last executing test programs: 2m22.506317033s ago: executing program 3 (id=884): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x1}, &(0x7f0000000300)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x7, 0x100, 0xfffffff4, 0xfffffff8, 0x8000, 0xc, 0xffffffff, r1}, &(0x7f0000000200)=0x20) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240)={r2, 0x6}, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYRES64=r4, @ANYRES64=r0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000900010000000800030003000000080007000500000008000100100000000600020001000000100005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r3], 0x84}}, 0x20008040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) 2m22.365592712s ago: executing program 3 (id=885): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) 2m22.21814874s ago: executing program 3 (id=886): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x200000c4) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = io_uring_setup(0x3eae, 0x0) sendmmsg$unix(r3, &(0x7f0000001000)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000100)=[{0x0}], 0x1, &(0x7f0000000640)=[@cred={{0x18, 0x1, 0x2, {r2}}}], 0x18, 0x42}}, {{0x0, 0x0, &(0x7f0000000f40), 0x0, 0x0, 0x0, 0x854}}], 0x2, 0x24040014) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='vxfs\x00', 0x1000080, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000280)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x800, 0x0, 0x7}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) fchdir(0xffffffffffffffff) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x48) write$cgroup_int(r6, &(0x7f0000000000)=0xfe8e, 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000001e00)={0x1000000, 0x8, 0x4, 0x0, 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) 2m21.265290447s ago: executing program 3 (id=887): openat$dir(0xffffffffffffff9c, 0x0, 0x4000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000014c0)={0x44, &(0x7f00000012c0)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000300), 0xce4, r2}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r2, 0x0, 0x1f00000000000000}, 0x38) 2m19.487197213s ago: executing program 3 (id=903): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, 0x0) chdir(&(0x7f0000000280)='./file1\x00') 2m19.428291613s ago: executing program 3 (id=904): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x2, 0x0, 0x700}, 0x10}, 0x1, 0x7}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$btrfs_control(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000200)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x60) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) write$uinput_user_dev(r5, &(0x7f0000000240)={'syz0\x00', {0xf, 0x7, 0x7, 0x1}, 0x4a, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x2, 0x0, 0x7d, 0x13, 0x5, 0x0, 0x6, 0x0, 0x0, 0x4000000, 0x0, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x7, 0x681c1eb6, 0x11e, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x9, 0x4, 0x0, 0x3, 0x0, 0x0, 0x5de82a4e, 0x0, 0x0, 0x0, 0xa, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff6, 0x0, 0xf681, 0x0, 0x1ab9, 0x0, 0x0, 0x0, 0xfffffffb, 0x1c15d73a], [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x200, 0x2, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0xff, 0x0, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xbc, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x441238ca, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0x0, 0x3, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0x0, 0x40, 0x0, 0xc7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0x0, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x6, 0x63, 0x0, 0x0, 0x0, 0xe, 0x921, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6574, 0x0, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0x0, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x400, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0xddda, 0x3, 0x0, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x4, 0x0, 0x40, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x45d, 0x4, 0x0, 0xfff, 0xb2, 0x9, 0xb]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r8 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r8, &(0x7f0000000240)='x', 0xfc1c, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 2m4.257536183s ago: executing program 32 (id=904): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x2, 0x0, 0x700}, 0x10}, 0x1, 0x7}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$btrfs_control(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000200)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x60) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) write$uinput_user_dev(r5, &(0x7f0000000240)={'syz0\x00', {0xf, 0x7, 0x7, 0x1}, 0x4a, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x2, 0x0, 0x7d, 0x13, 0x5, 0x0, 0x6, 0x0, 0x0, 0x4000000, 0x0, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x7, 0x681c1eb6, 0x11e, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x9, 0x4, 0x0, 0x3, 0x0, 0x0, 0x5de82a4e, 0x0, 0x0, 0x0, 0xa, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff6, 0x0, 0xf681, 0x0, 0x1ab9, 0x0, 0x0, 0x0, 0xfffffffb, 0x1c15d73a], [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x200, 0x2, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0xff, 0x0, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xbc, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x441238ca, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0x0, 0x3, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0x0, 0x40, 0x0, 0xc7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0x0, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x6, 0x63, 0x0, 0x0, 0x0, 0xe, 0x921, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6574, 0x0, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0x0, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x400, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0xddda, 0x3, 0x0, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x4, 0x0, 0x40, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x45d, 0x4, 0x0, 0xfff, 0xb2, 0x9, 0xb]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r8 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r8, &(0x7f0000000240)='x', 0xfc1c, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1.904450964s ago: executing program 4 (id=1669): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x2) (fail_nth: 4) 1.836809101s ago: executing program 4 (id=1671): open(&(0x7f0000000600)='./file0\x00', 0x8060, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b}}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x5, 0xe, 0x0, &(0x7f0000000440)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000000)='./file0\x00', 0x180) socket$key(0xf, 0x3, 0x2) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55", 0x1b}], 0x1}, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) socket$inet(0x2, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$inet6_udplite(0xa, 0x2, 0x88) 1.804620181s ago: executing program 4 (id=1673): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a32000000002800038024000080090026400000000018000b80140001800a0001006c696d697400000004fe02800900010073797a30"], 0xd8}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r5], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r9}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.559913881s ago: executing program 4 (id=1678): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x4, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000180)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0xffffb4fe, 0x5, 0x7, 0x34343459, [0xfffffffb, 0x3], [0x8000002, 0x2f], 0x1}}) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000b00)=[{&(0x7f00000003c0)="2390ee738c0300000045f85ab5d14cd407485eb3eefb3f962eed241406dc7ed0a677583f6a", 0x25}, {0x0}, {&(0x7f0000000740)="f573ad3ed02649fa84969f905419ca940720ded20cb46d188b6b3b573deec309c4e83eedeb8922cbd70888a78288c9c25e6fd24b056a89fc549638e4f194d0a5f360c13aedc2acebe36920edb442afaaf94075eba440d989b021bb726b9fa87c706feb990ebc423a31f8f53181b57916e59933689e32c961c8136fb644f2702bc18a84cade1ce2ec7a1c877e5435d7a5977721ff20382f690a57674fe21c62f59bdf68cd45a9209be42f17294132e0ccf3faff689d134808834810affd4109f51d017b7c7b56683602f9e4b10e", 0xcd}, {&(0x7f0000001500)="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", 0x10b6}, {&(0x7f0000000080)="a3e72c990b86c45a84e7cbbbc3ea26aeecb598f3055b74f401b42529e74fd0e0bffb0c4664", 0x25}, {&(0x7f0000000840)="a71cbfb1e7bf0800000000000000365544e37dd93e0223f1b25c2af9d424581628bc6cde88b0edb17ad381d7899c05ac8cd33cc0e23a49d360c93576f81e922d285872499c52a7e79f832f88719c55d1ff8bb8b27600d8be869fbad3f8793d29688dd378652db8416af7a13f2ea5db99e5aa84cc63d2495a5c7ab685a91dd65fd7f4a714e545a446a8345d911fdfc37ddb6999e8a299d186b8c6aad4995eae71234944b9083ef48ec46f2cf1274a3e92303275d795c8d8d19eb9c760db0e887743f6adb9ffd4c167aae9d31b88fd19663eaf2f21379de99349c991368ba2bdd77a03cd5b5183716c43a717946672cbec53166571b9d96f5d4dba046797d79754646b4ec5e3bee9344c98dc8c812842ab8d2a7df8", 0x114}, {&(0x7f0000000500)="1576a76c41ef11aecc336b46c9e1b3a379bc3bd1d63f72f98257d25004a70ca7d4a01f76ee8ee1f74add9fd2ee077b9a0a7d62d05b64a1133008adce5b3e5519ddf231ef65d5f68591138aa9e49fcf91f71ca639ae099038ee2e9a90e0c0e7c8b7b2e9c2dc3d846573e3", 0x6a}, {&(0x7f0000000980)="923cdb9a7e2c8f15af1ddd2bce8b14c771b7554b845fab777cdf8ccc59e3745eb08b1ffe9ad622f05ea172d08f2d9dd4ac737592ddbd99922ad0f8af71e7dde1536d599e8df131509f64225a7f2a3cb89c4621e986bfdf1f78a7dfb14a440db2e20af3d974e77f6a986cf2", 0x6b}, {&(0x7f0000000a00)="c809f6eb86a22786875985b8da26e8e0158afe0fc4fc979aa25703135ae37028cbe921f327c9d0707653f9bf4879c26d8c6dfe9757014363cc8148cc907f72aac486344c342cd1a33ea9fd3943dc27c628b80127ecbf0257c880d1bf3002aba109d1dce45fb2940431883018e7c5c8722ef101bd86466fa070f188c6a8e1bc0c5ece3cb5f84d64fa2fe99cba0a0b6f06232de56c739bf373ccfc2511e42fa859a396fdbf64330dc8c9e1bc96bd615b56fcb11d43b6e00436d5ac4f3b662b862cdced9bd9f3acd2123c", 0xc9}], 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) openat$vicodec1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004300)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x0, 0x81}}, 0x50) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) read$midi(r3, &(0x7f0000000100)=""/116, 0x74) close_range(r1, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="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"], 0x1c}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)={0x5c, r6, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x5c}}, 0x24000080) 1.548378612s ago: executing program 1 (id=1679): add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x11) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x7}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1ff}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x8, 0x4, 0x2, 0x0, 0x1}, 0x50) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x190, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d76697274696f2c64656275673d30783056219df837f16f30303030303030303030"]) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) r3 = syz_open_procfs(r2, &(0x7f0000000040)='smaps\x00') read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f00000010c0)={0x0, @nl=@proc={0x10, 0x0, 0x25dfdbff, 0x2}, @qipcrtr={0x2a, 0x4, 0x2}, @tipc=@id={0x1e, 0x3, 0x2, {0x4e22, 0xff}}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)='nr0\x00', 0x4, 0x3, 0x7}) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xcb, &(0x7f0000000240)={0x0, 0x0, 0x9, r1, 0x76c}, 0xc) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0xc, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) r5 = socket(0x2, 0x3, 0x0) setsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000000380)=0x6b73, 0x4) write(r5, &(0x7f0000000080)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000040)={'\x00', 0x9, 0x6, 0xfdb, 0x7ff, 0xffff, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000140)='net/tcp\x00') getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x3}, &(0x7f00000001c0)=0x8) pread64(r7, &(0x7f0000001b80)=""/4084, 0xff4, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 1.375912955s ago: executing program 1 (id=1680): r0 = socket(0xa, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffebe}, 0x90) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x40, 0x0, 0x0) r5 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x141, 0x0) mq_notify(r6, &(0x7f0000000200)={0x0, 0x8, 0x1}) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') lseek(r7, 0x1, 0x2) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x208000, 0x0) getdents64(r7, &(0x7f0000002640)=""/4096, 0x1000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000540)={0x7, 0x8, 0xfa00, {r8, 0x7e}}, 0x10) mq_timedsend(r5, 0x0, 0x0, 0x9, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x26, 0xc4, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0x6}, 0x1c) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x3, 0xfffffffe}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x11, &(0x7f0000000300)=ANY=[@ANYBLOB="1800ffffff7f0000000000000000005018280000", @ANYRES32=r7, @ANYBLOB="00000000ff7f00001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000500000085000000060000001841000002000000000000000000000018480000faffffff00000000000000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x9, 0x8f, &(0x7f0000000400)=""/143, 0x40f00, 0x2, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000004c0)=[r7, r7, r7, r7, r7, r7, r7, r7], &(0x7f0000000500)=[{0x2, 0x1, 0x2, 0x5}, {0x4, 0x5, 0x2, 0x8}, {0x5, 0x3, 0x3, 0x8}, {0x2, 0x2, 0x4, 0x5}], 0x10, 0x2}, 0x94) getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f00000005c0)) 1.373869122s ago: executing program 0 (id=1681): open(&(0x7f0000000600)='./file0\x00', 0x8060, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b}}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x5, 0xe, 0x0, &(0x7f0000000440)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000000)='./file0\x00', 0x180) socket$key(0xf, 0x3, 0x2) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55", 0x1b}], 0x1}, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) socket$inet(0x2, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$inet6_udplite(0xa, 0x2, 0x88) 1.373005129s ago: executing program 0 (id=1682): creat(&(0x7f0000000040)='./bus\x00', 0x140) mount(&(0x7f0000000100)=@sr0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='xfs\x00', 0x4088cb, 0x0) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x19, &(0x7f0000000300)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x47845287495d7c0a}}, @call={0x85, 0x0, 0x0, 0x7d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x2) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r4, 0x1) flock(r3, 0x1) close(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x7, 0x6}, 0x50) fcntl$setflags(r5, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) sendfile(r7, 0xffffffffffffffff, &(0x7f0000000200)=0x80000000, 0xfffffff9) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0xbc, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tipc_packet={0x9, 0x6, "e53ea6", 0x86, 0x6, 0x0, @private1, @empty, {[@fragment={0x87, 0x0, 0x66, 0x0, 0x0, 0x1a, 0x67}, @routing={0x2f, 0xa, 0x2, 0x73, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @private0, @empty]}], @payload_direct={{{{0x26, 0x0, 0x1, 0x1, 0x1, 0x8, 0x2, 0x2, 0x0, 0x0, 0x3, 0xf, 0x2, 0x3, 0xfff7, 0x67, 0x2, 0x4e22, 0x4e24}, 0x0, 0x4}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 1.372778545s ago: executing program 1 (id=1683): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x100f8, 0x0, 0x601}) fstat(r0, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xe, 0x103, 0x0, {0x5a, 0x0, 0x7, 0xa1}}) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) 1.30675872s ago: executing program 1 (id=1684): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) bind$tipc(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x12f000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setrlimit(0x6, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="c24c000010001fff752b056800080000faff8141cb3acfcca4d990ba895f312a6870a1b2d9d68b242a5c30df23047b7ecb746cbab02c2e5734ca42c1d57e7c", @ANYRES16=r2, @ANYRES8=r1, @ANYRES8=r1, @ANYRES8=r3, @ANYRESDEC=r1, @ANYRES8=0x0], 0x3}}, 0x880) r7 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x4ffe6, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000040)={@multicast2, @empty, 0x1, "3dab2026179e3f9e94f795c462aef6c3ea5725a79a084ad573851312355a1302", 0xff, 0x3, 0x6, 0x2}, 0x3c) setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000080)={@dev={0xac, 0x14, 0x14, 0x16}, @loopback, 0x1, "a25cfc95e75c9c55d5257a3fc5cf22adcb205d64f04fc945c92d4a85f1c0f358", 0xfffffffe, 0xffffffff, 0x5, 0x1003}, 0x3c) socket(0x1d, 0x5, 0x6) r8 = fsopen(&(0x7f00000000c0)='ocfs2_dlmfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x1) fsconfig$FSCONFIG_SET_FLAG(r8, 0x0, &(0x7f0000000180)='rw\x00', 0x0, 0x0) 1.162085791s ago: executing program 0 (id=1687): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a32000000002800038024000080090026400000000018000b80140001800a0001006c696d697400000004fe02800900010073797a30"], 0xd8}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r5], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r9], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.080593683s ago: executing program 2 (id=1688): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f00000000c0)=0x6) r1 = openat$uhid(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) write$UHID_INPUT(r1, &(0x7f0000000100)={0x8, {"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", 0x1000}}, 0x1006) openat$vicodec1(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) 1.080274199s ago: executing program 2 (id=1689): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x7fff}, 0x2}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={r4, @in6={{0xa, 0x0, 0x0, @private2}}, 0x4, 0x0, 0x1000000, 0x0, 0x0, 0xfffffffc, 0xf7}, &(0x7f0000000040)=0x9c) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000003010101000000000000000000000000d7ae30b110a1"], 0x14}}, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x1001) 1.066884573s ago: executing program 0 (id=1690): open(&(0x7f0000000600)='./file0\x00', 0x8060, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b}}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x5, 0xe, 0x0, &(0x7f0000000440)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000000)='./file0\x00', 0x180) socket$key(0xf, 0x3, 0x2) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55", 0x1b}], 0x1}, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) socket$inet(0x2, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$inet6_udplite(0xa, 0x2, 0x88) 995.581028ms ago: executing program 0 (id=1691): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x7b3d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x3, 