488.504450][T14236] RIP: 0023:0xf70de579 [ 488.505738][T14236] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 488.511720][T14236] RSP: 002b:00000000f54ad55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 488.514334][T14236] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000040946400 [ 488.517141][T14236] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 488.519634][T14236] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 488.522158][T14236] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 488.524816][T14236] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 488.527490][T14236] [ 488.529286][T14236] Kernel Offset: disabled [ 488.530685][T14236] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:20:15 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8561ed25 RDI=ffffffff9b103780 RBP=ffffffff9b103740 RSP=ffffc90007247200 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3430383838666666 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b103740 R15=ffffffff8561ecc0 RIP=ffffffff8561ed4f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880974b9000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3938c3 CR3=000000006f931000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000001508c23 RBX=0000000000000001 RCX=ffffffff8b91db29 RDX=0000000000000000 RSI=ffffffff8de4f872 RDI=ffffffff8c163780 RBP=ffffed1003a5a488 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =ffffed1005666655 R10=ffff88802b3332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801d2d2440 R14=ffffffff90abad90 R15=0000000000000000 RIP=ffffffff8b91c66f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008001a000 CR3=000000006f931000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000000 RCX=000000000000002e RDX=ffff88802485c880 RSI=ffffffff816c8649 RDI=0000000000000000 RBP=000000002a7d6000 RSP=ffffc90006667470 R8 =0000000000000001 R9 =000000000000003f R10=000000000000002e R11=0000000000000002 R12=0000000000000000 R13=ffff888026a68000 R14=0000000000000000 R15=0000000006660000 RIP=ffffffff816c8656 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880976b9000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa4041225d0 CR3=000000002a7d6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7395ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=ffff88802485c880 RCX=ffffffff8b92b7b9 RDX=1ffff11004a004f3 RSI=0000000000000008 RDI=ffff888025002798 RBP=ffffc9000048fde8 RSP=ffffc9000048fc30 R8 =0000000000000000 R9 =fffffbfff21575b2 R10=ffffffff90abad97 R11=0000000000000003 R12=ffff888025002790 R13=0000000000000004 R14=ffff88802b53a440 R15=ffff88801d2f0000 RIP=ffffffff8b92b7f4 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c346bf8 CR3=000000002a7d6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000