0xfff, 0x0, 0xb49, 0xc, 0x8, 0xb, 0x3}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f000003e000/0x3000)=nil, 0x3000, 0x14) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000200)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x5, 0x7a880bb668777da9}, 0x9c) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, 0x0) r5 = epoll_create1(0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/stat\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, 0x0, 0x0) r7 = creat(0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_qrtr_SIOCGIFADDR(r7, 0x8915, &(0x7f0000000040)={'nr0\x00'}) 936.635524ms ago: executing program 2 (id=1692): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @sliced={0x1000, [0xcaa, 0x9a3, 0x3, 0x70, 0x5, 0x8001, 0xa, 0x4, 0x10, 0x2, 0x7, 0x1, 0x3, 0x8, 0x4, 0x2, 0x8, 0x3ff, 0x0, 0xf, 0x9, 0xfff, 0x6, 0x7, 0x9, 0x67, 0x9, 0x4, 0x8, 0x2, 0x200, 0x400, 0x101, 0x0, 0x9, 0x8c9, 0x2, 0x1, 0x4, 0x4, 0x8, 0x6, 0x0, 0x4, 0x6, 0x0, 0xfe00, 0x7], 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x8800, &(0x7f0000000300), &(0x7f0000000500), &(0x7f0000000540), {0x4}, &(0x7f0000000580)=""/134, 0x86, &(0x7f0000000640)=""/44, &(0x7f0000000680)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x9}, 0x58) (async) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) (async) sendfile(r2, r1, 0x0, 0x578410eb) r4 = socket$kcm(0x10, 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000006180)=""/152, 0x98}], 0x1, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = socket$kcm(0x29, 0x5, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3e, 0x0) (async) timer_create(0x0, 0x0, &(0x7f0000000100)) (async) fsetxattr$trusted_overlay_opaque(r4, &(0x7f00000000c0), &(0x7f0000000280), 0x2, 0x3) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) (async) r7 = syz_open_dev$hiddev(&(0x7f0000000040), 0x7, 0x20000) ioctl$HIDIOCGCOLLECTIONINDEX(r7, 0x40184810, &(0x7f0000000140)={0x2, 0x100, 0x1, 0x1, 0x3}) 716.77687ms ago: executing program 2 (id=1693): ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0xc) (async) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000400)={0x0, 0x6e82}, &(0x7f0000000440)=0x8) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f00000001c0)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)={0x1c, 0x5e, 0x1, 0x0, 0x25dfdbfd, "", [@generic="93a92f5bb42d3d6e31"]}, 0x1c}], 0x1}, 0x0) (async) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0xff}, &(0x7f0000000180)=0x8) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140000338d6479baa5874a76998b800972ee184b10bc880e4f1ee89d9702d208603067eaa318651c1e6a8bf6382f5b9fb1b0b6a8760c91173443b5b6613e0981b51e454f88c4b326141f098e1d0c1fc4688b669aceaa6cf9d7aafb9d06edaf13822cdff636873fd472ad812e6da07c5a0f8dec3a939f333ef2c18135daa51b8f6646670be7cd0edf954060ebbc8570b7fecb4dde3062afce497183aa17ca22f7189f55b978929580eaca8966020e788c1c5106031cbfc9711d4bac04a49ce678f69ad06fdf98b7"], 0x14}], 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a05000000000000000000050000020900010073797a300000000020000000000a01040000000000000000050000060900010073797a300000000014000000180a01010000000000000000000000033c000000020a01080000000000000000010000080400060aa2d95529b5d4ad00000000030900010073797a00010073797a3100000000140000000b0a0101000000000000000000000004140000001100010000000000000000000000000a"], 0xcc}}, 0xc0) shmat(0xffffffffffffffff, &(0x7f0000785000/0x10000)=nil, 0x4000) (async) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000300)={&(0x7f00007fb000/0x1000)=nil, 0x1000}) (async) setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x48) (async) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 716.478317ms ago: executing program 2 (id=1694): prctl$PR_SCHED_CORE(0x3e, 0xfffff800, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)='#', 0x1) r2 = dup(r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) syz_io_uring_setup(0x40237, &(0x7f0000000440)={0x0, 0xfbc6, 0x400, 0x1, 0x190, 0x0, r2}, &(0x7f0000000080), &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0xffffffff, 0x8002) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xfd58) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r5}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) setpriority(0x0, r4, 0xacf0165) r6 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff6000/0x2000)=nil) shmat(r6, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r7 = openat$binderfs_ctrl(0xffffff9c, 0x0, 0x802, 0x0) fchmod(r7, 0x150) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f00000000c0)={0x6c, ""/108}) memfd_create(&(0x7f0000000700)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x11\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\x1f\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\xf4b-$\xb2\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xec\xcf\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x15\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x8d\xf2:\a\xad\xf5\xfa\x91\xed\xa57\x85\xd1\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf2\"#\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98\xe7\v\x9dv\xa8\xe0\x1e\xe3q\x0e\xb1\xc3\x00g\x7f\v\x9a*gP\xbd\t\xbe\xb6W\x91\xbe\x00\x9b\xa5g\x9a5\b\x01\xf3^`\xc76\x9fO\xf0O\x1e\xeb\xdf\x93\xe1\xdd\x06 \xc5\xe8\xf6q\x84\xe8\xa9\x95\xfc\xe2R\xa4\xc7\x04\xb7\xa5\x98Z\xdeq\xc2hK\x81A29\x9aS\x17D\xe8j\x97\xe5', 0x0) unshare(0x28000600) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r2, 0x40096100, &(0x7f00000001c0)={{&(0x7f0000000680)={'GENERAL\x00', {&(0x7f00000005c0)=@adf_str={@normal='NumberCyInstances\x00', {"739c5d33bddb825bd72548a011364e03783cb134adf8a13867f906dbde48b26313a753bed853eb7330b06800b4a509dd66ee8e176a1251c5d2c5482342fda032"}, {&(0x7f0000000500)=@adf_str={@format={'Dc', '5', 'BankNumber\x00'}, {"78692a73b352d5f07406356b79567b38858581e57a60e9d5f7e3abad73fe15d00efcb34764fb4fd877949a88ae1d4bf0e7758b050777cd36c8d555a206a5f2c3"}}}}}}}, 0x8}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="5400000010000104000000000020000000000000", @ANYRES32=0x0, @ANYBLOB="7b13000000000000340012808000000000000000766500002400028000000900010000000400060005000d04000600"], 0x54}}, 0x40800) 666.912332ms ago: executing program 4 (id=1695): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b937600000000000000000000000000000000000000000002000000000000000100"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xc4}}, 0x8044) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 666.580862ms ago: executing program 2 (id=1696): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffe1e, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x1a, 0x3, 0x7) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000240)="dfd9", 0x2, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) r3 = socket(0x2, 0x80805, 0x0) io_setup(0x80, &(0x7f0000000440)) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x40800400, 0x2b6a41) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x3, 0x14a, 0x300}}) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefc9, 0x7f9, 0xb2, "20ab9809006ea4a7446c180000cd681ec267a0", 0x7, 0x200008}) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000000)) syz_io_uring_setup(0x64ee, &(0x7f0000000100)={0x0, 0xdf0d, 0x8000, 0x2, 0x21a}, &(0x7f0000000400), &(0x7f00000003c0)) 665.634125ms ago: executing program 4 (id=1697): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r2, 0x0, 0x0, 0x0, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0, @ANYBLOB="010000000000000000000000005f000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x50) pipe2(&(0x7f0000000480), 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fsopen(&(0x7f0000000340)='hpfs\x00', 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r3, &(0x7f0000000200)=""/202, 0xca) tkill(0x0, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f0000000000)={0x1, 0x40000002, 0x0, 'queue0\x00', 0x3}) 446.945524ms ago: executing program 1 (id=1698): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0b04000000000000000002000000480004802800018007000100637400001c0002800500030001000000080004400000000c08000240a6230000000000000a00010072656469720000000c00028008000140000000170900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x9c}, 0x1, 0x0, 0x0, 0x20008004}, 0x1000) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x1, 0x400) r6 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r7 = dup(r6) write$6lowpan_enable(r7, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000004c0)={r7, 0x6, {0x0, 0x0, 0x0, 0x3ffc00, 0xfffffffffffffff9, 0x0, 0x4, 0x1, 0x10, "dc7744f99faa0943504052e3c809f30671f2336a425068205ec67a4d0c38123356ec1a0bd219b0dd57b00993ee013621d97943c2d43a4c7c527db0913760b084", "1f994745d0bbd690f9837b779bc132893d9097489ce1ea318e74f1a01033d4da02638d8708efe5ebd7a69501bc3d7f2b17f7920e018ca49845cf59823045f007", "40ad951bba1000636d2311c1f9ff5b42895933edc6dfbf7442196bda2d4022a1", [0x7, 0x400]}}) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='status\x00') readv(r8, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/140, 0x8c}], 0x100000000000002a) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02dd1b0004000000080000000100080080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000ffe20700000100000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r10, @ANYRES8=r5, @ANYRES32=r9, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r8, 0x6, 0x15, &(0x7f0000000280)=0xde9, 0x4) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r3, 0x8949, &(0x7f0000000000)) 86.617138ms ago: executing program 0 (id=1699): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r1 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x6}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r2}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioprio_get$pid(0x1, 0x0) fcntl$setlease(r5, 0x400, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) epoll_create1(0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x20000, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'c6xdigio\x00', [0x4f2b, 0x5, 0x3, 0x4, 0x5, 0xcc7, 0xf, 0xb, 0xa14, 0x100, 0x2, 0x1, 0xfffffffd, 0x40, 0x6, 0x101, 0x0, 0x1a449, 0x2, 0x40000003, 0x99, 0xcaa7, 0x0, 0x20001e58, 0xa, 0xe69, 0x3f, 0x8, 0x2, 0x0, 0xfffffff8]}) sendto$inet6(r5, &(0x7f0000000280)="32780f6439", 0x5, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) shutdown(r0, 0x1) r7 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x101102) ioctl$VIDIOC_G_STD(r7, 0x80085617, 0x0) 0s ago: executing program 1 (id=1700): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000040000000000000000000500000a20"], 0x540}, 0x1, 0x0, 0x0, 0x10}, 0x40000) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000000)=0x3500, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f2f, 0x241, 0x38f, &(0x7f00000007c0)="9f44948721919580684010a40800", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000200)='1', 0x1) r5 = syz_io_uring_setup(0x38ff, &(0x7f0000000480)={0x0, 0x200003, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020782500000000f01f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='workqueue_queue_work\x00', r8}, 0x18) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0x3) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) io_uring_enter(r5, 0x2def, 0x4000, 0x0, 0x0, 0x0) r10 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) socket$packet(0x11, 0x2, 0x300) preadv(r10, &(0x7f0000000040)=[{&(0x7f0000000300)=""/213, 0xd5}], 0x1, 0xfffffffe, 0x10a2) openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x714, 0x4) syz_emit_ethernet(0x52, &(0x7f0000000180)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x1c, 0xe, 0x1, 0x0, [{@local}, {@multicast2}, {@dev}]}]}}, @timestamp}}}}, 0x0) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/92, 0x5c}], 0x1) kernel console output (not intermixed with test programs): ving as an active interface with an up link [ 241.867377][T10032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.013227][T10032] team0: Port device team_slave_0 added [ 242.018487][T10032] team0: Port device team_slave_1 added [ 242.052665][T10032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.054861][T10032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.063017][T10032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.068173][T10032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.070777][T10032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.082448][T10032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.145477][T10032] hsr_slave_0: entered promiscuous mode [ 242.147711][T10032] hsr_slave_1: entered promiscuous mode [ 242.150033][T10032] debugfs: 'hsr0' already exists in 'hsr' [ 242.151837][T10032] Cannot create hsr debugfs directory [ 242.477753][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.484285][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.488227][ T1146] bond0 (unregistering): Released all slaves [ 242.578501][ T1146] : left promiscuous mode [ 242.632788][T10032] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 242.640951][T10032] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 242.655034][T10032] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 242.663650][ T1146] tipc: Left network mode [ 242.663813][T10032] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 242.774110][T10032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.786917][T10032] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.796325][ T97] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.798949][ T97] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.805337][ T97] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.807589][ T97] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.842721][T10032] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.913738][T10077] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 243.126518][T10032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.280175][ T1146] hsr_slave_0: left promiscuous mode [ 243.282414][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.285152][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.308417][ T1146] pim6reg (unregistering): left allmulticast mode [ 243.530403][ T5983] Bluetooth: hci1: command tx timeout [ 243.848457][ T1146] team0 (unregistering): Port device team_slave_1 removed [ 243.921000][ T1146] team0 (unregistering): Port device team_slave_0 removed [ 244.422066][T10108] lo speed is unknown, defaulting to 1000 [ 244.450678][T10032] veth0_vlan: entered promiscuous mode [ 244.457448][T10032] veth1_vlan: entered promiscuous mode [ 244.477009][T10032] veth0_macvtap: entered promiscuous mode [ 244.482479][T10032] veth1_macvtap: entered promiscuous mode [ 244.511731][T10032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.528896][T10032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.574074][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.619473][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.622556][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.633538][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.814146][ T97] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.849078][ T97] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.887645][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.892005][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.598761][ T5983] Bluetooth: hci1: command tx timeout [ 246.618684][ T6023] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 246.778680][ T6023] usb 5-1: Using ep0 maxpacket: 8 [ 246.781652][ T6023] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 246.784865][ T6023] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 246.787963][ T6023] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 246.791065][ T6023] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.795147][ T6023] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 246.799086][ T6023] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.008119][ T6023] usb 5-1: GET_CAPABILITIES returned 0 [ 247.010174][ T6023] usbtmc 5-1:16.0: can't read capabilities [ 247.030858][T10170] FAULT_INJECTION: forcing a failure. [ 247.030858][T10170] name failslab, interval 1, probability 0, space 0, times 0 [ 247.035959][T10170] CPU: 3 UID: 0 PID: 10170 Comm: syz.2.989 Not tainted syzkaller #0 PREEMPT(full) [ 247.035974][T10170] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 247.035980][T10170] Call Trace: [ 247.035985][T10170] [ 247.035990][T10170] dump_stack_lvl+0x16c/0x1f0 [ 247.036009][T10170] should_fail_ex+0x512/0x640 [ 247.036023][T10170] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 247.036037][T10170] should_failslab+0xc2/0x120 [ 247.036051][T10170] __kmalloc_cache_node_noprof+0x6d/0x420 [ 247.036063][T10170] ? __lock_acquire+0x62e/0x1ce0 [ 247.036075][T10170] ? __get_vm_area_node+0x101/0x330 [ 247.036093][T10170] __get_vm_area_node+0x101/0x330 [ 247.036108][T10170] ? __lock_acquire+0x62e/0x1ce0 [ 247.036122][T10170] __vmalloc_node_range_noprof+0x271/0x14b0 [ 247.036132][T10170] ? vhost_task_create+0x1d2/0x2e0 [ 247.036147][T10170] ? local_lock_release+0x99/0x140 [ 247.036164][T10170] ? vhost_task_create+0x1d2/0x2e0 [ 247.036179][T10170] ? rcu_read_unlock+0x17/0x60 [ 247.036194][T10170] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 247.036203][T10170] ? __memcg_slab_post_alloc_hook+0x4a0/0x960 [ 247.036222][T10170] ? vhost_task_create+0x1d2/0x2e0 [ 247.036235][T10170] __vmalloc_node_noprof+0xad/0xf0 [ 247.036245][T10170] ? vhost_task_create+0x1d2/0x2e0 [ 247.036260][T10170] copy_process+0x2c70/0x7690 [ 247.036280][T10170] ? __pfx_copy_process+0x10/0x10 [ 247.036295][T10170] ? lockdep_init_map_type+0x5c/0x280 [ 247.036310][T10170] ? lockdep_init_map_type+0x5c/0x280 [ 247.036323][T10170] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 247.036338][T10170] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 247.036354][T10170] vhost_task_create+0x1d2/0x2e0 [ 247.036368][T10170] ? __pfx_vhost_task_create+0x10/0x10 [ 247.036387][T10170] ? __pfx_vhost_task_fn+0x10/0x10 [ 247.036408][T10170] kvm_mmu_post_init_vm+0x1b7/0x380 [ 247.036421][T10170] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 247.036435][T10170] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 247.036451][T10170] kvm_vcpu_ioctl+0x5eb/0x1690 [ 247.036466][T10170] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 247.036479][T10170] ? tomoyo_path_number_perm+0x18d/0x580 [ 247.036493][T10170] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 247.036511][T10170] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 247.036527][T10170] ? do_vfs_ioctl+0x128/0x14f0 [ 247.036543][T10170] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 247.036565][T10170] kvm_vcpu_compat_ioctl+0x20f/0x3d0 [ 247.036579][T10170] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 247.036592][T10170] ? __fget_files+0x20e/0x3c0 [ 247.036606][T10170] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 247.036624][T10170] __ia32_compat_sys_ioctl+0x23f/0x370 [ 247.036645][T10170] __do_fast_syscall_32+0x7c/0x3a0 [ 247.036661][T10170] do_fast_syscall_32+0x32/0x80 [ 247.036675][T10170] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 247.036688][T10170] RIP: 0023:0xf707e579 [ 247.036696][T10170] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 247.036706][T10170] RSP: 002b:00000000f546e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 247.036716][T10170] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000000ae80 [ 247.036722][T10170] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 247.036728][T10170] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 247.036734][T10170] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 247.036739][T10170] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 247.036753][T10170] [ 247.036858][T10170] syz.2.989: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 247.153607][T10170] CPU: 2 UID: 0 PID: 10170 Comm: syz.2.989 Not tainted syzkaller #0 PREEMPT(full) [ 247.153628][T10170] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 247.153635][T10170] Call Trace: [ 247.153639][T10170] [ 247.153643][T10170] dump_stack_lvl+0x16c/0x1f0 [ 247.153661][T10170] warn_alloc+0x248/0x3a0 [ 247.153674][T10170] ? __pfx_warn_alloc+0x10/0x10 [ 247.153686][T10170] ? rcu_is_watching+0x12/0xc0 [ 247.153698][T10170] ? trace_kmalloc+0x2b/0xd0 [ 247.153711][T10170] ? __kmalloc_cache_node_noprof+0x272/0x420 [ 247.153724][T10170] ? __kasan_kmalloc+0x8a/0xb0 [ 247.153750][T10170] ? __get_vm_area_node+0x208/0x330 [ 247.153770][T10170] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 247.153780][T10170] ? local_lock_release+0x99/0x140 [ 247.153798][T10170] ? vhost_task_create+0x1d2/0x2e0 [ 247.153813][T10170] ? rcu_read_unlock+0x17/0x60 [ 247.153828][T10170] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 247.153838][T10170] ? __memcg_slab_post_alloc_hook+0x4a0/0x960 [ 247.153857][T10170] ? vhost_task_create+0x1d2/0x2e0 [ 247.153870][T10170] __vmalloc_node_noprof+0xad/0xf0 [ 247.153880][T10170] ? vhost_task_create+0x1d2/0x2e0 [ 247.153895][T10170] copy_process+0x2c70/0x7690 [ 247.153915][T10170] ? __pfx_copy_process+0x10/0x10 [ 247.153930][T10170] ? lockdep_init_map_type+0x5c/0x280 [ 247.153951][T10170] ? lockdep_init_map_type+0x5c/0x280 [ 247.153971][T10170] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 247.153993][T10170] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 247.154018][T10170] vhost_task_create+0x1d2/0x2e0 [ 247.154041][T10170] ? __pfx_vhost_task_create+0x10/0x10 [ 247.154071][T10170] ? __pfx_vhost_task_fn+0x10/0x10 [ 247.154093][T10170] kvm_mmu_post_init_vm+0x1b7/0x380 [ 247.154106][T10170] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 247.154121][T10170] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 247.154138][T10170] kvm_vcpu_ioctl+0x5eb/0x1690 [ 247.154152][T10170] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 247.154166][T10170] ? tomoyo_path_number_perm+0x18d/0x580 [ 247.154180][T10170] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 247.154198][T10170] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 247.154214][T10170] ? do_vfs_ioctl+0x128/0x14f0 [ 247.154230][T10170] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 247.154252][T10170] kvm_vcpu_compat_ioctl+0x20f/0x3d0 [ 247.154266][T10170] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 247.154280][T10170] ? __fget_files+0x20e/0x3c0 [ 247.154293][T10170] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 247.154307][T10170] __ia32_compat_sys_ioctl+0x23f/0x370 [ 247.154325][T10170] __do_fast_syscall_32+0x7c/0x3a0 [ 247.154341][T10170] do_fast_syscall_32+0x32/0x80 [ 247.154355][T10170] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 247.154368][T10170] RIP: 0023:0xf707e579 [ 247.154377][T10170] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 247.154387][T10170] RSP: 002b:00000000f546e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 247.154397][T10170] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000000ae80 [ 247.154403][T10170] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 247.154409][T10170] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 247.154415][T10170] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 247.154421][T10170] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 247.154434][T10170] [ 247.155132][T10170] Mem-Info: [ 247.272352][T10170] active_anon:16387 inactive_anon:20 isolated_anon:0 [ 247.272352][T10170] active_file:2421 inactive_file:39656 isolated_file:0 [ 247.272352][T10170] unevictable:1768 dirty:319 writeback:17 [ 247.272352][T10170] slab_reclaimable:5616 slab_unreclaimable:56724 [ 247.272352][T10170] mapped:31068 shmem:12249 pagetables:1142 [ 247.272352][T10170] sec_pagetables:308 bounce:0 [ 247.272352][T10170] kernel_misc_reclaimable:0 [ 247.272352][T10170] free:36664 free_pcp:18382 free_cma:0 [ 247.286727][T10170] Node 0 active_anon:5976kB inactive_anon:0kB active_file:4kB inactive_file:14208kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:8104kB dirty:4kB writeback:0kB shmem:4160kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8176kB pagetables:1416kB sec_pagetables:1132kB all_unreclaimable? yes Balloon:0kB [ 247.296670][T10170] Node 1 active_anon:59636kB inactive_anon:80kB active_file:9680kB inactive_file:144416kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:116204kB dirty:1224kB writeback:4kB shmem:44836kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5240kB pagetables:3176kB sec_pagetables:100kB all_unreclaimable? no Balloon:0kB [ 247.308197][T10170] Node 0 DMA free:3256kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 247.317200][T10170] lowmem_reserve[]: 0 288 288 288 288 [ 247.319435][T10170] Node 0 DMA32 free:35824kB boost:18432kB min:31652kB low:34956kB high:38260kB reserved_highatomic:4096KB free_highatomic:1476KB active_anon:5976kB inactive_anon:0kB active_file:4kB inactive_file:14208kB unevictable:3536kB writepending:4kB present:1032196kB managed:295132kB mlocked:0kB bounce:0kB free_pcp:16076kB local_pcp:4008kB free_cma:0kB [ 247.330548][T10170] lowmem_reserve[]: 0 0 0 0 0 [ 247.332724][T10170] Node 1 DMA32 free:107576kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:59636kB inactive_anon:80kB active_file:9680kB inactive_file:144416kB unevictable:3536kB writepending:1228kB present:1048432kB managed:948220kB mlocked:0kB bounce:0kB free_pcp:58640kB local_pcp:14488kB free_cma:0kB [ 247.343555][T10170] lowmem_reserve[]: 0 0 0 0 0 [ 247.345157][T10170] Node 0 DMA: 78*4kB (UE) 40*8kB (UE) 12*16kB (U) 14*32kB (U) 1*64kB (U) 1*128kB (E) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 0*2048kB 0*4096kB = 3256kB [ 247.350646][T10170] Node 0 DMA32: 808*4kB (UEH) 354*8kB (UMEH) 162*16kB (UMEH) 397*32kB (UMEH) 140*64kB (UMEH) 27*128kB (UE) 6*256kB (UE) 1*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 35824kB [ 247.352455][ T6023] usb 5-1: USB disconnect, device number 13 [ 247.356526][T10170] Node 1 DMA32: 58*4kB (UME) 102*8kB (UE) 38*16kB (UE) 97*32kB (UME) 59*64kB (UME) 31*128kB (UME) 27*256kB (UME) 32*512kB (UME) 20*1024kB (UM) 9*2048kB (UM) 8*4096kB (UM) = 107480kB [ 247.365171][T10170] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 247.368747][T10170] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 247.372418][T10170] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 247.376040][T10170] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 247.379770][T10170] 54321 total pagecache pages [ 247.381407][T10170] 0 pages in swap cache [ 247.382740][T10170] Free swap = 124996kB [ 247.384091][T10170] Total swap = 124996kB [ 247.385395][T10170] 524155 pages RAM [ 247.386576][T10170] 0 pages HighMem/MovableOnly [ 247.388065][T10170] 209477 pages reserved [ 247.389492][T10170] 0 pages cma reserved [ 247.678920][ T5983] Bluetooth: hci1: command tx timeout [ 248.215471][T10184] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 248.217571][T10184] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 248.221797][T10184] vhci_hcd vhci_hcd.0: Device attached [ 248.528712][ T6061] usb 38-1: SetAddress Request (2) to port 0 [ 248.530715][ T6061] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 248.535278][T10190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.993'. [ 248.538280][T10190] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 248.541093][T10190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.585015][T10192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.994'. [ 248.587863][T10192] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 248.590287][T10192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.669974][ T1139] Bluetooth: hci4: Frame reassembly failed (-84) [ 248.672678][ T1139] Bluetooth: hci4: Frame reassembly failed (-84) [ 248.790389][T10185] vhci_hcd: connection reset by peer [ 248.797971][ T97] vhci_hcd: stop threads [ 248.800284][ T97] vhci_hcd: release socket [ 248.801861][ T97] vhci_hcd: disconnect device [ 248.858543][T10199] netlink: 'syz.1.996': attribute type 8 has an invalid length. [ 248.861487][T10199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.996'. [ 249.143509][T10203] netlink: 'syz.4.997': attribute type 8 has an invalid length. [ 249.158799][T10203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.997'. [ 249.421655][T10209] syz1: rxe_newlink: already configured on syz_tun [ 249.758906][ T5985] Bluetooth: hci1: command tx timeout [ 249.830869][T10209] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 249.833988][T10209] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 250.168839][T10209] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 250.172589][T10209] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 250.222919][T10209] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 250.226891][T10209] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 250.314582][T10209] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 250.318760][T10209] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 250.405228][ T1139] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 250.410266][ T1139] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 250.418424][ T1139] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 250.421668][ T1139] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 250.432330][ T60] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 250.435520][ T60] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 250.444416][ T60] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 250.447597][ T60] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 250.758758][ T5983] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 251.146122][T10241] netlink: 'syz.4.1006': attribute type 8 has an invalid length. [ 251.150322][T10241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1006'. [ 252.936583][T10267] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 253.125161][T10269] tipc: Enabling of bearer rejected, failed to enable media [ 253.347159][T10276] veth1_macvtap: left promiscuous mode [ 253.366782][T10276] netlink: 'syz.4.1015': attribute type 1 has an invalid length. [ 253.372035][T10276] syzkaller1: entered promiscuous mode [ 253.373765][T10276] syzkaller1: entered allmulticast mode [ 253.624905][ T6061] usb 38-1: device descriptor read/8, error -110 [ 253.646962][T10281] netlink: 'syz.0.1017': attribute type 29 has an invalid length. [ 253.771177][T10282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1016'. [ 253.774183][T10282] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 253.776831][T10282] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.904236][ T1146] Bluetooth: hci5: Frame reassembly failed (-84) [ 253.906413][ T1146] Bluetooth: hci5: Frame reassembly failed (-84) [ 254.125523][ T6061] usb usb38-port1: attempt power cycle [ 254.738293][ T6061] usb usb38-port1: unable to enumerate USB device [ 254.919427][T10304] tipc: Started in network mode [ 254.922017][T10304] tipc: Node identity 068cde70e3b7, cluster identity 4711 [ 254.926486][T10304] tipc: Enabled bearer , priority 0 [ 254.930571][T10304] syzkaller0: entered promiscuous mode [ 254.933260][T10304] syzkaller0: entered allmulticast mode [ 254.955740][T10304] FAULT_INJECTION: forcing a failure. [ 254.955740][T10304] name failslab, interval 1, probability 0, space 0, times 0 [ 254.965306][T10304] CPU: 2 UID: 0 PID: 10304 Comm: syz.4.1022 Not tainted syzkaller #0 PREEMPT(full) [ 254.965331][T10304] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 254.965341][T10304] Call Trace: [ 254.965347][T10304] [ 254.965354][T10304] dump_stack_lvl+0x16c/0x1f0 [ 254.965382][T10304] should_fail_ex+0x512/0x640 [ 254.965406][T10304] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 254.965431][T10304] should_failslab+0xc2/0x120 [ 254.965454][T10304] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 254.965474][T10304] ? __alloc_skb+0x2b2/0x380 [ 254.965500][T10304] __alloc_skb+0x2b2/0x380 [ 254.965522][T10304] ? __pfx___alloc_skb+0x10/0x10 [ 254.965546][T10304] ? if_nlmsg_size+0x475/0xaf0 [ 254.965574][T10304] rtmsg_ifinfo_build_skb+0x81/0x280 [ 254.965606][T10304] rtnetlink_event+0xf3/0x1f0 [ 254.965635][T10304] notifier_call_chain+0xbc/0x410 [ 254.965657][T10304] ? __pfx_rtnetlink_event+0x10/0x10 [ 254.965690][T10304] call_netdevice_notifiers_info+0xbe/0x140 [ 254.965728][T10304] netif_set_mtu_ext+0x590/0x7d0 [ 254.965754][T10304] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 254.965774][T10304] ? stack_depot_save_flags+0x29/0x9c0 [ 254.965809][T10304] ? kasan_save_stack+0x42/0x60 [ 254.965834][T10304] netif_set_mtu+0x98/0x140 [ 254.965855][T10304] ? __pfx_netif_set_mtu+0x10/0x10 [ 254.965889][T10304] ? full_name_hash+0xbc/0x110 [ 254.965916][T10304] dev_set_mtu+0xb2/0x260 [ 254.965944][T10304] dev_ifsioc+0xd1f/0x1ee0 [ 254.965969][T10304] ? __pfx_dev_ifsioc+0x10/0x10 [ 254.965991][T10304] ? __pfx___mutex_lock+0x10/0x10 [ 254.966024][T10304] ? dev_load+0x8e/0x240 [ 254.966050][T10304] dev_ioctl+0x223/0x1060 [ 254.966074][T10304] sock_do_ioctl+0x19d/0x280 [ 254.966100][T10304] ? __pfx_sock_do_ioctl+0x10/0x10 [ 254.966127][T10304] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 254.966168][T10304] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 254.966199][T10304] compat_sock_ioctl+0x301/0x730 [ 254.966221][T10304] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 254.966237][T10304] ? hook_file_ioctl_common+0x145/0x410 [ 254.966265][T10304] ? __fget_files+0x20e/0x3c0 [ 254.966289][T10304] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 254.966303][T10304] __ia32_compat_sys_ioctl+0x23f/0x370 [ 254.966332][T10304] __do_fast_syscall_32+0x7c/0x3a0 [ 254.966356][T10304] do_fast_syscall_32+0x32/0x80 [ 254.966378][T10304] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 254.966398][T10304] RIP: 0023:0xf706e579 [ 254.966410][T10304] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 254.966426][T10304] RSP: 002b:00000000f545e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 254.966442][T10304] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008922 [ 254.966452][T10304] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000 [ 254.966461][T10304] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 254.966471][T10304] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 254.966480][T10304] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 254.966503][T10304] [ 254.968490][T10304] tipc: Resetting bearer [ 255.087829][T10303] tipc: Resetting bearer [ 255.096610][T10303] tipc: Disabling bearer [ 255.211778][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.215193][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.490246][T10314] evm: overlay not supported [ 255.540188][T10318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1025'. [ 255.543083][T10318] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 255.545475][T10318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.678712][ T5985] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 255.828714][ T61] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 255.918719][ T5985] Bluetooth: hci5: command 0x1003 tx timeout [ 255.920670][ T5983] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 255.981649][ T61] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.984960][ T61] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 255.987854][ T61] usb 9-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 255.991246][ T61] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.005982][ T61] usb 9-1: config 0 descriptor?? [ 256.260735][T10344] block nbd2: Attempted send on invalid socket [ 256.262827][T10344] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 256.265922][T10344] vxfs: unable to read disk superblock at 1 [ 256.268195][T10344] block nbd2: Attempted send on invalid socket [ 256.270263][T10344] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 256.273408][T10344] vxfs: unable to read disk superblock at 8 [ 256.275334][T10344] vxfs: can't find superblock. [ 256.351603][T10345] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 257.244511][T10357] rdma_rxe: rxe_newlink: failed to add syz_tun [ 257.431963][T10357] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.483391][T10357] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.553319][T10357] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.558821][T10368] tipc: Started in network mode [ 257.560421][T10368] tipc: Node identity 080211000001, cluster identity 4711 [ 257.562681][T10368] tipc: Enabled bearer , priority 0 [ 257.613480][T10357] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.616790][ T6061] usb 9-1: USB disconnect, device number 2 [ 257.757113][ T1139] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.765391][ T1139] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.768058][ T1139] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.776907][ T1139] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.591151][ T9] tipc: Node number set to 134418688 [ 258.953883][T10392] lo speed is unknown, defaulting to 1000 [ 259.098811][ T6061] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 259.117538][T10406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1047'. [ 259.239301][ T6061] usb 7-1: device descriptor read/64, error -71 [ 259.282655][T10410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1048'. [ 259.401583][T10414] lo speed is unknown, defaulting to 1000 [ 259.488890][ T6061] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 259.618668][ T6061] usb 7-1: device descriptor read/64, error -71 [ 259.740075][ T6061] usb usb7-port1: attempt power cycle [ 259.839605][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 259.999211][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 260.002140][ T9] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 260.004664][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 260.008137][ T9] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 260.012465][ T9] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 260.017198][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 260.023697][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 260.027502][ T9] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 260.030452][ T9] usb 5-1: Product: syz [ 260.031890][ T9] usb 5-1: Manufacturer: syz [ 260.033449][ T9] usb 5-1: SerialNumber: syz [ 260.036348][ T9] usb 5-1: config 0 descriptor?? [ 260.043905][ T9] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 260.047973][ T9] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 260.109193][ T6061] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 260.129330][ T6061] usb 7-1: device descriptor read/8, error -71 [ 260.378034][ T5983] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 260.388751][ T6061] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 260.410882][ T6061] usb 7-1: device descriptor read/8, error -71 [ 260.529526][ T6061] usb usb7-port1: unable to enumerate USB device [ 260.804568][ T61] usb 5-1: USB disconnect, device number 14 [ 260.806782][ C3] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 260.809311][T10433] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 260.813098][ T61] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 260.997680][T10437] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 261.000750][T10437] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 261.005656][T10437] vhci_hcd vhci_hcd.0: Device attached [ 261.158702][ T61] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 261.320311][ T61] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 261.323754][ T61] usb 5-1: config 0 interface 0 has no altsetting 0 [ 261.327974][ T61] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 261.328726][ T6061] usb 46-1: SetAddress Request (2) to port 0 [ 261.331253][ T61] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 261.333144][ T6061] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 261.335958][ T61] usb 5-1: Product: syz [ 261.335971][ T61] usb 5-1: Manufacturer: syz [ 261.335981][ T61] usb 5-1: SerialNumber: syz [ 261.337994][ T61] usb 5-1: config 0 descriptor?? [ 261.350344][ T61] usb 5-1: selecting invalid altsetting 0 [ 261.580726][ T6169] usb 5-1: USB disconnect, device number 15 [ 261.583885][T10438] vhci_hcd: connection reset by peer [ 261.586419][ T60] vhci_hcd: stop threads [ 261.588239][ T60] vhci_hcd: release socket [ 261.595565][ T60] vhci_hcd: disconnect device [ 263.001269][T10475] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1064'. [ 264.657543][T10503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1074'. [ 264.662181][T10503] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 264.664567][T10503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.549461][T10523] block nbd0: Attempted send on invalid socket [ 265.551541][T10523] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 265.554615][T10523] vxfs: unable to read disk superblock at 1 [ 265.557445][T10523] block nbd0: Attempted send on invalid socket [ 265.560012][T10523] I/O error, dev nbd0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 265.563620][T10523] vxfs: unable to read disk superblock at 8 [ 265.565786][T10523] vxfs: can't find superblock. [ 265.621492][T10524] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 265.825402][ T5983] Bluetooth: hci2: unexpected cc 0x042e length: 1 < 7 [ 265.827524][ T5983] Bluetooth: hci2: unexpected event for opcode 0x042e [ 265.900394][T10532] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.914162][T10534] trusted_key: encrypted_key: master key parameter 'default [ 265.914162][T10534] user:syz' is invalid [ 266.072462][T10532] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.142945][T10532] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.213659][T10532] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.267819][T10539] syz1: rxe_newlink: already configured on syz_tun [ 266.307325][ T1139] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.317941][ T1139] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.324637][ T1139] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.331161][ T1139] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.353194][T10543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1086'. [ 266.399284][ T6061] usb 46-1: device descriptor read/8, error -110 [ 266.409628][T10548] rdma_rxe: rxe_newlink: failed to add syz_tun [ 266.474192][T10539] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 266.477918][T10539] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 266.561129][T10539] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 266.564236][T10539] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 266.676659][T10539] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 266.681778][T10539] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 266.764655][T10539] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 266.768459][T10539] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 266.819620][ T6061] usb usb46-port1: attempt power cycle [ 266.887772][ T1139] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 266.892101][ T1139] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 266.902452][ T1139] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 266.905615][ T1139] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 266.914662][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 266.917619][ T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 266.932203][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 266.934838][ T13] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 267.384227][ T6061] usb usb46-port1: unable to enumerate USB device [ 267.604065][T10563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1091'. [ 267.658060][T10563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1091'. [ 267.696943][T10566] syzkaller0: create flow: hash 96232304 index 1 [ 267.715895][T10569] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 267.744281][T10566] syzkaller0: delete flow: hash 96232304 index 1 [ 267.767226][T10570] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 267.820041][T10571] binder: Unknown parameter 'smackfstransmute' [ 267.838905][T10569] /dev/sr0: Can't open blockdev [ 267.963732][T10570] /dev/sr0: Can't open blockdev [ 268.049545][T10574] 9pnet_virtio: no channels available for device syz [ 268.053496][T10574] overlayfs: failed to clone upperpath [ 268.326055][T10584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1097'. [ 268.329101][T10584] netlink: 'syz.1.1097': attribute type 5 has an invalid length. [ 268.331791][T10584] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1097'. [ 268.745155][T10584] geneve3: entered promiscuous mode [ 268.747567][T10584] geneve3: entered allmulticast mode [ 268.753048][ T1146] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 268.756742][ T1146] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 268.761051][ T1146] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 268.763805][ T1146] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 268.875014][T10593] affs: No valid root block on device nbd4 [ 268.958777][T10601] overlay: Unknown parameter 'smackfshat' [ 269.459421][T10611] block nbd0: Attempted send on invalid socket [ 269.461400][T10611] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 269.464371][T10611] vxfs: unable to read disk superblock at 1 [ 269.466634][T10611] block nbd0: Attempted send on invalid socket [ 269.469332][T10611] I/O error, dev nbd0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 269.472290][T10611] vxfs: unable to read disk superblock at 8 [ 269.474221][T10611] vxfs: can't find superblock. [ 269.581676][T10611] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 270.298745][ T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 270.448760][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 270.453656][ T10] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 270.457778][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 270.462170][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 270.466372][ T10] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.471385][ T10] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 270.474288][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.702133][ T10] usb 9-1: usb_control_msg returned -71 [ 270.705506][ T10] usbtmc 9-1:16.0: can't read capabilities [ 270.714518][ T10] usb 9-1: USB disconnect, device number 3 [ 270.737115][T10648] netlink: 'syz.1.1114': attribute type 8 has an invalid length. [ 270.741536][T10648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1114'. [ 270.870393][T10652] capability: warning: `syz.0.1115' uses 32-bit capabilities (legacy support in use) [ 271.706339][ T40] audit: type=1326 audit(1756836138.282:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10668 comm="syz.0.1119" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffe0000 [ 272.405804][T10680] netlink: 'syz.1.1124': attribute type 8 has an invalid length. [ 272.409499][T10680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1124'. [ 272.624453][T10684] IPv4: Oversized IP packet from 172.20.20.24 [ 272.627400][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 272.629889][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 272.866923][T10694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1128'. [ 272.979811][T10694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1128'. [ 273.112751][T10703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1129'. [ 273.208035][T10705] overlay: ./file1 is not a directory [ 274.910850][T10744] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1141'. [ 274.914053][T10744] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1141'. [ 274.916922][T10744] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1141'. [ 274.920609][T10744] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1141'. [ 275.096209][T10752] overlay: ./file0 is not a directory [ 275.400924][T10765] syzkaller1: entered allmulticast mode [ 275.719680][T10765] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1149'. [ 276.134796][T10787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1154'. [ 276.137768][T10787] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 276.140338][T10787] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.238244][ T1251] Bluetooth: hci4: Frame reassembly failed (-84) [ 276.264870][T10792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1156'. [ 276.321298][T10792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1156'. [ 276.512782][T10808] block nbd4: Attempted send on invalid socket [ 276.515494][T10808] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 276.519796][T10808] vxfs: unable to read disk superblock at 1 [ 276.523428][T10808] block nbd4: Attempted send on invalid socket [ 276.526076][T10808] I/O error, dev nbd4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 276.530242][T10808] vxfs: unable to read disk superblock at 8 [ 276.532850][T10808] vxfs: can't find superblock. [ 276.601704][T10811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1162'. [ 276.608193][T10809] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 276.766744][T10812] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1162'. [ 276.826566][T10812] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1162'. [ 276.833156][T10812] netlink: 'syz.2.1162': attribute type 10 has an invalid length. [ 276.842977][T10812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1162'. [ 276.851101][T10812] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.894576][T10812] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.955125][T10812] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.042212][T10812] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.384279][ T46] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.394403][ T46] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.417513][ T46] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.433368][ T46] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.632583][T10830] futex_wake_op: syz.1.1168 tries to shift op by -1; fix this program [ 278.248743][ T5983] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 278.675268][T10842] 9pnet_fd: Insufficient options for proto=fd [ 278.719173][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1173'. [ 278.722062][T10845] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 278.724492][T10845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.967035][T10857] netlink: 'syz.4.1178': attribute type 8 has an invalid length. [ 278.976130][T10857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1178'. [ 279.614016][T10869] pim6reg: entered allmulticast mode [ 279.702786][T10873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1182'. [ 279.705905][T10873] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 279.708827][T10873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.816642][ T97] Bluetooth: hci4: Frame reassembly failed (-84) [ 279.891408][T10883] rdma_rxe: rxe_newlink: failed to add syz_tun [ 280.116008][T10883] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 280.186948][T10883] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 280.242535][T10883] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 280.312084][T10883] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 280.395195][ T1251] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 280.403409][ T1251] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 280.414308][ T1251] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 280.425148][ T1251] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 281.839864][ T5985] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 281.839949][ T5983] Bluetooth: hci4: command 0x1003 tx timeout [ 281.932362][T10934] rdma_rxe: rxe_newlink: failed to add syz_tun [ 282.055711][ T24] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 282.068671][T10934] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.141683][T10934] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.219974][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.223938][ T24] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 282.227343][ T24] usb 9-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 282.231084][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.237143][ T24] usb 9-1: config 0 descriptor?? [ 282.283500][T10934] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.343868][T10934] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.444017][ T97] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.451796][ T97] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.462313][ T46] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.470030][ T46] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.094559][ T5985] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 283.763906][ T24] usb 9-1: USB disconnect, device number 4 [ 284.089659][T10974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.838716][ T24] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 284.860928][T10997] overlayfs: failed to clone upperpath [ 284.988810][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 284.996617][ T24] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 285.000381][ T24] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 285.003978][ T24] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 285.007670][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 285.012102][ T24] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 285.016069][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 285.021788][ T24] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 285.025533][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.031250][ T24] usb 9-1: config 0 descriptor?? [ 285.128751][ T5985] Bluetooth: hci2: command 0x0c1a tx timeout [ 285.240319][ T24] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 285.247863][ T24] usb 9-1: USB disconnect, device number 5 [ 285.252256][ T24] usblp0: removed [ 285.380310][T10968] Set syz1 is full, maxelem 65536 reached [ 285.433017][T11004] FAULT_INJECTION: forcing a failure. [ 285.433017][T11004] name failslab, interval 1, probability 0, space 0, times 0 [ 285.436989][T11004] CPU: 2 UID: 0 PID: 11004 Comm: syz.0.1217 Not tainted syzkaller #0 PREEMPT(full) [ 285.437004][T11004] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 285.437010][T11004] Call Trace: [ 285.437014][T11004] [ 285.437019][T11004] dump_stack_lvl+0x16c/0x1f0 [ 285.437036][T11004] should_fail_ex+0x512/0x640 [ 285.437051][T11004] ? fs_reclaim_acquire+0xae/0x150 [ 285.437068][T11004] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 285.437083][T11004] should_failslab+0xc2/0x120 [ 285.437097][T11004] __kmalloc_noprof+0xd2/0x510 [ 285.437113][T11004] tomoyo_realpath_from_path+0xc2/0x6e0 [ 285.437129][T11004] ? tomoyo_profile+0x47/0x60 [ 285.437140][T11004] tomoyo_path_number_perm+0x245/0x580 [ 285.437152][T11004] ? tomoyo_path_number_perm+0x237/0x580 [ 285.437165][T11004] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 285.437179][T11004] ? arch_stack_walk+0xa6/0x100 [ 285.437204][T11004] ? __kasan_slab_free+0x60/0x70 [ 285.437216][T11004] ? kmem_cache_free+0x2d1/0x4d0 [ 285.437229][T11004] ? from_kuid+0x8d/0xd0 [ 285.437244][T11004] ? __pfx_from_kuid+0x10/0x10 [ 285.437261][T11004] tomoyo_path_chown+0x173/0x1b0 [ 285.437271][T11004] ? __pfx_tomoyo_path_chown+0x10/0x10 [ 285.437281][T11004] ? from_vfsuid+0xea/0x140 [ 285.437297][T11004] ? __pfx_from_vfsuid+0x10/0x10 [ 285.437313][T11004] security_path_chown+0x12a/0x2e0 [ 285.437325][T11004] chown_common+0x3d3/0x680 [ 285.437343][T11004] ? __pfx_chown_common+0x10/0x10 [ 285.437357][T11004] ? find_held_lock+0x2b/0x80 [ 285.437372][T11004] ? mnt_get_write_access+0x20c/0x300 [ 285.437390][T11004] do_fchownat+0x1a7/0x200 [ 285.437404][T11004] ? __pfx_do_fchownat+0x10/0x10 [ 285.437419][T11004] ? __pfx_ksys_write+0x10/0x10 [ 285.437433][T11004] __ia32_sys_lchown16+0xe6/0x120 [ 285.437451][T11004] __do_fast_syscall_32+0x7c/0x3a0 [ 285.437467][T11004] do_fast_syscall_32+0x32/0x80 [ 285.437481][T11004] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 285.437494][T11004] RIP: 0023:0xf70be579 [ 285.437502][T11004] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 285.437512][T11004] RSP: 002b:00000000f54ae55c EFLAGS: 00000296 ORIG_RAX: 0000000000000010 [ 285.437522][T11004] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 285.437529][T11004] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 285.437534][T11004] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 285.437540][T11004] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 285.437546][T11004] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 285.437559][T11004] [ 285.437563][T11004] ERROR: Out of memory at tomoyo_realpath_from_path. [ 285.678716][ T1020] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 285.838781][ T1020] usb 9-1: Using ep0 maxpacket: 32 [ 285.842615][ T1020] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 285.846130][ T1020] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 285.849898][ T1020] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 285.853407][ T1020] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 285.857227][ T1020] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 285.861368][ T1020] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 285.866687][ T1020] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 285.870705][ T1020] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.875919][ T1020] usb 9-1: config 0 descriptor?? [ 285.882410][T11015] block nbd0: Attempted send on invalid socket [ 285.884435][T11015] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 285.887460][T11015] vxfs: unable to read disk superblock at 1 [ 285.890633][T11015] block nbd0: Attempted send on invalid socket [ 285.893325][T11015] I/O error, dev nbd0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 285.897402][T11015] vxfs: unable to read disk superblock at 8 [ 285.899732][T11015] vxfs: can't find superblock. [ 285.962032][T11016] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 286.281712][ T1020] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 286.413708][ T1020] usb 9-1: USB disconnect, device number 6 [ 286.424579][ T1020] usblp0: removed [ 286.766224][T11027] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 286.975284][T11028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.981140][T11028] batadv_slave_0: entered promiscuous mode [ 287.026188][T11031] kvm: kvm [11029]: vcpu0, guest rIP: 0xeeee8000 Unhandled WRMSR(0x40000006) = 0x0 [ 287.249608][T11040] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 287.252009][T11040] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 287.255095][T11040] vhci_hcd vhci_hcd.0: Device attached [ 287.375363][ T40] audit: type=1326 audit(1756836153.952:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11029 comm="syz.4.1225" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706e579 code=0x0 [ 287.571709][T11059] __nla_validate_parse: 1 callbacks suppressed [ 287.571728][T11059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1230'. [ 287.616989][T11059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1230'. [ 287.618834][ T6023] usb 46-1: SetAddress Request (6) to port 0 [ 287.622644][ T6023] usb 46-1: new SuperSpeed USB device number 6 using vhci_hcd [ 287.827504][T11043] vhci_hcd: connection reset by peer [ 287.874740][ T46] vhci_hcd: stop threads [ 287.878834][ T46] vhci_hcd: release socket [ 287.885664][ T46] vhci_hcd: disconnect device [ 290.313311][T11112] tmpfs: Unknown parameter 'Ž–å¶ÅPä}¢Æ»áhÍé1úˆo£âx›yÀ›RHÉçù.¹¯' [ 290.576154][ T61] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 290.718854][ T61] usb 7-1: device descriptor read/64, error -71 [ 290.968845][ T61] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 291.099613][ T61] usb 7-1: device descriptor read/64, error -71 [ 291.151943][T11130] netlink: 'syz.1.1252': attribute type 10 has an invalid length. [ 291.155490][ T40] audit: type=1326 audit(1756836157.732:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.1.1252" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 291.162222][ T40] audit: type=1326 audit(1756836157.732:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.1.1252" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 291.169388][ T40] audit: type=1326 audit(1756836157.732:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.1.1252" exe="/syz-executor" sig=0 arch=40000003 syscall=100 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 291.175900][ T40] audit: type=1326 audit(1756836157.732:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.1.1252" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 291.183024][ T40] audit: type=1326 audit(1756836157.732:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.1.1252" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 291.190585][ T40] audit: type=1326 audit(1756836157.732:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.1.1252" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 291.197173][ T40] audit: type=1326 audit(1756836157.732:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.1.1252" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 291.203899][ T40] audit: type=1326 audit(1756836157.732:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.1.1252" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 291.212140][ T61] usb usb7-port1: attempt power cycle [ 291.212959][ T40] audit: type=1326 audit(1756836157.732:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.1.1252" exe="/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 291.318212][T11146] program syz.4.1259 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.430118][T11152] netlink: 'syz.4.1261': attribute type 1 has an invalid length. [ 291.568717][ T61] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 291.599442][ T61] usb 7-1: device descriptor read/8, error -71 [ 291.612279][T11152] batman_adv: batadv0: Adding interface: gretap1 [ 291.614359][T11152] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.622339][T11152] batman_adv: batadv0: Interface activated: gretap1 [ 291.838716][ T61] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 291.859344][ T61] usb 7-1: device descriptor read/8, error -71 [ 291.969046][ T61] usb usb7-port1: unable to enumerate USB device [ 292.309296][T11171] tipc: Enabling of bearer rejected, already enabled [ 292.470636][T11176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1270'. [ 292.473584][T11176] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 292.475971][T11176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.507854][T11178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1271'. [ 292.512205][T11178] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 292.514547][T11178] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.554985][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 292.555001][ T40] audit: type=1326 audit(1756836159.132:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11180 comm="syz.1.1272" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 292.565917][ T40] audit: type=1326 audit(1756836159.132:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11180 comm="syz.1.1272" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 292.572607][ T40] audit: type=1326 audit(1756836159.132:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11180 comm="syz.1.1272" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 292.579273][ T40] audit: type=1326 audit(1756836159.132:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11180 comm="syz.1.1272" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 292.585744][ T40] audit: type=1326 audit(1756836159.132:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11180 comm="syz.1.1272" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 292.592868][ T40] audit: type=1326 audit(1756836159.132:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11180 comm="syz.1.1272" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 292.599771][ T40] audit: type=1326 audit(1756836159.132:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11180 comm="syz.1.1272" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 292.606523][ T40] audit: type=1326 audit(1756836159.132:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11180 comm="syz.1.1272" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 292.613423][ T40] audit: type=1326 audit(1756836159.132:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11180 comm="syz.1.1272" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 292.620207][ T40] audit: type=1326 audit(1756836159.132:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11180 comm="syz.1.1272" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 292.645304][T11182] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 292.912923][ T6023] usb 46-1: device descriptor read/8, error -110 [ 293.319471][T11192] cgroup: Invalid name [ 293.330951][ T6023] usb usb46-port1: attempt power cycle [ 293.623319][T11197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1276'. [ 293.899132][ T6023] usb usb46-port1: unable to enumerate USB device [ 295.032729][T11225] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 295.087219][T11224] siw: device registration error -23 [ 295.310596][T11228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1286'. [ 295.314062][T11228] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 295.316917][T11228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.371817][T11230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1287'. [ 295.388167][ T1146] Bluetooth: hci4: Frame reassembly failed (-84) [ 295.432317][T11234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1287'. [ 296.958782][ T5983] Bluetooth: hci2: command 0x0c1a tx timeout [ 297.438792][ T5985] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 297.438803][ T5983] Bluetooth: hci4: command 0x1003 tx timeout [ 297.793274][T11283] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 297.850590][T11286] siw: device registration error -23 [ 298.627026][T11301] netlink: 4860 bytes leftover after parsing attributes in process `syz.4.1301'. [ 298.772501][T11309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1305'. [ 298.835736][T11313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1305'. [ 298.915439][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 298.915455][ T40] audit: type=1804 audit(1756836165.462:161): pid=11315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1306" name="bus" dev="tmpfs" ino=2385 res=1 errno=0 [ 299.495776][T11325] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 299.497919][T11325] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 299.502419][T11325] vhci_hcd vhci_hcd.0: Device attached [ 299.678759][ T5985] Bluetooth: hci2: command 0x0c1a tx timeout [ 299.769265][ T7166] usb 46-1: SetAddress Request (10) to port 0 [ 299.772470][ T7166] usb 46-1: new SuperSpeed USB device number 10 using vhci_hcd [ 300.127214][T11326] vhci_hcd: connection reset by peer [ 300.130528][ T46] vhci_hcd: stop threads [ 300.132225][ T46] vhci_hcd: release socket [ 300.133862][ T46] vhci_hcd: disconnect device [ 300.781807][T11350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1314'. [ 300.785408][T11350] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 300.788357][T11350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.899580][ T97] Bluetooth: hci4: Frame reassembly failed (-84) [ 302.609310][T11365] block nbd2: Attempted send on invalid socket [ 302.611334][T11365] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 302.614415][T11365] vxfs: unable to read disk superblock at 1 [ 302.616655][T11365] block nbd2: Attempted send on invalid socket [ 302.618822][T11365] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 302.621789][T11365] vxfs: unable to read disk superblock at 8 [ 302.623714][T11365] vxfs: can't find superblock. [ 302.697530][T11366] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 302.958895][ T5985] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 302.960678][ T5983] Bluetooth: hci4: command 0x1003 tx timeout [ 303.418699][ T24] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 303.470301][ T40] audit: type=1800 audit(1756836170.052:162): pid=11383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1325" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 303.548716][ T24] usb 7-1: device descriptor read/64, error -71 [ 303.789028][ T24] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 303.918870][ T24] usb 7-1: device descriptor read/64, error -71 [ 304.030173][ T24] usb usb7-port1: attempt power cycle [ 304.142075][T11390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1327'. [ 304.144641][T11390] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 304.147022][T11390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.210762][T11394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1329'. [ 304.214420][T11394] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 304.217545][T11394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.250797][ T40] audit: type=1326 audit(1756836170.832:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11395 comm="syz.1.1330" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x0 [ 304.368703][ T24] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 304.389582][ T24] usb 7-1: device descriptor read/8, error -71 [ 304.638870][ T24] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 304.661028][ T24] usb 7-1: device descriptor read/8, error -71 [ 304.781084][ T24] usb usb7-port1: unable to enumerate USB device [ 304.878761][ T7166] usb 46-1: device descriptor read/8, error -110 [ 305.281533][ T7166] usb usb46-port1: attempt power cycle [ 305.578227][T11418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1335'. [ 305.580700][T11420] netlink: 'syz.4.1334': attribute type 8 has an invalid length. [ 305.585081][T11420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1334'. [ 305.850844][ T7166] usb usb46-port1: unable to enumerate USB device [ 305.969616][T11431] block nbd0: Attempted send on invalid socket [ 305.971628][T11431] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 305.974702][T11431] vxfs: unable to read disk superblock at 1 [ 305.976970][T11431] block nbd0: Attempted send on invalid socket [ 305.979066][T11431] I/O error, dev nbd0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 305.982167][T11431] vxfs: unable to read disk superblock at 8 [ 305.984082][T11431] vxfs: can't find superblock. [ 306.123397][T11433] FAULT_INJECTION: forcing a failure. [ 306.123397][T11433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.127450][T11433] CPU: 1 UID: 0 PID: 11433 Comm: syz.4.1339 Not tainted syzkaller #0 PREEMPT(full) [ 306.127466][T11433] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 306.127472][T11433] Call Trace: [ 306.127476][T11433] [ 306.127481][T11433] dump_stack_lvl+0x16c/0x1f0 [ 306.127514][T11433] should_fail_ex+0x512/0x640 [ 306.127535][T11433] _copy_to_user+0x32/0xd0 [ 306.127547][T11433] do_pages_stat+0x631/0x820 [ 306.127566][T11433] ? __pfx_do_pages_stat+0x10/0x10 [ 306.127592][T11433] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 306.127610][T11433] ? lockdep_hardirqs_on+0x7c/0x110 [ 306.127623][T11433] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 306.127637][T11433] kernel_move_pages+0xfa8/0x1380 [ 306.127657][T11433] ? __pfx_kernel_move_pages+0x10/0x10 [ 306.127673][T11433] ? __fget_files+0x20e/0x3c0 [ 306.127684][T11433] ? handle_mm_fault+0x1d0/0xd10 [ 306.127697][T11433] ? fput+0x9b/0xd0 [ 306.127711][T11433] ? ksys_write+0x1ac/0x250 [ 306.127723][T11433] ? __pfx_ksys_write+0x10/0x10 [ 306.127736][T11433] __ia32_sys_move_pages+0xdd/0x1b0 [ 306.127751][T11433] ? lockdep_hardirqs_on+0x7c/0x110 [ 306.127764][T11433] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 306.127779][T11433] __do_fast_syscall_32+0x7c/0x3a0 [ 306.127794][T11433] do_fast_syscall_32+0x32/0x80 [ 306.127808][T11433] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 306.127822][T11433] RIP: 0023:0xf706e579 [ 306.127830][T11433] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 306.127840][T11433] RSP: 002b:00000000f545e55c EFLAGS: 00000296 ORIG_RAX: 000000000000013d [ 306.127854][T11433] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000001efe [ 306.127860][T11433] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000080000040 [ 306.127866][T11433] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 306.127872][T11433] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 306.127878][T11433] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 306.127891][T11433] [ 306.487128][T11443] block nbd4: Attempted send on invalid socket [ 306.489318][T11443] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 306.492477][T11443] vxfs: unable to read disk superblock at 1 [ 306.494801][T11443] block nbd4: Attempted send on invalid socket [ 306.496789][T11443] I/O error, dev nbd4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 306.499875][T11443] vxfs: unable to read disk superblock at 8 [ 306.501787][T11443] vxfs: can't find superblock. [ 306.550325][T11444] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 306.872723][T11446] netlink: 'syz.0.1342': attribute type 14 has an invalid length. [ 307.432527][T11464] netlink: 'syz.4.1347': attribute type 8 has an invalid length. [ 307.435791][T11464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1347'. [ 307.738942][ T6023] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 307.780830][T11473] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1349'. [ 307.908914][ T6023] usb 7-1: Using ep0 maxpacket: 8 [ 307.916740][ T6023] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 307.920762][ T6023] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 307.924379][ T6023] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.348409][T11485] block nbd4: Attempted send on invalid socket [ 308.350541][T11485] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 308.353558][T11485] vxfs: unable to read disk superblock at 1 [ 308.355861][T11485] block nbd4: Attempted send on invalid socket [ 308.357858][T11485] I/O error, dev nbd4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 308.360938][T11485] vxfs: unable to read disk superblock at 8 [ 308.362871][T11485] vxfs: can't find superblock. [ 308.372636][T11485] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 308.731715][T11488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1355'. [ 308.739556][T11488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1355'. [ 308.788513][T11488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1355'. [ 310.098564][T11516] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1362'. [ 310.499682][ T61] usb 7-1: USB disconnect, device number 19 [ 310.532265][T11529] fuse: Bad value for 'fd' [ 310.887882][T11547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1371'. [ 310.893593][T11547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1371'. [ 310.940234][T11547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1371'. [ 310.988345][T11552] fuse: Bad value for 'user_id' [ 310.990036][T11552] fuse: Bad value for 'user_id' [ 311.113872][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1374'. [ 311.220170][ T40] audit: type=1326 audit(1756836177.772:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11553 comm="syz.0.1373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 311.234392][ T40] audit: type=1326 audit(1756836177.772:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11553 comm="syz.0.1373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 311.248826][ T40] audit: type=1326 audit(1756836177.772:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11553 comm="syz.0.1373" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 311.261304][ T40] audit: type=1326 audit(1756836177.772:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11553 comm="syz.0.1373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 311.356734][ T40] audit: type=1326 audit(1756836177.772:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11553 comm="syz.0.1373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 311.378533][ T40] audit: type=1326 audit(1756836177.772:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11553 comm="syz.0.1373" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 311.388868][ T40] audit: type=1326 audit(1756836177.772:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11553 comm="syz.0.1373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 311.395665][ T40] audit: type=1326 audit(1756836177.772:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11553 comm="syz.0.1373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 311.402590][ T40] audit: type=1326 audit(1756836177.772:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11553 comm="syz.0.1373" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 311.410045][ T40] audit: type=1326 audit(1756836177.782:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11553 comm="syz.0.1373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 312.488784][ T1020] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 312.650029][ T1020] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.653161][ T1020] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 312.655837][ T1020] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 312.658865][ T1020] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.662481][ T1020] usb 5-1: config 0 descriptor?? [ 313.290033][T11588] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.361833][T11588] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.423962][T11588] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.492089][T11588] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.549502][ T1146] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.560244][ T1146] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.570608][ T1146] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.580444][ T46] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.622470][T11594] netlink: 'syz.2.1383': attribute type 8 has an invalid length. [ 313.626432][T11594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1383'. [ 313.648695][ T24] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 313.789199][ T24] usb 9-1: device descriptor read/64, error -71 [ 314.048909][ T24] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 314.087874][T11600] lo speed is unknown, defaulting to 1000 [ 314.191409][ T24] usb 9-1: device descriptor read/64, error -71 [ 314.249662][ T1020] usb 5-1: USB disconnect, device number 16 [ 314.300839][ T24] usb usb9-port1: attempt power cycle [ 314.638703][ T24] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 314.659249][ T24] usb 9-1: device descriptor read/8, error -71 [ 314.983202][ T24] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 315.001713][ T24] usb 9-1: device descriptor read/8, error -71 [ 315.113317][ T24] usb usb9-port1: unable to enumerate USB device [ 315.383578][T11632] netlink: 'syz.1.1392': attribute type 8 has an invalid length. [ 315.386482][T11632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1392'. [ 315.738959][ T1020] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 315.894273][ T1020] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.908810][ T1020] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 315.912547][ T1020] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.921754][ T1020] usb 7-1: config 0 descriptor?? [ 316.140967][ T1020] usbhid 7-1:0.0: can't add hid device: -71 [ 316.143157][ T1020] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 316.153691][ T1020] usb 7-1: USB disconnect, device number 20 [ 316.229200][ T40] kauditd_printk_skb: 218 callbacks suppressed [ 316.229243][ T40] audit: type=1326 audit(1756836182.812:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11647 comm="syz.1.1397" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f27598 code=0x7ffc0000 [ 316.240906][ T40] audit: type=1326 audit(1756836182.812:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11647 comm="syz.1.1397" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f27598 code=0x7ffc0000 [ 316.247581][ T40] audit: type=1326 audit(1756836182.812:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11647 comm="syz.1.1397" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f27598 code=0x7ffc0000 [ 316.256514][T11648] lo speed is unknown, defaulting to 1000 [ 316.259871][ T40] audit: type=1326 audit(1756836182.812:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11647 comm="syz.1.1397" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f27598 code=0x7ffc0000 [ 316.267025][ T40] audit: type=1326 audit(1756836182.812:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11647 comm="syz.1.1397" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f27598 code=0x7ffc0000 [ 316.274034][ T40] audit: type=1326 audit(1756836182.812:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11647 comm="syz.1.1397" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f27598 code=0x7ffc0000 [ 316.283330][ T40] audit: type=1326 audit(1756836182.812:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11647 comm="syz.1.1397" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f27598 code=0x7ffc0000 [ 316.291865][ T40] audit: type=1326 audit(1756836182.812:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11647 comm="syz.1.1397" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f27598 code=0x7ffc0000 [ 316.303094][ T40] audit: type=1326 audit(1756836182.812:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11647 comm="syz.1.1397" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f27598 code=0x7ffc0000 [ 316.311503][ T40] audit: type=1326 audit(1756836182.812:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11647 comm="syz.1.1397" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f27598 code=0x7ffc0000 [ 316.578764][ T1020] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 316.641078][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.643152][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.728831][ T1020] usb 7-1: Using ep0 maxpacket: 16 [ 316.737399][ T1020] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.744687][ T1020] usb 7-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 316.748267][ T1020] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.764281][ T1020] usb 7-1: config 0 descriptor?? [ 317.058742][T11682] netlink: 'syz.0.1404': attribute type 8 has an invalid length. [ 317.061997][T11682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1404'. [ 317.117464][T11683] netlink: 4860 bytes leftover after parsing attributes in process `syz.4.1402'. [ 317.590354][ T1020] usbhid 7-1:0.0: can't add hid device: -71 [ 317.592713][ T1020] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 317.596357][ T1020] usb 7-1: USB disconnect, device number 21 [ 318.185886][T11705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1410'. [ 319.016646][T11724] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1414'. [ 319.252191][T11729] /dev/nullb0: Can't open blockdev [ 319.435038][T11734] netlink: 4860 bytes leftover after parsing attributes in process `syz.2.1415'. [ 319.458989][T11737] trusted_key: syz.1.1417 sent an empty control message without MSG_MORE. [ 319.578870][ T7166] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 319.728663][ T7166] usb 9-1: Using ep0 maxpacket: 8 [ 319.732674][ T7166] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 319.736779][ T7166] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 319.740307][ T7166] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 319.744471][ T7166] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 319.749321][ T7166] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 319.753050][ T7166] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.184634][T11745] netlink: 'syz.2.1420': attribute type 2 has an invalid length. [ 320.187909][T11745] netlink: 723 bytes leftover after parsing attributes in process `syz.2.1420'. [ 321.203290][T11777] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1427'. [ 321.325715][T11785] netlink: 4860 bytes leftover after parsing attributes in process `syz.1.1429'. [ 321.333475][T11786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1427'. [ 321.421543][T11777] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 321.517266][T11777] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 321.519690][T11777] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 321.521729][T11777] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 321.526297][T11777] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 321.532493][T11777] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 322.103978][T11796] FAULT_INJECTION: forcing a failure. [ 322.103978][T11796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.109241][T11796] CPU: 0 UID: 0 PID: 11796 Comm: syz.0.1431 Not tainted syzkaller #0 PREEMPT(full) [ 322.109279][T11796] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 322.109290][T11796] Call Trace: [ 322.109296][T11796] [ 322.109302][T11796] dump_stack_lvl+0x16c/0x1f0 [ 322.109331][T11796] should_fail_ex+0x512/0x640 [ 322.109360][T11796] _copy_from_user+0x2e/0xd0 [ 322.109389][T11796] move_addr_to_kernel+0x65/0x170 [ 322.109410][T11796] __sys_bind+0x11b/0x260 [ 322.109430][T11796] ? __pfx___sys_bind+0x10/0x10 [ 322.109448][T11796] ? __fget_files+0x20e/0x3c0 [ 322.109477][T11796] ? __pfx_ksys_write+0x10/0x10 [ 322.109504][T11796] __ia32_sys_bind+0x71/0xb0 [ 322.109523][T11796] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 322.109548][T11796] __do_fast_syscall_32+0x7c/0x3a0 [ 322.109575][T11796] do_fast_syscall_32+0x32/0x80 [ 322.109601][T11796] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 322.109623][T11796] RIP: 0023:0xf70be579 [ 322.109638][T11796] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 322.109654][T11796] RSP: 002b:00000000f548d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000169 [ 322.109672][T11796] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000000 [ 322.109682][T11796] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000000 [ 322.109693][T11796] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 322.109702][T11796] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 322.109713][T11796] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 322.109736][T11796] [ 322.191232][T11798] netlink: 'syz.1.1432': attribute type 14 has an invalid length. [ 322.401332][ T7166] usb 9-1: usb_control_msg returned -71 [ 322.403618][ T7166] usbtmc 9-1:16.0: can't read capabilities [ 322.415397][ T7166] usb 9-1: USB disconnect, device number 11 [ 322.432472][T11811] IPVS: length: 203 != 156842099832 [ 322.998182][T11833] netlink: 'syz.4.1442': attribute type 14 has an invalid length. [ 323.023700][T11835] netlink: 'syz.1.1443': attribute type 10 has an invalid length. [ 323.055351][T11838] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1444'. [ 323.340101][T11848] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1448'. [ 323.369907][ T5985] Bluetooth: hci0: command 0x0c1a tx timeout [ 323.508205][T11854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1451'. [ 323.514019][T11854] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 323.518796][T11854] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.528850][ T5985] Bluetooth: hci2: command 0x0c1a tx timeout [ 323.608814][ T5985] Bluetooth: hci1: command 0x0c1a tx timeout [ 323.609736][ T5983] Bluetooth: hci3: command 0x0405 tx timeout [ 323.808774][ T6030] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 324.018680][ T6030] usb 5-1: Using ep0 maxpacket: 8 [ 324.026431][ T6030] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 324.030069][ T6030] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 324.033739][ T6030] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 324.037132][ T6030] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 324.041450][ T6030] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 324.042242][T11869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.044766][ T6030] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.080067][T11868] lo speed is unknown, defaulting to 1000 [ 324.089966][ T6030] usbtmc 5-1:16.0: bulk endpoints not found [ 324.504376][T11883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1461'. [ 325.440103][ T5983] Bluetooth: hci0: command 0x0c1a tx timeout [ 325.678935][ T5983] Bluetooth: hci1: command 0x0c1a tx timeout [ 326.561110][ T1020] usb 5-1: USB disconnect, device number 17 [ 326.640565][T11912] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) ! [ 327.761950][ T5983] Bluetooth: hci1: command 0x0c1a tx timeout [ 327.814948][T11930] FAULT_INJECTION: forcing a failure. [ 327.814948][T11930] name failslab, interval 1, probability 0, space 0, times 0 [ 327.819455][T11930] CPU: 3 UID: 0 PID: 11930 Comm: syz.4.1473 Not tainted syzkaller #0 PREEMPT(full) [ 327.819470][T11930] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 327.819477][T11930] Call Trace: [ 327.819480][T11930] [ 327.819484][T11930] dump_stack_lvl+0x16c/0x1f0 [ 327.819503][T11930] should_fail_ex+0x512/0x640 [ 327.819517][T11930] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 327.819531][T11930] should_failslab+0xc2/0x120 [ 327.819545][T11930] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 327.819557][T11930] ? security_file_alloc+0x34/0x2b0 [ 327.819574][T11930] security_file_alloc+0x34/0x2b0 [ 327.819588][T11930] init_file+0x93/0x4c0 [ 327.819603][T11930] alloc_empty_file+0x73/0x1e0 [ 327.819618][T11930] path_openat+0xda/0x2cb0 [ 327.819629][T11930] ? do_fast_syscall_32+0x32/0x80 [ 327.819642][T11930] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 327.819660][T11930] ? __pfx_path_openat+0x10/0x10 [ 327.819672][T11930] ? __lock_acquire+0xb97/0x1ce0 [ 327.819688][T11930] do_filp_open+0x20b/0x470 [ 327.819700][T11930] ? __pfx_do_filp_open+0x10/0x10 [ 327.819721][T11930] ? _raw_spin_unlock+0x28/0x50 [ 327.819733][T11930] ? alloc_fd+0x471/0x7d0 [ 327.819749][T11930] do_sys_openat2+0x11b/0x1d0 [ 327.819764][T11930] ? __pfx_do_sys_openat2+0x10/0x10 [ 327.819781][T11930] ? bpf_trace_run2+0x2ab/0x590 [ 327.819798][T11930] __ia32_compat_sys_openat+0x16d/0x210 [ 327.819808][T11930] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 327.819819][T11930] ? syscall_trace_enter+0x1cb/0x240 [ 327.819838][T11930] ? rcu_is_watching+0x12/0xc0 [ 327.819850][T11930] __do_fast_syscall_32+0x7c/0x3a0 [ 327.819865][T11930] do_fast_syscall_32+0x32/0x80 [ 327.819879][T11930] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 327.819892][T11930] RIP: 0023:0xf706e579 [ 327.819900][T11930] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 327.819910][T11930] RSP: 002b:00000000f545e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 327.819920][T11930] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 327.819927][T11930] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 327.819933][T11930] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 327.819938][T11930] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 327.819944][T11930] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 327.819957][T11930] [ 328.100123][T11937] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.104014][T11937] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.194994][T11937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.205723][T11937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.315619][T11948] block nbd2: Attempted send on invalid socket [ 328.318396][T11948] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 328.324139][T11948] vxfs: unable to read disk superblock at 1 [ 328.329113][T11948] block nbd2: Attempted send on invalid socket [ 328.331796][T11948] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 328.336014][T11948] vxfs: unable to read disk superblock at 8 [ 328.338455][T11948] vxfs: can't find superblock. [ 328.346070][T11937] batman_adv: batadv0: Interface deactivated: gretap1 [ 328.406767][T11958] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 328.433239][ T46] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.437973][ T46] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.441706][ T46] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.444811][ T46] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.468715][ T59] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 329.621282][ T59] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.625516][ T59] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 329.629514][ T59] usb 7-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 329.633484][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.639132][ T59] usb 7-1: config 0 descriptor?? [ 331.201088][T11950] usb 7-1: USB disconnect, device number 22 [ 331.590872][T12011] netlink: 'syz.1.1494': attribute type 14 has an invalid length. [ 331.717653][T12012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1493'. [ 331.722021][T12012] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 331.727464][T12012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.768230][T12021] netlink: 'syz.2.1497': attribute type 8 has an invalid length. [ 331.773486][T12021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1497'. [ 331.805575][ T1251] Bluetooth: hci4: Frame reassembly failed (-84) [ 332.118692][T11950] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 333.058653][T11950] usb 9-1: Using ep0 maxpacket: 8 [ 333.061567][T11950] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 333.064650][T11950] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 333.067676][T11950] usb 9-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 333.071578][T11950] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 333.075588][T11950] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 333.078420][T11950] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.087308][T11950] usbtmc 9-1:16.0: bulk endpoints not found [ 333.503591][T12042] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1503'. [ 333.514820][T12042] wireguard0: entered promiscuous mode [ 333.516676][T12042] wireguard0: entered allmulticast mode [ 333.838760][ T5985] Bluetooth: hci4: command 0x1003 tx timeout [ 333.838841][ T5983] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 333.972964][T12054] netlink: 'syz.2.1508': attribute type 8 has an invalid length. [ 333.975869][T12054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1508'. [ 334.287187][T12063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1510'. [ 334.326760][T12063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1510'. [ 334.682705][T12072] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 334.834935][T12075] netlink: 'syz.0.1514': attribute type 14 has an invalid length. [ 334.880947][ T3334] usb 9-1: USB disconnect, device number 12 [ 334.946944][T12078] netlink: 'syz.4.1515': attribute type 1 has an invalid length. [ 335.706559][T12090] netlink: 'syz.0.1518': attribute type 8 has an invalid length. [ 335.709456][T12090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1518'. [ 336.073260][T12094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1519'. [ 336.162064][T12097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1519'. [ 336.548085][T12078] Set syz1 is full, maxelem 65536 reached [ 336.819170][ T3334] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 336.968776][ T3334] usb 9-1: Using ep0 maxpacket: 8 [ 336.972001][ T3334] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 336.975940][ T3334] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 336.980384][ T3334] usb 9-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 336.984373][ T3334] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 336.988494][ T3334] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 336.991428][ T3334] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.000687][ T3334] usbtmc 9-1:16.0: bulk endpoints not found [ 337.777130][T12129] netlink: 4860 bytes leftover after parsing attributes in process `syz.2.1527'. [ 338.090437][T12131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1528'. [ 338.142829][T12131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1528'. [ 338.172067][T12138] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 338.181218][T12138] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1531'. [ 338.291032][T12143] netlink: 4860 bytes leftover after parsing attributes in process `syz.1.1532'. [ 338.492467][T12148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1534'. [ 338.497015][T12148] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1534'. [ 338.500056][T12148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1534'. [ 338.514391][T12148] bridge0: port 1(syz_tun) entered blocking state [ 338.516612][T12148] bridge0: port 1(syz_tun) entered disabled state [ 338.519749][T12148] syz_tun: entered allmulticast mode [ 338.522497][T12148] syz_tun: entered promiscuous mode [ 338.527293][T12148] bridge0: port 1(syz_tun) entered blocking state [ 338.530280][T12148] bridge0: port 1(syz_tun) entered forwarding state [ 338.536222][T12148] raw_sendmsg: syz.2.1534 forgot to set AF_INET. Fix it! [ 338.996350][T12167] block nbd0: Attempted send on invalid socket [ 338.998417][T12167] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 339.001538][T12167] vxfs: unable to read disk superblock at 1 [ 339.003776][T12167] block nbd0: Attempted send on invalid socket [ 339.005764][T12167] I/O error, dev nbd0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 339.008841][T12167] vxfs: unable to read disk superblock at 8 [ 339.010774][T12167] vxfs: can't find superblock. [ 339.286056][T12169] netlink: 'syz.1.1538': attribute type 3 has an invalid length. [ 339.288699][T12169] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1538'. [ 339.576063][ T3334] usb 9-1: USB disconnect, device number 13 [ 339.726174][T12184] netlink: 'syz.4.1545': attribute type 8 has an invalid length. [ 339.730204][T12184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1545'. [ 341.188697][T11950] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 341.348691][T11950] usb 9-1: Using ep0 maxpacket: 8 [ 341.353897][T11950] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 341.358573][T11950] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 341.364088][T11950] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 341.367731][T11950] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 341.371379][T11950] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 341.375370][T11950] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 341.378338][T11950] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.400129][T11950] usbtmc 9-1:16.0: probe with driver usbtmc failed with error -22 [ 342.015837][T12234] FAULT_INJECTION: forcing a failure. [ 342.015837][T12234] name failslab, interval 1, probability 0, space 0, times 0 [ 342.021273][T12234] CPU: 0 UID: 0 PID: 12234 Comm: syz.0.1556 Not tainted syzkaller #0 PREEMPT(full) [ 342.021296][T12234] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 342.021307][T12234] Call Trace: [ 342.021312][T12234] [ 342.021319][T12234] dump_stack_lvl+0x16c/0x1f0 [ 342.021346][T12234] should_fail_ex+0x512/0x640 [ 342.021369][T12234] ? fs_reclaim_acquire+0xae/0x150 [ 342.021397][T12234] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 342.021421][T12234] should_failslab+0xc2/0x120 [ 342.021442][T12234] __kmalloc_noprof+0xd2/0x510 [ 342.021469][T12234] tomoyo_realpath_from_path+0xc2/0x6e0 [ 342.021496][T12234] ? tomoyo_profile+0x47/0x60 [ 342.021515][T12234] tomoyo_path_number_perm+0x245/0x580 [ 342.021535][T12234] ? tomoyo_path_number_perm+0x237/0x580 [ 342.021556][T12234] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 342.021619][T12234] ? find_held_lock+0x2b/0x80 [ 342.021638][T12234] ? hook_file_ioctl_common+0x145/0x410 [ 342.021676][T12234] ? __fget_files+0x20e/0x3c0 [ 342.021697][T12234] security_file_ioctl_compat+0x9b/0x240 [ 342.021721][T12234] __ia32_compat_sys_ioctl+0xc3/0x370 [ 342.021752][T12234] __do_fast_syscall_32+0x7c/0x3a0 [ 342.021779][T12234] do_fast_syscall_32+0x32/0x80 [ 342.021802][T12234] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 342.021823][T12234] RIP: 0023:0xf70be579 [ 342.021836][T12234] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 342.021851][T12234] RSP: 002b:00000000f54ae55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 342.021869][T12234] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 342.021879][T12234] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 342.021889][T12234] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 342.021898][T12234] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 342.021908][T12234] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 342.021936][T12234] [ 342.021958][T12234] ERROR: Out of memory at tomoyo_realpath_from_path. [ 342.432022][T12257] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 342.439712][T12257] cramfs: wrong magic [ 343.530246][T12267] block nbd0: Attempted send on invalid socket [ 343.532464][T12267] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 343.535896][T12267] vxfs: unable to read disk superblock at 1 [ 343.538438][T12267] block nbd0: Attempted send on invalid socket [ 343.540615][T12267] I/O error, dev nbd0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 343.543848][T12267] vxfs: unable to read disk superblock at 8 [ 343.545833][T12267] vxfs: can't find superblock. [ 343.561616][T12267] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 343.919161][T11950] usb 9-1: USB disconnect, device number 14 [ 344.217987][T12278] netlink: 'syz.0.1565': attribute type 8 has an invalid length. [ 344.225727][T12278] __nla_validate_parse: 5 callbacks suppressed [ 344.225799][T12278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1565'. [ 345.141832][T12296] netlink: 'syz.1.1568': attribute type 3 has an invalid length. [ 346.512679][T12327] netlink: 'syz.4.1575': attribute type 8 has an invalid length. [ 346.515999][T12327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1575'. [ 347.034712][T12341] netlink: 'syz.4.1578': attribute type 4 has an invalid length. [ 347.040593][ T40] kauditd_printk_skb: 90 callbacks suppressed [ 347.040602][ T40] audit: type=1326 audit(1756836213.622:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12340 comm="syz.4.1578" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 347.049959][ T40] audit: type=1326 audit(1756836213.622:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12340 comm="syz.4.1578" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 347.056806][ T40] audit: type=1326 audit(1756836213.622:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12340 comm="syz.4.1578" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 347.064896][ T40] audit: type=1326 audit(1756836213.622:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12340 comm="syz.4.1578" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 347.071734][ T40] audit: type=1326 audit(1756836213.622:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12340 comm="syz.4.1578" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 347.079054][ T40] audit: type=1326 audit(1756836213.622:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12340 comm="syz.4.1578" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 347.088768][ T40] audit: type=1326 audit(1756836213.622:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12340 comm="syz.4.1578" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 347.095949][ T40] audit: type=1326 audit(1756836213.622:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12340 comm="syz.4.1578" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 347.103282][ T40] audit: type=1326 audit(1756836213.622:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12340 comm="syz.4.1578" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 347.129578][ T40] audit: type=1326 audit(1756836213.712:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12340 comm="syz.4.1578" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 347.590850][ T1119] sr 2:0:0:0: [sr0] tag#17 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 347.593971][ T1119] sr 2:0:0:0: [sr0] tag#17 Sense Key : Illegal Request [current] [ 347.596406][ T1119] sr 2:0:0:0: [sr0] tag#17 Add. Sense: Invalid command operation code [ 347.597522][T12350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1581'. [ 347.599317][ T1119] sr 2:0:0:0: [sr0] tag#17 CDB: Write(10) 2a 00 00 00 00 00 00 00 04 00 [ 347.604880][ T1119] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 2 prio class 1 [ 347.608190][ T1119] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 347.610949][ T1119] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 347.676607][T12361] netlink: 'syz.4.1584': attribute type 8 has an invalid length. [ 347.684462][T12361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1584'. [ 348.062814][T12377] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 348.066610][T12377] qnx6: wrong signature (magic) in superblock #1. [ 348.068723][T12377] qnx6: unable to read the first superblock [ 348.720715][T12380] netlink: 4860 bytes leftover after parsing attributes in process `syz.0.1587'. [ 349.470575][T12413] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 349.474555][T12413] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 349.539113][T12413] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 349.542845][T12413] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 349.616507][T12413] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 349.624796][T12413] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 349.638725][ T6061] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 349.769390][T12413] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 349.773483][T12413] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 349.816544][ T6061] usb 9-1: Using ep0 maxpacket: 16 [ 349.822517][ T6061] usb 9-1: config 0 has an invalid descriptor of length 200, skipping remainder of the config [ 349.825837][ T6061] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 349.840363][ T6061] usb 9-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 349.843292][ T6061] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.857318][ T6061] usb 9-1: Product: syz [ 349.858730][ T6061] usb 9-1: Manufacturer: syz [ 349.860182][ T6061] usb 9-1: SerialNumber: syz [ 349.930596][ T6061] usb 9-1: config 0 descriptor?? [ 350.028508][ T46] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 350.033325][ T46] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 350.054410][ T1251] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 350.058406][ T1251] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 350.082811][ T1251] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 350.087434][ T1251] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 350.110763][ T1251] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 350.114252][ T1251] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 350.244773][T12421] netlink: 'syz.0.1594': attribute type 8 has an invalid length. [ 350.247829][T12421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1594'. [ 351.018780][ T29] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 351.178660][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 351.181819][ T29] usb 5-1: config 0 has an invalid descriptor of length 200, skipping remainder of the config [ 351.185094][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 351.190956][ T29] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 351.193801][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.196654][ T29] usb 5-1: Product: syz [ 351.198257][ T29] usb 5-1: Manufacturer: syz [ 351.200004][ T29] usb 5-1: SerialNumber: syz [ 351.210148][ T29] usb 5-1: config 0 descriptor?? [ 351.421184][T12426] FAULT_INJECTION: forcing a failure. [ 351.421184][T12426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.425579][T12426] CPU: 3 UID: 0 PID: 12426 Comm: syz.0.1595 Not tainted syzkaller #0 PREEMPT(full) [ 351.425595][T12426] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 351.425602][T12426] Call Trace: [ 351.425606][T12426] [ 351.425611][T12426] dump_stack_lvl+0x16c/0x1f0 [ 351.425634][T12426] should_fail_ex+0x512/0x640 [ 351.425652][T12426] _copy_from_user+0x2e/0xd0 [ 351.425682][T12426] snd_seq_ioctl+0x1bf/0x410 [ 351.425699][T12426] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 351.425724][T12426] ? __fget_files+0x20e/0x3c0 [ 351.425738][T12426] snd_seq_ioctl_compat+0xea/0x310 [ 351.425754][T12426] ? __pfx_snd_seq_ioctl_compat+0x10/0x10 [ 351.425770][T12426] __ia32_compat_sys_ioctl+0x23f/0x370 [ 351.425788][T12426] __do_fast_syscall_32+0x7c/0x3a0 [ 351.425803][T12426] do_fast_syscall_32+0x32/0x80 [ 351.425817][T12426] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 351.425830][T12426] RIP: 0023:0xf70be579 [ 351.425839][T12426] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 351.425849][T12426] RSP: 002b:00000000f548d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 351.425859][T12426] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 00000000c0505350 [ 351.425866][T12426] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 351.425872][T12426] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 351.425878][T12426] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 351.425886][T12426] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 351.425899][T12426] [ 352.401811][ T6061] mcba_usb 9-1:0.0: Can't find endpoints [ 352.410619][ T6061] usb 9-1: USB disconnect, device number 15 [ 352.491646][T12441] netlink: 'syz.4.1600': attribute type 14 has an invalid length. [ 352.909152][T12448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1602'. [ 352.915384][T12448] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1602'. [ 352.961009][T12448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1602'. [ 353.001824][T12452] netlink: 'syz.1.1603': attribute type 8 has an invalid length. [ 353.004915][T12452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1603'. [ 353.427176][T12467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1607'. [ 353.432189][T12467] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1607'. [ 353.487612][T12467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1607'. [ 353.537229][T12472] netlink: 4860 bytes leftover after parsing attributes in process `syz.4.1605'. [ 353.676272][ T29] mcba_usb 5-1:0.0: Can't find endpoints [ 353.690752][ T29] usb 5-1: USB disconnect, device number 18 [ 353.872756][T12482] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 353.924678][T12482] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 353.943389][T12487] lo speed is unknown, defaulting to 1000 [ 353.947417][T12489] Bluetooth: hci0: expected 2 bytes, got 7 bytes [ 354.308771][T12482] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 354.455298][T12482] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 354.526862][T12500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1615'. [ 354.618334][ T46] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 354.627105][ T46] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 354.635742][ T46] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 354.643393][ T46] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 355.115567][T12512] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 355.118039][T12512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.382885][T12517] __nla_validate_parse: 3 callbacks suppressed [ 355.382896][T12517] netlink: 4860 bytes leftover after parsing attributes in process `syz.2.1616'. [ 355.697075][ T1251] Bluetooth: hci4: Frame reassembly failed (-84) [ 355.867030][T12524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1620'. [ 356.250453][T12534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1624'. [ 356.255652][T12534] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1624'. [ 356.315918][T12538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1624'. [ 356.440578][T12549] netlink: 'syz.4.1623': attribute type 10 has an invalid length. [ 356.444948][T12549] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 356.541379][T12555] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1630'. [ 356.547154][T12555] bridge0: port 1(syz_tun) entered disabled state [ 356.556523][T12556] netlink: 4860 bytes leftover after parsing attributes in process `syz.1.1628'. [ 357.556433][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 357.556448][ T40] audit: type=1326 audit(1756836224.132:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12569 comm="syz.1.1635" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 357.569430][ T40] audit: type=1326 audit(1756836224.132:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12569 comm="syz.1.1635" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 357.578394][ T40] audit: type=1326 audit(1756836224.132:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12569 comm="syz.1.1635" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 357.587800][ T40] audit: type=1326 audit(1756836224.132:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12569 comm="syz.1.1635" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 357.597615][ T40] audit: type=1326 audit(1756836224.132:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12569 comm="syz.1.1635" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 357.609517][ T40] audit: type=1326 audit(1756836224.152:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12569 comm="syz.1.1635" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 357.619560][ T40] audit: type=1326 audit(1756836224.152:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12569 comm="syz.1.1635" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 357.634449][ T40] audit: type=1326 audit(1756836224.152:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12569 comm="syz.1.1635" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 357.643713][ T40] audit: type=1326 audit(1756836224.152:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12569 comm="syz.1.1635" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 357.653115][ T40] audit: type=1326 audit(1756836224.152:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12569 comm="syz.1.1635" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 357.758744][ T5983] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 358.208730][ T6030] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 358.860206][ T6030] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.863721][ T6030] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 358.867458][ T6030] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 358.878721][ T6030] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.890116][ T6030] usb 5-1: config 0 descriptor?? [ 359.023694][T12605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1644'. [ 359.942057][T11950] usb 5-1: USB disconnect, device number 19 [ 360.321209][T12617] block nbd4: Attempted send on invalid socket [ 360.323254][T12617] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 360.326315][T12617] vxfs: unable to read disk superblock at 1 [ 360.328703][T12617] block nbd4: Attempted send on invalid socket [ 360.330674][T12617] I/O error, dev nbd4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 360.333725][T12617] vxfs: unable to read disk superblock at 8 [ 360.335643][T12617] vxfs: can't find superblock. [ 360.350098][T12617] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 360.552432][T12621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1648'. [ 360.556016][T12621] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1648'. [ 360.595348][T12621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1648'. [ 360.745733][T12628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1650'. [ 360.749509][T12628] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 360.751937][T12628] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.787211][T12630] fuse: Unknown parameter 'grou00000000000000000000' [ 361.262833][T12641] fuse: Bad value for 'fd' [ 362.191199][T12650] netlink: 'syz.4.1657': attribute type 1 has an invalid length. [ 362.211525][T12650] 8021q: adding VLAN 0 to HW filter on device bond2 [ 362.223089][T12650] bond2: (slave gretap2): making interface the new active one [ 362.228079][T12650] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 362.380777][T12658] netlink: 'syz.1.1660': attribute type 14 has an invalid length. [ 362.396158][T12660] netlink: 'syz.4.1661': attribute type 1 has an invalid length. [ 362.411536][T12660] 8021q: adding VLAN 0 to HW filter on device bond3 [ 363.208850][ T5983] Bluetooth: hci1: command 0x0c1a tx timeout [ 363.644407][T12686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1668'. [ 363.670307][T12688] FAULT_INJECTION: forcing a failure. [ 363.670307][T12688] name failslab, interval 1, probability 0, space 0, times 0 [ 363.670357][T12688] CPU: 0 UID: 0 PID: 12688 Comm: syz.4.1669 Not tainted syzkaller #0 PREEMPT(full) [ 363.670369][T12688] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 363.670375][T12688] Call Trace: [ 363.670379][T12688] [ 363.670383][T12688] dump_stack_lvl+0x16c/0x1f0 [ 363.670401][T12688] should_fail_ex+0x512/0x640 [ 363.670416][T12688] ? __kmalloc_noprof+0xbf/0x510 [ 363.670429][T12688] ? drm_atomic_state_init+0xe4/0x320 [ 363.670440][T12688] should_failslab+0xc2/0x120 [ 363.670454][T12688] __kmalloc_noprof+0xd2/0x510 [ 363.670469][T12688] drm_atomic_state_init+0xe4/0x320 [ 363.670479][T12688] ? __kasan_kmalloc+0xaa/0xb0 [ 363.670491][T12688] drm_atomic_state_alloc+0xd3/0x120 [ 363.670511][T12688] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 363.670522][T12688] ? __pfx___might_resched+0x10/0x10 [ 363.670538][T12688] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 363.670565][T12688] drm_client_modeset_dpms+0x17e/0x210 [ 363.670578][T12688] drm_fb_helper_blank+0x200/0x260 [ 363.670589][T12688] fb_blank+0xbb/0x200 [ 363.670602][T12688] do_fb_ioctl+0x430/0x7e0 [ 363.670618][T12688] ? __pfx_do_fb_ioctl+0x10/0x10 [ 363.670633][T12688] ? lockdep_hardirqs_on+0x7c/0x110 [ 363.670648][T12688] ? find_held_lock+0x2b/0x80 [ 363.670677][T12688] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 363.670698][T12688] fb_compat_ioctl+0x55e/0x670 [ 363.670713][T12688] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 363.670728][T12688] ? hook_file_ioctl_common+0x145/0x410 [ 363.670745][T12688] ? __fget_files+0x20e/0x3c0 [ 363.670762][T12688] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 363.670776][T12688] __ia32_compat_sys_ioctl+0x23f/0x370 [ 363.670794][T12688] __do_fast_syscall_32+0x7c/0x3a0 [ 363.670810][T12688] do_fast_syscall_32+0x32/0x80 [ 363.670824][T12688] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 363.670837][T12688] RIP: 0023:0xf706e579 [ 363.670846][T12688] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 363.670856][T12688] RSP: 002b:00000000f545e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 363.670866][T12688] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004611 [ 363.670872][T12688] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 363.670878][T12688] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 363.670883][T12688] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 363.670889][T12688] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 363.670904][T12688] [ 363.714612][T12690] netlink: 'syz.0.1670': attribute type 14 has an invalid length. [ 363.739939][T12692] fuse: Unknown parameter 'group_i00000000000000000000' [ 363.805843][T12696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1673'. [ 363.815851][T12696] vlan2: entered promiscuous mode [ 363.817648][T12696] vlan2: entered allmulticast mode [ 363.819455][T12696] hsr_slave_1: entered allmulticast mode [ 363.824530][T12696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1673'. [ 363.889029][T12698] netlink: 'syz.0.1674': attribute type 1 has an invalid length. [ 363.933237][T12698] 8021q: adding VLAN 0 to HW filter on device bond1 [ 363.943903][T12698] bond1: (slave gretap1): making interface the new active one [ 363.949353][T12698] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 364.013676][T12703] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1676'. [ 364.196167][T12721] fuse: Unknown parameter 'group_i00000000000000000000' [ 364.417961][T12739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1686'. [ 364.438524][T12742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1687'. [ 364.527873][T12749] geneve2: entered promiscuous mode [ 364.529900][T12749] geneve2: entered allmulticast mode [ 364.536074][T12751] fuse: Unknown parameter 'group_i00000000000000000000' [ 364.695182][T12760] fuse: Unknown parameter 'use00000000000000000000' [ 364.900050][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 364.900061][ T40] audit: type=1800 audit(1756836231.482:548): pid=12768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1694" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 365.621158][T12802] comedi comedi1: c6xdigio: I/O port conflict (0x4f2b,3) [ 365.624157][T12802] ------------[ cut here ]------------ [ 365.626798][T12802] Unexpected driver unregister! [ 365.630832][T12802] WARNING: CPU: 3 PID: 12802 at drivers/base/driver.c:273 driver_unregister+0x90/0xb0 [ 365.634830][T12802] Modules linked in: [ 365.636812][T12802] CPU: 3 UID: 0 PID: 12802 Comm: syz.0.1699 Not tainted syzkaller #0 PREEMPT(full) [ 365.642838][T12802] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 365.647626][T12802] RIP: 0010:driver_unregister+0x90/0xb0 [ 365.650331][T12802] Code: 48 89 ef e8 82 13 4c fc 48 89 df e8 3a 93 ff ff 5b 5d e9 73 99 a6 fb e8 6e 99 a6 fb 90 48 c7 c7 00 8b 42 8c e8 c1 8f 65 fb 90 <0f> 0b 90 90 5b 5d e9 55 99 a6 fb e8 00 fc 0b fc eb 94 e8 f9 fb 0b [ 365.657295][T12802] RSP: 0018:ffffc90007caf770 EFLAGS: 00010282 [ 365.659910][T12802] RAX: 0000000000000000 RBX: ffffffff901947a0 RCX: ffffc900290af000 [ 365.662870][T12802] RDX: 0000000000080000 RSI: ffffffff817a02d5 RDI: 0000000000000001 [ 365.665775][T12802] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 365.669045][T12802] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff901946e0 [ 365.672377][T12802] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888041ef4000 [ 365.675674][T12802] FS: 0000000000000000(0000) GS:ffff8880977c0000(0063) knlGS:00000000f546cb40 [ 365.679584][T12802] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 365.682365][T12802] CR2: 00000000f741e6f0 CR3: 000000001c742000 CR4: 0000000000352ef0 [ 365.685654][T12802] Call Trace: [ 365.687085][T12802] [ 365.688318][T12802] comedi_device_detach_locked+0x12c/0xa50 [ 365.690884][T12802] comedi_device_detach+0x67/0xb0 [ 365.693181][T12802] comedi_device_attach+0x43d/0x900 [ 365.695475][T12802] do_devconfig_ioctl+0x1b1/0x710 [ 365.697587][T12802] ? __mutex_lock+0x1c5/0x1060 [ 365.699659][T12802] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 365.702026][T12802] ? kasan_save_stack+0x42/0x60 [ 365.704119][T12802] ? kasan_save_stack+0x33/0x60 [ 365.706190][T12802] ? kasan_save_track+0x14/0x30 [ 365.708242][T12802] ? kasan_save_free_info+0x3b/0x60 [ 365.710587][T12802] ? __kasan_slab_free+0x60/0x70 [ 365.712706][T12802] ? kfree+0x2b4/0x4d0 [ 365.714448][T12802] ? tomoyo_path_number_perm+0x470/0x580 [ 365.716806][T12802] comedi_unlocked_ioctl+0x165d/0x2f00 [ 365.719167][T12802] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 365.721677][T12802] ? kasan_quarantine_put+0x10a/0x240 [ 365.723937][T12802] ? lockdep_hardirqs_on+0x7c/0x110 [ 365.726112][T12802] ? find_held_lock+0x2b/0x80 [ 365.728083][T12802] ? tomoyo_path_number_perm+0x295/0x580 [ 365.730542][T12802] ? tomoyo_path_number_perm+0x18d/0x580 [ 365.732403][T12802] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 365.734869][T12802] comedi_compat_ioctl+0x1d0/0x990 [ 365.736920][T12802] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 365.739307][T12802] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 365.741789][T12802] ? do_vfs_ioctl+0x128/0x14f0 [ 365.743843][T12802] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 365.746041][T12802] ? find_held_lock+0x2b/0x80 [ 365.748044][T12802] ? hook_file_ioctl_common+0x145/0x410 [ 365.750423][T12802] ? __fget_files+0x20e/0x3c0 [ 365.752387][T12802] ? __ia32_compat_sys_openat+0x130/0x210 [ 365.754766][T12802] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 365.756684][T12802] __ia32_compat_sys_ioctl+0x23f/0x370 [ 365.758423][T12802] __do_fast_syscall_32+0x7c/0x3a0 [ 365.760564][T12802] do_fast_syscall_32+0x32/0x80 [ 365.762707][T12802] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 365.765373][T12802] RIP: 0023:0xf70be579 [ 365.767121][T12802] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 365.775136][T12802] RSP: 002b:00000000f546c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 365.778642][T12802] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000040946400 [ 365.781914][T12802] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 365.785179][T12802] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 365.788449][T12802] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 365.791809][T12802] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 365.795176][T12802] [ 365.796469][T12802] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 365.799356][T12802] CPU: 3 UID: 0 PID: 12802 Comm: syz.0.1699 Not tainted syzkaller #0 PREEMPT(full) [ 365.803213][T12802] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 365.807584][T12802] Call Trace: [ 365.809016][T12802] [ 365.810300][T12802] dump_stack_lvl+0x3d/0x1f0 [ 365.812266][T12802] vpanic+0x6e8/0x7a0 [ 365.814022][T12802] ? __pfx_vpanic+0x10/0x10 [ 365.815969][T12802] ? driver_unregister+0x90/0xb0 [ 365.818061][T12802] panic+0xca/0xd0 [ 365.819712][T12802] ? __pfx_panic+0x10/0x10 [ 365.821619][T12802] check_panic_on_warn+0xab/0xb0 [ 365.823719][T12802] __warn+0xf6/0x3c0 [ 365.825243][T12802] ? preempt_schedule_notrace+0x62/0xe0 [ 365.827298][T12802] ? driver_unregister+0x90/0xb0 [ 365.829296][T12802] report_bug+0x3c3/0x580 [ 365.831192][T12802] ? driver_unregister+0x90/0xb0 [ 365.833260][T12802] handle_bug+0x184/0x210 [ 365.834741][T12802] exc_invalid_op+0x17/0x50 [ 365.836275][T12802] asm_exc_invalid_op+0x1a/0x20 [ 365.838333][T12802] RIP: 0010:driver_unregister+0x90/0xb0 [ 365.840596][T12802] Code: 48 89 ef e8 82 13 4c fc 48 89 df e8 3a 93 ff ff 5b 5d e9 73 99 a6 fb e8 6e 99 a6 fb 90 48 c7 c7 00 8b 42 8c e8 c1 8f 65 fb 90 <0f> 0b 90 90 5b 5d e9 55 99 a6 fb e8 00 fc 0b fc eb 94 e8 f9 fb 0b [ 365.847329][T12802] RSP: 0018:ffffc90007caf770 EFLAGS: 00010282 [ 365.849846][T12802] RAX: 0000000000000000 RBX: ffffffff901947a0 RCX: ffffc900290af000 [ 365.852716][T12802] RDX: 0000000000080000 RSI: ffffffff817a02d5 RDI: 0000000000000001 [ 365.855204][T12802] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 365.857660][T12802] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff901946e0 [ 365.860224][T12802] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888041ef4000 [ 365.862853][T12802] ? __warn_printk+0x1a5/0x350 [ 365.864451][T12802] comedi_device_detach_locked+0x12c/0xa50 [ 365.866417][T12802] comedi_device_detach+0x67/0xb0 [ 365.868059][T12802] comedi_device_attach+0x43d/0x900 [ 365.870001][T12802] do_devconfig_ioctl+0x1b1/0x710 [ 365.871732][T12802] ? __mutex_lock+0x1c5/0x1060 [ 365.873388][T12802] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 365.875220][T12802] ? kasan_save_stack+0x42/0x60 [ 365.876766][T12802] ? kasan_save_stack+0x33/0x60 [ 365.878321][T12802] ? kasan_save_track+0x14/0x30 [ 365.880140][T12802] ? kasan_save_free_info+0x3b/0x60 [ 365.881844][T12802] ? __kasan_slab_free+0x60/0x70 [ 365.883418][T12802] ? kfree+0x2b4/0x4d0 [ 365.884721][T12802] ? tomoyo_path_number_perm+0x470/0x580 [ 365.886559][T12802] comedi_unlocked_ioctl+0x165d/0x2f00 [ 365.888332][T12802] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 365.890741][T12802] ? kasan_quarantine_put+0x10a/0x240 [ 365.892984][T12802] ? lockdep_hardirqs_on+0x7c/0x110 [ 365.895226][T12802] ? find_held_lock+0x2b/0x80 [ 365.897136][T12802] ? tomoyo_path_number_perm+0x295/0x580 [ 365.899159][T12802] ? tomoyo_path_number_perm+0x18d/0x580 [ 365.900975][T12802] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 365.903167][T12802] comedi_compat_ioctl+0x1d0/0x990 [ 365.904844][T12802] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 365.906716][T12802] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 365.908751][T12802] ? do_vfs_ioctl+0x128/0x14f0 [ 365.910773][T12802] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 365.912930][T12802] ? find_held_lock+0x2b/0x80 [ 365.914599][T12802] ? hook_file_ioctl_common+0x145/0x410 [ 365.916423][T12802] ? __fget_files+0x20e/0x3c0 [ 365.917949][T12802] ? __ia32_compat_sys_openat+0x130/0x210 [ 365.919832][T12802] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 365.921776][T12802] __ia32_compat_sys_ioctl+0x23f/0x370 [ 365.923555][T12802] __do_fast_syscall_32+0x7c/0x3a0 [ 365.925221][T12802] do_fast_syscall_32+0x32/0x80 [ 365.926824][T12802] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 365.928945][T12802] RIP: 0023:0xf70be579 [ 365.930659][T12802] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 365.936918][T12802] RSP: 002b:00000000f546c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 365.939615][T12802] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000040946400 [ 365.942147][T12802] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 365.944665][T12802] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 365.947203][T12802] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 365.950019][T12802] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 365.952676][T12802] [ 365.954359][T12802] Kernel Offset: disabled [ 365.956064][T12802] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:03:51 Registers: info registers vcpu 0 CPU#0 RAX=00000004000008fb RBX=0000000000000001 RCX=0000000000000830 RDX=0000000000000004 RSI=00000000000000fb RDI=0000000000000004 RBP=ffff8880231ec8b8 RSP=ffffc90000007db0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000002 R12=0000000000000002 R13=1ffff92000000fb9 R14=1ffff1100463d901 R15=0000000000000000 RIP=ffffffff81695748 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002fa0affc CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000002 RBX=0000000000000000 RCX=ffffffff81a6d21b RDX=ffff8880274a4880 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc90007b1f8b0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=dffffc0000000000 R13=ffffc90007b1fa58 R14=fffff52000f63f4f R15=dffffc0000000000 RIP=ffffffff81bb0492 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880975c0000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080007000 CR3=0000000013257000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81a7e4d4 RDX=ffff8880285a0000 RSI=ffffffff81a7eab8 RDI=0000000000000005 RBP=ffffffff93d67c80 RSP=ffffc90002c87bb0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=ffffc90002c87d60 R14=0000000000000010 R15=ffff88802b427d00 RIP=ffffffff81bb0b11 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880976c0000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff3873225d0 CR3=000000004c2b7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7414ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff856170b5 RDI=ffffffff9b0fc700 RBP=ffffffff9b0fc6c0 RSP=ffffc90007caf0e0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000036 R14=ffffffff9b0fc6c0 R15=ffffffff85617050 RIP=ffffffff856170df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977c0000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f741e6f0 CR3=000000001c742000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000